last executing test programs: 59.528827886s ago: executing program 4 (id=18): syz_mount_image$cramfs(&(0x7f0000000040), &(0x7f0000000000)='./file2\x00', 0x2200400, &(0x7f0000001040)=ANY=[@ANYRES8=0x0], 0xfe, 0x15a, &(0x7f0000000200)="$eJzs0L9rGmEcx/H3c/f0FKrYUgtSaBU61FYKrYVupXilUqH2oKVLJ8Fef4BiiJC4JRKyZRCyOuTHGgKZMmp0CAk65Z/I4hbIaLg7ExPif5Dva7vP9/l+nuP5/GGYVkx9qlXn5t163f2d+u4U8z9OO52cl1vQ2LsxD853c/APTVfDqAle3I/Cn/8V1yjXKt73KAchwL4/yanGLu+z45qmhrcE++nn0HvsnzO4le1f/ecTDXYs6HsDjDfhhQX2wyDz+s4AkzDKmiw9NVktZJKPFDTamd2d42+Do8LrVx/dtWy+9TKSMDNLsIWtwof9vyfmZGs4KH51is7wXTb7/tpLsdxCf4kswC8F2usz8PssEs/0T1hRsO7fNTpQUaC3ce5UQ9OCRTMFKtkulxL3tkvxBwZmWnuTMTP4E8KzRkIIIYQQQgghhBBCCCGEEEIIIe66iwAAAP//aPdRFg==") mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) syz_mount_image$vfat(&(0x7f0000000b00), &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x55011, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000080)='./file1\x00') 59.249820323s ago: executing program 4 (id=26): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x405, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x48}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWCHAIN={0x5c, 0x3, 0xa, 0x405, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_HOOK_DEV={0x14, 0x3, 'netdevsim0\x00'}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x84}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x94, 0x6, 0xa, 0xc05, 0x0, 0x0, {0x5}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x68, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_BASE={0x8}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x17}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x6}, @NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0x1}]}}}, {0x30, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8}, @NFTA_IMMEDIATE_DATA={0x10, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x1}]}]}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0xbc}}, 0x0) 59.106216276s ago: executing program 4 (id=31): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/module/zswap/parameters/compressor\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='deflate\x00', 0x8) 59.017827088s ago: executing program 4 (id=35): syz_mount_image$ext4(&(0x7f0000000140)='ext2\x00', &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f00000000c0), 0x4, 0x48e, &(0x7f0000000d00)="$eJzs3M1vVFUbAPDnTj+AAm/7In6AKFU0NhpbWlBZuACjiQtNTHSBy9oWRAo1bTVCiFYXuDQk7o1LE/8CV7ox6srErbo2JMSwAXVzzZ25t50ZZsZp6TDA/H7J0HPuuZdznnvumZ5zb2cC6Fmj2T9JxI6I+DUihivZ2h1GKz+uX70w89fVCzNJpOnrfybl/a5dvTBT7Foct73IrNRur7Z07vzp6fn5ucU8P7F85t2JpXPnnz51Zvrk3Mm5s1NHjhw+NPncs1PPbEqcWZuu7f1wYd+el9+89OrM8Utv/fh1UsRfE8f77f+nW1uWjjbY1lckHm+/ljvCzqp00t/FhrAub0dE1l0D5fE/HH2x1nnD8dInXW0c0FFpmqZbmhevpMBdLIlutwDojvz3fBKxMpOtgavX883dPQu8K8cq4WRxX89flZL+KOX7DNStbzdTdiaPr/z9RfaKuvspAACd8O2xys9i7rc2/yjVTPKO5s+GRiLi/xGxKyLuiYjdEXFvRNwXEfdHxANVxzR67lOv/iHJjfOf0uUNBdambP73fP5sq3b+V8z+YqQvz+0sxz+QnDg1P3cwIv4XEWMxsCXLT7ao47sXf/msWdlo1fwve2X1F3PBvB2X++tu0M1OL0/fTMzVrnwcsbe/UfzJ6iw/68c9EbF3/8bqOPXkV/ualf13/C1swjIk/TLiiUr/r0Rd/IWk9fPJia0xP3dworgqbvTTzxdfa1b/TcW/CbL+H2p4/a/GP5JUP69dWn8dF3/7tOmaps3rf7D6mOz6H0zeKKeLgg+ml5cXJyMGk1fy7Ufz7bX1lfebWts/i3/sQOPxvyvWzsSDEZFdxA9FxMMRsT9v+yMR8WhEHGgR/w8vPPbOxuPvrCz+2XX1f9NE8Wx7bnEgaor6Tn//Tbmk6KyRFvEn0aD/D5dTY/mWdt7/WrZ08WauZgAAALjzlCJiRySl8dV0qTQ+Xvl7+d0xVJpfWFp+6sTCe2dnK58RGImBUnGna3j1fmisTObL+uL+6FRd/lB+3/jzvm3l/PjMwvxst4OHHre9yfjP/NHX7dYBHXf3/DkfsF4bHf9pmn60yU0BbrF1jf/BzrUDuOWGzP+hdzUY/9vq8i2+IwC4kzX6/W9hD73B/B96l/EPvcv4h961gfH/+1AnGgLcSvkn4fvb+YB/xxLZ+0/3am8nETUtTNMuNWPw9jgb5USUulZ7bPDwsS6dsX/yL9u8PTquzUS335kAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA2x78BAAD//xsC4og=") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x141104, 0x105) getdents64(r0, &(0x7f0000000400)=""/4081, 0xff1) 58.521295931s ago: executing program 4 (id=42): r0 = syz_create_resource$futex(&(0x7f0000000400)=0x1) r1 = syz_create_resource$futex(&(0x7f0000000080)=0x1) futex(r0, 0xb, 0x1, 0x0, r1, 0x2) futex(r0, 0x9, 0x1, &(0x7f0000000040)={0x0, 0x3938700}, 0x0, 0x1) 57.338129721s ago: executing program 4 (id=55): r0 = memfd_create(&(0x7f0000000780)='\x01\xfd\xae.+\xa6\x8c\xb6?2\x199\x94S,|x?Ue[\xbd\xe1!\x033\xbc\'#\xff\x17\x9b%\xf3[d \x06\x00\x00\x00\x97A\xc2\xd8\xf0Uq!\xe4\xc4\xb1\xa2\x1c\xffC;\x94Q\r\xb6}\x9c\xecC\v\xcf\xeb\xe4\x9aR\xe5,\x82\x03\x00\x19\x8d\xe8\xc6\xb9\xe4\xb4\x99\x8a\x19\xe5\xb8\x8cx\b\x99\x04R\x05\xaf\xa2\xea5\f\xcc\x1a\x9b\x00Uf\xa5\xf7\x80Tgiz\nX\b\x91\xfd0\x8e\xb6\xa3\v#\x16\xdf\xb4\xc0\xe6\xb4\xef\xa8i\xd8\xa2\xd2(\x98\x9bA\x8f\x13\xeb\xf4b/\xef!\x8f\xf6]-\xf1k\xb62\x89gEv\x13\xf4\xc7\xb2\xf5\\\x17\x90\xb5\xa6\xa8\xb8o\x0f\xe2 \xe7\x9c$\xd7\xf2@\xf7cdv[\t\x00\x8d\xf3\xcc1\r$\x1e\xff\xf0P\xb2\x97\xb8\xbc\xeb\x91\x87\x8bu\xbf\xd4\'\xff\x1f\f\x016\x9dQ\xeeT\xe8\bY\x00\xb2\x06\xa6\xbel\x9b.o\xbe\x80\x9dx\xd5O\xd6h\\I\xc9\x8d\a\x1d\xc9k\x83\xfc\xa4\xad4\x03\xa2X\x0f\x82\xdbs\xc7\x83L\x9e\xa2\xd1\xb3\xac\x8d\xd8\xb4\xb4\xea\x90Q\xd8\xc7\xeb%\x8bOp\x1ab\x96\xcf\xbb\x15\xcf\xfcN\xed\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00s\xaf\xa2\x14]p+\x96\x1ei|n\xda\xee\\\xae\x96*\x82*\xb8j\xda\xaa\x14\x1f\x1d\xf8\xf8\xae\xfcH\xc4\xb3j\xe8\xcfO\xef\x0e\xafe\xb5*\x89\x18\xb2w\x96\b\x1by\xeaT\xdd\xb3g6\xbc\x85\xb2Y\xccv\x06\x00\x00\x00\xc5e\x90\xc51\x9f\v_# \b\xa5\xbcP,|\xe9\xd6s\x1f\x1f\xbe\xd3\x80\xb1\xa8 \xce|df\x903\v\x02\xea.\x03X\xb5\xe4,8\xb7\xadEI\xdcA\xa7\xcc\xd7\xf9n\x1b\x95\xf8\x11Z\xe6:\x03\xce\xfe\x02\x8ctdy~_oC\x9e\xef\xf0\xa2K\xe9;\x8e:\x01\x03C\x92\xeb\x16\x1c\xbf\xbe\xef\xccUxhg\xdfY\xe6\x83\xa6z\xff\x01\x9d o_{!O\xaajU\x84 \xe9\xb59r\x9cw\x18Z\xd3\xcd\x0e\xba\\\xdb\xf0\xe1\x86\t\xaf\vi\xdc\xbf?\xf5\n\xbd^\x05\xc0\xceuC}\xa8\xc7\xad\x86\xd7\x15&\xb9]1\x05J\x96\xf0\x84\xc1\f\xa6p\x96?\x00\x00\x00\x00\x00\x00\x00\x12\x88\xc8\x9c\xc9Cn\xd4\xa47V\'+\xcc\xbf\r\xa9\x10\x1d\xcf\xebKl\xcc\xa4:\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00G\xdf\xbb\xc0_\x99F\xf4n]\x14\xbc\xcd\xd3\x9f\x9fe\xc5\xe6\xe8Mb\xc6\x82\x82\xcb\xcaXe\xe1\xa2\xaa\x02\x86\xb8\x18\xe2C\xeb\xa9\x17&\x01&\'w\xa1t0\x80\xf0\x93\x80\x9f\x9b\xe0\x9f\xea\xb9\x9eD]#V\xda\x92\xca\xc6\xfa.\xd6\xe31\xfe\xe8\x02\xebX\xbd\nz\x01O\xd3r\xa2\xa9u\x93>m\xd7q\'\xdf\xfajo\xd8n\xa7\xecJi\xde\xdf\x7f\xe3\xc4*Z 4\xe8S$\xa1H=\xdf\x05\xf3\xc3T\xd1\xdd\xc6f\xa4\xb4\x96\\\xa0\xf9\x0f\x17\x11{\xb6\x9d\xd21\xc1\x90Vj\x13r\x00\x00\xde\x03\xab\xff\x8as0\xc6E\xca\"\xd9*\x9a\x15\xb95r\x8f\xaaj\x82\xd6\xd2%\xed\xa2WQ\xec2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xccX\xfdRB\xffU\xe9\xfa\x1f\xf6\xce\b\xde@\x061\xc6z\xe4\xe0\xc9?\xa7\x94>\x9c\xd1\xa5o\x04\xaaim\xae\xfe\xc7f\xa3\x96\xd7\xb4c)r{\r#\xddI&\n\xf2\xec\xd4\xff\x9f\x136zZ-2\x80\xfbH+\x9b8\xf3\xed\xdf\xa2my\xb28c[\xc3\xfe\xb5M\x84\x97\xa5\'s\xe9\xdc=)I\xabLt2\x9c\v\xd9S', 0x6) fallocate(r0, 0x0, 0x9, 0x4) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x300000a, 0x12, r0, 0x0) read(r0, &(0x7f0000000080)=""/221, 0xdd) 57.080271057s ago: executing program 32 (id=55): r0 = memfd_create(&(0x7f0000000780)='\x01\xfd\xae.+\xa6\x8c\xb6?2\x199\x94S,|x?Ue[\xbd\xe1!\x033\xbc\'#\xff\x17\x9b%\xf3[d \x06\x00\x00\x00\x97A\xc2\xd8\xf0Uq!\xe4\xc4\xb1\xa2\x1c\xffC;\x94Q\r\xb6}\x9c\xecC\v\xcf\xeb\xe4\x9aR\xe5,\x82\x03\x00\x19\x8d\xe8\xc6\xb9\xe4\xb4\x99\x8a\x19\xe5\xb8\x8cx\b\x99\x04R\x05\xaf\xa2\xea5\f\xcc\x1a\x9b\x00Uf\xa5\xf7\x80Tgiz\nX\b\x91\xfd0\x8e\xb6\xa3\v#\x16\xdf\xb4\xc0\xe6\xb4\xef\xa8i\xd8\xa2\xd2(\x98\x9bA\x8f\x13\xeb\xf4b/\xef!\x8f\xf6]-\xf1k\xb62\x89gEv\x13\xf4\xc7\xb2\xf5\\\x17\x90\xb5\xa6\xa8\xb8o\x0f\xe2 \xe7\x9c$\xd7\xf2@\xf7cdv[\t\x00\x8d\xf3\xcc1\r$\x1e\xff\xf0P\xb2\x97\xb8\xbc\xeb\x91\x87\x8bu\xbf\xd4\'\xff\x1f\f\x016\x9dQ\xeeT\xe8\bY\x00\xb2\x06\xa6\xbel\x9b.o\xbe\x80\x9dx\xd5O\xd6h\\I\xc9\x8d\a\x1d\xc9k\x83\xfc\xa4\xad4\x03\xa2X\x0f\x82\xdbs\xc7\x83L\x9e\xa2\xd1\xb3\xac\x8d\xd8\xb4\xb4\xea\x90Q\xd8\xc7\xeb%\x8bOp\x1ab\x96\xcf\xbb\x15\xcf\xfcN\xed\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00s\xaf\xa2\x14]p+\x96\x1ei|n\xda\xee\\\xae\x96*\x82*\xb8j\xda\xaa\x14\x1f\x1d\xf8\xf8\xae\xfcH\xc4\xb3j\xe8\xcfO\xef\x0e\xafe\xb5*\x89\x18\xb2w\x96\b\x1by\xeaT\xdd\xb3g6\xbc\x85\xb2Y\xccv\x06\x00\x00\x00\xc5e\x90\xc51\x9f\v_# \b\xa5\xbcP,|\xe9\xd6s\x1f\x1f\xbe\xd3\x80\xb1\xa8 \xce|df\x903\v\x02\xea.\x03X\xb5\xe4,8\xb7\xadEI\xdcA\xa7\xcc\xd7\xf9n\x1b\x95\xf8\x11Z\xe6:\x03\xce\xfe\x02\x8ctdy~_oC\x9e\xef\xf0\xa2K\xe9;\x8e:\x01\x03C\x92\xeb\x16\x1c\xbf\xbe\xef\xccUxhg\xdfY\xe6\x83\xa6z\xff\x01\x9d o_{!O\xaajU\x84 \xe9\xb59r\x9cw\x18Z\xd3\xcd\x0e\xba\\\xdb\xf0\xe1\x86\t\xaf\vi\xdc\xbf?\xf5\n\xbd^\x05\xc0\xceuC}\xa8\xc7\xad\x86\xd7\x15&\xb9]1\x05J\x96\xf0\x84\xc1\f\xa6p\x96?\x00\x00\x00\x00\x00\x00\x00\x12\x88\xc8\x9c\xc9Cn\xd4\xa47V\'+\xcc\xbf\r\xa9\x10\x1d\xcf\xebKl\xcc\xa4:\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00G\xdf\xbb\xc0_\x99F\xf4n]\x14\xbc\xcd\xd3\x9f\x9fe\xc5\xe6\xe8Mb\xc6\x82\x82\xcb\xcaXe\xe1\xa2\xaa\x02\x86\xb8\x18\xe2C\xeb\xa9\x17&\x01&\'w\xa1t0\x80\xf0\x93\x80\x9f\x9b\xe0\x9f\xea\xb9\x9eD]#V\xda\x92\xca\xc6\xfa.\xd6\xe31\xfe\xe8\x02\xebX\xbd\nz\x01O\xd3r\xa2\xa9u\x93>m\xd7q\'\xdf\xfajo\xd8n\xa7\xecJi\xde\xdf\x7f\xe3\xc4*Z 4\xe8S$\xa1H=\xdf\x05\xf3\xc3T\xd1\xdd\xc6f\xa4\xb4\x96\\\xa0\xf9\x0f\x17\x11{\xb6\x9d\xd21\xc1\x90Vj\x13r\x00\x00\xde\x03\xab\xff\x8as0\xc6E\xca\"\xd9*\x9a\x15\xb95r\x8f\xaaj\x82\xd6\xd2%\xed\xa2WQ\xec2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xccX\xfdRB\xffU\xe9\xfa\x1f\xf6\xce\b\xde@\x061\xc6z\xe4\xe0\xc9?\xa7\x94>\x9c\xd1\xa5o\x04\xaaim\xae\xfe\xc7f\xa3\x96\xd7\xb4c)r{\r#\xddI&\n\xf2\xec\xd4\xff\x9f\x136zZ-2\x80\xfbH+\x9b8\xf3\xed\xdf\xa2my\xb28c[\xc3\xfe\xb5M\x84\x97\xa5\'s\xe9\xdc=)I\xabLt2\x9c\v\xd9S', 0x6) fallocate(r0, 0x0, 0x9, 0x4) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x300000a, 0x12, r0, 0x0) read(r0, &(0x7f0000000080)=""/221, 0xdd) 32.560021702s ago: executing program 1 (id=321): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f0000000300)={0x1, 0x0, [{0x82f}]}) 32.388731496s ago: executing program 1 (id=323): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000200)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) 32.27891742s ago: executing program 1 (id=325): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = memfd_secret(0x0) ftruncate(r0, 0x51a9497) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000200)) 32.136481833s ago: executing program 1 (id=329): symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mount$9p_unix(&(0x7f00000000c0)='./file0/file0/..\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x12d7498, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') read$FUSE(r0, &(0x7f00000047c0)={0x2020}, 0xfffffe70) 32.010376756s ago: executing program 1 (id=332): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1df) mount(0x0, &(0x7f0000000100)='./tracing\x00', &(0x7f0000000200)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./tracing/events/sched/filter\x00', 0x1, 0x0) write(r0, &(0x7f0000000400)='common_pid ~ 0', 0xe) 31.573063577s ago: executing program 1 (id=344): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x400) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000140)={0x4000000, 0x4000002, 0x2}) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000200)={0x4000000, 0x1, 0xfffffffffffffffd}) close(r0) 31.344688103s ago: executing program 33 (id=344): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x400) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000140)={0x4000000, 0x4000002, 0x2}) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000200)={0x4000000, 0x1, 0xfffffffffffffffd}) close(r0) 2.226489094s ago: executing program 0 (id=692): mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) wait4(r0, 0x0, 0x2, &(0x7f00000001c0)) 2.186735535s ago: executing program 2 (id=693): pipe2$watch_queue(&(0x7f0000001180)={0xffffffffffffffff}, 0x80) r1 = add_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_WATCH_KEY(0x20, r1, r0, 0x3d) keyctl$set_timeout(0xf, r1, 0x2) 2.014521739s ago: executing program 0 (id=695): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000080), r0) sendmsg$NLBL_MGMT_C_ADD(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x48, r2, 0x3, 0x70bd2b, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @empty}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x40004881}, 0x84) 1.97340507s ago: executing program 2 (id=697): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000080), r1, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @loopback}, {0xa, 0x0, 0x0, @remote}, r1}}, 0x48) 1.826746894s ago: executing program 0 (id=701): socket$vsock_stream(0x28, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000001c0)={'syztnl2\x00', &(0x7f0000000140)={'syztnl1\x00', 0x0, 0x0, 0xfe, 0xf9, 0x1, 0x58, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @loopback={0x0, 0xffff888101827518}, 0x7800, 0x8000, 0x1, 0xfffdfff8}}) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f00000002c0)={'ip6_vti0\x00', &(0x7f0000000140)=@ethtool_sset_info={0x37, 0x9, 0x10000}}) 1.817504795s ago: executing program 2 (id=702): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000680)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x44, r1, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x8, 0x30}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}]}, 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) 1.779049005s ago: executing program 6 (id=703): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) syz_clone(0x8100411, 0x0, 0x0, 0x0, 0x0, 0x0) futex(0x0, 0x6, 0x0, 0x0, 0x0, 0x0) syz_clone(0x20023000, 0x0, 0x0, &(0x7f0000000280), 0x0, 0x0) 1.695859587s ago: executing program 0 (id=705): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0100000004000000080000000100000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="0100000003"], 0x50) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x4}, 0x38) 1.678510258s ago: executing program 2 (id=707): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40004}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)=@newtclass={0x68, 0x28, 0x5ff, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r1, {0x1, 0xfff1}, {0x1, 0xfff1}}, [@tclass_kind_options=@c_htb={{0x8}, {0x34, 0x2, [@TCA_HTB_PARMS={0x30, 0x1, {{0x9, 0x1, 0x0, 0x3f1, 0x2, 0x5}, {0x8, 0x2, 0x8, 0x7b, 0x7ff, 0x4}, 0x4, 0x7, 0xffff, 0x8, 0x644}}]}}, @TCA_RATE={0x6, 0x5, {0x1, 0xd}}]}, 0x68}}, 0x0) 1.598427049s ago: executing program 0 (id=708): r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='freezer.self_freezing\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f0000000240)=r1, 0x4) sendmsg$inet6(r0, &(0x7f0000003100)={&(0x7f0000000080)={0xa, 0x4e21, 0x74, @dev={0xfe, 0x80, '\x00', 0x1d}, 0xc1a}, 0x1c, &(0x7f0000000000)=[{&(0x7f0000000040)="8000e859667fbc13", 0x8}], 0x1}, 0x8050) 1.560120231s ago: executing program 2 (id=710): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x2000004, &(0x7f0000002000)=ANY=[], 0xfc, 0x5520, &(0x7f0000000380)="$eJzs3M+LG+UbAPAnu93+/va7iAdvHSjCLjSh2W6L3lZt8Qe2lKoHT5pNpiFtklk2abruyYNH8eDJP8KLKHjy6N/gwbM38aB4EAQlMxPtioXCZpN19/OByTPz5s0zzzssC89MSADH1nLy68+VuBBnImIxIs5H5PuVcsttFOG5iLgYEQuPbZVy/K+BkxFxNiIujJMXOSvlW59eHl269tMbv3zz3akT5774+vv5rRqYt+cjordV7D/qFTFrF/F+Od4YdfLYWx+VsXij96A8zor4KN3MMzxqTOY18ni1XczPth4OxvFet9Ecx3bnXj6+1S9OOBi1J3nyD9xvbOfHrXQzj51Blsf2blHXzm7xv213MCzytMp8H+TpYzicxGI83UmL9Ww9yGOzPyzHi7xZK90Zx1EZy9NFM+u28jo293OlD7c3O/2HO8ko3R50sn5yrVZ/oVa/Xq1vZ630ZKxXG73W9fVkpd0dT6sO00Zvo51l7W5aa2a91WSl3WxW6/Vk5Ua62Wn0k3q9drV2pXpttdy7nLx6+52k20pWxvHlTv/hsNMdJPey7aT4xGqyVrv64mpyqZ68detOcufuzZu37rz93o13b7906/VXykl7yxqm68nK2pW1tWr9SnWtvnpg6x+mh239H5VFT3H9sC+VeRcA8N+znMSG/h+YtYPr/7fvRhx8/x/6/6l4Qv97anz5Dl3/e9z7/wNYP+yL/h8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4Nj6YenL1/Kd5eL4XDn+v3LomfK4EhELEfHHv1iMk3tyLpZ5lp4wf+kfNXxbiTzD+Bynyu1sRGyU2+//P+irAAAAAEfXVx9e/KTo1ouX5XkXxCwVN20Wzr8/pXyViFha/nFK2RbGL89OKVn+930idqaULb+BdXpKyYpbbiemle2pLO4Jpx8LlSIszLQcAABgJvZ2ArPtQgAAAJilj+ddAPNRicmjzMmz4Pyb938/EDyz5wgAAAA4HH57ummffxaT/h8AAAA40vL+3+//AQAAwNFW/P4fAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB/snM/N2oDURyAn20cyD8FRbmnldygjJSQY84UkCYoIAdqSAPUQG4pIcIRHofFKw4reWxrV98neWfHMj/eIDjMjDQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAY/pdH7bn5vOPoTnnZpg8owEAAADuOdWHbfvPOvXfdvffd7c+dv0iIsqIuDd3r+JVL7PqcuqH53/ePl8/quFXRJtweY9ld72JiC/d9ffD2J8CAAAAvFzH3X6TZuvpz3rugphSWrQp333NlFdERL3+kymtvOR9yhTWfr8X8T1TWruAtcoUlpbcFrnSnqT9uV9X7VY3TZGa8u7LrkVmGzsAADChqtdMOwsBAABgSt96vWq2OphYEf+3Mq9bgcvUdNt7r3s9AAAA4Bkq5i4AAAAAGF07/5/o/L/G+X8AAAAwj3T+HwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGM61YftcbffDM05N8PkGQ0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8I/9eUeBEAiDMNi7vjOZ+x9WGjQ1NakC4eNvDAYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAN7/7y/+JqXEmmXttLD2PJGunxtapsXduHP1hfP0aAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALvbnJQVCIAiiYM7430nf/7CSoGcQIQIaHlXUogEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOCLfvfL/4mpcSaZO20sHY8ka1eNravG3oPG0YPx9m8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALnbu3TeOIgwA+Ozu7ZkEEIdBVxghkCigIZdLSEiHKEAWBX8CkuVcgsmFR+KCRBHCDR1ynQZBiRASyHT5H1InUprQubjCSNSgffnWD4njtXu2fz9pdr5brXa+2ZMsfztjAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABUJm9P4yQ79Io4Ls892LmzmvUP9/WZe5uPlrKWxVGTSR8NL9Y/RP32EgEAAODkSKr6PoTwON1azvq4l9f/aXVNVvN/+3QRV/X8/rq/6qvaP2u//Lz9/O5AvWKc7KZX1sajswdT6fx/s5xvz/zlFZ38yefvXpL8C4nf23hukubPM/r6/v13unm40ES2AMA/cabqy6D6fSjrh20mBsCJ0akV3lX9n/TazQkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgCZON8GQVRyGEpc40zjzcubN6WH9v89FS1S7evbsZvpzeM7tFGkK4sjYenW10NvPt5q3b11bG49GN5oOXQghtjf5WOf1rH8xwcQitPB/BfxTE5Zc9L/kcjaDFH0oAABxLadmyuv5xurWcnYsWQ/jju731/6u1OMxY/29/ePFBfax6/T9sbIbzb7B+/dPBzVu3X1+7vnJ1dHX08Rvnhm8Oz1+6cOHSIH9XMvDGBAAAgH+nW7Z6/R8vHlz/P12Lw4z1/2ffDL+oj5Wo/w81XfRrOxMAAICT7dmXf/8tOuR81O2Gz1fW128Mi+Pu53PFsYVU/7aFstXr/2Sx7awAAACAJkw2oj3r/5drcZhx/f+p71/4sX7PJIRwqlz/P7P6yfhyc9OZa038OXHbcwQAAKBdp8pWX/9P8/3/8e6WhziE8NorRVz+G8CZ6v/k3a9+qI9V3/9/vrkpzqW4XzyPvO+H0Om3nREAAADH2RNZWyjiX9Ot5Y9+Ov1+1/5/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgKb9GQAA//+/ID2E") syz_mount_image$fuse(0x0, &(0x7f0000000340)='./file0\x00', 0x2888004, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@nfs_export_off}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)) 1.534470571s ago: executing program 0 (id=711): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000640)=ANY=[@ANYBLOB="1201000000000040341d0a0000000000000109022400010000000009040000010300000009210000000122030009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac3(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="002204000000a0dd"], 0x0}, 0x0) 1.360140466s ago: executing program 3 (id=715): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./debug\x00', &(0x7f0000000140)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./debug/dri/1/Virtual-1/edid_override\x00', 0x2, 0x0) write(r0, &(0x7f00000001c0)="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", 0x6200) 1.260328738s ago: executing program 3 (id=716): syz_mount_image$hpfs(&(0x7f0000000140), &(0x7f0000009ec0)='./file1\x00', 0x3200041, &(0x7f0000000000)=ANY=[@ANYBLOB="6561733d6e6f2c636173653d617369732c636865636b3d6e6f6e652c00ecb1696642cb97380abf69dce83f1c1dd0eb96506352e4c7d6b88109eebe378da654d5d91d6a45e65053658f366b87b26180bdb0a0e2ef4103c4336999ae591f101bac606a7595fc5a131d32d3723526dc1d4b5c1ce2f300a7eb59286590c97f58ae092a495a425b0bec6265"], 0x1, 0x9e16, &(0x7f000001c580)="$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") r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100fe02000000000000200000000c000600010000000100000024002d8005000100000000000500040000000000080002000300"], 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0) 888.136128ms ago: executing program 6 (id=717): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x204410, &(0x7f00000000c0)={[{@barrier}, {@usrquota}, {@errors_remount}, {@grpid}]}, 0xfe, 0x4a1, &(0x7f00000001c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mknod$loop(&(0x7f0000001280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x0) getdents64(r0, 0x0, 0x0) 851.436828ms ago: executing program 3 (id=718): socket$inet_udp(0x2, 0x2, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000000c0)={0x8, 0xffe, 0x1ff, 0x42000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000005200010004000000000000001c0000001400", @ANYRES16=r0], 0x28}}, 0x0) 807.25285ms ago: executing program 3 (id=719): mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./sys\x00', 0xb3) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:03.0/config\x00', 0x2, 0x0) pwrite64(r0, &(0x7f00000000c0)="02", 0x1, 0x4) 618.235055ms ago: executing program 3 (id=720): r0 = syz_init_net_socket$ax25(0x3, 0x3, 0xcc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) ioctl$SIOCAX25ADDUID(r0, 0x89e1, &(0x7f0000000080)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, r2}) 546.528916ms ago: executing program 5 (id=721): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000020303000000000000000000000100000800010001"], 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_VERDICT(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000940)={0x20, 0x1, 0x3, 0x5, 0x0, 0x0, {0x1}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0x0, 0x1ff}}]}, 0x20}, 0x1, 0x0, 0x0, 0x804}, 0x4004840) 500.748637ms ago: executing program 3 (id=722): r0 = syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f00000015c0)='./file0\x00', 0x0, &(0x7f0000000040)={[{@clear_cache}, {@metadata_ratio}, {@ssd_spread}]}, 0x0, 0x559e, &(0x7f0000005680)="$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") ioctl$BTRFS_IOC_QUOTA_CTL(r0, 0xc0109428, &(0x7f0000001300)={0x1, 0x1}) syz_mount_image$nilfs2(&(0x7f0000000040), &(0x7f0000000400)='./file0\x00', 0x30004d6, &(0x7f0000003280)=ANY=[], 0x1, 0xd99, &(0x7f0000006900)="$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") ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x4040942c, &(0x7f0000000280)={0x0, 0x40000, [0x7, 0x8, 0x7, 0x235c, 0x1, 0x6]}) 463.831678ms ago: executing program 2 (id=723): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./dev/vhci\x00', 0x2, 0x0) write(r0, &(0x7f0000000180)="0500", 0x2) 442.618458ms ago: executing program 5 (id=724): r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) sendmmsg(r0, &(0x7f0000001500)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @dev={0xfe, 0x80, '\x00', 0x40}, 0x1000004, 0x1}, 0x80, 0x0, 0x0, &(0x7f00000003c0)=[{0x18, 0x29, 0x37, "d8f0b92a"}], 0x18}}], 0x1, 0x0) 410.93092ms ago: executing program 6 (id=725): r0 = socket(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @loopback={0xff00000000000000}}, 0x1c) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c) 352.091861ms ago: executing program 5 (id=726): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000200)=[{&(0x7f0000000980)="580000001400add427323b472503b45602117fffff7f71000e224e2280007f000001e8eaff0400000500000000000000", 0x30}, {&(0x7f0000000cc0)="3774743f60686eee68455c3f836c7571aa48f907000600e247111358b5c7aeb22a23885539467f9c", 0x28}], 0x2) 326.894252ms ago: executing program 5 (id=727): r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="3400000013000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="000000000000000004001a"], 0x34}}, 0x0) 269.468373ms ago: executing program 6 (id=728): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0x1d, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b705000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="340000003b0007010000000000000000047c0000ec0000000c00018006000600800a0000100002800c0003"], 0x34}}, 0xc000) 131.755886ms ago: executing program 6 (id=729): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, 0x0) 130.917477ms ago: executing program 5 (id=730): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/i2c/devices/i2c-0/new_device\x00', 0x1, 0x0) write(r0, &(0x7f0000000300)='stusb1600 0x28\x00', 0xf) 36.123859ms ago: executing program 5 (id=731): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000008000000850000004900000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000680)="76389e6a65585578f830e9000000", 0x0, 0x10001, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 0s ago: executing program 6 (id=732): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x160500, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000001c0)={0x0, 0x1, 0xdddd0000, 0x200000, &(0x7f0000200000/0x200000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x1, 0x8080000, 0x200000, &(0x7f0000200000/0x200000)=nil}) kernel console output (not intermixed with test programs): comes ready [ 53.178336][ T664] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 53.194281][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 53.203001][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 53.213069][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.220157][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.228039][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 53.236920][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 53.246309][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.253409][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.272632][ T4194] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.287162][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 53.297926][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 53.310271][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 53.326309][ T4200] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.340449][ T4194] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.351262][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 53.383020][ T4200] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.401330][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 53.409279][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 53.417255][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 53.428613][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 53.437458][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 53.446105][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.453225][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.461185][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 53.470511][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 53.478955][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.486002][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.495215][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 53.503840][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 53.512076][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.519135][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.531484][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 53.539823][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 53.571248][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 53.581277][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 53.597992][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 53.610630][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 53.619434][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 53.628173][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 53.636803][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 53.644302][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 53.651679][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 53.660413][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 53.669033][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 53.678714][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 53.688663][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.695748][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.710484][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 53.718356][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 53.726994][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 53.736109][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 53.745001][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 53.754708][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 53.762902][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 53.778031][ T4187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 53.789966][ T4186] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 53.801963][ T4186] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 53.811208][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 53.818990][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 53.828905][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 53.837467][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 53.857392][ T4194] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 53.868692][ T4194] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 53.882485][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 53.892602][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 53.902617][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 53.918788][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 53.927295][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 53.940151][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 53.963841][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 53.977011][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 53.988021][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 54.002181][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 54.010672][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 54.020596][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 54.029644][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 54.038093][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 54.049412][ T4200] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 54.067490][ T4188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.083301][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 54.091937][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 54.111361][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 54.119790][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 54.137222][ T4186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.170477][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 54.180523][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 54.194316][ T26] Bluetooth: hci0: command 0x041b tx timeout [ 54.195146][ T4187] device veth0_vlan entered promiscuous mode [ 54.200479][ T26] Bluetooth: hci3: command 0x041b tx timeout [ 54.215830][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 54.225609][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 54.243905][ T26] Bluetooth: hci1: command 0x041b tx timeout [ 54.250424][ T26] Bluetooth: hci2: command 0x041b tx timeout [ 54.259282][ T4187] device veth1_vlan entered promiscuous mode [ 54.274561][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 54.291755][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 54.300153][ T26] Bluetooth: hci4: command 0x041b tx timeout [ 54.301003][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 54.322610][ T4186] device veth0_vlan entered promiscuous mode [ 54.339129][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 54.347789][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 54.361118][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 54.372540][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 54.385997][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 54.407785][ T4186] device veth1_vlan entered promiscuous mode [ 54.427080][ T4194] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.435573][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 54.444641][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 54.452090][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 54.466728][ T4187] device veth0_macvtap entered promiscuous mode [ 54.496348][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 54.504796][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 54.515357][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 54.523796][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 54.531152][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 54.539381][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 54.555196][ T4200] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.574855][ T4186] device veth0_macvtap entered promiscuous mode [ 54.584255][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 54.592667][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 54.609099][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 54.622405][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 54.634113][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 54.643783][ T4187] device veth1_macvtap entered promiscuous mode [ 54.655093][ T4186] device veth1_macvtap entered promiscuous mode [ 54.678973][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 54.687769][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 54.696801][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 54.711114][ T4194] device veth0_vlan entered promiscuous mode [ 54.726088][ T664] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 54.734511][ T664] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 54.742652][ T664] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 54.751201][ T664] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 54.760784][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 54.769462][ T664] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 54.778217][ T664] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 54.796086][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 54.810328][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 54.819149][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 54.828707][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 54.838983][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 54.848807][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 54.859557][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.870507][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 54.880761][ T4194] device veth1_vlan entered promiscuous mode [ 54.890559][ T4187] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.899713][ T4187] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.910443][ T4187] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.919382][ T4187] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.933732][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 54.941802][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 54.951617][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 54.960605][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 54.969544][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 54.978508][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 54.989444][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.000014][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.011272][ T4186] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.020092][ T4186] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.028996][ T4186] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.037856][ T4186] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.050482][ T4188] device veth0_vlan entered promiscuous mode [ 55.063617][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 55.071561][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 55.080705][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 55.089190][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 55.098625][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 55.122257][ T4188] device veth1_vlan entered promiscuous mode [ 55.145934][ T4194] device veth0_macvtap entered promiscuous mode [ 55.169432][ T4200] device veth0_vlan entered promiscuous mode [ 55.177444][ T664] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 55.185603][ T664] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 55.194311][ T664] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 55.202608][ T664] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 55.211445][ T664] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 55.219895][ T664] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 55.230797][ T4194] device veth1_macvtap entered promiscuous mode [ 55.248789][ T4188] device veth0_macvtap entered promiscuous mode [ 55.269190][ T664] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 55.282169][ T664] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 55.290416][ T664] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 55.298575][ T664] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 55.307053][ T664] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 55.317439][ T664] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 55.326183][ T664] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 55.353900][ T4200] device veth1_vlan entered promiscuous mode [ 55.369056][ T4188] device veth1_macvtap entered promiscuous mode [ 55.419453][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.430249][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.440745][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.451271][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.462913][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.489706][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 55.498607][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 55.507010][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 55.515635][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 55.525170][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 55.538302][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.549687][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.560470][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.571155][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.582251][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.593587][ T4194] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.602291][ T4194] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.611231][ T4194] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.616208][ T1218] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.628994][ T1218] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.640989][ T4194] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.665040][ T664] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 55.674411][ T664] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 55.683089][ T664] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 55.694382][ T664] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.699208][ T4200] device veth0_macvtap entered promiscuous mode [ 55.702200][ T664] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.722031][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.733687][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.743807][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.754249][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.764573][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.775250][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.786721][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.802523][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 55.810552][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 55.820591][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 55.829385][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 