last executing test programs: 1m37.833568742s ago: executing program 3 (id=94): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x2200, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) ioctl$IOMMU_VFIO_IOMMU_MAP_DMA(r0, 0x3b71, 0x0) 1m37.5247131s ago: executing program 3 (id=98): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmmsg(r0, &(0x7f00000054c0)=[{{0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000400)="9f5a9032", 0x4}], 0x1}}, {{0x0, 0x0, &(0x7f0000003340)=[{&(0x7f0000000380)="610a8889", 0x4}], 0x1, &(0x7f00000033c0)=[{0x10, 0x1, 0x1}], 0x10}}], 0x2, 0x4000080) 1m37.338146747s ago: executing program 3 (id=100): r0 = epoll_create1(0x0) r1 = socket(0x1, 0x80802, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0xa000000d}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000000c0)={0x10000001}) 1m37.101682209s ago: executing program 3 (id=103): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x800, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000140)=0x81) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000900)={0x44, 0x0, &(0x7f0000000740)=[@reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000b40)='\n'}) 1m36.889719268s ago: executing program 3 (id=106): mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) syz_clone3(&(0x7f0000000700)={0x2000a0080, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58) 1m36.5422454s ago: executing program 3 (id=110): syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x11, &(0x7f0000000480), 0x1, 0x3da, &(0x7f00000004c0)="$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") 1m21.394788546s ago: executing program 32 (id=110): syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x11, &(0x7f0000000480), 0x1, 0x3da, &(0x7f00000004c0)="$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") 4.979774855s ago: executing program 2 (id=824): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @dynset={{0xb}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_DYNSET_SET_NAME={0x9, 0x1, 'syz2\x00'}, @NFTA_DYNSET_SREG_KEY={0x8}, @NFTA_DYNSET_OP={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x88}}, 0x0) 4.860491706s ago: executing program 2 (id=826): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000340)={[{@acl}, {@heartbeat_none}, {@nouser_xattr}, {@coherency_full}, {@data_writeback}, {@localalloc={'localalloc', 0x3d, 0x1}}, {@acl}, {@noacl}, {@localalloc}]}, 0x1, 0x442d, &(0x7f0000004480)="$eJzs3c9PHGUfAPBnBvoW+rZ9oW8PfZM3cRObaNQQ6EmliZTSUmixptrGeNkusG3RhW1gMR56wFsTTyYejIdGE2+cGg5e65/gxWM9N9GDFxOTRszuzgIz7IaVsGDr53NgmOc3fGeefeYw+8SJyp25pdzcUq6wkCvP3Fo6k/u4XFqeL4Z4nzTt/9D+9U97OnGdHPS190929fzFd2+cCeH72R+frK+vr4eq7tDU0Jbff/v13szWY0OcqVNtt3lre+WDEMLJbeOq6gohvP9dCFEI4VySNpoce0MIx0I978a9z27m9mg0Dx8Xz+afTt1fGz49ufpgrfXfHoXwVel/r92e//nFruGfXtmj7gEAAAAAAAAAAAAAAAAAeMaNX7t6/Z3BofAoCt2r0fb3dceTY6v3Y9f3zAsh9HX+7wUAAAAAAAAAAAAAAAAAAIC/o833/3PRiSbv/48lx5EW9dff6vwY6ZyJt6+OXRgcSvZ/j7blv54k/XKuK/Q32fc9u//7uUz95vu/b+9ntxrja/TbF6J4IHUexwMDIXyTbPx+KjoSl8pLlVdvlZcXZvdsGM+sdPzru/enopNs6N9u/Ecz7Xd+////bruaquc39+4Se66l49/Vsty3n0Ztxf98pt5+xJ/dS8e/u5bWu7XASH0CqMb/8+6d4z+Wab9T8T8eQshF1bHmUjNAdQ1TTW+1XiEtHf9DtbTU1Jn8I1vd/79n4n8h0/5Bzf8r2Q8imkrH/1+1tJ5Uic37vz/e+f6/mGn/IOJfHf+Kz/+2pON/uJ7YnSpS+0+2O/+PZ9rvVPyvx8k4j0epK2A1qqe3+r460tLx79mWv/n8F7e1/ruUqb9fz3+NfhvPf43p/+Wo/vxHc+n497Ys1+79P5Gp1+n5f6S2/mO30vE/UktLr53rX8rZbvwnM+13Kv61VUlPI/6b88kfh+vpX1v/tSUd/3/XE+OtJVZqP2vrv2jn9f/lTPsHsf6rjn8l7myvz4t0/I+2LFeN/w9tfP5fydTrfPxDGLTW37V0/I+1LFe7/3t2jv9Upl6n4/9SJxsHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeAaMJse+EMUDqfM4HhgI4XxyfiociaYLs/npUnnmo6UQxpL0XDgR3S6Vpwul/NxCebaYL5RK5ZkQLiT5J0NPtFQqV/LzhbsXN9rqje4UC4uV6WKhEkIYT9L/H4412pqeq8wX7oYQLm3k/ScuL969U1jIz84tvjk4ODgYJjbG0B8VP6kUFyr13uu5IUxu1O2Ltgyuln15YyxHow/Ly4sLhVIt/cqWOqXyTKG0pc5UkvdF6I8qi8sLM4VKMV8q3270d5BGkuPYxLX3rl0Z2pZ/M6ofR/d3WAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD8RY+G3/gyhNBdP4tDCCONX6Jm5R8+Lp7NP526vzZ8enL1wdqTVuUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgT3bgQAAAAAAAyP+1EaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwS8coDQRRGIDfjIXaeQyrZbezXVFEC1cET6DH8DB6FC/hHVKkSJsiBJJZCJtd2Capvq95MD8z78E8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYJ6n9+7jrW4iUlxtLiP+vv4Xh/lLqT/34/cvzjAjp/P82j081k3593SU35WjZZt36Xr1/Rkjtfc72JPhPu31fa4n55rat6n5+r43kXIVEW3Jb1POVTXvLQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAtO3AgAAAAAADk/9oIVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVdiBYwEAAAAAYf7WUfRtAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPwKAAD//+UFHyA=") r0 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ftruncate(r0, 0x2007ffc) sendfile(r0, r0, 0x0, 0x800000009) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x40942, 0x0) r2 = open(&(0x7f00000000c0)='./file1\x00', 0x185042, 0x182) copy_file_range(r2, 0x0, r1, 0x0, 0xfffffbffa003e45c, 0x700000000000000) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x141842, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r3, 0x4020940d, &(0x7f0000000440)={0x4}) 3.7228506s ago: executing program 4 (id=830): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, 0x0, 0x0) 3.663424985s ago: executing program 2 (id=831): creat(&(0x7f00000022c0)='./file0\x00', 0x4) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',g']) read$FUSE(r1, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_LSEEK(r0, &(0x7f0000000000)={0x18, 0xfffffffffffffff5, r2, {0x9}}, 0x18) 3.568581024s ago: executing program 4 (id=832): syz_emit_vhci(&(0x7f0000000100)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x0, 0x24}, @l2cap_cid_signaling={{0x20}, [@l2cap_info_req={{0xa, 0x5, 0x2}, {0x1}}, @l2cap_cmd_rej_unk={{0x1, 0xb, 0x2}, {0x8}}, @l2cap_conn_rsp={{0x3, 0x8, 0x8}, {0x9, 0xb6cd, 0x5, 0xc000}}, @l2cap_move_chan_cfm={{0x10, 0x1, 0x4}, {0x1000, 0xdd}}]}}, 0x29) 3.490458431s ago: executing program 4 (id=833): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009ac0b620110f2110"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000040)='1') readv(r1, &(0x7f0000000300)=[{&(0x7f00000019c0)=""/196, 0xc4}], 0x1) 3.294311979s ago: executing program 1 (id=835): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000340)={0x2, 0x0, [{0x80000008, 0xfffffff8, 0x2, 0x9, 0x1b7b, 0x0, 0xe}, {0x40000001, 0x5, 0x3, 0x81, 0x3, 0x7fffffff, 0xfe}]}) 3.144645243s ago: executing program 2 (id=836): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x2}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x6) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @random="ada68a2f96c6"}) close(r0) 3.096530487s ago: executing program 1 (id=837): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000480)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x10, 0x4e26, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x8, 0x1, 0x0, 0x0, {[@window={0x3, 0x3, 0x9}, @mptcp=@synack={0x1e, 0x10, 0x1, 0x2, 0xa, 0x7, 0xe3}]}}}}}}}, 0x0) 3.037065783s ago: executing program 1 (id=838): socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000240)=0x409, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x8000000004) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b45602117fffffff81000e22d991000000000000a80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) writev(r1, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001400add427323b472545b45602117fffffff81000e220e227f000008925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) 2.920471863s ago: executing program 2 (id=839): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000600)={0x44, &(0x7f0000000340)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000380)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 2.920204763s ago: executing program 1 (id=840): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000340)={[{@acl}, {@heartbeat_none}, {@nouser_xattr}, {@coherency_full}, {@data_writeback}, {@localalloc={'localalloc', 0x3d, 0x1}}, {@acl}, {@noacl}, {@localalloc}]}, 0x1, 0x442d, &(0x7f0000004480)="$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") r0 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ftruncate(r0, 0x2007ffc) sendfile(r0, r0, 0x0, 0x800000009) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x40942, 0x0) r2 = open(&(0x7f00000000c0)='./file1\x00', 0x185042, 0x182) copy_file_range(r2, 0x0, r1, 0x0, 0xfffffbffa003e45c, 0x700000000000000) ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0x4020940d, &(0x7f0000000440)={0x4}) 1.97205684s ago: executing program 1 (id=846): r0 = syz_mount_image$btrfs(&(0x7f00000023c0), &(0x7f0000005600)='./file0\x00', 0x4492, &(0x7f0000002400)={[{@ssd}, {@nossd}, {@nodiscard}, {@noacl}, {@nobarrier}, {@datacow}]}, 0x0, 0x559e, &(0x7f0000005680)="$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") ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, 0x0) lsetxattr$trusted_overlay_upper(0x0, 0x0, 0x0, 0x361, 0x3) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2688ca4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.636456191s ago: executing program 0 (id=849): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000900000000000000213f0000c50000000e800000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r0}, 0x10) unshare(0x2e020080) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 1.519942642s ago: executing program 0 (id=850): sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000040)={0xa8, 0x1f, 0x1, 0x0, 0x0, "", [@nested={0x95, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0x4}, @generic="0926b3eb9e87f8c8b3a6caa09a1a38d124a173def80bde05b592a5f49cb8056fef80a90fc8c487e1b6004db5feaf0d98b43fc34265f6f01ce7fed79fa135fe637b9fdc8c89e7777e70aecc0b9c372af84eb990d7d32d6c563a42d4889ed3925ac319f32db2703ff85c5b143715d335c94f", @typed={0x8, 0x96, 0x0, 0x0, @fd}, @nested={0xc, 0x7a, 0x0, 0x1, [@typed={0x8, 0x64, 0x0, 0x0, @fd}]}]}]}, 0xa8}], 0x1, 0x0, 0x0, 0x20000080}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4089, 0x197}, {&(0x7f0000000400)=""/106, 0x1c}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0xbe8}, {&(0x7f0000000540)=""/158, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 1.393024733s ago: executing program 0 (id=851): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, 0x0, &(0x7f0000000080)=0x84) 1.21652755s ago: executing program 0 (id=852): openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x24001, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") execve(&(0x7f0000000000)='./file0/file0\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000003c0)='./file1\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000200)='./file1\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) 945.608824ms ago: executing program 0 (id=853): ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0x295, 0x0, 0x8000}]}) r0 = syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x0) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000040)=0x6) 646.961211ms ago: executing program 0 (id=854): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000340)={[{@acl}, {@heartbeat_none}, {@nouser_xattr}, {@coherency_full}, {@data_writeback}, {@localalloc={'localalloc', 0x3d, 0x1}}, {@acl}, {@noacl}, {@localalloc}]}, 0x1, 0x442d, &(0x7f0000004480)="$eJzs3c9PHGUfAPBnBvoW+rZ9oW8PfZM3cRObaNQQ6EmliZTSUmixptrGeNkusG3RhW1gMR56wFsTTyYejIdGE2+cGg5e65/gxWM9N9GDFxOTRszuzgIz7IaVsGDr53NgmOc3fGeefeYw+8SJyp25pdzcUq6wkCvP3Fo6k/u4XFqeL4Z4nzTt/9D+9U97OnGdHPS190929fzFd2+cCeH72R+frK+vr4eq7tDU0Jbff/v13szWY0OcqVNtt3lre+WDEMLJbeOq6gohvP9dCFEI4VySNpoce0MIx0I978a9z27m9mg0Dx8Xz+afTt1fGz49ufpgrfXfHoXwVel/r92e//nFruGfXtmj7gEAAAAAAAAAAAAAAAAAeMaNX7t6/Z3BofAoCt2r0fb3dceTY6v3Y9f3zAsh9HX+7wUAAAAAAAAAAAAAAAAAAIC/o833/3PRiSbv/48lx5EW9dff6vwY6ZyJt6+OXRgcSvZ/j7blv54k/XKuK/Q32fc9u//7uUz95vu/b+9ntxrja/TbF6J4IHUexwMDIXyTbPx+KjoSl8pLlVdvlZcXZvdsGM+sdPzru/enopNs6N9u/Ecz7Xd+////bruaquc39+4Se66l49/Vsty3n0Ztxf98pt5+xJ/dS8e/u5bWu7XASH0CqMb/8+6d4z+Wab9T8T8eQshF1bHmUjNAdQ1TTW+1XiEtHf9DtbTU1Jn8I1vd/79n4n8h0/5Bzf8r2Q8imkrH/1+1tJ5Uic37vz/e+f6/mGn/IOJfHf+Kz/+2pON/uJ7YnSpS+0+2O/+PZ9rvVPyvx8k4j0epK2A1qqe3+r460tLx79mWv/n8F7e1/ruUqb9fz3+NfhvPf43p/+Wo/vxHc+n497Ys1+79P5Gp1+n5f6S2/mO30vE/UktLr53rX8rZbvwnM+13Kv61VUlPI/6b88kfh+vpX1v/tSUd/3/XE+OtJVZqP2vrv2jn9f/lTPsHsf6rjn8l7myvz4t0/I+2LFeN/w9tfP5fydTrfPxDGLTW37V0/I+1LFe7/3t2jv9Upl6n4/9SJxsHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeAaMJse+EMUDqfM4HhgI4XxyfiociaYLs/npUnnmo6UQxpL0XDgR3S6Vpwul/NxCebaYL5RK5ZkQLiT5J0NPtFQqV/LzhbsXN9rqje4UC4uV6WKhEkIYT9L/H4412pqeq8wX7oYQLm3k/ScuL969U1jIz84tvjk4ODgYJjbG0B8VP6kUFyr13uu5IUxu1O2Ltgyuln15YyxHow/Ly4sLhVIt/cqWOqXyTKG0pc5UkvdF6I8qi8sLM4VKMV8q3270d5BGkuPYxLX3rl0Z2pZ/M6ofR/d3WAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD8RY+G3/gyhNBdP4tDCCONX6Jm5R8+Lp7NP526vzZ8enL1wdqTVuUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgT3bgQAAAAAAAyP+1EaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwS8coDQRRGIDfjIXaeQyrZbezXVFEC1cET6DH8DB6FC/hHVKkSJsiBJJZCJtd2Capvq95MD8z78E8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYJ6n9+7jrW4iUlxtLiP+vv4Xh/lLqT/34/cvzjAjp/P82j081k3593SU35WjZZt36Xr1/Rkjtfc72JPhPu31fa4n55rat6n5+r43kXIVEW3Jb1POVTXvLQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAtO3AgAAAAAADk/9oIVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVdiBYwEAAAAAYf7WUfRtAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPwKAAD//+UFHyA=") r0 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ftruncate(r0, 0x2007ffc) sendfile(r0, r0, 0x0, 0x800000009) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x40942, 0x0) r2 = open(&(0x7f00000000c0)='./file1\x00', 0x185042, 0x182) copy_file_range(r2, 0x0, r1, 0x0, 0xfffffbffa003e45c, 0x700000000000000) ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0x4020940d, &(0x7f0000000440)={0x4}) 546.461431ms ago: executing program 1 (id=855): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000180)={'pcl818\x00', [0x4f27, 0x6, 0x7f, 0xfffffffc, 0x5, 0x7, 0xf, 0x4, 0xa, 0xfffffffc, 0x2, 0x3, 0x0, 0x1, 0x7, 0x101, 0x0, 0x2, 0x3, 0x8000, 0x2, 0xcaa7, 0x0, 0x20001e58, 0x7, 0x63e, 0x5, 0xb, 0xfffffffe, 0x0, 0xfffffff8]}) 458.265629ms ago: executing program 2 (id=856): syz_usb_connect(0x5, 0x36, &(0x7f0000000480)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d0009050303"], 0x0) 347.111889ms ago: executing program 4 (id=857): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newtaction={0x88, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0xfffff7e8}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x2}, 0x3}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x88}}, 0x0) 116.59086ms ago: executing program 4 (id=858): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x801, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r0, 0x5404) 0s ago: executing program 4 (id=859): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000001440)={'vxcan1\x00', 0x0}) sendto$packet(r0, &(0x7f0000000080)='\x00\x00', 0x2, 0x4004854, &(0x7f0000000040)={0x11, 0xc, r2, 0x1, 0x1}, 0x14) kernel console output (not intermixed with test programs): 9815][ T5776] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 72.593538][ T5080] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 72.595319][ T5776] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 72.601037][ T5080] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 72.608854][ T5776] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 72.629837][ T5776] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 72.638072][ T5779] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 72.646064][ T5779] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 72.653653][ T5779] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 72.677675][ T5779] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 72.685189][ T5779] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 72.693920][ T5781] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 72.712727][ T5781] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 73.115786][ T5765] chnl_net:caif_netlink_parms(): no params data found [ 73.230328][ T5764] chnl_net:caif_netlink_parms(): no params data found [ 73.360493][ T5767] chnl_net:caif_netlink_parms(): no params data found [ 73.383274][ T5765] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.390953][ T5765] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.399965][ T5765] bridge_slave_0: entered allmulticast mode [ 73.406959][ T5765] bridge_slave_0: entered promiscuous mode [ 73.451608][ T5764] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.459134][ T5764] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.466443][ T5764] bridge_slave_0: entered allmulticast mode [ 73.475012][ T5764] bridge_slave_0: entered promiscuous mode [ 73.483058][ T5765] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.490298][ T5765] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.497636][ T5765] bridge_slave_1: entered allmulticast mode [ 73.504530][ T5765] bridge_slave_1: entered promiscuous mode [ 73.539342][ T5766] chnl_net:caif_netlink_parms(): no params data found [ 73.556082][ T5764] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.563248][ T5764] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.570380][ T5764] bridge_slave_1: entered allmulticast mode [ 73.577496][ T5764] bridge_slave_1: entered promiscuous mode [ 73.612715][ T5765] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.641271][ T5765] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.673565][ T5764] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.735526][ T5767] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.742799][ T5767] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.749934][ T5767] bridge_slave_0: entered allmulticast mode [ 73.759674][ T5767] bridge_slave_0: entered promiscuous mode [ 73.768864][ T5764] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.781188][ T5765] team0: Port device team_slave_0 added [ 73.790986][ T5765] team0: Port device team_slave_1 added [ 73.801095][ T5767] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.809252][ T5767] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.816563][ T5767] bridge_slave_1: entered allmulticast mode [ 73.824578][ T5767] bridge_slave_1: entered promiscuous mode [ 73.892323][ T5765] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.899320][ T5765] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.925717][ T5765] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.957965][ T5767] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.970262][ T5764] team0: Port device team_slave_0 added [ 73.977221][ T5765] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.984526][ T5765] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.010696][ T5765] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.035585][ T5767] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.058643][ T5764] team0: Port device team_slave_1 added [ 74.124230][ T5767] team0: Port device team_slave_0 added [ 74.134164][ T5767] team0: Port device team_slave_1 added [ 74.140573][ T5764] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.148161][ T5764] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.174486][ T5764] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.188015][ T5764] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.195111][ T5764] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.221120][ T5764] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.233033][ T5766] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.240777][ T5766] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.248229][ T5766] bridge_slave_0: entered allmulticast mode [ 74.255426][ T5766] bridge_slave_0: entered promiscuous mode [ 74.263889][ T5766] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.271042][ T5766] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.278347][ T5766] bridge_slave_1: entered allmulticast mode [ 74.286668][ T5766] bridge_slave_1: entered promiscuous mode [ 74.356003][ T5767] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.363921][ T5767] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.390144][ T5767] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.403180][ T5767] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.410163][ T5767] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.436225][ T5767] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.469640][ T5765] hsr_slave_0: entered promiscuous mode [ 74.477104][ T5765] hsr_slave_1: entered promiscuous mode [ 74.503263][ T5766] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.556578][ T5766] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.569072][ T5764] hsr_slave_0: entered promiscuous mode [ 74.576643][ T5764] hsr_slave_1: entered promiscuous mode [ 74.583087][ T5764] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 74.590839][ T5764] Cannot create hsr debugfs directory [ 74.669515][ T5767] hsr_slave_0: entered promiscuous mode [ 74.678159][ T5767] hsr_slave_1: entered promiscuous mode [ 74.682996][ T5769] Bluetooth: hci0: command tx timeout [ 74.687163][ T5781] Bluetooth: hci1: command tx timeout [ 74.696451][ T5767] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 74.704694][ T5767] Cannot create hsr debugfs directory [ 74.718316][ T5766] team0: Port device team_slave_0 added [ 74.762070][ T5781] Bluetooth: hci2: command tx timeout [ 74.766445][ T5769] Bluetooth: hci3: command tx timeout [ 74.776625][ T5766] team0: Port device team_slave_1 added [ 74.868949][ T5766] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.876089][ T5766] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.902278][ T5766] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.934362][ T5766] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.941350][ T5766] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.968041][ T5766] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.099594][ T5766] hsr_slave_0: entered promiscuous mode [ 75.105987][ T5766] hsr_slave_1: entered promiscuous mode [ 75.113526][ T5766] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 75.121207][ T5766] Cannot create hsr debugfs directory [ 75.242431][ T5765] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 75.254434][ T5765] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 75.286902][ T5765] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 75.307430][ T5765] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 75.403176][ T5764] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 75.413762][ T5764] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 75.426089][ T5764] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 75.437101][ T5764] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 75.536859][ T5767] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 75.546862][ T5767] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 75.567548][ T5767] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 75.579165][ T5767] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 75.669075][ T5766] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 75.683811][ T5766] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 75.712105][ T5766] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 75.726187][ T5766] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 75.826487][ T5765] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.864836][ T5764] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.917686][ T5765] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.933881][ T5767] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.955317][ T5764] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.969265][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.976842][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.008063][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.015253][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.027410][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.034657][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.078930][ T5767] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.104229][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.111372][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.121756][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.128917][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.162668][ T77] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.169804][ T77] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.187705][ T5766] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.239399][ T5766] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.289084][ T77] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.296293][ T77] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.350669][ T77] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.357962][ T77] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.528957][ T5766] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 76.708192][ T5764] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.762144][ T5769] Bluetooth: hci1: command tx timeout [ 76.763844][ T5781] Bluetooth: hci0: command tx timeout [ 76.804305][ T5764] veth0_vlan: entered promiscuous mode [ 76.828907][ T5764] veth1_vlan: entered promiscuous mode [ 76.842338][ T5781] Bluetooth: hci2: command tx timeout [ 76.842413][ T5769] Bluetooth: hci3: command tx timeout [ 76.987139][ T5767] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.000640][ T5764] veth0_macvtap: entered promiscuous mode [ 77.024487][ T5764] veth1_macvtap: entered promiscuous mode [ 77.061213][ T5764] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.078089][ T5766] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.096092][ T5764] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.110241][ T5765] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.130370][ T5764] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.139755][ T5764] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.149091][ T5764] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.158131][ T5764] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.281743][ T5767] veth0_vlan: entered promiscuous mode [ 77.348632][ T5766] veth0_vlan: entered promiscuous mode [ 77.377298][ T5765] veth0_vlan: entered promiscuous mode [ 77.386408][ T5767] veth1_vlan: entered promiscuous mode [ 77.397538][ T5766] veth1_vlan: entered promiscuous mode [ 77.406622][ T1094] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.428897][ T5765] veth1_vlan: entered promiscuous mode [ 77.435028][ T1094] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.516301][ T1094] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.528027][ T1094] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.545575][ T5765] veth0_macvtap: entered promiscuous mode [ 77.558649][ T5767] veth0_macvtap: entered promiscuous mode [ 77.573434][ T5765] veth1_macvtap: entered promiscuous mode [ 77.583703][ T5766] veth0_macvtap: entered promiscuous mode [ 77.604896][ T5767] veth1_macvtap: entered promiscuous mode [ 77.626394][ T5766] veth1_macvtap: entered promiscuous mode [ 77.640640][ T5765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.654807][ T5765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.669970][ T5765] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.698075][ T5767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.709198][ T5767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.720117][ T5767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.731231][ T5767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.743839][ T5767] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.765170][ T5767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.778463][ T5767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.791050][ T5767] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.799459][ T5765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.837255][ T5765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.858072][ T5765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.868726][ T5765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.880397][ T5765] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.899533][ T5765] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.908888][ T5765] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.918185][ T5765] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.929158][ T5765] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.947468][ T5766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.959133][ T5766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.970703][ T5766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.981318][ T5766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.991639][ T5766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.002884][ T5766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.014461][ T5766] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.026840][ T5766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.038552][ T5766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.050516][ T5766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.061276][ T5766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.071434][ T5766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.082410][ T5766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.093884][ T5766] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.102351][ T5767] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.111284][ T5767] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.120093][ T5767] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.122400][ T27] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 78.129575][ T5767] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.179170][ T5766] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.188526][ T5766] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.198198][ T5766] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.208474][ T5766] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.313772][ T1094] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.321661][ T1094] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.362352][ T27] usb 1-1: Using ep0 maxpacket: 32 [ 78.371309][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.374599][ T27] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 78.393425][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.407306][ T27] usb 1-1: New USB device strings: Mfr=115, Product=0, SerialNumber=0 [ 78.416106][ T27] usb 1-1: Manufacturer: syz [ 78.429711][ T27] usb 1-1: config 0 descriptor?? [ 78.470435][ T77] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.496577][ T77] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.530922][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.561738][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.593585][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.619027][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.662565][ T77] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.670453][ T77] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.678171][ T27] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 78.753956][ T27] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 78.778689][ T27] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 78.806062][ T27] usb 1-1: media controller created [ 78.844330][ T5769] Bluetooth: hci0: command tx timeout [ 78.844387][ T5781] Bluetooth: hci1: command tx timeout [ 78.899253][ T27] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 78.904247][ T5856] syz.1.2[5856]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 78.923431][ T5781] Bluetooth: hci2: command tx timeout [ 78.928973][ T5781] Bluetooth: hci3: command tx timeout [ 78.939962][ T5856] loop1: detected capacity change from 0 to 128 [ 78.948441][ T27] az6027: usb out operation failed. (-71) [ 78.961431][ T27] az6027: usb out operation failed. (-71) [ 78.968977][ T27] stb0899_attach: Driver disabled by Kconfig [ 78.975496][ T27] az6027: no front-end attached [ 78.975496][ T27] [ 78.984288][ T27] az6027: usb out operation failed. (-71) [ 78.990071][ T27] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 78.997749][ T5856] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 79.031295][ T27] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input5 [ 79.076536][ T5856] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 79.095528][ T27] dvb-usb: schedule remote query interval to 400 msecs. [ 79.116458][ T27] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 79.191950][ T27] usb 1-1: USB disconnect, device number 2 [ 79.397946][ T27] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 79.582446][ T9] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 79.751972][ T5814] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 79.772479][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 79.791049][ T9] usb 3-1: config 0 has no interfaces? [ 79.801248][ T9] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 79.822001][ T9] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 79.840520][ T9] usb 3-1: Product: syz [ 79.850649][ T9] usb 3-1: Manufacturer: syz [ 79.860771][ T9] usb 3-1: SerialNumber: syz [ 79.881192][ T9] usb 3-1: config 0 descriptor?? [ 79.947477][ T5814] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 79.972144][ T5814] usb 4-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 79.993694][ T5814] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.023547][ T5814] usb 4-1: config 0 descriptor?? [ 80.122556][ T5864] program syz.2.5 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 80.144436][ T27] usb 3-1: USB disconnect, device number 2 [ 80.246139][ T5874] loop1: detected capacity change from 0 to 32768 [ 80.260053][ T5874] ======================================================= [ 80.260053][ T5874] WARNING: The mand mount option has been deprecated and [ 80.260053][ T5874] and is ignored by this kernel. Remove the mand [ 80.260053][ T5874] option from the mount to silence this warning. [ 80.260053][ T5874] ======================================================= [ 80.356318][ T5874] JBD2: Ignoring recovery information on journal [ 80.359393][ T5871] loop0: detected capacity change from 0 to 40427 [ 80.431595][ T5874] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 80.453223][ T5871] F2FS-fs (loop0): invalid crc value [ 80.492391][ T5871] F2FS-fs (loop0): Found nat_bits in checkpoint [ 80.541414][ T5814] logitech-djreceiver 0003:046D:C71F.0001: hidraw0: USB HID v0.00 Device [HID 046d:c71f] on usb-dummy_hcd.3-1/input0 [ 80.632705][ T5871] F2FS-fs (loop0): Start checkpoint disabled! [ 80.666918][ T5814] usb 4-1: USB disconnect, device number 2 [ 80.673295][ T5871] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 80.700456][ T5879] syz.1.9 (5879) used greatest stack depth: 17712 bytes left [ 80.835584][ T5767] ocfs2: Unmounting device (7,1) on (node local) [ 80.850997][ T5871] syz.0.8: attempt to access beyond end of device [ 80.850997][ T5871] loop0: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 80.861168][ T5880] fido_id[5880]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 80.922937][ T5781] Bluetooth: hci0: command tx timeout [ 80.928564][ T5781] Bluetooth: hci1: command tx timeout [ 81.002986][ T5781] Bluetooth: hci3: command tx timeout [ 81.006863][ T5769] Bluetooth: hci2: command tx timeout [ 81.592319][ T23] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 81.626542][ T5899] loop2: detected capacity change from 0 to 1024 [ 81.626759][ T42] kworker/u4:2: attempt to access beyond end of device [ 81.626759][ T42] loop0: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 81.664428][ T5901] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 81.674570][ T5899] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 81.687612][ T42] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 81.803692][ T23] usb 2-1: Using ep0 maxpacket: 16 [ 81.824047][ T23] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 81.851992][ T23] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 81.885257][ T23] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 81.902941][ T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.948098][ T23] usb 2-1: Product: syz [ 81.952740][ T23] usb 2-1: Manufacturer: syz [ 81.957384][ T23] usb 2-1: SerialNumber: syz [ 82.193794][ T23] usb 2-1: 0:2 : does not exist [ 82.201521][ T23] usb 2-1: unit 9 not found! [ 82.218322][ T23] usb 2-1: 4:0: cannot get min/max values for control 1 (id 4) [ 82.224750][ T5772] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 82.245693][ T23] usb 2-1: 4:0: cannot get min/max values for control 2 (id 4) [ 82.272323][ T23] usb 2-1: 4:0: cannot get min/max values for control 3 (id 4) [ 82.337881][ T23] usb 2-1: 4:0: cannot get min/max values for control 4 (id 4) [ 82.359596][ T23] usb 2-1: 4:0: cannot get min/max values for control 5 (id 4) [ 82.390786][ T23] usb 2-1: 4:0: cannot get min/max values for control 6 (id 4) [ 82.432006][ T5772] usb 3-1: Using ep0 maxpacket: 16 [ 82.448370][ T5772] usb 3-1: config 0 has an invalid interface number: 214 but max is 0 [ 82.457044][ T5772] usb 3-1: config 0 has no interface number 0 [ 82.475618][ T5772] usb 3-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid maxpacket 1023, setting to 64 [ 82.488083][ T23] usb 2-1: USB disconnect, device number 2 [ 82.529134][ T5772] usb 3-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 82.551240][ T5772] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.590334][ T5772] usb 3-1: Product: syz [ 82.611074][ T5772] usb 3-1: Manufacturer: syz [ 82.624098][ T5772] usb 3-1: SerialNumber: syz [ 82.646844][ T5772] usb 3-1: config 0 descriptor?? [ 83.031664][ T5920] @: renamed from vlan0 (while UP) [ 83.282966][ T5772] usbtouchscreen: probe of 3-1:0.214 failed with error -71 [ 83.315142][ T5772] usb 3-1: USB disconnect, device number 3 [ 83.441259][ T5932] loop0: detected capacity change from 0 to 128 [ 83.559406][ T5934] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 83.566235][ T5934] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 83.594298][ T5934] vhci_hcd vhci_hcd.0: Device attached [ 83.679302][ T5938] loop0: detected capacity change from 0 to 4096 [ 83.737669][ T5939] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 83.805363][ T5833] vhci_hcd: vhci_device speed not set [ 83.883556][ T9] usb 4-1: new low-speed USB device number 3 using dummy_hcd [ 83.898232][ T5833] usb 39-1: new full-speed USB device number 2 using vhci_hcd [ 83.955242][ T5941] loop0: detected capacity change from 0 to 16 [ 84.084253][ T9] usb 4-1: config 0 has no interfaces? [ 84.090030][ T9] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 84.136278][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.155819][ T9] usb 4-1: config 0 descriptor?? [ 84.258846][ T5949] loop1: detected capacity change from 0 to 16 [ 84.280213][ T5949] erofs: (device loop1): mounted with root inode @ nid 36. [ 84.331471][ T5769] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 0] out[9000] [ 84.359164][ T5949] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 84.376527][ T28] audit: type=1800 audit(1767274773.396:2): pid=5949 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.36" name="file2" dev="loop1" ino=89 res=0 errno=0 [ 84.390075][ T5935] vhci_hcd: cannot find a urb of seqnum 4294967295 max seqnum 1 [ 84.396425][ T23] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 84.410970][ T5772] usb 4-1: USB disconnect, device number 3 [ 84.427595][ T1094] vhci_hcd: stop threads [ 84.433626][ T1094] vhci_hcd: release socket [ 84.440649][ T1094] vhci_hcd: disconnect device [ 84.604610][ T23] usb 3-1: New USB device found, idVendor=59cc, idProduct=980d, bcdDevice=b4.8e [ 84.614426][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.628978][ T23] usb 3-1: config 0 descriptor?? [ 84.641396][ T23] usb-storage 3-1:0.0: USB Mass Storage device detected [ 84.857872][ T23] usb 3-1: USB disconnect, device number 4 [ 85.060448][ T5970] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 85.132702][ T5970] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 85.147735][ T5970] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 85.432129][ T23] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 85.454551][ T5980] bridge0: port 3(syz_tun) entered blocking state [ 85.462446][ T5980] bridge0: port 3(syz_tun) entered disabled state [ 85.469781][ T5980] syz_tun: entered allmulticast mode [ 85.489029][ T5980] syz_tun: entered promiscuous mode [ 85.497578][ T5980] bridge0: port 3(syz_tun) entered blocking state [ 85.504699][ T5980] bridge0: port 3(syz_tun) entered forwarding state [ 85.623987][ T23] usb 4-1: Using ep0 maxpacket: 8 [ 85.645113][ T23] usb 4-1: config 0 has an invalid interface number: 178 but max is 0 [ 85.660116][ T23] usb 4-1: config 0 has no interface number 0 [ 85.681907][ T23] usb 4-1: config 0 interface 178 has no altsetting 0 [ 85.700916][ T23] usb 4-1: New USB device found, idVendor=15c2, idProduct=0036, bcdDevice=84.4b [ 85.739122][ T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.762459][ T23] usb 4-1: Product: syz [ 85.766700][ T23] usb 4-1: Manufacturer: syz [ 85.773795][ T23] usb 4-1: SerialNumber: syz [ 85.790859][ T23] usb 4-1: config 0 descriptor?? [ 85.816177][ T23] imon 4-1:0.178: unable to register, err -19 [ 86.030622][ T5772] usb 4-1: USB disconnect, device number 4 [ 86.408081][ T5769] Bluetooth: Wrong link type (-71) [ 86.526507][ T5998] loop0: detected capacity change from 0 to 32768 [ 86.554891][ T5994] loop2: detected capacity change from 0 to 32768 [ 86.562718][ T5998] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.58 (5998) [ 86.611161][ T5998] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 86.642798][ T5998] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 86.660309][ T5998] BTRFS info (device loop0): using free space tree [ 86.676391][ T5994] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 86.839684][ T5998] BTRFS info (device loop0): enabling ssd optimizations [ 86.880579][ T5998] BTRFS info (device loop0): auto enabling async discard [ 86.904714][ T5994] XFS (loop2): Ending clean mount [ 86.951646][ T6032] loop3: detected capacity change from 0 to 512 [ 86.986323][ T5994] XFS (loop2): Quotacheck needed: Please wait. [ 87.029861][ T6032] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 87.054320][ T5764] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 87.116022][ T788] cfg80211: failed to load regulatory.db [ 87.185666][ T5994] XFS (loop2): Quotacheck: Done. [ 87.426757][ T5766] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.657686][ T5765] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 87.713444][ T5772] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 87.929880][ T5772] usb 1-1: Using ep0 maxpacket: 16 [ 87.965267][ T5772] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 88.007117][ T5772] usb 1-1: config 0 interface 0 has no altsetting 0 [ 88.039594][ T5772] usb 1-1: New USB device found, idVendor=05ac, idProduct=0269, bcdDevice= 0.00 [ 88.061945][ T5772] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.116266][ T5772] usb 1-1: config 0 descriptor?? [ 88.539264][ T5772] magicmouse 0003:05AC:0269.0002: unknown main item tag 0x0 [ 88.581916][ T5772] magicmouse 0003:05AC:0269.0002: unknown main item tag 0x0 [ 88.601987][ T5772] magicmouse 0003:05AC:0269.0002: unknown main item tag 0x0 [ 88.616559][ T5772] magicmouse 0003:05AC:0269.0002: unknown main item tag 0x0 [ 88.636435][ T5772] magicmouse 0003:05AC:0269.0002: unknown main item tag 0x0 [ 88.650301][ T5772] magicmouse 0003:05AC:0269.0002: unknown main item tag 0x0 [ 88.659172][ T5772] magicmouse 0003:05AC:0269.0002: unknown main item tag 0x0 [ 88.669142][ T5772] magicmouse 0003:05AC:0269.0002: unknown main item tag 0x0 [ 88.715619][ T5772] magicmouse 0003:05AC:0269.0002: unknown main item tag 0x0 [ 88.723715][ T5772] magicmouse 0003:05AC:0269.0002: unknown main item tag 0x0 [ 88.738404][ T5772] magicmouse 0003:05AC:0269.0002: unknown main item tag 0x0 [ 88.760930][ T5772] magicmouse 0003:05AC:0269.0002: unknown main item tag 0x0 [ 88.780550][ T5772] magicmouse 0003:05AC:0269.0002: unknown main item tag 0x0 [ 88.801944][ T5772] magicmouse 0003:05AC:0269.0002: unknown main item tag 0x0 [ 88.809372][ T5772] magicmouse 0003:05AC:0269.0002: unknown main item tag 0x0 [ 88.849118][ T5772] magicmouse 0003:05AC:0269.0002: unknown main item tag 0x0 [ 88.862215][ T5772] magicmouse 0003:05AC:0269.0002: unknown main item tag 0x0 [ 88.878517][ T5772] magicmouse 0003:05AC:0269.0002: unknown main item tag 0x0 [ 88.897976][ T5772] magicmouse 0003:05AC:0269.0002: unknown main item tag 0x0 [ 88.921997][ T5772] magicmouse 0003:05AC:0269.0002: unknown main item tag 0x0 [ 88.939756][ T5772] magicmouse 0003:05AC:0269.0002: unknown main item tag 0x0 [ 88.962153][ T5772] magicmouse 0003:05AC:0269.0002: unknown main item tag 0x0 [ 88.969620][ T5772] magicmouse 0003:05AC:0269.0002: unknown main item tag 0x0 [ 89.004217][ T5833] vhci_hcd: vhci_device speed not set [ 89.012951][ T5772] magicmouse 0003:05AC:0269.0002: unknown main item tag 0x0 [ 89.025200][ T5772] magicmouse 0003:05AC:0269.0002: unknown main item tag 0x0 [ 89.039211][ T5772] magicmouse 0003:05AC:0269.0002: unknown main item tag 0x0 [ 89.048865][ T5772] magicmouse 0003:05AC:0269.0002: unknown main item tag 0x0 [ 89.063628][ T5772] magicmouse 0003:05AC:0269.0002: unknown main item tag 0x0 [ 89.071117][ T5772] magicmouse 0003:05AC:0269.0002: unknown main item tag 0x0 [ 89.079271][ T5772] magicmouse 0003:05AC:0269.0002: unknown main item tag 0x0 [ 89.091781][ T5772] magicmouse 0003:05AC:0269.0002: unknown main item tag 0x0 [ 89.120972][ T5772] magicmouse 0003:05AC:0269.0002: unknown main item tag 0x0 [ 89.141250][ T5772] magicmouse 0003:05AC:0269.0002: unknown main item tag 0x0 [ 89.151528][ T5772] magicmouse 0003:05AC:0269.0002: unknown main item tag 0x0 [ 89.167971][ T5772] magicmouse 0003:05AC:0269.0002: unknown main item tag 0x0 [ 89.208365][ T5772] magicmouse 0003:05AC:0269.0002: unknown main item tag 0x0 [ 89.230522][ T5772] magicmouse 0003:05AC:0269.0002: unknown main item tag 0x0 [ 89.240532][ T5772] magicmouse 0003:05AC:0269.0002: unknown main item tag 0x0 [ 89.295816][ T5772] magicmouse 0003:05AC:0269.0002: unknown main item tag 0x0 [ 89.323024][ T5772] magicmouse 0003:05AC:0269.0002: unknown main item tag 0x0 [ 89.353067][ T5772] magicmouse 0003:05AC:0269.0002: unknown main item tag 0x0 [ 89.364231][ T5772] magicmouse 0003:05AC:0269.0002: unknown main item tag 0x0 [ 89.371605][ T5772] magicmouse 0003:05AC:0269.0002: unknown main item tag 0x0 [ 89.402042][ T5772] magicmouse 0003:05AC:0269.0002: unknown main item tag 0x0 [ 89.409719][ T5772] magicmouse 0003:05AC:0269.0002: unknown main item tag 0x0 [ 89.424986][ T5772] magicmouse 0003:05AC:0269.0002: unknown main item tag 0x0 [ 89.455618][ T5772] magicmouse 0003:05AC:0269.0002: unknown main item tag 0x0 [ 89.482663][ T5772] magicmouse 0003:05AC:0269.0002: unknown main item tag 0x0 [ 89.490044][ T5772] magicmouse 0003:05AC:0269.0002: unknown main item tag 0x0 [ 89.536228][ T5772] magicmouse 0003:05AC:0269.0002: unknown main item tag 0x0 [ 89.561978][ T5772] magicmouse 0003:05AC:0269.0002: unknown main item tag 0x0 [ 89.588411][ T5772] magicmouse 0003:05AC:0269.0002: unknown main item tag 0x0 [ 89.631442][ T5772] magicmouse 0003:05AC:0269.0002: unknown main item tag 0x0 [ 89.663466][ T5772] magicmouse 0003:05AC:0269.0002: unknown main item tag 0x0 [ 89.670865][ T5772] magicmouse 0003:05AC:0269.0002: unknown main item tag 0x0 [ 89.715606][ T5772] magicmouse 0003:05AC:0269.0002: unknown main item tag 0x0 [ 89.743005][ T5772] magicmouse 0003:05AC:0269.0002: unknown main item tag 0x0 [ 89.748726][ T6105] loop2: detected capacity change from 0 to 8 [ 89.759409][ T5772] magicmouse 0003:05AC:0269.0002: unknown main item tag 0x0 [ 89.799289][ T5772] magicmouse 0003:05AC:0269.0002: unknown main item tag 0x0 [ 89.821976][ T5772] magicmouse 0003:05AC:0269.0002: unknown main item tag 0x0 [ 89.850720][ T5772] magicmouse 0003:05AC:0269.0002: unknown main item tag 0x0 [ 89.893001][ T5772] magicmouse 0003:05AC:0269.0002: unknown main item tag 0x0 [ 89.912648][ T5772] magicmouse 0003:05AC:0269.0002: unknown main item tag 0x0 [ 89.939339][ T5772] magicmouse 0003:05AC:0269.0002: unknown main item tag 0x0 [ 89.977428][ T5772] magicmouse 0003:05AC:0269.0002: unbalanced collection at end of report description [ 89.996257][ T5772] magicmouse 0003:05AC:0269.0002: magicmouse hid parse failed [ 90.009759][ T5772] magicmouse: probe of 0003:05AC:0269.0002 failed with error -22 [ 90.041441][ T5772] usb 1-1: USB disconnect, device number 3 [ 90.366897][ T6115] loop0: detected capacity change from 0 to 4096 [ 90.474465][ T6115] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 90.694234][ T5764] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.012374][ T6138] loop2: detected capacity change from 0 to 32768 [ 92.167222][ T6138] ocfs2: Mounting device (7,2) on (node local, slot 0) with writeback data mode. [ 92.221385][ T6155] loop0: detected capacity change from 0 to 1024 [ 92.259613][ T6155] hfsplus: unable to find HFS+ superblock [ 92.274704][ T28] audit: type=1800 audit(1767274781.296:3): pid=6138 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.109" name="file1" dev="loop2" ino=17058 res=0 errno=0 [ 92.357931][ T28] audit: type=1800 audit(1767274781.326:4): pid=6157 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.109" name="file1" dev="loop2" ino=17058 res=0 errno=0 [ 92.544227][ T5765] ocfs2: Unmounting device (7,2) on (node