last executing test programs: 4m10.855622513s ago: executing program 1 (id=6762): r0 = syz_mount_image$btrfs(&(0x7f00000051c0), &(0x7f0000005200)='./file0\x00', 0x1204408, &(0x7f00000003c0)={[{@compress_force}, {@clear_cache}, {@nodatasum}, {@nossd}, {}, {@space_cache_v1}]}, 0x0, 0x51ab, &(0x7f000000a440)="$eJzs3V9oVFceB/Az+aPxDyY+xV32wX1YWcUFWRF2UdggGF2Whdn1YVnYrFlZxT+7JUgDwb5YS2lBxGCgthSKD33pS0mlUFqqBAsthYogVloUW0teWiiESsGXlpK590xmzvVmxlQbq5+PJHfO/d1z7pnhPsx3zLkTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIIRwcM3Kv+xaPb2urD7dP3bq6LLt507vP3ljaGjLlRAqtf2VvL5n+66/79+95689scPw37JtX1/ZkFnXz7PGkqads/2af/4TQuhOBujMtzs6G/pW0hOEI8UB53XgZv/o5u7BaxN3zmy8eP3QhuJTZ1bPYk9gseTX1fTctTRQ+92RHFFvN1x6laZLNOufXnA/yZMAAO7JpmptU387mr/FrbePpfWkPZC0x5N2fIcw3thYiGzcJWXzXJvWF2meA1lUWFo6z6Sev/71djXtn7STqHEP82w+NI80PWXzHEnqizVPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIfJqx9euvTcy+u3ldWn+8dOHV22/dzp/SdvDA1tuRJCX21/JStXlv+q8w+fLtt57fiRN36zr+ftk515v7jtajg4fBIf/LE3hL0Nlek47JerQqg2F2rN8FKxcLD24M+xAAAAwKPkF7XfHfV2Fge7m9qVWpqs1P5FWVg8cLN/dHP34LWJO2c2Xrx+aMPCx6uWjDdw1/Hq7b65n0pDMI7xNx1vrh4PPVIYZ37piGme/2zmyVsXJn7777L+hfzfN3/+j6+c/A8AAMCPIf+n48yvVf6/+s7zT3UN7n2vrH8h/69tOmUh/8cZx/zfERaW/wEAAOBh9qDz/0BhnPm1yv/fnZ86f/nb46+U9S/k/03t5f+uxmnHnR/FCR/uDWFTq6kDAAAAJeL/u899tBDzevbJQZrXO2ZGe6d6blwtG6+Q/wfay//d9/2ZAQAAAAv1v7F/Hb8wNn6zrF7I/9X28v/SBz5zAAAAoF37Tvz/3PoNIyvL6oX8P9xe/l+eb/OVD1mn9+NfIUz0htAz+2AkK3wQxv9ULwAAAAD3SczpX41u/f7jwel3y44r5P+R+e//H+90ENf/N93/r7D+v6GQ3fVvqxsDAAAA8DgqruePt8fPvrmg7Pv3213/f+uXO3b9d+c/vig7fyH/H2sv/3c2bu/n9/8BAADAAvzcvv/vn4Vx5tfq/v/fDN36et3hZwfL+hfy/3h7+T9uVzQ+van4+jzTG8Ka2Qf53QRfi6c7nBQmuxsK2Quf9Ngde+SFyaUNhZqRpMfve0P49eyDY0lhdSyMJ4WZVXnhbFK4HAv59VAvvJ4UpuKV9sKqfLpp4a1YyBdYTMYVFCvqSyKSHrfLeswW7trjev3kAAAAj5UYnvMs293cDGmUnay0OmB5qwM6Wh3Q2eqAruSA9MCy/WG4uRD3v7jtd7evPPHm06FEIf+fbS//x5diSbYpW/8f4vr//HsN6+v/h2OhLylMxkI1vWNANZ4jC7sn4jn6qnmPmTX1AgAAADzS4ucCnYs8DwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAH5g7/6D7KrqA4Cf/f0jm91FHAFJNYqA6ZDNJjFKK1MC1UFxpi4OdZw60UR2g9ssJCZhICnthEA7U5hUVKa1o0NDHUdpkUY6jlK1pEyBcaRTm7ZMxWhl/EFtaxnGSodSm87be8/d+87dm/dCdiFLP58/9p33vufnfT/2nXvvOxcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOD/h38ZWPMb+1f89Py6+PfPuOHDewcuve+jWw8c3bRpw5EQJmYf78jCHYMrui785sBlj+3f+flzp/rvP9Cbl8vjYVnjT2d+55ai1uUhfLEjhO40sHooC/Tk94difSuGQjgtzAWKElODWYm04fDQQAgHw1ygqOr+gRCGSoErjzz4wIFG4o6BEM4NIfSlbXy7L2tjIA2c15sFBtPA9u4s8F/HMkXgS51ZAE5afDMUL/pDE80ZRucvV/P661mwjr240uF1xcRofb4fX7LInSrpTR+YOKmnrVIdi6Ly9jjs3bYE3m2V7Xy7p638RSr/hnJsLtQXOientm65bmZ3fKQzjI111dW0SM/z40/feNWJpJfM6zB2YHRBXofP3vme68+afMuNt24/54m177vg6Ml2s27zLra+kL/mlszzGG30ebIE3n6Vb0krfekKIfzcB7tv6vrtI5+qi1fm/6PHn//Hl3O87WzKHWt9bjibm8dHhmLiqeFsbg4AAABLxlLYa/qjs1/xe6s61zxeV19l/r+yveP/8ZB/PpnPRns4hI2ziZtHQjhz9vEscHds7gMjIbxmNjXRHLgkCRwO4azZxKqiqqREfyyxMgk8OZwHNiaBh2NgIgl8OgZuTwK3xMChJHBVDBxOApfGQJhuHsfPD+fjaDswEAObs414KJ6F8JPh2Fqyrb5VVAUAALBA8tlhT/Pd0rkOJ5shTi8PDbTKEM/Ars3Ql9SQzmCLaVVtDd2tauhsVUMx7n3HH36l5o5WNVdOw+hoznDpK/7w/BVfu+ELoUZl/j9+/Pl/3zwd6agc/w/hitm/MXdnHpkp4psnmjIAAAAAJ2HtG2a+9idnv+nNdfHK/H9je+f/x30iXaXM4dG4G2LbSAjjzYGs2jdXA9lR72V5AAAAAJaC4nh8cSx8Or/NTtFO59PV/BMnmD8e+N84b/5fCpOnb/vBUxvq+luZ/0+0d/7/YPNt1omHYy8+NhJCfynwSOxlIzBrZQx89+LmQD7+h+MGuC1WlZ+YUFR1WyyxOQbGk8DBuhLfKEqc2RzIn6yi8ZuLcUznJUoBAAAAeMHF3QHxuHw8///Ctd/70KaP7/1cXbnK/H/ziZ3/PzsPrpzeP7MshDXdIXSlPwx4dDBbGDAGhjryxFcHs7q60qpuGgzhosbA0qqeyNf/707XGDwykFUVA2e+9rNPn9dIfGoghDXlwGPvvWt2x8juJFA0/qsDIby6Mdq08S/0Z433pI3/QX8IryoFiqo+0B9Co7HetKoH+/LrGKRV/VlfCKeXAkVVb+wLYU8AYImK/0onyw/u2rN325aZmamdi5iI+/AHwtbpmamxq7bPTPbV9Gky6XPTMkY3VcfU2ebYj+ZLFN1z+dhIO+nid4Lj5b7k+/ErJw7m9+N3oZ7Zca7rabq7Ph3y68+pNpEO6cUY8mC5krknsVJ/zN8bloX+63ZN7Ry7Ycvu3TvXZn/bzb4u+xsPM2Xbam26rQbn61sbL492F0N/vtuq6TJXa3Zfs2PNrj17V09fs+Xqqaunrn3D+LrxdevHN7zpwjWNUY1nf1sM9fz5qk6Geuyu6hDavQbU8x3qK7tLlbwQnxoSEhJLLbHl4q/+5b1nfWJZ3cdPZf6/4/jz//ipEz/58/UZ6o7/j8bD/Nnjc4f5N8fAwXaP/4/WHc0vTgxYmQT2xcA+h/kBAAB4aYi7G+PezLhXuuem1WN//MlHnqwrV5n/72vv9/8LtP5/sXT95XXL/K+KJcbr1v9Pl/kv1v/fV7f+f7rMf7H+/8EXYf3/64pAskl+Yv1/AADgpeCFW/+/5fL+6QUCKhlaLu+fXiCgkqHlMv7tXiDghNf/f/tzr+u55iOvviXUqMz/b29v/m/hfgAAADh13HVkQ8eD//o/D9XFK/P/g+3N/1/49f9C3fn/K+sCE3ULA1r/DwAAgCWqbv2/9a/78ebP/WzFD+vKVeb/h9qb/8fTLjqbcsdanxvO1rQL6Zp2Tw0XPxkAAACApaEzjI21u6Jp08qolzz/Nh/PlwI9Xrrsr758zT8+8tb39tfVV5n/H25v/t/0u4xn73zP9WdNvuXG527dfs4Ta993wdG54/8AAADA4ml3vwQAAAAAAAAAAAAAAPDie3rv5Lv++ew7P1MXr/z+P1wx+3jd7//jdf/i7wte3pQ71tp6/b/8/pXvuHfP7JKFjw6HcE45sG3/ttNCfm3+88uBBzatOqOR2J+W+Mp3Lv1BI/H+NPC21S97ppG4KAlsjosknpUG4lUVn1meBOLyin+fBuL2OJQGevPA7y7PxtGRbqsfDWXbqiPdVo8PhTBSChTb6otDWRsd6QDvSALFAD+UBuIAfyUPdKa9undZ1qsYGIpF/2hZ1isAAE5Z8VtgT9g6PTM1Hr/Cx9tXdjffRk1Llt1UrbajzeaP5kuT3XP52Eg76a70u+jctcZ7Ql9jCGsrX1fLWTpmR7kwtbTYdC+vGXKr1d7a/XX2iW663voRDWQjGrtq+8xkT8uBr2+dZV13yyxrK5OdcpbO2U3aRi1t9KWNEbW5bdrocrzfGcbGupJcvxiDo6HJQr0iyuv81b0Kynn2Tb7xb75x7Nihuvoq8//R9ub/feVxPZNfDGBfvLLezSMhnNnmiAAAAIB2fevL/7Ru+yd+55709ort1956weCPLq4rV5n/r2xv/h93jOWHgrO9HYfj9f+L+f9oFrg7NveBkRBeM5uaiCWyC+pfHkuMZ4G74w6TVbHE5onmqvpj4FASeHI4DxxOAg/HQL6X4rMh35XzkeEQNsymrmgusSOWGE0C74yBlUlgLAbGk8DyGNiYBP59eR6YSAJfj4Ew3byt/ny5vSsAAMDzkM+zeprvhnSed6i7VYaOVhkGW2XobJWhr1WGulHE+/fFDD3JySsdpUw9aa0DSS2VDPFi+Cfcr0qG8I3mnGnBStPx/IPifIOO5gz/dtnrv33erlXtX/9/vL35/2Dzbdb6w3H+P3f9vyzwSOzex+Kp4ytj4LsXNwfyHQMPx8nubUVVE3mJfNJ+WyyxMQZWJoEdMbAxCWy+Ig8cPKM5kM+0i8ZvLhqfzkuUAgAAAPCCizsI4m6aOP//0/+++3MH/uHav64rV5n/b2xv/h/bW1Zu7Jai1uUhfLFjrjdFYPVQFoj7MYbiz+NXDIVwWmkHR1FiajAr0Zs0HB4ayH6h3ptWdf9AtsZAvH/lkQcfONBI3DEQwrmlvS9FG9/uy9oYSAPn9WaBwTSwvTsLxD0/ReBLnVkATlqxVzC+oPJTXQqj85eref29VK4Jmg6vsg90nnzz/eZqsfSlD+T7VAsn9rRVqmNRVN4eh73bluK7bdS7rfxFKv+Gcmwu1Bc6J6e2brluZnd8pPxL1opFep7Lv1JtJ70Ar8N9z7+3rfWlHRhPPj7G5y83/+uwI1b37J3vuf6sybfceOv2c55Y+74LjrbdjRrxh8Lv/uTLRsubd7H1hfw1t+Q+TyZ8nizFfwMrPW2NGexTv//V//jp4z+ri1fm/xPtzf+7k9tZz8aNuWskhNeXNu6jcfP/8kj2OVgKZJ+Sp1cD2SH37w3XfnICAADAQit2dxT7C6bz2+yE8HSeXM0/cYL54/6KjfPmb7ffW29+aP8P/+6Or9TFK/P/zcef//cn3XT83/F/Fonj//M61XdF96cP7DupXdGV6lgUjv/P61R/tzn+Py/H/x3/n4/j/y04/j+vU/1pq3xL2uFLVwjh6++/8+33bP+18+rilfn/jvbm/9b/m3/RvmL9v8116//tqFv/b5/1/wAAgEVVs9BcOs+rrN5XyZCu3lfJ0HKBwJZLDFr/74TX/3vrO//3+mOvuGRnqFGZ/+9rb/4fXw7Lyq0vlfX/Vl5RU9XtMbDDwoAAAACciup2EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPDievcvPLl8029eOF0X//4ZN3x478Cl931064GjmzZtOBJClrUjC3cMrui68JsDlz22f+fnz53qv/9AX16uJ789uyl3rPW54RAOlh4Ziomnhht35gJXvuPePd2NxKPDIZxTDmzbv+20RuLTwyGcXw48sGnVGY3E/rTEV75z6Q8aifengbetftkzjcRFeaAj7e4nl2fd7Ui7e2B5CCOlQNHdX1/eXFXRxmV5oDNt4zNDWRsxMBSLfnwoayMGZmKJ6f4Q1nSH0JVW9bW+rKqutKq/6Muq6kqr+q2+EC4KIXSnVX2nN6uqOx353/ZmVcXAma/97NPnNRIHe0NYUw489t67NjQSH0oCRePv6g3h1Y2XTNr4fT1Z4z1p43f0hPCqEEJvWuI/u7MSvWmJJ7pDOL0UKBr/YHcIewIvCfHDZ7L84K49e7dtmZmZ2rmIid68rYGwdXpmauyq7TOTfUmf6nSU0sduOn78eI4+feNVjdt7Lh8baSfdnZfrme3yup6mu+sXqvftOtHex34NliuZez4q9cf8vWFZ6L9u19TOsRu27N69c232t93s67K/XXk021ZrF2pbdbYoHz3fbXV+uZI1u6/ZsWbXnr2rp6/ZcvXU1VPXvmF83fi69eMb3nThmsaoxrO/CzHUu44fX4yhvrK7VMkL8QEgISGx1BKdTZ9u46f6P73KF/25jvaEvtkP6Mq0opylY3aUCzHoS6rxrkUadGVKUhnR2srEoZJlXess6yuTibksA1mW2e91lclhuabO2U0a73eGsbHazTLafLe8eX88z+Zt1+P5pms3DQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/B87cCAAAAAAAOT/2ghVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVV2IEDAQAAAAAg/9dGqKqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqsIOHAsAAAAACPO3DqNnAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOBSAAAA//+3Rsqd") ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000000440)={0x2, 0x4, {0xffffffffffffffff, @struct={0xfffffffd, 0x4}, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, @struct={0x0, 0xce82}, 0x4000, 0x7, [0x9, 0x8, 0x1000000000, 0x0, 0x0, 0x241]}, {0xfffffffffffffffe, @usage=0x1, 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x0, 0x20008, 0x58a, @usage=0x73, 0x3, 0xa, [0x0, 0x4, 0x2, 0xfffffffffffffffc, 0x4, 0x1]}, {0x5, @struct={0x4, 0x8}, 0x0, 0x7, 0x80800, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x2, 0xe8, @usage=0x7fffffffffffffff, 0x3, 0x4, [0x0, 0x800004, 0x0, 0x3ff, 0x8]}}) 4m7.85354297s ago: executing program 1 (id=6798): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001400)=ANY=[@ANYBLOB="180000001500010029bd7000fedbdf252d"], 0x18}}, 0x20000000) 4m7.234921575s ago: executing program 1 (id=6804): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@dellinkprop={0x34, 0x6d, 0x2ec9b2c728e3c67, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x49a93, 0x2e804}, [@IFLA_IFNAME={0x14, 0x3, 'veth1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008000}, 0x4004014) 4m6.885870448s ago: executing program 1 (id=6809): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f0000000280)={[{@iocharset={'iocharset', 0x3d, 'maciceland'}}, {@gid}, {@gid}, {@errors_continue}, {@iocharset={'iocharset', 0x3d, 'cp855'}}, {@fmask={'fmask', 0x3d, 0x4}}, {@namecase}, {@keep_last_dots}, {@utf8}, {@keep_last_dots}]}, 0x1, 0x152c, &(0x7f0000001f80)="$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") mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00', 0x0, 0x1000, 0x0) 4m6.252681625s ago: executing program 1 (id=6814): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x10, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, @void, @value}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000240)={r0, 0xffffffffffffffff, 0x7, 0x0, @void}, 0x10) 4m5.625252364s ago: executing program 1 (id=6824): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r0, &(0x7f0000000c80)={0x2e7, 0x7d, 0x0, {{0x500, 0x17d, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0xab, '\x02\x00odev{cvfox%\xff\xff\xff\x81\x02\x01\x00\x01\r\x00\x00\x00\x00\xbc\x92\x00\x00\x00\x8c\xff\a\xf5\xc8\xf8a\xee\x7f\xb2\xf9\xa2\xd4\x9f-\x9f4^\x9d\x10v\xaf6n\xc2Eu~\xa1f\x17\xdbl3\xa4\xae-C\xc2M\xaat\x05x\a\x13<\xe6\xfe\xa0\x1ar\xba\xb2l\x9bE\xe5\xa4\xf7E\xb69sG\xe1\xb6(\x14\xc1Y\x1d\x8e\x19\x1f_\xc3B\x18Qhb\xf2&\xd8o\x97J\x18\x00#&\xf8\x96\xa4\x1aj\x1fm\xe8\x13\xa5E\xb0\xf8\xfc]\x9d\xaa\xb7\xb0\xa07\xc5\x83\x9a\xec\x97\xacs]\xf1\xfe\xa2^.\x94q\xdb\xc7&c\b.\x7f\xf8^\xa1\xdfJ', 0x38, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05@\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00;Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x06\xb4\x94\xe1', 0x12, '\xcf\xc2\x00\x10\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf3\x13\xf6\x00', 0x55, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0\xb4\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\xc2\x80\xe8\xd4\x89\xdad\x9a7\x00'}, 0x155, '\x00dev-n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\x06\x00\x00\x00\x00\x00\x00\x001\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x7f\x01\x98\xc1\xcc\xd5\xc7\xb0\xf1\xb2{\v\x9a\xe1\xad\xdd\xf2c\xc7!c\t@\x8f\x06\xb2\x96\xde\x86O&5\x91y\x93\xdc\xd0\n[C\xe9'}}, 0x2e7) 4m4.989176865s ago: executing program 32 (id=6824): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r0, &(0x7f0000000c80)={0x2e7, 0x7d, 0x0, {{0x500, 0x17d, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0xab, '\x02\x00odev{cvfox%\xff\xff\xff\x81\x02\x01\x00\x01\r\x00\x00\x00\x00\xbc\x92\x00\x00\x00\x8c\xff\a\xf5\xc8\xf8a\xee\x7f\xb2\xf9\xa2\xd4\x9f-\x9f4^\x9d\x10v\xaf6n\xc2Eu~\xa1f\x17\xdbl3\xa4\xae-C\xc2M\xaat\x05x\a\x13<\xe6\xfe\xa0\x1ar\xba\xb2l\x9bE\xe5\xa4\xf7E\xb69sG\xe1\xb6(\x14\xc1Y\x1d\x8e\x19\x1f_\xc3B\x18Qhb\xf2&\xd8o\x97J\x18\x00#&\xf8\x96\xa4\x1aj\x1fm\xe8\x13\xa5E\xb0\xf8\xfc]\x9d\xaa\xb7\xb0\xa07\xc5\x83\x9a\xec\x97\xacs]\xf1\xfe\xa2^.\x94q\xdb\xc7&c\b.\x7f\xf8^\xa1\xdfJ', 0x38, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05@\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00;Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x06\xb4\x94\xe1', 0x12, '\xcf\xc2\x00\x10\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf3\x13\xf6\x00', 0x55, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0\xb4\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\xc2\x80\xe8\xd4\x89\xdad\x9a7\x00'}, 0x155, '\x00dev-n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\x06\x00\x00\x00\x00\x00\x00\x001\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x7f\x01\x98\xc1\xcc\xd5\xc7\xb0\xf1\xb2{\v\x9a\xe1\xad\xdd\xf2c\xc7!c\t@\x8f\x06\xb2\x96\xde\x86O&5\x91y\x93\xdc\xd0\n[C\xe9'}}, 0x2e7) 2m35.776130158s ago: executing program 6 (id=7939): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)=@newsa={0xf0, 0x10, 0x713, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@ipv4={'\x00', '\xff\xff', @local}, 0x0, 0x0, 0x0, 0x0, 0xa, 0xc0}, {@in=@empty, 0x0, 0x32}, @in6=@ipv4={'\x00', '\xff\xff', @multicast2}, {0x0, 0x9, 0x0, 0x0, 0x0, 0x3}, {}, {}, 0x0, 0x0, 0x2}}, 0xf0}}, 0x0) 2m35.528049311s ago: executing program 6 (id=7944): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x2800, 0x0) ioctl$FBIOGET_VSCREENINFO(r0, 0x4600, &(0x7f00000002c0)) 2m35.366240567s ago: executing program 6 (id=7947): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_COPY(r0, 0x3b83, &(0x7f0000000200)={0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 2m35.142374418s ago: executing program 6 (id=7950): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000001080)=0x4) 2m34.709360637s ago: executing program 6 (id=7955): syz_mount_image$squashfs(&(0x7f0000000200), &(0x7f0000000000)='./file0\x00', 0x10, &(0x7f0000000680)=ANY=[@ANYBLOB="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", @ANYRESDEC, @ANYRESHEX, @ANYRESOCT, @ANYRES16, @ANYRES8, @ANYBLOB="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"], 0x1, 0x200, &(0x7f0000006140)="$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") open(&(0x7f0000000140)='./file2\x00', 0x0, 0x0) 2m33.614171513s ago: executing program 6 (id=7974): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x4c, 0x10, 0x1, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2180}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_RATE={0x10, 0x6, {0x8649, 0x8, 0x1}}]}]}]}, 0x4c}}, 0x8000) 2m17.495153402s ago: executing program 33 (id=7974): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x4c, 0x10, 0x1, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2180}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_RATE={0x10, 0x6, {0x8649, 0x8, 0x1}}]}]}]}, 0x4c}}, 0x8000) 4.25118572s ago: executing program 4 (id=10116): syz_mount_image$jfs(&(0x7f0000000140), &(0x7f0000000080)='./file1\x00', 0x3210842, &(0x7f0000006500)={[{@discard_size={'discard', 0x3d, 0xf4}}, {@discard_size={'discard', 0x3d, 0x7f}}, {@errors_continue}, {@iocharset={'iocharset', 0x3d, 'iso8859-15'}}, {@quota}, {@noquota}, {@quota}, {@uid}, {@iocharset={'iocharset', 0x3d, 'iso8859-1'}}]}, 0x24, 0x62cf, &(0x7f0000000200)="$eJzs3cuOHFcZB/Cv+jYXE8fKIgoWQpPEXEKIr8EYAiRZwIINC+QtsjWZRBYOINsgJ7LwRLNhwUOAkFgixJIVD5AFW3Y8AJZsJFAWKIVq5pxxdaV7esb2dPW4fj9pXPX1qZo+5X9XX6aq+gQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAED/8wY/PFRFx5VfphhMRn4t+RC9iparXImJl7UR9nRdiuzmej4jhUkS1/vY/z0a8HhEfH4+4/+DOenXz+X324/t//scffnLsR3//0/DMf/9yq//GtOVu3/7tf/5699G3FwAAALqoLMuySB/zT0bEIH22BwCefvn1v0zy7eqFqzcXrD9qtVqtPoJ1XTnZ3XoREZv1dar3DA7HA8ARsxmftN0FWiT/ThtExLG2OwEstKLtDnAo7j+4s16kfIv668HaTns+F2Qs/81i9/qOadNZmueYzOvxtRX9eG5Kf1bm1IdFkvPvNfO/stM+Sssddv5PWDGY0jAt/9HOpU+dk/PvN/NvOGL5T7UVvYn5d1XOf3Cg/PvyBwAAAACABZb//n+i5eO/S4+/Kfuy1/HftTn1AQAAAAAAAACetIOO/zdojP+3y/h/AAAAsLCqz+qV3x1/eNu072Krbr9cRDzTWB7omHSxzGrb/QAAAAAAAAAAAACALhnsnMN7uYgYRsQzq6tlWVY/dc36oB53/aOu69sPXdb2kzwAAOz4+HjjWv4iYjkiLqfv+huurq6W5fLKarlarizl97OjpeVypfa5Nk+r25ZG+3hDPBiV1S9brq1XN+vz8qz25u+r7mtU9vfRsfloMXAAiIidV6P7016R/uf16mgqy2ej5Tc5HBF77P8cUfZ/9qPtxykAAABw+MqyLIv0dd4n0zH/XtudAgDmIr/+N48LqNVqtVqtfvrqunKyu/UiIjbr61TvGQzHDwBHzGZ80nYXaJH8O20QES+03QlgoRVtd4BDcf/BnfUi5VvUXw/S+O75XJCx/DeL7fXy+pOmszTPMZnX42sr+vHclP48P6c+LJKcf6+Z/5Wd9lFa7vHzL8f+TNjWOUbT8q+280QL/Wlbzr/fzL/hsPf/edmK3sT8uyrnPzhQ/n35AwAAAADAAst//z+xUMd/R4+6OTPtdfx3beIah9cXAAAAAAAAAHhS7j+4s56ve83H/78wYTnXfz6dcv6F/Dsp599r5P/VxnL92vy9tx/m/+8Hd9b/eOtfn8/T/ea/lGeK9Mgq0iOiSPdUDNL0cbbus7aG/VF1T8Oi1x+kc37K4btxLa7HRpwdW7aX/j8etp8ba696OtxuL/s77efH2ge77Xn9C2Ptw3R2UbmS20/Hevw8rsc72+1V29KM7V+e0V7OaM/59+3/nZTzH9R+qvxXU3vRmFbufdT7zH5fn066n7euffE3Zw9/c2baiv7uttVV2/dSC/3Z/j85Nopf3ty4cfr21Vu3bpyLNBm79XykyROW8x+mn93n/5d32vPzfn1/vffR6MD5L4qtGEzN/+XafLW9r8y5b23I+Y/ST87/ndQ+ef8/yvlP3/9fbaE/AAAAAAAAAAAAAAAAsJeyLLcvEX0rIi6m63/aujYTAJifYe31v0xy27zq/pzvT60+tLoo5nF/xcJsbwv1p+Wc738wfkPb269WP4m6rpzszXoREX+rr1O9Z/j1pF8GACyyTyPin213gtbIv8Py9/1V01NtdwaYq5sffPjTq9evb9y42XZPAAAAAAAAAIBHlcf/XKuN/3yqLMu7jeXGxn99O9Yed/zPfDnNwwFGpwxU3T/4Nu1lqzfq92rDjb8Y08b/Hu7O7TX+92DG/Q1ntI9mtC/NaF+e0T7xQo+anP+LtfHOT0XEycbw610Y/7U55n0X5Pxfqj2eq/y/0liunn/5+6Ocf28s/zO33v/FmZsffPjatfevvrfx3sbPLpw7d/bCxYuXLl068+616xtnd/5tsceHK+efx752Hmi35Pxz5vLvlpz/l1It/27J+X851fLvlpx/fr8n/27J+efPPvLvlpz/K6mWf7fk/L+Wavl3S87/1VTLv1ty/l9Ptfy7Jef/Wqrl3y05/9Opln+35PzPpHqf+a8cdr+Yj5x/PsJl/++WnH8+s0H+3ZLzP59q+XdLzv9CquXfLTn/11Mt/27J+X8j1fLvlpz/xVTLv1ty/t9Mtfy7Jed/KdXy75ac/7dSLf9uyfl/O9Xy75ac/xupln+35Py/k2r5d0vO/7upln+35Py/l2r5d0vO/81Uy79bHn7/vxkzZszkmbafmQAAAAAAAAAAAACApnmcTtz2NgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/2cHDgQAAAAAgPxfG6GqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqoKO3AgAAAAAADk/9oIVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVdi71xi5zvp+4Gf25rUDiYGQv5O/gY1jEuNssutLfKF1MeHacCuBUOgF2/WuzYJveO0SaCSbBkokjIoq2oZKbQGhNm8q/IIXtAKUF6gVUiVoX9A3iAqVFxEKKCBVohVkqznneZ6dmZ3Lrne9njnn85Hsn/fMmTnPnHnOmf3t+jsHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgEZ3vm72U7Usy+p/8r82Z9kL6v/eOLE5X/bqGz1CAAAAYLV+lf/93C1pweFl3KlhnX95+Xe+urCwsJC9d/jPRz+3sJBumMiy0Q1Zlt8WXf3h+2qN6wSPZ+O1oYavh3psfrjH7SM9bh/tcftYj9s39Lh9vMftS3bAEhuLn8fkD7Y9/+fmYpdmt2aj+W3b29zr8dqGoaH4s5xcLb/PwuiJbC47lc1m003rF+vW8vW/fmd9W2/O4raGGra1tT5DfvbY8TiGWtjH25u2tfiY0U9em038/GePHf+7C8/e3q723A1Nj1eMc8e2+jg/EZYUY61lG9I+ieMcahjn1javyXDTOGv5/er/bh3nc8sc5/DiMNdV62s+ng3l//5uvp9GGn+sl/bT1rDsF3dlWXZ5cdit6yzZVjaUbWpaMrT4+owXM7L+GPWp9OJsZEXz9M5lzNN6ndnePE9bj4n4+t8Z7jfSYQyNL9NPPj7W8Lr/cuFa5mlUf9adjpXWObjWx0q/zME4L76bP+kn2s7B7eH5P3Z35znYdu60mYPpeTfMwW295uDQ2HA+5vQi1PL7LM7BXU3rD+dbquX1mbu7z8GpC6fPTc1/9GP3zZ0+dnL25OyZPbt2Te/Zt+/AgQNTJ+ZOzU4Xf1/j3u5/m7KhdAxsC/suHgP3tKzbOFUXvji25Px7rcfheJfjcHPLumt9HI60Prna+hyQS+d0cWy8u77Tx68MZR2Osfz12bn64zA974bjcKThOGz7ntLmOBxZxnFYX+fczuV9zzLS8KfdGDq/F6xuDm5umIOt34+0zsG1/n6kX+bgeJgX39/Z+b1gaxjvE5Mr/X5kONvU9KY6tPh0w7mnviR9vz9+IC/t5uUd9RtuGssuzs+ev//RYxcunN+VhbIuXtIwV1rn66aG55Qtma9DK56vh+de/sQdbZZvDvtq/L76X+MdX6v6Onvv7/5a5e9u7fdn09LdWShrbL33Z7t38/r+HMuyz3/r4w9/47HPv67j/qz3m5+YWv334qkvbTj/jnY4/8a+//lie+mhHh8eHSmO3+G0d0abzsfNL9VIfu6q5dt+bmp55+PR8Ge9z8e3djkfb2lZd63Px6OtTy6ej2u9ftqxOq2v53iYJ6emu5+P6+ts2b3SOTmyZE42HmN3hVoL+/9VoVNIp/CGudNp3qZtjYyMhuc1ErfQPE/3NK0/Gnqz+rae2h2+KUyjXN483XFXsf5ww/2i9ZqnEy3rrvU8TT/76jRPa71++nZtWl/P8TAvbt3TfZ7W13l67+rPnRvjPxvOnWO95uDo8Fh9zKNpEubn+2xhY5yD92fHs7PZqWwmv3Usn0+1fFuTDyzvXDkW/qz3uXJLlzm4o2XdtZ6D6X2s09yrjSx98mug9fUcD/PiyQe6z8H6Oq/ffw3fuzYtaT5X7ghL0joN37u2/nyt08+87mjZTddrroyEcX5rf/efzdbXOXVgpX1m9/10b1hyU5v91Hr8djqmZrL12U9bwjifPdB5P9XHU1/ncweXOZ8OZ1l26cMP5j/vDb9fuXTxe19t+r1Lu9/pXPrwgz994Yl/Xsn4ARh8zxdlU/Fe1/BDtOX8/h8AAAAYCLHvHwo10f8DAABAacS+P/6v8ET/DwAAAKUR+/6RUJMy9P9/3HuVLa9/du75S1lK5i8E8fa0Gx4q1osZ1+nw9cTCovryB788+9//dGl5wxvKsuyXD/1R2/W3PBTHVZgI47z6hublS3z1vmVt++gjl9J2G/PrXwiPH5/PcqdBuwjudJZlX7/lM/l2Jt53Ja9PP3Q0rw9ffuLx+jrPHSy+