last executing test programs: 3.316573441s ago: executing program 3 (id=212): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@ipv6_newrule={0x44, 0x20, 0x1, 0x0, 0x0, {0xa, 0x80, 0x14, 0x0, 0x7, 0x0, 0x0, 0x3}, [@FRA_SRC={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, @FRA_DST={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x44}}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private2}]}}}]}, 0x5c}}, 0x0) 2.96019174s ago: executing program 1 (id=215): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000280)="89", 0x1}], 0x1}, 0x240000d5) recvfrom(r0, 0x0, 0xfffffddb, 0x40000023, 0x0, 0x0) 2.769628656s ago: executing program 1 (id=218): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x0, &(0x7f00000002c0), 0x4, 0x252, &(0x7f0000000600)="$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") r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0) openat(r0, &(0x7f00000000c0)='./file0\x00', 0x6a1c2, 0x50) 2.769421536s ago: executing program 3 (id=219): r0 = syz_open_dev$loop(&(0x7f0000000100), 0x8, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) 2.21690053s ago: executing program 3 (id=223): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x6ee80, 0x0) io_setup(0x1, &(0x7f00000004c0)=0x0) io_submit(r1, 0x1, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0x1f, 0x0, 0x0, r0, 0x0, 0x2000, 0x1000000, 0x0, 0x10}]) 2.030308415s ago: executing program 1 (id=224): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_read_part_table(0x409b, &(0x7f0000004200)="$eJzsz7FNw1AQBuDfDg6OEhRGIAyAKKnSIgZIgdgFEGxCmQGomYBVaOmM/IgFlihBIPR9xfm/e2dbL/yq5yG0qcYn7VfrkyQvTyXO+3K0yv1N13Wfd25Hb3fLpM4iyelDncyy3NudzJPN9jvvAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/F1NX6q+TEu/v5sfltTPJjkfli+uhjSsXa9ztkjavr+bpFm3Zbw6yUEJ9XT4fNKOflxvtj95LwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgv5iNuuojHs8fL/tnk1SvXVHm77Fr3tifVxsAoRgKoOWXPMIOJBjGQLEXgk3YEkd4lWjcOaqi7c1956vEuc3NUCKWNfapLnTfkHrct0e+S/f4VyUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOBhBw4EAAAAAID8XxuhqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqCjtwQAIAAAAg6P/rdgQKAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMBIAQAA//8VLSXh") bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={r0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) 1.504584368s ago: executing program 3 (id=228): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='devpts\x00', 0x0, 0x0) mount$binder(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0xe2ca6, &(0x7f0000000040)=ANY=[@ANYBLOB='max=', @ANYRESOCT]) 1.35849283s ago: executing program 3 (id=231): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x10, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000440)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.240292979s ago: executing program 2 (id=232): r0 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000880)=@newlink={0x40, 0x10, 0x439, 0x70bd2a, 0xffffffea, {0x0, 0x0, 0xe403, 0x0, 0x3, 0x610c3}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @remote}, @IFLA_IPTUN_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2d}}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x4008040) 1.135898328s ago: executing program 3 (id=233): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000000000020ef17856000000000000109022400014000000009040008210300000009210000080122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, &(0x7f00000000c0)={0x40, 0x5, 0xcf, {0xcf, 0x11, "43d5be25f64524587fc4a61f838fbe781b0501a2f2ac2674622a7ebdf2c90658cfa8544cf37f77417c90f38edcc4a7e2ed55c5bcdad3bbf6850a24432657c46348132520f1b269586f3fc8ecdfd5729feb5fb62925f661c5a5e67910cea75efda29c0f37e6028ca48c5883d68aaebefdc6ab609f495e550dcfff315c392e9d6b65d95a505adfbc2dedf56f55a3039ac5c6bad9cb657d4e88f0bc18b90d13d5e5e2d37ffe28ec4a6ff358a5abd2e0abe4eeed32174b3827149c6fab55e2f5e7d8d303c34115c6421cb70fdc00f6"}}, &(0x7f00000001c0)={0x0, 0x3, 0xe4, @string={0xe4, 0x3, "4a93423c8b02dbdb78c5cbfd2ee01b8306d5df0df6d81b20198a0b72ea143e0d2c051aa76ba6ef4e47001ff3160987222ca1b1711bcc5c071c617be31f63a3cae509b044356d620221be82981839e0a9886b3b05122f97699ab310e6c6253de57bbdbd473c241d932ac6723d223c3c208f21f61173492e9c99c6b35fbb99719126679aea078f77ab1a80d2be7d8e0179aed4c875f192e4ff1ae3da06ca8fd2b5ce9b143b0041e9a65cc74d642b8d1b4a83aa18d87dd2d31e6138658595f5b3dc6db8787a0e08cb7ccfe16ad64e841f4e6de0b5a3042191f85e31e66487c4a6052254"}}, &(0x7f00000002c0)={0x0, 0x22, 0x6, {[@main=@item_012={0x0, 0x0, 0xa}, @global=@item_4={0x3, 0x1, 0x0, "fb4f721c"}]}}, 0x0}, 0x0) 1.050299315s ago: executing program 0 (id=234): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000200), 0x4000000004002, 0x0) r1 = dup(r0) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1000000000000112, 0x2000, 0x0, 0x3) 900.331407ms ago: executing program 2 (id=235): r0 = syz_open_dev$media(&(0x7f0000000000), 0x100000000, 0x200) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x94) mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESOCT=r1]) 845.078841ms ago: executing program 0 (id=236): ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000006c0)={0x0, 0x7fff, 0x0, {0x0, 0x1}, {0x4a, 0x2}, @period={0x5d, 0xa370, 0x0, 0x7f, 0x2, {0x1, 0x3, 0x4, 0x2}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x12d8) 685.516824ms ago: executing program 1 (id=237): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1e00, 0x21}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x12, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x150d0, 0x10000}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r0}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) 685.423904ms ago: executing program 2 (id=238): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000019000000", 0x8) 679.534955ms ago: executing program 0 (id=245): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xe) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/149, 0x95}], 0x1) 536.498527ms ago: executing program 2 (id=239): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000018000180140002006e657464657673696d3000000000000008001000000100000800130000000000080012"], 0x44}}, 0x0) 484.502071ms ago: executing program 0 (id=240): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x2000000, 0x12, r0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000069000010000000004000051118010000696c6c2500000000002020207b1af8ff00000000bfa1000000000000070100fef7ffffffb702000008000000b703000064000000850000001000000095"], &(0x7f0000000040)='syzkaller\x00', 0x9, 0xfcc, &(0x7f0000001e00)=""/4044, 0x100, 0x28, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xbd}, 0x94) 257.228039ms ago: executing program 2 (id=241): r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140), 0x20000, 0x0) openat$capi20(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) read$FUSE(r0, &(0x7f0000003000)={0x2020}, 