last executing test programs: 1m28.080441849s ago: executing program 4 (id=909): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0xffffffffffffffff, 0x70bd2b, 0x25dfdbbb, {0x0, 0x0, 0x0, 0x0, 0x50a10, 0x51a23}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6, 0x3, 0x30}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}, @IFLA_GRE_ERSPAN_DIR={0x5, 0x17, 0x1}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x2004e904}, 0x800) r0 = add_key$keyring(&(0x7f0000000080), &(0x7f0000000000)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000480)="4d692a7ca0fa", 0x6, r0) r2 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r1, r2, r1}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) 1m27.761570912s ago: executing program 4 (id=915): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="0e00010002"], 0x8) 1m27.460451947s ago: executing program 4 (id=918): r0 = epoll_create1(0x0) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x4e) close(r1) userfaultfd(0x80801) mount$9p_fd(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000180), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 1m26.428687237s ago: executing program 4 (id=927): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000b80)={[{@errors_remount}, {@nobh}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@max_batch_time={'max_batch_time', 0x3d, 0x7}}, {@dioread_lock}]}, 0x3, 0x439, &(0x7f0000002380)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1204001, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f}) symlink(&(0x7f00000005c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f00000002c0)='.\x02\x00') chdir(&(0x7f0000000000)='./file0\x00') open(&(0x7f0000000740)='.\x02\x00', 0x2, 0x0) 1m26.05429321s ago: executing program 4 (id=930): socket(0x400000000010, 0x3, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) 1m24.270613537s ago: executing program 4 (id=942): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0xc, 0x0, 0x8}, 0xe) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000180)={r1, 0x33b}, &(0x7f0000000200)=0x8) 1m24.008009932s ago: executing program 32 (id=942): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0xc, 0x0, 0x8}, 0xe) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000180)={r1, 0x33b}, &(0x7f0000000200)=0x8) 23.231276487s ago: executing program 1 (id=1326): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000d40)=@newqdisc={0x3a8, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x378, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0x0, 0x1c}}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x65, 0x2, 0x3, 0x17, 0xd, 0x8, 0x2}}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x2}, @TCA_CHOKE_PARMS={0x14}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "dc542b4e237011fb38ddb228806571a8633206e26df63a43bbc516382325dedd79c1cf0a26379dfaf72cb5ab9ab7efe16f312ee9ab598d1ac0d7903ac69c51f1b6842ebecf00dec5deff737b59f0c1f0b57cc6c2b7b8c5b2c527aafa57222f4bd2355ccab39fa20d4033b6b687491532080101805feb9c6fa8a56a77186efcb394ce1a1cd7f2130835e3bf9e3ac25d0a102a808be13beb51f37da6d10046f131834545ee5013f43e41e91eb18a12c28540ab4106286e0f7568f6a9cd0c0da51df08e42848096b25d455ebec9adfd6e493d8c9725bc2d49bbbae0a5375b359f91d9dad20ed109ffbc52469cffd2cf5df7773f7a4c72ae167485315c326281efc4"}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}]}}]}, 0x3a8}}, 0x0) 22.657559866s ago: executing program 1 (id=1331): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000c40), 0x12) preadv(r1, &(0x7f0000000280)=[{&(0x7f00000003c0)=""/41, 0x29}], 0x1, 0x6, 0xf44b) 22.195767348s ago: executing program 1 (id=1332): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000002200)=@base={0x12, 0x26, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x7}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{r2}, &(0x7f0000000700), &(0x7f0000000740)=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r2}, &(0x7f0000000080)=0x2000000, &(0x7f00000000c0)=r0}, 0x20) 21.863575261s ago: executing program 1 (id=1334): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000200)='.\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x2125099, 0x0) umount2(&(0x7f0000000080)='./file0\x00', 0x1) 21.469472004s ago: executing program 1 (id=1336): r0 = syz_io_uring_setup(0x47a7, &(0x7f00000012c0)={0x0, 0x10006f55, 0x390, 0x1, 0x400200}, &(0x7f0000003400), 0x0) syz_io_uring_setup(0x7674, &(0x7f0000000e40)={0x0, 0x17a1, 0x800, 0x0, 0x26c, 0x0, r0}, 0x0, 0x0) syz_io_uring_setup(0x10278e, &(0x7f0000000280)={0x0, 0x87974, 0x11, 0x0, 0x8, 0x0, r0}, &(0x7f00000000c0), &(0x7f0000000180)) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') read$eventfd(r1, &(0x7f0000000080), 0x51) 20.831039772s ago: executing program 1 (id=1344): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x215000, 0x800, 0x0, 0x1}, 0x20) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 20.327918452s ago: executing program 33 (id=1344): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x215000, 0x800, 0x0, 0x1}, 0x20) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 11.077275979s ago: executing program 2 (id=1399): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x6, 0x4, 0x3}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x4, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 10.557906669s ago: executing program 2 (id=1401): r0 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev, 0x8000000}}, 0x80, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000100100000100000000000000000000001000000000000000100100000b"], 0x28}, 0xfc40) r1 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev, 0x8000000}}, 0x80, 0x0, 0x0, &(0x7f00000002c0)=ANY=[], 0x28}, 0xfc40) close(0x3) 10.185181001s ago: executing program 2 (id=1403): r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') write$P9_RVERSION(r2, &(0x7f00000000c0)={0x15, 0x65, 0xffff, 0x5, 0x8, '9P2000.u'}, 0x15) 9.751233263s ago: executing program 2 (id=1404): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f00000002c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 9.429755377s ago: executing program 2 (id=1405): syz_mount_image$nilfs2(&(0x7f0000000140), &(0x7f0000000f00)='./file1\x00', 0x208800, &(0x7f0000003100)=ANY=[], 0x2, 0xf04, &(0x7f0000000f40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x2, 0x11, r0, 0x0) read(r0, &(0x7f0000001400)=""/4096, 0x1000) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141242, 0x1) 8.704895494s ago: executing program 2 (id=1411): r0 = socket$inet6(0xa, 0x3, 0x87) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in=@loopback, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x4, 0x0, 0xfffffffffffffffe}, {0x80000000}, 0x0, 0x0, 0x1}, {{@in=@multicast2, 0x2000000, 0x33}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @local}, 0x0, 0x0, 0x0, 0x3}}, 0xe8) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000000041}, 0xc) connect$inet6(r0, &(0x7f00000000c0), 0x1c) 8.184436934s ago: executing program 34 (id=1411): r0 = socket$inet6(0xa, 0x3, 0x87) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in=@loopback, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x4, 0x0, 0xfffffffffffffffe}, {0x80000000}, 0x0, 0x0, 0x1}, {{@in=@multicast2, 0x2000000, 0x33}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @local}, 0x0, 0x0, 0x0, 0x3}}, 0xe8) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000000041}, 0xc) connect$inet6(r0, &(0x7f00000000c0), 0x1c) 7.876883268s ago: executing program 0 (id=1416): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d3e457201e040b40e73e000000010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, &(0x7f0000000180)={0x14, &(0x7f00000001c0)=ANY=[], 0x0}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 5.29464454s ago: executing program 0 (id=1423): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mbind(&(0x7f00005f7000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/188) 3.425093264s ago: executing program 3 (id=1429): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x81e, &(0x7f0000000700)={[{@nolazytime}, {@inlinecrypt}, {@debug}, {@lazytime}, {@nombcache}, {@noload}]}, 0x3, 0x440, &(0x7f0000000cc0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0xc4) pwrite64(r1, &(0x7f0000000440)='\x00', 0x1, 0xf490) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f0000000240)={0x17c04, 0xffffffffffffffff, 0xbff4, 0x100000002}) 3.093756968s ago: executing program 0 (id=1430): r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = openat$cgroup_subtree(r1, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000280)={[{0x2d, 'cpu'}, {0x2d, 'cpuset'}]}, 0xd) 3.074653268s ago: executing program 3 (id=1431): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xfffffff9) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000340)={0x1, r1}) 2.825271313s ago: executing program 5 (id=1432): syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000240)='./file0\x00', 0x804, &(0x7f0000000840)=ANY=[@ANYRES16=0x0], 0x1, 0x28e, &(0x7f0000000500)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) write$UHID_INPUT(r0, &(0x7f0000000940)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='pids.events\x00', 0x275a, 0x0) 2.693774211s ago: executing program 0 (id=1433): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @empty}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f5, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000140)={'erspan0\x00', r1, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @dev={0xac, 0x14, 0x14, 0xd}, @multicast2}}}}) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f5, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000140)={'sit0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x2c, 0x14, 0x0, 0x0, 0x0, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0xd}, @loopback}}}}) 2.628331179s ago: executing program 3 (id=1434): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000200)={@val={0x0, 0x600}, @void, @eth={@broadcast, @link_local, @val, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x2, 0x0, 0x0, 0x11, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty}, {0x3, 0x17c1, 0x8}}}}}}, 0x36) 2.336289284s ago: executing program 5 (id=1435): syz_mount_image$reiserfs(&(0x7f0000000540), &(0x7f0000000140)='./file0\x00', 0x10, &(0x7f00000001c0), 0xf8, 0x1119, &(0x7f0000003600)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) r1 = dup(r0) ftruncate(r1, 0x3f3ffc) pwrite64(r0, &(0x7f0000000080)="d317b3f75d9a0b", 0x7, 0x414f3) 1.530860799s ago: executing program 5 (id=1436): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000011c0)=ANY=[], 0xe0}}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$bt_hci(r0, 0x84, 0x80, &(0x7f0000000000)=""/4103, &(0x7f0000001080)=0x1007) 1.437047017s ago: executing program 0 (id=1437): pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r0, &(0x7f0000000000)={0xef6f16ad20de71d8, 0x1b, 0x1}, 0x54) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x80082) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000580)='.\x00', &(0x7f0000000040), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}}) 1.261723894s ago: executing program 0 (id=1438): syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000000940)='./bus\x00', 0x8, &(0x7f00000004c0)={[{@autodefrag}, {@acl}, {@max_inline={'max_inline', 0x3d, [0x54]}}, {@ssd}, {@compress_algo={'compress', 0x3d, 'lzo'}}, {@ssd}, {@noenospc_debug}, {@barrier}, {@nodiscard}, {@acl}]}, 0x1, 0x55a4, &(0x7f000000ac40)="$eJzs3X9snHUdB/DnruvaFdeWMOuArGwDJFtEOjdNCCR2bNNpYTnphE3I+gNH0DmtY8NVCCtinIERijWMwQoLbn9MEYqucyiJBewqul8IJtNFBbPFNWOkOBExYTG9u+d299zaHhMpwuu1tM/zvc/z/d73njx/3PvW73MBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABEHwx+N3TL/t3roJ26+ru++8a85e+2D3kuMX3rq1avND20v2dTz31aNVq1qPLF1w0/2JpkfW93d3BkEs2S+W7t9w2fwrr69vuKI0HLDxc6ltZeVQT5nq+mKqMTbnwcF+uT9NQRAURwYoSm/npXfiOQNkdlfkDzisayf1tE4dP69x28qujc8uu3xL/ktnUOloT2C0pK+rgyeupdrk73jkiEw769KL5Vyiqf7RC+4deREAwFtSk0huMm9H029xM+22aD3Sro202yPt8B1Ce3bjVKTGHTvUPCdH66M0z9pUVCgZcp6Revr8Z9qJaP9IOxI13sI8cw9NR5rSoebZEqmP1jwBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA3k0uuH5m/d49D7/8ldbf/u7h17/16sePrGq8ZaC7/qJ1ix/v2PG9vx2tWtV6ZOmCm+5PND2yvr+7Mwgqk/1iqe6xZ6ri8ZkDddseu6e3puFDC9cUpccNt2OyDg72hzsXVwRBc1blYDhsf3kQJHILyWawIb/wpeTOZ8ICAAAA7yVnJn/HM+1UHCzOaceSaTKW/BdKhcVrJ/W0Th0/r3Hbyq6Nzy67fMupj5cYYrzak46XaVee+IllBeMw/kbHO1EPD12RN87woiNG8/zpx/qnNdfdUHrl7gsWzphdv+XS4CfTD3csX3TfhBfHL9nXXpOX/yuHz//hmZP/AQAA+G/I/9FxhjdS/m+uqZh0cOp3ix67rur44fkP/Lyz7/kn4w8VD3Q//dLYcbf9cnVe/p+c85R5+T+ccZj/48Gp5X8AAAB4N/tf5//avHGGN1L+/8X+zZ//98pvTDk84187Xnj69xdvnVI+/7WyGTe8+cSCVxp2tf0pL//XFJb/x2RPO3xwVzjhZRVBUFP4SQUAAAByhP/vfuKjhTCvpz45iOb1y+4qe3LXG+tvjJ/V8o8zFvfPqv7i7tVf37ApNrChc92O5XNX5OX/2sLyf/E783IBAACAAvxm+y13V395ydYtew7N2XFnYvPYS+a+uuennVf1vXwsUfT8zX15+T9RWP4vGZ2XAwAAAJzEU+MmPnfo0UNfm7177YS9q9rmPD5t3+qFD/xz9t+veOnPxzddWJ6X/xsLy/9l6W165UOq087wrxA6KoKgdHCnJVXoC9o/mSkAAAAAb5Mwpzc1revduX7MrNfOPvzDNSuW/2rvpd++a2P1zQd+XXX7ucf2996Yl/9bhr//f3ing3D9f879//LW/2cVUnf9u8SNAQAAAHg/yl/PH94eP/XNBUN9/36h6/8/euaBko7m8ysnx7dVz3rig31Xra1+fVHHRZ/YfusbH46V//VTefm/rbD8X5S9fTu//w8AAABOwf/b9/8tzhtneCPd/79v3DPnrPnsPT+o/WbZU+e+eXfzd9oPTj9v87QzPlJ0fvecmX/4fl7+by8s/4fb07JfXk94fm6vCIKJgzvpuwluDae7LFLoKs4qpE58pEd92CNd6CrJKiS1RHp8rCIIpgzutEUKp4eF9khhoDxd2BQp7A0L6eshU3g0UugJr7R7y9PTjRZ+FhbSCyy6whUUp2WWRER6HBuqx2DhpD0OZJ4cAADgfSUMz+ksW5zbDKJRtis20gFlIx0QH+mAopEOGBM5IHrgUI8HjbmF8PEfz+1e+so1D9b1Xt1w9KzZe5bc0faBnkW9O7/wo55z/nL1Cws/nZf/NxWW/8NTMTa1GWr9fxCu/09/r2Fm/X9jWKiMFLrCQiJ6x4BE+BypsHtn+ByViXSPgYmZAgAAALynhZ8LFI3yPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID/sHfvcVJVd4LATzf9oJum6YgBY4ygRkR3aZomGEQcUXRXo4tNJKtjhtAIjXZoAwq4YsyKr3GV6GLUmBjZwY+jJg6r+CDqRIXoiElGJfE5Kz4HnciqS9BR45gs++m+dYqqW112IaC0+/3+0XWqfud569H33HvrFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/P/hsiX3Nrw58H9965ffW/f697409TdTD9m8y19uqHt3yDlPbT5ocN0tbw1asPCNtklnXtsyffk1G1YuDaGlq1xZUrzsoUHl5aP/cMxdt13xcNO0wVPOrcrUm4mHfp1/yjN3Loytvto/hLvLQqhIB0bUJYHKzP26WN8edSF8LmwJZEu01SYl0g2Hh2tCWBa2BLJV3VsTQl1OYMoTD666rDNxVU0I+4YQqtNtvFCdtFGTDgyrSgK16cCciiTw/uZENnBPeRKAbRbfDNkX/YqW/AwN3Zcr8vqr3G4d+3Slh9cnJhqK53vrsB3cqRxV6QdatulpK6iOHaLg7bHau60XvNsKtvMST1vujlRmD2XzllB11x7Q9AUd8+Mj5aGxsU+xmnbQ87xu0zkztibda16HsQMN2+V1+EDtpPrL3p548MqT/3j6vvPXTt3Wbj6Xs0lz0ztadZjZNqvzNddrnsdogs+TXvD2K9hLGmqnK4Rw/J8+X/bMnJd23/jBqydOvP2Fi6+etvCaKROfHfSLsf947S53T7u8YP7f8NHz//hyjrflebljqx/WJ3Pz+EhdTGysT+bmAAAA0Gv0hqOmXx396kunPnT3oheXH1fx3XG/Omm3+oqzv99x/K4rx3/x0ivbH9+lYP4/tLTz//GUf13uaFeHMKErccGAEHbrejwJ/Cx25+QBIezVlWrJDxyWCqwO4Qtdif2zVaVK9I0lhqYCv6/PBCakAmtioCUVuDEGlqQCF8bAilRgRgysTgUOj4HQnj+OA+oz4yg5UBMDrclGXBGvQninPraW2lbrslUBAABsJ5nZYWX+3ZxrHbY1Q5xerqjpKUO8ArtohupUDekZbHZaVbSGip5qKO+phuy4F3308AtqLuup5oLLMMryM3w45DvlAybu/aO7bhxxU/OLE7/77tjjv/LnN99dvf8//fd7zpl/3QEF8/+mj57/V3fTkbKC8/8hTO76G3OXZyId2XhrS14GAAAAYBtc9djSJ2844Kj/c9/L9935pWtvKF999df/7ysbL9h71HHDy/r+3bdXFMz/J5R2/X88JtInJ3N4NB6GmD0ghKb8QFLtwYWB5Kx3v0wAAAAAeoPs+fjsufD2zG1yiXZ6Pl2Yv2Ur88cT/xO6zX/5pr9+9svXPnniwmH7bLjiv535Qdnnx/5ul2PXjnz8rT2H/UND38Lr/1tKu/6/Nv826cSa2IsrB4TQNyfwSOxlZ6DL0Bh4+dD8QGb8a+IGWByrylyYkK1qcSzRGgNNqcCyYiV+my2xW34g82RlG78gO472TImcAAAAAHzi4uGAeF4+Xv9/z+QDvrT/oJfGvLjnvQtfm7D0hFNrf7jPLbu+PqBj0pgDJxxyxDMF8//Wrbv+v2seXHB5f0e/EEZWhNAn/cWAR2uThQFjoK4sk7i/NqmrT7qq82pDGN85sHRVr2TW/69IrzH4RE1SVQzstvdPNw3rTNxQE8LI3MAz37x+TGdifiqQbfwbNSEM6RxtuvGVfZPGK9ONX9M3hD1zAtmqTu4bQmdjVemqHqzO/I5BuqrbqkMYmBPIVnVgdQgLAwC9VPxXOjP3wXkLz549vaOj7YwdmIjH8GvCrPaOtsYZczpmVhfp08xUn/OWMTqvcEyl/vLN85kliqYOuX14Kens9wSbctvKHMcvuHAwcz/uC1V2jbO5Mu/u6PSQh+9T2ETI2ZMqNuTyHTzk2txKtjyJBfXH/FWhX+i7YF7bGY1nTZ8//4xRyd9Sszcnf+NppmRbjUpvq9ru+lbCy6PoalkpH3db7Zdbycj5p80dOW/h2SPaT5t+Stspbd9pHjuquXnMV8eOaR7ZOaqm5G8PQ92vu6pTQ918fYnj2o5D3b0ip5JP4lNDQkKityWmLyk7f8K0X9//rT3WnHbWSXv8/R4zR5z0V5f/Zu6JjYdM/tX1f7m2YP4/96Pn//FTJ37yZ9ZnKHb+vyGe5k8e33KavzUGlpV6/r+h2Nn87IUBQ1OBRTGwyGl+AAAAPhvi4ch4NDMelb6u7p/uPnLmjEPe/+UJU67+27HjTj1r/b4NF1997JL/sP6dJauOeLtg/r+otO//b6f1/7NL13+t2DL/+8cSTcXW/08v859d/39RsfX/08v8Z9f/X/YprP+/IBtIbZJ3rP8PAAB8Fnxy6//3uLx/+gcCCjL0uLx/+gcCCjL0uIx/qT8QsNXr/8/p+IvaQZfPGXfoiLk/fmTV3ksG3val5yf+ep+lB424d+Ut7426tWD+v6S0+b+F+wEAAGDn8dAv+3774neH3f/UI+8fWXbpbzfedPxftR1wyB8GNp8y+eia79/0bwXz/2Wlzf8/+fX/QrHr/4cWC7QUWxjQ+n8AAAD0UsXW/7t54MtDV88fceNjP3/zlpdafzFz/Gv/bskPvjJ9WNPNa9b9pmHG+oL5/4rS5v/xsovyvNyxNx/WJ2vahfSadhvrs18ZAAAAgN6hPDQ2VpaYN29l1MM+fpvrMkuBflQ619P3DVq1oPyhq8qqN/7gkmmHNJ577Jlzjrxo/fdrn/xJ7dTG6jMK5v+rS5v/530v44HaSfWXvT3x4A9XnvzH0/edv3bqlvP/AAAAwI5T6nEJAAAAAAAAAAAAAADg0/dU69KDPhh19Bsz9xr1p28c+8IPFn/xm4/8zbV/PvPnh9+3V/vmYVMKvv8fJneVK/b9//i7f/H7Bbvm5Y6t9rz+X+b+lGNuXdi1ZOGj9SHskxuYff7sz4XMb/PvlxtYNXX/wZ2J89Ml7nvx8Nc6E9PSgaNG7PJeZ2J8KtAaF0n8QjoQf1Xxvf6pQFxe8cl0IG6PFelAVSZwSf9kHGXpbbWhLtlWZelt9VxdCANyAtltdXdd0kZZeoBXpQLZAZ6eDsQBTsoEytO9urVf0qsYqItF/6Zf0isAAHZacS+wMsxq72hrirvw8Xb3ivzbKG/JsvMKqy0rsfnnM0uTTR1y+/BS0n3S+6Jbfmu8MlR3DmFUwe5qbpayrlFun1p62HS7FhlyT6u9lRcpl7a1m66q+IhqkhE1zpjTMbOyx4GP7jlLc0WPWUYVTHZys5R3bdISaimhLyWMqMRtU0KX4/3y0NjYJ5VrXAw2hDw9vSJK/b5+7jp/xV4FuXn+tubaS/sM7vP+v42/6KEHB1R2nDq57aLdH/vngaNm/viHD7Ze8/uC+X9DafP/6txxvZf5MYBF8Zf1Dh4QQmuJIwIAAIDPvv957vI7TpyzZsOs1RXP/u53s8uPO7Fy8zl3nXP2Rc/dv/ioS/79zdsaX1H21KYT39h01l+/8ZOvXPfwWS8dPuOsuyatO2R9W/WN3/2L5acOKZj/Dy1t/h+PYGVOBSdHO1bH3/+/YEAIXT+t35AEfhaHe/KAEPbqSrXEEskP6n8tlmhKAj+LB0z2jyVaW/Kr6hsDK1KB39dnAqtTgTUxkDlK8dOQOZRzRX0IY7pSk/NLzI0lGlKB42JgaCrQGANNqUD/GJiQCrzZPxNoSQX+MQZCe/62urN/ZlsBAABsjcw8qzL/bkjP81ZU9JShrKcMtT1lKO8pQ3VPGYqNIt6/I2aoTF28UpaTqTJda02qloIM8cfwt7pfBRnCb/NzpgsWNB2vP8heb1CWn2HcD+9oPehr83686eIfPX7kgRceueTKty89ut/gK5/93+3n9uu/qbZg/t9U2vy/Nv82aX1NnP9v+f2/JPBI7N6V8dLxoTHw8qH5gcyBgTVxsrs4W1VLpkRm0r44lpgQA0NTgbkxMCEVaJ2cCSwbnB/IzLSzjV+Qbbw9UyInAAAAAJ+4eIAgHqaJ8/+V48I7exz5fvPuVw6cO+7xR847YnrNrtU1/zx+7dLxl1Y/tF/fgvn/hNLm/7G9frmNXRh782r/EO4u29KbbGBEXRKIxzHq4tfj96gL4XM5BziyJdpqkxJVqYbDwzXJN9Sr0lXdW5OsMRDvT3niwVWXdSauqglh35yjL9k2XqhO2qhJB4ZVJYHadGBORRKIR36ygXvKkwBss+xRwfiCylzqktXQfbkir7/Pym+CpodXcAy0m3zdfedqR6lOP5A5ppq1dU9bQXXsEAVvj9Xebb3x3dbg3Za7I5XZQ9m8JVQdyme2zZq+oGN+fCT3m6wFdtDznPst1VLS2+F1uOjj97Zn1ekONKU+Ppq6L9f967AsVvdA7aT6y96eePDKk/94+r7z104tuRtFxC8KH3zr3AOey9m8O1p1yLzmet3nSYvPk974b2Copy2EsPyCWU8+8S/vP1+xvvm/HDh2+W1vPrb8Jwc9MGvEFzZc8uWNb717VMH8v6W0+X9F6rbLB3FjzhsQwvCcjfto3PwTBySfgzmB5FNyYGEgOeW+vr7oJycAAABsb9nDHdnjBe2Z2+SC8PQ8uTB/y1bmj8crJnSbv9R+DxzzD9879KrXv/H19btf/ujSp9b9pzdfOWLaoQ9senrFytebj/380wXz/9aPnv/3TXXT+X/n/9lBnP/v1s5+KLpv+oFF23QouqA6dgjn/7u1s7/bnP/vlvP/zv93x/n/Hjj/362d/Wkr2Euaa6crhNA64Ibbf1E7fXi/K8751oy1P3/6naZxL9Sde/Sd/+PwxeGa81b9uWD+P7e0+b/1/7pftC+7/l9rsfX/5hZb/2+R9f8AAIAdqshCc+l5XsHqfQUZ0qv3FWTocYHAHpcYtP7fVq//V3vS2Se9Uv/WXtdMvP0/3zn9wudPOvHZffs8f8LtJ9w08urhL315Q8H8f1Fp8//4cuiX23pvWf9v6OQiVS2JgbkWBgQAAGBnVOwAAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJ+uFQ8u/uLmxfscdNOzn7/p8H9dtmbW3r86YPPoMSc3Dl88sOzKv/uXtwYtWPhG26Qzr22ZvvyaDSuXhtDeVa4sKV720KDy8tF/OOau2654uGna4CnnVmfqrczcfjEvd2z1w/oQluU8UhcTG+s772wJTDnm1oUVnYlH60PYJzcw+/zZn+tM3Fgfwn65gVVT9x/cmTg/XeK+Fw9/rTMxLR04asQu73UmxmcCZenuXtc/6W5ZuruX9Q9hQE4g291v98+vKtvGf8wEytNt3FyXtBEDdbHoj+qSNmKgI5Zo7xvCyIoQ+qSr+nV1UlWfdFV/X51U1Sdd1X+tDmF8CKEiXdWLVUlVFemRr61KqoqB3fb+6aZhnYllVSGMzA08883rx3QmTk8Fso1/vSqEIZ0vmXTjd1QmjVemG7+qMoQ9QwhV6RL/WpGUqEqXeKUihIE5gWzjp1aEsDDwmRA/fGbmPjhv4dmzp3d0tJ2xAxNVmbZqwqz2jrbGGXM6Zlan+lRMWU5683kff+zPbzpnRuft1CG3Dy8lXZEpV9nV5ebKvLujd/bex37V5lay5fkoqD/mrwr9Qt8F89rOaDxr+vz5Z4xK/paavTn52ycTTbbVqN6yrfbLrWTk/NPmjpy38OwR7adNP6XtlLbvNI8d1dw85qtjxzSP7BxVU/J3ewz1+k9+qLtX5FTySXwASEhI9LZEed6nW9PO/kFesKO/paOVobrrA7pgWpGbpaxrlNtj0Id9zBF/nP2UHkc0qmDiUJCluecsowsmE1uy1CRZuvbrCiaHuTWVd23SeL88NDb2KbYdGvLv5m7et7Zh867LbLpS0wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD/jx04EAAAAAAA8n9thKqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqirswIEAAAAAAJD/ayNUVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVYQeOBQAAAACE+VuH0bMBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABcCgAA//9aTM01") r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x1ff) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000540), 0x44800, 0x0) sendfile(r0, r1, 0x0, 0xfffe82) ioctl$BTRFS_IOC_ENCODED_READ(r0, 0x80809440, &(0x7f00000004c0)={&(0x7f0000000180)=[{&(0x7f0000000340)='\v', 0xffe5}], 0x1, 0x0, 0x0, 0x3, 0x950, 0xed, 0x4, 0x4}) 1.172921132s ago: executing program 3 (id=1439): r0 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) symlinkat(&(0x7f0000000000)='.\x00', r1, &(0x7f0000000140)='./file0\x00') unlinkat(r1, &(0x7f00000001c0)='./file0/../file0/file0\x00', 0x0) 974.121008ms ago: executing program 3 (id=1440): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x275a, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000100)={0x0, 0x1, 0x80000000000036, 0xc1b2}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x275a, 0x0) fcntl$lock(r1, 0x7, &(0x7f0000000140)={0x0, 0x1, 0x8000000000002, 0x4}) fcntl$lock(r1, 0x24, &(0x7f0000000040)={0x0, 0x2, 0x8, 0x3}) 825.059345ms ago: executing program 3 (id=1441): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000401e04012800000000000109022400010000000009040100010300000009210000000122070009058103"], 0x0) openat$incfs(0xffffffffffffffff, &(0x7f0000000000)='.pending_reads\x00', 0x202901, 0x10) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x7, {[@local=@item_012={0x1, 0x2, 0x7, "9c"}, @main=@item_4={0x3, 0x0, 0x9, "06c76107"}]}}, 0x0}, 0x0) 418.316117ms ago: executing program 5 (id=1442): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) r0 = syz_clone(0xa0000280, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r0, 0x34, 0x0) 215.579154ms ago: executing program 5 (id=1443): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x68) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}, {@xino_auto}, {@nfs_export_on}], [], 0x2c}) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') read$FUSE(r0, &(0x7f00000040c0)={0x2020}, 0x2020) 0s ago: executing program 5 (id=1444): bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000040), 0x2, 0xffffffffffffffff, 0x4}, 0x38) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r0, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random='\x00\x00\x00\x00\x00 '}) kernel console output (not intermixed with test programs): 1) [ 177.268999][ T6435] EXT4-fs error (device loop3): ext4_ext_remove_space:2930: inode #15: comm syz.3.789: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 177.356606][ T4271] EXT4-fs (loop3): unmounting filesystem. [ 177.376578][ T6446] loop0: detected capacity change from 0 to 512 [ 177.416746][ T6446] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 177.487614][ T6446] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 177.495630][ T6446] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 177.697190][ T6446] System zones: 0-1, 15-15, 18-18, 34-34 [ 177.704097][ T6446] EXT4-fs (loop0): orphan cleanup on readonly fs [ 177.743821][ T6446] Quota error (device loop0): v2_read_header: Failed header read: expected=8 got=0 [ 177.823454][ T6446] EXT4-fs warning (device loop0): ext4_enable_quotas:7087: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 177.866797][ T6460] vcan0: tx drop: invalid da for name 0x00000000000000ee [ 177.878451][ T6446] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 177.896678][ T6446] EXT4-fs (loop0): 1 truncate cleaned up [ 177.947553][ T6446] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 178.014472][ T6446] fscrypt (loop0, inode 16): Error -61 getting encryption context [ 178.192173][ T4266] EXT4-fs (loop0): unmounting filesystem. [ 178.700127][ T6482] input: syz0 as /devices/virtual/input/input12 [ 178.771068][ T6456] loop3: detected capacity change from 0 to 32768 [ 180.197258][ T4350] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 180.377121][ T4350] usb 1-1: Using ep0 maxpacket: 8 [ 180.384223][ T4350] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 180.397175][ T4360] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 180.417340][ T4350] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 180.427247][ T4350] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 180.447124][ T4350] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 180.467119][ T4350] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 180.490637][ T4350] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 180.501214][ T4350] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.599415][ T4360] usb 5-1: config 0 has no interfaces? [ 180.605974][ T4360] usb 5-1: New USB device found, idVendor=056a, idProduct=0045, bcdDevice= 0.00 [ 180.624302][ T4360] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.636606][ T4360] usb 5-1: config 0 descriptor?? [ 180.865999][ T6523] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 180.883554][ T6523] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 180.897205][ T6523] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 180.918324][ T6523] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 180.942029][ T6418] usb 5-1: USB disconnect, device number 11 [ 181.184845][ T6533] fuse: Invalid user_id [ 181.301834][ T6538] usbtmc 1-1:16.0: simple usb_control_msg returned 0 [ 181.514177][ T4809] usb 1-1: USB disconnect, device number 10 [ 181.552540][ T4350] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 181.587524][ T6418] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 181.738344][ T4350] usb 3-1: Using ep0 maxpacket: 8 [ 181.745730][ T4350] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 181.769383][ T4350] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 181.782653][ T4350] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 181.797116][ T6418] usb 5-1: Using ep0 maxpacket: 32 [ 181.805550][ T6418] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 181.805867][ T4350] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 181.830299][ T6418] usb 5-1: New USB device found, idVendor=0c0b, idProduct=a109, bcdDevice=22.db [ 181.838474][ T4350] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 181.847498][ T6418] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.868721][ T4350] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 181.877247][ T6418] usb 5-1: Product: syz [ 181.882617][ T6418] usb 5-1: Manufacturer: syz [ 181.892725][ T6418] usb 5-1: SerialNumber: syz [ 181.907691][ T4350] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.929112][ T6418] usb 5-1: config 0 descriptor?? [ 181.949856][ T6418] ums-datafab 5-1:0.0: USB Mass Storage device detected [ 181.986908][ T6418] ums-datafab 5-1:0.0: Quirks match for vid 0c0b pid a109: 1 [ 182.043180][ T6418] ums-sddr55 5-1:0.0: USB Mass Storage device detected [ 182.156143][ T4350] usb 3-1: usb_control_msg returned -32 [ 182.162564][ T4350] usbtmc 3-1:16.0: can't read capabilities [ 182.170722][ T6418] usb 5-1: USB disconnect, device number 12 [ 182.580052][ T6563] usbtmc 3-1:16.0: INITIATE_ABORT_BULK_IN returned 0 [ 182.610638][ T6565] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.620210][ T6565] bridge0: port 1(bridge_slave_0) entered disabled state [ 182.772735][ T22] usb 3-1: USB disconnect, device number 5 [ 183.179947][ T6573] device veth1_to_hsr entered promiscuous mode [ 183.186396][ T6573] device macvlan2 entered promiscuous mode [ 183.211184][ T6576] device syzkaller1 entered promiscuous mode [ 183.818102][ T6595] netlink: 12 bytes leftover after parsing attributes in process `syz.1.849'. [ 184.366467][ T6605] input: syz0 as /devices/virtual/input/input13 [ 184.558953][ T6609] loop0: detected capacity change from 0 to 256 [ 184.646787][ T6609] FAT-fs (loop0): Directory bread(block 64) failed [ 184.685512][ T6609] FAT-fs (loop0): Directory bread(block 65) failed [ 184.697688][ T6609] FAT-fs (loop0): Directory bread(block 66) failed [ 184.704404][ T6609] FAT-fs (loop0): Directory bread(block 67) failed [ 184.747246][ T6609] FAT-fs (loop0): Directory bread(block 68) failed [ 184.764516][ T6609] FAT-fs (loop0): Directory bread(block 69) failed [ 184.777475][ T4809] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 184.808783][ T6609] FAT-fs (loop0): Directory bread(block 70) failed [ 184.815396][ T6609] FAT-fs (loop0): Directory bread(block 71) failed [ 184.847452][ T6609] FAT-fs (loop0): Directory bread(block 72) failed [ 184.863016][ T6609] FAT-fs (loop0): Directory bread(block 73) failed [ 185.011827][ T4809] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 185.030363][ T4809] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 185.045023][ T4809] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 185.083258][ T4809] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 185.088577][ T4360] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 185.125048][ T4809] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 185.152929][ T4809] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 185.161645][ T4809] usb 3-1: Manufacturer: syz [ 185.185402][ T4809] usb 3-1: config 0 descriptor?? [ 185.287223][ T4360] usb 5-1: Using ep0 maxpacket: 32 [ 185.294549][ T4360] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 185.312263][ T4360] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.336863][ T4360] usb 5-1: config 0 descriptor?? [ 185.554461][ T4360] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 185.598930][ T4360] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 185.614654][ T4809] appleir 0003:05AC:8243.0009: unknown main item tag 0x0 [ 185.640909][ T4809] appleir 0003:05AC:8243.0009: No inputs registered, leaving [ 185.646159][ T4360] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 185.679411][ T4360] usb 5-1: media controller created [ 185.697836][ T4809] appleir 0003:05AC:8243.0009: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 185.725886][ T4360] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 185.737471][ T6628] loop3: detected capacity change from 0 to 128 [ 185.859090][ T26] audit: type=1804 audit(1773983332.880:16): pid=6628 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.864" name="/newroot/146/bus/bus" dev="loop3" ino=1048615 res=1 errno=0 [ 185.889786][ T6418] usb 3-1: USB disconnect, device number 6 [ 186.147672][ T6629] fido_id[6629]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 186.174345][ T4360] DVB: Unable to find symbol dib7000p_attach() [ 186.182627][ T4360] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 186.259389][ T6623] loop0: detected capacity change from 0 to 32768 [ 186.315934][ T6623] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.862 (6623) [ 186.372764][ T6623] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 186.386728][ T6623] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 186.426983][ T6623] BTRFS warning (device loop0): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 186.517437][ T6623] BTRFS info (device loop0): trying to use backup root at mount time [ 186.553508][ T4360] rc_core: IR keymap rc-dib0700-rc5 not found [ 186.560804][ T4360] Registered IR keymap rc-empty [ 186.577385][ T4360] dvb-usb: could not initialize remote control. [ 186.583710][ T4360] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 186.593736][ T6623] BTRFS info (device loop0): setting nodatasum [ 186.619229][ T6623] BTRFS info (device loop0): enabling ssd optimizations [ 186.626297][ T6623] BTRFS info (device loop0): using spread ssd allocation scheme [ 186.649631][ T6641] loop9: detected capacity change from 0 to 7 [ 186.665142][ T4360] usb 5-1: USB disconnect, device number 13 [ 186.685927][ T6623] BTRFS info (device loop0): turning on flush-on-commit [ 186.706172][ T6623] BTRFS info (device loop0): force zlib compression, level 3 [ 186.716285][ T6641] Dev loop9: unable to read RDB block 7 [ 186.732043][ T6623] BTRFS info (device loop0): using free space tree [ 186.743266][ T4360] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 186.745632][ T6641] loop9: unable to read partition table [ 186.811296][ T6641] loop9: partition table beyond EOD, truncated [ 186.857555][ T6641] loop_reread_partitions: partition scan of loop9 (被x ) failed (rc=-5) [ 187.384983][ T6623] BTRFS info (device loop0): balance: start -d -m [ 187.442983][ T6623] BTRFS info (device loop0): relocating block group 6881280 flags data|metadata [ 187.500000][ T6684] netlink: 'syz.2.878': attribute type 10 has an invalid length. [ 187.514770][ T4312] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 187.535141][ T6684] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.542732][ T6684] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.621864][ T6684] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.629314][ T6684] bridge0: port 2(bridge_slave_1) entered forwarding state [ 187.637941][ T6684] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.645142][ T6684] bridge0: port 1(bridge_slave_0) entered forwarding state [ 187.670631][ T6684] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 187.709834][ T4312] usb 5-1: Using ep0 maxpacket: 8 [ 187.723581][ T4312] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 187.755016][ T4312] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 187.759513][ T6685] netlink: 4 bytes leftover after parsing attributes in process `syz.2.878'. [ 187.793653][ T4312] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.801956][ T6685] device bridge_slave_1 left promiscuous mode [ 187.823095][ T6685] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.831651][ T4312] usb 5-1: config 0 descriptor?? [ 187.872179][ T6623] BTRFS info (device loop0): found 3 extents, stage: move data extents [ 187.881102][ T6685] device bridge_slave_0 left promiscuous mode [ 187.888734][ T6685] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.982524][ T6685] bond0: (slave bridge0): Releasing backup interface [ 188.062202][ T4312] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 188.092787][ T6623] BTRFS info (device loop0): relocating block group 5242880 flags data|metadata [ 188.179115][ T6689] syz.3.880[6689] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 188.179369][ T6689] syz.3.880[6689] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 188.328767][ T6623] BTRFS info (device loop0): found 