jvd/5iXF+n8dwr+HTxxruv8zYT/8KNTpt7TfH/F+X7nyqq3737O4vXi/2rab86f95PuLx42fk/PZx4v1437uNP5vfPqpr9TXf/SV7cd/aaj9+J8Kj/vlUP/nZcX6ja9B/et4v0+G8cftxfvd/6Vvth3/1U8V6597Y7He0VDj9neEr7e/8dm5xv31aO1Y0/PK3lSsF7c//b0/zW+Pjxcfv3X840euNO2P1vnx9L8XjzPVsn5cHrcT/WPL9uuP0zg/4/af+pOjTfu51/avPvzMy+qP27r9e1vWO/fhnfn2Fx+v+ROb/uaTn2m7vTiew/9wrun5HH5nOI7D9p98f5iP4fb/vVo8XuunKxx9Z/P5J67/hc2Xmp5P9OafF9u/+pqTed0wvnHTTS944c2XX1Hfd1n23Q3F4/Xa/sm/Pds0/i/eVuyPeHvM6Lduv5O4/fMfmTxzdv7i3Ezaq4/dkn92zluL8cTx3hLOra1fHzl74QOz5yemJ6azbKK8H6F3zb4U6k+Lcrn72gtLzqA7Hwmv5x1/+fVNd//bp+Py/3h3sfzKW4r3rXvCep8NyzeH129l21/qyTtvy4/v2tNhhAtLPy94NbZu//GBZa0Ynn/r9wVxvp976Qfy/VC/LX/fiMf1Ksf/g5nicb4W9utC+GTmbbctbq9x/fjZCFfeVRzvq95/4TQXX9e/D6/3235UPH4cV3y+Pwjfx3xzS/P5Ls6Pr10aan38/FM8LofzSXa5uD2uFff3leduazu8+Dkk2eXb86//LD3O7St6mp3Mf3R+6tTcmYuPTl2Ynb8wNf/Rjx05ffbimQtH8s/yPPLBLnf9q3uyLFs8P23Kz08zs/v2ZvnZ6mxRrrNVjD+32vGfe+T4zP7pu2dmTxy7eOLCI+dmz588Pj9/fHZm/u5jJ07MfqTX/edmDu3afXDP/t2TJ+dmDh04eHDPwcm5M2frwygG1cO+6Q9Nnjl/JL/L/KG9B3c98MDe6cnTZ2dmD+2fnp682Ov++XvTZP3efzh5fvbUsQtzp2cn5+c+Nnto18F9+3b3/DTA0+dOzE9Mnb94Zuri/Oz5qeK5TFzIF9ff+3rdn3Ka/8/i+9lWteKD+LJ33LsvfT5r3Zc/3vGhilVaPkD02fBZNN9+0bkDy/k69v2joSZl6P8BAACAXOz7x0JN9P8AAABQGrHv3xBqov8HAACA0oh9/3io6b8EVKT/L13+f8ulZW1f/l/+v3F/yf9XLP//rn7L/xfnC/n/tbHa/L38fyD/L/+f8vNjWZatT37++oxf/l/+nxup3/L/se/fmGV+/w8AAAAlFfv+TaEm+n8AAAAojdj33xRqov8HAACA0oh9/wtCTSrS/8v/y//L/8v/y/+33778/2CS/+9O/r+T4hOh5f/np7IbmJ9fi/GvMP9/eS3HfwPy/xsbv5D/px/1W/4/9v0vDDWpSP8PAAAAVRD7/ptDTfT/AAAAUBqx778l1ET/DwAAAKUR+/7NoSYV6f/l/1eV/0+ZK/n/5vHL/zeT/w/zQf5f/n8dyP93J//fg/z/Db1+/qCP3/X/5f9Zqt/y/7Hvf1GoSUX6fwAAACit0cV/xr7/xaEm+n8AAADoPyPXdrfY978k1GRJ/3+NGwAAAABuuNj335q1BMEr8vt/+X/X/5f/l/+X/2+//eXn/4cz+f/+If/fnfx/D/L/8v/Vzf+PZ/L/XAf9lv/P+/5sPHtpqElF+n8AAACogtj33xZqov8HAACA0oh9//8LNdH/AwAAQGnEvn9LqElF+n/5/9Lk/3/R+NLJ/8v/d9u+/L/r/5eZ/H938v89yP/L/1c3/+/6/1wX/Zb/j33/7aEmFen/AQAAoApi339HqIn+HwAAAEoj9v3/P9RE/w8AAAClEfv+raEmFen/5f/7PP8fk6Ou/y//L//fl/n/cfn/viP/3538fw/y//L/8v/y/6ypfsv/x77/ZaEmFen/AQAAoApi3//yUBP9PwAAAJRG7PtfEWqi/wcAAIDSiH3/RKhJRfr/leT/a5fl/zu5ztf/H1vG9f+byP/L/3fbvvy/6/+Xmfx/d/L/Pcj/y//L/8v/s6b6Lf8f+/47Q00q0v8DAABAFcS+f1uoif4fAAAASiP2/XeFmuj/AQAAoDRi37891KQi/b/r/w9E/j+T/5f/l/+X/5f/Xx75/+7k/3uQ/5f/l/+X/2dNrXH+f6h14Urz/7Hvf2WoSUX6fwAAAKiC2PffHWqi/wcAAIDSiH3/PaEm+n8AAAAojdj37wg1qUj/L/8v/y//L/8v/99++/L/g0n+vzv5/x7k/+X/5f/l/1lT/Xb9/9j3vyrUpCL9PwAAAFRB7Pt3hpro/wEAAKA0Yt9/b6iJ/h8AAABKI/b9k6EmFen/5f/l/+X/5f/l/9tvX/5/MMn/dyf/34P8v/y//L/8P2uq3/L/se+/L9SkIv0/AAAAVEHs++8PNdH/AwAAQGnEvn8q1ET/DwAAAKUR+/7pUJOK9P/y//L/8v/y/yvK/79i8XHl/wvy//1F/r87+f8e5P/l/294/n9U/p9S6bf8f+z7d4WaVKT/BwAAgCqIff/uUBP9PwAAAJRG7Pv3hJro/wEAAKA0Yt+/N9SkIv2//L/8v/y//L/r/7ffvvz/YJL/727t8//xKcr/y//L/7v+v/w/S/Vb/j/2/Q+EmlSk/wcAAIAqiH3/vlAT/T8AAACURuz794ea6P8BAACgNGLffyDUpCL9v/y//L/8v/y//H/77cv/Dyb5/+5c/7+Hlvz/WHhfkv+X/x+E/H99bsn/02/6Lf8f+/6DoSYV6f8BAACgCmLf/+pQE/0/AAAAlEbs+38t1ET/DwAAAKUR+/5fDzWpSP8v/y//L/8v/9/v+f8x+X/5/xWQ/+9O/r8H1/+X/x/g/L/r/9OP+i3/H/v+Q6EmFen/AQAAoApi3/8boSb6fwAAACiN2Pe/JtRE/w8AAAClEfv+w6EmFen/5f/XKf8fF8r/y//L/7v+v/z/dSX/3538fw/y//L/8v/y/6ypfsv/x77/taEmFen/AQAAoApi3/9gqIn+HwAAAEoj9v2vCzXR/wMAAEBpxL7/9aEmFen/5f9d///G5/9Hm8Yu/794P/n/gvy//P9KyP93J//fg/y//L/8v/w/a6rf8v+x739DqElF+n8AAACogtj3vzHURP8PAAAApRH7/jeFmuj/AQAAoDRi3//mUJOK9P/y//L/Nz7/7/r/8v8F+X/5/7Ug/9/dYOb/67tR/j+T/+/78cv/y/+zVL/l/2Pf/5uhJhXp/wEAAKAKYt//UKiJ/h8AAABKI/b9bwk10f8DAABAacS+/62hJhXp/+X/5f/l/+X/5f/bb1/+fzDJ/3c3YPn/X90clrv+f0H+v7/Hv9L8/0jL19cl///DTvn/hQ2t95f/53rot/x/7PvfFmpSkf4fAAAAqiD2/W8PNdH/AwAAQGnEvv8doSb6fwAAACiN2Pf/VqhJRfp/+f/6OBbTy/L/8v/5Avl/+X/5/4El/9/dgOX/w/X/5f8j+f/+Hr/r/8v/s1S/5f9j3//OUJOK9P8AAABQBbHvfzjURP8PAAAApRH7/neFmuj/AQAAoDRi3//uUJOK9P/y/67/L/8v/y//33778v+DaW3y/8Py//L/8v/y//2R//8v+X8GW7/l/2Pf/0ioSUX6fwAAAKiC2Pe/J9RE/w8AAAClEfv+3w410f8DAABAacS+/72hJhXp/+X/ByX/PyH/v8L8/1hYJv8v/y//Xy2u/9/d1u0/7pysbCT/L/8v/98f+X/X/2fA9Vv+P/b97ws1WX7/P77sNQEAAIAbIvb9vxNqUpHf/wMAAEAVxL7/d0NN9P8AAABQGrHv/71Qk9L1/59ru1T+f1Dy/67/n7n+v/x/y/OR/5f/b2f98v/xzDNw+X/X/+9G/l/+X/6/Y/5/qMf95f9pp9/y/7Hv//1Qk9L1/wAAAFBdse9/f6iJ/h8AAAAGQrv/k90q9v1HQk30/wAAAFAase8/GmpSkf5f/l/+X/6/T/P/f7HtX7//nbcf3SX/L/8v/78i63r9//rBP3jX/5f/70b+X/5f/t/1/1lT/Zb/j33/sVCTxcbvrS7wDwAAAIMt9v1/EGpSkd//AwAAQBXEvv94qIn+HwAAAEoj9v0zoSYV6f/l/+X/5f/7NP8/wNf/j/tjkPL/kxsGKP8fT7ry/22ta/7/PYs5cfn/leb/x9oubc3/1+T/m8j/r3j8386yTP5f/p8bqN/y/7Hvnw01qUj/DwAAAFUQ+v6hE0VdvEH/DwAAAKUR+/6ToSb6fwAAACiN2Pd/INSkIv2//L/8v/y//L/r/7ffft/m/13/vyv5/+76J//fnuv/y/8P8vjl/+X/Warf8v+x758LNalI/w8AAABVEPv+D4aa6P8BAACgNGLf/6FQE/0/APwfe/fRZFl93nH8Nm6KnqJMubzxwgu890tgYdb2C/CCjRd2lctlg22cE4OzEso5IAkFFFAACaGEhLJACQllIQnlLIQykmpU0/08z3Q4fW43fW/fc///z2fhh2nouRerC/jRfOcAADQjd/9fxi2d7H/9v/5f/6//1/8Pv77+fz3p/8fp/+fQ/+v/9f/6fxZqav1/7v6/ils62f8AAADQg9z9V8ct9j8AAAA0I3f/NXGL/Q8AAADNyN3/13HLWu7/jQePWwnq//X/zfb/f6D/P+z19f/6/5bp/8fp/+c4rf7/spn+fwlW/f5P0P8/NNP/06ip9f+5+/8mblnL/Q8AAAAMyd3/t3GL/Q8AAADNyN1/bdxi/wMAAEAzcvf/XdzSyf7f1/9vzPrs/zPj1f+31P9f6PU3Z/r/Pa+v/9f/t+x0+//rz/+VT/+v//f8/6D/9/x//T/7Ta3/z93/93FLJ/sfAAAAepC7/x/iFvsfAAAAmpG7/x/jFvsfAAAAmpG7/5/ilk72/wSf/7/9P4Ln/+/8WP+/kP7f8//3vb7+X//fsr6f/78194/oqf+/9r5Lr37o9t+94zivr//X/+v/9f8s1tT6/9z9/xy3dLL/AQAAoAe5+/8lbrH/AQAAoBm5+/81brH/AQAAYA2dGfxo7v5/i1s62f8T7P933pf+f5v+/xT7/y39v/5f/9+Cvvv/+Xrq/x/J63fS/w//Q/EE+vmTWtj7v2mm/9f/syBT6/9z9/973NLJ/gcAAIAe5O7/j7jF/gcAAIDpGvoPsUfk7r8ubrH/AQAAoBm5+8/GLZ3sf/3/8vv/X+n/16P/9/x//b/+vwn6/3H6/zn66P8Ppf/3/H/9P4s2tf4/d//1cUsn+x8AAAB6kLv/P+MW+x8AAACakbv/v+IW+x8AAACakbv/v+OWTva//t/z//X/+n/9//Dr6//Xk/5/nP5/Dv3/Sfv5i/X/+n/9P7sds/9/eOQv2wvp/3P3/0/c0sn+BwAAgB7k7v/fuMX+BwAAgGbk7v+/uMX+BwAAgGbk7v//uKWT/a//1//r/0/Y/1924efprv8/+KW3Tf8/TP9/OvT/4ybT/29sDn5Y/7/2/b/n/+v/9f/sMbXn/+fuf1Tc0sn+BwAAgB7k7n903DKy/4/9L/MBAACAlcrd/5i4xff/AQAAYO1ldZa7/7FxSyf7X/+v/9f/e/6/5/8Pv/5Y/3/Hrven/58W/f+4yfT/h9D/6//X+f3r//X/HDS1/j93/+Pilk72PwAAAPQgd/8NcYv9DwAAAM3I3f/4uMX+BwAAgGbk7n9C3NLJ/h/u/y/8fv3/0ej/975//f/w18ei+v/8GfX/o/3/lZ7/3yf9/zj9/xz6f/2//v+w/v/MvM/X/zNkav1/7v4nxi2d7H8AAADoQe7+J8Ut9j8AAAA0I3f/k+MW+x8AAACakbv/KXFLJ/vf8//1//r/9ev/Pf9/xyqf/z879f5/U/9/RPr/cfr/OfT/+n/9//jz/0d+FQD9P0Om1v/n7n9q3NLJ/gcAAIAe5O5/Wtxi/wMAAMB62P3fDuz/D0pD7v6nxy32PwAAADQjd/8z4pZ29v/oszr1//p//b/+X/8//PrT6v89//+o9P/j9P9z6P+X0c9vNtb/33jY50+h/79u2f3/CP0/Q/b0/3de+Piq+v/c/c+MW9rZ/wAAANC93P3PilvsfwAAAGhG7v5nxy32PwAAADQjd/9z4pZO9v/S+/+RX31A/6//1//r//X/+v9F0/+P0//Pof/3/H/P/9f/s1B7+v9dVtX/5+5/btzSyf4HAACAHuTuf17cYv8DAABAM3L33xi32P8AAADQjNz9z49bOtn/nv+v/9f/6//1/8Ovr/9fTyfq7y/S/xf9v/5f/6//1/+zAFPr/3P3vyBu6WT/AwAAQA9y978wbrH/AQAAoBm5+2+KW+x/AAAAaEbu/hfFLZ3sf/3/cvv//Lj+X/8/0//r//X/p6Lb5/9vDP2d6KBD+v97/vzsH+39iP5f/6//1//r/zmi3xr5fZPo/89d+KfL3P0vjls62f8AAADQg9z9L4lb7H8AAABoRu7+l8Yt9j8AAAA0I3f/zXHLMff/WPMw7MHLj/0pS6D/9/x//b/+X/8//Pr6//XUbf9/RJ7/P4f+X/+v/9f/s1CT6P93/Th3/8viFt//BwAAgGbk7n953GL/AwAAQDNy978ibrH/AQAAoBm5+18Zt3Sy//X/+n/9v/5f/z/8+vr/9aT/H6f/n2Od+v+bT9D/bw5/eNX9/Emt+v3r//X/HDS1/j93/y1xSyf7HwAAAHqQu/9VcYv9DwAAAM3I3f/quMX+BwAAgGbk7n9N3NLJ/tf/6//1//p//f/w6+v/15P+f5z+fzab3TryBob6/3OXTLP/9/z/yb1//b/+n4Om1v/n7n9t3NLJ/gcAAIAe5O6/NW6x/wEAAKAZuftvi1vsfwAAAGhG7v7XxS2d7H/9v/5f/6//X0D/v6ev1f8P0/+fDv3/OP3/HOv0/H/9/+Tev/5f/89BU+v/c/e/Pm7pZP8DAABAD3L33x632P8AAADQjNz9b4hb7H8AAABoRu7+O+KWTva//l//r//X/3v+//Dr6//X0/L6/5n+X/+v/59D/6//1/+z39T6/9z9b4xbOtn/AAAA0IPc/W+KW+x/AAAAaEbu/jfHLfY/AAAANCN3/1vilk72v/5f/7/dz8cb0P/r/2cr6//P/zVI/6//PznP/x+n/59D/6//1//r/1mo4f7/upX1/7n73xq3dLL/AQAAoAe5+++MW+x/AAAAaEbu/rfFLfY/AAAANCN3/9vjlk72v/5f/7/3+f+zmf5f/+/5/ztOof/fmun/F07/P07/P4f+v83+/6JZQ/3/mUM/X//PFE3t+f+5+++KWzrZ/wAAANCD3P3viFvsfwAAAGhG7v53xi32PwAAADQjd/+74pZO9r/+X/+/t//3/P/tD+j/9f+e/7+29P/j9P9z6P/b7P89/1//z8pMrf/P3f/uuKWT/Q8AAAA9yN3/nrjF/gcAAIBm5O5/b9xi/wMAAEAzcve/L27pZP/r//X/+n/9v/5/+PX1/+tJ/z9O/z+H/l//r//X/7NQU+v/c/e/P27pZP8DAABAD3L33x232P8AAADQjNz998Qt9j8AAAA0I3f/B+KWTva//l//r/9fz/5/S/+v/9f/D5pK/3/FFX94r/5f/6//1//r//X/vZta/5+7/4NxSyf7HwAAAHqQu/9DcYv9DwAAAM3I3f/huMX+BwAAgGbk7v9I3NLJ/j/Y/1882ylUdwz1/9Go6f930f/vff/6/+GvD8//1//r/5dvKv2/5/8/svev/9f/r/P7P1b//3sHP1//T4um1v/n7r83bulk/wMAAEAPcvd/NG6x/wEAAKAZufs/FrfY/wAAANCM3P33xS2d7H/P/9f/6//1//r/4dfX/68n/f84/f8c+n/9v+f/X/Onv6H/Z3Gm1v/n7v943NLJ/gcAAIAe5O7/RNxi/wMAAEAzcvd/Mm6x/wEAAKAZufs/Fbd0sv/1//p//f8S+v/N4a8P/b/+X/+/fPr/cfr/sv9PbUc//f/W0AdX3c+f1Krf/5L6/7su9fx/1tjU+v/c/Z+OWzrZ/wAAANCD3P2fiVvsfwAAAGhG7v7Pxi32PwAAADQjd//n4pZO9r/+v/H+//wPuu///8Tz//e9vv5f/98y/X/+HX2Y/n+Ofvr/Qavu59f9/Tfz/H/9Pws0tf4/d//9cUsn+x8AAAB6kLv/83GL/Q8AAADNyN3/hbjF/gcAAIBm5O7/YtzSyf7X/zfe/+97/v/GrMf+fwXP/z/k60P/r//X/y+f/n+c/n8O/b/+X/+v/2ehptb/5+5/YGOzy/0PAAAA6+qPf/8v7j/qH/vA9v/dmn0pbrlydu6I38YGAAAAJu787t/YnM2+vP0j3/8HAACAFuXu/0rc0sn+1//31f/3+fz/Jfb/519Y/6//1/9Piv5/3Ar6/63jvD/9v/5/nd+//l//z0FT6/9z9381btk1/DaP/WcJAAAATEnu/q/FLZ18/x8AAAB6kLv/63HLgf3vlwMEAACAdZW7/xtxSyff/9f/T7z/ny2p/48/Tv+/w/P/9f9Dr6//X0/6/3En7P/PbXj+v/5/hP5f/6//Z7+p9f+5+78Zt3Sy/wEAAKBRe/6NQu7+b8Ut9j8AAAA0I3f/t+MW+x8AAACakbv/O3FLJ/tf/3/q/X+m6kt8/v+Z+i3P/++8/79ha/D19f/6/5bp/8et4Pn/+v+9P7/+f4l2vf9L9P/6f6Zhav1/7v7vxi2d7H8AAADoQe7+78Ut9j8AAAA0I3f/9+MW+x8AAACakbv/wfPnN/vb/yvp/+Mn6bT/P97z/4/Y///2ZXtfe+7z//X/ffT/h7x+O/3/71x69u6r/uy2W/T/XHCa/X9+Lej/9f/6/x0T6v89/1//z0Qsvv/f3PPB4/b/27t/tjX7QdzSyf4HAACAHuTufyhusf8BAACgGbn7fxi32P8AAADQjNz9P4pbOtn/nv/fRv+/3zr2//n/6xX0/2cfcf9/ZjabraT/z6a49/7f8//1/wd5/v84/f8c+n/9v/5f/89CLb7/3/vB4/b/uft/HLd0sv8BAACgB7n7fxK35P7fOPa/ugcAAAAmJnf/T+MW3/8HAACAZuTu/1nc0sn+1//r/6fS/yfP/7/weW09//+qilP77P8vr9/S/y+X/n+c/n8O/b/+X/+v/2ehptb/5+7/edzSyf4HAACAHuTufzhusf8BAACgGbn7fxG32P8AAADQjNz9v4xbOtn/+v9W+/8s4vX/+v+p9P+e/+/5/6dD/z9O/z+H/n/N+//4gpnp//X/TMXU+v/c/b8OAAD//5W8bEE=") mkdir(&(0x7f0000000000)='./bus\x00', 0x0) 3.244535239s ago: executing program 7 (id=10131): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x2, 0x800) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000200)={0x0, 0x1, 0x0, 0x0, "4620f63a4e6b5c9b4410b99e0e549fcfdeb92566761ad1c34ca4a1abe476fa96"}) 2.967850639s ago: executing program 7 (id=10136): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000800)=@newsa={0x140, 0x10, 0x713, 0x20000000, 0x0, {{@in=@multicast2, @in=@multicast2}, {@in6=@ipv4={'\x00', '\xff\xff', @broadcast}, 0x0, 0x32}, @in=@dev, {0xfffffffffffffffc}, {0x3}, {}, 0x0, 0x0, 0xa, 0x1, 0x7}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @tfcpad={0x8, 0x16, 0x81}]}, 0x140}}, 0x0) 2.604191611s ago: executing program 7 (id=10141): r0 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) writev(r0, &(0x7f0000000700)=[{&(0x7f00000000c0)="355902", 0x3}], 0x1) 2.599483543s ago: executing program 0 (id=10142): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newsa={0x160, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in=@remote}, {@in=@private=0xa010100, 0x1, 0x33}, @in=@local, {0x0, 0x7, 0x0, 0x9, 0x0, 0x2, 0xced}, {0x0, 0x0, 0x0, 0x4}, {0x3ff}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x6d, 0x14, {{'cmac(aes)\x00'}, 0x108, 0x0, "87881114f19cac6ed9bdd6ed84821b9814228cc5fd34301424191a451ff60ab066"}}]}, 0x160}, 0x1, 0x0, 0x0, 0x4000}, 0x20000894) 2.513354036s ago: executing program 4 (id=10143): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000002000000000000000000000a00000000000000000000000d"], &(0x7f00000002c0)=""/193, 0x32, 0xc1, 0x1, 0x0, 0x0, @void, @value}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f000000b5c0)={0x8, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="183000000003000000000000030000009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x7, 0x94, &(0x7f00000000c0)=""/148, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) 2.310625611s ago: executing program 0 (id=10146): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_RENAME(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, 0x5, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0xc0}, 0x10000014) 2.258134623s ago: executing program 7 (id=10148): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000001c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x4c8, 0x2e0, 0x9403, 0x3002, 0x0, 0x2c0, 0x3f8, 0x3d8, 0x3d8, 0x3f8, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2e0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x80, 0x1, 0x0, 'syz0\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'virt_wifi0\x00'}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x528) 2.191773657s ago: executing program 4 (id=10149): r0 = syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2) ioctl$VIDIOC_G_SLICED_VBI_CAP(r0, 0xc0745645, &(0x7f00000000c0)={0x7, [0xb, 0x1c3, 0x4, 0x2, 0xa, 0x0, 0x3ff, 0x80, 0x6, 0x400, 0x1, 0x8, 0x4, 0x2, 0x1, 0x5, 0xd, 0x3, 0x3ee5, 0x3, 0x7ff, 0x4d, 0x7, 0x1, 0x7f, 0x6, 0x1, 0x0, 0xb, 0x41a3, 0xfff, 0xff, 0x400, 0xd, 0x5, 0x6, 0x5, 0xfe8a, 0x1ed1, 0xe, 0x3, 0x7, 0x91ad, 0x8, 0xbbe0, 0x4, 0xc, 0x8], 0x2}) 2.146342196s ago: executing program 2 (id=10151): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/crash_elfcorehdr_size', 0x0, 0x0) read$FUSE(r0, &(0x7f0000001b80)={0x2020}, 0x2020) 1.980475928s ago: executing program 0 (id=10153): r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x1000001, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000000)={0x980902, 0x4}) 1.942968073s ago: executing program 4 (id=10154): r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendmmsg$inet(r0, &(0x7f0000001780)=[{{&(0x7f00000007c0)={0x2, 0x4e22, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000a00)=[@ip_ttl={{0x14, 0x0, 0x2, 0x3}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xad}}], 0x30}}], 0x1, 0x20004840) 1.930173986s ago: executing program 7 (id=10155): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005c40)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0x68, 0x30, 0x9, 0x0, 0x0, {}, [{0x54, 0x1, [@m_bpf={0x50, 0x1, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x2007}, @TCA_ACT_BPF_OPS={0x4}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 1.904864809s ago: executing program 2 (id=10156): r0 = socket(0x1e, 0x5, 0x0) sendmsg$tipc(r0, &(0x7f00000003c0)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x0, 0x1}}}, 0x10, 0x0}, 0x0) 1.709465252s ago: executing program 0 (id=10159): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x4c, 0x10, 0x421, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bond={{0x9}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x5}, @IFLA_BOND_USE_CARRIER={0x5, 0x6, 0x5}, @IFLA_BOND_PEER_NOTIF_DELAY={0x8, 0x1c, 0x9}]}}}]}, 0x4c}}, 0x0) 1.666950623s ago: executing program 4 (id=10160): r0 = socket$inet6(0x10, 0x3, 0x0) write(r0, &(0x7f0000000040)="2400000021002551241c0165ff00fc020200000000100f000ee1000c08000b0003000000", 0x24) 1.65030333s ago: executing program 7 (id=10161): syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x2000012, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x1, 0x60b9, &(0x7f0000013cc0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) 1.590488493s ago: executing program 2 (id=10162): r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000040)="3a03000019002551075c0165ff0ffc02802000030004000500e1000c0400070280000f00", 0x33a) 1.452295063s ago: executing program 3 (id=10164): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c000000240001002abd7000fedbdf254400000038000e805a70e31c4f2c499a310051800c00200000000000", @ANYRES32=0x0, @ANYBLOB="d5938376f408f47c06aa365b79a6"], 0x4c}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) 1.407155488s ago: executing program 4 (id=10165): syz_open_procfs(0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005938d74010973077339600000001090212000100001e000904"], 0x0) 1.357029402s ago: executing program 0 (id=10166): syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x10, &(0x7f0000000140)={[{@norecovery}]}, 0xee, 0x488, &(0x7f0000000940)="$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") bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080)=@generic={&(0x7f0000000040)='./file0\x00'}, 0x18) 1.218697432s ago: executing program 2 (id=10167): r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) close(r0) 1.157267403s ago: executing program 5 (id=10168): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000100), &(0x7f0000000180)=0x4) 1.156556307s ago: executing program 3 (id=10169): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x3, 0xf, &(0x7f0000000240)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 954.427091ms ago: executing program 2 (id=10170): syz_mount_image$nilfs2(&(0x7f0000000100), &(0x7f0000001f80)='./bus\x00', 0x1000000, &(0x7f00000002c0)=ANY=[], 0x1, 0xb40, &(0x7f0000001340)="$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") mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1000, 0x1) 937.248781ms ago: executing program 3 (id=10171): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x3a, 0x0, 0x0) 881.26498ms ago: executing program 5 (id=10172): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000140)=[{0x20, 0xe, 0x0, 0xfffff00c}, {0x6}]}, 0x8) 740.778223ms ago: executing program 5 (id=10173): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="600000000206010800000000000000000000000005000400000000000900020073797a31000000201400078005001400090000000800124000000000050005000a000000050001000600000011000300686173683a6970"], 0x60}}, 0x0) 640.361265ms ago: executing program 3 (id=10174): r0 = syz_open_procfs(0x0, &(0x7f0000000380)='sessionid\x00') readv(r0, &(0x7f00000000c0)=[{0x0, 0x5}, {&(0x7f0000000100)=""/98, 0x62}], 0x2) 616.952798ms ago: executing program 5 (id=10175): capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)) unshare(0x62040200) 433.398703ms ago: executing program 0 (id=10176): r0 = syz_mount_image$btrfs(&(0x7f00000051c0), &(0x7f0000005200)='./file0\x00', 0x1204408, &(0x7f00000003c0)={[{@compress_force}, {@clear_cache}, {@nodatasum}, {@nossd}, {}, {@space_cache_v1}]}, 0x0, 0x51ab, &(0x7f000000a440)="$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") ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f0000000080)={{}, {@val, @actul_num={@void, 0xeceb, 0x6b}}}) 329.814539ms ago: executing program 3 (id=10177): r0 = syz_open_dev$sndctrl(&(0x7f0000000240), 0x0, 0x80180) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r0, 0xc008551c, &(0x7f0000000280)={0x3, 0x8, [0xa, 0x7]}) 329.230115ms ago: executing program 5 (id=10178): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @rand_addr=0x64010102}, 0xfffffffffffffde5) 177.223472ms ago: executing program 2 (id=10179): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newtaction={0x50, 0x12, 0xbf68af9d17701201, 0x70bd2d, 0x25dfdbff, {0x7}, [{0x4}, {0x4}, {0x34, 0x1, [@m_csum={0x30, 0x3, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x24008040}, 0x4c050) 97.947632ms ago: executing program 3 (id=10180): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x6, &(0x7f0000000500)=ANY=[@ANYBLOB="1802000001000000000000000000000085000000870000001806000000000000000000009c00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 0s ago: executing program 5 (id=10181): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x64, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x5}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x64}}, 0x40080c0) kernel console output (not intermixed with test programs): . Applying ECC. [ 846.901563][T26746] JBD2: Ignoring recovery information on