0x2020) 248.18656ms ago: executing program 0 (id=242): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010029bd7000fcdbdf250900000008000300", @ANYBLOB="05000800070000000c000601030000000000000008000100010000000500080013000000"], 0x50}, 0x1, 0x0, 0x0, 0x10}, 0x44044) 231.392571ms ago: executing program 1 (id=243): r0 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0) mq_notify(r0, &(0x7f0000000200)={0x0, 0x3c}) readv(r0, &(0x7f0000000000)=[{&(0x7f0000000100)=""/251}], 0x59) 411.6µs ago: executing program 2 (id=244): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'das16m1\x00', [0x4f27, 0x7, 0x4d34a271, 0x2, 0x1, 0xcc7, 0x44, 0x1, 0xe, 0x4, 0x4, 0x1, 0x1, 0x1, 0x6, 0x10000105, 0x0, 0x1a451, 0x2, 0x3fff7fff, 0x89, 0x10, 0x1, 0x20001e58, 0x8001, 0xe69, 0x3c, 0x1, 0x6, 0x0, 0xfffffff8]}) 161.51µs ago: executing program 0 (id=246): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) shutdown(r1, 0x2) 0s ago: executing program 1 (id=247): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000180)={'mpc624\x00', [0x4f27, 0x6, 0x2, 0x3, 0x2, 0xcc5, 0xf, 0x7, 0xa, 0xe8aa, 0x2, 0x1, 0xfffffffd, 0x1, 0x6, 0x101, 0x0, 0x1a446, 0x3, 0x40000002, 0x8, 0xcaa7, 0x0, 0x20001e58, 0x81, 0xe6b, 0x3c, 0x6, 0x2, 0x1, 0xfffffff8]}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.89' (ED25519) to the list of known hosts. [ 84.070408][ T5778] cgroup: Unknown subsys name 'net' [ 84.242022][ T5778] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 85.959687][ T5778] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 87.684010][ T5797] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 87.692731][ T5797] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 87.701169][ T5797] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 87.710709][ T5797] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 87.718743][ T5797] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 87.726611][ T5797] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 87.735819][ T5797] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 87.743759][ T5797] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 87.752381][ T5797] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 87.760586][ T5797] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 87.763110][ T5801] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 87.768301][ T5797] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 87.783628][ T5797] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 87.792045][ T5803] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 87.801129][ T5801] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 87.809279][ T5801] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 87.826073][ T5803] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 87.835031][ T5803] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 87.842793][ T5803] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 87.851282][ T5803] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 87.860315][ T50] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 87.871380][ T50] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 87.883655][ T5805] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 87.903960][ T5805] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 88.639190][ T5788] chnl_net:caif_netlink_parms(): no params data found [ 88.658240][ T5792] chnl_net:caif_netlink_parms(): no params data found [ 88.701753][ T5789] chnl_net:caif_netlink_parms(): no params data found [ 88.745063][ T5790] chnl_net:caif_netlink_parms(): no params data found [ 88.924263][ T5788] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.931472][ T5788] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.939815][ T5788] bridge_slave_0: entered allmulticast mode [ 88.951323][ T5788] bridge_slave_0: entered promiscuous mode [ 89.020419][ T5788] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.028100][ T5788] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.035916][ T5788] bridge_slave_1: entered allmulticast mode [ 89.044735][ T5788] bridge_slave_1: entered promiscuous mode [ 89.078909][ T5792] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.086292][ T5792] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.093796][ T5792] bridge_slave_0: entered allmulticast mode [ 89.100948][ T5792] bridge_slave_0: entered promiscuous mode [ 89.109989][ T5792] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.118281][ T5792] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.125650][ T5792] bridge_slave_1: entered allmulticast mode [ 89.133372][ T5792] bridge_slave_1: entered promiscuous mode [ 89.140281][ T5789] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.147740][ T5789] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.155124][ T5789] bridge_slave_0: entered allmulticast mode [ 89.162289][ T5789] bridge_slave_0: entered promiscuous mode [ 89.183436][ T5790] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.190663][ T5790] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.198237][ T5790] bridge_slave_0: entered allmulticast mode [ 89.205657][ T5790] bridge_slave_0: entered promiscuous mode [ 89.228242][ T5789] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.235792][ T5789] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.243574][ T5789] bridge_slave_1: entered allmulticast mode [ 89.251087][ T5789] bridge_slave_1: entered promiscuous mode [ 89.260929][ T5788] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.273934][ T5788] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.283950][ T5790] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.291293][ T5790] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.299488][ T5790] bridge_slave_1: entered allmulticast mode [ 89.307260][ T5790] bridge_slave_1: entered promiscuous mode [ 89.411954][ T5792] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.428509][ T5789] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.443397][ T5788] team0: Port device team_slave_0 added [ 89.452174][ T5790] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.464433][ T5792] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.478788][ T5789] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.489955][ T5788] team0: Port device team_slave_1 added [ 89.501664][ T5790] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.623782][ T5788] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.631055][ T5788] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.657595][ T5788] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.674359][ T5790] team0: Port device team_slave_0 added [ 89.681222][ T5788] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.688982][ T5788] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.715594][ T5788] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.730286][ T5792] team0: Port device team_slave_0 added [ 89.740249][ T5792] team0: Port device team_slave_1 added [ 89.749581][ T5789] team0: Port device team_slave_0 added [ 89.757483][ T5790] team0: Port device team_slave_1 added [ 89.815568][ T5789] team0: Port device team_slave_1 added [ 89.837432][ T5792] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.845763][ T5792] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.873548][ T5805] Bluetooth: hci0: command tx timeout [ 89.879108][ T5792] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.894170][ T5790] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.901282][ T5790] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.927978][ T5790] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.939367][ T5798] Bluetooth: hci2: command tx timeout [ 89.942287][ T5790] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.945438][ T5798] Bluetooth: hci1: command tx timeout [ 89.958129][ T5790] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.958306][ T5805] Bluetooth: hci3: command tx timeout [ 89.990312][ T5790] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.030681][ T5792] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.038140][ T5792] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.064170][ T5792] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.102114][ T5789] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.109684][ T5789] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.136754][ T5789] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.168975][ T5788] hsr_slave_0: entered promiscuous mode [ 90.175670][ T5788] hsr_slave_1: entered promiscuous mode [ 90.185056][ T5789] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.193198][ T5789] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.219349][ T5789] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.276429][ T5790] hsr_slave_0: entered promiscuous mode [ 90.284035][ T5790] hsr_slave_1: entered promiscuous mode [ 90.290555][ T5790] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 90.299499][ T5790] Cannot create hsr debugfs directory [ 90.332677][ T5792] hsr_slave_0: entered promiscuous mode [ 90.340125][ T5792] hsr_slave_1: entered promiscuous mode [ 90.347217][ T5792] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 90.355022][ T5792] Cannot create hsr debugfs directory [ 90.495809][ T5789] hsr_slave_0: entered promiscuous mode [ 90.504620][ T5789] hsr_slave_1: entered promiscuous mode [ 90.511316][ T5789] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 90.519179][ T5789] Cannot create hsr debugfs directory [ 90.955955][ T5790] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 90.979160][ T5790] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 90.991473][ T5790] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 91.013489][ T5790] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 91.077293][ T5789] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 91.099829][ T5789] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 91.132918][ T5789] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 91.152023][ T5789] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 91.173680][ T5792] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 91.195462][ T5792] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 91.245451][ T5792] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 91.262322][ T5792] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 91.357539][ T5788] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 91.368724][ T5788] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 91.381545][ T5788] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 91.395001][ T5788] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 91.565355][ T5790] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.649178][ T5790] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.689940][ T5788] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.705905][ T5789] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.718070][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.726350][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.768310][ T5788] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.781633][ T5792] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.801332][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.809054][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.835818][ T2960] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.843336][ T2960] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.883625][ T2960] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.891146][ T2960] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.905996][ T5789] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.942622][ T5805] Bluetooth: hci0: command tx timeout [ 91.974911][ T5792] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.985261][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.992603][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.004944][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.012158][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.019875][ T5805] Bluetooth: hci3: command tx timeout [ 92.019922][ T5798] Bluetooth: hci1: command tx timeout [ 92.025433][ T5804] Bluetooth: hci2: command tx timeout [ 92.081848][ T2960] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.089096][ T2960] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.101733][ T2960] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.108954][ T2960] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.217944][ T5789] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 92.740680][ T5788] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.774702][ T5790] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.861959][ T5789] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.892248][ T5788] veth0_vlan: entered promiscuous mode [ 92.913534][ T5792] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.966612][ T5788] veth1_vlan: entered promiscuous mode [ 92.978332][ T5790] veth0_vlan: entered promiscuous mode [ 93.013903][ T5790] veth1_vlan: entered promiscuous mode [ 93.084339][ T5789] veth0_vlan: entered promiscuous mode [ 93.119650][ T5789] veth1_vlan: entered promiscuous mode [ 93.157974][ T5792] veth0_vlan: entered promiscuous mode [ 93.168964][ T5790] veth0_macvtap: entered promiscuous mode [ 93.185514][ T5788] veth0_macvtap: entered promiscuous mode [ 93.204550][ T5788] veth1_macvtap: entered promiscuous mode [ 93.217958][ T5790] veth1_macvtap: entered promiscuous mode [ 93.240747][ T5792] veth1_vlan: entered