9 extents, stage: move data extents [ 188.435748][ T6623] BTRFS info (device loop0): balance: canceled [ 188.450213][ T6682] loop1: detected capacity change from 0 to 32768 [ 188.674810][ T4266] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 188.936371][ T6700] loop3: detected capacity change from 0 to 4096 [ 189.043149][ T6700] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a856e018, mo2=0002] [ 189.092494][ T6700] System zones: 0-5 [ 189.170246][ T6700] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 189.532800][ T6711] overlayfs: failed to decode file handle (len=6, type=248, flags=0, err=-22) [ 189.731380][ T4271] EXT4-fs (loop3): unmounting filesystem. [ 189.951501][ T6719] loop8: detected capacity change from 0 to 7 [ 189.983248][ T4348] Dev loop8: unable to read RDB block 7 [ 190.022051][ T4348] loop8: unable to read partition table [ 190.049437][ T4348] loop8: partition table beyond EOD, truncated [ 190.070724][ T6719] Dev loop8: unable to read RDB block 7 [ 190.111080][ T6719] loop8: unable to read partition table [ 190.131999][ T6719] loop8: partition table beyond EOD, truncated [ 190.149456][ T6719] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 190.348649][ T6418] usb 5-1: USB disconnect, device number 14 [ 190.775925][ T6730] loop2: detected capacity change from 0 to 4096 [ 190.880252][ T6735] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 191.013626][ T26] audit: type=1800 audit(1773983338.040:17): pid=6730 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.898" name="file1" dev="loop2" ino=18 res=0 errno=0 [ 191.463801][ T6746] block nbd2: shutting down sockets [ 191.715366][ T6754] device syzkaller1 entered promiscuous mode [ 191.983126][ T6764] loop3: detected capacity change from 0 to 512 [ 192.026494][ T6766] Bluetooth: MGMT ver 1.22 [ 192.071467][ T6764] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 192.247534][ T6777] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 192.301523][ T4271] EXT4-fs (loop3): unmounting filesystem. [ 192.387311][ T4350] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 192.589977][ T4350] usb 3-1: config 0 has no interfaces? [ 192.598797][ T4350] usb 3-1: New USB device found, idVendor=056a, idProduct=0045, bcdDevice= 0.00 [ 192.650383][ T4350] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.690179][ T4350] usb 3-1: config 0 descriptor?? [ 192.861914][ T6793] smc: net device bond0 applied user defined pnetid SYZ2 [ 192.879101][ T6793] netlink: 14 bytes leftover after parsing attributes in process `syz.0.924'. [ 192.927225][ T6771] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 192.941336][ T6771] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 192.971070][ T4315] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 193.001599][ T6771] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 193.017096][ T6771] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 193.035698][ T6418] usb 3-1: USB disconnect, device number 7 [ 193.060024][ T6793] smc: removing net device bond0 with user defined pnetid SYZ2 [ 193.084348][ T6793] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 193.130605][ T6793] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 193.151435][ T6793] bond0 (unregistering): Released all slaves [ 193.169382][ T6797] netlink: 104 bytes leftover after parsing attributes in process `syz.1.926'. [ 193.189348][ T4315] usb 4-1: Using ep0 maxpacket: 32 [ 193.200272][ T4315] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 193.228815][ T4315] usb 4-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 193.263084][ T4315] usb 4-1: config 0 interface 0 has no altsetting 0 [ 193.282902][ T4315] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 193.311844][ T4315] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.330694][ T4315] usb 4-1: Product: syz [ 193.334947][ T4315] usb 4-1: Manufacturer: syz [ 193.357171][ T4315] usb 4-1: SerialNumber: syz [ 193.384980][ T4315] usb 4-1: config 0 descriptor?? [ 193.433509][ T6800] loop4: detected capacity change from 0 to 512 [ 193.441999][ T6800] EXT4-fs: Ignoring removed nobh option [ 193.461209][ T6800] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 193.497624][ T6800] EXT4-fs (loop4): 1 truncate cleaned up [ 193.511999][ T6800] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 193.612450][ T6418] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 193.650119][ T4273] EXT4-fs error (device loop4): ext4_readdir:263: inode #11: block 54: comm syz-executor: path /181/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 193.684039][ T4273] EXT4-fs (loop4): Remounting filesystem read-only [ 193.701674][ T4273] EXT4-fs error (device loop4): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 193.765679][ T4273] EXT4-fs (loop4): Remounting filesystem read-only [ 193.775182][ T4273] EXT4-fs error (device loop4): ext4_readdir:263: inode #11: block 54: comm syz-executor: path /181/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 193.804496][ T4315] gs_usb 4-1:0.0: Configuring for 159 interfaces [ 193.804821][ T4273] EXT4-fs (loop4): Remounting filesystem read-only [ 193.826531][ T4273] EXT4-fs error (device loop4): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 193.846700][ T6418] usb 3-1: Using ep0 maxpacket: 32 [ 193.860215][ T4273] EXT4-fs (loop4): Remounting filesystem read-only [ 193.875379][ T6418] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 193.902308][ T4273] EXT4-fs error (device loop4): ext4_readdir:263: inode #11: block 54: comm syz-executor: path /181/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 193.934083][ T4273] EXT4-fs (loop4): Remounting filesystem read-only [ 193.943658][ T6418] usb 3-1: New USB device found, idVendor=0c0b, idProduct=a109, bcdDevice=22.db [ 193.958867][ T4273] EXT4-fs error (device loop4): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 193.990171][ T6418] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.003969][ T6418] usb 3-1: Product: syz [ 194.008556][ T6418] usb 3-1: Manufacturer: syz [ 194.015229][ T4273] EXT4-fs (loop4): Remounting filesystem read-only [ 194.027912][ T6418] usb 3-1: SerialNumber: syz [ 194.035431][ T6418] usb 3-1: config 0 descriptor?? [ 194.053651][ T4273] EXT4-fs error (device loop4): ext4_readdir:263: inode #11: block 54: comm syz-executor: path /181/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 194.085163][ T6418] ums-datafab 3-1:0.0: USB Mass Storage device detected [ 194.105444][ T4273] EXT4-fs (loop4): Remounting filesystem read-only [ 194.115271][ T4273] EXT4-fs error (device loop4): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 194.121513][ T6418] ums-datafab 3-1:0.0: Quirks match for vid 0c0b pid a109: 1 [ 194.154002][ T4273] EXT4-fs (loop4): Remounting filesystem read-only [ 194.166389][ T4273] EXT4-fs error (device loop4): ext4_readdir:263: inode #11: block 54: comm syz-executor: path /181/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 194.205033][ T4273] EXT4-fs (loop4): Remounting filesystem read-only [ 194.240697][ T6418] ums-sddr55 3-1:0.0: USB Mass Storage device detected [ 194.247973][ T4273] EXT4-fs error (device loop4): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 194.373998][ T6418] usb 3-1: USB disconnect, device number 8 [ 194.383418][ T1272] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.416267][ T4315] gs_usb 4-1:0.0: Couldn't get bit timing const for channel 2 (-EPROTO) [ 194.628225][ T4315] gs_usb: probe of 4-1:0.0 failed with error -71 [ 194.647186][ T4315] usb 4-1: USB disconnect, device number 11 [ 195.265612][ T9] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.453226][ T6835] netlink: 104 bytes leftover after parsing attributes in process `syz.3.941'. [ 195.484008][ T9] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.572496][ T26] audit: type=1326 audit(1773983342.600:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6836 comm="syz.2.939" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f37c139c799 code=0x0 [ 195.694327][ T9] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.807322][ T9] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.817709][ T4350] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 195.999583][ T4350] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 196.027775][ T4350] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 196.075733][ T4350] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 196.159105][ T4350] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 196.180806][ T4278] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 196.195305][ T4278] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 196.199732][ T4350] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.214095][ T4278] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 196.235766][ T4278] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 196.238528][ T4350] usb 1-1: Product: syz [ 196.250784][ T4278] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 196.258227][ T4278] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 196.343411][ T4350] usb 1-1: Manufacturer: syz [ 196.367698][ T4350] usb 1-1: SerialNumber: syz [ 196.397458][ T4350] hub 1-1:1.0: bad descriptor, ignoring hub [ 196.403457][ T4350] hub: probe of 1-1:1.0 failed with error -5 [ 196.605854][ T4350] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 11 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 196.712324][ T4278] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 196.726494][ T4278] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 196.735825][ T4278] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 196.745330][ T4278] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 196.767815][ T4278] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 196.777505][ T4278] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 196.785298][ T6854] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 196.792475][ T6854] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 196.848209][ T6854] vhci_hcd vhci_hcd.0: Device attached [ 196.967311][ T5879] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 197.127361][ T4804] usb 37-1: new low-speed USB device number 2 using vhci_hcd [ 197.168195][ T5879] usb 3-1: config 0 has no interfaces? [ 197.173784][ T5879] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 197.187575][ T6839] usb 1-1: reset high-speed USB device number 11 using dummy_hcd [ 197.205040][ T5879] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.225820][ T5879] usb 3-1: config 0 descriptor?? [ 197.334489][ T6848] chnl_net:caif_netlink_parms(): no params data found [ 197.483076][ T6860] usb 37-1: recv xbuf, 0 [ 197.485411][ T4312] usb 3-1: USB disconnect, device number 9 [ 197.496419][ T29] vhci_hcd: stop threads [ 197.518342][ T29] vhci_hcd: release socket [ 197.557708][ T29] vhci_hcd: disconnect device [ 197.587208][ T4804] vhci_hcd: vhci_device speed not set [ 197.847373][ T5879] usb 1-1: USB disconnect, device number 11 [ 197.865244][ T5879] usblp0: removed [ 197.989165][ T6848] bridge0: port 1(bridge_slave_0) entered blocking state [ 197.996413][ T6848] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.026221][ T6848] device bridge_slave_0 entered promiscuous mode [ 198.123071][ T6848] bridge0: port 2(bridge_slave_1) entered blocking state [ 198.130791][ T6848] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.146755][ T6848] device bridge_slave_1 entered promiscuous mode [ 198.243792][ T6848] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 198.297197][ T4278] Bluetooth: hci3: command 0x0409 tx timeout [ 198.682581][ T6855] chnl_net:caif_netlink_parms(): no params data found [ 198.702914][ T6848] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 198.857262][ T4278] Bluetooth: hci4: command 0x0409 tx timeout [ 198.893401][ T6848] team0: Port device team_slave_0 added [ 199.212065][ T6848] team0: Port device team_slave_1 added [ 199.450178][ T6924] loop3: detected capacity change from 0 to 64 [ 199.557270][ T9] device hsr_slave_0 left promiscuous mode [ 199.570108][ T9] device hsr_slave_1 left promiscuous mode [ 199.595566][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 199.607606][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 199.629217][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 199.642325][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 199.761308][ T9] device veth1_macvtap left promiscuous mode [ 199.780350][ T9] device veth0_macvtap left promiscuous mode [ 199.795646][ T9] device veth1_vlan left promiscuous mode [ 199.813751][ T9] device veth0_vlan left promiscuous mode [ 200.167216][ T4360] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 200.186661][ T26] audit: type=1326 audit(1773983347.220:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6936 comm="syz.3.965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd2a79c799 code=0x7ffc0000 [ 200.217653][ T26] audit: type=1326 audit(1773983347.220:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6936 comm="syz.3.965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd2a79c799 code=0x7ffc0000 [ 200.245044][ T26] audit: type=1326 audit(1773983347.220:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6936 comm="syz.3.965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd2a79c799 code=0x7ffc0000 [ 200.269828][ T26] audit: type=1326 audit(1773983347.220:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6936 comm="syz.3.965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7efd2a79c799 code=0x7ffc0000 [ 200.292348][ T26] audit: type=1326 audit(1773983347.220:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6936 comm="syz.3.965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd2a79c799 code=0x7ffc0000 [ 200.369620][ T4360] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 200.383167][ T26] audit: type=1326 audit(1773983347.220:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6936 comm="syz.3.965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd2a79c799 code=0x7ffc0000 [ 200.389543][ T4277] Bluetooth: hci3: command 0x041b tx timeout [ 200.417390][ T26] audit: type=1326 audit(1773983347.220:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6936 comm="syz.3.965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd2a79c799 code=0x7ffc0000 [ 200.437644][ T4360] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 200.464949][ T26] audit: type=1326 audit(1773983347.220:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6936 comm="syz.3.965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd2a79c799 code=0x7ffc0000 [ 200.488755][ T26] audit: type=1326 audit(1773983347.220:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6936 comm="syz.3.965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7efd2a79c799 code=0x7ffc0000 [ 200.511365][ T26] audit: type=1326 audit(1773983347.220:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6936 comm="syz.3.965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd2a79c799 code=0x7ffc0000 [ 200.517421][ T4360] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 200.589717][ T4360] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 200.618667][ T4360] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.626754][ T4360] usb 3-1: Product: syz [ 200.631938][ T4360] usb 3-1: Manufacturer: syz [ 200.636600][ T4360] usb 3-1: SerialNumber: syz [ 200.682295][ T4360] hub 3-1:1.0: bad descriptor, ignoring hub [ 200.689049][ T4360] hub: probe of 3-1:1.0 failed with error -5 [ 200.819683][ T6945] Bluetooth: hci0: service_discovery: expected 4 bytes, got 7 bytes [ 200.903656][ T4360] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 10 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 200.937469][ T4277] Bluetooth: hci4: command 0x041b tx timeout [ 201.427176][ T6933] usb 3-1: reset high-speed USB device number 10 using dummy_hcd [ 201.532923][ T9] team0 (unregistering): Port device team_slave_1 removed [ 201.587116][ T4277] Bluetooth: hci0: command 0x0406 tx timeout [ 201.593477][ T4277] Bluetooth: hci1: command 0x0406 tx timeout [ 201.603947][ T4278] Bluetooth: hci2: command 0x0406 tx timeout [ 201.615538][ T9] team0 (unregistering): Port device team_slave_0 removed [ 201.682463][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 201.755669][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 201.862483][ T6418] usb 3-1: USB disconnect, device number 10 [ 201.871536][ T6418] usblp0: removed [ 202.269092][ T9] bond0 (unregistering): Released all slaves [ 202.318645][ T6848] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 202.325675][ T6848] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 202.362063][ T6848] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 202.387463][ T6848] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 202.422524][ T6848] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 202.456853][ T6848] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 