journal [ 847.040771][T26849] openvswitch: netlink: IP tunnel dst address not specified [ 847.146753][T26746] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode. [ 847.415113][T26864] mkiss: ax0: crc mode is auto. [ 847.603461][T25573] ocfs2: Unmounting device (7,7) on (node local) [ 848.009765][T26903] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8478'. [ 848.112215][T26903] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8478'. [ 848.180592][T26903] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 848.230327][T26903] ip6gretap1: entered allmulticast mode [ 848.804461][T26949] netlink: 'syz.0.8494': attribute type 7 has an invalid length. [ 848.857677][T26952] loop2: detected capacity change from 0 to 64 [ 849.074179][T26962] cifs: Unknown parameter 'ÿÿITäŒ&¬æ:ÅèÙ"‚Õëï1:ºÃÃÓ­'Ä4,Zz-#FÇ<æõ]%gCžÊ [ 849.074179][T26962] SÃȘØÈžZ§6ŸÂ' [ 849.648812][T26987] netlink: 12 bytes leftover after parsing attributes in process `syz.7.8503'. [ 850.083011][T26942] loop5: detected capacity change from 0 to 32768 [ 850.111208][T27008] netlink: 68 bytes leftover after parsing attributes in process `syz.4.8510'. [ 850.127418][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 850.158311][T26942] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.8490 (26942) [ 850.174242][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 850.256829][T26942] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 850.317452][T26942] BTRFS info (device loop5): using sha256 (sha256-ni) checksum algorithm [ 850.399776][T26942] BTRFS info (device loop5): using free-space-tree [ 850.441966][T26958] loop3: detected capacity change from 0 to 32768 [ 850.520885][T27028] loop4: detected capacity change from 0 to 1024 [ 850.682491][T27028] hfsplus: trying to free free bnode 0(1) [ 850.720922][T26942] BTRFS error (device loop5): unable to set label with more than 255 bytes [ 850.879598][T27051] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8517'. [ 850.916118][ T6168] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 850.944239][ T81] hfsplus: b-tree write err: -5, ino 4 [ 851.120584][T27056] loop0: detected capacity change from 0 to 4096 [ 851.210886][ T9] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 851.316736][T27056] ntfs3(loop0): ino=1a, mi_enum_attr [ 851.338939][T27056] ntfs3(loop0): Mark volume as dirty due to NTFS errors [ 851.454566][ T9] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 851.521611][ T9] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 851.581828][ T9] usb 8-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 851.629600][ T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 851.672505][ T9] usb 8-1: SerialNumber: syz [ 851.963675][ T9] usb 8-1: 0:2 : does not exist [ 851.977324][ T9] usb 8-1: unit 5: unexpected type 0x03 [ 852.108218][ T6426] usb 4-1: new high-speed USB device number 116 using dummy_hcd [ 852.129853][ T9] usb 8-1: USB disconnect, device number 2 [ 852.343661][T25577] Bluetooth: hci0: command 0x0406 tx timeout [ 852.360614][ T6426] usb 4-1: config index 0 descriptor too short (expected 3133, got 61) [ 852.406926][ T6426] usb 4-1: config 0 has an invalid interface number: 156 but max is 1 [ 852.421639][ T6774] udevd[6774]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 852.433799][ T6426] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 852.448616][ T6426] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 852.467389][ T6426] usb 4-1: config 0 has no interface number 0 [ 852.477663][ T6426] usb 4-1: config 0 interface 156 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 852.490473][ T6426] usb 4-1: config 0 interface 156 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 852.501160][ T6426] usb 4-1: config 0 interface 156 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 852.514808][ T6426] usb 4-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 852.523947][ T6426] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 852.536057][ T6426] usb 4-1: config 0 descriptor?? [ 852.545268][ T6426] gspca_main: spca561-2.14.0 probing abcd:cdee [ 852.612083][T27138] loop5: detected capacity change from 0 to 4096 [ 852.645171][T27149] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8537'. [ 852.656990][T27138] ntfs3(loop5): Different NTFS sector size (4096) and media sector size (512). [ 852.708975][T27149] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (511) [ 852.760933][ T6426] spca561 4-1:0.156: probe with driver spca561 failed with error -22 [ 852.782699][ T6426] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 852.803064][T27149] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255 [ 852.817240][ T6426] usb 4-1: MIDIStreaming interface descriptor not found [ 852.855774][T27138] ntfs3(loop5): ino=19, mi_enum_attr [ 852.888295][T27138] ntfs3(loop5): Mark volume as dirty due to NTFS errors [ 853.025911][ T6426] usb 4-1: USB disconnect, device number 116 [ 853.163709][T27180] netlink: 'syz.4.8542': attribute type 12 has an invalid length. [ 853.652500][T27211] loop3: detected capacity change from 0 to 512 [ 853.820315][T27211] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 853.914269][T27211] ext4 filesystem being mounted at /1436/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 853.949663][T27230] netlink: 24 bytes leftover after parsing attributes in process `syz.5.8554'. [ 853.971123][T27227] libceph: resolve '‹Rô' (ret=-3): failed [ 853.990426][T27211] EXT4-fs error (device loop3): ext4_do_update_inode:5211: inode #2: comm syz.3.8548: corrupted inode contents [ 854.049289][T27211] EXT4-fs (loop3): Remounting filesystem read-only [ 854.077545][T27237] netlink: 56 bytes leftover after parsing attributes in process `syz.0.8555'. [ 854.282621][ T6164] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 854.499636][T27251] loop4: detected capacity change from 0 to 4096 [ 854.524422][ T30] audit: type=1326 audit(2000000264.157:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27257 comm="syz.2.8562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f677678e969 code=0x7ffc0000 [ 854.625191][ T30] audit: type=1326 audit(2000000264.157:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27257 comm="syz.2.8562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f677678e969 code=0x7ffc0000 [ 854.755429][ T30] audit: type=1326 audit(2000000264.157:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27257 comm="syz.2.8562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=127 compat=0 ip=0x7f677678e969 code=0x7ffc0000 [ 854.820423][T27276] .: renamed from bond0 (while UP) [ 854.870783][ T30] audit: type=1326 audit(2000000264.157:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27257 comm="syz.2.8562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f677678e969 code=0x7ffc0000 [ 854.929632][ T30] audit: type=1326 audit(2000000264.157:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27257 comm="syz.2.8562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f677678e969 code=0x7ffc0000 [ 855.152327][T27283] loop0: detected capacity change from 0 to 2048 [ 855.268526][T27283] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 855.432703][T27299] loop4: detected capacity change from 0 to 1024 [ 855.440108][T27302] netlink: 'syz.5.8574': attribute type 10 has an invalid length. [ 855.494403][T27299] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (12806!=20869) [ 855.570530][T27299] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a842c018, mo2=0002] [ 855.578756][T27299] System zones: 0-1, 3-36 [ 855.668150][T27317] loop2: detected capacity change from 0 to 164 [ 855.698901][T27299] EXT4-fs (loop4): orphan cleanup on readonly fs [ 855.790149][T27317] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 855.808492][T27299] EXT4-fs (loop4): 1 orphan inode deleted [ 855.870835][T27299] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 856.045263][ T6174] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 856.162783][ T879] usb 4-1: new full-speed USB device number 117 using dummy_hcd [ 856.372305][T27351] loop4: detected capacity change from 0 to 2048 [ 856.410435][ T879] usb 4-1: unable to get BOS descriptor or descriptor too short [ 856.426850][ T879] usb 4-1: not running at top speed; connect to a high speed hub [ 856.454714][ T879] usb 4-1: config 5 has an invalid interface number: 101 but max is 0 [ 856.457160][T27351] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 856.489629][ T879] usb 4-1: config 5 has no interface number 0 [ 856.495744][ T879] usb 4-1: config 5 interface 101 has no altsetting 0 [ 856.565075][ T879] usb 4-1: New USB device found, idVendor=0403, idProduct=e0f7, bcdDevice=78.34 [ 856.575076][ T879] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 856.602035][ T879] usb 4-1: Product: syz [ 856.621781][ T879] usb 4-1: Manufacturer: syz [ 856.642687][ T879] usb 4-1: SerialNumber: syz [ 856.837121][T27372] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (18446744073709551615) [ 856.865098][T27372] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535 [ 856.928380][ T879] ftdi_sio 4-1:5.101: FTDI USB Serial Device converter detected [ 856.949112][ T879] ftdi_sio ttyUSB0: unknown device type: 0x7834 [ 856.989232][ T879] usb 4-1: USB disconnect, device number 117 [ 857.014213][ T879] ftdi_sio 4-1:5.101: device disconnected [ 857.187056][T27394] netlink: 'syz.2.8594': attribute type 3 has an invalid length. [ 857.242731][T27394] netlink: 'syz.2.8594': attribute type 1 has an invalid length. [ 857.308168][T27400] loop4: detected capacity change from 0 to 8 [ 857.373263][T27338] loop0: detected capacity change from 0 to 32768 [ 857.449291][T27405] loop5: detected capacity change from 0 to 1764 [ 858.784068][T27488] [U] [ 858.787249][T27488] [U] [ 858.789958][T27488] [U] [ 858.792712][T27488] [U] [ 858.857227][T27488] [U] [ 858.860030][T27488] [U] [ 858.862757][T27488] [U] [ 858.865486][T27488] [U] [ 858.869276][ T879] usb 4-1: new high-speed USB device number 118 using dummy_hcd [ 858.920581][T27488] [U] [ 858.923409][T27488] [U] [ 858.926139][T27488] [U] [ 858.974184][T27484] [U] [ 859.000965][ T6267] usb 6-1: new high-speed USB device number 112 using dummy_hcd [ 859.053454][ T879] usb 4-1: Using ep0 maxpacket: 32 [ 859.061058][ T879] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 859.099608][ T879] usb 4-1: config 0 has no interface number 0 [ 859.123113][ T879] usb 4-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 859.144436][ T879] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 859.181716][ T6267] usb 6-1: Using ep0 maxpacket: 8 [ 859.192252][ T879] usb 4-1: Product: syz [ 859.196430][ T879] usb 4-1: Manufacturer: syz [ 859.220296][ T6267] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 859.240214][ T879] usb 4-1: SerialNumber: syz [ 859.251719][ T6267] usb 6-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 859.270793][T27512] loop4: detected capacity change from 0 to 2048 [ 859.277252][ T6267] usb 6-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 859.287771][ T6267] usb 6-1: Product: syz [ 859.294797][ T879] usb 4-1: config 0 descriptor?? [ 859.318652][ T879] usb 4-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 859.321737][T27512] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 859.348840][ T6267] usb 6-1: Manufacturer: syz [ 859.361121][ T879] usb 4-1: selecting invalid altsetting 1 [ 859.369794][ T6267] usb 6-1: SerialNumber: syz [ 859.394779][ T879] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 859.471246][ T879] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 859.511078][ T879] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 859.554870][ T879] usb 4-1: media controller created [ 859.636348][ T6267] usb 6-1: Handspring Visor / Palm OS: No valid connect info available [ 859.660984][T27526] loop2: detected capacity change from 0 to 4096 [ 859.675656][ T879] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 859.684634][ T6267] usb 6-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 859.709785][ T6267] usb 6-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 859.738886][ T6267] usb 6-1: Handspring Visor / Palm OS: Number of ports: 2 [ 859.746285][T27526] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512). [ 859.849201][ T6267] usb 6-1: palm_os_3_probe - error -71 getting bytes available request [ 859.883705][ T6267] visor 6-1:1.0: Handspring Visor / Palm OS converter detected [ 859.944697][ T6267] usb 6-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 859.998624][ T6267] usb 6-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 860.010749][ T879] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 860.059410][ T6267] usb 6-1: USB disconnect, device number 112 [ 860.149860][ T6267] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 860.257190][ T6267] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 860.280178][ T879] usb 4-1: USB disconnect, device number 118 [ 860.311178][ T6267] visor 6-1:1.0: device disconnected [ 860.712046][T27597] netlink: 'syz.5.8639': attribute type 5 has an invalid length. [ 860.792691][T27510] loop7: detected capacity change from 0 to 40427 [ 860.859396][T27510] F2FS-fs (loop7): build fault injection attr: rate: 771, type: 0x3fffff [ 860.929598][T27510] F2FS-fs (loop7): invalid crc value [ 861.107320][T27618] bridge2: entered promiscuous mode [ 861.258250][T27627] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 861.353974][T27510] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 861.426052][T27626] loop3: detected capacity change from 0 to 4096 [ 861.435967][T27626] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512). [ 861.539979][T27626] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 861.576999][T27626] ntfs3(loop3): ino=19, mi_enum_attr [ 861.650168][T27626] ntfs3(loop3): failed to convert "c46c" to macroman [ 861.713805][T27626] ntfs3(loop3): ino=20, mi_enum_attr [ 861.795626][T27677] loop4: detected capacity change from 0 to 1024 [ 861.862059][T27677] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 861.953798][T27677] EXT4-fs error (device loop4): ext4_xattr_inode_iget:437: inode #11: comm syz.4.8652: missing EA_INODE flag [ 862.059640][T27677] EXT4-fs (loop4): Remounting filesystem read-only [ 862.188591][ T6174] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 862.568713][ T6426] usb 6-1: new high-speed USB device number 113 using dummy_hcd [ 862.576717][T27724] netlink: 'syz.3.8664': attribute type 33 has an invalid length. [ 862.779626][ T6426] usb 6-1: Using ep0 maxpacket: 32 [ 862.801882][ T6426] usb 6-1: config 0 has an invalid interface number: 35 but max is 0 [ 862.820924][ T6426] usb 6-1: config 0 has no interface number 0 [ 862.847048][ T6426] usb 6-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f [ 862.857062][ T6426] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 862.930004][ T6426] usb 6-1: Product: syz [ 862.942629][ T6426] usb 6-1: Manufacturer: syz [ 862.947304][ T6426] usb 6-1: SerialNumber: syz [ 862.985581][ T6426] usb 6-1: config 0 descriptor?? [ 863.229268][ T6426] radio-si470x 6-1:0.35: this is not a si470x device. [ 863.439043][ T6426] radio-raremono 6-1:0.35: this is not Thanko's Raremono. [ 863.467288][T27760] ptrace attach of "./syz-executor exec"[6156] was attempted by ""[27760] [ 863.506070][ T6426] usb 6-1: USB disconnect, device number 113 [ 863.825317][ T30] audit: type=1326 audit(2000000272.871:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27779 comm="syz.7.8679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa19dd8e969 code=0x7ffc0000 [ 863.909436][ T30] audit: type=1326 audit(2000000272.880:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27779 comm="syz.7.8679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=71 compat=0 ip=0x7fa19dd8e969 code=0x7ffc0000 [ 863.954071][T27776] loop3: detected capacity change from 0 to 4096 [ 864.016145][ T30] audit: type=1326 audit(2000000272.880:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27779 comm="syz.7.8679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa19dd8e969 code=0x7ffc0000 [ 864.168074][ T30] audit: type=1326 audit(2000000272.880:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27779 comm="syz.7.8679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa19dd8e969 code=0x7ffc0000 [ 864.553700][ T30] audit: type=1326 audit(2000000273.544:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27814 comm="syz.3.8689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3db98e969 code=0x7ffc0000 [ 864.631254][ T30] audit: type=1326 audit(2000000273.544:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27814 comm="syz.3.8689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3db98e969 code=0x7ffc0000 [ 864.655080][T27822] binder: 27816:27822 unknown command 0 [ 864.660651][T27822] binder: 27816:27822 ioctl c0306201 200000000480 returned -22 [ 864.746419][T27819] loop5: detected capacity change from 0 to 4096 [ 864.753859][ T30] audit: type=1326 audit(2000000273.544:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27814 comm="syz.3.8689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=109 compat=0 ip=0x7fc3db98e969 code=0x7ffc0000 [ 864.844585][T27819] ntfs3(loop5): Different NTFS sector size (1024) and media sector size (512). [ 864.867386][ T30] audit: type=1326 audit(2000000273.544:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27814 comm="syz.3.8689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3db98e969 code=0x7ffc0000 [ 864.987764][T27838] loop2: detected capacity change from 0 to 128 [ 865.059357][T27838] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 865.150836][T27838] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 865.676584][T27873] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8708'. [ 865.722758][T27873] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8708'. [ 866.960742][ T6267] usb 3-1: new high-speed USB device number 111 using dummy_hcd [ 867.058477][T27947] block nbd0: NBD_DISCONNECT [ 867.173736][ T6267] usb 3-1: Using ep0 maxpacket: 8 [ 867.200670][ T6267] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0038, bcdDevice=99.03 [ 867.245365][ T6267] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 867.245532][T27955] netlink: 'syz.4.8733': attribute type 1 has an invalid length. [ 867.306016][ T6267] usb 3-1: Product: syz [ 867.310207][ T6267] usb 3-1: Manufacturer: syz [ 867.323562][T27955] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8733'. [ 867.345159][ T6267] usb 3-1: SerialNumber: syz [ 867.368398][ T6267] usb 3-1: config 0 descriptor?? [ 867.433978][ T6267] dvb-usb: found a 'TerraTec/qanu USB2.0 Highspeed DVB-T Receiver' in warm state. [ 867.492208][ T6267] dvb-usb: bulk message failed: -22 (2/0) [ 867.520218][ T6267] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 867.577453][ T6267] dvbdev: DVB: registering new adapter (TerraTec/qanu USB2.0 Highspeed DVB-T