promiscuous mode [ 93.280334][ T5789] veth0_macvtap: entered promiscuous mode [ 93.298965][ T5788] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.316281][ T5790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.327870][ T5790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.340121][ T5790] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.354152][ T5790] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.365007][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.377152][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.389610][ T5788] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.398606][ T5789] veth1_macvtap: entered promiscuous mode [ 93.424192][ T5790] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.433757][ T5790] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.444004][ T5790] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.455453][ T5790] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.489492][ T5788] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.500460][ T5788] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.514944][ T5788] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.523954][ T5788] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.569006][ T5792] veth0_macvtap: entered promiscuous mode [ 93.615886][ T5792] veth1_macvtap: entered promiscuous mode [ 93.629055][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.640375][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.651949][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.664421][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.676182][ T5789] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.688474][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.699932][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.711143][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.722152][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.736152][ T5789] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.811313][ T5789] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.828390][ T5789] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.837564][ T5789] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.846501][ T5789] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.903469][ T3462] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.911705][ T3462] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.944984][ T5792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.956426][ T5792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.967372][ T5792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.978669][ T5792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.988781][ T5792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.999803][ T5792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.013354][ T5798] Bluetooth: hci0: command tx timeout [ 94.019397][ T5792] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.049510][ T4462] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.051643][ T5792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.069138][ T5792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.079396][ T5792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.080023][ T4462] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.090063][ T5792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.090080][ T5792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.090094][ T5792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.092502][ T5792] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.121021][ T5798] Bluetooth: hci1: command tx timeout [ 94.130672][ T5805] Bluetooth: hci3: command tx timeout [ 94.142939][ T5798] Bluetooth: hci2: command tx timeout [ 94.197721][ T5792] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.206843][ T5792] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.215703][ T5792] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.224733][ T5792] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.264484][ T4462] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.272721][ T4462] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.370294][ T4462] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.391616][ T4462] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.471954][ T3462] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.509097][ T3462] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.542576][ T4462] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.550589][ T4462] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.597116][ T2960] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.643842][ T2960] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.775868][ T2960] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.803101][ T2960] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.490414][ T5904] syz.0.10[5904]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 95.606513][ T5906] syz.1.11 (5906) used obsolete PPPIOCDETACH ioctl [ 96.099005][ T5798] Bluetooth: hci0: command tx timeout [ 96.148334][ T5922] loop1: detected capacity change from 0 to 64 [ 96.172779][ T5798] Bluetooth: hci2: command tx timeout [ 96.174577][ T5805] Bluetooth: hci3: command tx timeout [ 96.180657][ T5798] Bluetooth: hci1: command tx timeout [ 96.292577][ T5920] loop3: detected capacity change from 0 to 4096 [ 96.353166][ T5920] ntfs: (device loop3): ntfs_is_extended_system_file(): Non-resident file name. You should run chkdsk. [ 96.419496][ T5920] ntfs: (device loop3): ntfs_read_locked_inode(): $DATA attribute is missing. [ 96.481054][ T5920] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0x1 as bad. Run chkdsk. [ 96.520698][ T5920] ntfs: (device loop3): load_system_files(): Failed to load $MFTMirr. Mounting read-only. Run ntfsfix and/or chkdsk. [ 96.641727][ T5920] ntfs: volume version 3.1. [ 96.718321][ T5904] loop0: detected capacity change from 0 to 32768 [ 97.483250][ T9] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 97.694904][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 97.718614][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 97.738925][ T9] usb 2-1: New USB device found, idVendor=0458, idProduct=4018, bcdDevice= 0.00 [ 97.748808][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.783936][ T9] usb 2-1: config 0 descriptor?? [ 97.934053][ T5944] loop3: detected capacity change from 0 to 32768 [ 97.938649][ T785] cfg80211: failed to load regulatory.db [ 98.236231][ T9] kye 0003:0458:4018.0001: unbalanced collection at end of report description [ 98.280247][ T9] kye 0003:0458:4018.0001: parse failed [ 98.309229][ T9] kye: probe of 0003:0458:4018.0001 failed with error -22 [ 98.448912][ T5956] loop0: detected capacity change from 0 to 1024 [ 98.460171][ T27] usb 