last executing test programs: 5m25.203230617s ago: executing program 3 (id=4): r0 = socket(0x10, 0x3, 0x0) socket$alg(0x26, 0x5, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r1, 0x0, 0x0) r2 = userfaultfd(0x801) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) r3 = creat(&(0x7f0000000280)='./file0\x00', 0x17) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000000400)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) statx(r3, 0x0, 0x1000, 0x8, 0x0) ioctl$UFFDIO_CONTINUE(r2, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r7, 0x6, 0x24, &(0x7f00000000c0)=0x8, 0x4) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x10, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x1a, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) socket$netlink(0x10, 0x3, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x3, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000080)={0x5, 0x2, 0x1, 0x3}, 0x10) 5m24.207223482s ago: executing program 3 (id=7): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0xa}, @hci_rp_pin_code_reply={{0x55}, {0x5}}}}, 0xd) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xa2bb1000) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x5, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @empty, 0x4000006}, 0x1c) listen(r2, 0x6) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r4 = accept(r1, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0xfffffdef}}, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000040)=0x7d8a0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r6, @ANYBLOB="010000000000fbdbdf25010000000800020000000000050005000000000008000300010000004800018005000200200000000600010002000000080006000a000000080003"], 0x84}}, 0x0) 5m23.123360398s ago: executing program 3 (id=10): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 5m22.918815671s ago: executing program 3 (id=13): r0 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000080)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) chdir(&(0x7f0000000380)='./bus\x00') io_setup(0x1, &(0x7f00000004c0)=0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x0) io_submit(r1, 0x3, &(0x7f00000002c0)=[&(0x7f0000000280)={0xffffff7f00000000, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000140)='i', 0x1}]) 5m7.214605955s ago: executing program 32 (id=13): r0 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000080)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) chdir(&(0x7f0000000380)='./bus\x00') io_setup(0x1, &(0x7f00000004c0)=0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x0) io_submit(r1, 0x3, &(0x7f00000002c0)=[&(0x7f0000000280)={0xffffff7f00000000, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000140)='i', 0x1}]) 3m59.879460371s ago: executing program 5 (id=279): r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000190001000000000000000000021800000000fd000000ed0008000100ac1414000800080004"], 0x2c}}, 0x0) sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 3m59.438986307s ago: executing program 5 (id=281): fsopen(&(0x7f0000000000)='bpf\x00', 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = fsopen(&(0x7f0000000380)='btrfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x110, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/ptype\x00') read$msr(r4, &(0x7f0000000040)=""/59, 0xffb5) r5 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r5, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r4, &(0x7f00000005c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x20, 0x1404, 0x20, 0x70bd2d, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x20008080}, 0x20000000) mmap(&(0x7f00009ff000/0x600000)=nil, 0x600000, 0x0, 0x11, r5, 0x0) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000000)=0xff, 0x4) sendto$inet6(r5, 0x0, 0x0, 0xfffffeffffff7ffe, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r5, 0x0, 0x0, 0x4000800) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, &(0x7f0000000400)={&(0x7f0000f59000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, 0x0) socket$netlink(0x10, 0x3, 0x0) 3m58.157830387s ago: executing program 5 (id=284): setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x26, 0x0, 0xff8e) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xfffffded, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x2, 0x0, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000300)={{0x0, 0x1, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_STOP(r1, 0x54a1) clock_adjtime(0xffffffd3, &(0x7f0000000000)={0x10000, 0x6, 0x2, 0x0, 0x8, 0xb, 0x651, 0xfffffffffffffffc, 0x9657, 0xfffffffffffffffe, 0x7fffffff, 0x0, 0xf9, 0xb, 0x80000000000000, 0x4, 0x1, 0x1, 0x80000001, 0x0, 0x0, 0x809, 0x800000, 0xfffffffffffffffa, 0x3, 0x2000000000004}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000001380)=@mangle={'mangle\x00', 0x64, 0x6, 0x600, 0x310, 0x1d0, 0x440, 0x310, 0x0, 0x530, 0x530, 0x530, 0x530, 0x530, 0x6, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @multicast2}, [], [], 'vcan0\x00', 'veth1_virt_wifi\x00'}, 0x0, 0xa8, 0xe8, 0x0, {0x7a00000000000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x9}}}, {{@ipv6={@mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'syzkaller1\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@private0}}}, {{@ipv6={@rand_addr=' \x01\x00', @mcast2, [], [0xffffff00], 'veth1_to_batadv\x00', 'vlan1\x00'}, 0x0, 0xf8, 0x140, 0x0, {}, [@common=@inet=@ecn={{0x28}}, @common=@ipv6header={{0x28}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@empty}}}, {{@ipv6={@private0, @mcast2, [], [], 'veth1_to_team\x00', 'veth0_macvtap\x00'}, 0x0, 0xf0, 0x130, 0x0, {}, [@common=@hbh={{0x48}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe760]}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@remote}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x2f}, @mcast2, [0xff, 0x0, 0x7f, 0xff], [0xffffffff, 0xff, 0xffffffff, 0xff], 'veth1_to_batadv\x00', 'rose0\x00', {}, {0xff}, 0x29, 0x4c, 0x2, 0x65}, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4=@local}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x660) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xa8}}, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r2, 0x29, 0x45, &(0x7f0000000240)={'TPROXY\x00'}, &(0x7f0000000300)=0x1e) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000140)={0xfa, 0x101, 0x1004, 0x4, 0xf, "24669c7029b3856e66e74b1117149e7a265ae1"}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, 0x0) 3m51.123364081s ago: executing program 5 (id=304): openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="400000001000010429bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="2b030000000000002000128008000100677470001400028008000100", @ANYRES32=r4, @ANYBLOB="080002"], 0x40}}, 0x8080) 3m50.749983057s ago: executing program 5 (id=306): r0 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x14, &(0x7f0000000000), 0x4) r1 = socket$inet6(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000040)=0x80000004, 0x4) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x33, &(0x7f0000000640)={0x1, &(0x7f0000000680)=[{0x6, 0x0, 0x0, 0x2}]}, 0x10) 3m49.362048268s ago: executing program 5 (id=309): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfdc5e000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b000000000000000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000fdffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) r4 = eventfd(0x4) ioctl$VHOST_SET_VRING_BASE(r3, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r3, 0x4004af07, &(0x7f0000000240)=r4) ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f0000000040)={0x1, r4}) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000380)={0xaa, 0x2a0}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/236, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/66}) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000000)=0x1) socket$inet6(0xa, 0x3, 0x8) 3m33.78207606s ago: executing program 33 (id=309): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfdc5e000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b000000000000000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000fdffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) r4 = eventfd(0x4) ioctl$VHOST_SET_VRING_BASE(r3, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r3, 0x4004af07, &(0x7f0000000240)=r4) ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f0000000040)={0x1, r4}) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000380)={0xaa, 0x2a0}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/236, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/66}) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000000)=0x1) socket$inet6(0xa, 0x3, 0x8) 12.609247102s ago: executing program 2 (id=946): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x10408, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) dup2(r2, r0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000000)) 11.654107407s ago: executing program 2 (id=948): ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x5, &(0x7f0000000280)=0x1, 0x4) fcntl$getownex(r0, 0x10, &(0x7f0000000080)) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000005c40)=0x7b, 0x4) r2 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000e13d6a206419010015d4010203010902120001000000000904"], 0x0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_usb_control_io(r3, 0x0, 0x0) 11.648843757s ago: executing program 6 (id=949): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r0, r1, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100fefffffffedbdf25670000000c00990001"], 0x20}, 0x1, 0x0, 0x0, 0x1}, 0xc800) 11.275860052s ago: executing program 6 (id=950): syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) socket$inet6_tcp(0xa, 0x1, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) socket$netlink(0x10, 0x3, 0x0) pipe2$9p(&(0x7f0000000cc0), 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000010c0)) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000001"], 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r3], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r3}, &(0x7f0000000240), &(0x7f00000003c0)=r5}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={r4, r1, 0x25, 0x2, @val=@tcx={@void, @value}}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local={0x3}, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0xb, 0x7, 0x0, 0x12, 0x0, 0x2802, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @private, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}}}, 0x0) 10.677118811s ago: executing program 4 (id=951): r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) sched_rr_get_interval(r1, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="1500"], 0x1) mlock2(&(0x7f0000627000/0x3000)=nil, 0x3000, 0x0) mlock(&(0x7f0000626000/0x5000)=nil, 0x5000) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000080), 0x1000000, 0x0) chdir(&(0x7f0000000140)='./bus\x00') symlink(&(0x7f0000000440)='./file1\x00', &(0x7f0000000280)='./file2\x00') rename(&(0x7f0000000400)='./bus\x00', &(0x7f0000000f00)='./file0\x00') r4 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid_for_children\x00') ioctl$NS_GET_USERNS(r4, 0xb701, 0x0) syz_io_uring_setup(0x6ae5, &(0x7f0000000440)={0x0, 0x0, 0x2}, &(0x7f0000004000), &(0x7f0000000340)) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newlink={0x20, 0x10, 0x401, 0x800}, 0x20}}, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) 9.165561794s ago: executing program 4 (id=953): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYBLOB="2b030000000000002000128008000100677470001400028008000100", @ANYRES32=r1, @ANYBLOB="080002"], 0x40}}, 0x8080) setsockopt$inet_udp_encap(r1, 0x11, 0x64, &(0x7f0000000040)=0x3, 0x4) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r2, 0xffffffffffffffff, 0x0) 8.847134198s ago: executing program 4 (id=955): syz_open_dev$sg(0x0, 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000440)="ad56b287db1e57f7b0a3db92ea364143eaba7ec841abb59b14a95608c8d4a138a13c033c2f1719b6a8f809786681fff5a7056d67175c055a0e530b86856891893ab2f7aab7d7604999dcecbbe37259d90a6e0b077196638ccd1b3eb39021d7d612191e74870cb7ae885248d8a4b4726b245676527a735feab1ddd2e7dd448ed30760fc64777bb7c1a160fa79dbfad6886a782759533d622832", 0x99) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x2, 0x5505, &(0x7f0000002480)="$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") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x5, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/fscaps', 0x800, 0x11) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) rseq(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x3}, 0x20, 0x0, 0x0) select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x0, 0x2}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183341, 0x0) ioctl$F2FS_IOC_SET_PIN_FILE(r2, 0x4004f50d, &(0x7f0000000180)=0xfffffff9) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000003}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x14, 0x4, 0x4, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r4 = socket$inet(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r3, &(0x7f00000001c0), &(0x7f00000004c0)=@udp=r4}, 0x20) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r5, &(0x7f0000000140)='2', 0x1, 0x8000c61) ioctl$EXT4_IOC_MOVE_EXT(r5, 0x40305829, &(0x7f0000000240)={0x17c04, 0xffffffffffffffff, 0x4ffa1, 0x100000001}) 8.418328625s ago: executing program 0 (id=957): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0x13}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_EXPR={0x10, 0x5, 0x0, 0x1, @meta={{0x9}, @void}}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x9c}}, 0x0) 8.142052829s ago: executing program 2 (id=959): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) socket$inet_smc(0x2b, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) creat(&(0x7f0000000440)='./file0/file0\x00', 0x188) creat(&(0x7f0000000140)='./file0\x00', 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000240), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000800)=ANY=[@ANYBLOB="84010000", @ANYRES16=r2, @ANYBLOB="010000000000000000000100000304000480080002000100000008000100000000000400088058010c8054000b800800090000000000080009000000000008000a000000000008000a000000000008000a000000000008000900000000000800097c86b722735035dc0067f6b13308000a00000000000800"], 0x184}}, 0x0) syz_usb_connect(0x5, 0x3d7, &(0x7f0000000000)=ANY=[@ANYBLOB="120100004cefc008e10593085bfd010203010902c503010000000009"], 0x0) 7.176567983s ago: executing program 0 (id=960): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r0, r1, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100fefffffffedbdf25670000000c00990001"], 0x20}, 0x1, 0x0, 0x0, 0x1}, 0xc800) 7.176264643s ago: executing program 6 (id=961): r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0xfe33) 7.131305534s ago: executing program 4 (id=962): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) epoll_wait(0xffffffffffffffff, 0x0, 0x0, 0x20400000) 5.947718452s ago: executing program 6 (id=964): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x1000, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = socket$packet(0x11, 0x3, 0x300) recvmmsg(r4, &(0x7f0000000400)=[{{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, 0x0}, 0x8}], 0x2, 0x0, 0x0) read$FUSE(r2, &(0x7f0000005180)={0x2020}, 0x2020) 4.993279456s ago: executing program 0 (id=966): r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) sched_rr_get_interval(r1, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="1500"], 0x1) mlock2(&(0x7f0000627000/0x3000)=nil, 0x3000, 0x0) mlock(&(0x7f0000626000/0x5000)=nil, 0x5000) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000080), 0x1000000, 0x0) chdir(&(0x7f0000000140)='./bus\x00') symlink(&(0x7f0000000440)='./file1\x00', &(0x7f0000000280)='./file2\x00') rename(&(0x7f0000000400)='./bus\x00', &(0x7f0000000f00)='./file0\x00') r4 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid_for_children\x00') ioctl$NS_GET_USERNS(r4, 0xb701, 0x0) syz_io_uring_setup(0x6ae5, &(0x7f0000000440)={0x0, 0x0, 0x2}, &(0x7f0000004000), &(0x7f0000000340)) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newlink={0x20, 0x10, 0x401, 0x800}, 0x20}}, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) 4.215038747s ago: executing program 6 (id=967): prlimit64(0x0, 0xe, &(0x7f0000000180)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_DEFER_SETUP(r3, 0x112, 0x13, 0x0, &(0x7f0000000540)) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) keyctl$invalidate(0x15, 0x0) keyctl$set_timeout(0xf, 0x0, 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x41000, 0x7738f2b6e2b2e59, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = getpgid(r0) r5 = syz_pidfd_open(r4, 0x0) r6 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0xac63094eb3328933, 0x0) r7 = pidfd_getfd(r5, r6, 0x0) readlinkat(r7, &(0x7f0000000100)='\x00', &(0x7f0000000140)=""/189, 0xbd) r8 = syz_open_dev$vim2m(0x0, 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r8, 0xc0d05605, &(0x7f0000000cc0)={0x1, @pix_mp={0x0, 0x0, 0x20323159, 0x0, 0x0, [{}, {0xfffffffe}, {}, {}, {0x4, 0xffff}], 0x0, 0x0, 0x7, 0x0, 0x6}}) 3.126421624s ago: executing program 1 (id=968): r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f0000000340)={r1, r1, 0x1, 0x0, 0x0, 0x31, 0x1, 0x16c0, 0x5df, 0x8b, 0x2, 0x3, 'syz0\x00'}) 2.780769929s ago: executing program 0 (id=969): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4000003, 0x13, r2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="600000000c060300000000000000000000000000050001"], 0x60}}, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x7, 0x3) 2.560176582s ago: executing program 2 (id=970): r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="02010002070000000000000000000003030007000020000002000000640101010000000000000000020010"], 0x38}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000190001000000000000000000021800000000fd000000ed0008000100ac141400080008"], 0x2c}}, 0x0) sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 1.36829475s ago: executing program 0 (id=971): syz_mount_image$jfs(&(0x7f0000005d40), &(0x7f0000005d80)='./file7\x00', 0x810, &(0x7f0000000400)=ANY=[], 0x1, 