Receiver) [ 867.620612][ T6267] usb 3-1: media controller created [ 867.747551][ T6267] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 867.875253][ T6267] dvb-usb: bulk message failed: -22 (1/0) [ 867.915407][ T6267] dvb-usb: no frontend was attached by 'TerraTec/qanu USB2.0 Highspeed DVB-T Receiver' [ 867.956758][ T10] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 867.979095][ T6267] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input65 [ 868.034503][ T6267] dvb-usb: schedule remote query interval to 50 msecs. [ 868.066666][ T6267] dvb-usb: bulk message failed: -22 (2/0) [ 868.100741][ T6267] dvb-usb: TerraTec/qanu USB2.0 Highspeed DVB-T Receiver successfully initialized and connected. [ 868.127793][ T6304] dvb-usb: bulk message failed: -22 (1/0) [ 868.136014][ T10] usb 8-1: Using ep0 maxpacket: 16 [ 868.140157][ T6304] dvb-usb: error while querying for an remote control event. [ 868.154793][ T10] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 868.210441][ T10] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 868.217182][ T6267] usb 3-1: USB disconnect, device number 111 [ 868.277855][ T10] usb 8-1: too many endpoints for config 1 interface 2 altsetting 0: 240, using maximum allowed: 30 [ 868.312930][ T10] usb 8-1: config 1 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 240 [ 868.380393][ T10] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 868.431197][ T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 868.458079][ T10] usb 8-1: Product: syz [ 868.483905][ T10] usb 8-1: Manufacturer: syz [ 868.502369][ T10] usb 8-1: SerialNumber: syz [ 868.506541][ T6267] dvb-usb: TerraTec/qanu USB2.0 Highspeed DVB-T Re successfully deinitialized and disconnected. [ 868.903741][ T10] usb 8-1: USB disconnect, device number 3 [ 869.148919][T28072] loop2: detected capacity change from 0 to 8 [ 869.217387][ T6774] udevd[6774]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 869.274137][T27983] loop5: detected capacity change from 0 to 32768 [ 869.334790][T27983] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.8741 (27983) [ 869.445591][T27983] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 869.481961][T27983] BTRFS info (device loop5): using sha256 (sha256-ni) checksum algorithm [ 869.523443][T27983] BTRFS info (device loop5): using free-space-tree [ 869.617518][T28098] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 869.695760][T28114] netlink: 136 bytes leftover after parsing attributes in process `syz.7.8764'. [ 869.720522][T28112] (unnamed net_device) (uninitialized): option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 870.151497][ T6168] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 870.304604][ T10] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 870.497245][ T10] usb 8-1: Using ep0 maxpacket: 32 [ 870.540042][ T10] usb 8-1: config 2 has an invalid interface number: 1 but max is 0 [ 870.548072][ T10] usb 8-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 870.621859][ T10] usb 8-1: config 2 has 2 interfaces, different from the descriptor's value: 1 [ 870.652773][T28167] netlink: 56 bytes leftover after parsing attributes in process `syz.0.8779'. [ 870.687737][T28167] netlink: 56 bytes leftover after parsing attributes in process `syz.0.8779'. [ 870.709745][ T10] usb 8-1: New USB device found, idVendor=22b8, idProduct=2d97, bcdDevice=51.64 [ 870.724166][ T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 870.737605][T28166] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8773'. [ 870.761826][ T10] usb 8-1: Product: syz [ 870.801666][ T10] usb 8-1: Manufacturer: syz [ 870.834422][ T10] usb 8-1: SerialNumber: syz [ 870.901051][ T10] cdc_acm 8-1:2.1: probe with driver cdc_acm failed with error -22 [ 870.946045][ T6304] usb 3-1: new high-speed USB device number 112 using dummy_hcd [ 871.085892][ T10] usb 8-1: USB disconnect, device number 4 [ 871.173710][ T6304] usb 3-1: Using ep0 maxpacket: 16 [ 871.237777][ T6304] usb 3-1: New USB device found, idVendor=25c6, idProduct=9002, bcdDevice=62.ba [ 871.247024][ T6304] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 871.265469][ T6304] usb 3-1: Product: syz [ 871.269932][ T6304] usb 3-1: Manufacturer: syz [ 871.275298][ T6304] usb 3-1: SerialNumber: syz [ 871.326269][ T6304] usb 3-1: config 0 descriptor?? [ 871.617364][ T6304] snd-usb-hiface 3-1:0.0: probe with driver snd-usb-hiface failed with error -22 [ 871.853991][ T10] usb 3-1: USB disconnect, device number 112 [ 871.926448][T28238] loop7: detected capacity change from 0 to 1024 [ 871.966543][T28238] EXT4-fs: Ignoring removed nomblk_io_submit option [ 872.020841][T28251] ieee802154 phy0 wpan0: encryption failed: -22 [ 872.060418][T28238] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 872.107085][T28238] System zones: 0-1, 3-36 [ 872.161497][T28238] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 872.353796][T28273] loop3: detected capacity change from 0 to 256 [ 872.497927][T25573] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 872.720968][T28295] loop2: detected capacity change from 0 to 64 [ 872.918146][ T30] audit: type=1326 audit(2000000281.387:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28305 comm="syz.5.8811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7954f8e969 code=0x7ffc0000 [ 873.002942][ T30] audit: type=1326 audit(2000000281.387:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28305 comm="syz.5.8811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7954f8e969 code=0x7ffc0000 [ 873.091649][ T30] audit: type=1326 audit(2000000281.387:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28305 comm="syz.5.8811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=107 compat=0 ip=0x7f7954f8e969 code=0x7ffc0000 [ 873.128149][T28321] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 873.232477][ T30] audit: type=1326 audit(2000000281.387:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28305 comm="syz.5.8811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7954f8e969 code=0x7ffc0000 [ 873.335199][ T30] audit: type=1326 audit(2000000281.387:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28305 comm="syz.5.8811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7954f8e969 code=0x7ffc0000 [ 874.053691][T28369] netlink: 44 bytes leftover after parsing attributes in process `syz.3.8831'. [ 874.658449][T28403] binder: 28402:28403 ioctl c018620c 2000000000c0 returned -22 [ 874.691912][ T6426] usb 4-1: new high-speed USB device number 119 using dummy_hcd [ 874.908036][ T6426] usb 4-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 874.941256][T28339] loop7: detected capacity change from 0 to 32768 [ 874.952722][ T6426] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 874.960736][ T6426] usb 4-1: Product: syz [ 874.992107][ T6426] usb 4-1: Manufacturer: syz [ 875.002660][ T6426] usb 4-1: SerialNumber: syz [ 875.038941][ T6426] usb 4-1: config 0 descriptor?? [ 875.059218][ T6426] ch341 4-1:0.0: ch341-uart converter detected [ 875.114348][T28415] loop2: detected capacity change from 0 to 4096 [ 875.150788][T28415] ntfs3(loop2): Different NTFS sector size (1024) and media sector size (512). [ 875.528340][ T6426] usb 4-1: failed to send control message: -71 [ 875.544869][ T6426] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 875.599097][ T6426] usb 4-1: USB disconnect, device number 119 [ 875.643829][ T6426] ch341 4-1:0.0: device disconnected [ 875.724392][T28450] netlink: 'syz.7.8850': attribute type 9 has an invalid length. [ 876.163925][T28416] loop0: detected capacity change from 0 to 32768 [ 876.263987][T28416] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.8845 (28416) [ 876.325898][T28416] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 876.369408][T28482] binfmt_misc: register: failed to install interpreter file ./file0 [ 876.384774][T28416] BTRFS info (device loop0): using sha256 (sha256-ni) checksum algorithm [ 876.395067][T28485] netlink: 72 bytes leftover after parsing attributes in process `syz.7.8861'. [ 876.427503][T28416] BTRFS info (device loop0): using free-space-tree [ 876.506613][T28500] netlink: 'syz.3.8864': attribute type 10 has an invalid length. [ 876.546328][T28500] batman_adv: batadv0: Adding interface: wlan0 [ 876.552507][T28500] batman_adv: batadv0: The MTU of interface wlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 876.615824][T28500] batman_adv: batadv0: Interface activated: wlan0 [ 876.844136][T28520] loop5: detected capacity change from 0 to 1024 [ 876.992605][ T6156] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 877.069663][T28534] openvswitch: netlink: Flow key attr not present in new flow. [ 877.204921][ T75] hfsplus: b-tree write err: -5, ino 4 [ 877.307414][ T6419] usb 3-1: new high-speed USB device number 113 using dummy_hcd [ 877.408436][T28552] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 877.433170][T28554] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 877.454883][ T30] audit: type=1326 audit(2000000285.617:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28555 comm="syz.0.8874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ee478e969 code=0x7ffc0000 [ 877.506274][ T6419] usb 3-1: Using ep0 maxpacket: 32 [ 877.551519][ T6419] usb 3-1: config index 0 descriptor too short (expected 243, got 36) [ 877.610058][ T6419] usb 3-1: config 5 contains an unexpected descriptor of type 0x2, skipping [ 877.629100][ T30] audit: type=1326 audit(2000000285.627:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28555 comm="syz.0.8874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ee478e969 code=0x7ffc0000 [ 877.691661][ T6419] usb 3-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 877.749174][ T6419] usb 3-1: config 5 has 0 interfaces, different from the descriptor's value: 9 [ 877.781055][ T6419] usb 3-1: New USB device found, idVendor=0451, idProduct=5152, bcdDevice=aa.6a [ 877.794883][ T30] audit: type=1326 audit(2000000285.683:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28555 comm="syz.0.8874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=267 compat=0 ip=0x7f9ee478e969 code=0x7ffc0000 [ 877.835418][ T6419] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 877.869158][ T6419] usb 3-1: Product: syz [ 877.892331][ T6419] usb 3-1: Manufacturer: syz [ 877.896968][ T6419] usb 3-1: SerialNumber: syz [ 877.914464][ T30] audit: type=1326 audit(2000000285.683:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28555 comm="syz.0.8874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ee478e969 code=0x7ffc0000 [ 878.057079][ T30] audit: type=1326 audit(2000000285.683:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28555 comm="syz.0.8874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ee478e969 code=0x7ffc0000 [ 878.256502][ T6419] usb 3-1: USB disconnect, device number 113 [ 878.361706][T28602] xt_connbytes: Forcing CT accounting to be enabled [ 878.407031][T28602] xt_bpf: check failed: parse error [ 878.643596][ T6304] usb 6-1: new high-speed USB device number 114 using dummy_hcd [ 878.661019][T28619] netlink: 'syz.4.8895': attribute type 3 has an invalid length. [ 878.852475][ T6304] usb 6-1: Using ep0 maxpacket: 8 [ 878.899976][ T6304] usb 6-1: config index 0 descriptor too short (expected 30482, got 18) [ 878.920640][ T6304] usb 6-1: config 0 has too many interfaces: 101, using maximum allowed: 32 [ 878.953403][ T6304] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 101 [ 879.005242][ T6304] usb 6-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice= 5.00 [ 879.049910][ T6304] usb 6-1: New USB device strings: Mfr=253, Product=255, SerialNumber=0 [ 879.098390][ T6304] usb 6-1: Product: syz [ 879.102588][ T6304] usb 6-1: Manufacturer: syz [ 879.201571][ T6304] usb 6-1: config 0 descriptor?? [ 879.236765][ T6304] ftdi_sio 6-1:0.0: FTDI USB Serial Device converter detected [ 879.265178][ T6304] usb 6-1: Detected FT2232C/D [ 879.321007][T28653] loop4: detected capacity change from 0 to 1764 [ 879.374663][T28646] loop7: detected capacity change from 0 to 4096 [ 879.423690][T28646] ntfs3(loop7): Different NTFS sector size (4096) and media sector size (512). [ 879.571938][T28646] ntfs3(loop7): Mark volume as dirty due to NTFS errors [ 879.628807][T28646] ntfs3(loop7): ino=19, mi_enum_attr [ 879.693714][ T6304] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 879.722864][T28646] ntfs3(loop7): failed to convert "c46c" to koi8-r [ 879.732629][ T6304] usb 6-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 879.777129][T28646] ntfs3(loop7): ino=20, mi_enum_attr [ 879.806168][ T6304] usb 6-1: USB disconnect, device number 114 [ 879.857453][ T6304] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 879.892932][ T6304] ftdi_sio 6-1:0.0: device disconnected [ 880.416284][T28704] bridge0: port 2(bridge_slave_1) entered disabled state [ 880.423796][T28704] bridge0: port 1(bridge_slave_0) entered disabled state [ 880.462689][T28714] loop7: detected capacity change from 0 to 256 [ 880.513574][T28714] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x1a371bfb, utbl_chksum : 0xe619d30d) [ 880.794791][T28704] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 880.810066][T28704] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 880.969817][T28658] loop2: detected capacity change from 0 to 32768 [ 880.992674][T28658] XFS: noikeep mount option is deprecated. [ 881.050174][T28658] XFS (loop2): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 881.157736][T28704] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 881.184772][T28704] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 881.193746][T28704] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 881.195556][T28658] XFS (loop2): Ending clean mount [ 881.202610][T28704] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 881.263949][ T6267] hsr0 speed is unknown, defaulting to 1000 [ 881.290486][ T6267] syz1: Port: 1 Link DOWN [ 881.303939][T28658] XFS (loop2): Quotacheck needed: Please wait. [ 881.440431][T28658] XFS (loop2): Quotacheck: Done. [ 881.621963][ T6172] XFS (loop2): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 881.766663][T28772] netlink: 124 bytes leftover after parsing attributes in process `syz.7.8934'. [ 882.156000][T28793] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8939'. [ 882.203436][T28793] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8939'. [ 882.255988][T28793] netlink: 204 bytes leftover after parsing attributes in process `syz.0.8939'. [ 882.499418][T28807] loop7: detected capacity change from 0 to 1024 [ 882.623706][T28804] loop5: detected capacity change from 0 to 4096 [ 882.750019][T28804] ntfs3(loop5): Different NTFS sector size (2048) and media sector size (512). [ 882.762685][T28824] loop2: detected capacity change from 0 to 128 [ 882.794649][T21198] hfsplus: b-tree write err: -5, ino 4 [ 882.881747][T28824] FAT-fs (loop2): Directory bread(block 32) failed [ 882.934690][T28824] FAT-fs (loop2): Directory bread(block 33) failed [ 882.954648][T28824] FAT-fs (loop2): Directory bread(block 34) failed [ 883.026844][T28835] net veth1_virt_wifi €Â: renamed from virt_wifi0 [ 883.032272][T28824] FAT-fs (loop2): Directory bread(block 35) failed [ 883.082177][T28824] FAT-fs (loop2): Directory bread(block 36) failed [ 883.116101][T28824] FAT-fs (loop2): Directory bread(block 37) failed [ 883.162541][T28824] FAT-fs (loop2): Directory bread(block 38) failed [ 883.212885][T28824] FAT-fs (loop2): Directory bread(block 39) failed [ 883.221085][T28824] FAT-fs (loop2): Directory bread(block 40) failed [ 883.263217][T28824] FAT-fs (loop2): Directory bread(block 41) failed [ 883.277104][T28843] netlink: 48 bytes leftover after parsing attributes in process `syz.0.8954'. [ 883.353739][T28847] exFAT-fs (nullb0): mounting with "discard" option, but the device does not support discard [ 883.406220][T28847] exFAT-fs (nullb0): invalid boot record signature [ 883.412758][T28847] exFAT-fs (nullb0): failed to read boot sector [ 883.482476][T28847] exFAT-fs (nullb0): failed to recognize exfat type [ 883.512266][T28852] loop7: detected capacity change from 0 to 2048 [ 883.579421][T28852] NILFS (loop7): invalid segment: Checksum error in segment payload [ 883.626827][T28852] NILFS (loop7): trying rollback from an earlier position [ 883.697951][T28852] NILFS (loop7): recovery complete [ 883.713192][T28824] syz.2.8950: attempt to access beyond end of device [ 883.713192][T28824] loop2: rw=0, sector=4112, nr_sectors = 4 limit=128 [ 883.766775][T28824] Buffer I/O error on dev loop2, logical block 1028, async page read [ 883.773538][T28863] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 883.830100][T28824] syz.2.8950: attempt to access beyond end of device [ 883.830100][T28824] loop2: rw=0, sector=167964, nr_sectors = 4 limit=128 [ 883.876064][T28824] Buffer I/O error on dev loop2, logical block 41991, async page read [ 883.884408][T28824] FAT-fs (loop2): error, invalid access to FAT (entry 0x0000a009) [ 883.893380][T28824] FAT-fs (loop2): Filesystem has been set read-only [ 883.919774][T28824] FAT-fs (loop2): error, invalid access to FAT (entry 0x0000a009) [ 883.986370][T28824] FAT-fs (loop2): error, invalid access to FAT (entry 0x0000a009) [ 884.022274][T28824] FAT-fs (loop2): error, invalid access to FAT (entry 0x0000a009) [ 884.037883][T28815] loop4: detected capacity change from 0 to 32768 [ 884.044542][T28824] FAT-fs (loop2): error, invalid access to FAT (entry 0x0000a009) [ 884.063689][T28815] jfs_mount: dbMount failed w/rc = -5 [ 884.091599][T28815] Mount JFS Failure: -5 [ 884.125591][T28815] jfs_mount failed w/return code = -5 [ 884.132384][T28824] syz.2.8950: attempt to access beyond end of device [ 884.132384][T28824] loop2: rw=0, sector=4112, nr_sectors = 4 limit=128 [ 884.188504][T28824] Buffer I/O error on dev loop2, logical block 1028, async page read [ 884.259459][T28824] syz.2.8950: attempt to access beyond end of device [ 884.259459][T28824] loop2: rw=0, sector=167964, nr_sectors = 4 limit=128 [ 884.338264][T28824] Buffer I/O error on dev loop2, logical block 41991, async page read [ 884.884993][T28919] syz.2.8972: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 884.962636][T28919] CPU: 0 UID: 0 PID: 28919 Comm: syz.2.8972 Not tainted 6.15.0-rc7-syzkaller-00082-g5cdb2c77c4c3 #0 PREEMPT(full) [ 884.962670][T28919] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 884.962686][T28919] Call Trace: [ 884.962696][T28919] [ 884.962706][T28919] dump_stack_lvl+0x189/0x250 [ 884.962753][T28919] ? __pfx_dump_stack_lvl+0x10/0x10 [ 884.962789][T28919] ? __pfx__printk+0x10/0x10 [ 884.962816][T28919] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 884.962844][T28919] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 884.962872][T28919] ? srso_alias_return_thunk+0x5/0xfbef5 [ 884.962901][T28919] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 884.962932][T28919] warn_alloc+0x214/0x310 [ 