2-1: USB disconnect, device number 2 [ 98.912762][ T5964] netlink: 'syz.0.39': attribute type 5 has an invalid length. [ 98.921759][ T5964] netlink: 24 bytes leftover after parsing attributes in process `syz.0.39'. [ 99.450904][ T5980] loop1: detected capacity change from 0 to 1024 [ 99.571463][ T5980] hfsplus: bad catalog entry type [ 99.649948][ T42] hfsplus: b-tree write err: -5, ino 4 [ 99.854617][ T5988] netlink: 200 bytes leftover after parsing attributes in process `syz.1.51'. [ 99.928951][ T5970] loop3: detected capacity change from 0 to 32768 [ 100.769680][ T6007] loop0: detected capacity change from 0 to 8192 [ 100.825166][ T6007] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 100.903518][ T6007] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 100.913579][ T6007] REISERFS (device loop0): using ordered data mode [ 100.920677][ T6007] reiserfs: using flush barriers [ 100.967017][ T6007] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 100.973887][ T6012] loop3: detected capacity change from 0 to 4096 [ 100.998576][ T6015] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 101.020037][ T6007] REISERFS (device loop0): checking transaction log (loop0) [ 101.073009][ T6007] REISERFS (device loop0): Using r5 hash to sort names [ 101.104389][ T6015] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 101.111051][ T6007] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 101.163736][ T6017] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 101.250742][ T6012] NILFS error (device loop3): nilfs_find_entry: dir 2 size 34359742464 exceeds block count 1 [ 101.315066][ T6012] Remounting filesystem read-only [ 101.431967][ T6021] loop2: detected capacity change from 0 to 736 [ 102.222820][ T6019] loop1: detected capacity change from 0 to 32768 [ 102.240549][ T6019] ======================================================= [ 102.240549][ T6019] WARNING: The mand mount option has been deprecated and [ 102.240549][ T6019] and is ignored by this kernel. Remove the mand [ 102.240549][ T6019] option from the mount to silence this warning. [ 102.240549][ T6019] ======================================================= [ 102.323808][ T6019] ocfs2: Slot 0 on device (7,1) was already allocated to this node! [ 102.342630][ T785] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 102.425008][ T6019] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 102.501605][ T6035] loop2: detected capacity change from 0 to 1024 [ 102.524912][ T6035] hfsplus: bad catalog entry type [ 102.556431][ T785] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 102.570381][ T785] usb 1-1: New USB device found, idVendor=057e, idProduct=200e, bcdDevice= 0.00 [ 102.602469][ T785] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.653152][ T785] usb 1-1: config 0 descriptor?? [ 102.658918][ T3462] hfsplus: b-tree write err: -5, ino 4 [ 102.708396][ T6023] loop3: detected capacity change from 0 to 32768 [ 102.811472][ T5792] ocfs2: Unmounting device (7,1) on (node local) [ 103.112595][ T9] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 103.169343][ T785] nintendo 0003:057E:200E.0002: hidraw0: USB HID v80.00 Device [HID 057e:200e] on usb-dummy_hcd.0-1/input0 [ 103.343468][ T785] nintendo 0003:057E:200E.0002: Failed charging grip handshake [ 103.351611][ T785] nintendo 0003:057E:200E.0002: Failed to initialize controller; ret=-110 [ 103.410611][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 103.448077][ T6052] netlink: 'syz.3.80': attribute type 2 has an invalid length. [ 103.448220][ T9] usb 3-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 103.483436][ T785] nintendo 0003:057E:200E.0002: probe - fail = -110 [ 103.490419][ T785] nintendo: probe of 0003:057E:200E.0002 failed with error -110 [ 103.539420][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.557068][ T785] usb 1-1: USB disconnect, device number 2 [ 103.594043][ T9] usb 3-1: config 0 descriptor?? [ 103.622938][ T6037] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 103.928869][ T6060] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 104.078190][ T9] uclogic 0003:28BD:0042.0003: interface is invalid, ignoring [ 104.240024][ T6071] loop0: detected capacity change from 0 to 256 [ 104.285029][ T23] usb 3-1: USB disconnect, device number 2 [ 104.365428][ T785] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 104.382291][ T6071] FAT-fs (loop0): Directory bread(block 64) failed [ 104.389446][ T6071] FAT-fs (loop0): Directory bread(block 65) failed [ 104.399715][ T6071] FAT-fs (loop0): Directory bread(block 66) failed [ 104.406978][ T6071] FAT-fs (loop0): Directory bread(block 67) failed [ 104.414077][ T6071] FAT-fs (loop0): Directory bread(block 68) failed [ 104.422254][ T6071] FAT-fs (loop0): Directory bread(block 69) failed [ 104.435572][ T6071] FAT-fs (loop0): Directory bread(block 70) failed [ 104.443214][ T6071] FAT-fs (loop0): Directory bread(block 71) failed [ 104.451382][ T6071] FAT-fs (loop0): Directory bread(block 72) failed [ 104.482814][ T6071] FAT-fs (loop0): Directory bread(block 73) failed [ 104.516716][ T6075] netlink: 'syz.1.91': attribute type 2 has an invalid length. [ 104.557435][ T6071] syz.0.89: attempt to access beyond end of device [ 104.557435][ T6071] loop0: rw=524288, sector=1192, nr_sectors = 4 limit=256 [ 104.583383][ T785] usb 4-1: Using ep0 maxpacket: 32 [ 104.613438][ T6071] syz.0.89: attempt to access beyond end of device [ 104.613438][ T6071] loop0: rw=0, sector=1192, nr_sectors = 4 limit=256 [ 104.627806][ T785] usb 4-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 104.627844][ T785] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.627864][ T785] usb 4-1: Product: syz [ 104.627880][ T785] usb 4-1: Manufacturer: syz [ 104.627895][ T785] usb 4-1: SerialNumber: syz [ 104.631352][ T785] usb 4-1: config 0 descriptor?? [ 104.642716][ T28] audit: type=1800 audit(1756229061.030:2): pid=6071 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.89" name="file1" dev="loop0" ino=1048592 res=0 errno=0 [ 104.699909][ T6071] syz.0.89: attempt to access beyond end of device [ 104.699909][ T6071] loop0: rw=0, sector=1192, nr_sectors = 4 limit=256 [ 104.704476][ T785] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 105.233007][ T785] gspca_ov534_9: reg_w failed -110 [ 105.372738][ T6088] loop0: detected capacity change from 0 to 4096 [ 105.502714][ T6088] ntfs: volume version 3.1. [ 105.528412][ T6088] ntfs: (device loop0): ntfs_lookup_inode_by_name(): Corrupt directory. Aborting lookup. [ 105.572369][ T6088] ntfs: (device loop0): load_and_init_quota(): Failed to find inode number for $Quota. [ 105.608830][ T6088] ntfs: (device loop0): load_system_files(): Failed to load $Quota. Mounting read-only. Run chkdsk. [ 