0x5e1a, &(0x7f0000014780)="$eJzs3dtvHFcdB/DfXry+lKZWH6oQcUlTLi2lSeOkTcutqZB4AAGVqrwnMm4VkQJKQkUri7iKxDsSz6j8ETyDUB+LxJ/APxAp7lMFooPGPicZT9ZZp4l31j6fj+TM/ObseM/k6/Hsemb2BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQP/7Rm6d7EXHx3bRgOeILMYjoRyzW9fGoZ87nxw8j4mhsNcdTEXFkPqJef+ufJyLORsTHRyJub66v1otX9tiPl9649c+fvvmzjT9+9R//+u9Hf/5bu/2Nj374k7/eiFg++oc//e/Go9l2AAAAKEVVVVUvvc0/lt7f97vuFAAwFfn4XyV5uVqtVqvV6sNXN1Xj3WgWEbHRXKd+zeB0PAAcMBvxadddoEPyL9owIh7ruhPATOt13QH2xe3N9dVeyrfXPB4c327P14LsyH+jd+f+jt2mk7SvMZnWz9fNGMSTu/RncUp9mCU5/347/4vb7aP0uP3Of1p2y3+0fetTcXL+g3b+LYcn//7Y/EuV8x8+UP4D+QMAAAAAwAzLf/9f7vj87/zDb8qe3O/87/Ep9QEAAAAAAAAAHrWHHf/vDuP/AQAAwMyq36vXPjxyd9lun8VWL7/Qi3i89XigMOlmmaWu+wEAAAAAAAAAAAAAJRluX8N7oRcxFxGPLy1VVVV/NbXrB/Ww6x90pW8/lKzrX/IAALDt4yOte/l7EQsRcSF91t/c0tJSVS0sLlVL1eJ8fj07ml+oFhvva/O0XjY/2sML4uGoqr/ZQmO9pknvlye1t79f/VyjarCHjk1Hh4EDQERsH41uOyIdMlX1RHT9KoeDwf5/+Nj/2Yuuf04BAACA/VdVVdVLH+d9LJ3z73fdKQBgKvLxv31eQK1Wq9Vq9eGrm6rxbjSLiNhorlO/ZjAcPwAcMBvxadddoEPyL9owIo523QlgpvW67gD74vbm+mov5dtrHg/S+O75WpAd+W/0ttbL64+bTtK+xmRaP183YxBP7tKfp6bUh1mS8++387+43T5Kj9vv/Kdlt/zr7VzuoD9dy/kP2vm37Jr/Yhyw/Ptj8y9Vzn/4QPkPDvD+L38AAAAAAA6//Pf/Zed/8yYDAAAAAAAAwIFze3N9Nd/3ms//f2nM4w7P/b/u/2vK+ffkX6Scf7+df+uCnEFj/tbrd/P/ZHN99cMvnvtKns58/nODUf3cc73+YJiu+anm3orLcSXW4sV7Hj/c0X76nva5He0rE9rP3NM+qtsXc/vJWI1fx5X4xZ32+QkXRi1MaK8mtOf8B/u4/4/rgv1/NuT8h42vOv+l1N5rTWu3Pujfs983p+Oe5/zPPzt37941fTdjcGfbmurtO9FBf7b+Tx4bxW+vrV09+btL169fPR1psmPpSqTJI5bzn0tfOf9nn9luz7/3m/vrrQ9GD5z/rLgZw13zf6YxX2/vc1PuWxdy/qP0lfPPR6Dx+/9Bzn/3/f/5DvoDAAAAAAAAAAAAAAAA91NV1dYtoucj4uV0/09X92YCANOVj/9Vkper1Wq1Wq0+fHVTNd5rzSIi/t5cp37N8Ptx3wwAmGWfRcS/u+4EnZF/wfLn/dXTr3XdGWCqrr33/i8vXbmydvVa1z0BAAAAAAAAAD6vPP7n8cb4z1vXAbUGbd4x/uvrcfyTzfXVd5f/8+UDN/5nfzTYGus8bdDTcf/xv0/E/cf/Hk54vrkJ7aMJ7fMT2hcmtI+90aMh5/90yjjnfyxt2P3Gf835t6cTnrIj+X9q9/Ffn51yj2ZBzv9EGus55//N1uOa+Vd/Ocjj//Z35H/q+ju/OXXtvfdfuPzOpbfX3l771ZmzK6+eXjl39pUXT711+cpa+rfDHu+vnH8e+9p1oGXJ+efM5V+WnP/XUy3/suT8v5Fq+Zcl559f78m/LDn//N5H/mXJ+T+XavmXJef/rVTLvyw5/+dTLf+y5Py/nWr5lyXn/0Kq5V+WnP/JVMu/LDn/U6mWf1ly/vkMl/zLkvPPVzbIvyw5/5VUy78sOf8zqZZ/WXL+Z1Mt/7Lk/F9KtfzLkvN/OdXyL0vO/1yq5V+WnP8rqZZ/WXL+r6Za/mXJ+X8n1fIvS87/u6mWf1ly/t9LtfzLkvP/fqrlX5ac/w9SLf+y5PxfS7X8y3L38//NmDFjJs90/ZsJAAAAAAAAAAAAAGibxuXEXW8jAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/2cHDgQAAAAAgPxfG6GqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqoKO3AgAAAAAADk/9oIVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVdi7txg5y/t+4O+e7LUh9iYxhIMB2xgwsHjXB3z4/+vEQEgptA0hIT2RGtdeGyc+1WtzEhIbQVMkkMoFF7RSUkCoykWroDZRg0QjLiq16U171d5UaaVGFYpC5US9aVRw9c48z+OZ2dmZ9WHwzPt8PhH+eWfed+aZd96Z3e9G3zEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANBo7T0zfzhUFEX5X+2PiaK4vPz7smJ3+eXctku9QgAAAOBCfVD7889Xpgt2L2Knhm3+7vp//O6ZM2fOFMWfrPrUK+UM1hTFiqVFUb8uGP/J8aZtgueK8aHhhq+Hu9z9SJfrR7tcP9bl+iVdrl/a5frxLtfPOwDzLKv/PqZ2Y+trf52oH9JiVTFWu259m72eG1o6PBx/l1MzVNvnzNiB4lBxuJgppuftM1T7X1G8s7a8r/uKeF/DDfe1uiiK0z97Zl9cw1A4xuuLpjuraXzu3r+rWPPznz2z7/GJX1zXbnY9DPNWWhQb1pXrfL4ozv66qhgqlqZjEtc53LDO1W3WOdK0zqHafuXfW9d5epHrjI97PKzznzqsc3W47Mkbi6KYKxbcptVzxXCxvOVe0/Eer58R5W2UT+UnitFzOk/WLuI8Kff58Y3N50nrORmP/9pwTEYXWEPj0/H+15fMO+7ne56Uj7ofztXyth8s73R8vPFXq03narnNMzctfA60fe7anAPpXG44B9Z1OweGl4zUzoHhs2te13QObJq3z3AxVLuv927qfA5MnTxyfGr2qafvOHRk78GZgzNHt2zdvHPT5u1bd0xPHTh0eCb8eW6HdIAsL4bTObguvNfEc/CWlm0bT8kzr9dfB69dvf36dvNc1jB+kV4HF7KGIpwvX7q5XNDlw8UC53i5zfMbLvx1kL7vN7wORhteB23fU9u8DkYX8Tootzm9YXHfM0cb/mu3hnbvhRfjHJhoOAcu5Pth4xrO5/theZ+P3Lrwe+HqsK4XbjvX74cj886B+LCGwmuvvCT9vDe+IxyX+efFNeUVly0pTs3OnNj45N6TJ09sKsL4SHyy4blqPV+WNzymYt75MnzO58vuz3+4/Zo2l0+EYzV+e+fnqtxm62Tn56r27t7+eDZdurkI4yL7qI9nu+9m5fFMWaLD8Sy3ef6OC/9ZMOWShve/sW7vfyNjo/X3v5F0NMaa3v/mPzUjtZUVxek7Fvf+Nxb++6jf/1b1yftfeawe2dj5HCi3eWHqXM+B0Y7vfzeGORTWc2tIDOMNuf/D2vVz9dO04bnset6Mjo6F82Y03mPzebNl3j7lrZX3vWH6/M6bDTc2P1dNP7dU8Lwpj9Ur053Pm3Kbdzdd+HvHsvjXhveOJd3OgbGRJeV6x9JJUH+/O7MsngMbi33FseJwsT/tUz7L5X1Nbl7cObAk/PdRv3dc1SfnQHmsXt3c+Rwot/nbLRf3Z6cN4ZK0TcPPTq2/X1go818zevb2Wg/bxc785To/u7Xz74bKbX669VxzRufjdHu45LI2x6n19bPQOb2/6H6cLtY5Xa7z8J2dfzdVbrNq2yLPp91FUbz94pv133fVf7/7l6f++btNv/dt9zvlt1988wtX//CH57J+AADO34e1P+eW1H/WbPh/rBfz//8DAAAAAyHm/uEwE/kfAAAAKiPm/pEwE/kfAAAAKiPm/tEwk0zy/2ND33jlg2eL9GmAZ4J4fTwMDy6tbxc73nPh6zVnziovv/vNsQe+9+zi7nu4KIr/vf/atts/tjSuq+54XOdI8+XzXHXDou7/0YfPbtf4+Qmnh+u3Hx/PYk+D2FV+59/urt3umlvr8937i9p8aO6F52q3v7P+ddz+vf+ob/fN8KEluw8MNe2/IaxnfZhrwmfKPLjs7HEoZ9zvO+8c/PtPf/ns/cX9htatqD3MVzfWbzd+RtTLf1XfPj7uhdb/Ny9++zvl9k/e1H79zw63X/974XZ/HOb/vF+/vPGYf69h/X8Q1h/vL+638Y0ftF3/W39d3/6tcF68Fmbr+u/6o+s+aPd8xfvZPVrfL97/9J/dW9sv3l68/db1j0/d3XQ8Wm//3Tfqt7Pr8f8eadw+Xh7vJ3p0tPn8HgrPb1OPvCiKb3+jaDrOxVh9v7db1h9v7/ho+/Xf3rLO468/Vtu/9fFE33r4nraPN65n919MND2el1eE4ze87B/K233v2nA+hut/MVe/vdbPMn1rRfP7Tdz+tYn66zbe3lTL+l9uWf/cDeWx677++35eX/9bn1natP7dK8P59PH67Lb+g3+6smn/1z9XX8+JJyaPHps9dSh+xsFEy+t46fiy5Zdd/rEVK8N7aevXe46dfGzmxJrpNdNFsWYAPzKw1+t/I8z/qo+5i38Pdf8yWj/vXnqg/n3rlrH61y+Hyx8Nz2f8/vitPx5rOl9bn/e58fq80PXfFtaxWKvX/2THojb8z61vvfKvD32l9eeC+HiOXzFee3yvrr2ydt3Qu/XrW9+vuvn3K5pf1z9aVZ/fD8f1TPhk5nVX1u+v9fbjZ5O89MX66zf+JBf3L1o+T2RipPlxXOj6fxR+jvnBVc3vf/H8+P6zLZ/mPFEMlUuYC+8PxVz9+rhVPN4vnb6y7f3Fz+Ep5q4+l2UuaPap2anDh46eenLq5MzsyanZp57ec+TYqaMn99Q+u3TPV7vtf/b1vbz2+t4/s21rUXu1H6uPHrvU6z/+8L7926dv3j9zYO+pAycfPj5z4uC+2dl9M/tnb9574MDME932P7R/16bNO7ds3zx58ND+XTt27tyyc/LQ0WPlMuqL6mLb9Ncmj57YU9tldtfWnZvuvHPr9OSRY/tndm2fnp481W3/2vemyXLvxydPzBzee/LQkZnJ2UNPz+zatHPbts1dP/3xyPEDs2umTpw6OnVqdubEVP2xrDlZu7j83tdtf/IwuzK837UYCj+d33v7tvT5uKU3v77gTdU3mWi+8Kfhs6C+Ob5lx2K+jrl/LMwkk/wPAAAAOYi5P3zw/9kr5H8AAACojJj7l4aZyP8AAABQGTH3j4eZZJL/9f/1//X/9f/1//X/e0n/X/+/E/1//f9BXr/+v/4/3fVb/z/m/mVFkWX+BwAAgBzE3L88zET+BwAAgMqIuf+yMBP5HwAAACoj5v7Lw0wyyf/6//r/+v/6//r/+v+9pP+v/9+J/r/+/yCvX/9f/5/u+q3/H3P/x8JMMsn/AAAAkIOY+1eEmcj/AAAAUBkx968MM5H/AQAAoH8tO7fNY+6fCDPJJP/r/+v/6//r/597/7+5eKX/X6f/357+v/5/J/r/+v99uv5h/X/9fy6Ofuv/x9z/8TCTTPI/AAAA5CDm/k+Emcj/AAAAUBkx938yzET+BwAAgMqIuX9VmEkm+V//X/9f/1//37//r//fS/r/+v+d6P/r/w/y+vX/9f/prt/6/zH3XxFmkkn+BwAAgBzE3H9lmIn8DwAAAJURc/+nwkzkfwAAAKiMmPuvCjPJJP/r/+v/6//r/+v/6//3kv6//n8n59//b+7V6/+fn0vdnx/09ev/6//TXb/1/2PuvzrMJJP8DwAAADmIuf+aMBP5HwAAACoj5v5rw0zkfwAAAKiMmPtXh5lkkv/1//X/s+r/L2l+3vT/m9ep/6//3wv6//r/nfj3//X/B3n9+v/6/3TXb/3/mPuvCzPJJP8DAABADmLuvz7MRP4HAACAyoi5/4YwE/kfAAAAKiPm/jVhJpnkf/1//f+s+v8tz5f+f/M69f/1/3tB/1//vxP9f/3/QV6//r/+P931W/8/5v61YSaZ5H8AAADIQcz968JM5H8AAACojJj7bwwzkf8BAACgMmLuXx9mkkn+1//X/9f/1//X/9f/7yX9f/3/TvT/9f8Hef36//r/dNdv/f+Y+28KM8kk/wMAAEAOYu6/OcxE/gcAAIDKiLn/ljAT+R8AAAAqI+b+DWEmmeR//X/9f/1//X/9f/3/XtL/1//vRP9f/3+Q16//r/9Pd/3W/4+5/9Ywk0zyPwAAAOQg5v7bwkzkfwAAAKiMmPtvDzOR/wEAAKAyYu6fDDPJJP/r/+v/6//r/+v/6//3kv6//n8n+v/6/4O8fv1//X+667f+f8z9d4SZZJL/AQAAIAcx928MM5H/AQAAoDJi7p8KM5H/AQAAoDJi7p8OM8kk/+v/6//r/+v/6//r//eS/r/+fyf6//r/g7x+/X/9f7rrt/5/zP2bwkwyyf8AAACQg5j7N4eZyP8AAABQGTH3bwkzkf8BAACgMmLu3xpmkkn+1//X/9f/1//X/9f/7yX9f/3/TvT/9f8Hef36//r/dNdv/f+Y++8MM8kk/wMAAEAOYu7fFmYi/wMAAEBlxNy/PcxE/gcAAIDKiLl/R5hJJvlf/1//X/9f/1//X/+/l/T/9f870f/X/x/k9ev/6//TXb/1/2Pu3xlmkkn+BwAAgBzE3P//wkzkfwAAAKiMmPv/f5iJ/A8AAACVEXP/L4WZZJL/9f/1//X/9f/1//X/e0n/X/+/E/1//f9BXr/+v/4/3fVb/z/m/l1hJpnkfwAAAMhBzP2fDjOR/wEAAKAyYu7/TJiJ/A8AAACVEXP/7jCTTPK//r/+v/6//r/+v/5/L+n/V6L/vyxerP/fTP9f/1//X/+fzvqt/x9z/11hJpnkfwAAAMhBzP13h5nI/wAAAFAZMfffE2Yi/wMAAEBlxNz/2TCTTPK//r/+v/6//r/+v/5/L+n/V6L/79//X4D+v/6//r/+P531W/8/5v57w0wyyf8AAACQg5j7PxdmIv8DAABAZcTc/8thJvI/AAAAVEbM/feFmWSS//X/9f/1//X/9f/1/3tJ/1//vxP9f/3/QV6//r/+P931W/8/5v5fCTPJJP8DAABADmLuvz/MRP4HAACAyoi5/4EwE/kfAAAAKiPm/l8NM8kk/+v/6/936v9H+v/6/4X+fw/7/++d0f8/f/r/+v+F/v95u9T9+UFfv/6//j/d9Vv/P+b+XwszyST/AwAAQA5i7v/1MBP5HwAAACoj5v7Ph5nI/wAAAFAZMfc/GGaSSf7X/9f/9+//6//r/1/q/r9///9C6P/r/xf6/+ftUvfnB3392fT/l7TfX/+fxei3/n/M/V8IM8kk/wMAAEAOYu5/KMxE/gcAAIDKiLn/i2Em8j8AAABURsz9XwozyST/6//r/+v/6//r/+v/95L+v/5/J/r/+v+DvP5s+v8L0P9nMfqt/x9z/8NhJpnkfwAAAMhBzP1fDjOR/wEAAKAyYu7/jTAT+R8AAAAqI+b+3wwzyST/6//r/+v/6//r/+v/95L+v/5/J/r/+v+DvH79f/1/uuu3/n/M/b8VZpJJ/gcAAIAcxNz/22Em8j8AAABURsz9vxNmIv8DAABAZcTc/0iYSSb5f4H+//3xev3/xdH/b79+/X/9f/1//X/9f/3/TvT/9f8Hef36//r/dNdv/f+Y+78SZpJJ/gcAAIAcxNz/u2Em8j8AAABURsz9e8JM5H8AAACojJj7Hw0zyST/+/f/9f/1//X/9f/1/3tJ/1//vxP9f/3/QV6//r/+P931W/8/5v69YSaZ5H8AAADIQcz9vxdmIv8DAABAZcTcvy/MRP4HAACAyoi5f3+YSSb5X/9f/1//X/9f/1//v5f0//X/O9H/1/8f5PXr/+v/012/9f9j7p8JM8kk/wMAAEAOYu4/EGYi/wMAAEBlxNx/MMxE/gcAAIDKiLn/sTCTTPK//r/+v/6//r/+v/5/L+n/6/93ov+v/z/I69f/1/+nu37r/8fcfyjMJJP8DwAAADmIuf+rYSbyPwAAAFRGzP1fCzOR/wEAAKAyYu4/HGaSSf7X/9f/1//X/9f/1//vJf1//f9O9P/1/wd5/fr/+v9012/9/5j7j4SZZJL/AQAAIAcx9x8NM5H/AQAAoDJi7j8WZiL/AwAAQGXE3H88zCST/K//r/+v/6//r/+v/99L+v/6/53o/+v/D/L69f/1/+mu3/r/Mff/fphJJvkfAAAAchBz/4kwE/kfAAAAKiPm/tkwE/kfAAAAKiPm/pNhJpnkf/1//X/9f/1//X/9/17S/9f/70T/X/9/kNev/6//T3f91v+Puf9UmEkm+R8AAAByEHP/42Em8j8AAABURsz9T4SZyP8AAABQGTH3Pxlmkkn+1///P/buckeT64jj8Bs5Wid3ldsKMzMzMzMzs8PMnDjM+CFypqpsa7Pd3tGcndOnnudLyRpZOgbJ+nv0U+v/9f/6f/2//n8k/b/+f4v+X/9/5Pfr//X/7Jut/8/df++4pcn+BwAAgA5y998nbrH/AQAAYBm5++8bt9j/AAAAsIzc/feLW5rsf/2//l//r//X/+v/R9L/6///v7vFX6v+/6T/P+z79f/6f/bN1v/n7r9/3NJk/wMAAEAHufsfELfY/wAAALCM3P0PjFvsfwAAAFhG7v4HxS1N9r/+X/+v/9f/6//1/yPp//X/W3z/X/9/5Pfr//X/7Jut/8/d/+C4pcn+BwAAgA5y9z8kbrH/AQAAYBm5+x8at9j/AAAAsIzc/Q+LW5rsf/2//l//r//X/+v/R9L/6/+36P/1/0d+v/5f/8++2fr/3P0Pj1ua7H8AAADoIHf/I+KWq/f/zTfuVQAAAMBFyt3/yLjF7/8BAABgGbn7HxW3NNn/+n/9/2X0/3e/w987/f/tf57+P/656v/1/9dB/6//P+n/z+2y+/mjv1//r/9n32z9f+7+R8ctTfY/AAAAdJC7/zFxi/0PAAAAy8jd/9i4xf4HAACAZeTuf1zc0mT/6//1/77/r//X/+v/R9L/6/+36P/1/0d+v/5f/8++2fr/3P2Pj1ua7H8AAADoIHf/E+IW+x8AAACWkbv/iXGL/Q8AAADLyN3/pLilyf7X/+v/9f/6f/2//n8k/b/+f4v+X/9/5Pfr/8/6/1tPp5P+n2uZrf/P3f/kuKXJ/gcAAIAOcvc/JW6x/wEAAGAZufufGrfY/wAAALCM3P1Pi1ua7H/9v/5f/6//1/9n/3/TSf9/8fT/+v8t+n/9/5Hfr//3/X/2zdb/5+5/etzSZP8DAABAB7n7nxG32P8AAACwjNz9z4xb7H8AAABYRu7+Z8UtTfa//l//r//X/+v/ff9/JP2//n+L/l//f+T36//1/+ybrf/P3f/suKXJ/gcAAIAOcvc/J26x/wEAAGAZufufG7fY/wAAALCM3P3Pi1ua7H/9v/5f/6//1//r/0fS/+v/t+j/9f9Hfr/+X//Pvtn6/9z9z49bmux/AAAA6CB3/wviFvsfAAAAlpG7/4Vxi/0PAAAAy8jd/6K4pcn+1//r//X/+n/9v/5/pOP3/2cBuv7/jP7/zvT/+n/9v/6fbbP1/7n7Xxy3NNn/AAAA0EHu/pfELfY/AAAALCN3/0vjFvsfAAAAlpG7/2VxS5P9r//X/+v/9f/6f/3/SMfv/8/o/8/o/+9M/6//1//r/9k2W/+fu//lcUuT/Q8AAAAd5O5/Rdxi/wMAAMAycve/Mm6x/wEAAGAZuftfFbc02f/6f/2//l//r//X/4+k/9f/b9H/6/+P/H79v/6ffbP1/7n7Xx23NNn/AAAA0EHu/tfELfY/AAAALCN3/2vjFvsfAAAAlpG7/3VxS5P9r//X/+v/9f/6f/3/SPp//f8W/b/+/8jv1//r/9k3W/+fu//1cUuT/Q8AAAAd5O5/Q9xi/wMAAMAycve/MW6x/wEAAGAZufvfFLc02f/6f/2//l//r//X/4+k/9f/b9H/6/+P/H79v/6ffbP1/7n73xy3NNn/AAAA0EHu/rfELfY/AAAALCN3/1vjFvsfAAAAlpG7/21xS5P9r//X/+v/9f/6f/3/SPp//f8W/b/+/8jv1//r/9k3W/+fu//tcUuT/Q8AAAAd5O5/R9xi/wMAAMAycve/M26x/wEAAGAZufvfFbc02f/6f/2//l//r//X/4+k/9f/b9H/6/+P/H79v/6ffbP1/7n73x23NNn/AAAA0EHu/vfELfY/AAAALCN3/3vjFvsfAAAAlpG7/31xS5P9r/+/uv+/+Q5/rP/X/+v/b6f/1/+fh/5f/79F/6//v/Hvv+XKRb1f/6//Z99s/X/u/vfHLU32PwAAAHSQu/8DcYv9DwAAAMvI3f/BuOWu7P97jHoVAAAAcJFy938obmny+3/9v+//6//1//p//f9I+n/9/xb9v/7/yO/X/+v/2Tdb/5+7/8NxS5P9DwAAAB3k7v9I3GL/AwAAwDJy9380brH/AQAAYBm5+z8WtzTZ//p//b/+X/+v/9f/j6T/H9z/3/YvoP5f/39Ol93PH/39+n/9P/tm6/9z9388bmmy/wEAAKCD3P2fiFvutfu/3AAAAICDyN3/ybjF7/8BAABgGbn7PxW3NNn/+n/9v/5f/6//1/+PpP/3/f8t+n/9/5Hfr//X/7Nvtv4/d/+n45Ym+x8AAAA6yN3/mbjF/gcAAIBl5O7/bNxi/wMAAMAycvd/Lm5psv/1//p//b/+X/+v/x9J/6//36L/1/8f+f36f/0/+2br/3P3fz5uabL/AQAAoIPc/bfELfY/AAAALCN3/xfiFvsfAAAAlpG7/4txS5P9r//X/+v/9f/6f/3/SPp//f8W/b/+/8jvP37/f9NJ/89os/X/ufu/FLc02f8AAADQQe7+L8ct9j8AAAAsI3f/V+IW+x8AAACWkbv/q3FLk/2v/9f/6//1//p//f9I+n/9/xb9v/7/yO8/fv/v+/+MN1v/n7v/a3FLk/0PAAAAHeTu/3rcYv8DAADAMnL3fyNusf8BAABgGbn7vxm3NNn/+n/9v/5f/6//1/+PpP/X/2/R/+v/j/x+/b/+n32z9f+5+78VtzTZ/wAAANBB7v5vxy32PwAAACwjd/934hb7HwAAAJaRu/+7cUuT/a//1//r//X/N77/v/K/n+v/9f8XQf+v/z/p/8/tsvv5o79/hf7/tv8i6/8Zabb+P3f/9+KWJvsfAAAAOsjd//24xf4HAACAZeTu/0HcYv8DAADAMnL3/zBuabL/9f/6f/2//t/3//X/I+n/9f9b9P/6/yO/f4X+3/f/GW22/j93/4/ilib7HwAAADrI3f/juMX+BwAAgGXk7v9J3GL/AwAAwDJy9/80bmmy//X/+n/9v/7/Mvr/K/p//f8F0f/r/0/6/3O77H7+6O/X/+v/2Tdb/5+7/2dxS5P9DwAAAB3k7v953GL/AwAAwDJy9/8ibrH/AQAAYBm5+38ZtzTZ//p//b/+X//v+//6/5H0//r/Lfp//f+R36//1/+zb7b+P3f/r+KWJvsfAAAAOsjdf2vcYv8DAADAMnL3/zpusf8BAABgGbn7fxO3NNn/+n/9v/5f/6//1/+PpP/X/2/R/8/Y/98zfqr/36P/1/+zb7b+P3f/b+OWJvsfAAAAOsjd/7u4xf4HAACAZeTu/33cYv8DAADAMnL3/yFuabL/9f/6f/2//l//r/8fSf+v/9+i/5+x//f9f/2//p+LM1v/n7v/j3FLk/0PAAAAHeTu/1PcYv8DAADAMnL3/zlusf8BAABgGbn7/xK3NNn/+n/9v/5f/6//1/+PpP/X/2/R/+v/j/x+/b/+n32z9f+5+/8atzTZ/wAAANBB7v6/xS32PwAAACwjd//f4xb7HwAAAJaRu/8fcUuT/a//1//r//X/+n/9/0j6f/3/Fv3/efv/63nltV12P3/09+v/9f/sm63/z93/z7ilyf4HAACADnL3/ytusf8BAABgGbn7/x232P8AAACwjNz9/4lbmux//b/+X/+v/9f/6/9H0v/r/7fo/33//8jv1//r/9k3W/+fu/+/AQAA//97HYg9") r0 = io_uring_setup(0x70fb, &(0x7f0000000140)={0x0, 0x1004, 0x10, 0x1, 0x3b7}) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000180)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r1, &(0x7f00000077c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, r2, {0x7, 0x1f}}, 0x50) syz_fuse_handle_req(r1, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000015000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000001f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a10000000000000000000000000000000000000000000000000000000000000000000000000000000093160000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000018000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fffffff3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f40000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff0000000000000000000000000000002000", 0x2000, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) mknodat$loop(r3, &(0x7f00000002c0)='./file0\x00', 0x10, 0x1) fsync(r3) close_range(r0, 0xffffffffffffffff, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x4044011, 0x0, 0x0) 1.319245361s ago: executing program 6 (id=972): syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) socket$inet6_tcp(0xa, 0x1, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) socket$netlink(0x10, 0x3, 0x0) pipe2$9p(&(0x7f0000000cc0), 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000010c0)) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000001"], 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r3], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r3}, &(0x7f0000000240), &(0x7f00000003c0)=r5}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={r4, r1, 0x25, 0x2, @val=@tcx={@void, @value}}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local={0x3}, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0xb, 0x7, 0x0, 0x12, 0x0, 0x2802, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @private, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}}}, 0x0) 1.278758171s ago: executing program 1 (id=973): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)='2', 0x1, 0x8000c61) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f0000000240)={0x17c04, 0xffffffffffffffff, 0x4ffa1, 0x100000001}) 1.251249811s ago: executing program 2 (id=974): syz_mount_image$nilfs2(&(0x7f00000000c0), &(0x7f0000000080)='./bus\x00', 0x0, &(0x7f00000002c0)=ANY=[], 0x6, 0xad4, &(0x7f00000011c0)="$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") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40086e8b, &(0x7f0000000680)={0x8003, 0x10004, 0x7ffff8, 0x8, 0x10000, 0x0, 0x2401}) 1.162460603s ago: executing program 1 (id=975): r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0xfe33) 1.066482135s ago: executing program 1 (id=976): bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0e00000004000000080000000200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000d555c2ec000000000000000000000000000000000700000071006fed3826e4c0ba162bed"], 0x48) 915.297107ms ago: executing program 4 (id=977): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x1000, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = socket$packet(0x11, 0x3, 0x300) recvmmsg(r4, &(0x7f0000000400)=[{{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, 0x0}, 0x8}], 0x2, 0x0, 0x0) read$FUSE(r2, &(0x7f0000005180)={0x2020}, 0x2020) 905.791267ms ago: executing program 1 (id=978): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="2b030000000000002000128008000100677470001400028008000100", @ANYRES32=r1, @ANYBLOB="080002"], 0x40}}, 0x8080) setsockopt$inet_udp_encap(r1, 0x11, 0x64, &(0x7f0000000040)=0x3, 0x4) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r2, 0xffffffffffffffff, 0x0) 813.792928ms ago: executing program 1 (id=979): r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) sched_rr_get_interval(r1, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="1500"], 0x1) mlock2(&(0x7f0000627000/0x3000)=nil, 0x3000, 0x0) mlock(&(0x7f0000626000/0x5000)=nil, 0x5000) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000080), 0x1000000, 0x0) chdir(&(0x7f0000000140)='./bus\x00') symlink(&(0x7f0000000440)='./file1\x00', &(0x7f0000000280)='./file2\x00') rename(&(0x7f0000000400)='./bus\x00', &(0x7f0000000f00)='./file0\x00') r4 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid_for_children\x00') ioctl$NS_GET_USERNS(r4, 0xb701, 0x0) syz_io_uring_setup(0x6ae5, &(0x7f0000000440)={0x0, 0x0, 0x2}, &(0x7f0000004000), &(0x7f0000000340)) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newlink={0x20, 0x10, 0x401, 0x800}, 0x20}}, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) 227.279427ms ago: executing program 4 (id=980): syz_mount_image$udf(&(0x7f0000001040), &(0x7f0000001080)='./file0\x00', 0x0, &(0x7f00000010c0), 0x1, 0x1030, &(0x7f0000001100)="$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") mount$nfs(0x0, &(0x7f0000002140)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x2310000, 0x0) 27.34364ms ago: executing program 2 (id=981): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000240)={0x0, @in6={{0xa, 0x4e22, 0x5bb, @ipv4={'\x00', '\xff\xff', @remote}, 0x8}}, 0xa27, 0x1}, &(0x7f0000000300)=0x90) 0s ago: executing program 0 (id=982): prlimit64(0x0, 0xe, &(0x7f0000000180)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_DEFER_SETUP(r3, 0x112, 0x13, 0x0, &(0x7f0000000540)) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) keyctl$invalidate(0x15, 0x0) keyctl$set_timeout(0xf, 0x0, 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x41000, 0x7738f2b6e2b2e59, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = getpgid(r0) r5 = syz_pidfd_open(r4, 0x0) r6 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0xac63094eb3328933, 0x0) r7 = pidfd_getfd(r5, r6, 0x0) readlinkat(r7, &(0x7f0000000100)='\x00', &(0x7f0000000140)=""/189, 0xbd) r8 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r8, 0xc0d05605, 0x0) kernel console output (not intermixed with test programs): 105.247064][ T4453] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.277526][ T4453] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 105.310262][ T4453] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.359314][ T4453] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 105.431186][ T4453] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.474427][ T4453] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 105.632000][ T4453] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.701373][ T4453] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 106.167719][ T4453] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 106.448501][ T4453] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.481783][ T4453] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 106.554310][ T4453] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.617758][ T4453] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 106.629432][ T4453] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.639843][ T4453] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 106.662789][ T4453] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.704555][ T4453] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 106.716136][ T4453] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.727985][ T4453] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 106.739524][ T3069] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 106.748840][ T3069] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 106.953612][ T3069] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 106.970025][ T3069] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 106.979063][ T3069] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 106.988656][ T3069] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 107.656341][ T4453] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.681004][ T4453] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.689852][ T4453] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.698572][ T4453] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.729842][ T1324] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 107.917905][ T4426] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.949312][ T1324] usb 3-1: device descriptor read/64, error -71 [ 107.958828][ T4426] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.028138][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 108.074477][ T4332] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.115895][ T4332] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.179816][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 108.781114][ T4266] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 109.190307][ T4266] usb 6-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 109.276684][ T4266] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 109.520923][ T4266] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 109.621576][ T4266] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 109.662040][ T4266] usb 6-1: SerialNumber: syz [ 109.821787][ T4302] cdc_ether: probe of 5-1:1.0 failed with error -32 [ 110.011691][ T4580] netlink: 71 bytes leftover after parsing attributes in process `syz.5.51'. [ 110.882069][ T4266] usb 6-1: 0:2 : does not exist [ 110.910954][ T4266] usb 6-1: USB disconnect, device number 2 [ 110.986713][ T1324] usb 5-1: USB disconnect, device number 2 [ 111.329929][ T4187] udevd[4187]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 112.789297][ T4224] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 113.029300][ T4224] usb 6-1: device descriptor read/64, error -71 [ 113.359558][ T4224] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 