884.962978][T28919] ? __pfx_warn_alloc+0x10/0x10 [ 884.963015][T28919] ? kasan_save_track+0x4f/0x80 [ 884.963043][T28919] ? __kmalloc_cache_noprof+0x230/0x3d0 [ 884.963076][T28919] ? xskq_create+0x56/0x170 [ 884.963107][T28919] ? __x64_sys_setsockopt+0x18b/0x220 [ 884.963141][T28919] ? do_syscall_64+0xf6/0x210 [ 884.963173][T28919] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 884.963229][T28919] __vmalloc_node_range_noprof+0x125/0x12c0 [ 884.963303][T28919] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 884.963345][T28919] ? __kasan_kmalloc+0x93/0xb0 [ 884.963376][T28919] ? srso_alias_return_thunk+0x5/0xfbef5 [ 884.963410][T28919] vmalloc_user_noprof+0x74/0x80 [ 884.963447][T28919] ? xskq_create+0xbf/0x170 [ 884.963477][T28919] xskq_create+0xbf/0x170 [ 884.963516][T28919] xsk_init_queue+0xb0/0x110 [ 884.963549][T28919] xsk_setsockopt+0x43f/0x710 [ 884.963586][T28919] ? __pfx_xsk_setsockopt+0x10/0x10 [ 884.963615][T28919] ? srso_alias_return_thunk+0x5/0xfbef5 [ 884.963649][T28919] ? srso_alias_return_thunk+0x5/0xfbef5 [ 884.963682][T28919] ? srso_alias_return_thunk+0x5/0xfbef5 [ 884.963710][T28919] ? srso_alias_return_thunk+0x5/0xfbef5 [ 884.963738][T28919] ? __pfx_xsk_setsockopt+0x10/0x10 [ 884.963769][T28919] do_sock_setsockopt+0x25a/0x3e0 [ 884.963807][T28919] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 884.963839][T28919] ? __fget_files+0x2a/0x420 [ 884.963879][T28919] ? srso_alias_return_thunk+0x5/0xfbef5 [ 884.963907][T28919] ? __fget_files+0x3a0/0x420 [ 884.963940][T28919] ? __fget_files+0x2a/0x420 [ 884.963984][T28919] __x64_sys_setsockopt+0x18b/0x220 [ 884.964026][T28919] do_syscall_64+0xf6/0x210 [ 884.964060][T28919] ? srso_alias_return_thunk+0x5/0xfbef5 [ 884.964087][T28919] ? exc_page_fault+0x91/0x110 [ 884.964121][T28919] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 884.964145][T28919] RIP: 0033:0x7f677678e969 [ 884.964167][T28919] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 884.964189][T28919] RSP: 002b:00007f67776d0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 884.964214][T28919] RAX: ffffffffffffffda RBX: 00007f67769b5fa0 RCX: 00007f677678e969 [ 884.964233][T28919] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 884.964250][T28919] RBP: 00007f6776810ab1 R08: 0000000000000052 R09: 0000000000000000 [ 884.964266][T28919] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 884.964283][T28919] R13: 0000000000000000 R14: 00007f67769b5fa0 R15: 00007ffce7ac1178 [ 884.964320][T28919] [ 885.280856][ C0] vkms_vblank_simulate: vblank timer overrun [ 885.379003][T28919] Mem-Info: [ 885.386101][T28919] active_anon:8762 inactive_anon:1 isolated_anon:0 [ 885.386101][T28919] active_file:15764 inactive_file:40432 isolated_file:0 [ 885.386101][T28919] unevictable:768 dirty:527 writeback:0 [ 885.386101][T28919] slab_reclaimable:10383 slab_unreclaimable:112830 [ 885.386101][T28919] mapped:41263 shmem:1440 pagetables:1263 [ 885.386101][T28919] sec_pagetables:0 bounce:0 [ 885.386101][T28919] kernel_misc_reclaimable:0 [ 885.386101][T28919] free:1277715 free_pcp:1045 free_cma:0 [ 885.501939][T28942] loop4: detected capacity change from 0 to 256 [ 885.510666][T28919] Node 0 active_anon:35048kB inactive_anon:4kB active_file:63056kB inactive_file:161528kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:165052kB dirty:2108kB writeback:0kB shmem:4324kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11744kB pagetables:5152kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 885.544086][ C0] vkms_vblank_simulate: vblank timer overrun [ 885.553765][T28919] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 885.585382][T28919] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 885.612439][ C0] vkms_vblank_simulate: vblank timer overrun [ 885.633637][T28919] lowmem_reserve[]: 0 2504 2504 2504 2504 [ 885.669872][T28919] Node 0 DMA32 free:1180760kB boost:0kB min:34304kB low:42880kB high:51456kB reserved_highatomic:0KB active_anon:35060kB inactive_anon:4kB active_file:63056kB inactive_file:161360kB unevictable:1536kB writepending:2128kB present:3129332kB managed:2564116kB mlocked:0kB bounce:0kB free_pcp:1572kB local_pcp:1540kB free_cma:0kB [ 885.739300][T28919] lowmem_reserve[]: 0 0 0 0 0 [ 885.744104][T28919] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:8kB inactive_anon:0kB active_file:0kB inactive_file:92kB unevictable:0kB writepending:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 885.978909][T28919] lowmem_reserve[]: 0 0 0 0 0 [ 886.018259][T28919] Node 1 Normal free:3913848kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:1128kB local_pcp:1128kB free_cma:0kB [ 886.108004][T28919] lowmem_reserve[]: 0 0 0 0 0 [ 886.112798][T28919] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 886.205193][T28919] Node 0 DMA32: 615*4kB (UM) 1033*8kB (ME) 610*16kB (ME) 436*32kB (UME) 252*64kB (UME) 83*128kB (UME) 140*256kB (UME) 116*512kB (UME) 53*1024kB (UME) 11*2048kB (UME) 231*4096kB (UM) = 1179396kB [ 886.306543][T28919] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 886.347411][ T6267] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 886.382672][T28919] Node 1 Normal: 189*4kB (UE) 59*8kB (UME) 42*16kB (UME) 136*32kB (UME) 93*64kB (UME) 30*128kB (UME) 14*256kB (UM) 8*512kB (UM) 5*1024kB (UM) 3*2048kB (UM) 947*4096kB (ME) = 3913900kB [ 886.429247][T28919] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 886.482547][T28919] Node 0 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 886.517550][T28919] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 886.530260][T28990] overlayfs: missing 'lowerdir' [ 886.538991][T28919] Node 1 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 886.570405][ T6267] usb 8-1: config 0 has an invalid interface number: 127 but max is 1 [ 886.582388][ T6267] usb 8-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 255 [ 886.618894][ T6267] usb 8-1: config 0 has no interface number 1 [ 886.623495][T28919] 57453 total pagecache pages [ 886.634072][T28919] 1 pages in swap cache [ 886.648149][T28919] Free swap = 124992kB [ 886.652346][T28919] Total swap = 124996kB [ 886.673650][ T6267] usb 8-1: config 0 interface 127 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 886.684522][T28919] 2097051 pages RAM [ 886.690503][T28919] 0 pages HighMem/MovableOnly [ 886.724170][T28919] 424364 pages reserved [ 886.734815][ T6267] usb 8-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 29 [ 886.760405][T28919] 0 pages cma reserved [ 886.798006][ T6267] usb 8-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 886.817412][ T6267] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 886.840370][ T6267] usb 8-1: Product: syz [ 886.842365][T29002] netlink: 'syz.3.9003': attribute type 23 has an invalid length. [ 886.844571][ T6267] usb 8-1: Manufacturer: syz [ 886.870970][T29005] netlink: 176 bytes leftover after parsing attributes in process `syz.5.9004'. [ 886.920111][ T6267] usb 8-1: SerialNumber: syz [ 886.954186][ T6267] usb 8-1: config 0 descriptor?? [ 886.983540][ T6267] usb-storage 8-1:0.127: USB Mass Storage device detected [ 887.040171][ T6267] usb-storage 8-1:0.127: Quirks match for vid 1908 pid 1315: 20000 [ 887.123630][T29027] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9008'. [ 887.199760][ T6267] usb-storage 8-1:0.0: USB Mass Storage device detected [ 887.275729][ T6267] usb-storage 8-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 887.394371][ T6267] usb 8-1: USB disconnect, device number 5 [ 887.518597][T29058] (unnamed net_device) (uninitialized): up delay (15) is not a multiple of miimon (100), value rounded to 0 ms [ 887.681528][T29058] bond3: entered promiscuous mode [ 887.697973][T29102] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.9017'. [ 887.769832][T29102] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 887.791499][T29102] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 887.956463][ T6267] usb 3-1: new high-speed USB device number 114 using dummy_hcd [ 888.010813][T29121] loop7: detected capacity change from 0 to 764 [ 888.017857][T29119] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9022'. [ 888.048599][T29119] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9022'. [ 888.062887][T29121] rock: directory entry would overflow storage [ 888.086060][T29121] rock: sig=0x4654, size=5, remaining=4 [ 888.129297][ T6267] usb 3-1: Using ep0 maxpacket: 16 [ 888.180727][ T6267] usb 3-1: config 0 has an invalid interface number: 35 but max is 0 [ 888.221187][ T6267] usb 3-1: config 0 has no interface number 0 [ 888.253583][ T6267] usb 3-1: config 0 interface 35 altsetting 0 endpoint 0xE has an invalid bInterval 0, changing to 7 [ 888.293958][ T6267] usb 3-1: config 0 interface 35 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 888.367594][ T6267] usb 3-1: New USB device found, idVendor=07d0, idProduct=4101, bcdDevice=ec.5c [ 888.393548][ T6267] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 888.418995][ T6267] usb 3-1: Product: syz [ 888.423182][ T6267] usb 3-1: Manufacturer: syz [ 888.449825][ T6267] usb 3-1: SerialNumber: syz [ 888.474986][ T6267] usb 3-1: config 0 descriptor?? [ 888.517492][ T6267] cypress_m8 3-1:0.35: Nokia CA-42 V2 Adapter converter detected [ 888.526098][ T879] usb 1-1: new high-speed USB device number 113 using dummy_hcd [ 888.741509][ T879] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 888.762288][ T879] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 888.763161][T25577] Bluetooth: hci6: command 0x0405 tx timeout [ 888.795591][ T6267] usb 3-1: Nokia CA-42 V2 Adapter converter now attached to ttyUSB0 [ 888.831243][ T879] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 888.902464][ T879] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 888.925375][ T879] usb 1-1: Manufacturer: syz [ 888.951182][ T879] usb 1-1: config 0 descriptor?? [ 889.028102][ T6267] usb 3-1: USB disconnect, device number 114 [ 889.058096][T29180] netlink: 'syz.7.9035': attribute type 2 has an invalid length. [ 889.080087][ T6267] nokiaca42v2 ttyUSB0: Nokia CA-42 V2 Adapter converter now disconnected from ttyUSB0 [ 889.102409][T29187] loop5: detected capacity change from 0 to 8 [ 889.106250][T29180] netlink: 8 bytes leftover after parsing attributes in process `syz.7.9035'. [ 889.140724][ T6267] cypress_m8 3-1:0.35: device disconnected [ 889.324051][ T879] rc_core: IR keymap rc-hauppauge not found [ 889.354216][ T879] Registered IR keymap rc-empty [ 889.402339][ T879] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 889.408315][T29207] CIFS: VFS: Malformed UNC in devname [ 889.412700][ T30] audit: type=1326 audit(2000000296.820:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29205 comm="syz.7.9041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa19dd8e969 code=0x7ffc0000 [ 889.451653][ T879] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input66 [ 889.487448][ T30] audit: type=1326 audit(2000000296.820:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29205 comm="syz.7.9041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa19dd8e969 code=0x7ffc0000 [ 889.517776][ C1] igorplugusb 1-1:0.0: Error: urb status = -32 [ 889.533492][ T879] usb 1-1: USB disconnect, device number 113 [ 889.552096][ T30] audit: type=1326 audit(2000000296.830:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29205 comm="syz.7.9041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=114 compat=0 ip=0x7fa19dd8e969 code=0x7ffc0000 [ 889.625763][ T30] audit: type=1326 audit(2000000296.830:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29205 comm="syz.7.9041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa19dd8e969 code=0x7ffc0000 [ 889.707471][T29231] netlink: 6032 bytes leftover after parsing attributes in process `syz.7.9043'. [ 889.737954][ T30] audit: type=1326 audit(2000000296.830:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29205 comm="syz.7.9041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa19dd8e969 code=0x7ffc0000 [ 889.778165][T29235] netlink: 'syz.2.9045': attribute type 11 has an invalid length. [ 889.848351][T29235] netlink: 224 bytes leftover after parsing attributes in process `syz.2.9045'. [ 891.007099][T29298] loop0: detected capacity change from 0 to 64 [ 891.040014][T29299] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 891.256681][ T30] audit: type=1326 audit(2000000298.542:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29308 comm="syz.2.9069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f677678e969 code=0x7ffc0000 [ 891.373273][ T30] audit: type=1326 audit(2000000298.589:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29308 comm="syz.2.9069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=264 compat=0 ip=0x7f677678e969 code=0x7ffc0000 [ 891.401205][T29253] loop7: detected capacity change from 0 to 32768 [ 891.500124][ T30] audit: type=1326 audit(2000000298.589:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29308 comm="syz.2.9069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f677678e969 code=0x7ffc0000 [ 891.513518][T29253] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.9050 (29253) [ 891.598135][T29253] BTRFS info (device loop7): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 891.636771][T29253] BTRFS info (device loop7): using xxhash64 (xxhash64-generic) checksum algorithm [ 891.657162][ T30] audit: type=1326 audit(2000000298.589:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29308 comm="syz.2.9069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f677678e969 code=0x7ffc0000 [ 891.724783][T29253] BTRFS info (device loop7): disk space caching is enabled [ 891.802656][T29253] BTRFS warning (device loop7): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 891.855799][T29336] loop2: detected capacity change from 0 to 64 [ 892.064506][ T30] audit: type=1326 audit(2000000299.310:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29356 comm="syz.3.9081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3db98e969 code=0x7ffc0000 [ 892.129502][T29253] BTRFS info (device loop7): rebuilding free space tree [ 892.229501][T29253] BTRFS info (device loop7): disabling free space tree [ 892.263550][T29253] BTRFS info (device loop7): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 892.306764][T29374] netlink: 'syz.5.9086': attribute type 12 has an invalid length. [ 892.326306][T29253] BTRFS info (device loop7): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 892.352961][T29374] netlink: 9472 bytes leftover after parsing attributes in process `syz.5.9086'. [ 892.669024][T29399] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 892.761690][T25573] BTRFS info (device loop7): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 893.951601][ T879] usb 3-1: new high-speed USB device number 115 using dummy_hcd [ 894.133888][ T879] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 894.178860][ T879] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 894.230913][ T879] usb 3-1: config 1 has no interface number 0 [ 894.260247][ T879] usb 3-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 894.310031][ T879] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.36 [ 894.319979][ T879] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 894.352275][T29482] netlink: 'syz.5.9116': attribute type 1 has an invalid length. [ 894.367589][ T879] usb 3-1: Product: syz [ 894.388388][ T879] usb 3-1: Manufacturer: syz [ 894.393004][ T879] usb 3-1: SerialNumber: syz [ 894.399379][T29482] netlink: 224 bytes leftover after parsing attributes in process `syz.5.9116'. [ 894.487129][ T879] cdc_ncm 3-1:1.1: skipping garbage [ 894.505867][ T879] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 894.512692][ T879] cdc_ncm 3-1:1.1: bind() failure [ 894.682022][T29419] loop7: detected capacity change from 0 to 32768 [ 894.722594][T29419] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.9093 (29419) [ 894.742426][ T879] usb 3-1: USB disconnect, device number 115 [ 894.824757][T29419] BTRFS info (device loop7): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 894.873485][T29419] BTRFS info (device loop7): using sha256 (sha256-ni) checksum algorithm [ 894.904269][T29419] BTRFS info (device loop7): using free-space-tree [ 895.180960][T29549] loop4: detected capacity change from 0 to 16 [ 895.256178][T29549] erofs (device loop4): mounted with root inode @ nid 36. [ 895.405915][T25573] BTRFS info (device loop7): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 895.753549][T29577] loop5: detected capacity change from 0 to 16 [ 895.804323][T29577] erofs (device loop5): mounted with root inode @ nid 36. [ 895.906749][T29577] syz.5.9137: attempt to access beyond end of device [ 895.906749][T29577] loop5: rw=0, sector=48, nr_sectors = 16 limit=16 [ 895.969910][T29577] erofs (device loop5): read error -5 @ 43 of nid 36 [ 897.013493][T29641] loop5: detected capacity change from 0 to 1024 [ 897.162523][T29641] fuse: Bad value for 'fd' [ 897.412254][ T879] usb 4-1: new full-speed USB device number 120 using dummy_hcd [ 898.325959][ T879] usb 4-1: config 4 has an invalid interface number: 231 but max is 0 [ 898.372538][ T879] usb 4-1: config 4 has no interface number 0 [ 898.418188][ T879] usb 4-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 898.444950][ T879] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 898.461509][ T879] usb 4-1: Product: syz [ 898.465699][ T879] usb 4-1: Manufacturer: syz [ 898.491677][ T879] usb 4-1: SerialNumber: syz [ 898.586406][ T879] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state. [ 898.927418][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 898.927438][ T30] audit: type=1326 audit(2000000305.730:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29724 comm="syz.2.9180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f677678e969 code=0x7ffc0000 [ 898.980059][ T30] audit: type=1326 audit(2000000305.730:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29724 comm="syz.2.9180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f677678e969 code=0x7ffc0000 [ 899.028586][ T879] vp7045: USB control message 'in' went wrong. [ 899.061616][T29728] netlink: 60 bytes leftover after parsing attributes in process `syz.5.9181'. [ 899.090070][ T879] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 899.110650][T29728] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9181'. [ 899.133842][ T879] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19) [ 899.171107][ T30] audit: type=1326 audit(2000000305.749:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29724 comm="syz.2.9180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7f677678e969 code=0x7ffc0000 [ 899.171607][T29728] netlink: 60 bytes leftover after parsing attributes in process `syz.5.9181'. [ 899.218312][ T879] usb 4-1: USB disconnect, device number 120 [ 899.228191][ T6926] udevd[6926]: setting mode of /dev/bus/usb/004/120 to 020664 failed: No such file or directory [ 899.239895][T29740] sit0: entered promiscuous mode [ 899.282531][ T6926] udevd[6926]: setting owner of /dev/bus/usb/004/120 to uid=0, gid=0 failed: No such file or directory [ 899.283423][T29740] netlink: 'syz.0.9184': attribute type 1 has an invalid length. [ 899.346241][ T30] audit: type=1326 audit(2000000305.749:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29724 comm="syz.2.9180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f677678e969 code=0x7ffc0000 [ 899.367741][T29740] netlink: 1 bytes leftover after parsing attributes in process `syz.0.9184'. [ 899.907200][T29782] ipt_REJECT: ECHOREPLY no longer supported. [ 899.976565][ T6304] usb 1-1: new high-speed USB device number 114 using dummy_hcd [ 900.171472][ T6304] usb 1-1: Using ep0 maxpacket: 16 [ 900.197242][ T6304] usb 1-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 900.236653][ T6304] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 900.254404][ T6304] usb 1-1: Product: syz [ 900.263231][ T6304] usb 1-1: Manufacturer: syz [ 900.287603][ T6304] usb 1-1: SerialNumber: syz [ 900.342290][ T6304] usb 1-1: config 0 descriptor?? [ 900.374730][ T6304] visor 1-1:0.0: Sony Clie 3.5 converter detected [ 900.408718][T29809] netlink: 'syz.4.9203': attribute type 3 has an invalid length. [ 900.471872][T29813] loop2: detected capacity change from 0 to 1024 [ 900.835500][ T6304] usb 1-1: clie_3_5_startup: get interface number failed: -71 [ 900.873193][ T6304] visor 1-1:0.0: probe with driver visor failed with error -71 [ 900.916444][ T6304] usb 1-1: USB disconnect, device number 114 [ 900.949196][ T879] usb 6-1: new high-speed USB device number 115 using dummy_hcd [ 901.173288][ T879] usb 6-1: Using ep0 maxpacket: 32 [ 901.181106][ T879] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 901.216329][ T879] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 901.258469][ T879] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 901.301553][ T879] usb 6-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 901.335957][T29861] netlink: 'syz.4.9217': attribute type 21 has an invalid length. [ 901.342159][ T879] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 901.343983][T29861] netlink: 168 bytes leftover after parsing attributes in process `syz.4.9217'. [ 901.399364][ T879] usb 6-1: config 0 descriptor?? [ 901.405656][T29823] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 901.442379][ T879] hub 6-1:0.0: USB hub found [ 901.644768][T29801] loop3: detected capacity change from 0 to 32768 [ 901.665131][ T879] hub 6-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 901.729215][T29801] ERROR: (device loop3): diAllocAG: ipimap->i_size is wrong [ 901.729215][T29801] [ 901.771666][T29801] ERROR: (device loop3): remounting filesystem as read-only [ 901.823523][T29801] ialloc: diAlloc returned -5! [ 901.835749][T29885] netlink: 'syz.7.9223': attribute type 21 has an invalid length. [ 901.871168][T29885] netlink: 128 bytes leftover after parsing attributes in process `syz.7.9223'. [ 901.884241][ T879] usbhid 6-1:0.0: can't add hid device: -71 [ 901.921394][ T879] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 901.931056][T29885] netlink: 3 bytes leftover after parsing attributes in process `syz.7.9223'. [ 902.003324][ T879] usb 6-1: USB disconnect, device number 115 [ 902.913667][T29940] netlink: 'syz.7.9237': attribute type 1 has an invalid length. [ 902.953198][T29940] netlink: 224 bytes leftover after parsing attributes in process `syz.7.9237'. [ 902.962659][T29945] loop3: detected capacity change from 0 to 256 [ 902.984099][T29941] loop0: detected capacity change from 0 to 1024 [ 903.002044][T29940] netlink: 8 bytes leftover after parsing attributes in process `syz.7.9237'. [ 903.006367][T29941] EXT4-fs: Ignoring removed bh option [ 903.040402][T29941] EXT4-fs: inline encryption not supported [ 903.063823][T29945] exFAT-fs (loop3): failed to load upcase table (idx : 0x00011f50, chksum : 0xa6aae999, utbl_chksum : 0xe619d30d) [ 903.101299][T29941] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 903.227148][T29941] EXT4-fs error (device loop0): ext4_map_blocks:675: inode #3: block 2: comm syz.0.9236: lblock 2 mapped to illegal pblock 2 (length 1) [ 903.272517][T29961] netlink: 20 bytes leftover after parsing attributes in process `syz.5.9241'. [ 903.380624][T29941] Quota error (device loop0): qtree_write_dquot: dquota write failed [ 903.438557][T29941] EXT4-fs error (device loop0): ext4_map_blocks:675: inode #3: block 48: comm syz.0.9236: lblock 0 mapped to illegal pblock 48 (length 1) [ 903.517214][T29941] Quota error (device loop0): v2_write_file_info: Can't write info structure [ 903.531187][T25577] Bluetooth: hci3: unexpected event for opcode 0x1405 [ 903.564574][T29941] EXT4-fs error (device loop0): ext4_acquire_dquot:6935: comm syz.0.9236: Failed to acquire dquot type 0 [ 903.623183][T29941] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5899: Corrupt filesystem [ 903.680683][T29941] EXT4-fs error (device loop0): ext4_evict_inode:259: inode #11: comm syz.0.9236: mark_inode_dirty error [ 903.728025][T29941] EXT4-fs warning (device loop0): ext4_evict_inode:262: couldn't mark inode dirty (err -117) [ 903.757711][T29988] x_tables: duplicate underflow at hook 2 [ 903.827679][T29941] EXT4-fs (loop0): 1 orphan inode deleted [ 903.849638][ T1158] EXT4-fs error (device loop0): ext4_map_blocks:675: inode #3: block 1: comm kworker/u8:7: lblock 1 mapped to illegal pblock 1 (length 1) [ 903.891933][T29941] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 903.957545][ T1158] Quota error (device loop0): remove_tree: Can't read quota data block 1 [ 904.013583][ T1158] EXT4-fs error (device loop0): ext4_release_dquot:6971: comm kworker/u8:7: Failed to release dquot type 0 [ 904.037708][T29941] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 904.046854][T29941] EXT4-fs error (device loop0): __ext4_get_inode_loc:4450: comm syz.0.9236: Invalid inode table block 1 in block_group 0 [ 904.060449][T29999] loop5: detected capacity change from 0 to 1024 [ 904.166802][T29941] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5899: Corrupt filesystem [ 904.213238][T30009] loop3: detected capacity change from 0 to 512 [ 904.218649][T29941] EXT4-fs error (device loop0): ext4_quota_off:7219: inode #3: comm syz.0.9236: mark_inode_dirty error [ 904.362129][T30009] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 904.399951][T30019] loop4: detected capacity change from 0 to 64 [ 904.432729][T30009] ext4 filesystem being mounted at /1564/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 904.477953][T30019] 9pnet_fd: p9_fd_create_unix (30019): problem connecting socket: ./file0: -13 [ 904.690714][ T6164] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 905.084951][ T6419] usb 1-1: new high-speed USB device number 115 using dummy_hcd [ 905.308620][ T6419] usb 1-1: Using ep0 maxpacket: 16 [ 905.327050][ T6419] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 905.385218][ T6419] usb 1-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 905.408170][ T6419] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 905.440345][ T6419] usb 1-1: Product: syz [ 905.478106][ T6419] usb 1-1: Manufacturer: syz [ 905.492368][ T6419] usb 1-1: SerialNumber: syz [ 905.531583][ T6419] usb 1-1: config 0 descriptor?? [ 905.584655][ T6419] hub 1-1:0.0: bad descriptor, ignoring hub [ 905.629002][ T6419] hub 1-1:0.0: probe with driver hub failed with error -5 [ 905.674714][ T6419] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input67 [ 905.925733][T30134] ieee802154 phy0 wpan0: encryption failed: -90 [ 905.947267][T30120] loop4: detected capacity change from 0 to 4096 [ 905.947855][T30137] netlink: 'syz.3.9284': attribute type 11 has an invalid length. [ 906.004074][T30120] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512). [ 906.131433][T30120] ntfs3(loop4): Failed to load $Extend (-22). [ 906.153215][T30120] ntfs3(loop4): Failed to initialize $Extend. [ 906.575888][T30170] netlink: 'syz.4.9292': attribute type 1 has an invalid length. [ 906.930855][T30187] xt_hashlimit: overflow, try lower: 18446744073709551615/7 [ 906.973718][T30194] loop5: detected capacity change from 0 to 256 [ 907.036591][T30194] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 0, start 00000001) [ 907.138428][ T879] usb 1-1: USB disconnect, device number 115 [ 907.469810][T30225] xt_policy: output policy not valid in PREROUTING and INPUT [ 907.974012][ T879] usb 6-1: new high-speed USB device number 116 using dummy_hcd [ 908.134721][T30269] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9322'. [ 908.173977][T30269] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9322'. [ 908.182704][ T879] usb 6-1: Using ep0 maxpacket: 32 [ 908.209504][ T879] usb 6-1: config 0 has an invalid interface number: 151 but max is 0 [ 908.246786][ T879] usb 6-1: config 0 has no interface number 0 [ 908.281299][ T879] usb 6-1: New USB device found, idVendor=0499, idProduct=6bb7, bcdDevice=68.2f [ 908.320042][ T879] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 908.361449][ T879] usb 6-1: Product: syz [ 908.384191][ T879] usb 6-1: Manufacturer: syz [ 908.395559][ T879] usb 6-1: SerialNumber: syz [ 908.446110][ T879] usb 6-1: config 0 descriptor?? [ 908.543655][T30288] netlink: 'syz.3.9327': attribute type 3 has an invalid length. [ 908.628573][T30288] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.9327'. [ 908.778473][T30294] bond0: entered allmulticast mode [ 908.910139][ T879] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 909.108985][ T879] usb 6-1: USB disconnect, device number 116 [ 909.293284][T30386] loop0: detected capacity change from 0 to 256 [ 909.663658][T30406] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 20001 - 0 [ 909.726464][T30406] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 20001 - 0 [ 909.753504][T30406] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 20001 - 0 [ 909.781979][T30406] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 20001 - 0 [ 909.940555][T30425] loop2: detected capacity change from 0 to 1024 [ 909.970596][T30425] EXT4-fs: Ignoring removed mblk_io_submit option [ 910.025856][ T6774] udevd[6774]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.151/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 910.154292][T30425] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 910.317786][T30451] tmpfs: Bad value for 'nr_blocks' [ 910.411168][T30455] loop5: detected capacity change from 0 to 64 [ 910.562189][T30455] Trying to free block not in datazone [ 910.585336][T30455] Trying to free block not in datazone [ 910.586746][ T6172] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 911.161153][T30487] ipt_REJECT: TCP_RESET invalid for non-tcp [ 911.313254][ T6267] usb 4-1: new high-speed USB device number 121 using dummy_hcd [ 911.492460][T30511] netlink: 'syz.0.9377': attribute type 4 has an invalid length. [ 911.508351][ T6267] usb 4-1: config 0 has an invalid interface number: 58 but max is 0 [ 911.528460][ T6267] usb 4-1: config 0 has no interface number 0 [ 911.550372][ T6267] usb 4-1: config 0 interface 58 altsetting 0 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 911.590421][ T6267] usb 4-1: New USB device found, idVendor=085a, idProduct=0008, bcdDevice=7f.81 [ 911.619890][ T6267] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 911.655222][ T6267] usb 4-1: Product: syz [ 911.659426][ T6267] usb 4-1: Manufacturer: syz [ 911.707305][ T6267] usb 4-1: SerialNumber: syz [ 911.733013][ T6267] usb 4-1: config 0 descriptor?? [ 911.790586][T30514] loop5: detected capacity change from 0 to 4096 [ 911.850005][T30514] ntfs3(loop5): Different NTFS sector size (4096) and media sector size (512). [ 912.006615][ T6267] kaweth 4-1:0.58: Firmware present in device. [ 912.072579][T30514] ntfs3(loop5): Mark volume as dirty due to NTFS errors [ 912.190343][ T6267] kaweth 4-1:0.58: Error reading configuration (-71), no net device created [ 912.243106][ T6267] kaweth 4-1:0.58: probe with driver kaweth failed with error -5 [ 912.289031][ T6267] usb 4-1: USB disconnect, device number 121 [ 912.344220][T30546] loop7: detected capacity change from 0 to 256 [ 912.391209][T30482] loop2: detected capacity change from 0 to 32768 [ 912.393611][T30546] exfat: Deprecated parameter 'namecase' [ 912.470969][T30546] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 912.537729][T30482] jfs_lookup: iget failed on inum 32 [ 912.586635][T30482] jfs_lookup: iget failed on inum 32 [ 913.022915][ T6267] usb 6-1: new high-speed USB device number 117 using dummy_hcd [ 913.226931][ T6267] usb 6-1: Using ep0 maxpacket: 16 [ 913.256343][ T6267] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 913.295357][ T6267] usb 6-1: New USB device found, idVendor=093a, idProduct=2622, bcdDevice=b5.89 [ 913.341340][ T6267] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 913.396806][ T6267] usb 6-1: Product: syz [ 913.417788][ T6267] usb 6-1: Manufacturer: syz [ 913.433311][ T6267] usb 6-1: SerialNumber: syz [ 913.471396][ T6267] usb 6-1: config 0 descriptor?? [ 913.539137][ T6267] gspca_main: gspca_pac7302-2.14.0 probing 093a:2622 [ 913.549291][T30609] ÿÿÿÿÿÿ: renamed from bridge_slave_1 [ 913.962454][ T6267] gspca_pac7302: reg_w() failed i: 78 v: 00 error -71 [ 913.985286][ T6267] gspca_pac7302 6-1:0.0: probe with driver gspca_pac7302 failed with error -71 [ 914.041641][ T6267] usb 6-1: USB disconnect, device number 117 [ 914.828195][T30684] netlink: 8 bytes leftover after parsing attributes in process `syz.7.9424'. [ 914.861015][T30684] netlink: 8 bytes leftover after parsing attributes in process `syz.7.9424'. [ 914.879741][T30690] netlink: 'syz.2.9426': attribute type 4 has an invalid length. [ 914.943017][T30690] netlink: 17 bytes leftover after parsing attributes in process `syz.2.9426'. [ 915.024273][T30694] SET target dimension over the limit! [ 915.259483][T30706] netlink: 292 bytes leftover after parsing attributes in process `syz.2.9431'. [ 915.758108][T30723] loop4: detected capacity change from 0 to 4096 [ 915.772891][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 915.779215][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 915.852395][T30740] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 916.736093][T30792] RDS: rds_bind could not find a transport for fc00::, load rds_tcp or rds_rdma? [ 916.891025][T30796] tmpfs: Bad value for 'mpol' [ 917.128894][T30813] netlink: 'syz.0.9466': attribute type 10 has an invalid length. [ 917.241384][T30813] team0: Cannot enslave team device to itself [ 917.722801][T30850] netdevsim netdevsim7 netdevsim0: entered promiscuous mode [ 918.458529][T30901] loop2: detected capacity change from 0 to 512 [ 918.506866][T30890] loop5: detected capacity change from 0 to 1024 [ 918.568745][T30890] EXT4-fs: Ignoring removed orlov option [ 918.588818][T30907] No such timeout policy "syz0" [ 918.652944][T30901] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 918.666424][T30890] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 918.705895][T30901] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 918.714135][ T6426] usb 4-1: new high-speed USB device number 122 using dummy_hcd [ 918.742161][T30916] loop4: detected capacity change from 0 to 256 [ 918.765932][T30901] EXT4-fs (loop2): 1 truncate cleaned up [ 918.772575][T30916] vfat: Unknown parameter 'iosharset' [ 918.801817][T30901] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 918.904259][T30901] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 918.943809][ T6168] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 918.949406][ T6426] usb 4-1: config 0 has an invalid interface number: 64 but max is 0 [ 919.006315][ T6426] usb 4-1: config 0 has no interface number 0 [ 919.050599][ T6426] usb 4-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 919.106257][ T6426] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 919.141549][ T6172] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 919.142482][ T6426] usb 4-1: Product: syz [ 919.171129][ T6426] usb 4-1: Manufacturer: syz [ 919.175794][ T6426] usb 4-1: SerialNumber: syz [ 919.246639][ T6426] usb 4-1: config 0 descriptor?? [ 919.544431][ T6426] usb 4-1: Found UVC 0.08 device syz (046d:0823) [ 919.550927][ T6426] uvcvideo 4-1:0.64: Entity type for entity Output 2 was not initialized! [ 919.607668][ T6426] usb 4-1: Failed to create links for entity 2 [ 919.614326][ T6426] usb 4-1: Failed to register entities (-22). [ 919.683292][ T6426] usb 4-1: USB disconnect, device number 122 [ 919.849269][T30988] netlink: 128 bytes leftover after parsing attributes in process `syz.7.9513'. [ 919.899195][T30988] netlink: 20 bytes leftover after parsing attributes in process `syz.7.9513'. [ 919.936410][ T6267] usb 1-1: new full-speed USB device number 116 using dummy_hcd [ 919.995465][T30994] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9515'. [ 920.138219][ T6267] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 920.180735][ T6267] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 920.215585][T31004] netlink: 8 bytes leftover after parsing attributes in process `syz.7.9519'. [ 920.229876][ T6267] usb 1-1: Product: syz [ 920.255867][ T6267] usb 1-1: Manufacturer: syz [ 920.275836][ T6267] usb 1-1: SerialNumber: syz [ 920.300071][ T6267] r8152-cfgselector 1-1: Unknown version 0x0000 [ 920.338859][ T6267] r8152-cfgselector 1-1: config 0 descriptor?? [ 920.496827][T31020] loop2: detected capacity change from 0 to 256 [ 920.591956][T31028] netlink: 44 bytes leftover after parsing attributes in process `syz.4.9526'. [ 920.686452][T31020] FAT-fs (loop2): Directory bread(block 64) failed [ 920.716303][T31020] FAT-fs (loop2): Directory bread(block 65) failed [ 920.764407][T31020] FAT-fs (loop2): Directory bread(block 66) failed [ 920.788017][T31020] FAT-fs (loop2): Directory bread(block 67) failed [ 920.814889][ T879] r8152-cfgselector 1-1: USB disconnect, device number 116 [ 920.862730][T31042] netlink: 12 bytes leftover after parsing attributes in process `syz.7.9529'. [ 920.871982][T31020] FAT-fs (loop2): Directory bread(block 68) failed [ 920.872023][T31020] FAT-fs (loop2): Directory bread(block 69) failed [ 920.872113][T31020] FAT-fs (loop2): Directory bread(block 70) failed [ 920.872145][T31020] FAT-fs (loop2): Directory bread(block 71) failed [ 920.872246][T31020] FAT-fs (loop2): Directory bread(block 72) failed [ 920.872280][T31020] FAT-fs (loop2): Directory bread(block 73) failed [ 921.038931][T31042] netlink: 20 bytes leftover after parsing attributes in process `syz.7.9529'. [ 921.042481][T31051] loop4: detected capacity change from 0 to 1764 [ 921.133297][T31051] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 921.372839][T31066] netlink: 28 bytes leftover after parsing attributes in process `syz.7.9537'. [ 921.454229][T31066] netlink: 28 bytes leftover after parsing attributes in process `syz.7.9537'. [ 