105.648720][ T6094] netlink: 'syz.1.99': attribute type 21 has an invalid length. [ 105.657438][ T6088] ntfs: (device loop0): ntfs_lookup_inode_by_name(): Corrupt directory. Aborting lookup. [ 105.678181][ T6088] ntfs: (device loop0): load_and_init_usnjrnl(): Failed to find inode number for $UsnJrnl. [ 105.711980][ T6088] ntfs: (device loop0): load_system_files(): Failed to load $UsnJrnl. Will not be able to remount read-write. Run chkdsk. [ 105.762471][ T785] gspca_ov534_9: Unknown sensor 0000 [ 105.762583][ T785] ov534_9: probe of 4-1:0.0 failed with error -22 [ 105.830035][ T785] usb 4-1: USB disconnect, device number 2 [ 105.918009][ T6098] loop2: detected capacity change from 0 to 4096 [ 106.588253][ T6107] loop1: detected capacity change from 0 to 16 [ 106.619961][ T6107] erofs: (device loop1): mounted with root inode @ nid 36. [ 106.978004][ T6101] loop0: detected capacity change from 0 to 32768 [ 107.103228][ T6101] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 107.131597][ T6124] loop2: detected capacity change from 0 to 64 [ 107.252131][ T6101] XFS (loop0): Ending clean mount [ 107.502040][ T6128] loop3: detected capacity change from 0 to 256 [ 107.530622][ T5788] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 107.539515][ T6128] exfat: Deprecated parameter 'namecase' [ 107.639829][ T6128] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 107.718440][ T6114] loop1: detected capacity change from 0 to 32768 [ 107.841734][ T6114] overlayfs: upper fs needs to support d_type. [ 107.864542][ T6132] loop2: detected capacity change from 0 to 256 [ 107.886555][ T6114] overlayfs: upper fs does not support tmpfile. [ 107.897713][ T6132] exfat: Deprecated parameter 'utf8' [ 108.029773][ T6132] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x349f764f, utbl_chksum : 0xe619d30d) [ 108.053875][ T6114] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 108.104782][ T6114] ERROR: (device loop1): dbAlloc: the hint is outside the map [ 108.104782][ T6114] [ 108.167468][ T6114] ERROR: (device loop1): remounting filesystem as read-only [ 108.229542][ T6114] overlayfs: failed to set uuid (/file0, err=-5); falling back to uuid=null. [ 108.993304][ T6134] loop3: detected capacity change from 0 to 32768 [ 109.030583][ T6134] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 109.264982][ T6134] XFS (loop3): Ending clean mount [ 109.274353][ T6162] capability: warning: `syz.0.124' uses 32-bit capabilities (legacy support in use) [ 109.454747][ T5790] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 109.860080][ T6148] loop2: detected capacity change from 0 to 32768 [ 109.908179][ T6148] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 109.987035][ T6148] XFS (loop2): Ending clean mount [ 110.104611][ T6187] loop3: detected capacity change from 0 to 512 [ 110.142112][ T6187] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 110.239439][ T5789] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 110.410143][ T6187] EXT4-fs error (device loop3): ext4_do_update_inode:5230: inode #16: comm syz.3.132: corrupted inode contents [ 110.432479][ T6187] EXT4-fs error (device loop3): ext4_dirty_inode:6106: inode #16: comm syz.3.132: mark_inode_dirty error [ 110.457391][ T6187] EXT4-fs error (device loop3): ext4_do_update_inode:5230: inode #16: comm syz.3.132: corrupted inode contents [ 110.545284][ T6187] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #16: comm syz.3.132: mark_inode_dirty error [ 110.603759][ T6187] EXT4-fs error (device loop3): ext4_do_update_inode:5230: inode #16: comm syz.3.132: corrupted inode contents [ 110.625314][ T6187] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 110.659906][ T6187] EXT4-fs error (device loop3): ext4_do_update_inode:5230: inode #16: comm syz.3.132: corrupted inode contents [ 110.695582][ T6187] EXT4-fs error (device loop3): ext4_truncate:4288: inode #16: comm syz.3.132: mark_inode_dirty error [ 110.717198][ T6187] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 110.748791][ T6187] EXT4-fs (loop3): 1 truncate cleaned up [ 110.789090][ T6187] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.790284][ T48] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 110.802304][ T6187] ext4 filesystem being mounted at /24/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 110.835824][ T48] EXT4-fs error (device loop3): ext4_release_dquot:6974: comm kworker/u4:3: Failed to release dquot type 1 [ 110.873858][ T6187] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 111.039061][ T5790] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.270245][ T6213] loop0: detected capacity change from 0 to 256 [ 111.304620][ T785] kernel write not supported for file /cpuinfo (pid: 785 comm: kworker/0:2) [ 112.366512][ T6225] loop3: detected capacity change from 0 to 1024 [ 112.421314][ T6225] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.484234][ T6229] loop0: detected capacity change from 0 to 1024 [ 112.492144][ T6229] EXT4-fs: Ignoring removed i_version option [ 112.556133][ T6229] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 112.659203][ T5790] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.734854][ T6229] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 112.839826][ T28] audit: type=1800 audit(1756229069.220:3): pid=6229 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.149" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 112.943633][ T5788] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.146998][ T6243] pim6reg: entered allmulticast mode [ 113.182583][ T6243] pim6reg: left allmulticast mode [ 113.306529][ T6244] process 'syz.3.156' launched './file0' with NULL argv: empty string added [ 113.416942][ T6222] loop1: detected capacity change from 0 to 40427 [ 113.456707][ T6222] F2FS-fs (loop1): Insane cp_payload (553648128 >= 504) [ 113.471272][ T6222] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 113.478995][ T6250] netlink: 48 bytes leftover after parsing attributes in process `syz.0.158'. [ 113.511591][ T6222] F2FS-fs (loop1): build fault injection attr: rate: 17008, type: 0x7ffff [ 113.550679][ T6222] F2FS-fs (loop1): build fault injection attr: rate: 0, type: 0x1f8 [ 113.560001][ T6252] netlink: 24 bytes leftover after parsing attributes in process `syz.2.167'. [ 113.785516][ T6222] F2FS-fs (loop1): invalid crc value [ 113.880074][ T6222] F2FS-fs (loop1): Found nat_bits in checkpoint [ 114.071572][ T6259] sp0: Synchronizing with TNC [ 114.122084][ T6222] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 114.138024][ T6222] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 114.207485][ T6268] loop0: detected capacity change from 0 to 1024 [ 114.279079][ T28] audit: type=1800 audit(1756229070.660:4): pid=6222 