55.838292][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 55.848102][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 55.858311][ T4200] device veth1_macvtap entered promiscuous mode [ 55.877145][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.889810][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.899875][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.912517][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.922392][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.933335][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.945074][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.963547][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.977401][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 55.978309][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.986010][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 56.000944][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 56.009930][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 56.024824][ T4188] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.034214][ T4188] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.042919][ T4188] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.052015][ T4188] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.069988][ T4254] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.085039][ T4200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.097869][ T4254] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.101450][ T4200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.115604][ T4200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.126114][ T4200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.135987][ T4200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.147730][ T4200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.158065][ T4200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.168718][ T4200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.180808][ T4200] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.221368][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 56.237232][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 56.251719][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 56.262281][ T4200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.273920][ T4235] Bluetooth: hci1: command 0x040f tx timeout [ 56.279729][ T4200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.289836][ T4235] Bluetooth: hci3: command 0x040f tx timeout [ 56.290381][ T4200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.300766][ T4235] Bluetooth: hci0: command 0x040f tx timeout [ 56.308276][ T4200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.322572][ T4200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.333056][ T4200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.345791][ T4200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.348688][ T4235] Bluetooth: hci4: command 0x040f tx timeout [ 56.357003][ T4200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.363398][ T4235] Bluetooth: hci2: command 0x040f tx timeout [ 56.374719][ T4200] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.392967][ T4200] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.405338][ T4200] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.414307][ T4200] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.422997][ T4200] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.475367][ T664] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 56.485867][ T664] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 56.500227][ T4266] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 56.544125][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.595713][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.630424][ T664] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 56.653356][ T664] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.678792][ T664] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.702407][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 56.744045][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.751895][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.760964][ T664] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.777157][ T664] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.791122][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.810207][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.843287][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 56.853876][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 56.868278][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 56.894597][ T4254] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.915427][ T4254] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.948787][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 57.018911][ T4287] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12'. [ 57.241146][ T4313] loop4: detected capacity change from 0 to 16 [ 57.317952][ T4313] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 57.758303][ T4351] loop2: detected capacity change from 0 to 256 [ 57.771126][ T4349] loop4: detected capacity change from 0 to 512 [ 57.792127][ T4351] ======================================================= [ 57.792127][ T4351] WARNING: The mand mount option has been deprecated and [ 57.792127][ T4351] and is ignored by this kernel. Remove the mand [ 57.792127][ T4351] option from the mount to silence this warning. [ 57.792127][ T4351] ======================================================= [ 57.865042][ T4351] exfat: Deprecated parameter 'utf8' [ 57.873633][ T4349] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 57.889043][ T4351] exfat: Deprecated parameter 'namecase' [ 57.914664][ T4351] exfat: Deprecated parameter 'namecase' [ 57.930491][ T4349] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 57.941651][ T4351] exfat: Deprecated parameter 'utf8' [ 58.000156][ T4349] EXT4-fs error (device loop4): ext4_validate_block_bitmap:429: comm syz.4.35: bg 0: block 104: invalid block bitmap [ 58.005572][ T4318] loop0: detected capacity change from 0 to 40427 [ 58.025350][ T4349] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 58.042787][ T4351] exFAT-fs (loop2): failed to load upcase table (idx : 0x00012153, chksum : 0x69f3fdb7, utbl_chksum : 0xe619d30d) [ 58.061120][ T4349] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.35: invalid indirect mapped block 1 (level 1) [ 58.087002][ T4318] F2FS-fs (loop0): Small segment_count (9 < 1 * 24) [ 58.094997][ T4349] EXT4-fs (loop4): 1 truncate cleaned up [ 58.100734][ T4349] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 58.112433][ T4318] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 58.172490][ T4318] F2FS-fs (loop0): Found nat_bits in checkpoint [ 58.218740][ T4188] EXT4-fs error (device loop4): ext4_empty_dir:3138: inode #11: comm syz-executor: invalid size [ 58.245217][ T4188] EXT4-fs error (device loop4): ext4_empty_dir:3138: inode #11: comm syz-executor: invalid size [ 58.275159][ T4372] netlink: 'syz.3.44': attribute type 2 has an invalid length. [ 58.308620][ T4188] EXT4-fs error (device loop4): ext4_empty_dir:3138: inode #11: comm syz-executor: invalid size [ 58.344130][ T21] Bluetooth: hci0: command 0x0419 tx timeout [ 58.358951][ T21] Bluetooth: hci3: command 0x0419 tx timeout [ 58.360393][ T4188] EXT4-fs error (device loop4): ext4_empty_dir:3138: inode #11: comm syz-executor: invalid size [ 58.377871][ T4318] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 58.386908][ T4318] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 58.389535][ T21] Bluetooth: hci1: command 0x0419 tx timeout [ 58.404649][ T4188] EXT4-fs error (device loop4): ext4_empty_dir:3138: inode #11: comm syz-executor: invalid size [ 58.426729][ T4379] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 58.427128][ T4235] Bluetooth: hci2: command 0x0419 tx timeout [ 58.464927][ T4188] EXT4-fs error (device loop4): ext4_empty_dir:3138: inode #11: comm syz-executor: invalid size [ 58.472050][ T4235] Bluetooth: hci4: command 0x0419 tx timeout [ 58.527941][ T4188] EXT4-fs error (device loop4): ext4_empty_dir:3138: inode #11: comm syz-executor: invalid size [ 58.554659][ T4188] EXT4-fs error (device loop4): ext4_empty_dir:3138: inode #11: comm syz-executor: invalid size [ 58.593617][ T4188] EXT4-fs error (device loop4): ext4_empty_dir:3138: inode #11: comm syz-executor: invalid size [ 58.614621][ T4186] attempt to access beyond end of device [ 58.614621][ T4186] loop0: rw=2049, want=45104, limit=40427 [ 58.634683][ T4188] EXT4-fs error (device loop4): ext4_empty_dir:3138: inode #11: comm syz-executor: invalid size [ 58.646735][ T4385] loop3: detected capacity change from 0 to 4096 [ 58.766865][ T4389] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 59.314423][ T9] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.445037][ T4395] loop1: detected capacity change from 0 to 32768 [ 59.474746][ T9] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.503945][ T4395] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.54 (4395) [ 59.581025][ T9] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.623680][ T4395] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 59.655585][ T4395] BTRFS warning (device loop1): excessive commit interval 3581 [ 59.672281][ T4398] loop3: detected capacity change from 0 to 32768 [ 59.680962][ T4395] BTRFS info (device loop1): force zlib compression, level 3 [ 59.694393][ T9] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.702902][ T4395] BTRFS info (device loop1): metadata ratio 107050 [ 59.731149][ T4395] BTRFS info (device loop1): turning on flush-on-commit [ 59.759187][ T4395] BTRFS info (device loop1): max_inline at 4096 [ 59.776643][ T4395] BTRFS info (device loop1): using free space tree [ 59.801162][ T4395] BTRFS info (device loop1): has skinny extents [ 59.895591][ T4398] XFS (loop3): Mounting V5 Filesystem [ 60.062341][ T4398] XFS (loop3): Ending clean mount [ 60.202171][ T4395] BTRFS info (device loop1): enabling ssd optimizations [ 60.219284][ T4402] overlayfs: statfs failed on './file0' [ 60.236530][ T4200] XFS (loop3): Unmounting Filesystem [ 60.515971][ T4433] chnl_net:caif_netlink_parms(): no params data found [ 60.644485][ T4456] loop3: detected capacity change from 0 to 256 [ 60.693934][ T4456] exfat: Deprecated parameter 'utf8' [ 60.699388][ T4456] exfat: Deprecated parameter 'utf8' [ 60.787399][ T4456] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 60.844877][ T4433] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.851963][ T4433] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.873714][ T4433] device bridge_slave_0 entered promiscuous mode [ 61.037586][ T4235] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 61.077640][ T4433] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.116187][ T4433] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.147515][ T4433] device bridge_slave_1 entered promiscuous mode [ 61.220922][ T4488] netlink: 'syz.3.66': attribute type 10 has an invalid length. [ 61.281193][ T4488] team0: Port device team_slave_0 removed [ 61.289009][ T4489] netlink: 'syz.3.66': attribute type 27 has an invalid length. [ 61.313390][ T4235] usb 1-1: Using ep0 maxpacket: 16 [ 61.323665][ T4489] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 61.331363][ T4489] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 61.352397][ T4489] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 61.413099][ T4433] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.435968][ T4433] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.457517][ T4235] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 61.491125][ T4235] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 55, changing to 9 [ 61.522658][ T4235] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid maxpacket 8496, setting to 1024 [ 61.553194][ T4235] usb 1-1: config 0 interface 0 has no altsetting 0 [ 61.585528][ T4433] team0: Port device team_slave_0 added [ 61.626251][ T4433] team0: Port device team_slave_1 added [ 61.753436][ T4235] usb 1-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 61.774664][ T4433] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.777457][ T4235] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 61.793225][ T4433] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.803216][ T4235] usb 1-1: Product: syz [ 61.850076][ T4235] usb 1-1: Manufacturer: syz [ 61.870308][ T4235] usb 1-1: SerialNumber: syz [ 61.881065][ T4433] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.911358][ T4235] usb 1-1: config 0 descriptor?? [ 61.914973][ T4433] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.954190][ T4433] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.008489][ T4433] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.071334][ T4495] loop1: detected capacity change from 0 to 32768 [ 62.079588][ T9] device hsr_slave_0 left promiscuous mode [ 62.093962][ T9] device hsr_slave_1 left promiscuous mode [ 62.122492][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 62.139587][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 62.162542][ T4495] JBD2: Ignoring recovery information on journal [ 62.169504][ T4483] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 62.192972][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 62.217544][ T4235] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input5 [ 62.233460][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 62.273216][ T4235] Bluetooth: hci2: command 0x0409 tx timeout [ 62.293707][ T9] device bridge_slave_1 left promiscuous mode [ 62.306544][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.347405][ T4495] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 62.399596][ T9] device bridge_slave_0 left promiscuous mode [ 62.429836][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.467556][ T9] device veth1_macvtap left promiscuous mode [ 62.479086][ T9] device veth0_macvtap left promiscuous mode [ 62.487871][ T9] device veth1_vlan left promiscuous mode [ 62.498216][ T9] device veth0_vlan left promiscuous mode [ 62.542403][ T4495] UBIFS error (pid: 4495): cannot open "ubi:0", error -19 [ 62.562607][ T4479] usb 1-1: USB disconnect, device number 2 [ 62.593436][ T4483] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 62.610564][ T4483] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 62.626322][ T4519] loop2: detected capacity change from 0 to 32768 [ 62.677480][ T4187] (syz-executor,4187,1):ocfs2_inode_is_valid_to_delete:905 ERROR: Skipping delete of system file 66 [ 62.691675][ T4187] ocfs2: Unmounting device (7,1) on (node local) [ 62.692646][ T4519] BTRFS: device fsid a830dcec-d20e-42dc-8160-bf13f3286f97 devid 1 transid 8 /dev/loop2 scanned by syz.2.72 (4519) [ 62.714313][ T4483] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 62.737048][ T4483] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 62.748824][ T4483] usb 4-1: SerialNumber: syz [ 62.810870][ T4519] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm [ 62.843790][ T4519] BTRFS info (device loop2): using free space tree [ 62.850343][ T4519] BTRFS info (device loop2): has skinny extents [ 62.915688][ T4526] netlink: 'syz.1.73': attribute type 1 has an invalid length. [ 62.933469][ T4526] netlink: 100 bytes leftover after parsing attributes in process `syz.1.73'. [ 62.942703][ T4526] nbd: illegal input index -1 [ 62.945920][ T9] team0 (unregistering): Port device team_slave_1 removed [ 63.019351][ T9] team0 (unregistering): Port device team_slave_0 removed [ 63.047260][ T4483] usb 4-1: 0:2 : does not exist [ 63.065835][ T4519] BTRFS info (device loop2): enabling ssd optimizations [ 63.191911][ T4483] usb 4-1: USB disconnect, device number 2 [ 63.266257][ T25] audit: type=1800 audit(1791932212.573:2): pid=4519 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.72" name="file1" dev="loop2" ino=260 res=0 errno=0 [ 63.311227][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 63.350750][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 63.526675][ T4176] udevd[4176]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 63.670769][ T4561] loop3: detected capacity change from 0 to 512 [ 63.701243][ T9] bond0 (unregistering): Released all slaves [ 63.830364][ T4561] EXT4-fs (loop3): Ignoring removed oldalloc option [ 63.859804][ T4479] kernel write not supported for file /uinput (pid: 4479 comm: kworker/1:14) [ 63.958826][ T4433] device hsr_slave_0 entered promiscuous mode [ 63.984233][ T4433] device hsr_slave_1 entered promiscuous mode [ 64.002769][ T4561] EXT4-fs (loop3): mounted filesystem without journal. Opts: oldalloc,grpquota,noinit_itable,,errors=continue. Quota mode: writeback. [ 64.053332][ T4561] ext4 filesystem being mounted at /18/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 64.069097][ T4571] tipc: Started in network mode [ 64.084112][ T4571] tipc: Node identity ac14140f, cluster identity 4711 [ 64.120113][ T4571] tipc: New replicast peer: 255.255.255.255 [ 64.158517][ T4571] tipc: Enabled bearer , priority 10 [ 64.274597][ T4557] loop1: detected capacity change from 0 to 32768 [ 64.343653][ T4235] Bluetooth: hci2: command 0x041b tx timeout [ 64.428416][ T4585] nvmet: can only link subsystems into the subsystems dir.! [ 64.448838][ T4557] XFS (loop1): Mounting V5 Filesystem [ 64.525945][ T4433] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 64.537177][ T4433] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 64.547480][ T4433] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 64.568314][ T4433] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 64.672180][ T4557] XFS (loop1): Ending clean mount [ 64.795859][ T4187] XFS (loop1): Unmounting Filesystem [ 64.842470][ T4433] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.958853][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.974794][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.030031][ T4433] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.083708][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.153581][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.173590][ T4254] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.180716][ T4254] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.191414][ T4600] loop0: detected capacity change from 0 to 32768 [ 65.216823][ T4600] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.90 (4600) [ 65.267557][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.277486][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.320045][ T4600] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 65.338907][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.357818][ T4254] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.364932][ T4254] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.374597][ T4600] BTRFS info (device loop0): setting nodatasum [ 65.380775][ T4600] BTRFS info (device loop0): force zlib compression, level 3 [ 65.411755][ T4600] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_LZO (0x8) [ 65.419496][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.432408][ T4600] BTRFS info (device loop0): use lzo compression, level 0 [ 65.442520][ T4600] BTRFS info (device loop0): turning on flush-on-commit [ 65.446391][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.457485][ T4600] BTRFS info (device loop0): enabling auto defrag [ 65.457530][ T4600] BTRFS info (device loop0): max_inline at 4096 [ 65.457547][ T4600] BTRFS info (device loop0): using free space tree [ 65.457559][ T4600] BTRFS info (device loop0): has skinny extents [ 65.549097][ T1108] tipc: Node number set to 2886997007 [ 65.568993][ T4628] netlink: 8 bytes leftover after parsing attributes in process `syz.1.95'. [ 65.615454][ T4630] netlink: 8 bytes leftover after parsing attributes in process `syz.1.95'. [ 65.643696][ T4630] Zero length message leads to an empty skb [ 65.649741][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.658104][ T4600] BTRFS info (device loop0): enabling ssd optimizations [ 65.660485][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.722553][ T4600] BTRFS info (device loop0): setting nodatasum [ 65.744154][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.783798][ T4600] BTRFS info (device loop0): force zlib compression, level 3 [ 65.814268][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.830588][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.861622][ T4600] BTRFS info (device loop0): use lzo compression, level 0 [ 65.879056][ T4600] BTRFS info (device loop0): max_inline at 4096 [ 65.894069][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.913792][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.943506][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.973538][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 66.125124][ T4654] netdevsim netdevsim10 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.299515][ T4650] loop3: detected capacity change from 0 to 40427 [ 66.380199][ T4650] F2FS-fs (loop3): Invalid SB checksum offset: 0 [ 66.422052][ T4650] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 66.430939][ T4471] Bluetooth: hci2: command 0x040f tx timeout [ 66.483941][ T4650] F2FS-fs (loop3): invalid crc value [ 66.502512][ T4650] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 66.633904][ T4650] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 66.650671][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.668277][ T4650] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 66.681476][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.717893][ T4433] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.728538][ T4656] loop1: detected capacity change from 0 to 32768 [ 66.785366][ T4471] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 66.862066][ T4200] attempt to access beyond end of device [ 66.862066][ T4200] loop3: rw=2049, want=40992, limit=40427 [ 67.226785][ T4471] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 67.257109][ T4471] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 67.373498][ T4471] usb 3-1: New USB device found, idVendor=08b7, idProduct=ec00, bcdDevice= 0.00 [ 67.402947][ T4471] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 67.430708][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 67.463310][ T4471] usb 3-1: SerialNumber: syz [ 67.469618][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 67.553596][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 67.575509][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 67.604240][ T4433] device veth0_vlan entered promiscuous mode [ 67.612915][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 67.641623][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 67.657538][ T4433] device veth1_vlan entered promiscuous mode [ 67.749343][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 67.759446][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 67.786586][ T4471] usb 3-1: 0:2 : does not exist [ 67.792540][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 67.823491][ T4471] usb 3-1: USB disconnect, device number 2 [ 67.837082][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.873951][ T4433] device veth0_macvtap entered promiscuous mode [ 67.908196][ T4433] device veth1_macvtap entered promiscuous mode [ 67.929968][ T4717] netlink: 8 bytes leftover after parsing attributes in process `syz.3.112'. [ 68.028330][ T4433] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.069217][ T4433] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.099610][ T4433] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.144133][ T4433] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.180730][ T4433] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.215431][ T4433] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.246332][ T4433] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.287188][ T4433] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.318755][ T4433] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.350696][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 68.361512][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 68.394674][ T4705] loop1: detected capacity change from 0 to 32768 [ 68.395608][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 68.430670][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 68.456216][ T4433] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.483101][ T4705] XFS (loop1): Mounting V5 Filesystem [ 68.487211][ T4433] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.513345][ T4470] Bluetooth: hci2: command 0x0419 tx timeout [ 68.519586][ T4471] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 68.569777][ T4433] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.606959][ T4705] XFS (loop1): Ending clean mount [ 68.613382][ T4433] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.623851][ T4433] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.634573][ T4433] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.645370][ T4433] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.656184][ T4433] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.668747][ T4433] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.681031][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 68.714957][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 68.755720][ T4433] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.769335][ T4433] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.783196][ T4433] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.800188][ T4433] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.821576][ T4187] XFS (loop1): Unmounting Filesystem [ 68.907260][ T4739] loop0: detected capacity change from 0 to 32768 [ 68.954051][ T4471] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 196, using maximum allowed: 30 [ 68.986080][ T4471] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 69.006394][ T4739] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.116 (4739) [ 69.026682][ T4471] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 69.037870][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.065874][ T4471] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 196 [ 69.093224][ T4471] usb 4-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00 [ 69.095747][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.126579][ T4471] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.154088][ T4471] usb 4-1: config 0 descriptor?? [ 69.164886][ T4549] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 69.197635][ T4739] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 69.223329][ T4739] BTRFS info (device loop0): setting nodatacow, compression disabled [ 69.243729][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.261292][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.274083][ T4739] BTRFS info (device loop0): disabling tree log [ 69.292903][ T4739] BTRFS info (device loop0): max_inline at 0 [ 69.295995][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 69.330432][ T4739] BTRFS info (device loop0): using free space tree [ 69.374910][ T4739] BTRFS info (device loop0): has skinny extents [ 69.667989][ T4471] holtek_kbd 0003:04D9:A055.0001: unknown main item tag 0x0 [ 69.693331][ T4471] holtek_kbd 0003:04D9:A055.0001: unknown main item tag 0x0 [ 69.724878][ T4471] holtek_kbd 0003:04D9:A055.0001: collection stack underflow [ 69.763194][ T4471] holtek_kbd 0003:04D9:A055.0001: item 0 0 0 12 parsing failed [ 69.792798][ T4471] holtek_kbd: probe of 0003:04D9:A055.0001 failed with error -22 [ 69.886132][ T4754] loop2: detected capacity change from 0 to 32768 [ 69.913276][ T4471] usb 4-1: USB disconnect, device number 3 [ 70.217201][ T4472] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 70.345858][ T4808] loop0: detected capacity change from 0 to 256 [ 70.506043][ T4472] usb 2-1: Using ep0 maxpacket: 32 [ 70.623918][ T4472] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 70.649330][ T4472] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 70.706250][ T4472] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 70.736459][ T4472] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.766408][ T4824] bond0: (slave bond_slave_0): Releasing backup interface [ 70.774788][ T4472] usb 2-1: config 0 descriptor?? [ 70.834380][ T4472] hub 2-1:0.0: USB hub found [ 71.010519][ T4845] loop5: detected capacity change from 0 to 1024 [ 71.030727][ T4847] rnbd_client L211: map_device: Parameters missing [ 71.044754][ T4845] EXT4-fs (loop5): Ignoring removed oldalloc option [ 71.062334][ T4845] EXT4-fs (loop5): Ignoring removed oldalloc option [ 71.086196][ T4845] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 71.134669][ T4845] EXT4-fs (loop5): mounted filesystem without journal. Opts: delalloc,bsddf,nodioread_nolock,norecovery,dioread_nolock,oldalloc,oldalloc,sysvgroups,norecovery,,errors=continue. Quota mode: none. [ 71.167592][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.168213][ T4472] hub 2-1:0.0: 3 ports detected [ 71.174827][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.195614][ T4859] loop3: detected capacity change from 0 to 16 [ 71.214893][ T4471] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 71.270654][ T4859] erofs: (device loop3): mounted with root inode @ nid 36. [ 71.383640][ T4472] hub 2-1:0.0: hub_hub_status failed (err = -71) [ 71.390470][ T4472] hub 2-1:0.0: config failed, can't get hub status (err -71) [ 71.484712][ T4471] usb 1-1: Using ep0 maxpacket: 16 [ 71.518242][ T4870] netlink: 12 bytes leftover after parsing attributes in process `syz.3.143'. [ 71.533411][ T4472] usbhid 2-1:0.0: can't add hid device: -71 [ 71.540430][ T4472] usbhid: probe of 2-1:0.0 failed with error -71 [ 71.599260][ T4472] usb 2-1: USB disconnect, device number 2 [ 71.624104][ T4471] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 71.644758][ T4471] usb 1-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 71.684951][ T4471] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.707181][ T4471] usb 1-1: config 0 descriptor?? [ 71.777691][ T4471] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input6 [ 72.043349][ T3544] bcm5974 1-1:0.0: could not read from device [ 72.073389][ T4839] bcm5974 1-1:0.0: could not read from device [ 72.087599][ T4471] usb 1-1: USB disconnect, device number 3 [ 72.100561][ T4876] loop2: detected capacity change from 0 to 32768 [ 72.131345][ T3544] bcm5974 1-1:0.0: could not read from device [ 72.181033][ T4876] [ 72.181033][ T4876] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 72.181033][ T4876] [ 72.251319][ T4880] loop3: detected capacity change from 0 to 40427 [ 72.266607][ T4891] program syz.5.150 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 72.267458][ T4876] ERROR: (device loop2): diWrite: ixpxd invalid [ 72.267458][ T4876] [ 72.318861][ T4876] ERROR: (device loop2): txCommit: [ 72.318861][ T4876] [ 72.335060][ T4880] F2FS-fs (loop3): Found nat_bits in checkpoint [ 72.384789][ T4876] ERROR: (device loop2): diRead: i_ino != di_number [ 72.384789][ T4876] [ 72.462146][ T4194] [ 72.462146][ T4194] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 72.462146][ T4194] [ 72.485276][ T4194] [ 72.485276][ T4194] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 72.485276][ T4194] [ 72.503461][ T4880] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 72.543930][ T4886] loop1: detected capacity change from 0 to 32768 [ 72.602860][ T4200] attempt to access beyond end of device [ 72.602860][ T4200] loop3: rw=2049, want=45104, limit=40427 [ 72.700567][ T4904] loop5: detected capacity change from 0 to 164 [ 72.923766][ T4909] erofs: Unknown parameter '' [ 73.316046][ T4932] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (27202!=33349) [ 73.360349][ T4932] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpjquota=,errors=continue,noblock_validity,,errors=continue. Quota mode: none. [ 73.411783][ T4935] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 73.441319][ T4935] fs-verity: sha256 using implementation "sha256-avx2" [ 73.454452][ T4932] EXT4-fs (loop1): ext4_remount: Checksum for group 0 failed (27202!=33349) [ 73.508108][ T4935] EXT4-fs error (device loop0): ext4_validate_block_bitmap:420: comm syz.0.166: bg 0: bad block bitmap checksum [ 73.548557][ T4950] set_capacity_and_notify: 3 callbacks suppressed [ 73.548572][ T4950] loop3: detected capacity change from 0 to 16 [ 73.587411][ T4950] erofs: Unknown parameter '' [ 73.747107][ T4958] netlink: 148 bytes leftover after parsing attributes in process `syz.0.174'. [ 74.149264][ T4980] program syz.1.185 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 74.204346][ T4961] infiniband syz1: set active [ 74.209439][ T4961] infiniband syz1: added veth1_virt_wifi [ 74.235220][ T4964] loop0: detected capacity change from 0 to 32768 [ 74.325221][ T4961] RDS/IB: syz1: added [ 74.330322][ T4961] smc: adding ib device syz1 with port count 1 [ 74.353325][ T4964] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.178 (4964) [ 74.372726][ T4961] smc: ib device syz1 port 1 has pnetid [ 74.399811][ T4989] maxtcpc: probe of 0-0005 failed with error -5 [ 74.423998][ T4989] i2c i2c-0: new_device: Instantiated device maxtcpc at 0x05 [ 74.447347][ T4964] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 74.473426][ T4964] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_LZO (0x8) [ 74.490888][ T4966] loop2: detected capacity change from 0 to 32768 [ 74.511711][ T4964] BTRFS info (device loop0): use lzo compression, level 0 [ 74.520135][ T4964] BTRFS info (device loop0): force clearing of disk cache [ 74.538712][ T4964] BTRFS info (device loop0): turning on sync discard [ 74.563947][ T4964] BTRFS warning (device loop0): excessive commit interval 43283 [ 74.603540][ T4964] BTRFS info (device loop0): enabling ssd optimizations [ 74.623112][ T4966] XFS (loop2): Invalid device [./file0], error=-2 [ 74.627787][ T4964] BTRFS info (device loop0): using spread ssd allocation scheme [ 74.681900][ T4964] BTRFS info (device loop0): not using ssd optimizations [ 74.719594][ T4964] BTRFS info (device loop0): not using spread ssd allocation scheme [ 74.729476][ T5003] loop5: detected capacity change from 0 to 512 [ 74.749129][ T4964] BTRFS info (device loop0): using free space tree [ 74.778544][ T5003] EXT4-fs (loop5): Ignoring removed bh option [ 74.791202][ T4964] BTRFS info (device loop0): has skinny extents [ 74.809277][ T5003] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 74.915655][ T5019] capability: warning: `syz.1.199' uses 32-bit capabilities (legacy support in use) [ 74.934456][ T5017] loop3: detected capacity change from 0 to 256 [ 74.970096][ T5019] program syz.1.199 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 74.985278][ T5003] EXT4-fs (loop5): mounted filesystem without journal. Opts: barrier=0x0000000000000081,minixdf,bh,delalloc,dioread_nolock,noquota,,errors=continue. Quota mode: writeback. [ 75.004293][ T5003] ext4 filesystem being mounted at /20/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 75.049788][ T5017] exFAT-fs (loop3): failed to load upcase table (idx : 0x00011a39, chksum : 0xd4e5c97b, utbl_chksum : 0xe619d30d) [ 75.275944][ T4964] BTRFS info (device loop0): clearing free space tree [ 75.296189][ T4964] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 75.349016][ T4964] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 75.401560][ T5041] loop5: detected capacity change from 0 to 2048 [ 75.503413][ T5044] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 75.514922][ T4964] BTRFS info (device loop0): creating free space tree [ 75.529664][ T4964] BTRFS info (device loop0): setting compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 75.535705][ T5043] netlink: 56 bytes leftover after parsing attributes in process `syz.3.202'. [ 75.541734][ T4964] BTRFS info (device loop0): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 75.569811][ T25] audit: type=1800 audit(1791932224.873:3): pid=5041 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.203" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 75.672713][ T5049] loop1: detected capacity change from 0 to 512 [ 75.752615][ T5049] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 75.773401][ T5051] loop3: detected capacity change from 0 to 1024 [ 75.838198][ T5049] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=42c028, mo2=0002] [ 75.900951][ T5049] EXT4-fs (loop1): orphan cleanup on readonly fs [ 75.939869][ T5051] EXT4-fs (loop3): mounted filesystem without journal. Opts: user_xattr,noquota,dioread_nolock,nodioread_nolock,debug_want_extra_isize=0x0000000000000070,max_dir_size_kb=0x00000000000007b1,minixdf,bsdgroups,max_batch_time=0x0000000000000013,abort,noauto_da_alloc,,errors=continue. Quota mode: none. [ 75.947123][ T5049] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:3894: comm syz.1.205: Allocating blocks 41-42 which overlap fs metadata [ 75.990984][ T5051] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 76.064946][ T5049] EXT4-fs (loop1): Remounting filesystem read-only [ 76.080778][ T5049] Quota error (device loop1): write_blk: dquota write failed [ 76.122087][ T5049] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 76.146151][ T5049] EXT4-fs error (device loop1): ext4_acquire_dquot:6236: comm syz.1.205: Failed to acquire dquot type 0 [ 76.160695][ T5065] scsi_dev_info_list_add_str: bad dev info string '_' '' '(null)' [ 76.214112][ T5049] EXT4-fs (loop1): Remounting filesystem read-only [ 76.231607][ T5049] EXT4-fs error (device loop1): mb_free_blocks:1889: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 76.267205][ T1324] cfg80211: failed to load regulatory.db [ 76.293292][ T4792] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 76.306094][ T5049] EXT4-fs (loop1): Remounting filesystem read-only [ 76.333724][ T5049] EXT4-fs error (device loop1): ext4_do_update_inode:5229: inode #12: comm syz.1.205: corrupted inode contents [ 76.354100][ T5049] EXT4-fs (loop1): Remounting filesystem read-only [ 76.383527][ T5049] EXT4-fs error (device loop1): ext4_dirty_inode:6087: inode #12: comm syz.1.205: mark_inode_dirty error [ 76.401098][ T5049] EXT4-fs (loop1): Remounting filesystem read-only [ 76.409079][ T5049] EXT4-fs error (device loop1): ext4_do_update_inode:5229: inode #12: comm syz.1.205: corrupted inode contents [ 76.457263][ T5049] EXT4-fs (loop1): Remounting filesystem read-only [ 76.473746][ T5049] EXT4-fs error (device loop1): __ext4_ext_dirty:183: inode #12: comm syz.1.205: mark_inode_dirty error [ 76.508989][ T5049] EXT4-fs (loop1): Remounting filesystem read-only [ 76.518709][ T5049] EXT4-fs error (device loop1): ext4_do_update_inode:5229: inode #12: comm syz.1.205: corrupted inode contents [ 76.535130][ T5077] binder: 5076:5077 ioctl 400c620e 200000000040 returned -22 [ 76.569704][ T5049] EXT4-fs (loop1): Remounting filesystem read-only [ 76.583742][ T5049] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 76.596643][ T5080] loop5: detected capacity change from 0 to 512 [ 76.608656][ T5049] EXT4-fs (loop1): Remounting filesystem read-only [ 76.637165][ T5049] EXT4-fs error (device loop1): ext4_do_update_inode:5229: inode #12: comm syz.1.205: corrupted inode contents [ 76.661823][ T5080] EXT4-fs (loop5): Ignoring removed nobh option [ 76.693311][ T4792] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 76.706234][ T5049] EXT4-fs (loop1): Remounting filesystem read-only [ 76.712765][ T5049] EXT4-fs error (device loop1): ext4_truncate:4286: inode #12: comm syz.1.205: mark_inode_dirty error [ 76.730659][ T4792] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 76.740765][ T4792] usb 3-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 76.753475][ T5080] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters [ 76.781894][ T5049] EXT4-fs (loop1): Remounting filesystem read-only [ 76.788571][ T4792] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.803779][ T5080] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #11: comm syz.5.218: invalid indirect mapped block 4278190080 (level 0) [ 76.837452][ T5091] program syz.0.223 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 76.851817][ T5049] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem [ 76.873779][ T4792] usb 3-1: config 0 descriptor?? [ 76.894023][ T5049] EXT4-fs (loop1): Remounting filesystem read-only [ 76.902944][ T5080] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #11: comm syz.5.218: invalid indirect mapped block 1 (level 1) [ 76.930191][ T5049] EXT4-fs (loop1): 1 truncate cleaned up [ 76.970307][ T5049] EXT4-fs (loop1): pa ffff88802653f540: logic 1, phys. 41, len 23 [ 76.978458][ T5049] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:4904: group 0, free 22, pa_free 23 [ 76.994331][ T5080] EXT4-fs (loop5): 1 truncate cleaned up [ 77.000257][ T5080] EXT4-fs (loop5): mounted filesystem without journal. Opts: abort,errors=continue,inode_readahead_blks=0x0000000000000040,sb=0x0000000000000009,jqfmt=vfsv1,resgid=0x0000000000000000,nolazytime,nobh,auto_da_alloc=0x0000000000000006,data=journal,init_itable=0x0000000000000005,,errors=continue. Quota mode: none. [ 77.047116][ T5049] EXT4-fs (loop1): Remounting filesystem read-only [ 77.055177][ T5049] EXT4-fs (loop1): mounted filesystem without journal. Opts: nodelalloc,noblock_validity,errors=remount-ro,data_err=ignore,debug,nodiscard,noinit_itable,noinit_itable,journal_dev=0x0000000000000afb2. Quota mode: writeback. [ 77.078435][ T5080] EXT4-fs (loop5): shut down requested (1) [ 77.095706][ T4791] kernel read not supported for file /video9 (pid: 4791 comm: kworker/0:19) [ 77.356172][ T4792] hid-steam 0003:28DE:1142.0002: unknown main item tag 0x1 [ 77.373218][ T4792] hid-steam 0003:28DE:1142.0002: item fetching failed at offset 3/5 [ 77.394569][ T4792] hid-steam 0003:28DE:1142.0002: steam_probe:parse of hid interface failed [ 77.409294][ T4792] hid-steam: probe of 0003:28DE:1142.0002 failed with error -22 [ 77.511681][ T5120] kvm [5119]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0x186 data 0x3 [ 77.523019][ T5103] loop3: detected capacity change from 0 to 32768 [ 77.578758][ T5103] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.228 (5103) [ 77.602477][ T4792] usb 3-1: USB disconnect, device number 3 [ 77.628807][ T5103] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 77.649324][ T5103] BTRFS warning (device loop3): excessive commit interval 3581 [ 77.667815][ T5103] BTRFS info (device loop3): force zlib compression, level 3 [ 77.680403][ T5103] BTRFS info (device loop3): metadata ratio 107050 [ 77.690894][ T5103] BTRFS info (device loop3): turning on flush-on-commit [ 77.698426][ T5103] BTRFS info (device loop3): max_inline at 4096 [ 77.719909][ T5103] BTRFS info (device loop3): using free space tree [ 77.738483][ T5103] BTRFS info (device loop3): has skinny extents [ 77.941537][ T25] audit: type=1800 audit(1791932227.243:4): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.244" name="file1" dev="loop1" ino=1048641 res=0 errno=0 [ 78.011395][ T5103] BTRFS info (device loop3): enabling ssd optimizations [ 78.139391][ T4480] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 78.353954][ T25] audit: type=1326 audit(1791932227.653:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5184 comm="syz.1.253" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f315ca142d9 code=0x0 [ 78.414953][ T5187] EXT4-fs (loop2): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 78.445552][ T4205] udevd[4205]: incorrect ext4 checksum on /dev/loop2 [ 78.473267][ T4480] usb 6-1: Using ep0 maxpacket: 32 [ 78.501298][ T4205] udevd[4205]: incorrect ext4 checksum on /dev/loop2 [ 78.513713][ T5190] netlink: 28 bytes leftover after parsing attributes in process `syz.1.255'. [ 78.547949][ T5190] netlink: 28 bytes leftover after parsing attributes in process `syz.1.255'. [ 78.574346][ T5190] netlink: 28 bytes leftover after parsing attributes in process `syz.1.255'. [ 78.610591][ T5190] netlink: 28 bytes leftover after parsing attributes in process `syz.1.255'. [ 78.623595][ T4480] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 78.642728][ T4480] usb 6-1: config 0 interface 0 has no altsetting 1 [ 78.743422][ T4480] usb 6-1: New USB device found, idVendor=152d, idProduct=0539, bcdDevice= 0.00 [ 78.752503][ T4480] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 78.789511][ T4480] usb 6-1: SerialNumber: syz [ 78.820984][ T4480] usb 6-1: config 0 descriptor?? [ 78.857181][ T5181] set_capacity_and_notify: 2 callbacks suppressed [ 78.857195][ T5181] loop0: detected capacity change from 0 to 32768 [ 78.889634][ T4480] usb-storage 6-1:0.0: USB Mass Storage device detected [ 78.906800][ T5209] loop1: detected capacity change from 0 to 1024 [ 78.928831][ T4480] usb-storage 6-1:0.0: Quirks match for vid 152d pid 0539: 4000000 [ 79.011780][ T5181] XFS (loop0): Mounting V5 Filesystem [ 79.107819][ T4480] usb 6-1: USB disconnect, device number 2 [ 79.128609][ T5181] XFS (loop0): Ending clean mount [ 79.148990][ T5209] hfsplus: invalid length 1280 has been corrected to 255 [ 79.169756][ T5202] loop2: detected capacity change from 0 to 32768 [ 79.230005][ T5202] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.259 (5202) [ 79.286554][ T4186] XFS (loop0): Unmounting Filesystem [ 79.308303][ T5202] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 79.342034][ T5202] BTRFS warning (device loop2): excessive commit interval 3581 [ 79.349889][ T5202] BTRFS info (device loop2): force zlib compression, level 3 [ 79.357498][ T5202] BTRFS info (device loop2): metadata ratio 107050 [ 79.364330][ T5202] BTRFS info (device loop2): turning on flush-on-commit [ 79.371452][ T5202] BTRFS info (device loop2): max_inline at 4096 [ 79.385928][ T5202] BTRFS info (device loop2): using free space tree [ 79.406982][ T4478] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 79.442662][ T5202] BTRFS info (device loop2): has skinny extents [ 79.605734][ T5237] netlink: 8 bytes leftover after parsing attributes in process `syz.1.267'. [ 79.667222][ T5237] device erspan0 entered promiscuous mode [ 79.723210][ T4478] usb 4-1: Using ep0 maxpacket: 8 [ 79.730164][ T5202] BTRFS info (device loop2): enabling ssd optimizations [ 79.861572][ T5257] loop0: detected capacity change from 0 to 2048 [ 79.949828][ T5257] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 79.979309][ T5262] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 80.094469][ T4478] usb 4-1: New USB device found, idVendor=0c45, idProduct=8003, bcdDevice=f9.64 [ 80.111496][ T4478] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=67 [ 80.129561][ T4478] usb 4-1: Product: syz [ 80.133920][ T4478] usb 4-1: Manufacturer: syz [ 80.138524][ T4478] usb 4-1: SerialNumber: syz [ 80.150527][ T4478] usb 4-1: config 0 descriptor?? [ 80.176132][ T5268] program syz.5.278 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 80.210565][ T4478] gspca_main: sn9c2028-2.14.0 probing 0c45:8003 [ 80.382287][ T5282] loop2: detected capacity change from 0 to 2048 [ 80.436672][ T4478] gspca_sn9c2028: read1 error -32 [ 80.453329][ T5282] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 80.473353][ T4478] gspca_sn9c2028: read1 error -32 [ 80.501589][ T5282] EXT4-fs (loop2): mounted filesystem without journal. Opts: usrjquota=./file1,noauto_da_alloc,bsddf,,errors=continue. Quota mode: writeback. [ 80.519361][ T5282] ext4 filesystem being mounted at /45/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 80.553261][ T4791] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 80.768094][ T4480] usb 4-1: USB disconnect, device number 4 [ 80.901876][ T5294] loop5: detected capacity change from 0 to 32768 [ 80.913433][ T4791] usb 1-1: config 0 has an invalid interface number: 251 but max is 0 [ 80.921637][ T4791] usb 1-1: config 0 has no interface number 0 [ 80.968654][ T5294] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 scanned by syz.5.287 (5294) [ 81.007058][ T5309] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 81.020812][ T5294] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm [ 81.042905][ T5294] BTRFS info (device loop5): setting nodatasum [ 81.051116][ T5307] loop2: detected capacity change from 0 to 8192 [ 81.063745][ T5294] BTRFS info (device loop5): force zlib compression, level 3 [ 81.071266][ T5294] BTRFS info (device loop5): setting incompat feature flag for COMPRESS_LZO (0x8) [ 81.086194][ T5294] BTRFS info (device loop5): use lzo compression, level 0 [ 81.096841][ T5294] BTRFS info (device loop5): turning on flush-on-commit [ 81.104221][ T4791] usb 1-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 81.113639][ T5294] BTRFS info (device loop5): enabling auto defrag [ 81.120450][ T4791] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.128867][ T5294] BTRFS info (device loop5): max_inline at 0 [ 81.137471][ T4791] usb 1-1: Product: syz [ 81.141656][ T4791] usb 1-1: Manufacturer: syz [ 81.146397][ T5294] BTRFS info (device loop5): using free space tree [ 81.152911][ T5294] BTRFS info (device loop5): has skinny extents [ 81.159253][ T4791] usb 1-1: SerialNumber: syz [ 81.165517][ T4791] usb 1-1: config 0 descriptor?? [ 81.172623][ T5313] program syz.1.296 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 81.215317][ T5307] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 81.238812][ T5307] REISERFS (device loop2): using ordered data mode [ 81.280756][ T5307] reiserfs: using flush barriers [ 81.373649][ T5294] BTRFS info (device loop5): enabling ssd optimizations [ 81.374802][ T5307] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 7, max trans age 7 [ 81.488883][ T5307] REISERFS (device loop2): checking transaction log (loop2) [ 81.521666][ T5342] kAFS: bad VL server IP address [ 81.544975][ T5307] REISERFS (device loop2): Using r5 hash to sort names [ 81.571709][ T5307] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 81.629598][ T5307] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 81.863525][ T4791] asix 1-1:0.251 (unnamed net_device) (uninitialized): Interface mode not supported by driver [ 81.886046][ T4791] asix: probe of 1-1:0.251 failed with error -524 [ 82.131674][ T4479] usb 1-1: USB disconnect, device number 4 [ 82.573431][ T4475] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 82.789757][ T5362] loop5: detected capacity change from 0 to 131072 [ 82.815446][ T4202] Bluetooth: hci5: sending frame failed (-49) [ 82.859541][ T4475] usb 4-1: Using ep0 maxpacket: 32 [ 82.861950][ T5362] F2FS-fs (loop5): invalid crc value [ 82.898324][ T5397] loop2: detected capacity change from 0 to 512 [ 82.940787][ T5397] EXT4-fs (loop2): Ignoring removed bh option [ 82.944883][ T5362] F2FS-fs (loop5): Found nat_bits in checkpoint [ 82.987726][ T5397] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 82.999049][ T5362] F2FS-fs (loop5): Cannot turn on quotas: -2 on 2 [ 83.013411][ T4475] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 83.031831][ T5362] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4 [ 83.061046][ T4475] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 83.100285][ T4475] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 83.115722][ T5397] EXT4-fs (loop2): mounted filesystem without journal. Opts: barrier=0x0000000000000081,minixdf,bh,delalloc,dioread_nolock,noquota,,errors=continue. Quota mode: writeback. [ 83.136030][ T5397] ext4 filesystem being mounted at /49/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 83.180890][ T4475] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.239471][ T4475] usb 4-1: config 0 descriptor?? [ 83.315285][ T4475] hub 4-1:0.0: USB hub found [ 83.543532][ T4475] hub 4-1:0.0: 12 ports detected [ 83.566602][ T4475] hub 4-1:0.0: insufficient power available to use all downstream ports [ 83.793587][ T4475] hub 4-1:0.0: hub_hub_status failed (err = 0) [ 83.799811][ T4475] hub 4-1:0.0: config failed, can't get hub status (err -5) [ 83.842986][ T5413] loop1: detected capacity change from 0 to 32768 [ 83.850372][ T5429] binder: binder_mmap: 5428 200000000000-200000b36000 bad vm_flags failed -1 [ 83.913658][ T5413] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 83.921254][ T5413] IPv6: NLM_F_CREATE should be set when creating new route [ 83.928549][ T5413] IPv6: NLM_F_CREATE should be set when creating new route [ 83.935790][ T5413] IPv6: NLM_F_CREATE should be set when creating new route [ 83.967426][ T5434] ERROR: (device loop1): dbAlloc: the hint is outside the map [ 83.967426][ T5434] [ 83.987023][ T5433] loop2: detected capacity change from 0 to 256 [ 83.987586][ T5434] ialloc: diAlloc returned -5! [ 84.052839][ T5433] exFAT-fs (loop2): failed to load upcase table (idx : 0x00011a39, chksum : 0xd4e5c97b, utbl_chksum : 0xe619d30d) [ 84.105981][ T4475] usbhid 4-1:0.0: can't add hid device: -71 [ 84.112024][ T4475] usbhid: probe of 4-1:0.0 failed with error -71 [ 84.190017][ T4475] usb 4-1: USB disconnect, device number 5 [ 84.378434][ T5449] netlink: 8 bytes leftover after parsing attributes in process `syz.2.324'. [ 84.394289][ T5449] device gretap0 entered promiscuous mode [ 84.526043][ T5459] program syz.2.326 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 84.560724][ T5463] block nbd5: NBD_DISCONNECT [ 84.577262][ T5465] loop3: detected capacity change from 0 to 512 [ 84.827898][ T4198] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 84.839966][ T4482] Bluetooth: hci5: command 0xfc11 tx timeout [ 85.037277][ T5490] loop0: detected capacity change from 0 to 1024 [ 85.125570][ T5490] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 85.127049][ T5488] loop3: detected capacity change from 0 to 4096 [ 85.157404][ T9] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.186197][ T5490] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 85.212943][ T5490] jbd2_journal_init_inode: Cannot locate journal superblock [ 85.252188][ T9] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.263018][ T5490] EXT4-fs (loop0): Could not load journal inode [ 85.279870][ T5505] netlink: 28 bytes leftover after parsing attributes in process `syz.2.345'. [ 85.401231][ T9] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.489744][ T5516] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 85.520238][ T9] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.758219][ T5529] netlink: 774 bytes leftover after parsing attributes in process `syz.0.353'. [ 85.781977][ T5532] kernel read not supported for file /per_cpu/cpu0/trace (pid: 5532 comm: syz.5.354) [ 85.798005][ T5529] netlink: 'syz.0.353': attribute type 1 has an invalid length. [ 85.805043][ T25] audit: type=1800 audit(1791932235.113:6): pid=5532 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.354" name="trace" dev="tracefs" ino=25830 res=0 errno=0 [ 85.971312][ T5539] process 'syz.5.356' launched './file0' with NULL argv: empty string added [ 86.203322][ T4790] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 86.457112][ T4790] usb 1-1: Using ep0 maxpacket: 16 [ 86.472615][ T5537] chnl_net:caif_netlink_parms(): no params data found [ 86.534114][ T4475] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 86.573431][ T4790] usb 1-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 86.598548][ T4790] usb 1-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid wMaxPacketSize 0 [ 86.615629][ T4790] usb 1-1: config 0 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 86.636886][ T4790] usb 1-1: config 0 interface 0 has no altsetting 0 [ 86.653257][ T4790] usb 1-1: New USB device found, idVendor=046d, idProduct=c532, bcdDevice= 0.00 [ 86.662773][ T4790] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.687828][ T5537] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.698010][ T5537] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.709080][ T4790] usb 1-1: config 0 descriptor?? [ 86.718438][ T5537] device bridge_slave_0 entered promiscuous mode [ 86.730643][ T5591] loop5: detected capacity change from 0 to 164 [ 86.734640][ T5537] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.753330][ T5537] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.761463][ T5537] device bridge_slave_1 entered promiscuous mode [ 86.834189][ T5537] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.900581][ T5537] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.943360][ T4475] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 86.973250][ T4475] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.011311][ T5537] team0: Port device team_slave_0 added [ 87.019104][ T4475] usb 3-1: config 0 descriptor?? [ 87.035797][ T5537] team0: Port device team_slave_1 added [ 87.076300][ T5537] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.084749][ T4475] cp210x 3-1:0.0: cp210x converter detected [ 87.097795][ T5537] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.125392][ T5537] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.151841][ T9] device hsr_slave_0 left promiscuous mode [ 87.161533][ T9] device hsr_slave_1 left promiscuous mode [ 87.174439][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 87.188693][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 87.213832][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 87.234757][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 87.253683][ T9] device bridge_slave_1 left promiscuous mode [ 87.268306][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.279556][ T5608] loop5: detected capacity change from 0 to 1024 [ 87.300909][ T9] device bridge_slave_0 left promiscuous mode [ 87.312420][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.342883][ T9] device veth1_macvtap left promiscuous mode [ 87.351351][ T9] device veth0_macvtap left promiscuous mode [ 87.358042][ T9] device veth1_vlan left promiscuous mode [ 87.363965][ T9] device veth0_vlan left promiscuous mode [ 87.403444][ T4790] usb 1-1: USB disconnect, device number 5 [ 87.492250][ T5612] loop5: detected capacity change from 0 to 128 [ 87.523362][ T4475] cp210x 3-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 87.593683][ T4475] usb 3-1: cp210x converter now attached to ttyUSB0 [ 87.611122][ T5612] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 87.623604][ T5612] ext4 filesystem being mounted at /73/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 87.701979][ T9] team0 (unregistering): Port device team_slave_1 removed [ 87.709417][ T4198] Bluetooth: hci1: Entering manufacturer mode failed (-110) [ 87.769386][ T5616] loop5: detected capacity change from 0 to 1024 [ 87.771110][ T4790] usb 3-1: USB disconnect, device number 4 [ 87.799436][ T4790] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 87.820295][ T5616] hfsplus: invalid length 256 has been corrected to 255 [ 87.826057][ T4790] cp210x 3-1:0.0: device disconnected [ 87.836853][ T9] team0 (unregistering): Port device team_slave_0 removed [ 87.852271][ T5616] hfsplus: invalid length 256 has been corrected to 255 [ 87.866159][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 