113.669262][ T4224] usb 6-1: device descriptor read/64, error -71 [ 113.809727][ T4224] usb usb6-port1: attempt power cycle [ 114.639320][ T4224] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 114.735063][ T4224] usb 6-1: device descriptor read/8, error -71 [ 114.949304][ T4266] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 115.386269][ T4224] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 115.479468][ T4224] usb 6-1: device descriptor read/8, error -71 [ 115.608800][ T4224] usb usb6-port1: unable to enumerate USB device [ 115.815589][ T4266] usb 3-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 115.826998][ T4266] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 117.240905][ T4266] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 117.253274][ T4266] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 117.261635][ T4266] usb 3-1: SerialNumber: syz [ 117.558510][ T4640] netlink: 71 bytes leftover after parsing attributes in process `syz.2.111'. [ 117.834065][ T4266] usb 3-1: 0:2 : does not exist [ 117.984113][ T4266] usb 3-1: USB disconnect, device number 5 [ 118.979270][ T2304] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 120.901532][ T4187] udevd[4187]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 121.256585][ T2304] usb 2-1: device descriptor read/64, error -71 [ 121.453595][ T4716] could not allocate digest TFM handle cbcmac-aes-neon [ 121.629253][ T2304] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 121.874289][ T4732] fuse: Bad value for 'fd' [ 122.209200][ T2304] usb 2-1: device descriptor read/64, error -71 [ 122.380708][ T2304] usb usb2-port1: attempt power cycle [ 122.889399][ T2304] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 123.129651][ T2304] usb 2-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 123.254577][ T2304] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 123.570431][ T2304] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 123.599445][ T2304] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 123.636948][ T2304] usb 2-1: SerialNumber: syz [ 124.627106][ T4728] netlink: 71 bytes leftover after parsing attributes in process `syz.1.137'. [ 124.698989][ T4760] netlink: 8 bytes leftover after parsing attributes in process `syz.5.147'. [ 124.938890][ T4768] fuse: Bad value for 'fd' [ 124.952417][ T2304] usb 2-1: 0:2 : does not exist [ 124.979311][ T23] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 125.015488][ T2304] usb 2-1: USB disconnect, device number 5 [ 125.199221][ T23] usb 3-1: device descriptor read/64, error -71 [ 125.281845][ T4187] udevd[4187]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 125.489246][ T23] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 125.679384][ T23] usb 3-1: device descriptor read/64, error -71 [ 125.809593][ T23] usb usb3-port1: attempt power cycle [ 126.933934][ T23] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 127.029329][ T23] usb 3-1: device descriptor read/8, error -71 [ 127.080972][ T4803] fuse: Bad value for 'fd' [ 127.299279][ T23] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 127.419641][ T23] usb 3-1: device descriptor read/8, error -71 [ 127.539398][ T23] usb usb3-port1: unable to enumerate USB device [ 127.646779][ T4813] netlink: 71 bytes leftover after parsing attributes in process `syz.5.165'. [ 129.748548][ T1107] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 130.589264][ T1107] usb 1-1: device descriptor read/64, error -71 [ 130.860242][ T1107] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 131.060411][ T1107] usb 1-1: device descriptor read/64, error -71 [ 131.319100][ T1107] usb usb1-port1: attempt power cycle [ 131.363743][ T4862] netlink: 71 bytes leftover after parsing attributes in process `syz.2.182'. [ 131.749293][ T1107] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 131.979553][ T1107] usb 1-1: device descriptor read/8, error -71 [ 132.809660][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.820072][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.849313][ T1107] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 133.672256][ T1107] usb 1-1: device not accepting address 10, error -71 [ 133.679426][ T1107] usb usb1-port1: unable to enumerate USB device [ 134.195598][ T4901] netlink: 71 bytes leftover after parsing attributes in process `syz.0.193'. [ 136.341142][ T4223] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 137.265552][ T4937] fuse: Bad value for 'fd' [ 137.383863][ T4223] usb 5-1: device descriptor read/64, error -71 [ 138.129200][ T4223] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 138.296574][ T4955] netlink: 'syz.0.208': attribute type 1 has an invalid length. [ 138.336755][ T4955] 8021q: adding VLAN 0 to HW filter on device bond1 [ 138.341287][ T4223] usb 5-1: device descriptor read/64, error -71 [ 138.479627][ T4223] usb usb5-port1: attempt power cycle [ 138.508309][ T4960] netlink: 71 bytes leftover after parsing attributes in process `syz.0.209'. [ 141.929430][ T4221] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 142.149600][ T4221] usb 3-1: device descriptor read/64, error -71 [ 142.459246][ T4221] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 142.514569][ T5009] netlink: 71 bytes leftover after parsing attributes in process `syz.5.222'. [ 142.649440][ T4221] usb 3-1: device descriptor read/64, error -71 [ 142.775465][ T4221] usb usb3-port1: attempt power cycle [ 143.189413][ T4221] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 143.359462][ T4221] usb 3-1: device descriptor read/8, error -71 [ 143.729331][ T4221] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 144.159326][ T4221] usb 3-1: device descriptor read/8, error -71 [ 144.300917][ T4221] usb usb3-port1: unable to enumerate USB device [ 145.656145][ T5049] syz.0.231 (5049) used greatest stack depth: 20832 bytes left [ 145.777426][ T5058] netlink: 71 bytes leftover after parsing attributes in process `syz.5.234'. [ 147.019299][ T4224] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 147.269424][ T4224] usb 5-1: device descriptor read/64, error -71 [ 147.639463][ T4224] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 147.989282][ T4224] usb 5-1: device descriptor read/64, error -71 [ 148.109425][ T4224] usb usb5-port1: attempt power cycle [ 149.233915][ T4224] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 149.409408][ T4224] usb 5-1: device descriptor read/8, error -71 [ 151.158227][ T5124] fuse: Bad value for 'fd' [ 151.175879][ T5123] netlink: 71 bytes leftover after parsing attributes in process `syz.4.248'. [ 151.897728][ T5138] tipc: Started in network mode [ 151.903429][ T5138] tipc: Node identity ac1414aa, cluster identity 4711 [ 151.973735][ T5138] tipc: Enabled bearer , priority 10 [ 152.036777][ T5143] Failed to get privilege flags for destination (handle=0x2:0xd) [ 153.081124][ T4910] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 153.096769][ T5108] tipc: Node number set to 2886997162 [ 153.589217][ T4910] usb 1-1: device descriptor read/64, error -71 [ 153.720217][ T5165] fuse: Bad value for 'fd' [ 153.747223][ T5167] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 153.852337][ T5169] netlink: 71 bytes leftover after parsing attributes in process `syz.5.263'. [ 153.861673][ T4910] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 154.159406][ T5108] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 154.379702][ T4910] usb 1-1: device descriptor read/64, error -71 [ 154.947836][ T5188] netlink: 12 bytes leftover after parsing attributes in process `syz.1.269'. [ 155.022944][ T5188] device veth1_macvtap left promiscuous mode [ 155.079433][ T4910] usb usb1-port1: attempt power cycle [ 155.331787][ T5108] usb 5-1: Using ep0 maxpacket: 8 [ 155.635366][ T5108] usb 5-1: config 0 has no interfaces? [ 155.642542][ T5108] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 157.278179][ T5108] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.573831][ T5108] usb 5-1: config 0 descriptor?? [ 157.724894][ T5108] usb 5-1: can't set config #0, error -71 [ 158.820252][ T5108] usb 5-1: USB disconnect, device number 10 [ 159.043340][ T5211] fuse: Bad value for 'fd' [ 159.107193][ T5213] mmap: syz.0.277 (5213) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 159.748482][ T5219] netlink: 'syz.1.276': attribute type 1 has an invalid length. [ 159.888227][ T5220] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 159.978518][ T5223] netlink: 71 bytes leftover after parsing attributes in process `syz.5.279'. [ 160.881335][ T5233] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 161.759255][ T5108] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 161.820568][ T5239] xt_TPROXY: Can be used only with -p tcp or -p udp [ 162.089195][ T5108] usb 5-1: device descriptor read/64, error -71 [ 162.449386][ T5108] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 162.659209][ T5108] usb 5-1: device descriptor read/64, error -71 [ 164.431596][ T5108] usb usb5-port1: attempt power cycle [ 164.486082][ T5256] netlink: 892 bytes leftover after parsing attributes in process `syz.0.290'. [ 164.902098][ T5263] netlink: 71 bytes leftover after parsing attributes in process `syz.2.291'. [ 167.219984][ T4224] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 167.439440][ T4224] usb 1-1: device descriptor read/64, error -71 [ 167.548879][ T5298] netlink: 71 bytes leftover after parsing attributes in process `syz.2.302'. [ 167.709287][ T4224] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 168.569213][ T4224] usb 1-1: device descriptor read/64, error -71 [ 168.891419][ T4224] usb usb1-port1: attempt power cycle [ 168.944403][ T5308] loop1: detected capacity change from 0 to 128 [ 170.287091][ T4224] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 170.299977][ T5308] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 170.327277][ T5308] ext4 filesystem being mounted at /59/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 170.559179][ T4224] usb 1-1: device not accepting address 16, error -71 [ 170.729475][ T5308] fscrypt: Error allocating hmac(sha512): -2 [ 171.782223][ T5339] netlink: 71 bytes leftover after parsing attributes in process `syz.0.314'. [ 171.893301][ T5341] loop4: detected capacity change from 0 to 128 [ 172.320917][ T5341] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 172.572486][ T5341] ext4 filesystem being mounted at /47/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 172.859658][ T5351] binder: 5349:5351 ioctl c0306201 2000000003c0 returned -14 [ 173.489281][ T4224] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 173.719427][ T4224] usb 1-1: device descriptor read/64, error -71 [ 173.999412][ T4224] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 174.125320][ T5371] loop1: detected capacity change from 0 to 1024 [ 174.219446][ T4224] usb 1-1: device descriptor read/64, error -71 [ 174.349544][ T4224] usb usb1-port1: attempt power cycle [ 174.452826][ T5378] netlink: 71 bytes leftover after parsing attributes in process `syz.4.326'. [ 174.780479][ T4224] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 174.923602][ T4224] usb 1-1: device descriptor read/8, error -71 [ 176.059226][ T4224] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 176.129378][ T4224] usb 1-1: device descriptor read/8, error -71 [ 176.203025][ T5389] loop0: detected capacity change from 0 to 1024 [ 176.247220][ T5389] ======================================================= [ 176.247220][ T5389] WARNING: The mand mount option has been deprecated and [ 176.247220][ T5389] and is ignored by this kernel. Remove the mand [ 176.247220][ T5389] option from the mount to silence this warning. [ 176.247220][ T5389] ======================================================= [ 176.249663][ T4224] usb usb1-port1: unable to enumerate USB device [ 176.379995][ T5389] hfsplus: unable to parse mount options [ 177.199247][ T4224] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 177.449358][ T4224] usb 2-1: Using ep0 maxpacket: 8 [ 177.569948][ T4224] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 177.646878][ T4224] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 177.777316][ T4224] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.979518][ T4224] usb 2-1: config 0 descriptor?? [ 178.855602][ T4224] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 178.940349][ T5403] Invalid ELF header type: 3 != 1 [ 178.959598][ T5403] kernel read not supported for file / њ7іПьГўW)лs“§З!QЏцмҐfsхl{T‡rТ)r§ЦOљх2:"фАT+Нџv|ЌХІDvcЋ“ШЦ Е6Тxгc: (pid: 5403 comm: syz.1.334) [ 178.976425][ T26] audit: type=1800 audit(1749378565.000:2): pid=5403 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.334" name=20019C1437B3CFFCC3A25729EB7393A7C721518FF6ECA56673F56C7B548772D22972A7D6084F9A98F5323A22F412C0542BCD9F767C8DD5B24476638E93D8D6A0C536D278E3633A dev="mqueue" ino=37385 res=0 errno=0 [ 181.818021][ T4910] usb 2-1: USB disconnect, device number 6 [ 181.918392][ T5421] netlink: 71 bytes leftover after parsing attributes in process `syz.1.338'. [ 181.923365][ T5417] loop0: detected capacity change from 0 to 2048 [ 182.109011][ T5417] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 182.181050][ T5417] NILFS (loop0): mounting unchecked fs [ 182.832248][ T4188] udevd[4188]: incorrect nilfs2 checksum on /dev/loop0 [ 182.848783][ T5417] NILFS (loop0): recovery complete [ 182.980319][ T5431] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 183.009339][ T4223] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 183.210671][ T4223] usb 5-1: device descriptor read/64, error -71 [ 183.659183][ T4223] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 183.879250][ T4223] usb 5-1: device descriptor read/64, error -71 [ 183.999909][ T4223] usb usb5-port1: attempt power cycle [ 184.420736][ T4223] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 184.541621][ T4223] usb 5-1: device descriptor read/8, error -71 [ 184.819226][ T4223] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 184.931981][ T4223] usb 5-1: device descriptor read/8, error -71 [ 185.060343][ T4223] usb usb5-port1: unable to enumerate USB device [ 185.309260][ T4227] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 185.519272][ T4223] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 185.786952][ T4223] usb 5-1: Using ep0 maxpacket: 32 [ 185.839514][ T4227] usb 1-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 185.856491][ T4227] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.884974][ T4227] usb 1-1: Product: syz [ 185.909356][ T4227] usb 1-1: Manufacturer: syz [ 185.914007][ T4227] usb 1-1: SerialNumber: syz [ 185.937018][ T4227] usb 1-1: config 0 descriptor?? [ 186.070388][ T4223] usb 5-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 186.089320][ T4223] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.122564][ T4223] usb 5-1: Product: syz [ 186.126795][ T4223] usb 5-1: Manufacturer: syz [ 186.149201][ T4223] usb 5-1: SerialNumber: syz [ 186.208699][ T5452] loop0: detected capacity change from 0 to 1024 [ 186.215985][ T4223] usb 5-1: config 0 descriptor?? [ 186.423043][ T5452] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 186.775639][ T4223] RobotFuzz Open Source InterFace, OSIF 5-1:0.0: version d4.15 found at bus 005 address 018 [ 186.949265][ T4223] usb 5-1: USB disconnect, device number 18 [ 189.245813][ T2239] Bluetooth: hci5: command 0x0409 tx timeout [ 190.591712][ T4227] cx82310_eth: probe of 1-1:0.0 failed with error -22 [ 191.418557][ T4223] Bluetooth: hci3: command 0x0406 tx timeout [ 191.426635][ T4223] Bluetooth: hci2: command 0x0406 tx timeout [ 191.435613][ T4223] Bluetooth: hci1: command 0x0406 tx timeout [ 191.445848][ T5496] loop4: detected capacity change from 0 to 256 [ 191.453557][ T4223] Bluetooth: hci4: command 0x0406 tx timeout [ 191.459911][ T4223] Bluetooth: hci5: command 0x041b tx timeout [ 191.489525][ T4227] cxacru 1-1:0.0: usbatm_usb_probe: bind failed: -19! [ 191.508630][ T4227] usb 1-1: USB disconnect, device number 22 [ 191.528905][ T5496] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 191.552431][ T5496] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 191.683868][ T5496] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 192.039255][ T4227] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 192.289429][ T4227] usb 1-1: device descriptor read/64, error -71 [ 192.579308][ T4227] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 192.710672][ T5471] chnl_net:caif_netlink_parms(): no params data found [ 192.832216][ T4227] usb 1-1: device descriptor read/64, error -71 [ 192.959477][ T4227] usb usb1-port1: attempt power cycle [ 193.034960][ T5471] bridge0: port 1(bridge_slave_0) entered blocking state [ 193.089589][ T5471] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.127357][ T5471] device bridge_slave_0 entered promiscuous mode [ 193.195364][ T5471] bridge0: port 2(bridge_slave_1) entered blocking state [ 193.207368][ T5471] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.232630][ T5471] device bridge_slave_1 entered promiscuous mode [ 193.290578][ T4279] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.403622][ T4227] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 193.421944][ T5471] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 193.469327][ T1107] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 193.499369][ T4910] Bluetooth: hci5: command 0x040f tx timeout [ 193.506824][ T4279] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.509319][ T4227] usb 1-1: device descriptor read/8, error -71 [ 193.541757][ T5471] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 193.615000][ T4279] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.679568][ T5471] team0: Port device team_slave_0 added [ 193.694372][ T4279] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.721709][ T5471] team0: Port device team_slave_1 added [ 193.781370][ T5471] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 193.788360][ T5471] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 193.819625][ T4227] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 193.853206][ T5471] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 193.890409][ T5471] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 193.901036][ T5471] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 193.927697][ T1107] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 193.929320][ T4227] usb 1-1: device descriptor read/8, error -71 [ 193.949747][ T5471] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 193.970141][ T1107] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 194.007882][ T1107] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 194.026926][ T1107] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 194.036636][ T1107] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.054213][ T1107] usb 3-1: config 0 descriptor?? [ 194.081712][ T4227] usb usb1-port1: unable to enumerate USB device [ 194.156285][ T5520] loop4: detected capacity change from 0 to 32768 [ 194.225780][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.232160][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.276773][ T5471] device hsr_slave_0 entered promiscuous mode [ 194.347449][ T5471] device hsr_slave_1 entered promiscuous mode [ 194.362216][ T5520] XFS (loop4): Mounting V5 Filesystem [ 194.376678][ T5471] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 194.410373][ T5471] Cannot create hsr debugfs directory [ 194.462525][ T5520] XFS (loop4): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 194.502701][ T5520] XFS (loop4): Starting recovery (logdev: internal) [ 194.541744][ T1107] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 194.550965][ T1107] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 194.558961][ T1107] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 194.566629][ T1107] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 194.572097][ T5520] XFS (loop4): Ending recovery (logdev: internal) [ 194.574299][ T1107] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 194.587936][ T1107] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 194.597037][ T1107] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 194.650859][ T1107] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 195.493842][ T5471] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 195.722406][ T2239] Bluetooth: hci5: command 0x0419 tx timeout [ 195.924425][ T4176] XFS (loop4): Unmounting Filesystem [ 196.044244][ T5471] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 196.072497][ T5471] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 196.097149][ T5471] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 196.819621][ T5471] 8021q: adding VLAN 0 to HW filter on device bond0 [ 197.053608][ T5471] 8021q: adding VLAN 0 to HW filter on device team0 [ 197.110542][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 197.133777][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 197.449579][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 197.482232][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 197.498067][ T4238] bridge0: port 1(bridge_slave_0) entered blocking state [ 197.505256][ T4238] bridge0: port 1(bridge_slave_0) entered forwarding state [ 197.523271][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 197.538231][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 197.552146][ T4238] bridge0: port 2(bridge_slave_1) entered blocking state [ 197.559341][ T4238] bridge0: port 2(bridge_slave_1) entered forwarding state [ 197.577668][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 197.844033][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 197.886872][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 198.476728][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 198.549193][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 198.597200][ T4293] usb 3-1: reset high-speed USB device number 14 using dummy_hcd [ 198.648189][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 198.711884][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 199.213839][ T4293] usb 3-1: device descriptor read/64, error -71 [ 199.315935][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 199.425867][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 199.463349][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 199.473001][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 199.481938][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 199.705187][ T5604] input: syz1 as /devices/virtual/input/input6 [ 199.728307][ T5611] process 'syz.4.383' launched './file0' with NULL argv: empty string added [ 199.739224][ T4293] usb 3-1: reset high-speed USB device number 14 using dummy_hcd [ 200.049375][ T4293] usb 3-1: device descriptor read/64, error -71 [ 200.349507][ T4293] usb 3-1: reset high-speed USB device number 14 using dummy_hcd [ 200.789635][ T4293] usb 3-1: device descriptor read/8, error -71 [ 200.961263][ T4279] device hsr_slave_0 left promiscuous mode [ 201.062127][ T4279] device hsr_slave_1 left promiscuous mode [ 201.126649][ T4279] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 201.270393][ T4279] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 201.763236][ T1107] usb 3-1: USB disconnect, device number 14 [ 201.899718][ T4279] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 201.907337][ T4279] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 201.950250][ T4279] device bridge_slave_1 left promiscuous mode [ 201.958491][ T4279] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.017964][ T4279] device bridge_slave_0 left promiscuous mode [ 202.038071][ T4279] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.100113][ T4279] device veth1_macvtap left promiscuous mode [ 202.221311][ T4279] device veth0_macvtap left promiscuous mode [ 202.306163][ T4279] device veth1_vlan left promiscuous mode [ 202.394811][ T4279] device veth0_vlan left promiscuous mode [ 204.399358][ T4910] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 204.643626][ T4910] usb 3-1: device descriptor read/64, error -71 [ 204.656846][ T4279] team0 (unregistering): Port device team_slave_1 removed [ 204.688575][ T4279] team0 (unregistering): Port device team_slave_0 removed [ 204.738219][ T4279] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 204.779668][ T4279] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 204.916702][ T5663] loop4: detected capacity change from 0 to 32768 [ 204.939300][ T4910] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 204.977051][ T5663] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.395 (5663) [ 205.017977][ T4279] bond0 (unregistering): Released all slaves [ 205.077507][ T5663] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 205.095213][ T5663] BTRFS info (device loop4): turning on flush-on-commit [ 205.105622][ T5663] BTRFS info (device loop4): enabling disk space caching [ 205.121629][ T5663] BTRFS info (device loop4): turning off barriers [ 205.128109][ T5663] BTRFS info (device loop4): doing ref verification [ 205.146924][ T5663] BTRFS info (device loop4): enabling auto defrag [ 205.172845][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 205.189318][ T5663] BTRFS info (device loop4): force clearing of disk cache [ 205.196503][ T5663] BTRFS info (device loop4): enabling ssd optimizations [ 205.204260][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 205.257556][ T4910] usb 3-1: device descriptor read/64, error -71 [ 205.314932][ T5471] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 205.329354][ T5663] BTRFS info (device loop4): using spread ssd allocation scheme [ 205.337792][ T5663] BTRFS info (device loop4): disk space caching is enabled [ 205.389605][ T4910] usb usb3-port1: attempt power cycle [ 205.422405][ T5663] BTRFS info (device loop4): has skinny extents [ 205.714052][ T5692] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 205.819333][ T4910] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 205.848809][ T5663] BTRFS info (device loop4): clearing free space tree [ 205.877367][ T5663] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 205.920198][ T5663] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 205.939802][ T4910] usb 3-1: device descriptor read/8, error -71 [ 206.672833][ T4911] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 206.690056][ T4911] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 206.731673][ T4910] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 206.832419][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 206.850008][ T4910] usb 3-1: device descriptor read/8, error -71 [ 206.851776][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 206.887894][ T5471] device veth0_vlan entered promiscuous mode [ 206.939382][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 206.950139][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 206.980444][ T4910] usb usb3-port1: unable to enumerate USB device [ 206.987715][ T5471] device veth1_vlan entered promiscuous mode [ 207.142101][ T4911] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 207.154105][ T4911] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 207.203222][ T4911] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 207.238588][ T4911] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 207.258330][ T5666] loop1: detected capacity change from 0 to 32768 [ 207.283255][ T5471] device veth0_macvtap entered promiscuous mode [ 207.692453][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 207.821295][ T5471] device veth1_macvtap entered promiscuous mode [ 208.260185][ T5471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 208.369221][ T5471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.418250][ T5471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 208.459458][ T5471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.489496][ T5471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 208.511560][ T5471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.522792][ T5471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 208.533353][ T5471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.543423][ T5471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 208.580390][ T5471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.633734][ T5471] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 208.738360][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 208.766242][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 208.844907][ T5471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 208.877690][ T5471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.942995][ T5471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 209.020226][ T5471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.048457][ T5471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 209.099846][ T5471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.142319][ T5471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 209.187739][ T5471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.245376][ T5471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 209.379140][ T5471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.442113][ T5471] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 209.504365][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 209.871202][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 210.335059][ T5471] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.404705][ T5471] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.431530][ T5471] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.485510][ T5471] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.894778][ T3069] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 210.953653][ T3069] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 211.004540][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 211.064363][ T4325] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 211.113931][ T4325] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 211.182919][ T3069] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 211.189261][ T4293] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 211.389406][ T4293] usb 2-1: device descriptor read/64, error -71 [ 211.450233][ T5788] netlink: 71 bytes leftover after parsing attributes in process `syz.6.351'. [ 211.655667][ T5793] netlink: 8 bytes leftover after parsing attributes in process `syz.4.413'. [ 211.669344][ T4293] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 211.899279][ T4293] usb 2-1: device descriptor read/64, error -71 [ 213.539444][ T4293] usb usb2-port1: attempt power cycle [ 214.035419][ T4293] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 214.449334][ T4293] usb 2-1: device not accepting address 9, error -71 [ 215.914801][ T5833] netlink: 71 bytes leftover after parsing attributes in process `syz.1.424'. [ 216.780618][ T4302] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 216.999191][ T4302] usb 3-1: device descriptor read/64, error -71 [ 217.088552][ T5831] loop4: detected capacity change from 0 to 32768 [ 217.197391][ T5831] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.422 (5831) [ 217.279743][ T4302] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 217.308203][ T5831] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 217.348502][ T5831] BTRFS info (device loop4): setting nodatasum [ 217.379735][ T5831] BTRFS info (device loop4): force zlib compression, level 3 [ 217.409602][ T5831] BTRFS info (device loop4): metadata ratio 1 [ 217.415737][ T5831] BTRFS info (device loop4): enabling ssd optimizations [ 217.453589][ T5831] BTRFS info (device loop4): allowing degraded mounts [ 217.473856][ T5831] BTRFS info (device loop4): using free space tree [ 217.480937][ T4302] usb 3-1: device descriptor read/64, error -71 [ 217.510766][ T5848] loop1: detected capacity change from 0 to 40427 [ 217.527821][ T5831] BTRFS info (device loop4): has skinny extents [ 217.581840][ T5848] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 217.619461][ T4302] usb usb3-port1: attempt power cycle [ 217.650572][ T5848] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 217.859133][ T5848] F2FS-fs (loop1): Found nat_bits in checkpoint [ 218.069230][ T4302] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 218.077212][ T5848] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 218.179814][ T5848] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 218.187215][ T5848] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 218.195871][ T4302] usb 3-1: device descriptor read/8, error -71 [ 218.479353][ T4302] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 218.619428][ T4302] usb 3-1: device descriptor read/8, error -71 [ 218.695000][ T5907] tmpfs: Unknown parameter 'usrquota_block_hardlimit' [ 218.740103][ T4302] usb usb3-port1: unable to enumerate USB device [ 219.657791][ T5914] fuse: Bad value for 'group_id' [ 219.760739][ T5916] netlink: 71 bytes leftover after parsing attributes in process `syz.2.436'. [ 221.343914][ T5935] loop6: detected capacity change from 0 to 1024 [ 221.532725][ T5935] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 221.638793][ T5935] EXT4-fs (loop6): mounted filesystem without journal. Opts: nombcache,nobarrier,norecovery,errors=remount-ro,resgid=0x0000000000000000,. Quota mode: writeback. [ 222.171881][ T5957] loop1: detected capacity change from 0 to 64 [ 222.284609][ T5957] netlink: 'syz.1.432': attribute type 1 has an invalid length. [ 222.404815][ T5957] 8021q: adding VLAN 0 to HW filter on device bond1 [ 222.615668][ T5964] 8021q: adding VLAN 0 to HW filter on device bond1 [ 222.674514][ T5964] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 222.763716][ T5964] bond1: (slave vxcan3): Error -22 calling dev_set_mtu [ 223.329309][ T4223] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 223.539693][ T4223] usb 2-1: device descriptor read/64, error -71 [ 223.851820][ T4223] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 224.069557][ T4223] usb 2-1: device descriptor read/64, error -71 [ 224.199761][ T4223] usb usb2-port1: attempt power cycle [ 224.333694][ T5961] loop4: detected capacity change from 0 to 40427 [ 224.359332][ T5961] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 224.379269][ T5961] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 224.414702][ T5961] F2FS-fs (loop4): invalid crc value [ 224.477815][ T5961] F2FS-fs (loop4): Found nat_bits in checkpoint [ 224.491383][ T5992] capability: warning: `syz.2.448' uses deprecated v2 capabilities in a way that may be insecure [ 224.609298][ T4223] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 224.618226][ T5994] fuse: Bad value for 'group_id' [ 224.713640][ T5961] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 224.722317][ T4223] usb 2-1: device descriptor read/8, error -71 [ 224.756002][ T5961] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 224.763489][ T6000] netlink: 71 bytes leftover after parsing attributes in process `syz.2.450'. [ 224.989183][ T4223] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 225.109404][ T4223] usb 2-1: device descriptor read/8, error -71 [ 225.248613][ T4223] usb usb2-port1: unable to enumerate USB device [ 226.462275][ T6021] loop6: detected capacity change from 0 to 128 [ 226.523212][ T6021] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; going on - but anything won't be destroyed because it's read-only [ 226.590027][ T6021] hpfs: hpfs_map_sector(): read error [ 227.404937][ T6035] fuse: Bad value for 'group_id' [ 227.865465][ T6046] loop1: detected capacity change from 0 to 256 [ 227.893789][ T6050] netlink: 71 bytes leftover after parsing attributes in process `syz.2.464'. [ 227.992557][ T6046] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 228.089331][ T1107] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 228.310042][ T6046] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 228.449363][ T1107] usb 5-1: device descriptor read/64, error -71 [ 228.458269][ T6046] FAT-fs (loop1): Filesystem has been set read-only [ 228.567650][ T6046] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 228.719360][ T1107] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 228.836445][ T6046] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 228.962257][ T1107] usb 5-1: device descriptor read/64, error -71 [ 229.000366][ T6046] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 229.060270][ T6046] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 229.094271][ T6046] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 229.109398][ T1107] usb usb5-port1: attempt power cycle [ 229.121641][ T6046] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 229.131392][ T6046] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 229.151606][ T6046] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 229.179232][ T6046] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 229.240196][ T6046] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 229.267217][ T6046] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 229.287332][ T6046] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 229.307713][ T6046] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 229.329950][ T6046] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 229.373421][ T6046] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 229.402410][ T6046] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 229.419212][ T6046] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 229.438196][ T6046] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 229.458488][ T6046] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 229.494447][ T6046] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 229.513421][ T6046] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 229.519772][ T1107] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 229.564977][ T6046] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 229.596216][ T6046] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 229.615631][ T6046] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 229.639377][ T1107] usb 5-1: device descriptor read/8, error -71 [ 229.656551][ T6046] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 229.718166][ T6046] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 229.737667][ T6046] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 229.747871][ T6046] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 229.765206][ T6046] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 229.779824][ T6046] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 229.800205][ T6046] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 229.848880][ T6046] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 229.929271][ T1107] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 229.964001][ T6046] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 230.083166][ T6046] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 230.274288][ T26] audit: type=1800 audit(1749378616.280:3): pid=6046 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.461" name="file1" dev="loop1" ino=1048597 res=0 errno=0 [ 230.629446][ T1107] usb 5-1: device descriptor read/8, error -71 [ 230.760788][ T1107] usb usb5-port1: unable to enumerate USB device [ 231.233161][ T6046] syz.1.461 (6046) used greatest stack depth: 20384 bytes left [ 231.774015][ T6105] netlink: 71 bytes leftover after parsing attributes in process `syz.2.476'. [ 233.578114][ T6122] netlink: 8 bytes leftover after parsing attributes in process `syz.1.479'. [ 233.602758][ T6122] device gtp0 entered promiscuous mode [ 234.262233][ T6143] netlink: 71 bytes leftover after parsing attributes in process `syz.0.487'. [ 234.941474][ T1107] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 235.239367][ T1107] usb 3-1: device descriptor read/64, error -71 [ 235.669314][ T1107] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 238.876789][ T6167] netlink: 8 bytes leftover after parsing attributes in process `syz.1.492'. [ 