921.593786][T31081] netlink: 224 bytes leftover after parsing attributes in process `syz.0.9539'. [ 921.659922][T31081] netlink: 224 bytes leftover after parsing attributes in process `syz.0.9539'. [ 921.704700][T31081] netlink: 38 bytes leftover after parsing attributes in process `syz.0.9539'. [ 921.818825][T31094] overlay: Bad value for 'upperdir' [ 922.158489][ T6267] usb 6-1: new high-speed USB device number 118 using dummy_hcd [ 922.266338][ T10] usb 3-1: new high-speed USB device number 116 using dummy_hcd [ 922.329446][ T6267] usb 6-1: Using ep0 maxpacket: 8 [ 922.349084][ T6267] usb 6-1: config 135 has an invalid interface number: 230 but max is 0 [ 922.381265][ T6267] usb 6-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config [ 922.414193][ T6267] usb 6-1: config 135 has no interface number 0 [ 922.431740][ T6267] usb 6-1: too many endpoints for config 135 interface 230 altsetting 126: 53, using maximum allowed: 30 [ 922.474583][ T6267] usb 6-1: config 135 interface 230 altsetting 126 has 0 endpoint descriptors, different from the interface descriptor's value: 53 [ 922.518058][ T10] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 922.531016][ T6267] usb 6-1: config 135 interface 230 has no altsetting 0 [ 922.538246][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 922.554247][ T10] usb 3-1: config 0 descriptor?? [ 922.577736][T31141] loop7: detected capacity change from 0 to 256 [ 922.631871][T31141] exFAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 922.679817][T31141] exFAT-fs (loop7): Medium has reported failures. Some data may be lost. [ 922.679833][ T6267] usb 6-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a [ 922.759211][T31141] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0xe5674ec2, utbl_chksum : 0xe619d30d) [ 922.765350][ T6267] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 922.788160][T31152] openvswitch: netlink: Tunnel attr 130 out of range max 16 [ 922.797246][ T6267] usb 6-1: Product: syz [ 922.806391][ T10] [drm] vendor descriptor length:6 data:06 5f 01 00 00 00 00 00 00 00 00 [ 922.831922][ T6267] usb 6-1: Manufacturer: syz [ 922.836544][ T6267] usb 6-1: SerialNumber: syz [ 922.851221][ T10] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 922.907237][ T6267] usb 6-1: Found UVC 0.00 device syz (18ec:3288) [ 922.913626][ T6267] usb 6-1: No valid video chain found. [ 922.971669][T31159] loop3: detected capacity change from 0 to 64 [ 923.020767][ T10] [drm:udl_init] *ERROR* Selecting channel failed [ 923.104968][ T10] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 2 [ 923.129497][ T6267] usb 6-1: USB disconnect, device number 118 [ 923.133700][ T10] [drm] Initialized udl on minor 2 [ 923.155415][ T10] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 923.190906][ T10] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 923.262233][ T6426] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 923.280721][ T10] usb 3-1: USB disconnect, device number 116 [ 923.310626][ T6426] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 923.867381][T31228] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9573'. [ 923.890792][ T10] usb 1-1: new full-speed USB device number 117 using dummy_hcd [ 924.073125][ T10] usb 1-1: config 0 has an invalid interface number: 138 but max is 0 [ 924.103638][ T10] usb 1-1: config 0 has no interface number 0 [ 924.124439][ T10] usb 1-1: config 0 interface 138 altsetting 0 has an endpoint descriptor with address 0x61, changing to 0x1 [ 924.175437][ T10] usb 1-1: config 0 interface 138 altsetting 0 has an endpoint descriptor with address 0x97, changing to 0x87 [ 924.249703][ T10] usb 1-1: config 0 interface 138 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 4 [ 924.293506][ T10] usb 1-1: config 0 interface 138 altsetting 0 endpoint 0x87 has invalid maxpacket 1152, setting to 1023 [ 924.342457][ T10] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= f.66 [ 924.397780][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 924.463757][ T10] usb 1-1: config 0 descriptor?? [ 924.528983][T31181] loop7: detected capacity change from 0 to 32768 [ 924.582821][T31181] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.9565 (31181) [ 924.670776][T31181] BTRFS info (device loop7): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 924.704294][ T10] usb 1-1: string descriptor 0 read error: -71 [ 924.728788][ T10] usbtest 1-1:0.138: Linux gadget zero [ 924.738902][T31181] BTRFS info (device loop7): using crc32c (crc32c-x86_64) checksum algorithm [ 924.765053][ T10] usbtest 1-1:0.138: full-speed {control in/out bulk-out iso-in} tests (+alt) [ 924.790386][T31181] BTRFS info (device loop7): disk space caching is enabled [ 924.818515][T31275] netlink: 'syz.2.9587': attribute type 21 has an invalid length. [ 924.825386][T31181] BTRFS warning (device loop7): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 924.854744][ T10] usb 1-1: USB disconnect, device number 117 [ 924.879809][T31275] IPv6: NLM_F_CREATE should be specified when creating new route [ 924.928585][T31275] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 924.935876][T31275] IPv6: NLM_F_CREATE should be set when creating new route [ 924.943218][T31275] IPv6: NLM_F_CREATE should be set when creating new route [ 924.950473][T31275] IPv6: NLM_F_CREATE should be set when creating new route [ 925.099684][T31181] BTRFS info (device loop7): rebuilding free space tree [ 925.136320][T31181] BTRFS info (device loop7): disabling free space tree [ 925.145226][T31181] BTRFS info (device loop7): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 925.167187][T31181] BTRFS info (device loop7): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 925.369967][T31181] BTRFS info (device loop7 state M): max_inline set to 8 [ 925.588611][T25573] BTRFS info (device loop7): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 926.105158][T31354] loop5: detected capacity change from 0 to 512 [ 926.168202][T31354] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 926.290931][T31354] EXT4-fs error (device loop5): ext4_orphan_get:1417: comm syz.5.9606: bad orphan inode 15 [ 926.324269][T31354] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 926.574835][ T6168] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 926.604025][T31377] 9pnet_virtio: no channels available for device syz [ 926.805670][T31378] loop3: detected capacity change from 0 to 1764 [ 927.191194][T31413] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9619'. [ 927.249312][T31419] loop3: detected capacity change from 0 to 256 [ 927.289690][T31419] exfat: Deprecated parameter 'namecase' [ 927.362094][T31419] exfat: Deprecated parameter 'utf8' [ 927.447628][T31419] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 928.056736][ T10] usb 6-1: new high-speed USB device number 119 using dummy_hcd [ 928.097600][T31470] netlink: 248 bytes leftover after parsing attributes in process `syz.2.9638'. [ 928.152683][T31470] netlink: 44 bytes leftover after parsing attributes in process `syz.2.9638'. [ 928.261313][ T10] usb 6-1: Using ep0 maxpacket: 8 [ 928.295685][ T10] usb 6-1: New USB device found, idVendor=13d8, idProduct=0001, bcdDevice=30.62 [ 928.335390][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 928.378163][ T10] usb 6-1: Product: syz [ 928.404065][ T10] usb 6-1: Manufacturer: syz [ 928.427182][ T10] usb 6-1: SerialNumber: syz [ 928.484934][ T10] usb 6-1: config 0 descriptor?? [ 928.511553][ T30] audit: type=1326 audit(2000000333.414:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31488 comm="syz.3.9644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3db98e969 code=0x7ffc0000 [ 928.560764][ T10] usb 6-1: selecting invalid altsetting 3 [ 928.566615][ T10] comedi comedi0: could not set alternate setting 3 in high speed [ 928.602996][ T10] usbdux 6-1:0.0: driver 'usbdux' failed to auto-configure device. [ 928.615132][ T30] audit: type=1326 audit(2000000333.414:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31488 comm="syz.3.9644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3db98e969 code=0x7ffc0000 [ 928.679497][ T10] usbdux 6-1:0.0: probe with driver usbdux failed with error -22 [ 928.740542][ T30] audit: type=1326 audit(2000000333.479:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31488 comm="syz.3.9644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=290 compat=0 ip=0x7fc3db98e969 code=0x7ffc0000 [ 928.817746][ T6304] usb 6-1: USB disconnect, device number 119 [ 928.845264][ T30] audit: type=1326 audit(2000000333.479:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31488 comm="syz.3.9644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3db98e969 code=0x7ffc0000 [ 928.975452][ T30] audit: type=1326 audit(2000000333.479:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31488 comm="syz.3.9644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3db98e969 code=0x7ffc0000 [ 929.886120][ T879] usb 4-1: new full-speed USB device number 123 using dummy_hcd [ 929.951599][T31581] loop4: detected capacity change from 0 to 256 [ 929.983414][T31581] exfat: Deprecated parameter 'namecase' [ 930.052632][T31581] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xb5fb52fc, utbl_chksum : 0xe619d30d) [ 930.112148][ T879] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 930.131963][ T879] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 930.193452][ T879] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 930.226587][ T879] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 930.271648][ T879] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 930.293941][ T879] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 930.315936][ T879] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 930.379362][ T879] usb 4-1: Product: syz [ 930.390629][ T879] usb 4-1: Manufacturer: syz [ 930.396710][ T10] usb 3-1: new full-speed USB device number 117 using dummy_hcd [ 930.424669][ T879] cdc_wdm 4-1:1.0: invalid descriptor buffer length [ 930.482074][ T879] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 930.514998][ T879] cdc_wdm 4-1:1.0: Unknown control protocol [ 930.587874][T31623] loop4: detected capacity change from 0 to 256 [ 930.638323][ T10] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 930.659964][ T10] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 930.724589][ T879] usb 4-1: USB disconnect, device number 123 [ 930.731929][ T10] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 930.796873][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 930.825749][ T10] usb 3-1: SerialNumber: syz [ 930.965337][ T10] usb 3-1: 0:2 : does not exist [ 931.201609][ T879] usb 3-1: USB disconnect, device number 117 [ 931.524249][T31694] netlink: 248 bytes leftover after parsing attributes in process `syz.5.9692'. [ 931.802949][T31710] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9694'. [ 931.860619][T31710] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9694'. [ 932.337660][T31737] netlink: 'syz.0.9703': attribute type 6 has an invalid length. [ 932.370983][T31734] loop3: detected capacity change from 0 to 2048 [ 932.390830][T31737] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.9703'. [ 932.499856][T31742] QAT: failed to copy from user cfg_data. [ 932.505460][T31734] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 932.608890][T31730] loop4: detected capacity change from 0 to 4096 [ 932.687830][T31730] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512). [ 932.803345][T31755] tmpfs: Bad value for 'mpol' [ 932.943071][T31763] netlink: 'syz.7.9711': attribute type 8 has an invalid length. [ 933.063815][T31730] ntfs3(loop4): ino=19, mi_enum_attr [ 933.101511][T31730] ntfs3(loop4): Mark volume as dirty due to NTFS errors [ 933.173613][T31730] ntfs3(loop4): ino=9, ntfs_sync_fs failed, -22. [ 933.187612][T31760] loop2: detected capacity change from 0 to 4096 [ 933.287046][T31760] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512). [ 933.499637][T31760] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 933.580580][T31760] ntfs3(loop2): ino=19, mi_enum_attr [ 933.592931][T31793] netlink: 'syz.5.9718': attribute type 3 has an invalid length. [ 933.677932][T31760] ntfs3(loop2): failed to convert "c46c" to macgaelic [ 933.708876][ T30] audit: type=1326 audit(2000000338.281:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31797 comm="syz.0.9719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ee478e969 code=0x7ffc0000 [ 933.769636][T31760] ntfs3(loop2): ino=20, mi_enum_attr [ 933.841473][T31804] loop7: detected capacity change from 0 to 512 [ 933.856932][ T30] audit: type=1326 audit(2000000338.281:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31797 comm="syz.0.9719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ee478e969 code=0x7ffc0000 [ 933.958338][T31804] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 934.045065][ T30] audit: type=1326 audit(2000000338.327:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31797 comm="syz.0.9719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=33 compat=0 ip=0x7f9ee478e969 code=0x7ffc0000 [ 934.181916][ T30] audit: type=1326 audit(2000000338.327:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31797 comm="syz.0.9719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ee478e969 code=0x7ffc0000 [ 934.203735][T31804] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 934.267100][T31804] ext4 filesystem being mounted at /203/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 934.589882][T25573] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 935.121693][T31872] netlink: 96 bytes leftover after parsing attributes in process `syz.4.9739'. [ 935.733353][T31905] bond0: (slave veth0_macvtap): Error: Device is in use and cannot be enslaved [ 936.120963][T31924] loop5: detected capacity change from 0 to 256 [ 936.167945][T31930] binfmt_misc: register: failed to install interpreter file ./file0 [ 936.200509][T31924] FAT-fs (loop5): bogus logical sector size 2238 [ 936.206877][T31924] FAT-fs (loop5): Can't find a valid FAT filesystem [ 936.295419][T31924] binder: Bad value for 'stats' [ 936.411070][T31928] loop2: detected capacity change from 0 to 4096 [ 936.561221][T31928] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 936.606462][T31928] ntfs3(loop2): Failed to initialize $Extend/$ObjId. [ 936.701182][T31928] ntfs3(loop2): ino=1e, "file1" attr_set_size [ 937.116737][ T879] usb 1-1: new high-speed USB device number 118 using dummy_hcd [ 937.225261][T31999] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 937.256557][T31999] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 937.321409][ T879] usb 1-1: Using ep0 maxpacket: 16 [ 937.346847][ T879] usb 1-1: New USB device found, idVendor=07ab, idProduct=fc01, bcdDevice=28.e0 [ 937.406502][ T879] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 937.461273][ T879] usb 1-1: Product: syz [ 937.466928][ T879] usb 1-1: Manufacturer: syz [ 937.496144][ T879] usb 1-1: SerialNumber: syz [ 937.518850][ T879] usb 1-1: config 0 descriptor?? [ 937.531049][ T879] ums-freecom 1-1:0.0: USB Mass Storage device detected [ 937.775045][T32035] netlink: 'syz.5.9784': attribute type 3 has an invalid length. [ 937.846209][T32035] netlink: 'syz.5.9784': attribute type 3 has an invalid length. [ 937.858056][ T879] usb 1-1: USB disconnect, device number 118 [ 937.901342][T32035] netlink: 16 bytes leftover after parsing attributes in process `syz.5.9784'. [ 938.664850][T32003] loop7: detected capacity change from 0 to 32768 [ 938.750144][T32084] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9797'. [ 938.760532][T32003] ERROR: (device loop7): xtTruncate: XT_GETPAGE: xtree page corrupt [ 938.760532][T32003] [ 938.851126][T32003] ERROR: (device loop7): remounting filesystem as read-only [ 938.926270][T32091] loop3: detected capacity change from 0 to 512 [ 939.033521][T32091] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 939.127897][T32091] ext4 filesystem being mounted at /1659/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 939.256573][ T6267] usb 5-1: new high-speed USB device number 108 using dummy_hcd [ 939.373663][ T879] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 939.423580][ T6164] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 939.467250][ T6267] usb 5-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 939.491282][ T6267] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 939.534083][ T879] usb 8-1: Using ep0 maxpacket: 8 [ 939.541830][ T6267] usb 5-1: Product: syz [ 939.551212][ T879] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 939.573644][ T6267] usb 5-1: Manufacturer: syz [ 939.589847][ T879] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 939.611485][ T6267] usb 5-1: SerialNumber: syz [ 939.627007][ T6267] usb 5-1: config 0 descriptor?? [ 939.643672][ T879] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 939.660386][ T879] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 939.703526][ T6267] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 939.721736][ T879] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 939.732434][ T879] usb 8-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 939.742169][ T879] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 939.755000][ T879] usb 8-1: config 0 descriptor?? [ 939.761571][T32113] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 940.091741][ T6267] gspca_sunplus: reg_r err -71 [ 940.096710][ T6267] sunplus 5-1:0.0: probe with driver sunplus failed with error -71 [ 940.229897][ T6267] usb 5-1: USB disconnect, device number 108 [ 940.357727][ T879] usb 8-1: USB disconnect, device number 6 [ 940.366834][T25577] Bluetooth: hci7: Opcode 0x0c03 failed: -19 [ 940.414799][T32174] loop3: detected capacity change from 0 to 512 [ 940.475296][T32174] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e02c, mo2=0002] [ 940.513292][T32174] System zones: 1-12 [ 940.543928][T32174] EXT4-fs error (device loop3): ext4_get_branch:178: inode #13: block 33619980: comm syz.3.9815: invalid block [ 940.561962][T32174] EXT4-fs (loop3): Remounting filesystem read-only [ 940.572665][T32174] EXT4-fs (loop3): 1 truncate cleaned up [ 940.617435][T32174] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 940.847432][ T30] audit: type=1326 audit(2000002922.956:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32198 comm="syz.2.9819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f677678e969 code=0x7ffc0000 [ 940.896053][ T6164] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 940.944978][ T30] audit: type=1326 audit(2000002922.956:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32198 comm="syz.2.9819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f677678e969 code=0x7ffc0000 [ 941.019488][ T30] audit: type=1326 audit(2000002922.984:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32198 comm="syz.2.9819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=460 