202.478972][ T4277] Bluetooth: hci3: command 0x040f tx timeout [ 202.517284][ T6855] bridge0: port 1(bridge_slave_0) entered blocking state [ 202.524469][ T6855] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.533037][ T6855] device bridge_slave_0 entered promiscuous mode [ 202.549639][ T6953] netlink: 72 bytes leftover after parsing attributes in process `syz.2.972'. [ 202.673861][ T6855] bridge0: port 2(bridge_slave_1) entered blocking state [ 202.692151][ T6855] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.710723][ T6855] device bridge_slave_1 entered promiscuous mode [ 202.825155][ T6855] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 202.902577][ T6855] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 202.978431][ T6848] device hsr_slave_0 entered promiscuous mode [ 202.997552][ T6848] device hsr_slave_1 entered promiscuous mode [ 203.005401][ T6848] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 203.017278][ T4277] Bluetooth: hci4: command 0x040f tx timeout [ 203.044516][ T6848] Cannot create hsr debugfs directory [ 203.197157][ T6418] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 203.236463][ T6855] team0: Port device team_slave_0 added [ 203.263284][ T6855] team0: Port device team_slave_1 added [ 203.411965][ T6418] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 203.441469][ T6855] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 203.466805][ T6855] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 203.499867][ T6418] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 203.568522][ T6418] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 203.596937][ T6855] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 203.607350][ T6418] usb 1-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 203.623922][ T6418] usb 1-1: Manufacturer: syz [ 203.666742][ T6418] usb 1-1: config 0 descriptor?? [ 203.750977][ T6855] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 203.795886][ T6855] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 203.890151][ T6855] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 204.167568][ T6855] device hsr_slave_0 entered promiscuous mode [ 204.214829][ T6855] device hsr_slave_1 entered promiscuous mode [ 204.250557][ T6855] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 204.309714][ T6855] Cannot create hsr debugfs directory [ 204.543773][ T6418] input: syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.000A/input/input15 [ 204.554969][ T4277] Bluetooth: hci3: command 0x0419 tx timeout [ 204.641403][ T6418] input: syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.000A/input/input16 [ 204.662228][ T9] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.666088][ T6418] input: syz Touch Strip as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.000A/input/input17 [ 204.692704][ T6418] input: syz Dial as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.000A/input/input18 [ 204.756536][ T6418] uclogic 0003:256C:006D.000A: input,hiddev0,hidraw0: USB HID v0.00 Keypad [syz] on usb-dummy_hcd.0-1/input0 [ 204.780723][ T6418] usb 1-1: USB disconnect, device number 12 [ 204.861513][ T9] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.996134][ T9] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.107275][ T4278] Bluetooth: hci4: command 0x0419 tx timeout [ 205.172172][ T9] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.284132][ T6995] fido_id[6995]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 205.693198][ T6855] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 205.731761][ T6855] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 205.770908][ T6855] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 205.828158][ T7010] netlink: 12 bytes leftover after parsing attributes in process `syz.0.987'. [ 206.005388][ T6855] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 206.258978][ T6848] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 206.286208][ T6848] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 206.444945][ T6848] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 206.452178][ T4804] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 206.471001][ T6848] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 206.588302][ T6855] 8021q: adding VLAN 0 to HW filter on device bond0 [ 206.669011][ T4804] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 206.697786][ T4804] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 206.718243][ T4804] usb 4-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 206.754384][ T4804] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.775008][ T4804] usb 4-1: config 0 descriptor?? [ 206.855248][ T6789] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 206.868913][ T6789] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 206.890328][ T6855] 8021q: adding VLAN 0 to HW filter on device team0 [ 206.997740][ T6789] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 207.033012][ T6789] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 207.068332][ T6789] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.075746][ T6789] bridge0: port 1(bridge_slave_0) entered forwarding state [ 207.216709][ T4804] playstation 0003:054C:0DF2.000B: unknown main item tag 0x0 [ 207.225872][ T6789] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 207.244733][ T4804] playstation 0003:054C:0DF2.000B: unknown main item tag 0x0 [ 207.249088][ T6789] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 207.271067][ T4804] playstation 0003:054C:0DF2.000B: unknown main item tag 0x0 [ 207.297905][ T6789] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 207.299894][ T4804] playstation 0003:054C:0DF2.000B: unknown main item tag 0x0 [ 207.322546][ T6789] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.329841][ T6789] bridge0: port 2(bridge_slave_1) entered forwarding state [ 207.334944][ T4804] playstation 0003:054C:0DF2.000B: unknown main item tag 0x0 [ 207.347248][ T4804] playstation 0003:054C:0DF2.000B: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.3-1/input0 [ 207.376044][ T6789] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 207.461462][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 207.531584][ T7043] loop2: detected capacity change from 0 to 8192 [ 207.539366][ T6418] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 207.617266][ T7043] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 207.639461][ T4804] playstation 0003:054C:0DF2.000B: Failed to retrieve feature with reportID 32: -71 [ 207.656524][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 207.670506][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 207.679686][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 207.690010][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 207.697481][ T4804] playstation 0003:054C:0DF2.000B: Failed to retrieve DualSense firmware info: -71 [ 207.701507][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 207.719186][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 207.733522][ T6855] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 207.742794][ T7043] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 207.751593][ T6855] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 207.760524][ T6418] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 207.774077][ T4804] playstation 0003:054C:0DF2.000B: Failed to get firmware info from DualSense [ 207.786748][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 207.812151][ T6418] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 207.823445][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 207.832802][ T4804] playstation 0003:054C:0DF2.000B: Failed to create dualsense. [ 207.843704][ T7043] REISERFS (device loop2): using journaled data mode [ 207.860624][ T6418] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 207.871084][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 207.879052][ T7043] reiserfs: using flush barriers [ 207.891496][ T4804] playstation: probe of 0003:054C:0DF2.000B failed with error -71 [ 207.914075][ T6418] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.927613][ T7043] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 207.949996][ T4804] usb 4-1: USB disconnect, device number 12 [ 207.968514][ T7041] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 208.036464][ T7043] REISERFS (device loop2): checking transaction log (loop2) [ 208.118429][ T7043] REISERFS (device loop2): Using r5 hash to sort names [ 208.125718][ T7043] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 208.300940][ T7043] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 208.327586][ T4350] usb 1-1: USB disconnect, device number 13 [ 208.382850][ T7050] fido_id[7050]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 208.504377][ T7043] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 208.572297][ T7043] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 208.645751][ T9] device hsr_slave_0 left promiscuous mode [ 208.666431][ T9] device hsr_slave_1 left promiscuous mode [ 208.691295][ T7043] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 208.753037][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 208.777657][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 208.828052][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 208.835540][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 208.958707][ T9] device bridge_slave_1 left promiscuous mode [ 208.969085][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.203967][ T9] device bridge_slave_0 left promiscuous mode [ 209.217223][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.519774][ T9] device veth1_to_hsr left promiscuous mode [ 209.569584][ T7055] loop3: detected capacity change from 0 to 131072 [ 209.580014][ T7055] F2FS-fs (loop3): Wrong CP boundary, start(512) end(1536) blocks(0) [ 209.588301][ T7055] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 209.600830][ T7055] F2FS-fs (loop3): invalid crc value [ 209.608012][ T9] device veth1_macvtap left promiscuous mode [ 209.614780][ T9] device veth0_macvtap left promiscuous mode [ 209.629671][ T9] device veth1_vlan left promiscuous mode [ 209.680776][ T7055] F2FS-fs (loop3): Found nat_bits in checkpoint [ 209.727577][ T9] device veth0_vlan left promiscuous mode [ 209.753524][ T7055] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 209.760806][ T7055] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 209.883508][ T26] kauditd_printk_skb: 9 callbacks suppressed [ 209.883525][ T26] audit: type=1800 audit(1773983356.910:38): pid=7055 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.997" name="bus" dev="loop3" ino=10 res=0 errno=0 [ 211.151345][ T7085] loop2: detected capacity change from 0 to 512 [ 211.163465][ T7085] EXT4-fs: Ignoring removed oldalloc option [ 211.194782][ T7085] EXT4-fs (loop2): 1 truncate cleaned up [ 211.211248][ T7085] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 211.443295][ T4267] EXT4-fs (loop2): unmounting filesystem. [ 211.653490][ T7094] loop3: detected capacity change from 0 to 128 [ 211.689676][ T7094] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 211.706940][ T7094] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 212.032936][ T9] team0 (unregistering): Port device team_slave_1 removed [ 212.122631][ T9] team0 (unregistering): Port device team_slave_0 removed [ 212.195491][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 212.269650][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 212.354951][ T7099] loop3: detected capacity change from 0 to 32768 [ 212.373509][ T7099] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.1008 (7099) [ 212.403325][ T7099] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 212.437794][ T7099] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 212.446631][ T7099] BTRFS info (device loop3): using free space tree [ 212.596126][ T7099] BTRFS info (device loop3): enabling ssd optimizations [ 212.830236][ T4271] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 213.205054][ T9] bond0 (unregistering): Released all slaves [ 213.373515][ T7096] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1006'. [ 213.410894][ T7096] netlink: 'syz.2.1006': attribute type 1 has an invalid length. [ 213.448532][ T7096] netlink: 'syz.2.1006': attribute type 2 has an invalid length. [ 213.491293][ T4884] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 213.502198][ T4884] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 213.541878][ T6848] 8021q: adding VLAN 0 to HW filter on device bond0 [ 213.662469][ T6855] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 213.670924][ T4360] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 213.697566][ T6789] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 213.717748][ T6789] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 213.751755][ T6848] 8021q: adding VLAN 0 to HW filter on device team0 [ 213.795680][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 213.809391][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 213.843395][ T75] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.852499][ T75] bridge0: port 1(bridge_slave_0) entered forwarding state [ 213.861605][ T4360] usb 4-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 213.882006][ T4360] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.913135][ T4360] usb 4-1: config 0 descriptor?? [ 213.934021][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 213.946597][ T4360] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 213.997347][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 214.006407][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 214.049327][ T75] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.056538][ T75] bridge0: port 2(bridge_slave_1) entered forwarding state [ 214.087565][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 214.137680][ T4804] kernel read not supported for file /input/event1 (pid: 4804 comm: kworker/0:11) [ 214.175242][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 214.198499][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 214.236646][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 214.292315][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 214.336702][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 214.346155][ T4360] cpia1 4-1:0.0: unexpected state after lo power cmd: 00 [ 214.390264][ T6848] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 214.421039][ T6848] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 214.446072][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 214.458283][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 214.497602][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 214.529343][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 214.552408][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 214.570133][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 214.763369][ T4360] gspca_cpia1: usb_control_msg 02, error -32 [ 214.773573][ T4360] gspca_cpia1: usb_control_msg 02, error -71 [ 214.794087][ T4360] cpia1 4-1:0.0: only firmware version 1 is supported (got: 0) [ 214.822939][ T4360] usb 4-1: USB disconnect, device number 13 [ 214.922506][ T7122] loop0: detected capacity change from 0 to 40427 [ 214.977070][ T7122] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 214.984905][ T7122] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 215.042639][ T7122] F2FS-fs (loop0): Found nat_bits in checkpoint [ 215.172303][ T7122] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 215.193590][ T7122] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 215.589052][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 215.607957][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 215.638713][ T4266] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix. [ 215.638800][ T4266] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix. [ 215.655426][ T6848] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 215.682314][ T4266] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix. [ 215.682344][ T4266] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix. [ 215.732947][ T4266] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix. [ 215.759082][ T4266] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix. [ 215.761247][ T6789] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 215.776714][ T4266] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix. [ 215.824304][ T6789] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 215.913533][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 215.936853][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 216.021403][ T4884] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 216.050963][ T4884] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 216.087368][ T6848] device veth0_vlan entered promiscuous mode [ 216.096188][ T6855] device veth0_vlan entered promiscuous mode [ 216.118921][ T4884] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 216.129316][ T4884] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 216.167859][ T4884] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 216.197950][ T4884] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 216.234366][ T6848] device veth1_vlan entered promiscuous mode [ 216.273873][ T6855] device veth1_vlan entered promiscuous mode [ 216.285847][ T7176] loop3: detected capacity change from 0 to 128 [ 216.298824][ T4884] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 216.312688][ T4884] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 216.354858][ T4884] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 216.391705][ T4884] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 216.503260][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 216.521476][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 216.573598][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 216.615460][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 216.636442][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 216.655238][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 216.672077][ T6848] device veth0_macvtap entered promiscuous mode [ 216.696112][ T6855] device veth0_macvtap entered promiscuous mode [ 216.718605][ T6848] device veth1_macvtap entered promiscuous mode [ 216.740191][ T6855] device veth1_macvtap entered promiscuous mode [ 216.815839][ T6848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 216.857358][ T6848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.877185][ T6848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 216.904933][ T7187] loop0: detected capacity change from 0 to 512 [ 216.912097][ T6848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.950952][ T6848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 216.973427][ T7187] EXT4-fs (loop0): 1 truncate cleaned up [ 216.981988][ T7187] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 216.990970][ T6848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.098231][ T6848] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 217.109832][ T6855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 217.161436][ T6855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.182990][ T6855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 217.205016][ T6855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.220952][ T6855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 217.232260][ T6855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.243909][ T6855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 217.266084][ T6855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.294923][ T6855] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 217.314123][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 217.325276][ T4266] EXT4-fs (loop0): unmounting filesystem. [ 217.379476][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 217.424825][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 217.464248][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 217.491704][ T6848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 217.521949][ T6848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.552388][ T6848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 217.576779][ T6848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.614470][ T6848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 217.631937][ T6848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.655494][ T6848] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 217.671463][ T6848] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.687531][ T6848] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.705333][ T6848] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.714637][ T6848] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.747297][ T6855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 217.771720][ T6855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.794668][ T6855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 217.816353][ T6855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.828361][ T6855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 217.840831][ T6855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.851147][ T6855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 217.862013][ T6855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.874900][ T6855] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 217.902900][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 217.928368][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 217.958761][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 217.992033][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 218.036716][ T6855] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.069898][ T6855] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.114638][ T6855] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.133742][ T6855] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.141542][ T7209] loop2: detected capacity change from 0 to 1024 [ 218.270285][ T7209] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 218.452923][ T6789] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 218.468931][ T6789] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 218.495795][ T6789] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 218.572073][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 218.606284][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 218.655130][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 218.672186][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 218.692890][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 218.736219][ T6789] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 218.756346][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 218.769680][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 218.792352][ T4267] EXT4-fs (loop2): unmounting filesystem. [ 218.801448][ T6789] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 219.401237][ T4804] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 219.620567][ T4804] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 219.638866][ T4804] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 219.675917][ T4804] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 219.697933][ T4804] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.706391][ T4804] usb 6-1: Product: syz [ 219.747175][ T4360] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 219.763210][ T4804] usb 6-1: Manufacturer: syz [ 219.775618][ T4804] usb 6-1: SerialNumber: syz [ 219.822464][ T4804] cdc_mbim 6-1:1.0: skipping garbage [ 219.846443][ T7255] device netdevsim0 entered promiscuous mode [ 219.948607][ T4360] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 219.980296][ T4360] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 220.003285][ T7231] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 220.007266][ T4360] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 220.077102][ T4360] usb 4-1: config 0 interface 0 has no altsetting 0 [ 220.095585][ T4360] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 220.126924][ T4360] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 220.157077][ T4360] usb 4-1: config 0 interface 0 has no altsetting 0 [ 220.185827][ T4360] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 220.224632][ T4360] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 220.256311][ T4360] usb 4-1: config 0 interface 0 has no altsetting 0 [ 220.311486][ T4360] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 220.348245][ T4360] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 220.374606][ T4360] usb 4-1: config 0 interface 0 has no altsetting 0 [ 220.423490][ T4360] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 220.481878][ T4360] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 220.525589][ T4360] usb 4-1: config 0 interface 0 has no altsetting 0 [ 220.540128][ T4360] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 220.577985][ T4360] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 220.618375][ T4360] usb 4-1: config 0 interface 0 has no altsetting 0 [ 220.640193][ T4360] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 220.661500][ T7271] loop1: detected capacity change from 0 to 64 [ 220.664269][ T7231] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 220.677216][ T4360] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 220.707177][ T4804] cdc_mbim 6-1:1.0: setting tx_max = 16384 [ 220.720879][ T4804] cdc_mbim 6-1:1.0: cdc-wdm0: USB WDM device [ 220.737951][ T4360] usb 4-1: config 0 interface 0 has no altsetting 0 [ 220.767310][ T126] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 220.783161][ T4360] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 220.821510][ T4360] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 220.863621][ T4360] usb 4-1: config 0 interface 0 has no altsetting 0 [ 220.871701][ T4804] cdc_mbim 6-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.5-1, CDC MBIM, a6:58:d0:7b:97:cf [ 220.891727][ T4360] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 220.907093][ T4360] usb 4-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 220.937478][ T4360] usb 4-1: Product: syz [ 220.941943][ T4360] usb 4-1: Manufacturer: syz [ 220.957895][ T4360] usb 4-1: SerialNumber: syz [ 220.973970][ T4804] usb 6-1: USB disconnect, device number 2 [ 220.982360][ T4360] usb 4-1: config 0 descriptor?? [ 221.010045][ T126] usb 1-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 221.025507][ T4804] cdc_mbim 6-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.5-1, CDC MBIM [ 221.051957][ T4360] yurex 4-1:0.0: USB YUREX device now attached to Yurex #1 [ 221.065646][ T126] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.095420][ T126] usb 1-1: Product: syz [ 221.118233][ T126] usb 1-1: Manufacturer: syz [ 221.122909][ T126] usb 1-1: SerialNumber: syz [ 221.163223][ T126] usb 1-1: config 0 descriptor?? [ 221.196593][ T126] hub 1-1:0.0: bad descriptor, ignoring hub [ 221.206806][ T7261] loop2: detected capacity change from 0 to 32768 [ 221.215972][ T126] hub: probe of 1-1:0.0 failed with error -5 [ 221.287238][ T7261] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.1042 (7261) [ 221.338808][ T7242] cdc_mbim 6-1:1.0: Error submitting int urb - -19 [ 221.361349][ T4360] usb 4-1: USB disconnect, device number 14 [ 221.386266][ T7261] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 221.404253][ T7261] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 221.404464][ T126] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 221.434439][ T7261] BTRFS info (device loop2): using free space tree [ 221.462331][ T4360] yurex 4-1:0.0: USB YUREX #1 now disconnected [ 221.478510][ T126] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 221.508786][ T126] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 221.546543][ T126] usb 1-1: media controller created [ 221.599814][ T126] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 221.711757][ T126] DVB: Unable to find symbol dib7000p_attach() [ 221.718201][ T126] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 221.835187][ T7261] BTRFS info (device loop2): enabling ssd optimizations [ 222.017063][ T126] rc_core: IR keymap rc-dib0700-rc5 not found [ 222.023421][ T126] Registered IR keymap rc-empty [ 222.067708][ T126] dvb-usb: could not initialize remote control. [ 222.106888][ T126] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 222.174255][ T4267] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 222.192131][ T126] usb 1-1: USB disconnect, device number 14 [ 222.347401][ T126] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 223.167217][ T7330] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 223.377348][ T7330] usb 2-1: Using ep0 maxpacket: 8 [ 223.384389][ T7330] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 223.442429][ T7330] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 223.482292][ T7330] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 223.515821][ T7330] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 223.562494][ T7330] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 223.598176][ T7330] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.880191][ T7330] usb 2-1: GET_CAPABILITIES returned 0 [ 223.885777][ T7330] usbtmc 2-1:16.0: can't read capabilities [ 224.115263][ C1] usbtmc 2-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 224.135683][ T7331] usb 2-1: USB disconnect, device number 7 [ 227.044493][ T7406] loop1: detected capacity change from 0 to 32768 [ 227.063150][ T7430] loop2: detected capacity change from 0 to 1024 [ 227.125279][ T7430] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 227.150839][ T7430] ext4 filesystem being mounted at /257/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 227.229767][ T7406] XFS (loop1): Mounting V5 Filesystem [ 227.354794][ T7406] XFS (loop1): Ending clean mount [ 227.367138][ T7406] XFS (loop1): Quotacheck needed: Please wait. [ 227.367131][ T7435] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 227.454093][ T7430] EXT4-fs error (device loop2): ext4_map_blocks:745: inode #15: comm syz.2.1093: lblock 0 mapped to illegal pblock 0 (length 1) [ 227.607936][ T7430] EXT4-fs error (device loop2): ext4_map_blocks:635: inode #15: comm syz.2.1093: lblock 0 mapped to illegal pblock 0 (length 1) [ 227.618935][ T7406] XFS (loop1): Quotacheck: Done. [ 227.717147][ T7430] EXT4-fs error (device loop2): ext4_ext_remove_space:2930: inode #15: comm syz.2.1093: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 227.902990][ T7453] EXT4-fs error (device loop2): ext4_map_blocks:635: inode #15: comm syz.2.1093: lblock 0 mapped to illegal pblock 0 (length 1) [ 227.926026][ T6848] XFS (loop1): Unmounting Filesystem [ 227.987284][ T7332] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 228.129643][ T4267] EXT4-fs (loop2): unmounting filesystem. [ 228.217151][ T7464] netlink: 'syz.5.1102': attribute type 11 has an invalid length. [ 228.236573][ T7332] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 228.256165][ T7332] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.285495][ T7332] usb 4-1: config 0 descriptor?? [ 228.512798][ T7332] [drm] vendor descriptor length:3e data:06 5f 00 00 00 00 00 00 00 00 00 [ 228.531904][ T7332] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 228.794257][ T7332] [drm] Initialized udl 0.0.1 20120220 for 4-1:0.0 on minor 2 [ 228.830850][ T7332] [drm] Initialized udl on minor 2 [ 229.136081][ T7332] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 1 failed err ffffffb9 [ 229.159271][ T7332] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 229.211692][ T7332] usb 4-1: USB disconnect, device number 15 [ 229.261318][ T7331] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 229.309538][ T7331] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 229.333740][ T7331] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 229.427092][ T4804] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 229.597749][ T7471] loop5: detected capacity change from 0 to 32768 [ 229.617324][ T4804] usb 3-1: Using ep0 maxpacket: 16 [ 229.624529][ T4804] usb 3-1: config 0 has an invalid interface number: 105 but max is 0 [ 229.644332][ T4804] usb 3-1: config 0 has an invalid descriptor of length 128, skipping remainder of the config [ 229.682662][ T4804] usb 3-1: config 0 has no interface number 0 [ 229.699847][ T4804] usb 3-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 229.721858][ T4804] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.746573][ T4804] usb 3-1: Product: syz [ 229.757131][ T4804] usb 3-1: Manufacturer: syz [ 229.767824][ T4804] usb 3-1: SerialNumber: syz [ 229.793212][ T4804] usb 3-1: config 0 descriptor?? [ 229.803947][ T7471] XFS (loop5): Mounting V5 Filesystem [ 229.818939][ T4804] usb 3-1: Found UVC 0.00 device syz (046d:08f3) [ 229.835100][ T4804] usb 3-1: No valid video chain found. [ 229.987670][ T7471] XFS (loop5): Ending clean mount [ 230.012642][ T7471] XFS (loop5): Quotacheck needed: Please wait. [ 230.042783][ T4804] usb 3-1: USB disconnect, device number 11 [ 230.158550][ T7471] XFS (loop5): Quotacheck: Done. [ 230.368801][ T7517] XFS (loop5): User initiated shutdown received. [ 230.403444][ T26] audit: type=1800 audit(1773983377.430:39): pid=7471 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1104" name="file1" dev="loop5" ino=6150 res=0 errno=0 [ 230.405425][ T7517] XFS (loop5): Metadata I/O Error (0x4) detected at xfs_fs_goingdown+0x6d/0x150 (fs/xfs/xfs_fsops.c:495). Shutting down filesystem. [ 230.423143][ C1] vkms_vblank_simulate: vblank timer overrun [ 230.494735][ T7517] XFS (loop5): Please unmount the filesystem and rectify the problem(s) [ 