local) [ 93.273178][ T6174] loop1: detected capacity change from 0 to 1024 [ 93.600568][ T42] hfsplus: b-tree write err: -5, ino 4 [ 93.853972][ T6182] netlink: 4 bytes leftover after parsing attributes in process `syz.2.126'. [ 94.682608][ T5772] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 94.884428][ T5772] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 94.905042][ T5772] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 94.920716][ T6193] loop0: detected capacity change from 0 to 32768 [ 94.947935][ T6193] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.131 (6193) [ 94.950241][ T5772] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 94.992983][ T27] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 95.005114][ T5772] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.033181][ T5772] usb 2-1: Product: syz [ 95.049315][ T5772] usb 2-1: Manufacturer: syz [ 95.058499][ T6193] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 95.058561][ T5772] usb 2-1: SerialNumber: syz [ 95.099772][ T6193] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 95.152489][ T6193] BTRFS info (device loop0): using free space tree [ 95.204344][ T27] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 95.232525][ T27] usb 3-1: config 0 has no interfaces? [ 95.243944][ T27] usb 3-1: New USB device found, idVendor=1645, idProduct=0008, bcdDevice=cf.36 [ 95.292040][ T27] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.310755][ T6193] BTRFS info (device loop0): enabling ssd optimizations [ 95.323285][ T5772] cdc_ncm 2-1:1.0: NCM or ECM functional descriptors missing [ 95.332405][ T5772] cdc_ncm 2-1:1.0: bind() failure [ 95.355392][ T5772] usb 2-1: USB disconnect, device number 3 [ 95.362561][ T6193] BTRFS info (device loop0): auto enabling async discard [ 95.374906][ T27] usb 3-1: config 0 descriptor?? [ 95.599387][ T5756] usb 3-1: USB disconnect, device number 5 [ 95.720540][ T5764] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 96.565424][ T6230] veth0_vlan: left promiscuous mode [ 96.584115][ T6232] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 96.621986][ T23] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 96.630872][ T6230] veth0_vlan: entered promiscuous mode [ 96.855061][ T23] usb 3-1: config 0 has an invalid interface number: 223 but max is 0 [ 96.882570][ T23] usb 3-1: config 0 has no interface number 0 [ 96.895495][ T23] usb 3-1: New USB device found, idVendor=05ac, idProduct=0242, bcdDevice=70.28 [ 96.904759][ T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.947077][ T23] usb 3-1: Product: syz [ 96.960625][ T23] usb 3-1: Manufacturer: syz [ 96.971965][ T23] usb 3-1: SerialNumber: syz [ 96.985284][ T23] usb 3-1: config 0 descriptor?? [ 97.019389][ T23] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.223/input/input7 [ 97.165066][ T6239] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 97.239900][ T5120] bcm5974 3-1:0.223: could not read from device [ 97.257413][ T5120] bcm5974 3-1:0.223: could not read from device [ 97.318111][ T5120] bcm5974 3-1:0.223: could not read from device [ 97.333492][ T23] usb 3-1: USB disconnect, device number 6 [ 98.064771][ T6259] netlink: 168 bytes leftover after parsing attributes in process `syz.1.152'. [ 98.078465][ T6258] bond_slave_0: entered promiscuous mode [ 98.084516][ T6258] bond_slave_1: entered promiscuous mode [ 98.090445][ T27] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 98.129823][ T6258] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 98.169609][ T6258] bond1: (slave macvlan2): making interface the new active one [ 98.231794][ T6258] bond1: (slave macvlan2): Enslaving as an active interface with an up link [ 98.282154][ T27] usb 1-1: Using ep0 maxpacket: 8 [ 98.294818][ T27] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 98.304297][ T27] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.324107][ T27] usb 1-1: Product: syz [ 98.330744][ T27] usb 1-1: Manufacturer: syz [ 98.351991][ T27] usb 1-1: SerialNumber: syz [ 98.367963][ T27] usb 1-1: config 0 descriptor?? [ 98.610417][ T27] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 98.701111][ T6269] capability: warning: `syz.1.157' uses deprecated v2 capabilities in a way that may be insecure [ 98.727410][ T6269] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 98.744992][ T6269] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 98.761153][ T6269] overlayfs: failed to set uuid (48/file1, err=-13); falling back to uuid=null. [ 99.597479][ T6289] loop1: detected capacity change from 0 to 512 [ 99.684925][ T6289] EXT4-fs (loop1): 1 truncate cleaned up [ 99.723939][ T6289] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 99.892128][ T6295] EXT4-fs error (device loop1): htree_dirblock_to_tree:1083: inode #2: comm syz.1.166: Directory hole found for htree leaf block 0 [ 100.030483][ T27] dvb_usb_rtl28xxu: probe of 1-1:0.0 failed with error -71 [ 100.049761][ T6297] syz.2.169 uses obsolete (PF_INET,SOCK_PACKET) [ 100.059408][ T27] usb 1-1: USB disconnect, device number 4 [ 100.068183][ T5767] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.185983][ T6321] loop1: detected capacity change from 0 to 4096 [ 101.198398][ T6321] ntfs3: loop1: Different NTFS sector size (1024) and media sector size (512). [ 101.357276][ T6321] ntfs3: loop1: Failed to load $Extend (-22). [ 101.370639][ T6321] ntfs3: loop1: Failed to initialize $Extend. [ 102.417849][ T6343] loop1: detected capacity change from 0 to 128 [ 102.508946][ T6343] Invalid ELF header len 10 [ 102.570918][ T6347] loop0: detected capacity change from 0 to 1764 [ 102.682244][ T5777] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 103.054202][ T6356] loop1: detected capacity change from 0 to 2048 [ 103.071611][ T6356] EXT4-fs: Ignoring removed nobh option [ 103.206450][ T6356] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.232593][ T6356] ext4 filesystem being mounted at /61/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 103.440339][ T5767] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.451951][ T23] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 104.662026][ T23] usb 1-1: Using ep0 maxpacket: 32 [ 104.672248][ T23] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 104.683802][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.733881][ T23] usb 1-1: config 0 descriptor?? [ 104.945686][ T23] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 104.966554][ T23] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 104.997296][ T23] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 105.017556][ T23] usb 1-1: media controller created [ 105.114640][ T23] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 105.425571][ T6398] netlink: 'syz.2.212': attribute type 29 has an invalid length. [ 105.592709][ T23] az6027: usb out operation failed. (-71) [ 105.598515][ T23] stb0899_attach: Driver disabled by Kconfig [ 105.631970][ T23] az6027: no front-end attached [ 105.631970][ T23] [ 105.670269][ T23] az6027: usb out operation failed. (-71) [ 105.680310][ T23] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 105.710536][ T23] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input8 [ 105.747689][ T23] dvb-usb: schedule remote query interval to 400 msecs. [ 105.763389][ T23] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 105.795083][ T23] usb 1-1: USB disconnect, device number 5 [ 105.812309][ T6406] netlink: 4 bytes leftover after parsing attributes in process `syz.2.216'. [ 105.858908][ T6406] netlink: 4 bytes leftover after parsing attributes in process `syz.2.216'. [ 105.923519][ T23] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 106.556477][ T6422] netlink: 64 bytes leftover after parsing attributes in process `syz.1.224'. [ 106.839655][ T5781] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 106.849995][ T5781] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 106.869731][ T5781] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 106.891321][ T5781] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 106.903654][ T5781] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 106.913379][ T5781] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 107.308460][ T42] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.561601][ T42] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.817568][ T42] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.945049][ T6456] loop1: detected capacity change from 0 to 256 [ 108.069555][ T6456] exFAT-fs (loop1): failed to load upcase table (idx : 0x00011a39, chksum : 0xd7c18d7b, utbl_chksum : 0xe619d30d) [ 108.097287][ T42] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.312033][ T6460] exFAT-fs (loop1): error, invalid size(size(21) > aligned(9223372036854777344) [ 108.312033][ T6460] [ 108.346457][ T6460] exFAT-fs (loop1): Filesystem has been set read-only [ 108.480531][ T6427] chnl_net:caif_netlink_parms(): no params data found [ 108.915899][ T6471] tipc: Started in network mode [ 108.921010][ T6471] tipc: Node identity 7f000001, cluster identity 4711 [ 108.944166][ T6471] tipc: Enabled bearer , priority 10 [ 109.002790][ T5769] Bluetooth: hci2: command tx timeout [ 109.208380][ T6427] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.223227][ T6427] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.230664][ T6427] bridge_slave_0: entered allmulticast mode [ 109.238601][ T6427] bridge_slave_0: entered promiscuous mode [ 109.347411][ T6427] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.362388][ T6427] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.362443][ T5833] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 109.379927][ T6427] bridge_slave_1: entered allmulticast mode [ 109.388942][ T6427] bridge_slave_1: entered promiscuous mode [ 109.599111][ T5833] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 109.626624][ T5833] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 109.646960][ T6427] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 109.656252][ T5833] usb 1-1: New USB device found, idVendor=04e7, idProduct=0030, bcdDevice= 0.00 [ 109.692052][ T5833] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.710884][ T5833] usb 1-1: config 0 descriptor?? [ 109.768559][ T6427] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 109.946881][ T5769] Bluetooth: hci1: Malformed Event: 0x02 [ 109.966593][ T5833] usbhid 1-1:0.0: can't add hid device: -71 [ 109.982101][ T5833] usbhid: probe of 1-1:0.0 failed with error -71 [ 110.012121][ T5833] usb 1-1: USB disconnect, device number 6 [ 110.064690][ T6427] team0: Port device team_slave_0 added [ 110.071233][ T788] tipc: Node number set to 2130706433 [ 110.250306][ T6427] team0: Port device team_slave_1 added [ 110.281271][ T6481] loop1: detected capacity change from 0 to 32768 [ 110.310774][ T6481] (syz.1.247,6481,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 110.347180][ T6481] (syz.1.247,6481,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 110.463913][ T6481] JBD2: Ignoring recovery information on journal [ 110.486257][ T6427] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 110.514309][ T6427] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 110.563099][ T6427] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 110.586457][ T6481] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 110.622744][ T6437] syz.2.230 (6437): drop_caches: 1 [ 110.642454][ T6427] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 110.649481][ T6427] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 110.649655][ T28] audit: type=1107 audit(1767274799.666:5): pid=6496 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 110.779332][ T6427] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 110.916633][ T42] hsr_slave_0: left promiscuous mode [ 110.949143][ T42] hsr_slave_1: left promiscuous mode [ 110.958528][ T42] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 110.972321][ T42] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 110.993967][ T42] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 111.002118][ T42] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 111.024689][ T42] bridge_slave_1: left allmulticast mode [ 111.024879][ T5767] ocfs2: Unmounting device (7,1) on (node local) [ 111.030369][ T42] bridge_slave_1: left promiscuous mode [ 111.031097][ T42] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.068207][ T42] bridge_slave_0: left allmulticast mode [ 111.076549][ T42] bridge_slave_0: left promiscuous mode [ 111.081954][ T5769] Bluetooth: hci2: command tx timeout [ 111.104065][ T42] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.108969][ T6505] loop2: detected capacity change from 0 to 512 [ 111.126448][ T6505] EXT4-fs: Ignoring removed orlov option [ 111.132413][ T5833] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 111.150771][ T6505] EXT4-fs: Ignoring removed mblk_io_submit option [ 111.203816][ T6505] EXT4-fs (loop2): orphan cleanup on readonly fs [ 111.210227][ T6505] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -13 [ 111.283433][ T6505] EXT4-fs error (device loop2): ext4_clear_blocks:883: inode #13: comm syz.2.252: attempt to clear invalid blocks 2 len 1 [ 111.322682][ T42] veth1_macvtap: left promiscuous mode [ 111.339244][ T42] veth0_macvtap: left promiscuous mode [ 111.361965][ T5833] usb 1-1: Using ep0 maxpacket: 16 [ 111.368189][ T42] veth1_vlan: left promiscuous mode [ 111.381761][ T42] veth0_vlan: left promiscuous mode [ 111.384238][ T5833] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 111.391298][ T6505] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 111.404096][ T5833] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 111.417131][ T6505] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.252: invalid indirect mapped block 1819239214 (level 0) [ 111.447705][ T5833] usb 1-1: config 0 interface 0 has no altsetting 0 [ 111.458848][ T5833] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 111.462498][ T6505] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.252: invalid indirect mapped block 1819239214 (level 1) [ 111.473801][ T5833] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.496359][ T5833] usb 1-1: config 0 descriptor?? [ 111.521619][ T6505] EXT4-fs (loop2): 1 truncate cleaned up [ 111.535678][ T6505] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 112.167305][ T8] usb 1-1: USB disconnect, device number 7 [ 112.261156][ T42] team0 (unregistering): Port device team_slave_1 removed [ 112.308873][ T42] team0 (unregistering): Port device team_slave_0 removed [ 112.360010][ T42] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 112.411805][ T42] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 112.962982][ T42] bond0 (unregistering): Released all slaves [ 113.062214][ T5833] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 113.168403][ T5769] Bluetooth: hci2: command tx timeout [ 113.210891][ T5765] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.270961][ T6427] hsr_slave_0: entered promiscuous mode [ 113.280460][ T5833] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 113.292322][ T5833] usb 1-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.00 [ 113.303925][ T5833] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.327732][ T6427] hsr_slave_1: entered promiscuous mode [ 113.343466][ T5833] usb 1-1: config 0 descriptor?? [ 113.349985][ T6427] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 113.365849][ T6427] Cannot create hsr debugfs directory [ 113.774031][ T6525] bridge0: port 3(syz_tun) entered blocking state [ 113.798484][ T6525] bridge0: port 3(syz_tun) entered disabled state [ 113.803378][ T5833] magicmouse 0003:05AC:0265.0004: unknown main item tag 0x5 [ 113.820087][ T6525] syz_tun: entered allmulticast mode [ 113.833919][ T6525] syz_tun: entered promiscuous mode [ 113.850926][ T6525] bridge0: port 3(syz_tun) entered blocking state [ 113.857584][ T6525] bridge0: port 3(syz_tun) entered forwarding state [ 113.867960][ T5833] magicmouse 0003:05AC:0265.0004: hidraw0: USB HID v0.00 Device [HID 05ac:0265] on usb-dummy_hcd.0-1/input0 [ 113.890972][ T6527] bridge0: entered promiscuous mode [ 114.044351][ T8] usb 1-1: USB disconnect, device number 8 [ 114.227200][ T6534] fido_id[6534]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 114.266475][ T6427] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 114.302480][ T6427] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 114.326282][ T6427] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 