87.902119][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 88.002598][ T5622] loop5: detected capacity change from 0 to 256 [ 88.027064][ T4791] Bluetooth: hci5: command 0x0409 tx timeout [ 88.137312][ T9] bond0 (unregistering): Released all slaves [ 88.209550][ T5537] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.220981][ T5537] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.269375][ T5537] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.299392][ T5628] netlink: 116 bytes leftover after parsing attributes in process `syz.5.380'. [ 88.427043][ T5537] device hsr_slave_0 entered promiscuous mode [ 88.435319][ T5626] loop0: detected capacity change from 0 to 32768 [ 88.489051][ T5537] device hsr_slave_1 entered promiscuous mode [ 88.517959][ T5537] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 88.528872][ T5537] Cannot create hsr debugfs directory [ 88.799074][ T5653] EXT4-fs (loop5): Ignoring removed oldalloc option [ 88.862461][ T5658] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 88.891432][ T5653] EXT4-fs error (device loop5): ext4_orphan_get:1436: comm syz.5.388: bad orphan inode 15 [ 88.923831][ T5658] EXT4-fs error (device loop2): ext4_get_journal_inode:5187: inode #32: comm syz.2.390: iget: special inode unallocated [ 88.936688][ T5653] ext4_test_bit(bit=14, block=5) = 0 [ 88.941989][ T5653] EXT4-fs (loop5): mounted filesystem without journal. Opts: noblock_validity,lazytime,oldalloc,stripe=0x0000000000000001,nobarrier,journal_ioprio=0x0000000000000003,nolazytime,noload,,errors=continue. Quota mode: none. [ 89.012962][ T5658] EXT4-fs (loop2): no journal found [ 89.041484][ T5658] EXT4-fs (loop2): can't get journal size [ 89.065012][ T5537] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 89.076492][ T5658] EXT4-fs (loop2): filesystem is read-only [ 89.082355][ T5658] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,noload,noblock_validity,bsdgroups,nobarrier,. Quota mode: none. [ 89.124019][ T5537] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 89.135092][ T5537] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 89.165353][ T5537] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 89.181981][ T5658] EXT4-fs (loop2): shut down requested (2) [ 89.217438][ T5653] EXT4-fs (loop5): Remounting file system with no journal so ignoring journalled data option [ 89.364591][ T5681] netlink: 'syz.3.399': attribute type 2 has an invalid length. [ 89.540661][ T5537] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.552388][ T25] audit: type=1326 audit(1791932238.863:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5689 comm="syz.3.402" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02a6f6a2d9 code=0x7ffc0000 [ 89.612850][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 89.641859][ T25] audit: type=1326 audit(1791932238.893:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5689 comm="syz.3.402" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02a6f6a2d9 code=0x7ffc0000 [ 89.663699][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 89.685445][ T5537] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.718487][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 89.758805][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 89.763514][ T25] audit: type=1326 audit(1791932238.903:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5689 comm="syz.3.402" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f02a6f6a2d9 code=0x7ffc0000 [ 89.798072][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.800654][ T5703] set_capacity_and_notify: 2 callbacks suppressed [ 89.800667][ T5703] loop2: detected capacity change from 0 to 512 [ 89.805230][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.831533][ T25] audit: type=1326 audit(1791932238.903:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5689 comm="syz.3.402" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02a6f6a2d9 code=0x7ffc0000 [ 89.877374][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 89.896313][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 89.921612][ T25] audit: type=1326 audit(1791932238.903:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5689 comm="syz.3.402" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02a6f6a2d9 code=0x7ffc0000 [ 89.924554][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 90.010314][ T5703] EXT4-fs error (device loop2): ext4_orphan_get:1410: inode #15: comm syz.2.406: iget: bad i_size value: 38620345925642 [ 90.011306][ T25] audit: type=1326 audit(1791932238.903:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5689 comm="syz.3.402" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f02a6f6a2d9 code=0x7ffc0000 [ 90.049546][ T25] audit: type=1326 audit(1791932238.933:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5689 comm="syz.3.402" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02a6f6a2d9 code=0x7ffc0000 [ 90.075445][ T25] audit: type=1326 audit(1791932238.933:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5689 comm="syz.3.402" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02a6f6a2d9 code=0x7ffc0000 [ 90.099455][ T25] audit: type=1326 audit(1791932238.933:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5689 comm="syz.3.402" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7f02a6f6a2d9 code=0x7ffc0000 [ 90.123582][ T4479] Bluetooth: hci5: command 0x041b tx timeout [ 90.130735][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.137851][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.146191][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 90.156327][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 90.164928][ T5703] EXT4-fs error (device loop2): ext4_orphan_get:1415: comm syz.2.406: couldn't read orphan inode 15 (err -117) [ 90.182486][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 90.208330][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 90.227765][ T5703] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 90.228593][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 90.289747][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 90.311098][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 90.364352][ T4549] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 90.378603][ T4549] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 90.413893][ T4549] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 90.451598][ T4549] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 90.455237][ T5735] loop3: detected capacity change from 0 to 256 [ 90.497827][ T5537] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 90.599701][ T5742] input: syz1 as /devices/virtual/input/input7 [ 90.613880][ T5735] exfat: Deprecated parameter 'namecase' [ 90.632827][ T5735] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x36df086c, utbl_chksum : 0xe619d30d) [ 90.676284][ T5744] loop2: detected capacity change from 0 to 2048 [ 90.819629][ T5744] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 90.858489][ T5751] netlink: 'syz.5.422': attribute type 3 has an invalid length. [ 90.944568][ T5751] netlink: 152 bytes leftover after parsing attributes in process `syz.5.422'. [ 91.012408][ T4549] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 91.015130][ T5744] overlayfs: upper fs needs to support d_type. [ 91.029364][ T4549] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 91.078979][ T5537] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.127742][ T5764] netlink: 8 bytes leftover after parsing attributes in process `syz.0.425'. [ 91.137049][ T5765] capability: warning: `syz.5.426' uses deprecated v2 capabilities in a way that may be insecure [ 91.145075][ T5744] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 91.173287][ T5744] overlayfs: failed to set xattr on upper [ 91.196857][ T5769] loop3: detected capacity change from 0 to 256 [ 91.213288][ T5744] overlayfs: conflicting lowerdir path [ 91.371200][ T5769] FAT-fs (loop3): Directory bread(block 64) failed [ 91.390975][ T5769] FAT-fs (loop3): Directory bread(block 65) failed [ 91.427635][ T5769] FAT-fs (loop3): Directory bread(block 66) failed [ 91.453868][ T5769] FAT-fs (loop3): Directory bread(block 67) failed [ 91.469058][ T5769] FAT-fs (loop3): Directory bread(block 68) failed [ 91.496726][ T5769] FAT-fs (loop3): Directory bread(block 69) failed [ 91.517032][ T5769] FAT-fs (loop3): Directory bread(block 70) failed [ 91.527090][ T5769] FAT-fs (loop3): Directory bread(block 71) failed [ 91.547613][ T26] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 91.582771][ T5769] FAT-fs (loop3): Directory bread(block 72) failed [ 91.610788][ T5769] FAT-fs (loop3): Directory bread(block 73) failed [ 91.656042][ T4479] hid-generic 0005:046D:0A0E.0004: item fetching failed at offset 0/1 [ 91.673803][ T664] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 91.698708][ T664] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 91.743836][ T4479] hid-generic: probe of 0005:046D:0A0E.0004 failed with error -22 [ 91.778304][ T664] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 91.796603][ T664] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 91.838580][ T664] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 91.850667][ T5800] loop0: detected capacity change from 0 to 1024 [ 91.859902][ T664] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 91.933330][ T5537] device veth0_vlan entered promiscuous mode [ 91.933405][ T26] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 91.997717][ T26] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 92.000917][ T5537] device veth1_vlan entered promiscuous mode [ 92.125144][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 92.143938][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 92.188392][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 92.193293][ T4479] Bluetooth: hci5: command 0x040f tx timeout [ 92.220329][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 92.234581][ T26] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 92.257684][ T26] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.275981][ T5537] device veth0_macvtap entered promiscuous mode [ 92.299238][ T26] usb 6-1: Product: syz [ 92.320546][ T26] usb 6-1: Manufacturer: syz [ 92.325610][ T26] usb 6-1: SerialNumber: syz [ 92.326896][ T5537] device veth1_macvtap entered promiscuous mode [ 92.370127][ T26] usb 6-1: config 0 descriptor?? [ 92.389177][ T5820] netlink: 8 bytes leftover after parsing attributes in process `syz.2.440'. [ 92.439839][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 92.458683][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 92.501993][ T5537] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.531533][ T5537] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.542554][ T5537] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.584441][ T5537] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.613297][ T5537] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.629315][ T5537] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.648363][ T5537] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.664219][ T5537] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.696945][ T26] usb 6-1: USB disconnect, device number 3 [ 92.758526][ T5537] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.779427][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 92.813973][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 92.824170][ T5537] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.853264][ T5537] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.899697][ T5537] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.917290][ T5537] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.927946][ T5537] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.939423][ T5537] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.952906][ T5537] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.983746][ T5537] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.012646][ T5537] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.034436][ T4549] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 93.050684][ T5845] loop3: detected capacity change from 0 to 16 [ 93.059847][ T4549] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 93.090701][ T5845] erofs: (device loop3): erofs_load_compr_cfgs: try to load compressed fs with unsupported algorithms fffe [ 93.118818][ T5537] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.138252][ T5537] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.183408][ T5537] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.192144][ T5537] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.424071][ T664] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.432180][ T664] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.499826][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 93.518826][ T5855] loop0: detected capacity change from 0 to 8192 [ 93.519823][ T4254] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.549157][ T4254] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.557698][ T664] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 93.611499][ T5855] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 93.635503][ T5855] REISERFS (device loop0): using ordered data mode [ 93.642580][ T5855] reiserfs: using flush barriers [ 93.758159][ T5855] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 7, max trans age 7 [ 93.779816][ T5871] loop3: detected capacity change from 0 to 4096 [ 93.787199][ T5876] netlink: 8 bytes leftover after parsing attributes in process `syz.5.458'. [ 93.853645][ T5855] REISERFS (device loop0): checking transaction log (loop0) [ 93.878682][ T5871] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,,errors=continue. Quota mode: writeback. [ 93.933695][ T5878] loop6: detected capacity change from 0 to 8192 [ 93.940307][ T5855] REISERFS (device loop0): Using r5 hash to sort names [ 93.981695][ T5855] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 93.995388][ T5888] scsi_strcpy_devinfo: model string 'w|auNӤ1pEwzdz' is too long [ 94.022079][ T5855] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 94.038913][ T5892] block2mtd: too many arguments [ 94.102306][ T5855] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 94.263774][ T4476] Bluetooth: hci5: command 0x0419 tx timeout [ 94.379915][ T5911] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 94.473464][ C1] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 94.642261][ T5930] IPv6: ADDRCONF(NETDEV_CHANGE): ipvlan2: link becomes ready [ 94.850321][ T5947] loop6: detected capacity change from 0 to 256 [ 94.913813][ T5947] exfat: Bad value for 'uid' [ 94.982108][ T5949] loop2: detected capacity change from 0 to 2048 [ 95.164292][ T5949] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 95.190527][ T5962] loop6: detected capacity change from 0 to 256 [ 95.218880][ T5949] ext4 filesystem being mounted at /95/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 95.290010][ T5921] loop0: detected capacity change from 0 to 40427 [ 95.351410][ T5970] loop5: detected capacity change from 0 to 1764 [ 95.360152][ T5921] F2FS-fs (loop0): build fault injection attr: rate: 690, type: 0x1ffff [ 95.396911][ T5921] F2FS-fs (loop0): invalid crc value [ 95.435999][ T5921] F2FS-fs (loop0): Found nat_bits in checkpoint [ 95.641580][ T5988] loop3: detected capacity change from 0 to 512 [ 95.684632][ T5921] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 95.738342][ T5988] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 95.864248][ T5988] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.496: invalid indirect mapped block 9 (level 0) [ 95.899114][ T5988] EXT4-fs (loop3): 1 truncate cleaned up [ 95.904927][ T5988] EXT4-fs (loop3): mounted filesystem without journal. Opts: init_itable,inode_readahead_blks=0x0000000008000000,nodiscard,,errors=continue. Quota mode: none. [ 95.996515][ T4186] attempt to access beyond end of device [ 95.996515][ T4186] loop0: rw=2049, want=45104, limit=40427 [ 96.129582][ T6014] loop2: detected capacity change from 0 to 256 [ 96.440577][ T6033] netlink: 'syz.3.512': attribute type 12 has an invalid length. [ 96.630717][ T6045] loop3: detected capacity change from 0 to 2048 [ 96.756245][ T6045] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 96.810840][ T25] kauditd_printk_skb: 3 callbacks suppressed [ 96.810853][ T25] audit: type=1800 audit(1791932246.113:19): pid=6045 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.518" name="file2" dev="loop3" ino=1347 res=0 errno=0 [ 96.938772][ T6074] [ 96.976874][ T6066] loop0: detected capacity change from 0 to 4096 [ 97.115066][ T6085] loop3: detected capacity change from 0 to 256 [ 97.161740][ T6066] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,,errors=continue. Quota mode: writeback. [ 97.262105][ T6085] FAT-fs (loop3): Directory bread(block 64) failed [ 97.281182][ T6086] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=262151, location=262151 [ 97.301457][ T6085] FAT-fs (loop3): Directory bread(block 65) failed [ 97.346927][ T6086] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 97.364258][ T6085] FAT-fs (loop3): Directory bread(block 66) failed [ 97.387118][ T6085] FAT-fs (loop3): Directory bread(block 67) failed [ 97.416765][ T6085] FAT-fs (loop3): Directory bread(block 68) failed [ 97.451436][ T6085] FAT-fs (loop3): Directory bread(block 69) failed [ 97.478176][ T6093] EXT4-fs (loop2): Ignoring removed oldalloc option [ 97.528834][ T6085] FAT-fs (loop3): Directory bread(block 70) failed [ 97.571034][ T6093] EXT4-fs (loop2): mounted filesystem without journal. Opts: oldalloc,nodioread_nolock,sb=0x00000000000007ff,bsddf,journal_dev=0x0000000000000005,grpjquota=,noquota,,errors=continue. Quota mode: none. [ 97.612179][ T6085] FAT-fs (loop3): Directory bread(block 71) failed [ 97.619944][ T6085] FAT-fs (loop3): Directory bread(block 72) failed [ 97.635178][ T6085] FAT-fs (loop3): Directory bread(block 73) failed [ 97.650865][ T6093] ext4 filesystem being mounted at /107/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 97.772763][ T25] audit: type=1800 audit(1791932247.073:20): pid=6085 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.531" name="file1" dev="loop3" ino=1048666 res=0 errno=0 [ 97.784977][ T6085] attempt to access beyond end of device [ 97.784977][ T6085] loop3: rw=0, want=1196, limit=256 [ 97.944476][ T6085] attempt to access beyond end of device [ 97.944476][ T6085] loop3: rw=0, want=1196, limit=256 [ 98.545220][ T6175] 9p: Unknown uid 18446744073709551615 [ 98.724365][ T4264] kernel write not supported for file /input/event0 (pid: 4264 comm: kworker/0:9) [ 98.807144][ T6192] netlink: 28 bytes leftover after parsing attributes in process `syz.3.564'. [ 98.836695][ T6192] netlink: 28 bytes leftover after parsing attributes in process `syz.3.564'. [ 99.124417][ T6209] gfs2: path_lookup on c::: returned error -2 [ 99.183440][ T6213] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 99.481555][ T25] audit: type=1800 audit(1791932248.783:21): pid=6216 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.574" name="file1" dev="loop2" ino=21 res=0 errno=0 [ 99.750339][ T6239] netlink: 256 bytes leftover after parsing attributes in process `syz.0.584'. [ 99.788386][ T6239] netlink: 48 bytes leftover after parsing attributes in process `syz.0.584'. [ 99.934857][ T6261] set_capacity_and_notify: 7 callbacks suppressed [ 99.934873][ T6261] loop0: detected capacity change from 0 to 64 [ 100.045153][ T6258] loop5: detected capacity change from 0 to 4096 [ 100.123626][ T6258] EXT4-fs (loop5): Test dummy encryption mode