238.963006][ T6167] device gtp1 entered promiscuous mode [ 239.722124][ T6171] loop4: detected capacity change from 0 to 32768 [ 239.893549][ T6175] loop0: detected capacity change from 0 to 32768 [ 239.963749][ T6172] loop6: detected capacity change from 0 to 32768 [ 240.381819][ T6175] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.495 (6175) [ 240.478233][ T6175] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 240.526018][ T6203] netlink: 71 bytes leftover after parsing attributes in process `syz.2.500'. [ 240.540751][ T6175] BTRFS info (device loop0): turning on flush-on-commit [ 240.547875][ T6175] BTRFS info (device loop0): enabling disk space caching [ 240.555772][ T6175] BTRFS info (device loop0): turning off barriers [ 240.562557][ T6175] BTRFS info (device loop0): doing ref verification [ 240.569494][ T6175] BTRFS info (device loop0): enabling auto defrag [ 240.576577][ T6175] BTRFS info (device loop0): force clearing of disk cache [ 240.585160][ T6175] BTRFS info (device loop0): enabling ssd optimizations [ 240.629353][ T6172] XFS (loop6): Mounting V5 Filesystem [ 240.762140][ T6172] XFS (loop6): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 240.769356][ T6175] BTRFS info (device loop0): using spread ssd allocation scheme [ 240.843539][ T6175] BTRFS info (device loop0): disk space caching is enabled [ 240.859509][ T6175] BTRFS info (device loop0): has skinny extents [ 240.893099][ T6172] XFS (loop6): Starting recovery (logdev: internal) [ 241.079375][ T6172] XFS (loop6): Ending recovery (logdev: internal) [ 241.866234][ T5110] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 241.888351][ T6175] BTRFS info (device loop0): clearing free space tree [ 241.909352][ T6175] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 241.964938][ T6175] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 241.996616][ T5471] XFS (loop6): Unmounting Filesystem [ 242.149293][ T5110] usb 2-1: Using ep0 maxpacket: 32 [ 242.450166][ T5110] usb 2-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 242.515532][ T5110] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.639956][ T5110] usb 2-1: Product: syz [ 242.700827][ T5110] usb 2-1: Manufacturer: syz [ 242.760017][ T5110] usb 2-1: SerialNumber: syz [ 242.964886][ T5110] usb 2-1: config 0 descriptor?? [ 243.296519][ T6260] netlink: 8 bytes leftover after parsing attributes in process `syz.4.507'. [ 243.316202][ T5110] RobotFuzz Open Source InterFace, OSIF 2-1:0.0: version d4.15 found at bus 002 address 015 [ 243.387909][ T6260] device gtp0 entered promiscuous mode [ 243.523320][ T4910] usb 2-1: USB disconnect, device number 15 [ 243.735813][ T6272] loop4: detected capacity change from 0 to 2048 [ 243.808851][ T6272] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 243.874841][ T6272] NILFS (loop4): mounting unchecked fs [ 243.893075][ T6272] NILFS (loop4): recovery complete [ 243.903704][ T6274] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 243.964987][ T4188] udevd[4188]: incorrect nilfs2 checksum on /dev/loop4 [ 245.229460][ T5408] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 245.489250][ T5408] usb 1-1: device descriptor read/64, error -71 [ 245.690727][ T6295] netlink: 71 bytes leftover after parsing attributes in process `syz.2.512'. [ 245.779234][ T5408] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 245.969259][ T5408] usb 1-1: device descriptor read/64, error -71 [ 246.106408][ T5408] usb usb1-port1: attempt power cycle [ 246.148135][ T1107] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 246.459663][ T1107] usb 3-1: Using ep0 maxpacket: 8 [ 246.580066][ T1107] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 246.599406][ T5408] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 246.695010][ T1107] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 246.719501][ T5408] usb 1-1: device descriptor read/8, error -71 [ 246.755371][ T1107] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.840424][ T1107] usb 3-1: config 0 descriptor?? [ 247.239449][ T5408] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 247.708222][ T1107] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 247.803393][ T6319] Invalid ELF header type: 3 != 1 [ 247.816634][ T6319] kernel read not supported for file / њ7іПьГўW)лs“§З!QЏцмҐfsхl{T‡rТ)r§ЦOљх2:"фАT+Нџv|ЌХІDvcЋ“ШЦ Е6Тxгc: (pid: 6319 comm: syz.2.515) [ 247.837796][ T26] audit: type=1800 audit(1749378633.850:4): pid=6319 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.515" name=20019C1437B3CFFCC3A25729EB7393A7C721518FF6ECA56673F56C7B548772D22972A7D6084F9A98F5323A22F412C0542BCD9F767C8DD5B24476638E93D8D6A0C536D278E3633A dev="mqueue" ino=38773 res=0 errno=0 [ 249.489460][ T5408] usb 1-1: device descriptor read/8, error -71 [ 249.619930][ T5408] usb usb1-port1: unable to enumerate USB device [ 250.711909][ T6330] netlink: 8 bytes leftover after parsing attributes in process `syz.4.519'. [ 251.155656][ T6330] device gtp1 entered promiscuous mode [ 251.452416][ T5948] usb 3-1: USB disconnect, device number 25 [ 254.144640][ T6367] netlink: 71 bytes leftover after parsing attributes in process `syz.0.525'. [ 255.269259][ T7] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 255.662111][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.668551][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.976202][ T4292] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.084757][ T4292] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.122283][ T6387] netlink: 8 bytes leftover after parsing attributes in process `syz.1.531'. [ 256.162509][ T6387] device gtp2 entered promiscuous mode [ 256.169463][ T7] usb 1-1: device descriptor read/64, error -71 [ 256.208698][ T4292] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.311080][ T4292] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.459304][ T7] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 256.519217][ T2239] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 256.568227][ T6360] loop6: detected capacity change from 0 to 32768 [ 256.610365][ T6360] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop6 scanned by syz.6.524 (6360) [ 256.669930][ T6360] BTRFS info (device loop6): using sha256 (sha256-avx2) checksum algorithm [ 256.678631][ T6360] BTRFS info (device loop6): turning on flush-on-commit [ 256.686019][ T7] usb 1-1: device descriptor read/64, error -71 [ 256.704567][ T6360] BTRFS info (device loop6): enabling disk space caching [ 256.714473][ T6360] BTRFS info (device loop6): turning off barriers [ 256.749149][ T4266] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 256.749215][ T6360] BTRFS info (device loop6): doing ref verification [ 256.769191][ T2239] usb 5-1: Using ep0 maxpacket: 8 [ 256.818857][ T6360] BTRFS info (device loop6): enabling auto defrag [ 256.830356][ T7] usb usb1-port1: attempt power cycle [ 256.869234][ T6360] BTRFS info (device loop6): force clearing of disk cache [ 256.876416][ T6360] BTRFS info (device loop6): enabling ssd optimizations [ 256.889585][ T2239] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 256.907609][ T6360] BTRFS info (device loop6): using spread ssd allocation scheme [ 256.916082][ T2239] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 256.946777][ T2239] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.968127][ T6360] BTRFS info (device loop6): disk space caching is enabled [ 256.971963][ T2239] usb 5-1: config 0 descriptor?? [ 256.999345][ T4266] usb 2-1: Using ep0 maxpacket: 32 [ 257.007288][ T6360] BTRFS info (device loop6): has skinny extents [ 257.243188][ T2239] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 257.289504][ T7] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 257.299331][ T4266] usb 2-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 257.308406][ T4266] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.320347][ T6360] BTRFS error (device loop6): open_ctree failed: -12 [ 257.336984][ T4266] usb 2-1: Product: syz [ 257.343057][ T4266] usb 2-1: Manufacturer: syz [ 257.347700][ T4266] usb 2-1: SerialNumber: syz [ 257.363571][ T4266] usb 2-1: config 0 descriptor?? [ 257.389455][ T7] usb 1-1: device descriptor read/8, error -71 [ 257.552693][ T6427] Invalid ELF header type: 3 != 1 [ 257.574032][ T6427] kernel read not supported for file / њ7іПьГўW)лs“§З!QЏцмҐfsхl{T‡rТ)r§ЦOљх2:"фАT+Нџv|ЌХІDvcЋ“ШЦ Е6Тxгc: (pid: 6427 comm: syz.4.533) [ 257.592137][ T26] audit: type=1800 audit(1749378643.610:5): pid=6427 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.533" name=20019C1437B3CFFCC3A25729EB7393A7C721518FF6ECA56673F56C7B548772D22972A7D6084F9A98F5323A22F412C0542BCD9F767C8DD5B24476638E93D8D6A0C536D278E3633A dev="mqueue" ino=39824 res=0 errno=0 [ 257.629546][ T4266] RobotFuzz Open Source InterFace, OSIF 2-1:0.0: failure sending bit rate [ 257.694906][ T4266] RobotFuzz Open Source InterFace, OSIF: probe of 2-1:0.0 failed with error -71 [ 257.926377][ T4266] usb 2-1: USB disconnect, device number 16 [ 259.602613][ T4292] device hsr_slave_0 left promiscuous mode [ 259.712335][ T4292] device hsr_slave_1 left promiscuous mode [ 259.840843][ T4292] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 259.956800][ T4292] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 260.073839][ T4292] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 260.171047][ T4292] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 260.286893][ T4292] device bridge_slave_1 left promiscuous mode [ 260.383262][ T4292] bridge0: port 2(bridge_slave_1) entered disabled state [ 260.507800][ T4292] device bridge_slave_0 left promiscuous mode [ 260.525736][ T4292] bridge0: port 1(bridge_slave_0) entered disabled state [ 260.555455][ T4292] device veth1_macvtap left promiscuous mode [ 260.598542][ T4292] device veth0_macvtap left promiscuous mode [ 260.612926][ T2239] usb 5-1: USB disconnect, device number 23 [ 260.708595][ T4292] device veth1_vlan left promiscuous mode [ 260.725365][ T4292] device veth0_vlan left promiscuous mode [ 260.869406][ T5734] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 260.878168][ T6450] loop4: detected capacity change from 0 to 128 [ 261.043820][ T6450] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; going on - but anything won't be destroyed because it's read-only [ 261.069789][ T5734] usb 1-1: device descriptor read/64, error -71 [ 261.239430][ T6450] hpfs: hpfs_map_sector(): read error [ 261.369338][ T5734] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 261.589629][ T5734] usb 1-1: device descriptor read/64, error -71 [ 261.740449][ T5734] usb usb1-port1: attempt power cycle [ 261.793374][ T6440] loop6: detected capacity change from 0 to 40427 [ 261.856431][ T6440] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12 [ 261.893179][ T6440] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 262.012815][ T6437] loop1: detected capacity change from 0 to 32768 [ 262.064173][ T6440] F2FS-fs (loop6): Found nat_bits in checkpoint [ 262.361038][ T6475] binder: 6474:6475 ioctl 4018620d 0 returned -22 [ 262.510157][ T6440] F2FS-fs (loop6): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 262.724913][ T4292] team0 (unregistering): Port device team_slave_1 removed [ 262.839864][ T6440] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 262.904128][ T6440] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 263.083549][ T4292] team0 (unregistering): Port device team_slave_0 removed [ 263.183348][ T4292] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 263.199677][ T4292] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 263.426252][ T4292] bond0 (unregistering): Released all slaves [ 263.586473][ T6459] netlink: 71 bytes leftover after parsing attributes in process `syz.0.539'. [ 263.910985][ T6484] netlink: 8 bytes leftover after parsing attributes in process `syz.2.545'. [ 264.959273][ T5324] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 265.147829][ T6506] loop6: detected capacity change from 0 to 2048 [ 265.173365][ T5324] usb 3-1: device descriptor read/64, error -71 [ 265.184422][ T6506] NILFS (loop6): broken superblock, retrying with spare superblock (blocksize = 1024) [ 265.209884][ T6506] NILFS (loop6): mounting unchecked fs [ 265.252901][ T4187] udevd[4187]: incorrect nilfs2 checksum on /dev/loop6 [ 265.294752][ T6506] NILFS (loop6): recovery complete [ 265.348222][ T6512] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 265.479838][ T5324] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 265.547260][ T6491] loop0: detected capacity change from 0 to 40427 [ 265.592590][ T6491] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 265.609961][ T6491] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 265.709993][ T5324] usb 3-1: device descriptor read/64, error -71 [ 265.727348][ T6491] F2FS-fs (loop0): Found nat_bits in checkpoint [ 265.831014][ T5324] usb usb3-port1: attempt power cycle [ 265.837714][ T6491] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 265.868143][ T6491] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 265.892763][ T6491] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 266.197785][ T6525] netlink: 4 bytes leftover after parsing attributes in process `syz.4.553'. [ 266.289394][ T5324] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 266.409600][ T5324] usb 3-1: device descriptor read/8, error -71 [ 266.699321][ T5324] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 266.799385][ T5324] usb 3-1: device descriptor read/8, error -71 [ 266.953041][ T5324] usb usb3-port1: unable to enumerate USB device [ 267.709280][ T6542] binder: 6541:6542 ioctl 4018620d 0 returned -22 [ 268.071488][ T6550] fuse: Unknown parameter 'grou00000000000000000000' [ 269.654221][ T6570] netlink: 16 bytes leftover after parsing attributes in process `syz.2.562'. [ 269.776166][ T7] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 269.828303][ T6574] loop4: detected capacity change from 0 to 256 [ 269.890833][ T6574] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 269.943364][ T6576] loop1: detected capacity change from 0 to 1764 [ 270.028648][ T6574] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 270.059367][ T7] usb 1-1: Using ep0 maxpacket: 8 [ 270.083340][ T6574] FAT-fs (loop4): Filesystem has been set read-only [ 270.179872][ T7] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 270.277238][ T7] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 270.453841][ T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 270.498151][ T6574] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 270.881756][ T6574] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 270.890608][ T6574] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 270.899282][ T6574] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 270.907821][ T6574] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 270.916426][ T6574] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 270.925626][ T6574] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 270.934264][ T6574] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 270.943086][ T6574] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 270.953567][ T6574] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 270.962304][ T6574] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 270.971842][ T6574] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 270.980664][ T6574] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 270.989316][ T6574] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 270.997995][ T6574] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 271.008636][ T6574] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 271.299243][ T6574] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 271.302130][ T7] usb 1-1: config 0 descriptor?? [ 271.352940][ T6574] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 271.378381][ T6593] binder: 6592:6593 ioctl 4018620d 0 returned -22 [ 271.436651][ T6574] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 271.601635][ T6574] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 272.258506][ T6574] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 272.318276][ T7] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 272.332931][ T7] usb 1-1: USB disconnect, device number 38 [ 272.369399][ T6574] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 272.439166][ T6574] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 272.464233][ T6604] loop1: detected capacity change from 0 to 512 [ 272.480216][ T6574] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 272.497031][ T6605] netlink: 8 bytes leftover after parsing attributes in process `syz.0.573'. [ 272.557266][ T6605] netlink: 12 bytes leftover after parsing attributes in process `syz.0.573'. [ 272.572579][ T6574] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 272.610771][ T6604] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 272.659456][ T6574] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 272.730408][ T6604] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 272.777923][ T6574] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 272.869659][ T6574] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 272.891279][ T6604] EXT4-fs (loop1): 1 truncate cleaned up [ 272.969323][ T6604] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 272.998626][ T6574] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 273.066112][ T6574] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 273.149018][ T6613] EXT4-fs (loop1): re-mounted. Opts: (null). Quota mode: none. [ 273.176554][ T6574] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 273.266341][ T6574] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 273.346860][ T6574] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 273.593167][ T6614] sched: RT throttling activated [ 273.593200][ T5107] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 273.622424][ T6574] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 274.358041][ T6574] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 274.417728][ T6574] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 274.524962][ T6574] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 274.615982][ T6574] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 274.649329][ T6574] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 274.694451][ T6574] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 274.704444][ T6600] loop6: detected capacity change from 0 to 262144 [ 274.761677][ T6574] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 274.779540][ T6629] loop0: detected capacity change from 0 to 1024 [ 274.812919][ T6574] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 274.824821][ T6600] BTRFS: device fsid 7e32c2af-f87a-45a1-bcba-64dea7c56a53 devid 1 transid 8 /dev/loop6 scanned by syz.6.574 (6600) [ 274.865440][ T6600] BTRFS info (device loop6): using xxhash64 (xxhash64-generic) checksum algorithm [ 274.875037][ T6600] BTRFS info (device loop6): using free space tree [ 274.881676][ T6600] BTRFS info (device loop6): has skinny extents [ 274.887953][ T6600] BTRFS info (device loop6): flagging fs with big metadata feature [ 274.914000][ T6629] EXT4-fs (loop0): invalid inodes per group: 0 [ 274.914000][ T6629] [ 274.917082][ T6574] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 274.951301][ T6574] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 274.960374][ T6574] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 275.005459][ T6574] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 275.068226][ T6574] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 275.091482][ T6574] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 275.124494][ T6574] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 275.153961][ T6574] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 275.241699][ T6574] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 275.328619][ T6574] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 275.394314][ T6574] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 275.489138][ T6574] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 275.498643][ T6574] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 275.551480][ T6574] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 275.668314][ T6574] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 275.677479][ T6574] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 275.709426][ T6574] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 275.718011][ T6574] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 275.783889][ T6600] BTRFS error (device loop6): open_ctree failed: -12 [ 275.791513][ T4188] BTRFS: device fsid 7e32c2af-f87a-45a1-bcba-64dea7c56a53 devid 1 transid 8 /dev/loop6 scanned by udevd (4188) [ 275.815814][ T6574] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 275.829555][ T6574] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 275.855253][ T6574] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 275.929474][ T6574] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 275.938180][ T6574] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 275.999371][ T6574] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 276.032711][ T6574] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 276.085274][ T6574] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 276.114505][ T6574] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 276.149267][ T6574] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 276.177386][ T6574] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 276.243080][ T6574] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 276.279248][ T5734] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 276.329207][ T6574] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 276.469485][ T5734] usb 7-1: device descriptor read/64, error -71 [ 276.559473][ T26] audit: type=1800 audit(1749378662.560:6): pid=6574 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.566" name="file1" dev="loop4" ino=1048598 res=0 errno=0 [ 276.749334][ T5734] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 276.999237][ T5734] usb 7-1: device descriptor read/64, error -71 [ 277.119463][ T5734] usb usb7-port1: attempt power cycle [ 277.216690][ T6685] loop1: detected capacity change from 0 to 128 [ 277.481506][ T6695] netlink: 8 bytes leftover after parsing attributes in process `syz.2.593'. [ 277.843072][ T6685] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 278.200522][ T5734] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 278.222117][ T6685] ext4 filesystem being mounted at /126/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 278.289509][ T5734] usb 7-1: device descriptor read/8, error -71 [ 278.342122][ T6700] loop4: detected capacity change from 0 to 512 [ 278.383946][ T6704] fuse: Unknown parameter 'group_i00000000000000000000' [ 278.580852][ T6700] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue. Quota mode: writeback. [ 278.794836][ T6700] ext4 filesystem being mounted at /104/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 281.814065][ T6736] netlink: 71 bytes leftover after parsing attributes in process `syz.2.604'. [ 282.071941][ T6752] fuse: Unknown parameter 'group_i00000000000000000000' [ 282.159463][ T2239] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 282.380193][ T5734] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 282.419570][ T2239] usb 2-1: Using ep0 maxpacket: 8 [ 282.599410][ T5734] usb 7-1: device descriptor read/64, error -71 [ 282.849623][ T2239] usb 2-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 282.858960][ T2239] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 282.869272][ T5734] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 282.919155][ T2239] usb 2-1: Product: syz [ 282.939247][ T2239] usb 2-1: Manufacturer: syz [ 282.959606][ T2239] usb 2-1: SerialNumber: syz [ 282.994521][ T2239] usb 2-1: config 0 descriptor?? [ 283.059267][ T5734] usb 7-1: device descriptor read/64, error -71 [ 283.077321][ T2239] gspca_main: sq930x-2.14.0 probing 2770:930c [ 283.180988][ T5734] usb usb7-port1: attempt power cycle [ 283.373962][ T5741] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 284.419528][ T5734] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 284.469268][ T5741] usb 1-1: Using ep0 maxpacket: 32 [ 284.526905][ T6786] netlink: 71 bytes leftover after parsing attributes in process `syz.2.617'. [ 284.537253][ T5734] usb 7-1: device descriptor read/8, error -71 [ 284.749511][ T5741] usb 1-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 284.768214][ T5741] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 284.829236][ T5734] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 284.888467][ T5741] usb 1-1: Product: syz [ 284.916216][ T5741] usb 1-1: Manufacturer: syz [ 284.921524][ T5734] usb 7-1: device descriptor read/8, error -71 [ 284.988811][ T5741] usb 1-1: SerialNumber: syz [ 285.016243][ T6792] loop1: detected capacity change from 0 to 1764 [ 285.027749][ T5741] usb 1-1: config 0 descriptor?? [ 285.039611][ T5734] usb usb7-port1: unable to enumerate USB device [ 285.390240][ T6774] loop4: detected capacity change from 0 to 262144 [ 285.479264][ T2239] gspca_sq930x: reg_w 0305 fd00 failed -71 [ 285.486124][ T2239] sq930x: probe of 2-1:0.0 failed with error -71 [ 285.659976][ T5741] RobotFuzz Open Source InterFace, OSIF 1-1:0.0: version d4.15 found at bus 001 address 039 [ 285.700218][ T2239] usb 2-1: USB disconnect, device number 17 [ 285.793857][ T6799] fuse: Unknown parameter 'group_id00000000000000000000' [ 285.804529][ T5741] usb 1-1: USB disconnect, device number 39 [ 285.826755][ T6774] BTRFS info (device loop4): using xxhash64 (xxhash64-generic) checksum algorithm [ 285.836125][ T6774] BTRFS info (device loop4): using free space tree [ 285.842832][ T6774] BTRFS info (device loop4): has skinny extents [ 285.849177][ T6774] BTRFS info (device loop4): flagging fs with big metadata feature [ 285.997870][ T6813] fuse: Unknown parameter 'group_id00000000000000000000' [ 287.220872][ T6774] BTRFS error (device loop4): open_ctree failed: -12 [ 287.398462][ T6840] fuse: Unknown parameter 'group_id00000000000000000000' [ 289.246580][ T6883] netlink: 8 bytes leftover after parsing attributes in process `syz.4.634'. [ 289.349378][ T2239] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 289.482734][ T6830] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 289.729263][ T2239] usb 7-1: device descriptor read/64, error -71 [ 289.869129][ T6830] usb 2-1: Using ep0 maxpacket: 32 [ 290.130611][ T2239] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 290.745685][ T6830] usb 2-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 290.758232][ T2239] usb 7-1: device descriptor read/64, error -71 [ 290.765777][ T6830] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 290.789154][ T6830] usb 2-1: Product: syz [ 290.793372][ T6830] usb 2-1: Manufacturer: syz [ 290.797998][ T6830] usb 2-1: SerialNumber: syz [ 290.822047][ T6830] usb 2-1: config 0 descriptor?? [ 290.892581][ T2239] usb usb7-port1: attempt power cycle [ 291.720607][ T6830] RobotFuzz Open Source InterFace, OSIF 2-1:0.0: version d4.15 found at bus 002 address 018 [ 291.907986][ T6830] usb 2-1: USB disconnect, device number 18 [ 292.147018][ T6912] fuse: Bad value for 'user_id' [ 293.707446][ T6934] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 293.750941][ T6934] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 293.830991][ T6934] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 294.189410][ T6949] netlink: 71 bytes leftover after parsing attributes in process `syz.0.652'. [ 294.419221][ T5741] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 294.509507][ T7] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 294.619208][ T5741] usb 7-1: device descriptor read/64, error -71 [ 295.076970][ T6962] fuse: Bad value for 'user_id' [ 295.664933][ T6969] loop1: detected capacity change from 0 to 64 [ 295.679392][ T5741] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 295.769335][ T7] usb 5-1: Using ep0 maxpacket: 32 [ 295.869662][ T5741] usb 7-1: device descriptor read/64, error -71 [ 295.999424][ T5741] usb usb7-port1: attempt power cycle [ 296.049395][ T7] usb 5-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 296.058586][ T7] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 296.097361][ T7] usb 5-1: Product: syz [ 296.107495][ T7] usb 5-1: Manufacturer: syz [ 296.143352][ T7] usb 5-1: SerialNumber: syz [ 296.180732][ T7] usb 5-1: config 0 descriptor?? [ 296.412706][ T5741] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 296.441525][ T7] RobotFuzz Open Source InterFace, OSIF 5-1:0.0: version d4.15 found at bus 005 address 024 [ 296.465738][ T6964] loop0: detected capacity change from 0 to 32768 [ 296.513195][ T6964] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop0 scanned by syz.0.658 (6964) [ 296.529473][ T5741] usb 7-1: device descriptor read/8, error -71 [ 296.565420][ T6964] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 296.779912][ T6964] BTRFS info (device loop0): using free space tree [ 296.786971][ T6964] BTRFS info (device loop0): has skinny extents [ 296.839256][ T5741] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 297.104013][ T7] usb 5-1: USB disconnect, device number 24 [ 297.189246][ T5741] usb 7-1: device descriptor read/8, error -71 [ 297.310220][ T5741] usb usb7-port1: unable to enumerate USB device [ 297.339184][ T6964] BTRFS info (device loop0): enabling ssd optimizations [ 297.364330][ T26] audit: type=1800 audit(1749378683.380:7): pid=6964 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.658" name="file2" dev="loop0" ino=261 res=0 errno=0 [ 297.982094][ T7028] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(10) [ 297.989246][ T7028] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 298.058113][ T7028] vhci_hcd vhci_hcd.0: Device attached [ 298.067714][ T7032] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(13) [ 298.074363][ T7032] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 298.186079][ T7035] vhci_hcd vhci_hcd.0: pdev(4) rhport(2) sockfd(12) [ 298.192706][ T7035] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 298.298538][ T7032] vhci_hcd vhci_hcd.0: Device attached [ 298.298610][ T7035] vhci_hcd vhci_hcd.0: Device attached [ 298.319262][ T5741] usb 41-1: new low-speed USB device number 2 using vhci_hcd [ 298.342313][ T7036] vhci_hcd: connection closed [ 298.342397][ T7033] vhci_hcd: connection closed [ 298.348216][ T7029] vhci_hcd: connection reset by peer [ 298.360344][ T4238] vhci_hcd: stop threads [ 298.380537][ T4238] vhci_hcd: release socket [ 298.381004][ T7021] loop6: detected capacity change from 0 to 32768 [ 298.396311][ T4238] vhci_hcd: disconnect device [ 298.420061][ T4238] vhci_hcd: stop threads [ 298.435871][ T6832] libceph: connect (1)[c::]:6789 error -101 [ 298.439512][ T4238] vhci_hcd: release socket [ 298.447719][ T6832] libceph: mon0 (1)[c::]:6789 connect error [ 298.457885][ T6995] ceph: No mds server is up or the cluster is laggy [ 298.464967][ T4238] vhci_hcd: disconnect device [ 298.500306][ T4238] vhci_hcd: stop threads [ 298.515932][ T4238] vhci_hcd: release socket [ 298.581118][ T4238] vhci_hcd: disconnect device [ 298.667771][ T7021] XFS (loop6): Mounting V5 Filesystem [ 298.912838][ T7021] XFS (loop6): Ending clean mount [ 299.224543][ T5471] XFS (loop6): Unmounting Filesystem [ 299.255157][ T7051] netlink: 28 bytes leftover after parsing attributes in process `syz.1.667'. [ 300.248501][ T7071] fuse: Bad value for 'user_id' [ 300.309418][ T4227] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 300.500015][ T4227] usb 1-1: device descriptor read/64, error -71 [ 300.581784][ T7063] loop1: detected capacity change from 0 to 32768 [ 300.789391][ T4227] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 300.924639][ T7063] ocfs2: Mounting device (7,1) on (node local, slot 0) with writeback data mode. [ 300.989315][ T4227] usb 1-1: device descriptor read/64, error -71 [ 301.110007][ T4227] usb usb1-port1: attempt power cycle [ 301.446328][ T7088] loop6: detected capacity change from 0 to 1024 [ 301.530464][ T7088] EXT4-fs (loop6): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 301.549243][ T4227] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 301.638815][ T7088] EXT4-fs (loop6): mounted filesystem without journal. Opts: errors=remount-ro,min_batch_time=0x0000000000000004,dioread_nolock,. Quota mode: none. [ 301.680809][ T7088] ext4 filesystem being mounted at /49/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 301.709249][ T4227] usb 1-1: device descriptor read/8, error -71 [ 301.710889][ T4170] ocfs2: Unmounting device (7,1) on (node local) [ 301.756011][ T26] audit: type=1800 audit(1749378687.770:8): pid=7088 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.676" name="file1" dev="loop6" ino=15 res=0 errno=0 [ 301.996568][ T4227] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 302.199595][ T4227] usb 1-1: device descriptor read/8, error -71 [ 302.339489][ T4227] usb usb1-port1: unable to enumerate USB device [ 302.615552][ T26] audit: type=1326 audit(1749378688.630:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7103 comm="syz.1.679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e6abd1929 code=0x7ffc0000 [ 302.671759][ T26] audit: type=1326 audit(1749378688.630:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7103 comm="syz.1.679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=100 compat=0 ip=0x7f4e6abd1929 code=0x7ffc0000 [ 302.673322][ T7105] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 302.706945][ T26] audit: type=1326 audit(1749378688.630:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7103 comm="syz.1.679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e6abd1929 code=0x7ffc0000 [ 302.735825][ T26] audit: type=1326 audit(1749378688.630:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7103 comm="syz.1.679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4e6abd0290 code=0x7ffc0000 [ 302.812421][ T26] audit: type=1326 audit(1749378688.630:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7103 comm="syz.1.679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e6abd1929 code=0x7ffc0000 [ 302.847984][ T26] audit: type=1326 audit(1749378688.640:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7103 comm="syz.1.679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4e6abd1929 code=0x7ffc0000 [ 302.870591][ T4178] Bluetooth: Wrong link type (-57) [ 302.881793][ T26] audit: type=1326 audit(1749378688.640:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7103 comm="syz.1.679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e6abd1929 code=0x7ffc0000 [ 302.962212][ T26] audit: type=1326 audit(1749378688.640:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7103 comm="syz.1.679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4e6abd1929 code=0x7ffc0000 [ 302.988980][ T26] audit: type=1326 audit(1749378688.640:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7103 comm="syz.1.679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e6abd1929 code=0x7ffc0000 [ 303.024351][ T26] audit: type=1326 audit(1749378688.640:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7103 comm="syz.1.679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4e6abd0290 code=0x7ffc0000 [ 303.048403][ T7111] block nbd2: NBD_DISCONNECT [ 303.071846][ T7111] block nbd2: Send disconnect failed -22 [ 303.112009][ T7091] block nbd2: Disconnected due to user request. [ 303.118851][ T7091] block nbd2: shutting down sockets [ 303.503758][ T5741] vhci_hcd: vhci_device speed not set [ 303.862783][ T7120] netlink: 28 bytes leftover after parsing attributes in process `syz.4.683'. [ 304.687626][ T7108] loop6: detected capacity change from 0 to 32768 [ 304.807943][ T7125] fuse: Bad value for 'fd' [ 305.658287][ T7129] loop6: detected capacity change from 0 to 2048 [ 305.721284][ T7130] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 305.764444][ T7129] EXT4-fs (loop6): Ignoring removed orlov option [ 305.798485][ T7130] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 305.806831][ T7130] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 305.819144][ T7129] EXT4-fs (loop6): Ignoring removed nomblk_io_submit option [ 305.962116][ T7129] EXT4-fs (loop6): mounted filesystem without journal. Opts: orlov,acl,nomblk_io_submit,barrier,norecovery,barrier=0x0000000000000100,usrquota,nobarrier,,errors=continue. Quota mode: writeback. [ 306.683075][ T5325] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 307.419250][ T5325] usb 7-1: device descriptor read/64, error -71 [ 307.609235][ T7137] EXT4-fs error (device loop6): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 2: invalid block bitmap [ 307.825372][ T7163] fuse: Bad value for 'fd' [ 308.444994][ T5325] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 308.687013][ T7173] netlink: 28 bytes leftover after parsing attributes in process `syz.0.696'. [ 308.689185][ T5325] usb 7-1: device descriptor read/64, error -71 [ 309.557896][ T7154] loop1: detected capacity change from 0 to 32768 [ 309.609315][ T5325] usb usb7-port1: attempt power cycle [ 309.672914][ T7154] JBD2: Ignoring recovery information on journal [ 309.920246][ T7154] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 309.957008][ T7168] loop4: detected capacity change from 0 to 32768 [ 310.805496][ T7187] loop0: detected capacity change from 0 to 4096 [ 311.025988][ T7168] XFS (loop4): Mounting V5 Filesystem [ 311.217865][ T4170] ocfs2: Unmounting device (7,1) on (node local) [ 311.229215][ T7168] XFS (loop4): Ending clean mount [ 311.375615][ T7168] XFS (loop4): Quotacheck needed: Please wait. [ 311.478399][ T7213] fuse: Bad value for 'fd' [ 311.788623][ T26] kauditd_printk_skb: 19 callbacks suppressed [ 311.788640][ T26] audit: type=1800 audit(1749378697.800:38): pid=7214 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.699" name="file1" dev="loop0" ino=34 res=0 errno=0 [ 311.809736][ T7168] XFS (loop4): Quotacheck: Done. [ 311.884938][ T4176] XFS (loop4): Unmounting Filesystem [ 312.237348][ T7226] loop1: detected capacity change from 0 to 512 [ 312.438904][ T7228] ALSA: mixer_oss: invalid OSS volume '' [ 313.344021][ T7226] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 313.420797][ T7223] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 313.818499][ T7223] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 313.840283][ T7226] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.703: bg 0: block 254: padding at end of block bitmap is not set [ 313.861897][ T7226] EXT4-fs (loop1): Remounting filesystem read-only [ 313.868915][ T7226] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2825: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 313.882912][ T7226] EXT4-fs (loop1): 1 truncate cleaned up [ 313.888575][ T7226] EXT4-fs (loop1): mounted filesystem without journal. Opts: noblock_validity,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,user_xattr,errors=remount-ro,quota,. Quota mode: writeback. [ 313.934185][ T7223] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 314.059239][ T4227] Bluetooth: hci5: command 0x0406 tx timeout [ 314.436821][ T7239] loop0: detected capacity change from 0 to 2048 [ 314.535539][ T7239] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 315.122278][ T7260] fuse: Bad value for 'fd' [ 315.249231][ T4225] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 315.949199][ T4225] usb 5-1: device descriptor read/64, error -71 [ 316.226712][ T7249] loop1: detected capacity change from 0 to 32768 [ 316.374373][ T7280] ALSA: mixer_oss: invalid OSS volume '' [ 316.407416][ T4225] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 317.243372][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.249759][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.390748][ T4221] XFS (loop1): filesystem is marked as having an internal log; do not specify logdev on the mount command line. [ 317.499242][ T4225] usb 5-1: device