114.344398][ T6427] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 114.462823][ T6552] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 114.739148][ T6427] 8021q: adding VLAN 0 to HW filter on device bond0 [ 114.826837][ T6427] 8021q: adding VLAN 0 to HW filter on device team0 [ 114.895582][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.902908][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 114.963049][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.970258][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 115.246580][ T5781] Bluetooth: hci2: command tx timeout [ 115.352163][ T5814] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 115.484324][ T6567] bridge0: port 3(syz_tun) entered disabled state [ 115.533347][ T6585] loop1: detected capacity change from 0 to 2048 [ 115.560079][ T5814] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 115.574406][ T6567] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.574975][ T6585] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 115.583659][ T6567] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.594359][ T5814] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xBA, skipping [ 115.615366][ T5814] usb 1-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 115.625224][ T5814] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.634920][ T5814] usb 1-1: Product: syz [ 115.657964][ T5814] usb 1-1: Manufacturer: syz [ 115.664857][ T5814] usb 1-1: SerialNumber: syz [ 115.672790][ T5814] usb 1-1: config 0 descriptor?? [ 115.684843][ T6571] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 115.693462][ T6571] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 115.714410][ T5814] usb 1-1: ucan: probing device on interface #0 [ 115.720841][ T5814] usb 1-1: ucan: invalid EP count (1) [ 115.734261][ T6567] bond_slave_0: left promiscuous mode [ 115.738309][ T5814] usb 1-1: ucan: probe failed; try to update the device firmware [ 115.761454][ T6567] bond_slave_1: left promiscuous mode [ 116.239243][ T6567] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 116.310621][ T6567] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 116.577738][ T6567] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.590564][ T6567] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.602330][ T6567] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.611436][ T6567] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.061726][ T6612] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 117.094177][ T6612] syzkaller0: linktype set to 780 [ 117.218660][ T6618] loop2: detected capacity change from 0 to 512 [ 117.242377][ T5781] Bluetooth: hci3: command 0x0406 tx timeout [ 117.258752][ T6618] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 117.318481][ T6618] EXT4-fs (loop2): orphan cleanup on readonly fs [ 117.432498][ T6618] EXT4-fs error (device loop2): ext4_validate_block_bitmap:439: comm syz.2.280: bg 0: block 248: padding at end of block bitmap is not set [ 117.515509][ T6618] Quota error (device loop2): write_blk: dquota write failed [ 117.546928][ T6618] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 117.575672][ T6427] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 117.592160][ T6618] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.280: Failed to acquire dquot type 1 [ 117.617779][ T6618] EXT4-fs (loop2): 1 truncate cleaned up [ 117.645475][ T6618] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 117.713783][ T6618] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 117.745396][ T6618] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 117.796198][ T6618] EXT4-fs error (device loop2): __ext4_remount:6736: comm syz.2.280: Abort forced by user [ 117.822997][ T6618] EXT4-fs (loop2): Remounting filesystem read-only [ 117.829627][ T6618] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 117.872192][ T6618] ext4 filesystem being remounted at /75/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 118.021297][ T5765] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.149391][ T6600] usb 1-1: USB disconnect, device number 9 [ 118.533439][ T6658] binder: BINDER_SET_CONTEXT_MGR already set [ 118.552950][ T6658] binder: 6657:6658 ioctl 4018620d 2000000001c0 returned -16 [ 118.586661][ T6427] veth0_vlan: entered promiscuous mode [ 118.615660][ T6427] veth1_vlan: entered promiscuous mode [ 118.700241][ T6427] veth0_macvtap: entered promiscuous mode [ 118.737819][ T6427] veth1_macvtap: entered promiscuous mode [ 118.800296][ T6427] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 118.828709][ T6427] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.843102][ T8] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 118.868604][ T6427] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 118.884816][ T6427] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.898442][ T6427] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 118.935789][ T6427] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 118.950904][ T6427] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.961589][ T6427] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 118.975450][ T6427] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.988629][ T6427] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 119.003754][ T6427] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.012846][ T6427] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.021582][ T6427] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.027783][ T6677] loop1: detected capacity change from 0 to 1024 [ 119.032102][ T6427] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.052319][ T5814] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 119.061413][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 119.078559][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 119.097658][ T8] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 119.111556][ T8] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 119.121069][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.181247][ T8] usb 1-1: config 0 descriptor?? [ 119.231941][ T5814] usb 3-1: Using ep0 maxpacket: 32 [ 119.251169][ T5814] usb 3-1: config 4 has an invalid interface number: 128 but max is 0 [ 119.271956][ T5814] usb 3-1: config 4 has no interface number 0 [ 119.278228][ T5814] usb 3-1: config 4 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 119.290864][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.322145][ T5814] usb 3-1: config 4 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 119.333668][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.341506][ T5814] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 119.385318][ T5814] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.408035][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.435304][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.453285][ T5814] hub 3-1:4.128: USB hub found [ 119.638773][ T8] plantronics 0003:047F:FFFF.0005: No inputs registered, leaving [ 119.666167][ T5814] hub 3-1:4.128: 2 ports detected [ 119.681642][ T5814] hub 3-1:4.128: Using single TT (err -22) [ 119.704428][ T8] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 119.982947][ T6692] loop1: detected capacity change from 0 to 256 [ 120.017158][ T6692] FAT-fs (loop1): bogus number of FAT sectors [ 120.032503][ T6692] FAT-fs (loop1): Can't find a valid FAT filesystem [ 120.039919][ C1] plantronics 0003:047F:FFFF.0005: hid_field_extract() called with n (132) > 32! (syz.1.295) [ 120.077997][ T5814] usb 3-1: USB disconnect, device number 7 [ 120.178383][ T6695] netlink: 80 bytes leftover after parsing attributes in process `syz.4.296'. [ 120.243094][ T5807] usb 1-1: USB disconnect, device number 10 [ 120.526128][ T6701] loop4: detected capacity change from 0 to 4096 [ 120.585817][ T6701] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 120.643234][ T6709] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 120.670552][ T6701] EXT4-fs (loop4): shut down requested (1) [ 120.718260][ T6701] fs-verity: sha512 using implementation "sha512-avx2" [ 120.810829][ C1] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 120.971621][ T28] audit: type=1326 audit(1767274809.986:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6718 comm="syz.0.302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c4bd8f749 code=0x7ffc0000 [ 121.058316][ T28] audit: type=1326 audit(1767274810.016:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6718 comm="syz.0.302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c4bd8f749 code=0x7ffc0000 [ 121.098341][ T28] audit: type=1326 audit(1767274810.016:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6718 comm="syz.0.302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f9c4bd8f749 code=0x7ffc0000 [ 121.166883][ T28] audit: type=1326 audit(1767274810.016:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6718 comm="syz.0.302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c4bd8f749 code=0x7ffc0000 [ 121.217273][ T28] audit: type=1326 audit(1767274810.016:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6718 comm="syz.0.302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c4bd8f749 code=0x7ffc0000 [ 121.266170][ T28] audit: type=1326 audit(1767274810.016:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6718 comm="syz.0.302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f9c4bd8f749 code=0x7ffc0000 [ 121.299960][ T28] audit: type=1326 audit(1767274810.076:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6718 comm="syz.0.302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c4bd8f749 code=0x7ffc0000 [ 121.305255][ T6427] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.352178][ T28] audit: type=1326 audit(1767274810.076:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6718 comm="syz.0.302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c4bd8f749 code=0x7ffc0000 [ 122.012416][ T6748] netlink: 16 bytes leftover after parsing attributes in process `syz.2.312'. [ 122.547076][ T6772] netlink: 4 bytes leftover after parsing attributes in process `syz.4.321'. [ 122.582523][ T6772] (unnamed net_device) (uninitialized): Invalid ad_actor_system MAC address. [ 122.601709][ T6772] (unnamed net_device) (uninitialized): option ad_actor_system: invalid value (133) [ 122.620264][ T6772] Zero length message leads to an empty skb [ 123.100337][ T6792] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 123.126638][ T6795] loop4: detected capacity change from 0 to 256 [ 123.176820][ T6795] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3944865a, utbl_chksum : 0xe619d30d) [ 123.277082][ T28] kauditd_printk_skb: 13 callbacks suppressed [ 123.277097][ T28] audit: type=1800 audit(1767274812.296:27): pid=6795 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.328" name="file1" dev="loop4" ino=1048599 res=0 errno=0 [ 123.859658][ T6816] loop4: detected capacity change from 0 to 1024 [ 123.934104][ T6816] EXT4-fs (loop4): Can't support bigalloc feature without extents feature [ 123.934104][ T6816] [ 123.972732][ T6816] EXT4-fs (loop4): couldn't mount as ext2 due to feature incompatibilities [ 124.422156][ T27] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 124.496148][ T6840] loop4: detected capacity change from 0 to 64 [ 124.639134][ T6836] loop2: detected capacity change from 0 to 4096 [ 124.652944][ T27] usb 1-1: Using ep0 maxpacket: 8 [ 124.663717][ T6808] loop1: detected capacity change from 0 to 32768 [ 124.686678][ T27] usb 1-1: unable to get BOS descriptor or descriptor too short [ 124.702471][ T6836] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512). [ 124.722478][ T27] usb 1-1: config 7 has an invalid interface number: 8 but max is 0 [ 124.730691][ T27] usb 1-1: config 7 has no interface number 0 [ 124.739256][ T27] usb 1-1: config 7 interface 8 has no altsetting 0 [ 124.767412][ T27] usb 1-1: New USB device found, idVendor=1199, idProduct=901f, bcdDevice=43.15 [ 124.789124][ T28] audit: type=1800 audit(1767274813.806:28): pid=6843 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.341" name=06E706E706E706E706E706E706E706E706E706E706E706E706E706E706E706E706E706E706E706E706E706E706E706E706E706E706E706E706E706E706E706E706E706E706E706E706E706E706E706E706E706E706E706E706E706E706E706E706E706E706E706E706E706E706E706E706E706E706E706E706E706E706E706E706E706E706E706E706E706E706E706E706E706E706E706E706E706E706E706E706E706E706E706E706E706E706E706E706E706E706E706E706E706E706E706E706E706E706E706E706E706E706E706E706E706E706E706E706E706E706E706E706E706E706E706E706E706E706E706E706E706E706E706E706E706E706E706E706E706E706E706E706E706E706E706E706E706E706E706E706E706E706E706E706E706E706E706E706E706E706E706E706E706E706E706E706E706E706E706E706E706E706E706E706E706E706E706E706E706E706E706E706E706E706E706E706E706E706E706E706E706E706E706E706E706E706E706E706E706E706E706E706E706E706E706E706E706E706E706E706E706E706E706E706E706E706E706E706E706E706E706E706E706E [ 124.795064][ T27] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.816516][ T6808] JBD2: Ignoring recovery information on journal [ 124.899971][ T27] usb 1-1: Product: syz [ 124.906373][ T27] usb 1-1: Manufacturer: syz [ 124.911020][ T27] usb 1-1: SerialNumber: syz [ 125.100358][ T6808] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 125.256276][ T27] usb 1-1: USB disconnect, device number 11 [ 125.392487][ T5767] ocfs2: Unmounting device (7,1) on (node local) [ 126.530900][ T6884] netlink: 8 bytes leftover after parsing attributes in process `syz.0.352'. [ 126.547634][ T6885] syz.1.353: attempt to access beyond end of device [ 126.547634][ T6885] loop1: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 126.590532][ T6884] netlink: 4 bytes leftover after parsing attributes in process `syz.0.352'. [ 126.660912][ T6892] netlink: 4 bytes leftover after parsing attributes in process `syz.0.352'. [ 126.844498][ T6857] loop2: detected capacity change from 0 to 32768 [ 126.856407][ T6857] XFS: noikeep mount option is deprecated. [ 126.994249][ T6857] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 127.162677][ T6857] XFS (loop2): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 127.281555][ T6857] XFS (loop2): Starting recovery (logdev: internal) [ 127.370236][ T6857] XFS (loop2): Ending recovery (logdev: internal) [ 127.466073][ T6919] loop1: detected capacity change from 0 to 512 [ 127.538025][ T28] audit: type=1800 audit(1767274816.556:29): pid=6857 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.345" name="file2" dev="loop2" ino=4423 res=0 errno=0 [ 127.564967][ T6857] XFS (loop2): User initiated shutdown received. [ 127.602860][ T6857] XFS (loop2): Metadata I/O Error (0x4) detected at xfs_fs_goingdown+0x71/0x150 (fs/xfs/xfs_fsops.c:497). Shutting down filesystem. [ 127.616307][ T28] audit: type=1800 audit(1767274816.626:30): pid=6922 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.345" name="file2" dev="loop2" ino=4423 res=0 errno=0 [ 127.639610][ T6857] XFS (loop2): Please unmount the filesystem and rectify the problem(s) [ 127.677890][ T6919] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 127.745587][ T6919] ext4 filesystem being mounted at /127/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 127.845710][ T6923] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 127.847851][ T6919] EXT4-fs error (device loop1): ext4_do_update_inode:5244: inode #2: comm syz.1.360: corrupted inode contents [ 127.899893][ T6919] EXT4-fs error (device loop1): ext4_dirty_inode:6120: inode #2: comm syz.1.360: mark_inode_dirty error [ 127.932925][ T6919] EXT4-fs error (device loop1): ext4_do_update_inode:5244: inode #2: comm syz.1.360: corrupted inode contents [ 127.963811][ T6919] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #2: comm syz.1.360: mark_inode_dirty error [ 127.990441][ T5765] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 128.206916][ T6916] loop0: detected capacity change from 0 to 32768 [ 128.237691][ T6916] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.359 (6916) [ 128.284576][ T5767] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.310671][ T6916] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 128.325908][ T6916] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 128.371943][ T6916] BTRFS info (device loop0): using free space tree [ 128.583779][ T6916] BTRFS info (device loop0): enabling ssd optimizations [ 128.617187][ T6916] BTRFS info (device loop0): auto enabling async discard [ 128.765418][ T5764] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 129.338322][ T6981] loop2: detected capacity change from 0 to 512 [ 129.390519][ T6981] EXT4-fs: Ignoring removed mblk_io_submit option [ 129.423757][ T6981] EXT4-fs (loop2): VFS: Can't find ext4 filesystem [ 129.903990][ T6995] process 'syz.1.380' launched './file2' with NULL argv: empty string added [ 130.310204][ T7012] delete_channel: no stack [ 130.340420][ T7011] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 130.608585][ T7026] netlink: 12 bytes leftover after parsing attributes in process `syz.0.392'. [ 130.616027][ T7024] loop4: detected capacity change from 0 to 2048 [ 130.652731][ T7026] netlink: 104 bytes leftover after parsing attributes in process `syz.0.392'. [ 130.671218][ T7024] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 131.040123][ T7032] syzkaller0: entered promiscuous mode [ 131.047154][ T7032] syzkaller0: entered allmulticast mode [ 131.073296][ T7037] warning: `syz.2.397' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 132.167492][ T7052] loop2: detected capacity change from 0 to 40427 [ 132.180448][ T7052] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 132.190983][ T7052] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 132.217183][ T7052] F2FS-fs (loop2): invalid crc value [ 132.266028][ T7052] F2FS-fs (loop2): Found nat_bits in checkpoint [ 132.380450][ T7052] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 132.387777][ T7052] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 132.701078][ T7052] syz.2.403: attempt to access beyond end of device [ 132.701078][ T7052] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 132.710887][ T7067] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 132.726591][ T7052] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 132.746435][ T7067] xt_TCPMSS: Only works on TCP SYN packets [ 133.171233][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.178006][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.587836][ T7069] loop1: detected capacity change from 0 to 32768 [ 133.608971][ T7069] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.409 (7069) [ 133.678310][ T7069] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 133.713298][ T7069] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 133.734424][ T7069] BTRFS info (device loop1): using free space tree [ 133.885989][ T7069] BTRFS info (device loop1): enabling ssd optimizations [ 133.912097][ T7069] BTRFS info (device loop1): auto enabling async discard [ 134.124336][ T7069] loop1: detected capacity change from 32768 to 0 [ 134.352770][ T7091] syz.1.409: attempt to access beyond end of device [ 134.352770][ T7091] loop1: rw=6145, sector=10240, nr_sectors = 8 limit=0 [ 134.377332][ T7091] BTRFS error (device loop1): bdev /dev/loop1 errs: wr 1, rd 0, flush 0, corrupt 0, gen 0 [ 134.399956][ T7091] syz.1.409: attempt to access beyond end of device [ 134.399956][ T7091] loop1: rw=6145, sector=10248, nr_sectors = 8 limit=0 [ 134.415293][ T7091] BTRFS error (device loop1): bdev /dev/loop1 errs: wr 2, rd 0, flush 0, corrupt 0, gen 0 [ 134.426532][ T7091] syz.1.409: attempt to access beyond end of device [ 134.426532][ T7091] loop1: rw=6145, sector=10440, nr_sectors = 8 limit=0 [ 134.443314][ T7091] BTRFS error (device loop1): bdev /dev/loop1 errs: wr 3, rd 0, flush 0, corrupt 0, gen 0 [ 134.454912][ T7091] syz.1.409: attempt to access beyond end of device [ 134.454912][ T7091] loop1: rw=6145, sector=10448, nr_sectors = 8 limit=0 [ 134.468669][ T7091] BTRFS error (device loop1): bdev /dev/loop1 errs: wr 4, rd 0, flush 0, corrupt 0, gen 0 [ 134.489241][ T7091] syz.1.409: attempt to access beyond end of device [ 134.489241][ T7091] loop1: rw=6145, sector=10456, nr_sectors = 8 limit=0 [ 134.502819][ T7091] BTRFS error (device loop1): bdev /dev/loop1 errs: wr 5, rd 0, flush 0, corrupt 0, gen 0 [ 134.513851][ T7091] syz.1.409: attempt to access beyond end of device [ 134.513851][ T7091] loop1: rw=6145, sector=10464, nr_sectors = 8 limit=0 [ 134.527830][ T7091] BTRFS error (device loop1): bdev /dev/loop1 errs: wr 6, rd 0, flush 0, corrupt 0, gen 0 [ 134.538499][ T7091] syz.1.409: attempt to access beyond end of device [ 134.538499][ T7091] loop1: rw=6145, sector=13440, nr_sectors = 8 limit=0 [ 134.552995][ T7091] BTRFS error (device loop1): bdev /dev/loop1 errs: wr 7, rd 0, flush 0, corrupt 0, gen 0 [ 134.568145][ T7091] BTRFS: error (device loop1) in btrfs_commit_transaction:2511: errno=-5 IO failure (Error while writing out transaction) [ 134.580976][ T7091] BTRFS info (device loop1: state E): forced readonly [ 134.591014][ T7091] BTRFS warning (device loop1: state E): Skipping commit of aborted transaction. [ 134.603362][ T7091] BTRFS error (device loop1: state EA): Transaction aborted (error -5) [ 134.614101][ T7091] BTRFS: error (device loop1: state EA) in cleanup_transaction:2004: errno=-5 IO failure [ 134.669618][ T5767] BTRFS info (device loop1: state EA): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 135.585779][ T7100] block device autoloading is deprecated and will be removed. [ 135.879581][ T7109] xt_TCPMSS: Only works on TCP SYN packets [ 136.985861][ T7149] batadv0: entered promiscuous mode [ 137.010680][ T7149] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 137.033211][ T7149] bond0: (slave macvlan3): Enslaving as an active interface with an up link [ 137.258332][ T7157] xt_TCPMSS: Only works on TCP SYN packets [ 137.401265][ T7134] loop0: detected capacity change from 0 to 32768 [ 137.463757][ T7134] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 137.490689][ T7134] (syz.0.426,7134,1):ocfs2_inode_is_valid_to_delete:872 ERROR: Skipping delete of system file 72 [ 137.540848][ T7134] ocfs2: Unmounting device (7,0) on (node local) [ 137.706177][ T5769] Bluetooth: hci3: unexpected event for opcode 0x2024 [ 138.008180][ T27] IPVS: starting estimator thread 0... [ 138.112131][ T7172] IPVS: using max 19 ests per chain, 45600 per kthread [ 138.191942][ T5814] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 138.283342][ T7159] loop2: detected capacity change from 0 to 40427 [ 138.293861][ T7159] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 138.302510][ T7159] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 138.343820][ T7159] F2FS-fs (loop2): Found nat_bits in checkpoint [ 138.374070][ T5814] usb 2-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.32 [ 138.391940][ T5814] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.421094][ T5814] usb 2-1: config 0 descriptor?? [ 138.431572][ T5814] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 138.446487][ T7159] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 138.457939][ T7159] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 139.038741][ T5814] gp8psk: usb in 138 operation failed. [ 139.057452][ T5814] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 139.092764][ T5814] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 139.142440][ T5814] usb 2-1: USB disconnect, device number 4 [ 139.213094][ T7190] xt_TCPMSS: Only works on TCP SYN packets [ 139.429975][ T7198] program syz.0.444 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 139.496244][ T7194] loop2: detected capacity change from 0 to 4096 [ 140.042117][ T6593] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 140.237939][ T6593] usb 2-1: Using ep0 maxpacket: 16 [ 140.255081][ T6593] usb 2-1: config 125 has an invalid interface number: 165 but max is 0 [ 140.285839][ T6593] usb 2-1: config 125 has no interface number 0 [ 140.330978][ T6593] usb 2-1: config 125 interface 165 has no altsetting 0 [ 140.347556][ T6593] usb 2-1: New USB device found, idVendor=0497, idProduct=c001, bcdDevice=d5.16 [ 140.357988][ T6593] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.591937][ T6593] usb 2-1: string descriptor 0 read error: -71 [ 140.604048][ T6593] gspca_main: spca501-2.14.0 probing 0497:c001 [ 140.636887][ T6593] gspca_spca501: reg write: error -71 [ 140.646047][ T6593] spca501 2-1:125.165: Reg write failed for 0x02,0x07,0x05 [ 140.656128][ T6593] spca501: probe of 2-1:125.165 failed with error -22 [ 140.674015][ T6593] usb 2-1: USB disconnect, device number 5 [ 141.088247][ T7250] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 141.274288][ T7256] netlink: 12 bytes leftover after parsing attributes in process `syz.1.466'. [ 141.442720][ T7258] syzkaller0: entered promiscuous mode [ 141.449155][ T7258] syzkaller0: entered allmulticast mode [ 141.724209][ T5769] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 141.734812][ T5769] Bluetooth: hci3: Injecting HCI hardware error event [ 141.744521][ T5769] Bluetooth: hci3: hardware error 0x00 [ 143.308001][ T7284] loop4: detected capacity change from 0 to 64 [ 143.338236][ T7284] hfs: filesystem is marked locked, mounting read-only. [ 143.808717][ T5769] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 144.561891][ T7292] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.622479][ T7293] bridge0: port 1(bridge_slave_0) entered blocking state [ 144.630555][ T7293] bridge0: port 1(bridge_slave_0) entered listening state [ 145.019784][ T7307] loop4: detected capacity change from 0 to 1024 [ 145.108471][ T7307] hfsplus: walked past end of dir [ 145.605078][ T5807] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 145.685775][ T5807] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz1] on syz0 [ 145.735165][ T7336] loop1: detected capacity change from 0 to 128 [ 145.780623][ T7336] FAT-fs (loop1): bogus logical sector size 65535 [ 145.811934][ T7336] FAT-fs (loop1): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 145.841771][ T7336] FAT-fs (loop1): Can't find a valid FAT filesystem [ 145.988142][ T7342] loop2: detected capacity change from 0 to 1024 [ 146.233994][ T5807] IPVS: starting estimator thread 0... [ 146.331982][ T7348] IPVS: using max 15 ests per chain, 36000 per kthread [ 146.344678][ T11] hfsplus: b-tree write err: -5, ino 4 [ 146.744802][ T7366] input: syz1 as /devices/virtual/input/input10 [ 147.162239][ T7378] capability: warning: `syz.2.506' uses 32-bit capabilities (legacy support in use) [ 147.348413][ T7385] loop4: detected capacity change from 0 to 1024 [ 147.470348][ T7392] loop0: detected capacity change from 0 to 512 [ 147.519136][ T7385] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 147.583854][ T7392] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 147.632180][ T7392] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 147.720498][ T7392] EXT4-fs error (device loop0): ext4_orphan_get:1425: comm syz.0.509: bad orphan inode 131083 [ 147.768050][ T6427] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.779055][ T7392] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 148.164602][ T5764] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.383142][ T7409] loop4: detected capacity change from 0 to 32768 [ 148.432138][ T7409] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 148.459726][ T28] audit: type=1800 audit(1767274837.476:31): pid=7409 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.514" name="file1" dev="loop4" ino=17058 res=0 errno=0 [ 148.641134][ T7387] loop2: detected capacity change from 0 to 32768 [ 148.670811][ T28] audit: type=1804 audit(1767274837.666:32): pid=7421 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.514" name="/newroot/57/file1/bus" dev="loop4" ino=17059 res=1 errno=0 [ 148.720144][ T7387] lmLogInit: exit(-22) [ 148.727587][ T7387] lmLogOpen: exit(-22) [ 149.393952][ T6427] ocfs2: Unmounting device (7,4) on (node local) [ 150.306490][ T7458] loop0: detected capacity change from 0 to 512 [ 150.339167][ T7458] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 150.348406][ T7454] loop2: detected capacity change from 0 to 2048 [ 150.392991][ T7458] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2872: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 150.407692][ T7458] EXT4-fs (loop0): 1 truncate cleaned up [ 150.414873][ T7458] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 150.418491][ T7454] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 150.596739][ T5764] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.597762][ T7454] netlink: 8 bytes leftover after parsing attributes in process `syz.2.525'. [ 150.759220][ T7466] netlink: 8 bytes leftover after parsing attributes in process `syz.2.525'. [ 150.912067][ T7447] loop1: detected capacity change from 0 to 32768 [ 150.914312][ T7466] UDF-fs: warning (device loop2): udf_truncate_tail_extent: Too long extent after EOF in inode 1367: i_size: 8192 lbcount: 12288 extent 65+8192 [ 150.936710][ T7468] overlayfs: upper fs does not support file handles, falling back to index=off. [ 150.974162][ T7447] (syz.1.524,7447,1):ocfs2_verify_volume:2368 ERROR: bad cluster size found: 32 [ 151.009057][ T7447] (syz.1.524,7447,1):ocfs2_verify_volume:2387 ERROR: status = -22 [ 151.020706][ T7447] (syz.1.524,7447,1):ocfs2_fill_super:990 ERROR: superblock probe failed! [ 151.035202][ T7447] (syz.1.524,7447,1):ocfs2_fill_super:1178 ERROR: status = -22 [ 151.613213][ T7492] netlink: 'syz.1.536': attribute type 3 has an invalid length. [ 151.779076][ T7496] loop4: detected capacity change from 0 to 47 [ 152.154612][ T7511] loop1: detected capacity change from 0 to 64 [ 152.192824][ T7509] netlink: 'syz.2.541': attribute type 10 has an invalid length. [ 152.273812][ T7509] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 153.064259][ T7542] md2: using deprecated bitmap file support [ 153.070767][ T7542] md2: error: failed to get bitmap file [ 153.184793][ T7548] loop4: detected capacity change from 0 to 16 [ 153.222716][ T7548] erofs: (device loop4): mounted with root inode @ nid 36. [ 153.571995][ T6593] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 153.771959][ T6593] usb 3-1: Using ep0 maxpacket: 16 [ 153.787775][ T6593] usb 3-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 153.797153][ T6593] usb 3-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 153.829730][ T6593] usb 3-1: Product: syz [ 153.839820][ T6593] usb 3-1: Manufacturer: syz [ 153.844786][ T6593] usb 3-1: SerialNumber: syz [ 153.861531][ T6593] usb 3-1: config 0 descriptor?? [ 154.111638][ T5807] usb 3-1: USB disconnect, device number 8 [ 154.255481][ T7578] loop1: detected capacity change from 0 to 4096 [ 154.305292][ T7581] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 154.393690][ T7578] overlayfs: upper fs does not support tmpfile. [ 154.406462][ T7578] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 154.419306][ T7578] overlayfs: failed to set xattr on upper [ 154.429923][ T7578] overlayfs: ...falling back to redirect_dir=nofollow. [ 154.445057][ T7578] overlayfs: ...falling back to index=off. [ 154.451015][ T7578] overlayfs: ...falling back to uuid=null. [ 154.455080][ T7584] NILFS error (device loop1): nilfs_bmap_lookup_contig: broken bmap (inode number=12) [ 154.479553][ T7584] Remounting filesystem read-only [ 154.539870][ T5767] NILFS (loop1): disposed unprocessed dirty file(s) when detaching log writer [ 154.549904][ T5767] NILFS (loop1): discard dirty page: offset=0, ino=18 [ 154.557735][ T5767] NILFS (loop1): discard dirty block: blocknr=0, size=4096 [ 154.567673][ T5767] NILFS (loop1): discard dirty page: offset=0, ino=2 [ 154.575365][ T5767] NILFS (loop1): discard dirty block: blocknr=14, size=4096 [ 154.585456][ T5767] NILFS (loop1): discard dirty page: offset=0, ino=6 [ 154.592875][ T5767] NILFS (loop1): discard dirty block: blocknr=23, size=4096 [ 154.600484][ T5767] NILFS (loop1): discard dirty page: offset=4096, ino=6 [ 154.608054][ T5767] NILFS (loop1): discard dirty block: blocknr=24, size=4096 [ 154.617444][ T5767] NILFS (loop1): discard dirty page: offset=8192, ino=6 [ 154.625022][ T5767] NILFS (loop1): discard dirty block: blocknr=25, size=4096 [ 154.633173][ T5767] NILFS (loop1): discard dirty page: offset=0, ino=19 [ 154.652051][ T5767] NILFS (loop1): discard dirty block: blocknr=0, size=4096 [ 154.661478][ T5767] NILFS (loop1): discard dirty page: offset=0, ino=3 [ 154.691968][ T5767] NILFS (loop1): discard dirty block: blocknr=28, size=4096 [ 154.709968][ T5767] NILFS (loop1): discard dirty page: offset=4096, ino=3 [ 154.730246][ T5767] NILFS (loop1): discard dirty block: blocknr=29, size=4096 [ 154.740381][ T5767] NILFS (loop1): discard dirty page: offset=270336, ino=3 [ 154.760636][ T5767] NILFS (loop1): discard dirty block: blocknr=0, size=4096 [ 154.792038][ T5767] NILFS (loop1): discard dirty page: offset=401408, ino=3 [ 154.799279][ T5767] NILFS (loop1): discard dirty block: blocknr=0, size=4096 [ 155.450108][ T7603] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 155.501395][ T7605] loop1: detected capacity change from 0 to 1024 [ 155.965537][ T7617] loop0: detected capacity change from 0 to 128 [ 155.992969][ T7617] EXT4-fs: Ignoring removed nobh option [ 156.065921][ T7617] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 156.209020][ T7617] ext4 filesystem being mounted at /140/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 156.393673][ T5764] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 156.426709][ T6602] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 156.533233][ T7630] program syz.4.592 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 156.665144][ T6602] usb 3-1: config 255 has an invalid interface number: 20 but max is 0 [ 156.693520][ T6602] usb 3-1: config 255 has no interface number 0 [ 156.699870][ T6602] usb 3-1: config 255 interface 20 has no altsetting 0 [ 156.727701][ T6602] usb 3-1: New USB device found, idVendor=0f3d, idProduct=68aa, bcdDevice=8e.4f [ 156.746570][ T6602] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.755123][ T6602] usb 3-1: Product: syz [ 156.759818][ T6602] usb 3-1: Manufacturer: syz [ 156.769407][ T6602] usb 3-1: SerialNumber: syz [ 156.776381][ T7637] IPv6: NLM_F_CREATE should be specified when creating new route [ 157.016779][ T6602] usb 3-1: USB disconnect, device number 9 [ 157.341422][ T7653] loop4: detected capacity change from 0 to 128 [ 157.367295][ T7653] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 157.413063][ T7653] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 157.602215][ T7656] xt_HMARK: spi-set and port-set can't be combined [ 157.878320][ T7666] comedi comedi2: 8255: I/O port conflict (0x5,4) [ 157.902188][ T7666] comedi comedi2: 8255: I/O port conflict (0x2,4) [ 157.909492][ T7666] comedi comedi2: 8255: I/O port conflict (0x1,4) [ 157.920110][ T7666] comedi comedi2: 8255: I/O port conflict (0xffffffffffffffff,4) [ 157.941998][ T7666] comedi comedi2: 8255: I/O port conflict (0x5,4) [ 157.975908][ T7666] comedi comedi2: 8255: I/O port conflict (0x3ff,4) [ 157.992871][ T7666] comedi comedi2: 8255: I/O port conflict (0x7,4) [ 158.034430][ T7666] comedi comedi2: 8255: I/O port conflict (0x1,4) [ 158.062023][ T7666] comedi comedi2: 8255: I/O port conflict (0x9,4) [ 158.110753][ T7666] comedi comedi2: 8255: I/O port conflict (0x8,4) [ 158.135363][ T7666] comedi comedi2: 8255: I/O port conflict (0xd4,4) [ 158.162093][ T7666] comedi comedi2: 8255: I/O port conflict (0x3,4) [ 158.168785][ T7666] comedi comedi2: 8255: I/O port conflict (0xffffffff80000000,4) [ 158.367083][ T8] IPVS: starting estimator thread 0... [ 158.462001][ T7684] IPVS: using max 18 ests per chain, 43200 per kthread [ 158.662321][ T5814] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 158.776782][ T7690] loop1: detected capacity change from 0 to 128 [ 158.883850][ T5814] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 158.891124][ T7692] loop2: detected capacity change from 0 to 2048 [ 158.911959][ T5814] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.938771][ T7692] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 158.941678][ T5814] usb 1-1: config 0 descriptor?? [ 158.976379][ T7692] ext4 filesystem being mounted at /161/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 159.013940][ T5814] cp210x 1-1:0.0: cp210x converter detected [ 159.081157][ T28] audit: type=1800 audit(1767274848.096:33): pid=7692 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.620" name="file0" dev="loop2" ino=13 res=0 errno=0 [ 159.213597][ T28] audit: type=1800 audit(1767274848.236:34): pid=7697 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.620" name="file0" dev="loop2" ino=13 res=0 errno=0 [ 159.337289][ T5765] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.505873][ T5814] cp210x 1-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 159.727438][ T5814] cp210x 1-1:0.0: failed to get vendor val 0x370c size 15: -71 [ 159.748373][ T5814] cp210x 1-1:0.0: GPIO initialisation failed: -71 [ 159.753719][ T7708] loop1: detected capacity change from 0 to 256 [ 159.769874][ T7708] UDF-fs: bad mount option "=" or missing value [ 159.785394][ T5814] usb 1-1: cp210x converter now attached to ttyUSB0 [ 159.834192][ T5814] usb 1-1: USB disconnect, device number 12 [ 159.884224][ T5814] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 159.916092][ T5814] cp210x 1-1:0.0: device disconnected [ 160.053982][ C1] bridge0: port 1(bridge_slave_0) entered learning state [ 160.056781][ T7712] loop1: detected capacity change from 0 to 64 [ 160.153296][ T7712] syz.1.628: attempt to access beyond end of device [ 160.153296][ T7712] loop1: rw=0, sector=8192, nr_sectors = 2 limit=64 [ 161.595213][ C1] vxcan0: j1939_tp_rxtimer: 0xffff888030e13c00: rx timeout, send abort [ 161.607002][ C1] vxcan0: j1939_xtp_rx_abort_one: 0xffff888030e13c00: 0x0f001: (3) A timeout occurred and this is the connection abort to close the session. [ 162.210907][ T7761] loop4: detected capacity change from 0 to 512 [ 162.263749][ T7761] EXT4-fs error (device loop4): ext4_orphan_get:1425: comm syz.4.651: bad orphan inode 13 [ 162.276126][ T7761] ext4_test_bit(bit=12, block=4) = 1 [ 162.281483][ T7761] is_bad_inode(inode)=0 [ 162.302379][ T7761] NEXT_ORPHAN(inode)=0 [ 162.306530][ T7761] max_ino=32 [ 162.334814][ T7765] netlink: 8 bytes leftover after parsing attributes in process `syz.0.652'. [ 162.347839][ T7761] i_nlink=1 [ 162.360480][ T7761] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 162.425858][ T7761] EXT4-fs warning (device loop4): dx_probe:833: inode #2: comm syz.4.651: Unrecognised inode hash code 20 [ 162.452413][ T7761] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.651: Corrupt directory, running e2fsck is recommended [ 162.577281][ T7770] loop2: detected capacity change from 0 to 256 [ 162.598113][ T6427] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.687114][ T7755] loop1: detected capacity change from 0 to 40427 [ 162.714320][ T7755] F2FS-fs (loop1): build fault injection attr: rate: 684, type: 0x7ffff [ 162.733127][ T7755] F2FS-fs (loop1): build fault injection attr: rate: 0, type: 0x35f7 [ 162.747092][ T7755] F2FS-fs (loop1): Image doesn't support compression [ 162.766706][ T7755] F2FS-fs (loop1): invalid crc value [ 162.785681][ T7755] F2FS-fs (loop1): Found nat_bits in checkpoint [ 162.938870][ T7755] F2FS-fs (loop1): Start checkpoint disabled! [ 162.967896][ T7755] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 163.342834][ T7785] syzkaller0: entered promiscuous mode [ 163.348556][ T7785] syzkaller0: entered allmulticast mode [ 163.428374][ T11] kworker/u4:0: attempt to access beyond end of device [ 163.428374][ T11] loop1: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 163.434599][ T7787] loop2: detected capacity change from 0 to 1024 [ 163.469823][ T11] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 163.478284][ T11] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 163.494740][ T11] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 163.680751][ T7789] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 164.037677][ T7798] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 164.677884][ T7801] loop2: detected capacity change from 0 to 32768 [ 164.740221][ T28] audit: type=1800 audit(1767274853.756:35): pid=7801 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.667" name="file1" dev="loop2" ino=4 res=0 errno=0 [ 165.530970][ T7837] loop2: detected capacity change from 0 to 8192 [ 165.620360][ T7837] loop2: AHDI p2 p3 [ 165.637060][ T7843] loop0: detected capacity change from 0 to 1024 [ 165.643843][ T7837] loop2: p2 size 65535 extends beyond EOD, truncated [ 165.967795][ T7849] netlink: 144 bytes leftover after parsing attributes in process `syz.1.689'. [ 165.991596][ T5777] udevd[5777]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 166.192166][ T5814] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 166.397448][ T5814] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 166.412486][ T8] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 166.417932][ T5814] usb 3-1: config 0 interface 0 has no altsetting 0 [ 166.445279][ T5814] usb 3-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 166.464994][ T5814] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.493646][ T5814] usb 3-1: Product: syz [ 166.497968][ T5814] usb 3-1: Manufacturer: syz [ 166.506229][ T5814] usb 3-1: SerialNumber: syz [ 166.514033][ T5814] usb 3-1: config 0 descriptor?? [ 166.531004][ T5814] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 166.574516][ T5814] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 166.595107][ T5814] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 166.622011][ T5814] usb 3-1: media controller created [ 166.628991][ T8] usb 2-1: Using ep0 maxpacket: 32 [ 166.645713][ T8] usb 2-1: config 4 has an invalid interface number: 20 but max is 0 [ 166.662622][ T8] usb 2-1: config 4 has no interface number 0 [ 166.668886][ T8] usb 2-1: config 4 interface 20 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 166.674393][ T5814] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 166.681459][ T8] usb 2-1: config 4 interface 20 altsetting 0 has an invalid endpoint with address 0xE3, skipping [ 166.699133][ T8] usb 2-1: config 4 interface 20 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 166.717195][ T7870] loop0: detected capacity change from 0 to 256 [ 166.728596][ T8] usb 2-1: New USB device found, idVendor=0bb4, idProduct=0a52, bcdDevice=e0.78 [ 166.767907][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.795161][ T8] usb 2-1: Product: syz [ 166.800866][ T8] usb 2-1: Manufacturer: syz [ 166.806200][ T8] usb 2-1: SerialNumber: syz [ 166.827611][ T7854] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 166.864979][ T7870] FAT-fs (loop0): Directory bread(block 64) failed [ 166.871651][ T7870] FAT-fs (loop0): Directory bread(block 65) failed [ 166.877237][ T5814] DVB: Unable to find symbol tda10046_attach() [ 166.893283][ T7870] FAT-fs (loop0): Directory bread(block 66) failed [ 166.898753][ T5814] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 166.901955][ T7870] FAT-fs (loop0): Directory bread(block 67) failed [ 166.930421][ T7870] FAT-fs (loop0): Directory bread(block 68) failed [ 166.931960][ T5814] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 166.945999][ T7870] FAT-fs (loop0): Directory bread(block 69) failed [ 166.953533][ T7870] FAT-fs (loop0): Directory bread(block 70) failed [ 166.960467][ T7870] FAT-fs (loop0): Directory bread(block 71) failed [ 166.968187][ T7870] FAT-fs (loop0): Directory bread(block 72) failed [ 166.975007][ T7870] FAT-fs (loop0): Directory bread(block 73) failed [ 167.071611][ T8] usb 2-1: USB disconnect, device number 6 [ 167.088592][ T7870] FAT-fs (loop0): Filesystem has been set read-only [ 167.123389][ T28] audit: type=1800 audit(1767274856.136:36): pid=7870 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.700" name="memory.current" dev="loop0" ino=1048601 res=0 errno=0 [ 167.155170][ T7870] FAT-fs (loop0): error, invalid access to FAT (entry 0x00006a00) [ 167.268419][ T7866] loop4: detected capacity change from 0 to 32768 [ 167.286693][ T5814] dvb_usb_m920x: probe of 3-1:0.0 failed with error -71 [ 167.310487][ T7866] XFS (loop4): Mounting V5 Filesystem ca7e2101-b8f1-4838-8e2d-7637b90620e6 [ 167.318208][ T5814] usb 3-1: USB disconnect, device number 10 [ 167.457068][ T7866] XFS (loop4): Metadata corruption detected at xfs_dinode_verify+0x2b9/0x1140, inode 0x502 dinode [ 167.495491][ T7866] XFS (loop4): Unmount and run xfs_repair [ 167.531990][ T7866] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 167.539493][ T7866] 00000000: 49 4e 80 00 03 02 00 00 00 00 00 00 00 00 00 00 IN.............. [ 167.560885][ T7866] 00000010: 00 00 00 01 00 00 00 00 00 00 00 09 00 00 00 00 ................ [ 167.579100][ T7866] 00000020: 1d cd 65 00 00 00 00 00 34 f7 58 68 7f 3d c3 b0 ..e.....4.Xh.=.. [ 167.588505][ T7866] 00000030: 34 f7 58 68 7f 3d c3 b0 00 00 00 00 00 00 00 00 4.Xh.=.......... [ 167.597951][ T7866] 00000040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 167.611278][ T7866] 00000050: 00 00 00 02 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 167.642595][ T7866] 00000060: ff ff ff ff d6 28 f6 98 00 00 00 00 00 00 00 02 .....(.......... [ 167.651527][ T7866] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 ................ [ 167.679024][ T7866] XFS (loop4): failed to read RT inodes [ 168.028131][ T7891] loop1: detected capacity change from 0 to 1764 [ 168.141646][ T7891] ISOFS: Unable to identify CD-ROM format. [ 168.384854][ T7887] loop0: detected capacity change from 0 to 32768 [ 168.443294][ T7887] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.703 (7887) [ 168.478969][ T7901] loop1: detected capacity change from 0 to 1024 [ 168.493788][ T7887] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 168.541968][ T7887] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 168.551126][ T7887] BTRFS info (device loop0): using free space tree [ 168.604624][ T7901] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 168.839697][ T7887] BTRFS info (device loop0): enabling ssd optimizations [ 168.849856][ T5767] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.858321][ T7887] BTRFS info (device loop0): auto enabling async discard [ 169.112293][ T6602] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 169.146385][ T5764] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 169.314467][ T6602] usb 3-1: config 0 interface 0 altsetting 251 has an invalid endpoint with address 0x93, skipping [ 169.362547][ T6602] usb 3-1: config 0 interface 0 has no altsetting 0 [ 169.386585][ T6602] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 169.406732][ T6602] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 169.432158][ T6602] usb 3-1: Product: syz [ 169.436499][ T6602] usb 3-1: Manufacturer: syz [ 169.486097][ T6602] usb 3-1: SerialNumber: syz [ 169.537212][ T7897] loop4: detected capacity change from 0 to 32768 [ 169.543017][ T6602] usb 3-1: config 0 descriptor?? [ 169.635336][ T6602] snd-usb-audio: probe of 3-1:0.0 failed with error -22 [ 169.719716][ T7897] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 169.756596][ T7943] loop0: detected capacity change from 0 to 256 [ 169.789228][ T5862] udevd[5862]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 169.811783][ T6602] usb 3-1: USB disconnect, device number 11 [ 169.987186][ T7897] XFS (loop4): Ending clean mount [ 170.206333][ T6427] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 170.554013][ T7958] loop2: detected capacity change from 0 to 16 [ 170.620953][ T7958] erofs: (device loop2): mounted with root inode @ nid 36. [ 170.694662][ T7960] x_tables: ip_tables: MARK.2 target: invalid size 8 (kernel) != (user) 16 [ 171.120024][ T7952] loop0: detected capacity change from 0 to 32768 [ 171.175949][ T7952] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.719 (7952) [ 171.248924][ T7952] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 171.270986][ T7952] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 171.295465][ T7952] BTRFS info (device loop0): using free space tree [ 171.473363][ T7952] BTRFS info (device loop0): enabling ssd optimizations [ 171.483006][ T7952] BTRFS info (device loop0): auto enabling async discard [ 171.717008][ T7964] loop2: detected capacity change from 0 to 32768 [ 171.775542][ T5764] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 171.790207][ T7964] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 172.094463][ T7964] XFS (loop2): Ending clean mount [ 172.485219][ T5765] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 172.545309][ T8020] bridge0: entered promiscuous mode [ 172.551141][ T8020] macsec2: entered promiscuous mode [ 172.621724][ T8020] bridge0: port 4(macsec2) entered blocking state [ 172.650965][ T8020] bridge0: port 4(macsec2) entered disabled state [ 172.682313][ T8020] macsec2: entered allmulticast mode [ 172.722334][ T8020] bridge0: entered allmulticast mode [ 172.730733][ T8020] macsec2: left allmulticast mode [ 172.742529][ T8020] bridge0: left allmulticast mode [ 172.755457][ T8020] bridge0: left promiscuous mode [ 172.907543][ T7998] loop1: detected capacity change from 0 to 32768 [ 173.013588][ T7998] ocfs2: Mounting device (7,1) on (node local, slot 0) with writeback data mode. [ 173.068384][ T28] audit: type=1800 audit(1767274862.076:37): pid=7998 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.733" name="file1" dev="loop1" ino=17058 res=0 errno=0 [ 173.157606][ T28] audit: type=1800 audit(1767274862.166:38): pid=8030 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.733" name="file1" dev="loop1" ino=17058 res=0 errno=0 [ 173.438250][ T8039] loop2: detected capacity change from 0 to 512 [ 173.578072][ T8039] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 173.615263][ T8039] ext4 filesystem being mounted at /194/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 173.767308][ T5767] ocfs2: Unmounting device (7,1) on (node local) [ 173.980138][ T5765] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.118345][ T8057] loop1: detected capacity change from 0 to 2048 [ 174.170260][ T8060] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 174.198707][ T28] audit: type=1800 audit(1767274863.216:39): pid=8057 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.750" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 175.327947][ T8074] loop0: detected capacity change from 0 to 32768 [ 175.391394][ T8074] ocfs2: Mounting device (7,0) on (node local, slot 0) with writeback data mode. [ 175.403080][ C1] bridge0: port 1(bridge_slave_0) entered forwarding state [ 175.410348][ C1] bridge0: topology change detected, propagating [ 175.457738][ T8096] loop1: detected capacity change from 0 to 4096 [ 175.478998][ T8096] EXT4-fs (loop1): bad geometry: first data block 0 is beyond end of filesystem (0) [ 175.520016][ T28] audit: type=1800 audit(1767274864.536:40): pid=8074 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.759" name="file1" dev="loop0" ino=17058 res=0 errno=0 [ 175.680914][ T28] audit: type=1800 audit(1767274864.686:41): pid=8101 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.759" name="file1" dev="loop0" ino=17058 res=0 errno=0 [ 176.342396][ T5764] ocfs2: Unmounting device (7,0) on (node local) [ 176.832459][ T8110] loop2: detected capacity change from 0 to 32768 [ 176.861136][ T8133] loop0: detected capacity change from 0 to 128 [ 176.965832][ T28] audit: type=1800 audit(1767274865.986:42): pid=8110 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.773" name="file1" dev="loop2" ino=4 res=0 errno=0 [ 176.995296][ T8133] syz.0.781: attempt to access beyond end of device [ 176.995296][ T8133] loop0: rw=2049, sector=138, nr_sectors = 112 limit=128 [ 177.485417][ T8147] loop1: detected capacity change from 0 to 2048 [ 177.555538][ T8147] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 177.594562][ T8149] loop2: detected capacity change from 0 to 128 [ 177.900228][ T8151] loop2: detected capacity change from 0 to 4096 [ 177.922170][ T8151] ntfs3: loop2: Primary boot: unsupported bytes per index 8192. [ 177.938004][ T8151] ntfs3: loop2: try to read out of volume at offset 0x1ffe00 [ 178.090067][ T8145] loop4: detected capacity change from 0 to 32768 [ 178.187824][ T8145] ocfs2: Mounting device (7,4) on (node local, slot 0) with writeback data mode. [ 178.388664][ T8165] loop2: detected capacity change from 0 to 128 [ 178.389267][ T28] audit: type=1800 audit(1767274867.396:43): pid=8145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.786" name="file1" dev="loop4" ino=17058 res=0 errno=0 [ 178.420567][ T8165] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 178.536857][ T28] audit: type=1800 audit(1767274867.546:44): pid=8169 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.786" name="file1" dev="loop4" ino=17058 res=0 errno=0 [ 178.605360][ T8165] UDF-fs: error (device loop2): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 178.797151][ T8171] loop2: detected capacity change from 0 to 1764 [ 178.864529][ T5777] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 178.928461][ T8171] syz.2.797: attempt to access beyond end of device [ 178.928461][ T8171] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 179.031249][ T6427] ocfs2: Unmounting device (7,4) on (node local) [ 179.205113][ T8168] loop1: detected capacity change from 0 to 32768 [ 179.226349][ T8168] (syz.1.796,8168,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 179.242454][ T8168] (syz.1.796,8168,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 179.297744][ T8168] JBD2: Ignoring recovery information on journal [ 179.361637][ T8168] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 179.402251][ T6602] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 179.558614][ T5767] ocfs2: Unmounting device (7,1) on (node local) [ 179.582354][ T6602] usb 3-1: Using ep0 maxpacket: 8 [ 179.591128][ T6602] usb 3-1: config 0 has an invalid interface number: 68 but max is 0 [ 179.611770][ T6602] usb 3-1: config 0 has no interface number 0 [ 179.618445][ T6602] usb 3-1: config 0 interface 68 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 179.630795][ T6602] usb 3-1: config 0 interface 68 altsetting 0 has an invalid endpoint with address 0x9A, skipping [ 179.650169][ T6602] usb 3-1: config 0 interface 68 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 179.671734][ T6602] usb 3-1: New USB device found, idVendor=0557, idProduct=2011, bcdDevice=78.89 [ 179.681147][ T6602] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.694542][ T6602] usb 3-1: Product: syz [ 179.698755][ T6602] usb 3-1: Manufacturer: syz [ 179.705037][ T6602] usb 3-1: SerialNumber: syz [ 179.727839][ T6602] usb 3-1: config 0 descriptor?? [ 179.753969][ T6602] mos7840 3-1:0.68: required endpoints missing [ 179.966797][ T6593] usb 3-1: USB disconnect, device number 12 [ 180.572193][ T8198] loop1: detected capacity change from 0 to 256 [ 180.580839][ T8198] FAT-fs (loop1): Unrecognized mount option "dUscard" or missing value [ 180.617018][ T8198] Option ' ' to dns_resolver key: bad/missing value [ 180.913806][ T8202] loop0: detected capacity change from 0 to 4096 [ 180.949743][ T8202] ntfs3: loop0: Different NTFS sector size (2048) and media sector size (512). [ 181.061409][ T8202] ntfs3: loop0: Failed to initialize $Extend/$ObjId. [ 181.118487][ T8202] ntfs3: loop0: ino=5, "/" directory corrupted [ 181.155958][ T8202] ntfs3: loop0: ino=5, "/" directory corrupted [ 181.178655][ T8202] ntfs3: loop0: ino=5, "/" directory corrupted [ 181.378291][ T8197] loop2: detected capacity change from 0 to 32768 [ 181.468284][ T8197] ocfs2: Mounting device (7,2) on (node local, slot 0) with writeback data mode. [ 181.541640][ T28] audit: type=1800 audit(1767274870.556:45): pid=8197 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.807" name="file1" dev="loop2" ino=17058 res=0 errno=0 [ 181.668754][ T28] audit: type=1800 audit(1767274870.686:46): pid=8219 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.807" name="file1" dev="loop2" ino=17058 res=0 errno=0 [ 181.916159][ T5765] ocfs2: Unmounting device (7,2) on (node local) [ 182.078437][ T8223] loop2: detected capacity change from 0 to 512 [ 182.088464][ T8223] EXT4-fs: Ignoring removed mblk_io_submit option [ 182.118407][ T8223] EXT4-fs (loop2): VFS: Can't find ext4 filesystem [ 182.621921][ T6602] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 182.828138][ T6602] usb 2-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 182.847530][ T6602] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.865908][ T6602] usb 2-1: Product: syz [ 182.880394][ T6602] usb 2-1: Manufacturer: syz [ 182.890522][ T6602] usb 2-1: SerialNumber: syz [ 182.911692][ T6602] usb 2-1: config 0 descriptor?? [ 183.148597][ T8] usb 2-1: USB disconnect, device number 7 [ 183.193275][ T8241] loop2: detected capacity change from 0 to 32768 [ 183.290000][ T8241] ocfs2: Mounting device (7,2) on (node local, slot 0) with writeback data mode. [ 183.348995][ T28] audit: type=1800 audit(1767274872.366:47): pid=8241 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.826" name="file1" dev="loop2" ino=17058 res=0 errno=0 [ 183.434629][ T28] audit: type=1800 audit(1767274872.456:48): pid=8247 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.826" name="file1" dev="loop2" ino=17058 res=0 errno=0 [ 183.828950][ T5765] ocfs2: Unmounting device (7,2) on (node local) [ 183.894248][ T5769] Bluetooth: Unknown BR/EDR signaling command 0x10 [ 183.903186][ T5769] Bluetooth: Wrong link type (-22) [ 183.908656][ T5769] Bluetooth: hci2: link tx timeout [ 183.921473][ T5769] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 184.085155][ T8260] ip6gretap0: entered promiscuous mode [ 184.091610][ T8260] vlan2: entered promiscuous mode [ 184.319904][ T8267] pim6reg1: entered allmulticast mode [ 184.842024][ T5814] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 184.884896][ T8273] loop1: detected capacity change from 0 to 32768 [ 184.938178][ T8273] ocfs2: Mounting device (7,1) on (node local, slot 0) with writeback data mode. [ 184.968900][ T28] audit: type=1800 audit(1767274873.986:49): pid=8273 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.840" name="file1" dev="loop1" ino=17058 res=0 errno=0 [ 185.032510][ T5814] usb 3-1: Using ep0 maxpacket: 8 [ 185.049077][ T5814] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 185.076334][ T5814] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.081248][ T28] audit: type=1800 audit(1767274874.096:50): pid=8285 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.840" name="file1" dev="loop1" ino=17058 res=0 errno=0 [ 185.102609][ T5814] usb 3-1: Product: syz [ 185.129821][ T5814] usb 3-1: Manufacturer: syz [ 185.139972][ T5814] usb 3-1: SerialNumber: syz [ 185.164759][ T5814] usb 3-1: config 0 descriptor?? [ 185.401878][ T5814] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 185.456826][ T5767] ocfs2: Unmounting device (7,1) on (node local) [ 185.966598][ T5769] Bluetooth: hci2: command 0x0406 tx timeout [ 186.249955][ T8306] loop0: detected capacity change from 0 to 1024 [ 186.259103][ T8306] EXT4-fs: Ignoring removed orlov option [ 186.282339][ T8306] EXT4-fs: Ignoring removed nomblk_io_submit option [ 186.319210][ T8297] loop1: detected capacity change from 0 to 32768 [ 186.335080][ T8297] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop1 scanned by syz.1.846 (8297) [ 186.336107][ T8306] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 186.392640][ T8297] BTRFS info (device loop1): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 186.403818][ T8297] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 186.406525][ T5814] dvb_usb_rtl28xxu: probe of 3-1:0.0 failed with error -71 [ 186.417038][ T8297] BTRFS info (device loop1): enabling ssd optimizations [ 186.429260][ T8297] BTRFS info (device loop1): not using ssd optimizations [ 186.436429][ T8297] BTRFS info (device loop1): turning off barriers [ 186.447517][ T8297] BTRFS info (device loop1): using free space tree [ 186.457367][ T5814] usb 3-1: USB disconnect, device number 13 [ 186.533969][ T5764] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 186.713268][ T8327] program syz.0.853 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 186.861416][ T5767] BTRFS info (device loop1): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 187.381921][ T6602] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 187.479909][ T8337] comedi comedi3: pcl818: I/O port conflict (0x4f27,16) [ 187.502463][ T8337] general protection fault, probably for non-canonical address 0xdffffc0000000005: 0000 [#1] PREEMPT SMP KASAN [ 187.514256][ T8337] KASAN: null-ptr-deref in range [0x0000000000000028-0x000000000000002f] [ 187.522718][ T8337] CPU: 0 PID: 8337 Comm: syz.1.855 Not tainted syzkaller #0 [ 187.528290][ T8329] loop0: detected capacity change from 0 to 32768 [ 187.530019][ T8337] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 187.530034][ T8337] RIP: 0010:pcl818_ai_cancel+0x69/0x3f0 [ 187.552475][ T8337] Code: 8b 1b 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 19 5f df f9 48 8b 03 48 89 04 24 49 83 c4 28 4c 89 e0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 e7 e8 f8 5e df f9 4d 8b 24 24 48 83 c3 [ 187.572205][ T8337] RSP: 0018:ffffc90003617a18 EFLAGS: 00010206 [ 187.578300][ T8337] RAX: 0000000000000005 RBX: ffff88802dd78580 RCX: 0000000000080000 [ 187.586299][ T8337] RDX: ffffc9000cfca000 RSI: 0000000000002667 RDI: 0000000000002668 [ 187.594287][ T8337] RBP: 0000000000000001 R08: ffff88814c29d12f R09: 1ffff11029853a25 [ 187.602268][ T8337] R10: dffffc0000000000 R11: ffffed1029853a26 R12: 0000000000000028 [ 187.610243][ T8337] R13: dffffc0000000000 R14: ffff88814c29d000 R15: dffffc0000000000 [ 187.618222][ T8337] FS: 00007f22271d06c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 187.627419][ T8337] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 187.634009][ T8337] CR2: 00007f22271cff98 CR3: 000000006be79000 CR4: 00000000003506f0 [ 187.642004][ T8337] Call Trace: [ 187.645294][ T8337] [ 187.648230][ T8337] pcl818_detach+0x66/0xd0 [ 187.652664][ T8337] comedi_device_detach_locked+0x172/0x710 [ 187.658489][ T8337] comedi_device_attach+0x5cd/0x710 [ 187.663699][ T8337] comedi_unlocked_ioctl+0x606/0xfe0 [ 187.669003][ T8337] ? tomoyo_path_number_perm+0x477/0x590 [ 187.674735][ T8337] ? comedi_poll+0x8c0/0x8c0 [ 187.679360][ T8337] ? __fget_files+0x28/0x4d0 [ 187.683972][ T8337] ? bpf_lsm_file_ioctl+0x9/0x10 [ 187.688914][ T8337] ? security_file_ioctl+0x80/0xa0 [ 187.694038][ T8337] ? comedi_poll+0x8c0/0x8c0 [ 187.698635][ T8337] __se_sys_ioctl+0xfd/0x170 [ 187.703260][ T8337] do_syscall_64+0x55/0xb0 [ 187.707741][ T8337] ? clear_bhb_loop+0x40/0x90 [ 187.712442][ T8337] ? clear_bhb_loop+0x40/0x90 [ 187.717133][ T8337] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 187.723039][ T8337] RIP: 0033:0x7f222638f749 [ 187.727472][ T8337] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 187.747094][ T8337] RSP: 002b:00007f22271d0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 187.755604][ T8337] RAX: ffffffffffffffda RBX: 00007f22265e5fa0 RCX: 00007f222638f749 [ 187.763582][ T8337] RDX: 0000200000000180 RSI: 0000000040946400 RDI: 0000000000000003 [ 187.771734][ T8337] RBP: 00007f2226413f91 R08: 0000000000000000 R09: 0000000000000000 [ 187.779712][ T8337] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 187.787806][ T8337] R13: 00007f22265e6038 R14: 00007f22265e5fa0 R15: 00007ffd1fb8f2d8 [ 187.795812][ T8337] [ 187.798859][ T8337] Modules linked in: [ 187.810759][ T8337] ---[ end trace 0000000000000000 ]--- [ 187.817081][ T8337] RIP: 0010:pcl818_ai_cancel+0x69/0x3f0 [ 187.832735][ T6602] usb 3-1: Using ep0 maxpacket: 8 [ 187.851051][ T8337] Code: 8b 1b 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 19 5f df f9 48 8b 03 48 89 04 24 49 83 c4 28 4c 89 e0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 e7 e8 f8 5e df f9 4d 8b 24 24 48 83 c3 [ 187.851078][ T8329] ocfs2: Mounting device (7,0) on (node local, slot 0) with writeback data mode. [ 187.851170][ T6602] usb 3-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 187.894221][ T8337] RSP: 0018:ffffc90003617a18 EFLAGS: 00010206 [ 187.900681][ T8337] RAX: 0000000000000005 RBX: ffff88802dd78580 RCX: 0000000000080000 [ 187.908762][ T8337] RDX: ffffc9000cfca000 RSI: 0000000000002667 RDI: 0000000000002668 [ 187.917124][ T8337] RBP: 0000000000000001 R08: ffff88814c29d12f R09: 1ffff11029853a25 [ 187.925206][ T8337] R10: dffffc0000000000 R11: ffffed1029853a26 R12: 0000000000000028 [ 187.932681][ T28] audit: type=1800 audit(1767274876.916:51): pid=8329 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.854" name="file1" dev="loop0" ino=17058 res=0 errno=0 [ 187.933227][ T8337] R13: dffffc0000000000 R14: ffff88814c29d000 R15: dffffc0000000000 [ 187.966738][ T6602] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 187.968225][ T28] audit: type=1800 audit(1767274876.986:52): pid=8342 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.854" name="file1" dev="loop0" ino=17058 res=0 errno=0 [ 187.978236][ T8337] FS: 00007f22271d06c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 188.008055][ T6602] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 188.018199][ T6602] usb 3-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 188.031695][ T8337] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 188.038484][ T8337] CR2: 00007f0e67dba000 CR3: 000000006be79000 CR4: 00000000003506f0 [ 188.047238][ T8337] Kernel panic - not syncing: Fatal exception [ 188.053711][ T8337] Kernel Offset: disabled [ 188.058039][ T8337] Rebooting in 86400 seconds..