enabled [ 100.130450][ T6258] EXT4-fs (loop5): inline encryption not supported [ 100.153273][ T4232] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 100.162502][ T6258] EXT4-fs (loop5): Quota format mount options ignored when QUOTA feature is enabled [ 100.196357][ T6258] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec1a8, mo2=0003] [ 100.208504][ T6258] System zones: 0-5 [ 100.218047][ T6258] EXT4-fs (loop5): mounted filesystem without journal. Opts: debug,test_dummy_encryption=v1,inlinecrypt,delalloc,noinit_itable,norecovery,minixdf,nodioread_nolock,errors=remount-ro,jqfmt=vfsv0,usrquota,max_dir_size_kb=0x00000000000001ff,. Quota mode: writeback. [ 100.393966][ T4232] usb 7-1: Using ep0 maxpacket: 16 [ 100.420522][ T6274] loop2: detected capacity change from 0 to 4096 [ 100.491098][ T6287] kAFS: bad VL server IP address [ 100.514199][ T4232] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 100.549540][ T4232] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 100.591256][ T6292] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 100.610705][ T4232] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 100.643317][ T6298] loop5: detected capacity change from 0 to 64 [ 100.679237][ T6299] loop3: detected capacity change from 0 to 1024 [ 100.681118][ T4232] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 100.737979][ T4232] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.782466][ T6299] EXT4-fs (loop3): Ignoring removed bh option [ 100.810495][ T4232] usb 7-1: config 0 descriptor?? [ 100.859582][ T6299] EXT4-fs (loop3): mounted filesystem without journal. Opts: user_xattr,commit=0x0000000000000005,noquota,grpid,auto_da_alloc,grpid,bh,,errors=continue. Quota mode: none. [ 100.883102][ T6299] ext4 filesystem being mounted at /139/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 100.926888][ T6299] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.604: bg 0: block 112: padding at end of block bitmap is not set [ 102.043179][ C0] sched: RT throttling activated [ 103.149245][ T6324] loop2: detected capacity change from 0 to 131072 [ 103.288753][ T6324] F2FS-fs (loop2): invalid crc value [ 103.360236][ T6324] F2FS-fs (loop2): Found nat_bits in checkpoint [ 103.594551][ T6324] F2FS-fs (loop2): Cannot turn on quotas: -2 on 2 [ 103.624223][ T6324] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 103.958067][ T6360] program syz.5.616 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 104.179356][ T4232] usbhid 7-1:0.0: can't add hid device: -71 [ 104.193898][ T4232] usbhid: probe of 7-1:0.0 failed with error -71 [ 104.290014][ T4232] usb 7-1: USB disconnect, device number 2 [ 105.184217][ T6363] loop3: detected capacity change from 0 to 2048 [ 105.393767][ T6363] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found! [ 105.803324][ T6363] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 107.692371][ T6391] loop6: detected capacity change from 0 to 512 [ 108.314937][ T6391] FAT-fs (loop6): error, clusters badly computed (0 != 1) [ 108.390929][ T6391] FAT-fs (loop6): Filesystem has been set read-only [ 108.458209][ T6391] FAT-fs (loop6): error, clusters badly computed (1 != 2) [ 108.595900][ T6395] syz.6.622 (6395) used greatest stack depth: 20512 bytes left [ 111.053833][ T4669] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 111.433583][ T4669] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 111.458321][ T4669] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 111.496285][ T4669] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 111.536945][ T4669] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 111.568760][ T4669] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.609081][ T4669] usb 4-1: config 0 descriptor?? [ 111.660458][ T6444] loop6: detected capacity change from 0 to 512 [ 111.746688][ T6444] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #11: comm syz.6.639: invalid indirect mapped block 256 (level 2) [ 111.782015][ T6444] EXT4-fs (loop6): Remounting filesystem read-only [ 111.799840][ T6444] EXT4-fs (loop6): 2 truncates cleaned up [ 111.819817][ T6444] EXT4-fs (loop6): mounted filesystem without journal. Opts: errors=remount-ro,barrier,. Quota mode: writeback. [ 111.823611][ T6453] loop2: detected capacity change from 0 to 512 [ 112.041159][ T6453] EXT4-fs (loop2): Test dummy encryption mode enabled [ 112.080293][ T6453] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: inode #2: comm syz.2.642: missing EA_INODE flag [ 112.107312][ T6453] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.642: error while reading EA inode 2 err=-117 [ 112.129683][ T6453] EXT4-fs (loop2): 1 orphan inode deleted [ 112.135988][ T6453] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption,nogrpid,,errors=continue. Quota mode: writeback. [ 112.188110][ T4669] plantronics 0003:047F:FFFF.0005: unbalanced delimiter at end of report description [ 112.219367][ T4669] plantronics 0003:047F:FFFF.0005: parse failed [ 112.225895][ T4669] plantronics: probe of 0003:047F:FFFF.0005 failed with error -22 [ 112.288993][ T6484] loop0: detected capacity change from 0 to 128 [ 112.473514][ T4482] usb 4-1: USB disconnect, device number 6 [ 112.604229][ T6503] netlink: 12 bytes leftover after parsing attributes in process `syz.6.656'. [ 112.634561][ T6503] netlink: 580 bytes leftover after parsing attributes in process `syz.6.656'. [ 112.919282][ T6531] loop6: detected capacity change from 0 to 1024 [ 112.951575][ T6536] program syz.2.668 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 113.099594][ T4254] hfsplus: b-tree write err: -5, ino 25 [ 113.109437][ T4254] hfsplus: b-tree write err: -5, ino 4 [ 113.126748][ T4254] hfsplus: b-tree write err: -5, ino 2 [ 113.146632][ T4254] hfsplus: b-tree write err: -5, ino 17 [ 113.168249][ T6544] loop2: detected capacity change from 0 to 512 [ 113.252833][ T6544] EXT4-fs error (device loop2): ext4_iget_extra_inode:4573: inode #15: comm syz.2.672: corrupted in-inode xattr [ 113.300805][ T6544] EXT4-fs error (device loop2): ext4_orphan_get:1415: comm syz.2.672: couldn't read orphan inode 15 (err -117) [ 113.344642][ T6544] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 113.394630][ T4476] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 113.407993][ T6544] EXT4-fs error (device loop2): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz.2.672: bad entry in directory: inode out of bounds - offset=0, inode=87, rec_len=12, size=1024 fake=0 [ 113.623046][ T6569] netlink: 20 bytes leftover after parsing attributes in process `syz.2.676'. [ 113.764704][ T6586] loop2: detected capacity change from 0 to 8 [ 113.801428][ T6586] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 113.825254][ T6589] comedi comedi0: No channels found! [ 113.833465][ T4476] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 113.833491][ T4476] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 113.933699][ T4476] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 113.933729][ T4476] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 113.933749][ T4476] usb 4-1: SerialNumber: syz [ 113.982562][ T6599] loop5: detected capacity change from 0 to 1024 [ 114.026294][ T6600] loop2: detected capacity change from 0 to 1024 [ 114.122637][ T6600] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 114.164215][ T6600] EXT4-fs (loop2): Errors on filesystem, clearing orphan list. [ 114.164242][ T6600] EXT4-fs (loop2): mounted filesystem without journal. Opts: norecovery,quota,,errors=continue. Quota mode: writeback. [ 114.259062][ T4476] usb 4-1: 0:2 : does not exist [ 114.286482][ T4476] usb 4-1: USB disconnect, device number 7 [ 114.312113][ T6599] hfsplus: xattr searching failed [ 114.391471][ T4254] hfsplus: b-tree write err: -5, ino 3 [ 114.517646][ T6606] loop6: detected capacity change from 0 to 32768 [ 114.543006][ T4205] udevd[4205]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 114.684892][ T6606] XFS (loop6): Mounting V5 Filesystem [ 114.814721][ T6606] XFS (loop6): Ending clean mount [ 114.930070][ T6655] netlink: 4 bytes leftover after parsing attributes in process `syz.3.700'. [ 114.953075][ T5537] XFS (loop6): Unmounting Filesystem [ 115.101414][ T25] audit: type=1400 audit(1791932264.403:22): apparmor="STATUS" info="failed to unpack profile capabilities" error=-71 profile="unconfined" name="foo" pid=6668 comm="syz.3.706" name="foo" offset=76 [ 115.234615][ T6682] syz.3.712 uses obsolete (PF_INET,SOCK_PACKET) [ 115.490288][ T6695] loop3: detected capacity change from 0 to 128 [ 115.524638][ T4232] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 115.560592][ T6695] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 115.582922][ T6695] hpfs: filesystem error: improperly stopped [ 115.594738][ T6695] hpfs: You really don't want any checks? You are crazy... [ 115.602616][ T6695] hpfs: hpfs_map_sector(): read error [ 115.611439][ T6695] hpfs: code page support is disabled [ 115.626112][ T6695] hpfs: filesystem error: map_dirent: not a directory [ 115.642883][ T6695] [ 115.647745][ T6695] hpfs: hpfs_map_4sectors(): unaligned read [ 115.657097][ T6695] hpfs: filesystem error: unable to find root dir [ 115.764238][ T6677] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x40002010) [ 115.820369][ T6677] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 115.843408][ T6677] F2FS-fs (loop2): invalid crc value [ 115.897500][ T4232] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 115.913554][ T6677] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241185545270265317) [ 115.924893][ T4232] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 115.924937][ T4232] usb 1-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 115.924957][ T4232] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.965069][ T6711] EXT4-fs error (device loop6): ext4_orphan_get:1410: inode #15: comm syz.6.717: inode has both inline data and extents flags [ 115.984064][ T4232] usb 1-1: config 0 descriptor?? [ 116.018101][ T6711] EXT4-fs (loop6): Remounting filesystem read-only [ 116.031222][ T6711] EXT4-fs error (device loop6): ext4_orphan_get:1415: comm syz.6.717: couldn't read orphan inode 15 (err -117) [ 116.061686][ T6711] EXT4-fs (loop6): Remounting filesystem read-only [ 116.083270][ T6711] EXT4-fs (loop6): mounted filesystem without journal. Opts: barrier,usrquota,errors=remount-ro,grpid,. Quota mode: writeback. [ 116.113996][ T6677] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0 [ 116.121061][ T6677] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 116.130817][ T6711] EXT4-fs error (device loop6): ext4_add_entry:2488: inode #2: comm syz.6.717: Directory hole found for htree leaf block 0 [ 116.163248][ T6711] EXT4-fs (loop6): Remounting filesystem read-only [ 116.185569][ T6711] EXT4-fs error (device loop6): htree_dirblock_to_tree:1083: inode #2: comm syz.6.717: Directory hole found for htree leaf block 0 [ 116.227120][ T6711] EXT4-fs (loop6): Remounting filesystem read-only [ 116.256156][ T4194] attempt to access beyond end of device [ 116.256156][ T4194] loop2: rw=524288, want=45072, limit=40427 [ 116.295255][ T4194] attempt to access beyond end of device [ 116.295255][ T4194] loop2: rw=0, want=45072, limit=40427 [ 116.471677][ T4232] hid-led 0003:1D34:000A.0006: unbalanced collection at end of report description [ 116.491634][ T4232] hid-led: probe of 0003:1D34:000A.0006 failed with error -22 [ 116.520171][ T6745] openvswitch: netlink: Actions may not be safe on all matching packets [ 116.654201][ T6752] i2c i2c-0: new_device: Instantiated device stusb1600 at 0x28 [ 116.723405][ T4232] usb 1-1: USB disconnect, device number 6 [ 116.730573][ T4194] attempt to access beyond end of device [ 116.730573][ T4194] loop2: rw=2049, want=45104, limit=40427 [ 116.771711][ T664] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.897770][ T664] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.907112][ T6730] set_capacity_and_notify: 2 callbacks suppressed [ 116.907124][ T6730] loop3: detected capacity change from 0 to 32768 [ 116.949505][ T6730] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.722 (6730) [ 117.002700][ T6730] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 117.021038][ T6730] BTRFS info (device loop3): force clearing of disk cache [ 117.023525][ T664] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.040043][ T6730] BTRFS info (device loop3): metadata ratio 0 [ 117.048069][ T6730] BTRFS info (device loop3): enabling ssd optimizations [ 117.056532][ T6730] BTRFS info (device loop3): using spread ssd allocation scheme [ 117.065111][ T6730] BTRFS info (device loop3): using free space tree [ 117.072304][ T6730] BTRFS info (device loop3): has skinny extents [ 117.132756][ T664] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.295918][ T664] netdevsim netdevsim10 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.298558][ T6730] BTRFS info (device loop3): clearing free space tree [ 117.315496][ T6730] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 117.332039][ T6730] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 117.352033][ T6730] BTRFS info (device loop3): creating free space tree [ 117.360015][ T6730] BTRFS info (device loop3): setting compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 117.391141][ T6730] BTRFS info (device loop3): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 117.431142][ T664] tipc: Disabling bearer [ 117.447981][ T664] tipc: Left network mode [ 118.181358][ T664] rdma_rxe: ignoring netdev event = 26 for veth1_virt_wifi [ 118.189760][ T664] rdma_rxe: ignoring netdev event = 21 for veth1_virt_wifi [ 118.202050][ T664] device hsr_slave_0 left promiscuous mode [ 118.208853][ T664] device hsr_slave_1 left promiscuous mode [ 118.224269][ T664] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 118.231756][ T664] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 118.245327][ T664] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 118.252759][ T664] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 118.266178][ T664] device bridge_slave_1 left promiscuous mode [ 118.272364][ T664] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.287257][ T664] device bridge_slave_0 left promiscuous mode [ 118.297556][ T664] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.308542][ T664] rdma_rxe: ignoring netdev event = 10 for veth1_virt_wifi [ 118.319479][ T664] device veth1_macvtap left promiscuous mode [ 118.327999][ T664] device veth0_macvtap left promiscuous mode [ 118.334644][ T664] device veth1_vlan left promiscuous mode [ 118.340448][ T664] device veth0_vlan left promiscuous mode [ 118.396595][ T664] infiniband syz1: set down [ 118.546675][ T6358] smc: removing ib device syz1 [ 118.575588][ T664] team0 (unregistering): Port device team_slave_1 removed [ 118.593048][ T664] team0 (unregistering): Port device team_slave_0 removed [ 118.608354][ T664] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 118.621656][ T664] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 118.683932][ T664] bond0 (unregistering): Released all slaves [ 118.703177][ T4476] infiniband syz1: ib_query_port failed (-19) [ 132.584715][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.591025][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 175.633357][ T4482] Bluetooth: hci4: command 0x0406 tx timeout [ 175.639427][ T4482] Bluetooth: hci0: command 0x0406 tx timeout [ 185.863243][ T4476] Bluetooth: hci2: command 0x0406 tx timeout [ 194.025565][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.031892][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 221.703421][ T4791] Bluetooth: hci5: command 0x0406 tx timeout [ 255.475450][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.481786][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 272.103417][ T27] INFO: task jbd2/sda1-8:3521 blocked for more than 143 seconds. [ 272.111469][ T27] Not tainted syzkaller #0 [ 272.116598][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 272.125333][ T27] task:jbd2/sda1-8 state:D stack:25360 pid: 3521 ppid: 2 flags:0x00004000 [ 272.134605][ T27] Call Trace: [ 272.137873][ T27] [ 272.140789][ T27] __schedule+0x11c3/0x4350 [ 272.147949][ T27] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 272.153997][ T27] ? lock_chain_count+0x20/0x20 [ 272.158858][ T27] ? lockdep_hardirqs_off+0x70/0x100 [ 272.164186][ T27] ? release_firmware_map_entry+0x190/0x190 [ 272.170094][ T27] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 272.176065][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 272.181278][ T27] schedule+0x11b/0x1e0 [ 272.185578][ T27] io_schedule+0x7c/0xd0 [ 272.189855][ T27] bit_wait_io+0xd/0xc0 [ 272.194071][ T27] out_of_line_wait_on_bit+0x173/0x230 [ 272.199644][ T27] ? bit_wait+0xc0/0xc0 [ 272.203870][ T27] ? __wait_on_bit+0x170/0x170 [ 272.208638][ T27] ? do_raw_write_lock+0x11a/0x260 [ 272.214238][ T27] ? bit_waitqueue+0x30/0x30 [ 272.218845][ T27] ? do_raw_read_unlock+0x39/0x70 [ 272.223910][ T27] jbd2_journal_commit_transaction+0x2f0b/0x5c30 [ 272.230270][ T27] ? jbd2_journal_finish_inode_data_buffers+0xa0/0xa0 [ 272.237114][ T27] ? _raw_spin_unlock+0x40/0x40 [ 272.241970][ T27] ? rcu_is_watching+0x11/0xa0 [ 272.246774][ T27] ? __timer_delete_sync+0x1f5/0x290 [ 272.252068][ T27] ? __lock_acquire+0x7d40/0x7d40 [ 272.257978][ T27] ? timer_delete_sync+0x20/0x20 [ 272.262944][ T27] ? do_raw_read_unlock+0x70/0x70 [ 272.268343][ T27] ? prepare_to_wait+0x1a8/0x1f0 [ 272.273344][ T27] kjournald2+0x45a/0x900 [ 272.277706][ T27] ? jbd2_seq_info_show+0x5c0/0x5c0 [ 272.282884][ T27] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 272.288865][ T27] ? init_wait_entry+0xd0/0xd0 [ 272.293685][ T27] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 272.299610][ T27] ? __kthread_parkme+0x14e/0x1b0 [ 272.304674][ T27] kthread+0x42e/0x520 [ 272.308749][ T27] ? jbd2_seq_info_show+0x5c0/0x5c0 [ 272.314406][ T27] ? kthread_blkcg+0xd0/0xd0 [ 272.319013][ T27] ret_from_fork+0x1f/0x30 [ 272.323550][ T27] [ 272.326604][ T27] INFO: task syz-executor:4173 blocked for more than 143 seconds. [ 272.334452][ T27] Not tainted syzkaller #0 [ 272.339378][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 272.348060][ T27] task:syz-executor state:D stack:23376 pid: 4173 ppid: 4172 flags:0x00004006 [ 272.357320][ T27] Call Trace: [ 272.360610][ T27] [ 272.366378][ T27] __schedule+0x11c3/0x4350 [ 272.370910][ T27] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 272.376927][ T27] ? lock_chain_count+0x20/0x20 [ 272.381781][ T27] ? lockdep_hardirqs_off+0x70/0x100 [ 272.387104][ T27] ? release_firmware_map_entry+0x190/0x190 [ 272.392997][ T27] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 272.398929][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 272.404183][ T27] schedule+0x11b/0x1e0 [ 272.408343][ T27] io_schedule+0x7c/0xd0 [ 272.412565][ T27] bit_wait_io+0xd/0xc0 [ 272.417162][ T27] out_of_line_wait_on_bit+0x173/0x230 [ 272.422633][ T27] ? bit_wait+0xc0/0xc0 [ 272.426985][ T27] ? __wait_on_bit+0x170/0x170 [ 272.431750][ T27] ? do_raw_spin_lock+0x128/0x2f0 [ 272.436808][ T27] ? bit_waitqueue+0x30/0x30 [ 272.441414][ T27] ? do_raw_spin_unlock+0x11d/0x230 [ 272.446647][ T27] do_get_write_access+0x134/0xe40 [ 272.451767][ T27] jbd2_journal_get_write_access+0x108/0x140 [ 272.457780][ T27] __ext4_journal_get_write_access+0x24d/0x6e0 [ 272.463990][ T27] ? __ext4_journal_ensure_credits+0x450/0x450 [ 272.470144][ T27] ? slab_post_alloc_hook+0x68/0x380 [ 272.475744][ T27] ext4_reserve_inode_write+0x203/0x2e0 [ 272.481306][ T27] __ext4_mark_inode_dirty+0x13b/0x6c0 [ 272.487092][ T27] ext4_dirty_inode+0xbf/0x100 [ 272.491867][ T27] ? __ext4_expand_extra_isize+0x3e0/0x3e0 [ 272.497709][ T27] __mark_inode_dirty+0x2c8/0xc90 [ 272.502730][ T27] generic_update_time+0x1cd/0x1f0 [ 272.507997][ T27] file_update_time+0x3c0/0x440 [ 272.512865][ T27] ? file_remove_privs+0x5d0/0x5d0 [ 272.518369][ T27] ext4_page_mkwrite+0x1bc/0x1250 [ 272.523455][ T27] ? wp_page_shared+0x15b/0x6c0 [ 272.528308][ T27] ? ext4_change_inode_journal_flag+0x710/0x710 [ 272.534588][ T27] ? __lock_acquire+0x7d40/0x7d40 [ 272.539617][ T27] do_page_mkwrite+0x168/0x3c0 [ 272.544418][ T27] wp_page_shared+0x163/0x6c0 [ 272.549094][ T27] handle_mm_fault+0x1fbd/0x4440 [ 272.554078][ T27] ? get_page+0xe0/0xe0 [ 272.558231][ T27] ? vmacache_find+0x53c/0x590 [ 272.562973][ T27] ? vmacache_update+0xa0/0x100 [ 272.567841][ T27] ? find_vma+0x1df/0x230 [ 272.572218][ T27] do_user_addr_fault+0x494/0xc90 [ 272.577308][ T27] exc_page_fault+0x60/0x100 [ 272.581908][ T27] ? clear_bhb_loop+0x30/0x80 [ 272.587713][ T27] asm_exc_page_fault+0x22/0x30 [ 272.592596][ T27] RIP: 0033:0x7f9f8d234862 [ 272.597109][ T27] RSP: 002b:00007fff9b617160 EFLAGS: 00010202 [ 272.603354][ T27] RAX: 00007f9f8b338000 RBX: 000055556f964780 RCX: 0000000000000003 [ 272.611343][ T27] RDX: 0000000000002ed7 RSI: 000055556f95f048 RDI: 0000000000000008 [ 272.619356][ T27] RBP: 00007fff9b617660 R08: 000055556f95f1b0 R09: 0000000000000086 [ 272.627942][ T27] R10: 0000000000000000 R11: 0000000000000202 R12: 00007fff9b6174a0 [ 272.636896][ T27] R13: 00007fff9b617290 R14: 585858582e7a7973 R15: 00007fff9b6171e0 [ 272.644966][ T27] [ 272.648033][ T27] INFO: task syz.0.711:6679 blocked for more than 143 seconds. [ 272.655735][ T27] Not tainted syzkaller #0 [ 272.660680][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 272.669544][ T27] task:syz.0.711 state:D stack:23280 pid: 6679 ppid: 4186 flags:0x00004004 [ 272.678806][ T27] Call Trace: [ 272.682085][ T27] [ 272.685143][ T27] __schedule+0x11c3/0x4350 [ 272.689661][ T27] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 272.695681][ T27] ? lock_chain_count+0x20/0x20 [ 272.700553][ T27] ? lockdep_hardirqs_off+0x70/0x100 [ 272.705906][ T27] ? release_firmware_map_entry+0x190/0x190 [ 272.711803][ T27] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 272.717719][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 272.723211][ T27] schedule+0x11b/0x1e0 [ 272.727375][ T27] io_schedule+0x7c/0xd0 [ 272.731601][ T27] bit_wait_io+0xd/0xc0 [ 272.736275][ T27] out_of_line_wait_on_bit+0x173/0x230 [ 272.741747][ T27] ? bit_wait+0xc0/0xc0 [ 272.746830][ T27] ? __wait_on_bit+0x170/0x170 [ 272.751617][ T27] ? do_raw_spin_lock+0x128/0x2f0 [ 272.756671][ T27] ? bit_waitqueue+0x30/0x30 [ 272.761260][ T27] ? do_raw_spin_unlock+0x11d/0x230 [ 272.766498][ T27] do_get_write_access+0x134/0xe40 [ 272.771617][ T27] jbd2_journal_get_write_access+0x108/0x140 [ 272.777648][ T27] __ext4_journal_get_write_access+0x24d/0x6e0 [ 272.783836][ T27] ? __ext4_journal_ensure_credits+0x450/0x450 [ 272.789973][ T27] ? slab_post_alloc_hook+0x68/0x380 [ 272.795303][ T27] ext4_reserve_inode_write+0x203/0x2e0 [ 272.800848][ T27] __ext4_mark_inode_dirty+0x13b/0x6c0 [ 272.806357][ T27] ext4_dirty_inode+0xbf/0x100 [ 272.811137][ T27] ? __ext4_expand_extra_isize+0x3e0/0x3e0 [ 272.816980][ T27] __mark_inode_dirty+0x2c8/0xc90 [ 272.822004][ T27] generic_update_time+0x1cd/0x1f0 [ 272.828816][ T27] file_update_time+0x3c0/0x440 [ 272.834794][ T27] ? file_remove_privs+0x5d0/0x5d0 [ 272.839924][ T27] ext4_page_mkwrite+0x1bc/0x1250 [ 272.845253][ T27] ? mapping_seek_hole_data+0x1300/0x1300 [ 272.850981][ T27] ? ext4_change_inode_journal_flag+0x710/0x710 [ 272.857515][ T27] ? count_memcg_event_mm+0x324/0x370 [ 272.862897][ T27] ? remove_device_exclusive_entry+0xac0/0xac0 [ 272.869105][ T27] ? verify_lock_unused+0x140/0x140 [ 272.874382][ T27] do_page_mkwrite+0x168/0x3c0 [ 272.879132][ T27] handle_mm_fault+0x1e47/0x4440 [ 272.884135][ T27] ? get_page+0xe0/0xe0 [ 272.888287][ T27] ? vmacache_find+0x238/0x590 [ 272.893036][ T27] ? find_vma+0xd2/0x230 [ 272.897301][ T27] do_user_addr_fault+0x494/0xc90 [ 272.902330][ T27] exc_page_fault+0x60/0x100 [ 272.906961][ T27] ? clear_bhb_loop+0x30/0x80 [ 272.911640][ T27] asm_exc_page_fault+0x22/0x30 [ 272.916545][ T27] RIP: 0033:0x7fe2683c4929 [ 272.920959][ T27] RSP: 002b:00007ffe53a94080 EFLAGS: 00010202 [ 272.927326][ T27] RAX: 0000001b32715000 RBX: ffffffff81ce8b5c RCX: 0000001b32714ff8 [ 272.935369][ T27] RDX: 0000001b32124224 RSI: 0000000000000008 RDI: 00007fe2692a7720 [ 272.943428][ T27] RBP: 0000000000000139 R08: 00007fe268762000 R09: 00007fe268764000 [ 272.951403][ T27] R10: 0000000081ce8b60 R11: 00000000000000ff R12: 00007fe268777f40 [ 272.959709][ T27] R13: 0000000000003c83 R14: ffffffff81ce8ec6 R15: 00007fe2692a7720 [ 272.968800][ T27] ? rcu_read_unlock+0x6/0x90 [ 272.973569][ T27] ? dput+0xbc/0x1a0 [ 272.977470][ T27] [ 272.980483][ T27] INFO: task syz.3.722:6728 blocked for more than 144 seconds. [ 272.988174][ T27] Not tainted syzkaller #0 [ 272.993105][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 273.001828][ T27] task:syz.3.722 state:D stack:27664 pid: 6728 ppid: 4200 flags:0x00004004 [ 273.011081][ T27] Call Trace: [ 273.014379][ T27] [ 273.017293][ T27] __schedule+0x11c3/0x4350 [ 273.021782][ T27] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 273.027801][ T27] ? lock_chain_count+0x20/0x20 [ 273.032842][ T27] ? lockdep_hardirqs_off+0x70/0x100 [ 273.038358][ T27] ? release_firmware_map_entry+0x190/0x190 [ 273.044315][ T27] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 273.050212][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 273.055477][ T27] schedule+0x11b/0x1e0 [ 273.059643][ T27] io_schedule+0x7c/0xd0 [ 273.064156][ T27] bit_wait_io+0xd/0xc0 [ 273.068327][ T27] out_of_line_wait_on_bit+0x173/0x230 [ 273.074273][ T27] ? bit_wait+0xc0/0xc0 [ 273.078441][ T27] ? __wait_on_bit+0x170/0x170 [ 273.083255][ T27] ? do_raw_spin_lock+0x128/0x2f0 [ 273.088279][ T27] ? bit_waitqueue+0x30/0x30 [ 273.092875][ T27] ? do_raw_spin_unlock+0x11d/0x230 [ 273.098167][ T27] do_get_write_access+0x134/0xe40 [ 273.103355][ T27] jbd2_journal_get_write_access+0x108/0x140 [ 273.109337][ T27] __ext4_journal_get_write_access+0x24d/0x6e0 [ 273.115568][ T27] ? __ext4_journal_ensure_credits+0x450/0x450 [ 273.121747][ T27] ? slab_post_alloc_hook+0x68/0x380 [ 273.127096][ T27] ext4_reserve_inode_write+0x203/0x2e0 [ 273.132822][ T27] __ext4_mark_inode_dirty+0x13b/0x6c0 [ 273.138384][ T27] ext4_dirty_inode+0xbf/0x100 [ 273.143236][ T27] ? __ext4_expand_extra_isize+0x3e0/0x3e0 [ 273.149060][ T27] __mark_inode_dirty+0x2c8/0xc90 [ 273.154187][ T27] generic_update_time+0x1cd/0x1f0 [ 273.159299][ T27] file_update_time+0x3c0/0x440 [ 273.164198][ T27] ? file_remove_privs+0x5d0/0x5d0 [ 273.169310][ T27] ? mark_lock+0x94/0x320 [ 273.174352][ T27] ext4_page_mkwrite+0x1bc/0x1250 [ 273.179388][ T27] ? mapping_seek_hole_data+0x1300/0x1300 [ 273.185437][ T27] ? pte_alloc_one+0x287/0x310 [ 273.190217][ T27] ? ext4_change_inode_journal_flag+0x710/0x710 [ 273.196756][ T27] ? count_memcg_event_mm+0x324/0x370 [ 273.202136][ T27] ? remove_device_exclusive_entry+0xac0/0xac0 [ 273.208345][ T27] ? __lock_acquire+0x7d40/0x7d40 [ 273.213441][ T27] do_page_mkwrite+0x168/0x3c0 [ 273.218204][ T27] handle_mm_fault+0x1e47/0x4440 [ 273.223231][ T27] ? get_page+0xe0/0xe0 [ 273.227405][ T27] ? vmacache_find+0x4f0/0x590 [ 273.232166][ T27] ? vmacache_update+0xa0/0x100 [ 273.237303][ T27] ? find_vma+0x1df/0x230 [ 273.241642][ T27] do_user_addr_fault+0x494/0xc90 [ 273.246716][ T27] exc_page_fault+0x60/0x100 [ 273.251490][ T27] asm_exc_page_fault+0x22/0x30 [ 273.256381][ T27] RIP: 0033:0x7f02a6e3e929 [ 273.260789][ T27] RSP: 002b:00007ffc14207b20 EFLAGS: 00010202 [ 273.266926][ T27] RAX: 0000001b32824000 RBX: ffffffff8368a562 RCX: 0000001b32823ff8 [ 273.274937][ T27] RDX: 00000000003ffde8 RSI: 00000000003ffde8 RDI: 00007f02a7d21700 [ 273.282907][ T27] RBP: 0000000000000001 R08: 0000000000000000 R09: 00007f02a71de000 [ 273.291175][ T27] R10: 00007f02a7d21700 R11: 0000000000000000 R12: 00007f02a71f2038 [ 273.300049][ T27] R13: 000000000007a84b R14: ffffffff8368a6fe R15: 00007f02a7d21720 [ 273.308091][ T27] ? btrfs_create_free_space_tree+0xc4e/0xe90 [ 273.314200][ T27] ? btrfs_create_free_space_tree+0xab2/0xe90 [ 273.320254][ T27] [ 273.323348][ T27] INFO: task syz.5.731:6755 blocked for more than 144 seconds. [ 273.330878][ T27] Not tainted syzkaller #0 [ 273.335861][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 273.344734][ T27] task:syz.5.731 state:D stack:27664 pid: 6755 ppid: 4433 flags:0x00004004 [ 273.354002][ T27] Call Trace: [ 273.357280][ T27] [ 273.360209][ T27] __schedule+0x11c3/0x4350 [ 273.364775][ T27] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 273.370755][ T27] ? lock_chain_count+0x20/0x20 [ 273.375648][ T27] ? lockdep_hardirqs_off+0x70/0x100 [ 273.380949][ T27] ? release_firmware_map_entry+0x190/0x190 [ 273.386969][ T27] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 273.392862][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 273.398355][ T27] schedule+0x11b/0x1e0 [ 273.402527][ T27] io_schedule+0x7c/0xd0 [ 273.407069][ T27] bit_wait_io+0xd/0xc0 [ 273.411235][ T27] out_of_line_wait_on_bit+0x173/0x230 [ 273.416739][ T27] ? bit_wait+0xc0/0xc0 [ 273.420891][ T27] ? __wait_on_bit+0x170/0x170 [ 273.425685][ T27] ? do_raw_spin_lock+0x128/0x2f0 [ 273.430705][ T27] ? bit_waitqueue+0x30/0x30 [ 273.435343][ T27] ? do_raw_spin_unlock+0x11d/0x230 [ 273.440710][ T27] do_get_write_access+0x134/0xe40 [ 273.445913][ T27] jbd2_journal_get_write_access+0x108/0x140 [ 273.451895][ T27] __ext4_journal_get_write_access+0x24d/0x6e0 [ 273.458114][ T27] ? __ext4_journal_ensure_credits+0x450/0x450 [ 273.464367][ T27] ? slab_post_alloc_hook+0x68/0x380 [ 273.469656][ T27] ? jbd2__journal_start+0x13c/0x5a0 [ 273.475008][ T27] ext4_reserve_inode_write+0x203/0x2e0 [ 273.480583][ T27] __ext4_mark_inode_dirty+0x13b/0x6c0 [ 273.486108][ T27] ext4_dirty_inode+0xbf/0x100 [ 273.490869][ T27] ? __ext4_expand_extra_isize+0x3e0/0x3e0 [ 273.496711][ T27] __mark_inode_dirty+0x2c8/0xc90 [ 273.501753][ T27] generic_update_time+0x1cd/0x1f0 [ 273.507087][ T27] file_update_time+0x3c0/0x440 [ 273.511969][ T27] ? file_remove_privs+0x5d0/0x5d0 [ 273.517382][ T27] ext4_page_mkwrite+0x1bc/0x1250 [ 273.522423][ T27] ? mapping_seek_hole_data+0x1300/0x1300 [ 273.528187][ T27] ? ext4_change_inode_journal_flag+0x710/0x710 [ 273.534467][ T27] ? count_memcg_event_mm+0x324/0x370 [ 273.539915][ T27] ? remove_device_exclusive_entry+0xac0/0xac0 [ 273.546443][ T27] ? finish_lock_switch+0x12d/0x290 [ 273.551652][ T27] do_page_mkwrite+0x168/0x3c0 [ 273.556441][ T27] handle_mm_fault+0x1e47/0x4440 [ 273.561409][ T27] ? get_page+0xe0/0xe0 [ 273.565612][ T27] ? vmacache_find+0x4e3/0x590 [ 273.570397][ T27] ? vmacache_update+0xa0/0x100 [ 273.575281][ T27] ? find_vma+0x1df/0x230 [ 273.579611][ T27] do_user_addr_fault+0x494/0xc90 [ 273.584711][ T27] exc_page_fault+0x60/0x100 [ 273.589304][ T27] asm_exc_page_fault+0x22/0x30 [ 273.594186][ T27] RIP: 0033:0x7f261de050b2 [ 273.598603][ T27] RSP: 002b:00007ffcfc1acad0 EFLAGS: 00010202 [ 273.604733][ T27] RAX: 0000000000004008 RBX: 00007f261ece7720 RCX: 0000000000000000 [ 273.612703][ T27] RDX: 0000001b30620000 RSI: 0000000000000008 RDI: 00007f261ece7720 [ 273.620895][ T27] RBP: 00000000000000f6 R08: 00007f261e1a2000 R09: 00007f261e1b8038 [ 273.629127][ T27] R10: 0000000000000007 R11: 0000000000000003 R12: ffffffff882301ac [ 273.637175][ T27] R13: 00007f261e1b8038 R14: 0000000000000007 R15: ffffffffffffc000 [ 273.645357][ T27] ? bpf_test_timer_leave+0xac/0x150 [ 273.650677][ T27] [ 273.653754][ T27] INFO: task syz.6.732:6757 blocked for more than 144 seconds. [ 273.661306][ T27] Not tainted syzkaller #0 [ 273.666434][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 273.675158][ T27] task:syz.6.732 state:D stack:27088 pid: 6757 ppid: 5537 flags:0x00004004 [ 273.684421][ T27] Call Trace: [ 273.687696][ T27] [ 273.690609][ T27] __schedule+0x11c3/0x4350 [ 273.695146][ T27] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 273.701130][ T27] ? lock_chain_count+0x20/0x20 [ 273.706197][ T27] ? lockdep_hardirqs_off+0x70/0x100 [ 273.711480][ T27] ? release_firmware_map_entry+0x190/0x190 [ 273.717428][ T27] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 273.724003][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 273.729214][ T27] schedule+0x11b/0x1e0 [ 273.734098][ T27] io_schedule+0x7c/0xd0 [ 273.738345][ T27] bit_wait_io+0xd/0xc0 [ 273.742479][ T27] out_of_line_wait_on_bit+0x173/0x230 [ 273.748230][ T27] ? bit_wait+0xc0/0xc0 [ 273.752391][ T27] ? __wait_on_bit+0x170/0x170 [ 273.757212][ T27] ? do_raw_spin_lock+0x128/0x2f0 [ 273.762237][ T27] ? bit_waitqueue+0x30/0x30 [ 273.766867][ T27] ? do_raw_spin_unlock+0x11d/0x230 [ 273.772073][ T27] do_get_write_access+0x134/0xe40 [ 273.777254][ T27] jbd2_journal_get_write_access+0x108/0x140 [ 273.783285][ T27] __ext4_journal_get_write_access+0x24d/0x6e0 [ 273.789441][ T27] ? __ext4_journal_ensure_credits+0x450/0x450 [ 273.795616][ T27] ? slab_post_alloc_hook+0x68/0x380 [ 273.800906][ T27] ext4_reserve_inode_write+0x203/0x2e0 [ 273.806510][ T27] __ext4_mark_inode_dirty+0x13b/0x6c0 [ 273.811969][ T27] ext4_dirty_inode+0xbf/0x100 [ 273.816776][ T27] ? __ext4_expand_extra_isize+0x3e0/0x3e0 [ 273.822578][ T27] __mark_inode_dirty+0x2c8/0xc90 [ 273.827644][ T27] generic_update_time+0x1cd/0x1f0 [ 273.832756][ T27] file_update_time+0x3c0/0x440 [ 273.837824][ T27] ? file_remove_privs+0x5d0/0x5d0 [ 273.842948][ T27] ext4_page_mkwrite+0x1bc/0x1250 [ 273.849269][ T27] ? mapping_seek_hole_data+0x1300/0x1300 [ 273.855050][ T27] ? ext4_change_inode_journal_flag+0x710/0x710 [ 273.861293][ T27] ? count_memcg_event_mm+0x324/0x370 [ 273.866870][ T27] ? remove_device_exclusive_entry+0xac0/0xac0 [ 273.873039][ T27] ? verify_lock_unused+0x140/0x140 [ 273.878602][ T27] do_page_mkwrite+0x168/0x3c0 [ 273.883444][ T27] handle_mm_fault+0x1e47/0x4440 [ 273.888394][ T27] ? get_page+0xe0/0xe0 [ 273.892535][ T27] ? vmacache_find+0x238/0x590 [ 273.897462][ T27] ? find_vma+0xd2/0x230 [ 273.901708][ T27] do_user_addr_fault+0x494/0xc90 [ 273.906807][ T27] exc_page_fault+0x60/0x100 [ 273.911396][ T27] ? clear_bhb_loop+0x30/0x80 [ 273.916107][ T27] asm_exc_page_fault+0x22/0x30 [ 273.920954][ T27] RIP: 0033:0x7fd9e2446929 [ 273.925418][ T27] RSP: 002b:00007ffd4ac14440 EFLAGS: 00010202 [ 273.931484][ T27] RAX: 0000001b2d723000 RBX: ffffffff83a9ab4a RCX: 0000001b2d722ff8 [ 273.939499][ T27] RDX: 0000001b2d12421c RSI: 0000000000000008 RDI: 00007fd9e3329720 [ 273.947874][ T27] RBP: 000000000000001c R08: 00007fd9e27e4000 R09: 00007fd9e27e6000 [ 273.956575][ T27] R10: 0000000083a9ab4e R11: 0000000000000001 R12: 00007fd9e27fa038 [ 273.964798][ T27] R13: 000000000000001b R14: ffffffff83a9a81a R15: 00007fd9e3329720 [ 273.972971][ T27] ? tomoyo_path_number_perm+0x19a/0x6b0 [ 273.978904][ T27] ? tomoyo_path_number_perm+0x4ca/0x6b0 [ 273.984580][ T27] [ 273.987626][ T27] [ 273.987626][ T27] Showing all locks held in the system: [ 273.995408][ T27] 1 lock held by khungtaskd/27: [ 274.000248][ T27] #0: ffffffff8d11efa0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x0/0x30 [ 274.009646][ T27] 1 lock held by klogd/3548: [ 274.014253][ T27] #0: ffff8880b8f3a358 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x25/0x130 [ 274.024259][ T27] 2 locks held by getty/3947: [ 274.028924][ T27] #0: ffff88814c7e3098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 274.038909][ T27] #1: ffffc90002d032e8 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x594/0x1a50 [ 274.049199][ T27] 3 locks held by syz-executor/4173: [ 274.055421][ T27] #0: ffff88807a531628 (&mm->mmap_lock){++++}-{3:3}, at: do_user_addr_fault+0x2bb/0xc90 [ 274.065546][ T27] #1: ffff88802de36558 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1a5/0x1250 [ 274.076226][ T27] #2: ffff88802de3a990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x12d5/0x1560 [ 274.086000][ T27] 3 locks held by syz.0.711/6679: [ 274.091014][ T27] #0: ffff88801f70b228 (&mm->mmap_lock){++++}-{3:3}, at: do_user_addr_fault+0x2bb/0xc90 [ 274.100907][ T27] #1: ffff88802de36558 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1a5/0x1250 [ 274.110722][ T27] #2: ffff88802de3a990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x12d5/0x1560 [ 274.120416][ T27] 3 locks held by syz.3.722/6728: [ 274.125491][ T27] #0: ffff888057e7dc28 (&mm->mmap_lock){++++}-{3:3}, at: do_user_addr_fault+0x2bb/0xc90 [ 274.135378][ T27] #1: ffff88802de36558 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1a5/0x1250 [ 274.145199][ T27] #2: ffff88802de3a990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x12d5/0x1560 [ 274.154947][ T27] 3 locks held by syz.5.731/6755: [ 274.160163][ T27] #0: ffff88807c8ce328 (&mm->mmap_lock){++++}-{3:3}, at: do_user_addr_fault+0x2bb/0xc90 [ 274.170290][ T27] #1: ffff88802de36558 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1a5/0x1250 [ 274.180329][ T27] #2: ffff88802de3a990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x12d5/0x1560 [ 274.190072][ T27] 3 locks held by syz.6.732/6757: [ 274.195116][ T27] #0: ffff88807e4b3928 (&mm->mmap_lock){++++}-{3:3}, at: do_user_addr_fault+0x2bb/0xc90 [ 274.205003][ T27] #1: ffff88802de36558 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1a5/0x1250 [ 274.214775][ T27] #2: ffff88802de3a990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x12d5/0x1560 [ 274.224480][ T27] [ 274.226796][ T27] ============================================= [ 274.226796][ T27] [ 274.235353][ T27] NMI backtrace for cpu 0 [ 274.239675][ T27] CPU: 0 PID: 27 Comm: khungtaskd Not tainted syzkaller #0 [ 274.246846][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 274.256880][ T27] Call Trace: [ 274.260139][ T27] [ 274.263050][ T27] dump_stack_lvl+0x188/0x250 [ 274.267709][ T27] ? show_regs_print_info+0x20/0x20 [ 274.272885][ T27] ? load_image+0x410/0x410 [ 274.277366][ T27] ? nmi_cpu_backtrace+0x1b2/0x3d0 [ 274.282477][ T27] nmi_cpu_backtrace+0x3a2/0x3d0 [ 274.287394][ T27] ? nmi_trigger_cpumask_backtrace+0x280/0x280 [ 274.293525][ T27] ? _printk+0xda/0x130 [ 274.297681][ T27] ? load_image+0x410/0x410 [ 274.302205][ T27] ? load_image+0x410/0x410 [ 274.306689][ T27] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 274.312735][ T27] nmi_trigger_cpumask_backtrace+0x163/0x280 [ 274.318696][ T27] watchdog+0xe1b/0xe60 [ 274.322836][ T27] kthread+0x42e/0x520 [ 274.326883][ T27] ? hungtask_pm_notify+0x40/0x40 [ 274.331879][ T27] ? kthread_blkcg+0xd0/0xd0 [ 274.336445][ T27] ret_from_fork+0x1f/0x30 [ 274.340843][ T27] [ 274.344226][ T27] Sending NMI from CPU 0 to CPUs 1: [ 274.349454][ C1] NMI backtrace for cpu 1 skipped: idling at default_idle+0xb/0x10 [ 274.350861][ T27] Kernel panic - not syncing: hung_task: blocked tasks [ 274.365562][ T27] CPU: 1 PID: 27 Comm: khungtaskd Not tainted syzkaller #0 [ 274.372738][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 274.382768][ T27] Call Trace: [ 274.386030][ T27] [ 274.388946][ T27] dump_stack_lvl+0x188/0x250 [ 274.393605][ T27] ? show_regs_print_info+0x20/0x20 [ 274.398779][ T27] ? load_image+0x410/0x410 [ 274.403266][ T27] panic+0x2f8/0x850 [ 274.407139][ T27] ? schedule_preempt_disabled+0x20/0x20 [ 274.412746][ T27] ? bpf_jit_dump+0xd0/0xd0 [ 274.417228][ T27] ? nmi_trigger_cpumask_backtrace+0x260/0x280 [ 274.423364][ T27] watchdog+0xe5a/0xe60 [ 274.427501][ T27] kthread+0x42e/0x520 [ 274.431544][ T27] ? hungtask_pm_notify+0x40/0x40 [ 274.436541][ T27] ? kthread_blkcg+0xd0/0xd0 [ 274.441105][ T27] ret_from_fork+0x1f/0x30 [ 274.445504][ T27] [ 274.448763][ T27] Kernel Offset: disabled [ 274.453079][ T27] Rebooting in 86400 seconds..