230.640906][ T6855] XFS (loop5): Unmounting Filesystem [ 232.278172][ T7559] loop5: detected capacity change from 0 to 512 [ 232.544521][ T7543] loop2: detected capacity change from 0 to 32768 [ 232.717995][ T7543] XFS (loop2): Mounting V5 Filesystem [ 232.831321][ T7543] XFS (loop2): Ending clean mount [ 232.901235][ T7543] XFS (loop2): Quotacheck needed: Please wait. [ 232.909933][ T7578] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1131'. [ 233.135628][ T7543] XFS (loop2): Quotacheck: Done. [ 233.407173][ T4804] usb 2-1: new low-speed USB device number 8 using dummy_hcd [ 233.484605][ T7578] team0: Port device team_slave_0 removed [ 233.611857][ T4804] usb 2-1: config 0 has an invalid interface number: 128 but max is 0 [ 233.637177][ T4804] usb 2-1: config 0 has no interface number 0 [ 233.640128][ T7592] syz.3.1135 sent an empty control message without MSG_MORE. [ 233.664194][ T4804] usb 2-1: config 0 interface 128 has no altsetting 0 [ 233.698389][ T4804] usb 2-1: string descriptor 0 read error: -22 [ 233.707530][ T4267] XFS (loop2): Unmounting Filesystem [ 233.720247][ T4804] usb 2-1: New USB device found, idVendor=04e6, idProduct=0101, bcdDevice= 2.00 [ 233.773421][ T4804] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.831180][ T4804] usb 2-1: config 0 descriptor?? [ 233.862340][ T4804] usb-storage 2-1:0.128: USB Mass Storage device detected [ 234.059188][ T7600] loop5: detected capacity change from 0 to 1024 [ 234.108772][ T7600] EXT4-fs: Ignoring removed i_version option [ 234.138600][ T4312] usb 2-1: USB disconnect, device number 8 [ 234.238675][ T7600] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 234.279989][ T7600] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:3850: comm syz.5.1138: Allocating blocks 385-513 which overlap fs metadata [ 234.496616][ T7600] EXT4-fs (loop5): pa ffff888072030d20: logic 16, phys. 129, len 24 [ 234.505842][ T7600] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:4890: group 0, free 0, pa_free 8 [ 234.563863][ T6855] EXT4-fs (loop5): unmounting filesystem. [ 234.964914][ T26] audit: type=1326 audit(1773983381.990:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7603 comm="syz.3.1140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd2a79c799 code=0x7fc00000 [ 235.417373][ T7330] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 235.627259][ T7330] usb 2-1: Using ep0 maxpacket: 8 [ 235.634274][ T7330] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 235.646029][ T7638] loop3: detected capacity change from 0 to 4096 [ 235.658197][ T7330] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 235.727540][ T7330] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 235.769339][ T7646] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 235.788435][ T7330] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 235.852890][ T7330] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 235.883318][ T7330] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 235.930691][ T7330] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.209160][ T7330] usb 2-1: usb_control_msg returned -32 [ 236.214968][ T7330] usbtmc 2-1:16.0: can't read capabilities [ 236.829544][ T4312] usb 2-1: USB disconnect, device number 9 [ 237.255343][ T7685] input: syz1 as /devices/virtual/input/input21 [ 238.065844][ T7713] netlink: 'syz.0.1176': attribute type 11 has an invalid length. [ 238.684280][ T7721] loop1: detected capacity change from 0 to 1024 [ 238.707121][ T7332] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 238.730432][ T7721] EXT4-fs: inline encryption not supported [ 238.848304][ T7721] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 238.929469][ T7332] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 238.987066][ T7332] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 239.064467][ T7332] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 239.129089][ T7332] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 239.174691][ T7332] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.211867][ T7332] usb 3-1: config 0 descriptor?? [ 239.253669][ T6848] EXT4-fs (loop1): unmounting filesystem. [ 239.271159][ T4278] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 239.280473][ T4278] Bluetooth: hci2: Injecting HCI hardware error event [ 239.292891][ T4278] Bluetooth: hci2: hardware error 0x00 [ 239.521661][ T7747] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1188'. [ 239.625758][ T7743] loop3: detected capacity change from 0 to 4096 [ 239.652214][ T7332] plantronics 0003:047F:FFFF.000C: No inputs registered, leaving [ 239.700309][ T7332] plantronics 0003:047F:FFFF.000C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 240.421149][ T7768] loop5: detected capacity change from 0 to 512 [ 240.588192][ T0] NOHZ tick-stop error: local softirq work is pending, handler #300!!! [ 241.069184][ T7785] netlink: 'syz.3.1203': attribute type 21 has an invalid length. [ 241.069615][ T7332] usb 3-1: USB disconnect, device number 12 [ 241.078412][ T7785] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1203'. [ 241.146590][ T7787] loop5: detected capacity change from 0 to 512 [ 241.156230][ T7787] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 241.227399][ T7787] EXT4-fs (loop5): 1 truncate cleaned up [ 241.238196][ T7787] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 241.297172][ T6418] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 241.311372][ T6855] EXT4-fs (loop5): unmounting filesystem. [ 241.417393][ T4278] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 241.503195][ T6418] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 241.542159][ T6418] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 241.584736][ T6418] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 241.601859][ T6418] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.624632][ T6418] usb 1-1: Product: syz [ 241.637183][ T6418] usb 1-1: Manufacturer: syz [ 241.642865][ T6418] usb 1-1: SerialNumber: syz [ 241.664276][ T6418] cdc_mbim 1-1:1.0: skipping garbage [ 241.776150][ T7803] loop2: detected capacity change from 0 to 512 [ 241.847628][ T7332] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 241.871208][ T7783] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 242.067101][ T7332] usb 2-1: Using ep0 maxpacket: 8 [ 242.079943][ T7332] usb 2-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 242.107729][ T7332] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=239 [ 242.126139][ T7332] usb 2-1: Product: syz [ 242.130956][ T7332] usb 2-1: Manufacturer: syz [ 242.135695][ T7332] usb 2-1: SerialNumber: syz [ 242.167935][ T7332] usb 2-1: config 0 descriptor?? [ 242.195433][ T7332] gspca_main: sq905-2.14.0 probing 2770:9120 [ 242.259615][ T7814] loop5: detected capacity change from 0 to 512 [ 242.273870][ T7814] EXT4-fs: Ignoring removed i_version option [ 242.283195][ T7814] EXT4-fs: Ignoring removed bh option [ 242.343053][ T7814] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 242.362027][ T7814] ext4 filesystem being mounted at /40/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 242.439326][ T7330] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 242.527371][ T7783] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 242.535355][ T6418] cdc_mbim 1-1:1.0: setting rx_max = 16384 [ 242.661906][ T7330] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 242.677884][ T7330] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 242.694032][ T7330] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 242.714082][ T7330] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 242.749014][ T7330] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 242.760871][ T6418] cdc_mbim 1-1:1.0: cdc-wdm0: USB WDM device [ 242.801650][ T6855] EXT4-fs (loop5): unmounting filesystem. [ 242.810756][ T7330] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 242.827659][ T7330] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 242.844980][ T7330] usb 3-1: Product: syz [ 242.849600][ T6418] cdc_mbim 1-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.0-1, CDC MBIM, 4a:df:24:cf:aa:df [ 242.886521][ T6418] usb 1-1: USB disconnect, device number 15 [ 242.908133][ T7330] usb 3-1: Manufacturer: syz [ 242.911335][ T6418] cdc_mbim 1-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.0-1, CDC MBIM [ 242.938566][ T7330] cdc_wdm 3-1:1.0: skipping garbage [ 242.946235][ T7330] cdc_wdm 3-1:1.0: skipping garbage [ 242.998028][ T7330] cdc_wdm 3-1:1.0: cdc-wdm1: USB WDM device [ 243.004095][ T7330] cdc_wdm 3-1:1.0: Unknown control protocol [ 243.175080][ T7831] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1220'. [ 243.192628][ T7830] loop8: detected capacity change from 0 to 8 [ 243.209529][ T7830] Dev loop8: unable to read RDB block 8 [ 243.215295][ T7332] gspca_sq905: sq905_read_data: usb_control_msg failed (-71) [ 243.215435][ T7332] sq905: probe of 2-1:0.0 failed with error -71 [ 243.238366][ T7830] loop8: unable to read partition table [ 243.244479][ T7830] loop8: partition table beyond EOD, truncated [ 243.260683][ T7332] usb 2-1: USB disconnect, device number 10 [ 243.267258][ T7830] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 244.976410][ T7871] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1232'. [ 245.094335][ T7877] loop5: detected capacity change from 0 to 256 [ 245.146082][ T7877] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 245.176232][ T6418] usb 3-1: USB disconnect, device number 13 [ 245.259545][ T7880] loop1: detected capacity change from 0 to 16 [ 245.316049][ T7880] erofs: (device loop1): mounted with root inode @ nid 36. [ 245.371929][ T7880] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -2 in[1, 1416] out[3560] [ 245.390585][ T7880] erofs: (device loop1): erofs_readdir: fail to readdir of logical block 80 of nid 36 [ 245.622584][ T7891] loop1: detected capacity change from 0 to 256 [ 245.634403][ T7891] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 245.652914][ T7891] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010364, chksum : 0x44009a1b, utbl_chksum : 0xe619d30d) [ 245.676728][ T26] audit: type=1326 audit(1773983392.700:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7889 comm="syz.1.1241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f2719c799 code=0x7ffc0000 [ 245.721311][ T26] audit: type=1326 audit(1773983392.700:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7889 comm="syz.1.1241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f2719c799 code=0x7ffc0000 [ 245.758025][ T6418] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 245.788544][ T26] audit: type=1326 audit(1773983392.710:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7889 comm="syz.1.1241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7f2719c799 code=0x7ffc0000 [ 245.843282][ T26] audit: type=1326 audit(1773983392.800:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7889 comm="syz.1.1241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f2719c799 code=0x7ffc0000 [ 245.890256][ T7331] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 245.937771][ T6418] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 245.948003][ T26] audit: type=1326 audit(1773983392.800:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7889 comm="syz.1.1241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f2719c799 code=0x7ffc0000 [ 245.977796][ T6418] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 246.004341][ T6418] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 246.027091][ T6418] usb 3-1: config 0 interface 0 has no altsetting 0 [ 246.045985][ T6418] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 246.058064][ T6418] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 246.099868][ T6418] usb 3-1: config 0 interface 0 has no altsetting 0 [ 246.110605][ T7331] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 246.125247][ T7331] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.129617][ T6418] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 246.166141][ T7331] usb 1-1: config 0 descriptor?? [ 246.177141][ T6418] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 246.202063][ T6418] usb 3-1: config 0 interface 0 has no altsetting 0 [ 246.216823][ T7331] cp210x 1-1:0.0: cp210x converter detected [ 246.240517][ T6418] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 246.260609][ T6418] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 246.302183][ T6418] usb 3-1: config 0 interface 0 has no altsetting 0 [ 246.333551][ T6418] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 246.361138][ T6418] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 246.409006][ T6418] usb 3-1: config 0 interface 0 has no altsetting 0 [ 246.429475][ T6418] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 246.452230][ T6418] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 246.493673][ T6418] usb 3-1: config 0 interface 0 has no altsetting 0 [ 246.532892][ T6418] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 246.552474][ T6418] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 246.578258][ T6418] usb 3-1: config 0 interface 0 has no altsetting 0 [ 246.601719][ T6418] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 246.620541][ T7910] loop3: detected capacity change from 0 to 512 [ 246.627156][ T6418] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 246.640322][ T7331] cp210x 1-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 246.678245][ T7910] EXT4-fs error (device loop3): ext4_orphan_get:1399: inode #15: comm syz.3.1249: inode has both inline data and extents flags [ 246.692099][ T6418] usb 3-1: config 0 interface 0 has no altsetting 0 [ 246.698818][ T7331] usb 1-1: cp210x converter now attached to ttyUSB0 [ 246.707831][ T7910] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.1249: couldn't read orphan inode 15 (err -117) [ 246.729475][ T6418] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 246.738823][ T6418] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 246.751562][ T6418] usb 3-1: Product: syz [ 246.755801][ T6418] usb 3-1: Manufacturer: syz [ 246.760751][ T6418] usb 3-1: SerialNumber: syz [ 246.768130][ T6418] usb 3-1: config 0 descriptor?? [ 246.773434][ T7910] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 246.785230][ T6418] yurex 3-1:0.0: USB YUREX device now attached to Yurex #0 [ 246.876245][ T7331] usb 1-1: USB disconnect, device number 16 [ 246.920583][ T7331] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 246.963971][ T7917] input: syz0 as /devices/virtual/input/input22 [ 247.140958][ C0] usb 3-1: yurex_control_callback - control failed: -71 [ 247.162642][ T7331] cp210x 1-1:0.0: device disconnected [ 247.182849][ T7330] usb 3-1: USB disconnect, device number 14 [ 247.224191][ T7330] yurex 3-1:0.0: USB YUREX #0 now disconnected [ 247.255986][ T4271] EXT4-fs (loop3): unmounting filesystem. [ 247.398295][ T7926] loop5: detected capacity change from 0 to 256 [ 247.425994][ T7926] exfat: Bad value for 'uid' [ 247.657293][ T4278] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 247.666401][ T4278] Bluetooth: hci4: Injecting HCI hardware error event [ 247.678443][ T4278] Bluetooth: hci4: hardware error 0x00 [ 247.717086][ T7331] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 247.917094][ T7331] usb 6-1: Using ep0 maxpacket: 16 [ 247.924823][ T7331] usb 6-1: unable to get BOS descriptor or descriptor too short [ 247.958388][ T7331] usb 6-1: config 1 has an invalid interface number: 206 but max is 0 [ 247.985129][ T7331] usb 6-1: config 1 has no interface number 0 [ 248.019695][ T7331] usb 6-1: string descriptor 0 read error: -22 [ 248.061053][ T7331] usb 6-1: New USB device found, idVendor=152d, idProduct=0310, bcdDevice=3b.0a [ 248.100892][ T7331] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.353672][ T7331] usb 6-1: USB disconnect, device number 3 [ 248.570709][ T7960] loop3: detected capacity change from 0 to 1024 [ 248.638264][ T7960] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 248.722115][ T7960] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 249.066594][ T4271] EXT4-fs (loop3): unmounting filesystem. [ 249.362716][ T7965] loop1: detected capacity change from 0 to 32768 [ 249.479369][ T7965] XFS (loop1): Mounting V5 Filesystem [ 249.536559][ T7965] XFS (loop1): Ending clean mount [ 249.557626][ T7965] XFS (loop1): Quotacheck needed: Please wait. [ 249.713525][ T7965] XFS (loop1): Quotacheck: Done. [ 249.737451][ T4278] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 249.899530][ T6848] XFS (loop1): Unmounting Filesystem [ 249.996866][ T7988] loop3: detected capacity change from 0 to 32768 [ 250.073816][ T8001] loop2: detected capacity change from 0 to 512 [ 250.149986][ T8001] EXT4-fs: inline encryption not supported [ 250.202228][ T8001] EXT4-fs: Ignoring removed mblk_io_submit option [ 250.246440][ T8001] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 250.290579][ T8001] EXT4-fs (loop2): Test dummy encryption mode enabled [ 250.322150][ T8001] EXT4-fs (loop2): orphan cleanup on readonly fs [ 250.336758][ T8001] EXT4-fs error (device loop2): ext4_orphan_get:1399: comm syz.2.1277: inode #13: comm syz.2.1277: iget: illegal inode # [ 250.365465][ T8001] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.1277: couldn't read orphan inode 13 (err -117) [ 250.396713][ T8001] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 250.486829][ T8001] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 250.527774][ T8001] EXT4-fs error (device loop2): __ext4_remount:6644: comm syz.2.1277: Abort forced by user [ 250.546521][ T8006] loop5: detected capacity change from 0 to 256 [ 250.560626][ T8001] EXT4-fs (loop2): Remounting filesystem read-only [ 250.580039][ T8001] EXT4-fs (loop2): re-mounted. Quota mode: none. [ 250.602601][ T8007] EXT4-fs error (device loop2): __ext4_remount:6644: comm syz.2.1277: Abort forced by user [ 250.616355][ T8006] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 250.649294][ T8009] input: syz0 as /devices/virtual/input/input23 [ 250.667451][ T8007] EXT4-fs (loop2): Remounting filesystem read-only [ 250.675980][ T26] audit: type=1800 audit(1773983397.700:46): pid=8006 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1279" name="file1" dev="loop5" ino=1048628 res=0 errno=0 [ 250.680900][ T8007] EXT4-fs (loop2): re-mounted. Quota mode: none. [ 250.802829][ T8006] FAT-fs (loop5): error, corrupted file size (i_pos 196, 269308) [ 250.849224][ T8006] FAT-fs (loop5): Filesystem has been set read-only [ 250.887459][ T8006] FAT-fs (loop5): error, corrupted file size (i_pos 196, 269308) [ 250.960788][ T8006] FAT-fs (loop5): error, corrupted file size (i_pos 196, 269308) [ 251.023419][ T4267] EXT4-fs (loop2): unmounting filesystem. [ 251.034904][ T8015] loop6: detected capacity change from 0 to 7 [ 251.047335][ T8006] FAT-fs (loop5): error, corrupted file size (i_pos 196, 269308) [ 251.124759][ T8015] Dev loop6: unable to read RDB block 7 [ 251.153955][ T8015] loop6: unable to read partition table [ 251.184305][ T8015] loop6: partition table beyond EOD, truncated [ 251.227266][ T8015] loop_reread_partitions: partition scan of loop6 (Sj̖P=ý?