descriptor read/64, error -71 [ 317.632219][ T4225] usb usb5-port1: attempt power cycle [ 318.049219][ T4225] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 318.299238][ T4225] usb 5-1: device not accepting address 27, error -71 [ 319.052869][ T7309] fuse: Bad value for 'fd' [ 321.013975][ T7339] binder: 7338:7339 ioctl c0306201 2000000003c0 returned -14 [ 321.439271][ T23] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 321.638698][ T7365] fuse: Bad value for 'fd' [ 321.669226][ T23] usb 3-1: device descriptor read/64, error -71 [ 322.036822][ T23] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 322.131495][ T7377] loop1: detected capacity change from 0 to 1024 [ 322.211915][ T7378] loop0: detected capacity change from 0 to 512 [ 322.931280][ T7378] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 322.949199][ T23] usb 3-1: device descriptor read/64, error -71 [ 323.028301][ T7378] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.743: bg 0: block 254: padding at end of block bitmap is not set [ 323.043637][ T7378] EXT4-fs (loop0): Remounting filesystem read-only [ 323.050906][ T7378] EXT4-fs (loop0): 1 truncate cleaned up [ 323.056595][ T7378] EXT4-fs (loop0): mounted filesystem without journal. Opts: noblock_validity,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,user_xattr,errors=remount-ro,quota,. Quota mode: writeback. [ 323.079561][ T23] usb usb3-port1: attempt power cycle [ 323.534979][ T23] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 324.208810][ T23] usb 3-1: device descriptor read/8, error -71 [ 324.929226][ T2239] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 325.079219][ T23] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 325.147039][ T7414] fuse: Invalid rootmode [ 325.179138][ T2239] usb 1-1: Using ep0 maxpacket: 32 [ 325.359861][ T23] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 325.399484][ T23] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 325.438671][ T7423] loop4: detected capacity change from 0 to 512 [ 325.445316][ T23] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 325.479120][ T23] usb 3-1: New USB device found, idVendor=20d6, idProduct=cb17, bcdDevice= 0.00 [ 325.493483][ T2239] usb 1-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 325.520617][ T2239] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 325.539389][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 325.554207][ T2239] usb 1-1: Product: syz [ 325.563784][ T2239] usb 1-1: Manufacturer: syz [ 325.583165][ T7423] EXT4-fs (loop4): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000001000,inode_readahead_blks=0x0000000008000000,quota,,errors=continue. Quota mode: writeback. [ 325.609313][ T7423] ext4 filesystem being mounted at /129/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 325.623806][ T23] usb 3-1: config 0 descriptor?? [ 325.632956][ T2239] usb 1-1: SerialNumber: syz [ 325.676908][ T2239] usb 1-1: config 0 descriptor?? [ 325.754154][ T23] usbhid 3-1:0.0: can't add hid device: -22 [ 325.792994][ T7423] EXT4-fs error (device loop4): ext4_do_update_inode:5203: inode #2: comm syz.4.755: corrupted inode contents [ 325.817272][ T23] usbhid: probe of 3-1:0.0 failed with error -22 [ 325.895860][ T7423] EXT4-fs error (device loop4): ext4_dirty_inode:6039: inode #2: comm syz.4.755: mark_inode_dirty error [ 325.919382][ T7423] EXT4-fs error (device loop4): ext4_do_update_inode:5203: inode #2: comm syz.4.755: corrupted inode contents [ 325.943204][ T7423] EXT4-fs error (device loop4): __ext4_ext_dirty:183: inode #2: comm syz.4.755: mark_inode_dirty error [ 326.753732][ T5325] usb 3-1: USB disconnect, device number 34 [ 326.793186][ T2239] RobotFuzz Open Source InterFace, OSIF 1-1:0.0: version d4.15 found at bus 001 address 044 [ 326.983369][ T23] usb 1-1: USB disconnect, device number 44 [ 327.044890][ T4227] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 327.250518][ T4227] usb 7-1: device descriptor read/64, error -71 [ 327.639362][ T4227] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 327.889230][ T4227] usb 7-1: device descriptor read/64, error -71 [ 327.990988][ T7462] fuse: Invalid rootmode [ 328.029361][ T4227] usb usb7-port1: attempt power cycle [ 328.245935][ T7470] loop0: detected capacity change from 0 to 4096 [ 328.440105][ T7470] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 329.137474][ T7470] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 4096) [ 329.159122][ T4227] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 329.349720][ T7482] netlink: 'syz.6.770': attribute type 1 has an invalid length. [ 329.439127][ T4227] usb 7-1: device not accepting address 22, error -71 [ 329.483677][ T4188] udevd[4188]: incorrect nilfs2 checksum on /dev/loop0 [ 329.659229][ T7483] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 331.637713][ T7511] netlink: 8 bytes leftover after parsing attributes in process `syz.4.777'. [ 331.646627][ T7511] netlink: 8 bytes leftover after parsing attributes in process `syz.4.777'. [ 332.319326][ T2239] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 332.569414][ T2239] usb 7-1: device descriptor read/64, error -71 [ 332.569433][ T26] audit: type=1326 audit(1749378718.510:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7522 comm="syz.4.782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f448590c929 code=0x7ffc0000 [ 332.609307][ T7527] netlink: 16 bytes leftover after parsing attributes in process `syz.4.782'. [ 332.788443][ T26] audit: type=1326 audit(1749378718.740:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7522 comm="syz.4.782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f448590c929 code=0x7ffc0000 [ 333.011121][ T2239] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 333.112628][ T26] audit: type=1326 audit(1749378718.830:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7522 comm="syz.4.782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f448590c929 code=0x7ffc0000 [ 333.134738][ C0] vkms_vblank_simulate: vblank timer overrun [ 333.176580][ T26] audit: type=1326 audit(1749378718.870:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7522 comm="syz.4.782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f448590c929 code=0x7ffc0000 [ 333.198743][ C0] vkms_vblank_simulate: vblank timer overrun [ 333.229227][ T2239] usb 7-1: device descriptor read/64, error -71 [ 333.350091][ T2239] usb usb7-port1: attempt power cycle [ 333.443769][ T7545] fuse: Unknown parameter '00000000000000000000' [ 333.634185][ T7513] loop1: detected capacity change from 0 to 32768 [ 334.969241][ T2239] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 335.109322][ T2239] usb 7-1: device descriptor read/8, error -71 [ 335.227676][ T4187] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by udevd (4187) [ 335.589263][ T5741] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 335.869343][ T5741] usb 3-1: Using ep0 maxpacket: 32 [ 335.989407][ T5741] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 336.069150][ T5741] usb 3-1: config 0 has no interfaces? [ 336.113871][ T5741] usb 3-1: New USB device found, idVendor=0079, idProduct=1801, bcdDevice= 0.00 [ 336.213733][ T5741] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 336.270636][ T5741] usb 3-1: config 0 descriptor?? [ 337.253118][ T7592] fuse: Unknown parameter '00000000000000000000' [ 337.431350][ T5741] usb 3-1: USB disconnect, device number 35 [ 337.499184][ T4221] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 337.739232][ T4221] usb 5-1: Using ep0 maxpacket: 32 [ 338.039718][ T4221] usb 5-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 338.115182][ T4221] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 338.299017][ T4221] usb 5-1: Product: syz [ 338.374821][ T4221] usb 5-1: Manufacturer: syz [ 338.414040][ T4221] usb 5-1: SerialNumber: syz [ 338.468428][ T4221] usb 5-1: config 0 descriptor?? [ 338.551784][ T4221] usb 5-1: can't set config #0, error -71 [ 339.197890][ T4221] usb 5-1: USB disconnect, device number 29 [ 339.459196][ T2239] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 339.632408][ T7597] loop1: detected capacity change from 0 to 40427 [ 339.659358][ T2239] usb 1-1: device descriptor read/64, error -71 [ 339.873208][ T7597] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 339.934409][ T7597] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 340.709346][ T2239] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 340.711767][ T7597] F2FS-fs (loop1): Failed to start F2FS issue_checkpoint_thread (-12) [ 340.961262][ T2239] usb 1-1: device descriptor read/64, error -71 [ 341.101162][ T2239] usb usb1-port1: attempt power cycle [ 341.129489][ T7628] fuse: Unknown parameter '00000000000000000000' [ 341.200976][ T7631] loop1: detected capacity change from 0 to 128 [ 341.519272][ T2239] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 341.850051][ T2239] usb 1-1: device descriptor read/8, error -71 [ 342.959373][ T6830] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 343.389812][ T6830] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 343.390386][ T6830] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 343.390519][ T6830] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 343.504089][ T6830] usb 5-1: config 0 descriptor?? [ 343.594483][ T6830] pwc: Askey VC010 type 2 USB webcam detected. [ 343.760310][ T7] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 343.999223][ T7] usb 2-1: Using ep0 maxpacket: 32 [ 344.023697][ T6830] pwc: recv_control_msg error -32 req 02 val 2b00 [ 344.109259][ T4221] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 344.280059][ T7] usb 2-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 344.315987][ T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 344.396241][ T7] usb 2-1: Product: syz [ 344.443909][ T7] usb 2-1: Manufacturer: syz [ 344.489691][ T4221] usb 3-1: New USB device found, idVendor=093a, idProduct=050f, bcdDevice=c2.b7 [ 344.504385][ T7] usb 2-1: SerialNumber: syz [ 344.533682][ T4221] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 344.678080][ T7] usb 2-1: config 0 descriptor?? [ 344.737462][ T4221] gspca_main: mars-2.14.0 probing 093a:050f [ 344.818776][ T6830] pwc: recv_control_msg error -32 req 02 val 2700 [ 344.859426][ T6830] pwc: recv_control_msg error -32 req 02 val 2c00 [ 344.888503][ T7673] fuse: Unknown parameter 'user00000000000000000000' [ 344.899246][ T6830] pwc: recv_control_msg error -32 req 04 val 1000 [ 344.970097][ T7] RobotFuzz Open Source InterFace, OSIF 2-1:0.0: version d4.15 found at bus 002 address 019 [ 345.105714][ T6830] pwc: recv_control_msg error -32 req 04 val 1300 [ 345.192315][ T4221] usb 2-1: USB disconnect, device number 19 [ 345.481571][ T7665] netlink: 20 bytes leftover after parsing attributes in process `syz.2.820'. [ 345.490547][ T7665] netlink: 4 bytes leftover after parsing attributes in process `syz.2.820'. [ 345.501161][ T6830] pwc: recv_control_msg error -32 req 04 val 1400 [ 345.532814][ T2239] usb 3-1: USB disconnect, device number 36 [ 345.559319][ T6830] pwc: recv_control_msg error -32 req 02 val 2000 [ 345.583685][ T7] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 345.599393][ T6830] pwc: recv_control_msg error -32 req 02 val 2100 [ 345.789405][ T7] usb 7-1: device descriptor read/64, error -71 [ 346.097557][ T7] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 346.329417][ T7] usb 7-1: device descriptor read/64, error -71 [ 346.460299][ T7] usb usb7-port1: attempt power cycle [ 346.539193][ T6830] pwc: recv_control_msg error -71 req 02 val 2500 [ 346.566181][ T6830] pwc: recv_control_msg error -71 req 02 val 2400 [ 346.599444][ T6830] pwc: recv_control_msg error -71 req 02 val 2600 [ 346.622173][ T6830] pwc: recv_control_msg error -71 req 02 val 2900 [ 346.843299][ T6830] pwc: recv_control_msg error -71 req 02 val 2800 [ 346.890357][ T7] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 346.892268][ T6830] pwc: recv_control_msg error -71 req 04 val 1100 [ 346.929187][ T6830] pwc: recv_control_msg error -71 req 04 val 1200 [ 347.314895][ T6830] pwc: Registered as video103. [ 348.057231][ T6830] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input7 [ 348.103012][ T6830] usb 5-1: USB disconnect, device number 30 [ 348.129477][ T7706] fuse: Unknown parameter 'user00000000000000000000' [ 348.139445][ T7] usb 7-1: device descriptor read/8, error -71 [ 348.140160][ T7710] loop0: detected capacity change from 0 to 256 [ 348.237378][ T7710] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 348.268179][ T7710] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512 [ 348.290110][ T7710] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 348.297799][ T7710] UDF-fs: Scanning with blocksize 512 failed [ 348.306312][ T7714] block device autoloading is deprecated. It will be removed in Linux 5.19 [ 348.359603][ T7710] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 348.396278][ T7710] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 348.452822][ T7724] netlink: 'syz.1.841': attribute type 1 has an invalid length. [ 348.509194][ T5741] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 348.769134][ T5741] usb 3-1: Using ep0 maxpacket: 32 [ 348.872212][ T7740] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 348.899889][ T7740] CIFS: Unable to determine destination address [ 348.935535][ T7741] fuse: Unknown parameter 'user00000000000000000000' [ 349.232714][ T5741] usb 3-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 349.250148][ T5741] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 349.258412][ T5741] usb 3-1: Product: syz [ 349.262810][ T5741] usb 3-1: Manufacturer: syz [ 349.267552][ T5741] usb 3-1: SerialNumber: syz [ 349.299866][ T5741] usb 3-1: config 0 descriptor?? [ 350.261419][ T5741] RobotFuzz Open Source InterFace, OSIF 3-1:0.0: version d4.15 found at bus 003 address 037 [ 350.417838][ T7759] netlink: 72 bytes leftover after parsing attributes in process `syz.0.854'. [ 350.467285][ T5741] usb 3-1: USB disconnect, device number 37 [ 350.502807][ T5734] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 350.729138][ T23] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 350.729246][ T5734] usb 5-1: device descriptor read/64, error -71 [ 350.933723][ T7764] netlink: 87 bytes leftover after parsing attributes in process `syz.6.857'. [ 350.985789][ T7766] fuse: Unknown parameter 'user_i00000000000000000000' [ 351.019179][ T5734] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 351.219202][ T5734] usb 5-1: device descriptor read/64, error -71 [ 351.655434][ T23] usb 1-1: New USB device found, idVendor=093a, idProduct=050f, bcdDevice=c2.b7 [ 351.707237][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 351.805141][ T23] usb 1-1: config 0 descriptor?? [ 351.939272][ T23] gspca_main: mars-2.14.0 probing 093a:050f [ 352.327759][ T23] usb 1-1: USB disconnect, device number 49 [ 353.249500][ T5734] usb usb5-port1: attempt power cycle [ 354.206902][ T7787] loop0: detected capacity change from 0 to 1024 [ 355.245041][ T7797] netlink: 87 bytes leftover after parsing attributes in process `syz.4.869'. [ 355.308329][ T7804] xt_connbytes: Forcing CT accounting to be enabled [ 355.342243][ T7802] fuse: Unknown parameter 'user_i00000000000000000000' [ 355.350476][ T7804] Cannot find set identified by id 0 to match [ 356.365338][ T7800] hfsplus: inconsistency in B*Tree (9,1,255,1,0) [ 356.379984][ T7800] hfsplus: xattr searching failed [ 356.431994][ T26] audit: type=1800 audit(1749378742.420:43): pid=7800 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.865" name="file1" dev="loop0" ino=20 res=0 errno=0 [ 356.889836][ T7] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 357.067564][ T7819] netlink: 72 bytes leftover after parsing attributes in process `syz.4.875'. [ 357.099343][ T7] usb 7-1: device descriptor read/64, error -71 [ 357.369208][ T4221] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 357.377537][ T7] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 357.589287][ T7] usb 7-1: device descriptor read/64, error -71 [ 357.719675][ T7] usb usb7-port1: attempt power cycle [ 357.759479][ T4221] usb 5-1: New USB device found, idVendor=093a, idProduct=050f, bcdDevice=c2.b7 [ 357.786321][ T4221] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 357.843723][ T4221] usb 5-1: config 0 descriptor?? [ 357.901382][ T4221] gspca_main: mars-2.14.0 probing 093a:050f [ 358.129281][ T7] usb 7-1: new high-speed USB device number 34 using dummy_hcd [ 358.183790][ T4221] usb 5-1: USB disconnect, device number 34 [ 358.217770][ T144] hfsplus: b-tree write err: -5, ino 4 [ 358.269630][ T7] usb 7-1: device descriptor read/8, error -71 [ 358.539223][ T7] usb 7-1: new high-speed USB device number 35 using dummy_hcd [ 358.646142][ T7] usb 7-1: device descriptor read/8, error -71 [ 359.405924][ T7837] netlink: 28 bytes leftover after parsing attributes in process `syz.2.882'. [ 359.415952][ T7839] netlink: 28 bytes leftover after parsing attributes in process `syz.2.882'. [ 359.441087][ T7849] fuse: Unknown parameter 'user_i00000000000000000000' [ 359.479508][ T7] usb usb7-port1: unable to enumerate USB device [ 359.486646][ T7844] netlink: 87 bytes leftover after parsing attributes in process `syz.0.883'. [ 359.529453][ T7850] loop1: detected capacity change from 0 to 1764 [ 361.212605][ T7873] loop1: detected capacity change from 0 to 4096 [ 361.541325][ T26] audit: type=1800 audit(1749378747.560:44): pid=7884 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.890" name="file1" dev="loop1" ino=34 res=0 errno=0 [ 361.550545][ T7878] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 361.738829][ T7889] netlink: 72 bytes leftover after parsing attributes in process `syz.6.895'. [ 361.932171][ T7878] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 362.289746][ T5734] usb 7-1: new high-speed USB device number 36 using dummy_hcd [ 362.695762][ T7878] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 362.777932][ T7896] fuse: Unknown parameter 'user_id00000000000000000000' [ 362.879355][ T5734] usb 7-1: New USB device found, idVendor=093a, idProduct=050f, bcdDevice=c2.b7 [ 362.896911][ T5734] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 362.983403][ T5734] usb 7-1: config 0 descriptor?? [ 363.052154][ T5734] gspca_main: mars-2.14.0 probing 093a:050f [ 363.257657][ T7897] netlink: 79 bytes leftover after parsing attributes in process `syz.0.897'. [ 363.269860][ T5734] usb 7-1: USB disconnect, device number 36 [ 363.276496][ T4188] udevd[4188]: setting mode of /dev/video103 to 020660 failed: No such file or directory [ 363.315717][ T4188] udevd[4188]: setting owner of /dev/video103 to uid=0, gid=28 failed: No such file or directory [ 363.379345][ T7] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 364.348094][ T7] usb 2-1: device descriptor read/64, error -71 [ 364.608203][ T7908] loop0: detected capacity change from 0 to 40427 [ 364.667516][ T7908] F2FS-fs (loop0): invalid crc value [ 364.684559][ T7908] F2FS-fs (loop0): Found nat_bits in checkpoint [ 364.726081][ T7908] F2FS-fs (loop0): Start checkpoint disabled! [ 364.755278][ T7908] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 364.779271][ T7] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 364.989519][ T7] usb 2-1: device descriptor read/64, error -71 [ 365.059170][ T5734] usb 7-1: new high-speed USB device number 37 using dummy_hcd [ 365.949383][ T7] usb usb2-port1: attempt power cycle [ 365.988243][ T4238] attempt to access beyond end of device [ 365.988243][ T4238] loop0: rw=1, want=45104, limit=40427 [ 366.029118][ T4238] attempt to access beyond end of device [ 366.029118][ T4238] loop0: rw=2049, want=40968, limit=40427 [ 366.049215][ T5734] usb 7-1: Using ep0 maxpacket: 32 [ 366.199714][ T5734] usb 7-1: config 0 interface 0 has no altsetting 0 [ 366.369587][ T5734] usb 7-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 366.404370][ T5734] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 366.431809][ T7918] loop1: detected