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.155" name="file1" dev="loop1" ino=10 res=0 errno=0 [ 114.324723][ T6269] warning: `syz.2.162' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 114.351049][ T6268] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 114.698476][ T5792] syz-executor: attempt to access beyond end of device [ 114.698476][ T5792] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 114.741364][ T5788] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.774443][ T5792] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 115.204802][ T28] audit: type=1326 audit(1756229071.590:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6291 comm="syz.3.170" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3a2c38ebe9 code=0x0 [ 115.399295][ T6296] loop2: detected capacity change from 0 to 256 [ 115.442435][ T6296] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 115.508925][ T28] audit: type=1800 audit(1756229071.890:6): pid=6296 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.171" name="file1" dev="loop2" ino=1048597 res=0 errno=0 [ 115.549783][ T6296] exFAT-fs (loop2): error, tried to truncate zeroed cluster. [ 115.570420][ T6296] exFAT-fs (loop2): Filesystem has been set read-only [ 116.057139][ T6305] loop2: detected capacity change from 0 to 256 [ 116.105108][ T6305] exfat: Deprecated parameter 'utf8' [ 116.181987][ T6305] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 116.191204][ T6286] loop0: detected capacity change from 0 to 32768 [ 116.307981][ T6286] (syz.0.168,6286,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 116.327259][ T6313] mmap: syz.1.182 (6313) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 116.348802][ T6286] (syz.0.168,6286,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 116.482536][ T6286] JBD2: Ignoring recovery information on journal [ 116.606114][ T6286] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 116.645310][ T6316] sp0: Synchronizing with TNC [ 116.835340][ T6286] (syz.0.168,6286,0):ocfs2_read_blocks_sync:112 ERROR: status = -12 [ 116.893885][ T6286] (syz.0.168,6286,1):update_backups:188 ERROR: status = -12 [ 116.954464][ T6286] ocfs2: Failed to update super blocks on 7,0 during fs resize. This condition is not fatal, but fsck.ocfs2 should be run to fix it [ 117.139119][ T5788] ocfs2: Unmounting device (7,0) on (node local) [ 117.338027][ T6331] loop2: detected capacity change from 0 to 16 [ 117.369474][ T6331] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 117.410248][ T6331] cramfs: empty filesystem [ 117.768421][ T6339] loop2: detected capacity change from 0 to 64 [ 117.858125][ T6341] loop0: detected capacity change from 0 to 256 [ 117.985321][ T6341] FAT-fs (loop0): Directory bread(block 64) failed [ 118.013217][ T6341] FAT-fs (loop0): Directory bread(block 65) failed [ 118.049962][ T6341] FAT-fs (loop0): Directory bread(block 66) failed [ 118.098988][ T6341] FAT-fs (loop0): Directory bread(block 67) failed [ 118.134540][ T6341] FAT-fs (loop0): Directory bread(block 68) failed [ 118.172990][ T6341] FAT-fs (loop0): Directory bread(block 69) failed [ 118.200562][ T6341] FAT-fs (loop0): Directory bread(block 70) failed [ 118.220798][ T6341] FAT-fs (loop0): Directory bread(block 71) failed [ 118.247824][ T6341] FAT-fs (loop0): Directory bread(block 72) failed [ 118.266686][ T6341] FAT-fs (loop0): Directory bread(block 73) failed [ 118.401825][ T6341] syz.0.179: attempt to access beyond end of device [ 118.401825][ T6341] loop0: rw=0, sector=1768, nr_sectors = 4 limit=256 [ 118.768649][ T6347] delete_channel: no stack [ 118.879309][ T6350] sp0: Synchronizing with TNC [ 118.971188][ T6312] loop3: detected capacity change from 0 to 40427 [ 119.034503][ T6312] F2FS-fs (loop3): Insane cp_payload (553648128 >= 504) [ 119.120809][ T6312] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 119.194065][ T6312] F2FS-fs (loop3): build fault injection attr: rate: 17008, type: 0x7ffff [ 119.260661][ T6312] F2FS-fs (loop3): build fault injection attr: rate: 0, type: 0x1f8 [ 119.380759][ T6312] F2FS-fs (loop3): invalid crc value [ 119.398438][ T6312] F2FS-fs (loop3): Failed to initialize F2FS segment manager (-4) [ 120.017048][ T6352] loop2: detected capacity change from 0 to 32768 [ 120.746994][ T6371] loop0: detected capacity change from 0 to 512 [ 120.793079][ T6371] EXT4-fs: Ignoring removed nomblk_io_submit option [ 120.832926][ T6371] EXT4-fs: Ignoring removed bh option [ 120.903952][ T6371] EXT4-fs error (device loop0): mb_free_blocks:1943: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 120.921739][ C0] vkms_vblank_simulate: vblank timer overrun [ 120.937532][ T6371] EXT4-fs error (device loop0): ext4_do_update_inode:5230: inode #11: comm syz.0.204: corrupted inode contents [ 121.023820][ T6371] EXT4-fs error (device loop0): ext4_dirty_inode:6106: inode #11: comm syz.0.204: mark_inode_dirty error [ 121.108177][ T6371] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.204: invalid indirect mapped block 1 (level 1) [ 121.187880][ T6371] EXT4-fs error (device loop0): ext4_do_update_inode:5230: inode #11: comm syz.0.204: corrupted inode contents [ 121.236342][ T6371] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem [ 121.264441][ T6371] EXT4-fs error (device loop0): ext4_do_update_inode:5230: inode #11: comm syz.0.204: corrupted inode contents [ 121.297964][ T6371] EXT4-fs error (device loop0): ext4_truncate:4288: inode #11: comm syz.0.204: mark_inode_dirty error [ 121.337007][ T6371] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem [ 121.371114][ T6371] EXT4-fs (loop0): 1 truncate cleaned up [ 121.388933][ T6371] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 121.452750][ T6380] sp0: Synchronizing with TNC [ 121.663781][ T5788] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.964922][ T6389] overlayfs: missing 'lowerdir' [ 122.224647][ T6395] loop3: detected capacity change from 0 to 8 [ 122.276558][ T6393] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 122.445413][ T6395] SQUASHFS error: lzo decompression failed, data probably corrupt [ 122.495006][ T6395] SQUASHFS error: Failed to read block 0x144: -5 [ 122.501749][ T6395] SQUASHFS error: Unable to read metadata cache entry [142] [ 122.551050][ T6395] SQUASHFS error: Unable to read directory block [142:26] [ 123.278261][ T6418] loop1: detected capacity change from 0 to 256 [ 123.391378][ T6418] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xb5fb52fc, utbl_chksum : 0xe619d30d) [ 123.607369][ T6421] sp0: Synchronizing with TNC [ 123.640857][ T6426] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 123.966012][ T6436] loop1: detected capacity change from 0 to 128 [ 124.075628][ T6436] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 