}X %`ր5) failed (rc=-5) [ 251.336107][ T3638] Dev loop6: unable to read RDB block 7 [ 251.367743][ T3638] loop6: unable to read partition table [ 251.373672][ T3638] loop6: partition table beyond EOD, truncated [ 251.739310][ T8033] loop8: detected capacity change from 0 to 8 [ 251.764432][ T8033] loop8: [POWERTEC] p1 p2 p3 p4 p5 p6 p7 p8 p9 p10 p11 [ 251.801573][ T8033] loop8: p1 start 912119244 is beyond EOD, truncated [ 251.828722][ T8033] loop8: p2 start 2949906769 is beyond EOD, truncated [ 251.853303][ T8033] loop8: p3 start 3740906666 is beyond EOD, truncated [ 251.883634][ T8033] loop8: p4 start 2974154542 is beyond EOD, truncated [ 251.916173][ T8033] loop8: p5 start 2946449176 is beyond EOD, truncated [ 251.951273][ T8033] loop8: p6 start 1287082477 is beyond EOD, truncated [ 251.985677][ T8033] loop8: p7 start 3756907806 is beyond EOD, truncated [ 252.014832][ T8033] loop8: p8 start 974053343 is beyond EOD, truncated [ 252.041575][ T8033] loop8: p9 start 175385606 is beyond EOD, truncated [ 252.066254][ T8033] loop8: p10 start 1987014430 is beyond EOD, truncated [ 252.097379][ T8033] loop8: p11 start 1637589159 is beyond EOD, truncated [ 252.667105][ T4312] usb 3-1: new full-speed USB device number 15 using dummy_hcd [ 252.869277][ T4312] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 252.914394][ T4312] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 252.947350][ T4312] usb 3-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 252.974593][ T4312] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 253.008259][ T4312] usb 3-1: config 0 descriptor?? [ 253.389276][ T8074] loop0: detected capacity change from 0 to 512 [ 253.449849][ T4312] isku 0003:1E7D:319C.000D: unknown main item tag 0x0 [ 253.456743][ T4312] isku 0003:1E7D:319C.000D: unknown main item tag 0x0 [ 253.487237][ T4312] isku 0003:1E7D:319C.000D: unknown main item tag 0x0 [ 253.514583][ T4312] isku 0003:1E7D:319C.000D: unknown main item tag 0x0 [ 253.534814][ T4312] isku 0003:1E7D:319C.000D: unknown main item tag 0x0 [ 253.591448][ T8074] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 253.622826][ T4312] isku 0003:1E7D:319C.000D: unknown main item tag 0x0 [ 253.687445][ T8074] ext4 filesystem being mounted at /264/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 253.735006][ T4312] isku 0003:1E7D:319C.000D: unknown main item tag 0x0 [ 253.797608][ T4312] isku 0003:1E7D:319C.000D: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.2-1/input0 [ 253.970381][ T4266] EXT4-fs (loop0): unmounting filesystem. [ 254.066892][ T4312] usb 3-1: USB disconnect, device number 15 [ 254.306164][ T8090] fido_id[8090]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 254.637288][ T4804] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 254.835405][ T4804] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 254.857082][ T4804] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 254.925535][ T4804] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 254.967048][ T4804] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 254.989170][ T4804] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 255.055239][ T4804] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 255.092055][ T4804] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 255.117490][ T4804] usb 4-1: Product: syz [ 255.121747][ T4804] usb 4-1: Manufacturer: syz [ 255.158404][ T4804] cdc_wdm 4-1:1.0: skipping garbage [ 255.163793][ T4804] cdc_wdm 4-1:1.0: skipping garbage [ 255.199321][ T4804] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 255.205489][ T4804] cdc_wdm 4-1:1.0: Unknown control protocol [ 255.532653][ T8131] loop1: detected capacity change from 0 to 1024 [ 255.582226][ T8131] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 255.649776][ T8135] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1320'. [ 255.732995][ T8135] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1320'. [ 255.764304][ T6848] EXT4-fs (loop1): unmounting filesystem. [ 255.834427][ T1272] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.879045][ T7330] usb 4-1: USB disconnect, device number 16 [ 256.227222][ T4312] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 256.448951][ T4312] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 256.487111][ T4312] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 256.527334][ T4312] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 256.581176][ T4312] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 256.607222][ T4312] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.649651][ T4312] usb 6-1: config 0 descriptor?? [ 257.089667][ T4312] plantronics 0003:047F:FFFF.000E: No inputs registered, leaving [ 257.156753][ T4312] plantronics 0003:047F:FFFF.000E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 257.183392][ T8171] loop0: detected capacity change from 0 to 128 [ 257.246171][ T8171] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 257.312639][ T8171] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 257.370092][ T7330] usb 6-1: USB disconnect, device number 4 [ 257.544115][ T8157] loop2: detected capacity change from 0 to 32768 [ 257.606737][ T8175] fido_id[8175]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 257.687896][ T8157] XFS (loop2): Mounting V5 Filesystem [ 257.839053][ T4320] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 257.902464][ T8157] XFS (loop2): Ending clean mount [ 257.957289][ T8157] XFS (loop2): Quotacheck needed: Please wait. [ 258.118558][ T8157] XFS (loop2): Quotacheck: Done. [ 258.572331][ T4267] XFS (loop2): Unmounting Filesystem [ 259.200971][ T4320] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.462041][ T8223] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=io+mem,decodes=none:owns=io+mem [ 259.520640][ T4320] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.633854][ T8229] loop2: detected capacity change from 0 to 128 [ 259.837740][ T8234] loop3: detected capacity change from 0 to 512 [ 259.854426][ T4320] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.979893][ T8234] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 260.037200][ T8234] ext4 filesystem being mounted at /260/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 260.099700][ T4320] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.315995][ T4271] EXT4-fs (loop3): unmounting filesystem. [ 260.645831][ T48] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 260.658544][ T48] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 260.672090][ T48] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 260.682397][ T48] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 260.697242][ T48] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 260.704729][ T48] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 261.432301][ T8272] netlink: 'syz.3.1362': attribute type 2 has an invalid length. [ 261.991377][ T8254] chnl_net:caif_netlink_parms(): no params data found [ 262.537372][ T4277] Bluetooth: hci0: command 0x1407 tx timeout [ 262.537849][ T4278] Bluetooth: hci0: Opcode 0x1407 failed: -110 [ 262.557350][ T8254] bridge0: port 1(bridge_slave_0) entered blocking state [ 262.571269][ T8254] bridge0: port 1(bridge_slave_0) entered disabled state [ 262.627778][ T8254] device bridge_slave_0 entered promiscuous mode [ 262.659340][ T8299] loop3: detected capacity change from 0 to 64 [ 262.777330][ T4278] Bluetooth: hci3: command 0x0409 tx timeout [ 263.167933][ T8310] netlink: 200 bytes leftover after parsing attributes in process `syz.0.1374'. [ 263.193618][ T8254] bridge0: port 2(bridge_slave_1) entered blocking state [ 263.211414][ T8254] bridge0: port 2(bridge_slave_1) entered disabled state [ 263.233162][ T8254] device bridge_slave_1 entered promiscuous mode [ 263.352862][ T8314] loop2: detected capacity change from 0 to 128 [ 263.379664][ T8314] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 263.471897][ T8314] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 263.552963][ T8321] loop0: detected capacity change from 0 to 512 [ 263.645730][ T8321] EXT4-fs (loop0): Test dummy encryption mode enabled [ 263.726364][ T8254] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 263.763673][ T8321] EXT4-fs error (device loop0): ext4_orphan_get:1399: inode #15: comm syz.0.1377: inode has both inline data and extents flags [ 263.781946][ T9] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 263.781987][ T8321] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.1377: couldn't read orphan inode 15 (err -117) [ 263.808134][ T8321] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 263.871786][ T8254] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 263.938213][ T4320] device hsr_slave_0 left promiscuous mode [ 263.989134][ T4320] device hsr_slave_1 left promiscuous mode [ 264.016066][ T4320] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 264.044757][ T4320] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 264.087883][ T4320] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 264.095393][ T4320] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 264.138260][ T4320] device bridge_slave_1 left promiscuous mode [ 264.177399][ T4320] bridge0: port 2(bridge_slave_1) entered disabled state [ 264.186923][ T4320] device bridge_slave_0 left promiscuous mode [ 264.194068][ T4320] bridge0: port 1(bridge_slave_0) entered disabled state [ 264.372519][ T4320] device veth1_macvtap left promiscuous mode [ 264.397080][ T4320] device veth0_macvtap left promiscuous mode [ 264.403242][ T4320] device veth1_vlan left promiscuous mode [ 264.437294][ T4320] device veth0_vlan left promiscuous mode [ 264.652093][ T8319] loop5: detected capacity change from 0 to 32768 [ 264.683490][ T4266] EXT4-fs (loop0): unmounting filesystem. [ 264.862658][ T8353] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 264.867178][ T4278] Bluetooth: hci3: command 0x041b tx timeout [ 264.874170][ T8353] overlayfs: fs on './file0' does not support file handles, falling back to xino=off. [ 264.899509][ T8319] XFS (loop5): Mounting V5 Filesystem [ 265.014178][ T8319] XFS (loop5): Ending clean mount [ 265.052323][ T8319] XFS (loop5): Quotacheck needed: Please wait. [ 265.257710][ T8319] XFS (loop5): Quotacheck: Done. [ 265.472458][ T6855] XFS (loop5): Unmounting Filesystem [ 266.731948][ T4320] team0 (unregistering): Port device team_slave_1 removed [ 266.808595][ T4320] team0 (unregistering): Port device team_slave_0 removed [ 266.882205][ T4320] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 266.942599][ T4278] Bluetooth: hci3: command 0x040f tx timeout [ 266.970043][ T4320] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 267.575477][ T4320] bond0 (unregistering): Released all slaves [ 267.825519][ T8254] team0: Port device team_slave_0 added [ 267.849528][ T8254] team0: Port device team_slave_1 added [ 268.009888][ T8254] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 268.033662][ T8254] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 268.113308][ T8254] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 268.154228][ T8254] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 268.187166][ T8254] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 268.296483][ T8254] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 268.542644][ T8254] device hsr_slave_0 entered promiscuous mode [ 268.554710][ T8254] device hsr_slave_1 entered promiscuous mode [ 269.017545][ T48] Bluetooth: hci3: command 0x0419 tx timeout [ 269.156869][ T8380] loop3: detected capacity change from 0 to 40427 [ 269.232664][ T8380] F2FS-fs (loop3): build fault injection attr: rate: 771, type: 0x3ffff [ 269.311675][ T8380] F2FS-fs (loop3): invalid crc value [ 269.333878][ T8380] F2FS-fs (loop3): Found nat_bits in checkpoint [ 269.410300][ T8254] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 269.481253][ T8254] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 269.528330][ T8254] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 269.567788][ T8418] loop0: detected capacity change from 0 to 512 [ 269.610239][ T8254] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 269.631178][ T8380] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 269.637806][ T8418] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 269.704404][ T7332] kernel write not supported for file /vcs (pid: 7332 comm: kworker/1:17) [ 269.755045][ T8418] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #16: comm syz.0.1402: invalid indirect mapped block 4294967295 (level 0) [ 269.847310][ T8418] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #16: comm syz.0.1402: invalid indirect mapped block 4294967295 (level 1) [ 269.958366][ T8380] syz.3.1392: attempt to access beyond end of device [ 269.958366][ T8380] loop3: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 269.958680][ T8418] EXT4-fs (loop0): 1 orphan inode deleted [ 270.054221][ T8254] 8021q: adding VLAN 0 to HW filter on device bond0 [ 270.078031][ T8418] EXT4-fs (loop0): 1 truncate cleaned up [ 270.103711][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 270.112074][ T8418] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 270.124934][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 270.164928][ T8254] 8021q: adding VLAN 0 to HW filter on device team0 [ 270.168583][ T8380] syz.3.1392: attempt to access beyond end of device [ 270.168583][ T8380] loop3: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 270.225347][ T4884] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 270.253250][ T4884] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 270.282518][ T8418] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1111: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 270.318900][ T4884] bridge0: port 1(bridge_slave_0) entered blocking state [ 270.326295][ T4884] bridge0: port 1(bridge_slave_0) entered forwarding state [ 270.392615][ T4884] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 270.469040][ T4884] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 270.513865][ T4884] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 270.544706][ T4884] bridge0: port 2(bridge_slave_1) entered blocking state [ 270.552053][ T4884] bridge0: port 2(bridge_slave_1) entered forwarding state [ 270.573781][ T4266] EXT4-fs (loop0): unmounting filesystem. [ 270.624320][ T4884] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 270.643641][ T4271] syz-executor: attempt to access beyond end of device [ 270.643641][ T4271] loop3: rw=2049, sector=45112, nr_sectors = 8 limit=40427 [ 270.685003][ T4884] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 