capacity change from 0 to 2048 [ 366.449327][ T5734] usb 7-1: Product: syz [ 366.458477][ T5734] usb 7-1: Manufacturer: syz [ 366.475236][ T5734] usb 7-1: SerialNumber: syz [ 366.502133][ T5734] usb 7-1: config 0 descriptor?? [ 368.154223][ T7924] netlink: 256 bytes leftover after parsing attributes in process `syz.0.902'. [ 368.163519][ T7924] netlink: 24 bytes leftover after parsing attributes in process `syz.0.902'. [ 370.339530][ T4227] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 370.409885][ T6835] usb 7-1: USB disconnect, device number 37 [ 370.599343][ T4227] usb 1-1: Using ep0 maxpacket: 8 [ 370.757688][ T7926] loop4: detected capacity change from 0 to 1024 [ 370.898902][ T7926] EXT4-fs (loop4): Ignoring removed oldalloc option [ 370.951666][ T7926] EXT4-fs (loop4): Ignoring removed bh option [ 371.055990][ T7926] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 371.623217][ T7935] fuse: Unknown parameter 'user_id00000000000000000000' [ 371.732582][ T7926] EXT4-fs (loop4): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,nombcache,data_err=ignore,mb_optimize_scan=0x0000000000000001,oldalloc,grpquota,noload,jqfmt=vfsold,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 371.798253][ T7930] loop1: detected capacity change from 0 to 32768 [ 371.829242][ T4227] usb 1-1: unable to read config index 0 descriptor/all [ 371.842392][ T4227] usb 1-1: can't read configurations, error -71 [ 371.873895][ T7930] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.906 (7930) [ 372.026659][ T7930] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 372.039392][ T7930] BTRFS info (device loop1): using free space tree [ 372.046042][ T7930] BTRFS info (device loop1): has skinny extents [ 372.301112][ T7947] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:3876: comm syz.4.905: Allocating blocks 433-513 which overlap fs metadata [ 372.332752][ T7925] EXT4-fs (loop4): pa ffff88807421bd20: logic 0, phys. 193, len 20 [ 372.341664][ T7925] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:4893: group 0, free 1, pa_free 6 [ 373.073211][ T4256] BTRFS warning (device loop1): checksum verify failed on 5292032 wanted 0xd5bc16bf7502c3940107ef92895f3d2e7ffb09000000000000d39b0a5d2e0772 found 0xd5bc16bf7502c3940107ef92895f3d2e7f4c766f4585e38c0ad39b0a5d2e0772 level 0 [ 373.103651][ T7930] BTRFS warning (device loop1): failed to read root (objectid=9): -5 [ 373.572296][ T7978] netlink: 8 bytes leftover after parsing attributes in process `syz.6.915'. [ 373.598672][ T4227] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 373.656421][ T7978] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -4 [ 373.665765][ T7978] platform regulatory.0: Direct firmware load for regulatory.db failed with error -4 [ 373.675350][ T7978] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 373.709358][ T26] audit: type=1800 audit(1749378759.670:45): pid=7978 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.915" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 374.059410][ T4227] usb 1-1: device descriptor read/64, error -71 [ 374.221584][ T7985] loop4: detected capacity change from 0 to 2048 [ 374.628219][ T4227] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 375.639778][ T7930] BTRFS error (device loop1): open_ctree failed: -22 [ 375.739164][ T4227] usb 1-1: device descriptor read/64, error -71 [ 375.859992][ T4227] usb usb1-port1: attempt power cycle [ 376.005341][ T8000] fuse: Unknown parameter 'user_id00000000000000000000' [ 377.331494][ T5948] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 378.429124][ T5948] usb 3-1: Using ep0 maxpacket: 32 [ 378.543711][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.857868][ T5948] usb 3-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 378.867113][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.906976][ T5948] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 378.928594][ T5948] usb 3-1: Product: syz [ 378.935626][ T5948] usb 3-1: Manufacturer: syz [ 378.944254][ T5948] usb 3-1: SerialNumber: syz [ 378.965790][ T5948] usb 3-1: config 0 descriptor?? [ 379.196789][ T8041] loop0: detected capacity change from 0 to 2048 [ 379.237237][ T8043] fuse: Bad value for 'fd' [ 379.358646][ T8038] loop1: detected capacity change from 0 to 40427 [ 379.370294][ T5948] RobotFuzz Open Source InterFace, OSIF 3-1:0.0: version d4.15 found at bus 003 address 038 [ 379.403811][ T8038] F2FS-fs (loop1): invalid crc value [ 379.587384][ T5948] usb 3-1: USB disconnect, device number 38 [ 379.649248][ T5741] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 381.009172][ T5741] usb 5-1: device descriptor read/64, error -71 [ 381.151556][ T8038] F2FS-fs (loop1): Found nat_bits in checkpoint [ 381.259440][ T8038] F2FS-fs (loop1): Start checkpoint disabled! [ 381.311845][ T8038] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 383.399307][ T5741] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 385.587625][ T8069] netlink: 256 bytes leftover after parsing attributes in process `syz.6.939'. [ 385.596763][ T8069] netlink: 24 bytes leftover after parsing attributes in process `syz.6.939'. [ 386.512543][ T8072] netlink: 8 bytes leftover after parsing attributes in process `syz.4.944'. [ 386.629134][ T5948] usb 7-1: new high-speed USB device number 38 using dummy_hcd [ 386.644873][ T8072] netlink: 20 bytes leftover after parsing attributes in process `syz.4.944'. [ 386.909226][ T5948] usb 7-1: Using ep0 maxpacket: 8 [ 387.029388][ T5948] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 387.096729][ T5948] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 387.409363][ T5948] usb 7-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=fd.5b [ 387.491583][ T5948] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 387.635509][ T5948] usb 7-1: Product: syz [ 387.707790][ T4255] attempt to access beyond end of device [ 387.707790][ T4255] loop1: rw=1, want=45104, limit=40427 [ 387.719995][ T5948] usb 7-1: Manufacturer: syz [ 387.782120][ T5948] usb 7-1: SerialNumber: syz [ 387.916945][ T8078] fuse: Bad value for 'fd' [ 387.930314][ T5948] usb 7-1: config 0 descriptor?? [ 387.937419][ T4255] attempt to access beyond end of device [ 387.937419][ T4255] loop1: rw=2049, want=40968, limit=40427 [ 387.996585][ T5948] usb 7-1: can't set config #0, error -71 [ 388.069409][ T5948] usb 7-1: USB disconnect, device number 38 [ 389.017272][ T8076] loop0: detected capacity change from 0 to 256 [ 389.024047][ T5734] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 389.083257][ T8076] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x89cb6648, utbl_chksum : 0xe619d30d) [ 389.299281][ T5734] usb 3-1: Using ep0 maxpacket: 32 [ 389.639120][ T6830] usb 7-1: new high-speed USB device number 39 using dummy_hcd [ 389.643484][ T5734] usb 3-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 389.674581][ T5734] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 389.695761][ T5734] usb 3-1: Product: syz [ 389.708079][ T5734] usb 3-1: Manufacturer: syz [ 389.738223][ T5734] usb 3-1: SerialNumber: syz [ 389.778194][ T5734] usb 3-1: config 0 descriptor?? [ 389.829100][ T6830] usb 7-1: device descriptor read/64, error -71 [ 390.292337][ T8101] sg_write: data in/out 2509/126 bytes for SCSI command 0x6-- guessing data in; [ 390.292337][ T8101] program syz.1.945 not setting count and/or reply_len properly [ 390.482828][ T5734] RobotFuzz Open Source InterFace, OSIF 3-1:0.0: version d4.15 found at bus 003 address 039 [ 390.529098][ T6830] usb 7-1: new high-speed USB device number 40 using dummy_hcd [ 390.710492][ T5734] usb 3-1: USB disconnect, device number 39 [ 390.729135][ T6830] usb 7-1: device descriptor read/64, error -71 [ 391.025841][ T8108] loop4: detected capacity change from 0 to 40427 [ 391.083931][ T8112] loop1: detected capacity change from 0 to 1024 [ 391.222493][ T6830] usb usb7-port1: attempt power cycle [ 391.243964][ T8108] F2FS-fs (loop4): invalid crc value [ 391.291520][ T8108] F2FS-fs (loop4): Found nat_bits in checkpoint [ 391.333989][ T8108] F2FS-fs (loop4): Start checkpoint disabled! [ 391.355460][ T8108] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 391.438446][ T4255] hfsplus: b-tree write err: -5, ino 4 [ 391.639583][ T6830] usb 7-1: new high-speed USB device number 41 using dummy_hcd [ 391.770162][ T6830] usb 7-1: device descriptor read/8, error -71 [ 392.099168][ T6830] usb 7-1: new high-speed USB device number 42 using dummy_hcd [ 392.459318][ T6830] usb 7-1: device descriptor read/8, error -71 [ 392.595582][ T8126] netlink: 256 bytes leftover after parsing attributes in process `syz.2.959'. [ 392.605294][ T8126] netlink: 24 bytes leftover after parsing attributes in process `syz.2.959'. [ 392.889156][ T5734] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 393.192044][ T5734] usb 3-1: Using ep0 maxpacket: 8 [ 393.197992][ T1324] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 393.322926][ T1324] Bluetooth: hci3: Injecting HCI hardware error event [ 393.331193][ T5734] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 393.430885][ T5734] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 393.505096][ T4178] Bluetooth: hci3: hardware error 0x00 [ 393.819796][ T5734] usb 3-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=fd.5b [ 393.838460][ T6830] usb usb7-port1: unable to enumerate USB device [ 393.906027][ T5734] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 394.065461][ T5734] usb 3-1: Product: syz [ 394.148888][ T5734] usb 3-1: Manufacturer: syz [ 394.257833][ T5734] usb 3-1: SerialNumber: syz [ 394.316247][ T9] attempt to access beyond end of device [ 394.316247][ T9] loop4: rw=1, want=45104, limit=40427 [ 394.528561][ T5734] usb 3-1: config 0 descriptor?? [ 394.658935][ T9] attempt to access beyond end of device [ 394.658935][ T9] loop4: rw=2049, want=40968, limit=40427 [ 396.860248][ T6830] usb 3-1: USB disconnect, device number 40 [ 397.742148][ T8152] netlink: 68 bytes leftover after parsing attributes in process `syz.0.969'. [ 398.319721][ T8157] netlink: 71 bytes leftover after parsing attributes in process `syz.2.970'. [ 398.635869][ T6832] usb 7-1: new high-speed USB device number 43 using dummy_hcd [ 398.969582][ T6832] usb 7-1: device descriptor read/64, error -71 [ 399.361772][ T8155] loop0: detected capacity change from 0 to 32768 [ 399.439196][ T6832] usb 7-1: new high-speed USB device number 44 using dummy_hcd [ 399.465686][ T8181] loop4: detected capacity change from 0 to 4096 [ 399.504353][ T8181] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 399.559253][ T8181] UDF-fs: Scanning with blocksize 512 failed [ 399.614463][ T8181] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 399.640246][ T6832] usb 7-1: device descriptor read/64, error -71 [ 399.668395][ T277] BUG: spinlock bad magic on CPU#1, jfsCommit/277 [ 399.674869][ T277] lock: 0xffff88805d4c00a8, .magic: ffffffff, .owner: тс|c/-1886109632, .owner_cpu: 512 [ 399.684802][ T277] CPU: 1 PID: 277 Comm: jfsCommit Not tainted 5.15.185-syzkaller #0 [ 399.692803][ T277] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 399.702893][ T277] Call Trace: [ 399.706230][ T277] [ 399.709183][ T277] dump_stack_lvl+0x168/0x230 [ 399.713888][ T277] ? load_image+0x3b0/0x3b0 [ 399.718416][ T277] ? show_regs_print_info+0x20/0x20 [ 399.723646][ T277] ? spin_dump+0x101/0x1a0 [ 399.728099][ T277] do_raw_spin_lock+0x1c2/0x280 [ 399.732974][ T277] ? read_lock_is_recursive+0x10/0x10 [ 399.738377][ T277] ? __rwlock_init+0x140/0x140 [ 399.743167][ T277] ? _raw_spin_lock_irqsave+0x7f/0xf0 [ 399.748566][ T277] ? lockdep_hardirqs_off+0x70/0x100 [ 399.753880][ T277] _raw_spin_lock_irqsave+0xb0/0xf0 [ 399.759116][ T277] ? _raw_spin_lock+0x40/0x40 [ 399.763826][ T277] __wake_up+0xed/0x180 [ 399.768015][ T277] ? remove_wait_queue+0x120/0x120 [ 399.773162][ T277] ? dbFree+0x4c9/0x640 [ 399.777356][ T277] release_metapage+0x154/0xe10 [ 399.782264][ T277] ? txFreeMap+0xb15/0xde0 [ 399.786719][ T277] ? __mark_inode_dirty+0x383/0xc60 [ 399.791945][ T277] xtTruncate+0xe39/0x2c60 [ 399.796404][ T277] ? xtInitRoot+0x160/0x160 [ 399.800946][ T277] ? invalidate_inode_page+0x360/0x360 [ 399.806432][ T277] ? __lock_acquire+0x7c60/0x7c60 [ 399.811478][ T277] ? do_raw_spin_lock+0x11d/0x280 [ 399.816630][ T277] ? memset+0x1e/0x40 [ 399.820630][ T277] ? __dquot_initialize+0x211/0xcb0 [ 399.825860][ T277] jfs_free_zero_link+0x337/0x490 [ 399.830996][ T277] ? jfs_write_failed+0x190/0x190 [ 399.836037][ T277] ? sb_clear_inode_writeback+0x360/0x360 [ 399.841771][ T277] ? do_raw_spin_lock+0x11d/0x280 [ 399.846821][ T277] ? bit_waitqueue+0x30/0x30 [ 399.851435][ T277] jfs_evict_inode+0x359/0x430 [ 399.856225][ T277] ? evict+0x47f/0x870 [ 399.860313][ T277] ? jfs_write_inode+0x220/0x220 [ 399.865268][ T277] evict+0x485/0x870 [ 399.869187][ T277] ? __lock_acquire+0x7c60/0x7c60 [ 399.874240][ T277] ? proc_nr_inodes+0x320/0x320 [ 399.879118][ T277] ? do_raw_spin_unlock+0x11d/0x230 [ 399.884345][ T277] ? _raw_spin_unlock+0x24/0x40 [ 399.889229][ T277] ? iput+0x706/0x8a0 [ 399.893252][ T277] jfs_lazycommit+0x437/0xb20 [ 399.897981][ T277] ? txFreelock+0x5a0/0x5a0 [ 399.902502][ T277] ? _raw_spin_unlock_irqrestore+0x82/0x100 [ 399.908423][ T277] ? sched_dynamic_update+0x210/0x210 [ 399.913832][ T277] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 399.919756][ T277] ? __kthread_parkme+0x157/0x1b0 [ 399.924815][ T277] kthread+0x436/0x520 [ 399.928906][ T277] ? txFreelock+0x5a0/0x5a0 [ 399.933580][ T277] ? kthread_blkcg+0xd0/0xd0 [ 399.938192][ T277] ret_from_fork+0x1f/0x30 [ 399.942633][ T277] [ 399.945685][ T277] ================================================================================ [ 399.954973][ T277] UBSAN: array-index-out-of-bounds in kernel/locking/qspinlock.c:130:9 [ 399.963245][ T277] index 8847 is out of range for type 'unsigned long[8]' [ 399.970297][ T277] CPU: 1 PID: 277 Comm: jfsCommit Not tainted 5.15.185-syzkaller #0 [ 399.978297][ T277] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 399.988378][ T277] Call Trace: [ 399.991682][ T277] [ 399.994630][ T277] dump_stack_lvl+0x168/0x230 [ 399.999333][ T277] ? show_regs_print_info+0x20/0x20 [ 400.004558][ T277] ? load_image+0x3b0/0x3b0 [ 400.009091][ T277] ? show_trace_log_lvl+0x4fb/0x550 [ 400.014324][ T277] ubsan_epilogue+0xa/0x30 [ 400.018764][ T277] __ubsan_handle_out_of_bounds+0xdf/0xf0 [ 400.024596][ T277] ? ret_from_fork+0x1f/0x30 [ 400.029213][ T277] __pv_queued_spin_lock_slowpath+0x919/0x9c0 [ 400.035306][ T277] ? __pv_queued_spin_unlock_slowpath+0x290/0x290 [ 400.041846][ T277] queued_spin_lock_slowpath+0x43/0x50 [ 400.047348][ T277] do_raw_spin_lock+0x217/0x280 [ 400.052231][ T277] ? __rwlock_init+0x140/0x140 [ 400.057022][ T277] ? _raw_spin_lock_irqsave+0x7f/0xf0 [ 400.062421][ T277] ? lockdep_hardirqs_off+0x70/0x100 [ 400.067734][ T277] _raw_spin_lock_irqsave+0xb0/0xf0 [ 400.072964][ T277] ? _raw_spin_lock+0x40/0x40 [ 400.077673][ T277] __wake_up+0xed/0x180 [ 400.081861][ T277] ? remove_wait_queue+0x120/0x120 [ 400.087002][ T277] ? dbFree+0x4c9/0x640 [ 400.091183][ T277] release_metapage+0x154/0xe10 [ 400.096055][ T277] ? txFreeMap+0xb15/0xde0 [ 400.100501][ T277] ? __mark_inode_dirty+0x383/0xc60 [ 400.105721][ T277] xtTruncate+0xe39/0x2c60 [ 400.110170][ T277] ? xtInitRoot+0x160/0x160 [ 400.114788][ T277] ? invalidate_inode_page+0x360/0x360 [ 400.120268][ T277] ? __lock_acquire+0x7c60/0x7c60 [ 400.125329][ T277] ? do_raw_spin_lock+0x11d/0x280 [ 400.130381][ T277] ? memset+0x1e/0x40 [ 400.134391][ T277] ? __dquot_initialize+0x211/0xcb0 [ 400.139625][ T277] jfs_free_zero_link+0x337/0x490 [ 400.144680][ T277] ? jfs_write_failed+0x190/0x190 [ 400.149727][ T277] ? sb_clear_inode_writeback+0x360/0x360 [ 400.155468][ T277] ? do_raw_spin_lock+0x11d/0x280 [ 400.160523][ T277] ? bit_waitqueue+0x30/0x30 [ 400.165228][ T277] jfs_evict_inode+0x359/0x430 [ 400.170012][ T277] ? evict+0x47f/0x870 [ 400.174103][ T277] ? jfs_write_inode+0x220/0x220 [ 400.179082][ T277] evict+0x485/0x870 [ 400.183008][ T277] ? __lock_acquire+0x7c60/0x7c60 [ 400.188064][ T277] ? proc_nr_inodes+0x320/0x320 [ 400.192920][ T277] ? do_raw_spin_unlock+0x11d/0x230 [ 400.198124][ T277] ? _raw_spin_unlock+0x24/0x40 [ 400.202980][ T277] ? iput+0x706/0x8a0 [ 400.206989][ T277] jfs_lazycommit+0x437/0xb20 [ 400.211668][ T277] ? txFreelock+0x5a0/0x5a0 [ 400.216266][ T277] ? _raw_spin_unlock_irqrestore+0x82/0x100 [ 400.222175][ T277] ? sched_dynamic_update+0x210/0x210 [ 400.227560][ T277] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 400.233458][ T277] ? __kthread_parkme+0x157/0x1b0 [ 400.238489][ T277] kthread+0x436/0x520 [ 400.242556][ T277] ? txFreelock+0x5a0/0x5a0 [ 400.247053][ T277] ? kthread_blkcg+0xd0/0xd0 [ 400.251644][ T277] ret_from_fork+0x1f/0x30 [ 400.256061][ T277] [ 400.259076][ T277] ================================================================================ [ 400.268363][ T277] Kernel panic - not syncing: UBSAN: panic_on_warn set ... [ 400.275779][ T277] CPU: 1 PID: 277 Comm: jfsCommit Not tainted 5.15.185-syzkaller #0 [ 400.283761][ T277] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 400.293828][ T277] Call Trace: [ 400.297107][ T277] [ 400.300037][ T277] dump_stack_lvl+0x168/0x230 [ 400.304919][ T277] ? show_regs_print_info+0x20/0x20 [ 400.310151][ T277] ? load_image+0x3b0/0x3b0 [ 400.314660][ T277] panic+0x2c9/0x7f0 [ 400.318577][ T277] ? bpf_jit_dump+0xd0/0xd0 [ 400.323082][ T277] ? show_trace_log_lvl+0x4fb/0x550 [ 400.328283][ T277] check_panic_on_warn+0x80/0xa0 [ 400.333254][ T277] __ubsan_handle_out_of_bounds+0xdf/0xf0 [ 400.338977][ T277] ? ret_from_fork+0x1f/0x30 [ 400.343579][ T277] __pv_queued_spin_lock_slowpath+0x919/0x9c0 [ 400.349650][ T277] ? __pv_queued_spin_unlock_slowpath+0x290/0x290 [ 400.356067][ T277] queued_spin_lock_slowpath+0x43/0x50 [ 400.361522][ T277] do_raw_spin_lock+0x217/0x280 [ 400.366381][ T277] ? __rwlock_init+0x140/0x140 [ 400.371150][ T277] ? _raw_spin_lock_irqsave+0x7f/0xf0 [ 400.376522][ T277] ? lockdep_hardirqs_off+0x70/0x100 [ 400.381816][ T277] _raw_spin_lock_irqsave+0xb0/0xf0 [ 400.387083][ T277] ? _raw_spin_lock+0x40/0x40 [ 400.391774][ T277] __wake_up+0xed/0x180 [ 400.395943][ T277] ? remove_wait_queue+0x120/0x120 [ 400.401163][ T277] ? dbFree+0x4c9/0x640 [ 400.405352][ T277] release_metapage+0x154/0xe10 [ 400.410213][ T277] ? txFreeMap+0xb15/0xde0 [ 400.414644][ T277] ? __mark_inode_dirty+0x383/0xc60 [ 400.419848][ T277] xtTruncate+0xe39/0x2c60 [ 400.424276][ T277] ? xtInitRoot+0x160/0x160 [ 400.428789][ T277] ? invalidate_inode_page+0x360/0x360 [ 400.434330][ T277] ? __lock_acquire+0x7c60/0x7c60 [ 400.439359][ T277] ? do_raw_spin_lock+0x11d/0x280 [ 400.444383][ T277] ? memset+0x1e/0x40 [ 400.448365][ T277] ? __dquot_initialize+0x211/0xcb0 [ 400.453565][ T277] jfs_free_zero_link+0x337/0x490 [ 400.458680][ T277] ? jfs_write_failed+0x190/0x190 [ 400.463820][ T277] ? sb_clear_inode_writeback+0x360/0x360 [ 400.469535][ T277] ? do_raw_spin_lock+0x11d/0x280 [ 400.474559][ T277] ? bit_waitqueue+0x30/0x30 [ 400.479240][ T277] jfs_evict_inode+0x359/0x430 [ 400.484010][ T277] ? evict+0x47f/0x870 [ 400.488076][ T277] ? jfs_write_inode+0x220/0x220 [ 400.493010][ T277] evict+0x485/0x870 [ 400.496899][ T277] ? __lock_acquire+0x7c60/0x7c60 [ 400.501930][ T277] ? proc_nr_inodes+0x320/0x320 [ 400.506785][ T277] ? do_raw_spin_unlock+0x11d/0x230 [ 400.511988][ T277] ? _raw_spin_unlock+0x24/0x40 [ 400.516860][ T277] ? iput+0x706/0x8a0 [ 400.520846][ T277] jfs_lazycommit+0x437/0xb20 [ 400.525527][ T277] ? txFreelock+0x5a0/0x5a0 [ 400.530030][ T277] ? _raw_spin_unlock_irqrestore+0x82/0x100 [ 400.535925][ T277] ? sched_dynamic_update+0x210/0x210 [ 400.541308][ T277] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 400.547202][ T277] ? __kthread_parkme+0x157/0x1b0 [ 400.552233][ T277] kthread+0x436/0x520 [ 400.556297][ T277] ? txFreelock+0x5a0/0x5a0 [ 400.560847][ T277] ? kthread_blkcg+0xd0/0xd0 [ 400.565434][ T277] ret_from_fork+0x1f/0x30 [ 400.569889][ T277] [ 400.573231][ T277] Kernel Offset: disabled [ 400.577590][ T277] Rebooting in 86400 seconds..