124.228923][ T6436] ext4 filesystem being mounted at /48/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 124.262996][ T5160] udevd[5160]: worker [5806] terminated by signal 33 (Unknown signal 33) [ 124.288193][ T6436] EXT4-fs warning (device loop1): ext4_dirblock_csum_verify:406: inode #2: comm syz.1.218: No space for directory leaf checksum. Please run e2fsck -D. [ 124.308006][ T5160] udevd[5160]: worker [5806] failed while handling '/devices/virtual/block/loop1' [ 124.320339][ T6436] EXT4-fs error (device loop1): __ext4_find_entry:1696: inode #2: comm syz.1.218: checksumming directory block 0 [ 124.512209][ T5792] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 124.526162][ T6450] loop0: detected capacity change from 0 to 128 [ 124.534536][ T6450] EXT4-fs: Ignoring removed nomblk_io_submit option [ 124.541334][ T6450] EXT4-fs: Ignoring removed nomblk_io_submit option [ 124.550635][ T6450] EXT4-fs (loop0): Test dummy encryption mode enabled [ 124.565100][ T6450] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (58271!=39978) [ 124.575794][ T6450] EXT4-fs (loop0): group descriptors corrupted! [ 124.718313][ T6452] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 125.360166][ T6468] sp0: Synchronizing with TNC [ 125.704808][ T9] kernel write not supported for file bpf-prog (pid: 9 comm: kworker/0:1) [ 125.842465][ T8] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 126.052571][ T8] usb 4-1: Using ep0 maxpacket: 32 [ 126.077632][ T8] usb 4-1: too many endpoints for config 64 interface 0 altsetting 8: 33, using maximum allowed: 30 [ 126.101852][ T6488] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 126.120821][ C0] vkms_vblank_simulate: vblank timer overrun [ 126.149865][ T8] usb 4-1: config 64 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 126.168938][ T8] usb 4-1: config 64 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0 [ 126.180400][ T8] usb 4-1: config 64 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 33 [ 126.195023][ T8] usb 4-1: config 64 interface 0 has no altsetting 0 [ 126.201960][ T8] usb 4-1: New USB device found, idVendor=17ef, idProduct=6085, bcdDevice= 0.00 [ 126.211941][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.468762][ T6497] netlink: 44 bytes leftover after parsing attributes in process `syz.0.242'. [ 126.619915][ T6501] general protection fault, probably for non-canonical address 0xdffffc0000000005: 0000 [#1] PREEMPT SMP KASAN [ 126.631731][ T6501] KASAN: null-ptr-deref in range [0x0000000000000028-0x000000000000002f] [ 126.640396][ T6501] CPU: 1 PID: 6501 Comm: syz.2.244 Not tainted 6.6.102-syzkaller #0 [ 126.648618][ T6501] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 126.658478][ T8] hid-rmi 0003:17EF:6085.0004: item fetching failed at offset 1/5 [ 126.659113][ T6501] RIP: 0010:pcl818_ai_cancel+0x69/0x3f0 [ 126.672899][ T6501] Code: 8b 1b 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 c9 a3 e0 f9 48 8b 03 48 89 04 24 49 83 c4 28 4c 89 e0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 e7 e8 a8 a3 e0 f9 4d 8b 24 24 48 83 c3 [ 126.675123][ T8] hid-rmi 0003:17EF:6085.0004: parse failed [ 126.692978][ T6501] RSP: 0018:ffffc9000ea27a78 EFLAGS: 00010206 [ 126.693013][ T6501] RAX: 0000000000000005 RBX: ffff8880247d0800 RCX: 0000000000080000 [ 126.693028][ T6501] RDX: ffffc9000d59b000 RSI: 00000000000009a1 RDI: 00000000000009a2 [ 126.693040][ T6501] RBP: 0000000000000001 R08: ffff88802c8d392f R09: 1ffff1100591a725 [ 126.693054][ T6501] R10: dffffc0000000000 R11: ffffed100591a726 R12: 0000000000000028 [ 126.693066][ T6501] R13: dffffc0000000000 R14: ffff88802c8d3800 R15: dffffc0000000000 [ 126.693080][ T6501] FS: 00007efd571be6c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 126.693095][ T6501] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 126.693108][ T6501] CR2: 0000001b2ea23ffc CR3: 0000000024733000 CR4: 00000000003506e0 [ 126.693124][ T6501] Call Trace: [ 126.711099][ T8] hid-rmi: probe of 0003:17EF:6085.0004 failed with error -22 [ 126.713487][ T6501] [ 126.713502][ T6501] pcl818_detach+0x66/0xd0 [ 126.789068][ T6501] comedi_device_detach+0x131/0x6f0 [ 126.794348][ T6501] comedi_unlocked_ioctl+0xbd0/0xf90 [ 126.800280][ T6501] ? comedi_poll+0x8c0/0x8c0 [ 126.805064][ T6501] ? __fget_files+0x28/0x4d0 [ 126.809833][ T6501] ? bpf_lsm_file_ioctl+0x9/0x10 [ 126.814924][ T6501] ? security_file_ioctl+0x80/0xa0 [ 126.820112][ T6501] ? comedi_poll+0x8c0/0x8c0 [ 126.824773][ T6501] __se_sys_ioctl+0xfd/0x170 [ 126.829495][ T6501] do_syscall_64+0x55/0xb0 [ 126.833949][ T6501] ? clear_bhb_loop+0x40/0x90 [ 126.838765][ T6501] ? clear_bhb_loop+0x40/0x90 [ 126.843661][ T6501] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 126.849624][ T6501] RIP: 0033:0x7efd5638ebe9 [ 126.854276][ T6501] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 126.874316][ T6501] RSP: 002b:00007efd571be038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 126.883021][ T6501] RAX: ffffffffffffffda RBX: 00007efd565b5fa0 RCX: 00007efd5638ebe9 [ 126.891146][ T6501] RDX: 0000000000000000 RSI: 0000000040946400 RDI: 0000000000000003 [ 126.899242][ T6501] RBP: 00007efd56411e19 R08: 0000000000000000 R09: 0000000000000000 [ 126.900107][ T785] usb 4-1: USB disconnect, device number 3 [ 126.907428][ T6501] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 126.907450][ T6501] R13: 00007efd565b6038 R14: 00007efd565b5fa0 R15: 00007ffd1c0b3508 [ 126.907475][ T6501] [ 126.907491][ T6501] Modules linked in: [ 126.922510][ T6501] ---[ end trace 0000000000000000 ]--- [ 126.945605][ T6501] RIP: 0010:pcl818_ai_cancel+0x69/0x3f0 [ 126.953779][ T6501] Code: 8b 1b 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 c9 a3 e0 f9 48 8b 03 48 89 04 24 49 83 c4 28 4c 89 e0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 e7 e8 a8 a3 e0 f9 4d 8b 24 24 48 83 c3 [ 126.974713][ T6501] RSP: 0018:ffffc9000ea27a78 EFLAGS: 00010206 [ 126.980864][ T6501] RAX: 0000000000000005 RBX: ffff8880247d0800 RCX: 0000000000080000 [ 126.992435][ T6501] RDX: ffffc9000d59b000 RSI: 00000000000009a1 RDI: 00000000000009a2 [ 127.001405][ T6501] RBP: 0000000000000001 R08: ffff88802c8d392f R09: 1ffff1100591a725 [ 127.010617][ T6501] R10: dffffc0000000000 R11: ffffed100591a726 R12: 0000000000000028 [ 127.019277][ T6501] R13: dffffc0000000000 R14: ffff88802c8d3800 R15: dffffc0000000000 [ 127.027849][ T6501] FS: 00007efd571be6c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 127.037725][ T6501] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 127.044595][ T6501] CR2: 0000001b2ed14ff8 CR3: 0000000024733000 CR4: 00000000003506f0 [ 127.056889][ T6501] Kernel panic - not syncing: Fatal exception [ 127.063909][ T6501] Kernel Offset: disabled [ 127.068537][ T6501] Rebooting in 86400 seconds..