270.846626][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 270.872209][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 270.997739][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 271.009557][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 271.042558][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 271.068438][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 271.097782][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 271.138417][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 271.168458][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 271.364903][ T8254] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 271.629929][ T4884] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.685583][ T7330] hid-generic 0003:FF00:0000.000F: unknown main item tag 0x0 [ 271.732921][ T7330] hid-generic 0003:FF00:0000.000F: unknown main item tag 0x0 [ 271.768284][ T7330] hid-generic 0003:FF00:0000.000F: unknown main item tag 0x0 [ 271.775781][ T7330] hid-generic 0003:FF00:0000.000F: unknown main item tag 0x0 [ 271.864606][ T7330] hid-generic 0003:FF00:0000.000F: unknown main item tag 0x0 [ 271.892505][ T7330] hid-generic 0003:FF00:0000.000F: unknown main item tag 0x0 [ 271.927225][ T7330] hid-generic 0003:FF00:0000.000F: unknown main item tag 0x0 [ 271.956729][ T7330] hid-generic 0003:FF00:0000.000F: unknown main item tag 0x0 [ 271.980941][ T7330] hid-generic 0003:FF00:0000.000F: unknown main item tag 0x0 [ 272.005149][ T7330] hid-generic 0003:FF00:0000.000F: unknown main item tag 0x0 [ 272.030950][ T7330] hid-generic 0003:FF00:0000.000F: unknown main item tag 0x0 [ 272.052127][ T7330] hid-generic 0003:FF00:0000.000F: unknown main item tag 0x0 [ 272.075418][ T7330] hid-generic 0003:FF00:0000.000F: unknown main item tag 0x0 [ 272.086868][ T7330] hid-generic 0003:FF00:0000.000F: unknown main item tag 0x0 [ 272.100771][ T7330] hid-generic 0003:FF00:0000.000F: unknown main item tag 0x0 [ 272.111130][ T7330] hid-generic 0003:FF00:0000.000F: unknown main item tag 0x0 [ 272.131660][ T7330] hid-generic 0003:FF00:0000.000F: unknown main item tag 0x0 [ 272.158632][ T7330] hid-generic 0003:FF00:0000.000F: unknown main item tag 0x0 [ 272.219989][ T7330] hid-generic 0003:FF00:0000.000F: hidraw0: USB HID v0.04 Device [syz1] on syz1 [ 272.457353][ T7331] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 272.504684][ T4884] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.574924][ T8462] fido_id[8462]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 272.647078][ T7331] usb 1-1: Using ep0 maxpacket: 32 [ 272.654280][ T7331] usb 1-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 272.717122][ T7331] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 272.790149][ T7331] usb 1-1: config 0 descriptor?? [ 272.849963][ T7331] gspca_main: sunplus-2.14.0 probing 041e:400b [ 272.858833][ T48] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 272.878781][ T48] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 272.890710][ T48] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 272.917240][ T48] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 272.926325][ T4884] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.938687][ T48] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 272.946084][ T48] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 273.001675][ T8471] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1418'. [ 273.022752][ T8471] (unnamed net_device) (uninitialized): option ad_select: invalid value (36) [ 273.175857][ T4884] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.187984][ T8464] loop3: detected capacity change from 0 to 32768 [ 273.268448][ T6789] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 273.276065][ T6789] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 273.313677][ T8254] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 273.452639][ T8464] JBD2: Ignoring recovery information on journal [ 273.545588][ T8464] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 273.810264][ T7331] gspca_sunplus: reg_w_riv err -71 [ 273.815541][ T7331] sunplus: probe of 1-1:0.0 failed with error -71 [ 273.860752][ T7331] usb 1-1: USB disconnect, device number 17 [ 274.315244][ T4271] ocfs2: Unmounting device (7,3) on (node local) [ 274.359096][ T8494] input: syz0 as /devices/virtual/input/input24 [ 274.557276][ T8468] chnl_net:caif_netlink_parms(): no params data found [ 274.573867][ T8500] loop3: detected capacity change from 0 to 512 [ 274.724653][ T8500] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 274.768854][ T8500] ext4 filesystem being mounted at /274/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 274.847940][ T8504] loop5: detected capacity change from 0 to 256 [ 274.864031][ T8500] EXT4-fs error (device loop3): ext4_readdir:263: inode #12: block 32: comm syz.3.1421: path /274/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 274.965063][ T8500] EXT4-fs (loop3): Remounting filesystem read-only [ 275.027588][ T48] Bluetooth: hci1: command 0x0409 tx timeout [ 275.214876][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 275.228241][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 275.434314][ T4271] EXT4-fs (loop3): unmounting filesystem. [ 275.543331][ T6789] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 275.562713][ T6789] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 275.598219][ T8468] bridge0: port 1(bridge_slave_0) entered blocking state [ 275.605576][ T8468] bridge0: port 1(bridge_slave_0) entered disabled state [ 275.645204][ T8468] device bridge_slave_0 entered promiscuous mode [ 275.785622][ T6789] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 275.797700][ T6789] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 275.828683][ T8468] bridge0: port 2(bridge_slave_1) entered blocking state [ 275.836289][ T8468] bridge0: port 2(bridge_slave_1) entered disabled state [ 275.874392][ T8523] overlayfs: maximum fs stacking depth exceeded [ 275.880919][ T8468] device bridge_slave_1 entered promiscuous mode [ 275.903908][ T8254] device veth0_vlan entered promiscuous mode [ 275.919825][ T8519] loop3: detected capacity change from 0 to 4096 [ 276.052021][ T8254] device veth1_vlan entered promiscuous mode [ 276.089676][ T8468] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 276.279354][ T8468] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 276.337332][ T8530] loop5: detected capacity change from 0 to 512 [ 276.417714][ T6789] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 276.430243][ T6789] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 276.452078][ T8254] device veth0_macvtap entered promiscuous mode [ 276.480481][ T8530] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #11: comm syz.5.1428: invalid indirect mapped block 256 (level 2) [ 276.643204][ T8530] EXT4-fs (loop5): 2 truncates cleaned up [ 276.651936][ T8254] device veth1_macvtap entered promiscuous mode [ 276.690848][ T8468] team0: Port device team_slave_0 added [ 276.697943][ T8530] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 276.875647][ T6855] EXT4-fs (loop5): unmounting filesystem. [ 277.016712][ T8468] team0: Port device team_slave_1 added [ 277.039182][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 277.064133][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 277.097364][ T48] Bluetooth: hci1: command 0x041b tx timeout [ 277.149237][ T8547] loop5: detected capacity change from 0 to 256 [ 277.161781][ T8254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 277.188024][ T8254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.199058][ T8254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 277.247068][ T8254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.285925][ T8254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 277.337081][ T8254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.371657][ T8254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 277.406053][ T8254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.446917][ T8254] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 277.579404][ T6789] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 277.604439][ T6789] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 277.642143][ T8254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 277.668435][ T8254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.700488][ T8254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 277.713843][ T8254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.732235][ T8254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 277.744929][ T8254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.762664][ T8254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 277.774339][ T8254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.795379][ T8254] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 277.842612][ T8560] loop5: detected capacity change from 0 to 8192 [ 277.899731][ T8560] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 277.916422][ T8560] REISERFS (device loop5): found reiserfs format "3.5" with non-standard journal [ 277.926235][ T8560] REISERFS (device loop5): using ordered data mode [ 277.933096][ T8560] reiserfs: using flush barriers [ 277.950760][ T8560] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 277.969906][ T8560] REISERFS (device loop5): checking transaction log (loop5) [ 277.982960][ T8560] REISERFS (device loop5): Using r5 hash to sort names [ 277.990548][ T8560] REISERFS (device loop5): using 3.5.x disk format [ 277.997800][ T8560] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage. [ 278.034476][ T8468] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 278.045648][ T8468] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 278.082549][ T8468] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 278.114425][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 278.131483][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 278.148863][ T8254] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.164852][ T8254] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.174614][ T8254] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.194601][ T8254] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.295666][ T7331] kernel write not supported for file /input/mice (pid: 7331 comm: kworker/1:16) [ 278.401587][ T8468] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 278.417139][ T8468] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 278.507131][ T8468] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 278.529274][ T4884] device hsr_slave_0 left promiscuous mode [ 278.567487][ T4884] device hsr_slave_1 left promiscuous mode [ 278.586091][ T4884] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 278.600800][ T4884] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 278.618533][ T4884] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 278.626155][ T4884] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 278.673285][ T4884] device veth1_macvtap left promiscuous mode [ 278.685168][ T4884] device veth0_macvtap left promiscuous mode [ 278.693540][ T4884] device veth1_vlan left promiscuous mode [ 278.710231][ T4884] device veth0_vlan left promiscuous mode [ 278.970788][ T8568] loop0: detected capacity change from 0 to 32768 [ 279.011475][ T8568] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.1438 (8568) [ 279.075284][ T8568] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 279.103618][ T8568] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 279.123166][ T8568] BTRFS info (device loop0): enabling auto defrag [ 279.132527][ T8568] BTRFS info (device loop0): max_inline at 0 [ 279.140086][ T8568] BTRFS info (device loop0): enabling ssd optimizations [ 279.155808][ T8568] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_LZO (0x8) [ 279.175290][ T8568] BTRFS info (device loop0): use lzo compression, level 0 [ 279.178758][ T48] Bluetooth: hci1: command 0x040f tx timeout [ 279.191848][ T8568] BTRFS info (device loop0): using free space tree [ 279.287390][ T5875] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 279.484001][ T5875] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 279.510853][ T5875] usb 4-1: config 0 has no interface number 0 [ 279.541829][ T5875] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 279.602889][ T5875] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 279.624159][ T5875] usb 4-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 279.654038][ T5875] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.675028][ T5875] usb 4-1: config 0 descriptor?? [ 279.746161][ T26] audit: type=1800 audit(1773983426.770:47): pid=8568 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1438" name="file1" dev="loop0" ino=260 res=0 errno=0 [ 279.921057][ T29] BUG: spinlock bad magic on CPU#1, kworker/u4:2/29 [ 279.927818][ T29] general protection fault, probably for non-canonical address 0xdffffc00000040b6: 0000 [#1] PREEMPT SMP KASAN [ 279.939757][ T29] KASAN: probably user-memory-access in range [0x00000000000205b0-0x00000000000205b7] [ 279.949603][ T29] CPU: 1 PID: 29 Comm: kworker/u4:2 Not tainted syzkaller #0 [ 279.957111][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 279.967233][ T29] Workqueue: btrfs-endio btrfs_end_bio_work [ 279.973191][ T29] RIP: 0010:spin_dump+0xc0/0x1a0 [ 279.978227][ T29] Code: 41 8b 17 49 8d 46 01 48 83 f8 02 73 0f 41 b8 ff ff ff ff 49 c7 c6 a0 68 8c 8a eb 25 4d 8d be b8 05 00 00 4c 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 0f 85 af 00 00 00 49 81 c6 b0 08 00 00 45 8b [ 279.997886][ T29] RSP: 0018:ffffc90000a5f908 EFLAGS: 00010003 [ 280.004106][ T29] RAX: 00000000000040b6 RBX: ffffc900035a77b0 RCX: 826bbd3f90acd400 [ 280.012255][ T29] RDX: 000000001ffff920 RSI: 0000000080000001 RDI: 0000000000000000 [ 280.020285][ T29] RBP: ffffc90000a5f9f0 R08: ffffc90000a5f607 R09: 1ffff9200014bec0 [ 280.028296][ T29] R10: dffffc0000000000 R11: fffff5200014bec1 R12: dffffc0000000000 [ 280.036286][ T29] R13: 0000000000000003 R14: 000000000001ffff R15: 00000000000205b7 [ 280.044534][ T29] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 280.053484][ T29] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 280.060114][ T29] CR2: 00007f302314da08 CR3: 0000000064953000 CR4: 00000000003506e0 [ 280.068141][ T29] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 280.076414][ T29] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 280.084498][ T29] Call Trace: [ 280.087848][ T29] [ 280.090995][ T29] do_raw_spin_lock+0x1de/0x2f0 [ 280.095871][ T29] ? read_lock_is_recursive+0x10/0x10 [ 280.101287][ T29] ? __rwlock_init+0x140/0x140 [ 280.106084][ T29] _raw_spin_lock_irqsave+0xbc/0x100 [ 280.111414][ T29] ? _raw_spin_lock+0x40/0x40 [ 280.116161][ T29] __wake_up+0x107/0x1a0 [ 280.120438][ T29] ? __wake_up_bit+0x210/0x210 [ 280.125240][ T29] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 280.131272][ T29] btrfs_encoded_read_endio+0x500/0x640 [ 280.136857][ T29] ? process_one_work+0x7b0/0x1160 [ 280.141995][ T29] process_one_work+0x8a2/0x1160 [ 280.146992][ T29] ? worker_detach_from_pool+0x240/0x240 [ 280.152689][ T29] ? _raw_spin_lock_irq+0xb7/0xf0 [ 280.157774][ T29] ? _raw_spin_lock_irqsave+0x100/0x100 [ 280.163465][ T29] ? kthread_data+0x4b/0xc0 [ 280.168038][ T29] worker_thread+0xaa2/0x1270 [ 280.172810][ T29] kthread+0x29d/0x330 [ 280.176926][ T29] ? worker_clr_flags+0x1a0/0x1a0 [ 280.182018][ T29] ? kthread_blkcg+0xd0/0xd0 [ 280.186628][ T29] ret_from_fork+0x1f/0x30 [ 280.191077][ T29] [ 280.194116][ T29] Modules linked in: [ 280.198041][ T29] ---[ end trace 0000000000000000 ]--- [ 280.203514][ T29] RIP: 0010:spin_dump+0xc0/0x1a0 [ 280.208486][ T29] Code: 41 8b 17 49 8d 46 01 48 83 f8 02 73 0f 41 b8 ff ff ff ff 49 c7 c6 a0 68 8c 8a eb 25 4d 8d be b8 05 00 00 4c 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 0f 85 af 00 00 00 49 81 c6 b0 08 00 00 45 8b [ 280.228138][ T29] RSP: 0018:ffffc90000a5f908 EFLAGS: 00010003 [ 280.234222][ T29] RAX: 00000000000040b6 RBX: ffffc900035a77b0 RCX: 826bbd3f90acd400 [ 280.242249][ T29] RDX: 000000001ffff920 RSI: 0000000080000001 RDI: 0000000000000000 [ 280.250238][ T29] RBP: ffffc90000a5f9f0 R08: ffffc90000a5f607 R09: 1ffff9200014bec0 [ 280.258248][ T29] R10: dffffc0000000000 R11: fffff5200014bec1 R12: dffffc0000000000 [ 280.266362][ T29] R13: 0000000000000003 R14: 000000000001ffff R15: 00000000000205b7 [ 280.274355][ T29] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 280.283308][ T29] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 280.290096][ T29] CR2: 00007f302314da08 CR3: 0000000064953000 CR4: 00000000003506e0 [ 280.298090][ T29] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 280.306079][ T29] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 280.314179][ T29] Kernel panic - not syncing: Fatal exception [ 280.320851][ T29] Kernel Offset: disabled [ 280.325195][ T29] Rebooting in 86400 seconds..