compat=0 ip=0x7f677678e969 code=0x7ffc0000 [ 941.101945][ T30] audit: type=1326 audit(2000002922.984:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32198 comm="syz.2.9819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f677678e969 code=0x7ffc0000 [ 941.234246][ T30] audit: type=1326 audit(2000002922.984:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32198 comm="syz.2.9819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f677678e969 code=0x7ffc0000 [ 941.256603][ C0] vkms_vblank_simulate: vblank timer overrun [ 941.298025][T32214] loop7: detected capacity change from 0 to 64 [ 941.390992][T32155] loop5: detected capacity change from 0 to 32768 [ 941.417908][T32214] syz.7.9823: attempt to access beyond end of device [ 941.417908][T32214] loop7: rw=2049, sector=268435468, nr_sectors = 2 limit=64 [ 941.504349][T32155] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 941.785733][T32155] XFS (loop5): Ending clean mount [ 941.828021][T32155] XFS (loop5): Quotacheck needed: Please wait. [ 941.918923][T32250] loop3: detected capacity change from 0 to 256 [ 942.000435][T32250] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001047b, chksum : 0x3c9d562b, utbl_chksum : 0xe619d30d) [ 942.041099][T32155] XFS (loop5): Quotacheck: Done. [ 942.238339][T32267] netlink: 'syz.2.9835': attribute type 1 has an invalid length. [ 942.281447][T32267] netlink: 224 bytes leftover after parsing attributes in process `syz.2.9835'. [ 942.311305][T32269] netlink: 'syz.3.9834': attribute type 11 has an invalid length. [ 942.322809][ T6168] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 942.650488][T32220] loop4: detected capacity change from 0 to 40427 [ 942.794451][T32220] F2FS-fs (loop4): invalid crc value [ 943.206611][T32220] F2FS-fs (loop4): Start checkpoint disabled! [ 943.263859][T32220] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 943.419741][T32220] F2FS-fs (loop4): disabling checkpoint not compatible with read-only [ 943.870014][T32341] tmpfs: Bad value for 'mpol' [ 944.066233][T32353] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9862'. [ 944.288334][T32364] block device autoloading is deprecated and will be removed. [ 944.332715][T32364] syz.0.9865: attempt to access beyond end of device [ 944.332715][T32364] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 944.506136][T32380] netlink: 3 bytes leftover after parsing attributes in process `syz.5.9869'. [ 944.671469][T32386] loop7: detected capacity change from 0 to 512 [ 944.735119][T32386] EXT4-fs (loop7): Test dummy encryption mode enabled [ 944.769924][T32386] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 944.872441][T25577] Bluetooth: hci5: unexpected event for opcode 0x0403 [ 944.922917][T32386] EXT4-fs (loop7): 1 truncate cleaned up [ 944.930454][T32386] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 944.936078][T32391] loop0: detected capacity change from 0 to 4096 [ 944.970956][T32391] ntfs3(loop0): Different NTFS sector size (2048) and media sector size (512). [ 945.412978][ T10] usb 4-1: new high-speed USB device number 124 using dummy_hcd [ 945.418393][T32425] netlink: 'syz.2.9881': attribute type 3 has an invalid length. [ 945.457672][T32429] tmpfs: Bad value for 'mpol' [ 945.468965][T32425] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9881'. [ 945.588534][T32431] loop5: detected capacity change from 0 to 4096 [ 945.596525][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 945.631308][ T10] usb 4-1: New USB device found, idVendor=0979, idProduct=0270, bcdDevice=a8.17 [ 945.641726][T32431] EXT4-fs: Ignoring removed nobh option [ 945.653827][T32434] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9884'. [ 945.662854][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 945.671358][T32431] EXT4-fs: Ignoring removed i_version option [ 945.673305][T25573] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 945.702185][ T10] usb 4-1: Product: syz [ 945.706474][ T10] usb 4-1: Manufacturer: syz [ 945.747590][ T10] usb 4-1: SerialNumber: syz [ 945.773231][T32431] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 945.893498][T32451] netlink: 8 bytes leftover after parsing attributes in process `syz.7.9885'. [ 945.917188][ T10] usb 4-1: config 0 descriptor?? [ 945.933845][T32431] Quota error (device loop5): find_block_dqentry: Quota for id 0 referenced but not present [ 945.970848][T32452] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9888'. [ 945.985819][ T10] hub 4-1:0.0: bad descriptor, ignoring hub [ 945.990299][T32431] Quota error (device loop5): qtree_read_dquot: Can't read quota structure for id 0 [ 946.022213][ T10] hub 4-1:0.0: probe with driver hub failed with error -5 [ 946.041844][T32431] EXT4-fs error (device loop5): ext4_acquire_dquot:6935: comm syz.5.9883: Failed to acquire dquot type 1 [ 946.046359][T32452] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode broadcast(3) [ 946.098038][ T10] gspca_main: jeilinj-2.14.0 probing 0979:0270 [ 946.233478][ T10] usb 4-1: USB disconnect, device number 124 [ 946.271042][ T6168] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 947.124167][ T30] audit: type=1326 audit(2000002928.822:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32516 comm="syz.2.9905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f677678e969 code=0x7ffc0000 [ 947.233548][ T30] audit: type=1326 audit(2000002928.822:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32516 comm="syz.2.9905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f677678e969 code=0x7ffc0000 [ 947.277484][ T30] audit: type=1326 audit(2000002928.860:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32516 comm="syz.2.9905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=38 compat=0 ip=0x7f677678e969 code=0x7ffc0000 [ 947.315884][ T30] audit: type=1326 audit(2000002928.860:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32516 comm="syz.2.9905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f677678e969 code=0x7ffc0000 [ 947.969112][T32494] loop7: detected capacity change from 0 to 32768 [ 948.137381][T32494] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode. [ 948.166862][T32573] fuse: Unknown parameter 'smackfsdef' [ 948.171342][ T6267] usb 1-1: new high-speed USB device number 119 using dummy_hcd [ 948.232110][T32494] (syz.7.9896,32494,0):ocfs2_inode_is_valid_to_delete:886 ERROR: Skipping delete of system file 72 [ 948.275074][T32578] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9923'. [ 948.299552][T32494] ocfs2: Unmounting device (7,7) on (node local) [ 948.320399][T32578] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9923'. [ 948.399539][ T6267] usb 1-1: Using ep0 maxpacket: 8 [ 948.419237][ T6267] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 948.472554][T32578] vxcan3: entered promiscuous mode [ 948.473636][ T6267] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 948.477701][T32578] vxcan3: entered allmulticast mode [ 948.489791][T32588] openvswitch: netlink: Message has 4 unknown bytes. [ 948.534402][T32588] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 948.545542][ T6267] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 948.569546][ T6267] usb 1-1: Product: syz [ 948.573730][ T6267] usb 1-1: Manufacturer: syz [ 948.598408][ T6267] usb 1-1: SerialNumber: syz [ 948.662751][ T6267] usb 1-1: bad CDC descriptors [ 948.923960][T32614] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 948.955163][ T6267] usb 1-1: USB disconnect, device number 119 [ 949.093731][T32628] loop5: detected capacity change from 0 to 8 [ 949.195917][T32633] loop3: detected capacity change from 0 to 256 [ 949.398368][T32633] FAT-fs (loop3): Directory bread(block 64) failed [ 949.410731][T32633] FAT-fs (loop3): Directory bread(block 65) failed [ 949.417386][T32633] FAT-fs (loop3): Directory bread(block 66) failed [ 949.426680][T32648] loop7: detected capacity change from 0 to 64 [ 949.461475][T32633] FAT-fs (loop3): Directory bread(block 67) failed [ 949.496279][T32633] FAT-fs (loop3): Directory bread(block 68) failed [ 949.524786][T32633] FAT-fs (loop3): Directory bread(block 69) failed [ 949.571079][T32633] FAT-fs (loop3): Directory bread(block 70) failed [ 949.579793][T32633] FAT-fs (loop3): Directory bread(block 71) failed [ 949.626597][T32633] FAT-fs (loop3): Directory bread(block 72) failed [ 949.680528][T32633] FAT-fs (loop3): Directory bread(block 73) failed [ 949.814753][T32658] loop5: detected capacity change from 0 to 2048 [ 949.979735][T32658] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 950.074074][T32679] binder: 32676:32679 ioctl c00c6211 0 returned -14 [ 950.261141][ T6168] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 950.348124][T32696] netlink: ct family unspecified [ 950.383582][T32696] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 950.494556][T32703] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 950.922652][T32729] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9960'. [ 951.018268][T32734] loop5: detected capacity change from 0 to 64 [ 951.274527][T32752] loop0: detected capacity change from 0 to 256 [ 951.323546][T32752] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 951.408962][T32752] exFAT-fs (loop0): valid_size(150994954) is greater than size(10) [ 951.493871][ T300] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 951.513176][ T6304] usb 4-1: new full-speed USB device number 125 using dummy_hcd [ 951.550749][T32746] loop7: detected capacity change from 0 to 8192 [ 951.568923][ T303] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 951.610180][ T306] loop2: detected capacity change from 0 to 8 [ 951.644733][ T6158] loop7: p1 p3 p4 [ 951.652503][ T6158] loop7: p1 size 8390912 extends beyond EOD, truncated [ 951.686794][ T306] SQUASHFS error: Failed to read block 0x4de: -5 [ 951.707309][ T6158] loop7: p3 size 589824 extends beyond EOD, truncated [ 951.736946][ T6304] usb 4-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 951.762830][ T306] SQUASHFS error: Failed to read block 0x4de: -5 [ 951.784523][ T30] audit: type=1800 audit(2000002933.201:257): pid=306 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.9972" name="file1" dev="loop2" ino=5 res=0 errno=0 [ 951.807758][ T6304] usb 4-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 951.866427][ T6304] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 951.895355][T32746] loop7: p1 p3 p4 [ 951.899754][ T6304] usb 4-1: Product: syz [ 951.925565][ T6304] usb 4-1: Manufacturer: syz [ 951.961032][ T6304] usb 4-1: SerialNumber: syz [ 951.970150][ T327] netlink: 164 bytes leftover after parsing attributes in process `syz.4.9975'. [ 951.979717][T32746] loop7: p1 size 8390912 extends beyond EOD, truncated [ 952.034791][T32746] loop7: p3 size 589824 extends beyond EOD, truncated [ 952.064876][ T6304] usb 4-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 952.513968][ T6304] usb 4-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter) [ 952.621279][ T6304] usb 4-1: USB disconnect, device number 125 [ 952.688705][ T359] loop2: detected capacity change from 0 to 1764 [ 952.747158][ T372] netlink: 'syz.5.9983': attribute type 1 has an invalid length. [ 952.777048][ T372] netlink: 228 bytes leftover after parsing attributes in process `syz.5.9983'. [ 952.831708][ T382] IPv6: addrconf: prefix option has invalid lifetime [ 952.939308][ T6774] udevd[6774]: inotify_add_watch(7, /dev/loop7p1, 10) failed: No such file or directory [ 952.958868][ T6926] udevd[6926]: inotify_add_watch(7, /dev/loop7p3, 10) failed: No such file or directory [ 952.983273][ T6415] udevd[6415]: inotify_add_watch(7, /dev/loop7p4, 10) failed: No such file or directory [ 953.370272][ T6415] udevd[6415]: inotify_add_watch(7, /dev/loop7p4, 10) failed: No such file or directory [ 953.384192][ T6926] udevd[6926]: inotify_add_watch(7, /dev/loop7p3, 10) failed: No such file or directory [ 953.390809][ T6774] udevd[6774]: inotify_add_watch(7, /dev/loop7p1, 10) failed: No such file or directory [ 953.519470][ T422] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9997'. [ 953.878626][ T6267] usb 5-1: new high-speed USB device number 109 using dummy_hcd [ 953.957455][ T446] xt_CT: You must specify a L4 protocol and not use inversions on it [ 954.106634][ T6267] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 954.129676][ T6267] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 954.189470][ T6267] usb 5-1: config 0 descriptor?? [ 954.222006][ T6267] cp210x 5-1:0.0: cp210x converter detected [ 954.301998][ T471] loop3: detected capacity change from 0 to 512 [ 954.348966][ T6413] usb 3-1: new high-speed USB device number 118 using dummy_hcd [ 954.384106][ T471] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 954.425257][ T471] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e12c, mo2=0002] [ 954.450162][ T471] EXT4-fs (loop3): orphan cleanup on readonly fs [ 954.472338][ T471] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.10010: bg 0: block 361: padding at end of block bitmap is not set [ 954.497652][ T471] EXT4-fs (loop3): Remounting filesystem read-only [ 954.514211][ T471] EXT4-fs (loop3): 1 truncate cleaned up [ 954.520030][ T6413] usb 3-1: Using ep0 maxpacket: 32 [ 954.527254][ T471] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 954.532288][ T6413] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 954.543261][ T471] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 954.651416][ T6267] usb 5-1: cp210x converter now attached to ttyUSB0 [ 954.670699][ T6413] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 954.715424][ T6267] usb 5-1: USB disconnect, device number 109 [ 954.724771][ T6413] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 954.748293][ T6267] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 954.760160][ T6413] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 954.772907][ T6267] cp210x 5-1:0.0: device disconnected [ 954.802728][ T6413] usb 3-1: config 0 descriptor?? [ 954.853524][ T6413] hub 3-1:0.0: USB hub found [ 954.864226][ T30] audit: type=1326 audit(2000002936.073:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=505 comm="syz.7.10017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa19dd8e969 code=0x7ffc0000 [ 954.974640][ T30] audit: type=1326 audit(2000002936.110:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=505 comm="syz.7.10017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa19dd8e969 code=0x7ffc0000 [ 955.052656][ T6413] hub 3-1:0.0: 1 port detected [ 955.064546][ T30] audit: type=1326 audit(2000002936.110:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=505 comm="syz.7.10017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=126 compat=0 ip=0x7fa19dd8e969 code=0x7ffc0000 [ 955.120791][ T30] audit: type=1326 audit(2000002936.110:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=505 comm="syz.7.10017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa19dd8e969 code=0x7ffc0000 [ 955.190942][ T30] audit: type=1326 audit(2000002936.110:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=505 comm="syz.7.10017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa19dd8e969 code=0x7ffc0000 [ 955.313260][ T6413] hub 3-1:0.0: hub_hub_status failed (err = -71) [ 955.326153][ T6413] hub 3-1:0.0: config failed, can't get hub status (err -71) [ 955.390535][ T6413] usbhid 3-1:0.0: can't add hid device: -71 [ 955.417031][ T6413] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 955.418433][ T30] audit: type=1326 audit(2000002936.578:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=537 comm="syz.4.10027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f103018e969 code=0x7ffc0000 [ 955.495712][ T6413] usb 3-1: USB disconnect, device number 118 [ 955.527105][ T30] audit: type=1326 audit(2000002936.587:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=537 comm="syz.4.10027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f103018e969 code=0x7ffc0000 [ 955.654423][ T30] audit: type=1326 audit(2000002936.606:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=537 comm="syz.4.10027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=23 compat=0 ip=0x7f103018e969 code=0x7ffc0000 [ 955.720650][ T30] audit: type=1326 audit(2000002936.615:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=537 comm="syz.4.10027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f103018e969 code=0x7ffc0000 [ 955.816072][ T30] audit: type=1326 audit(2000002936.615:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=537 comm="syz.4.10027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f103018e969 code=0x7ffc0000 [ 956.508136][ T6413] usb 1-1: new high-speed USB device number 120 using dummy_hcd [ 956.637050][ T615] netlink: 'syz.2.10050': attribute type 2 has an invalid length. [ 956.697574][ T6426] IPVS: starting estimator thread 0... [ 956.733465][ T6413] usb 1-1: Using ep0 maxpacket: 8 [ 956.773028][ T6413] usb 1-1: config 6 has an invalid interface number: 2 but max is 0 [ 956.811507][ T6413] usb 1-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 956.823716][ T620] IPVS: using max 25 ests per chain, 60000 per kthread [ 956.873047][ T6413] usb 1-1: config 6 has no interface number 0 [ 956.879808][ T6413] usb 1-1: config 6 interface 2 altsetting 0 has an endpoint descriptor with address 0xAA, changing to 0x8A [ 956.931719][ T6413] usb 1-1: config 6 interface 2 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 956.980273][ T6413] usb 1-1: config 6 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 956.993407][ T633] netlink: 'syz.5.10054': attribute type 10 has an invalid length. [ 957.075798][ T6413] usb 1-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 957.118192][ T6413] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 957.126216][ T6413] usb 1-1: Product: syz [ 957.171050][ T6413] usb 1-1: Manufacturer: syz [ 957.180093][ T6413] usb 1-1: SerialNumber: syz [ 957.191156][ T633] team0: Port device wlan1 added [ 957.206065][ T639] openvswitch: netlink: IP tunnel dst address not specified [ 957.247080][ T6413] hso 1-1:6.2: Failed to find INT IN ep [ 957.500936][ T6413] usb 1-1: USB disconnect, device number 120 [ 957.999577][ T612] loop7: detected capacity change from 0 to 32768 [ 958.039945][ T612] jfs: Unknown parameter 'ÿÿÿÿÿÿÿÿÿÿÿÿ18446744073709551615ÿÿÿÿÿ' [ 958.135585][ T695] loop5: detected capacity change from 0 to 8 [ 958.823902][ T722] loop0: detected capacity change from 0 to 256 [ 959.315771][ T735] loop4: detected capacity change from 0 to 2048 [ 959.418777][ T735] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 959.723696][ T6174] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 959.934213][ T783] netlink: 12 bytes leftover after parsing attributes in process `syz.7.10099'. [ 961.014727][ T847] loop2: detected capacity change from 0 to 64 [ 961.768782][ T6161] Bluetooth: hci6: command 0x0405 tx timeout [ 962.131681][ T844] loop4: detected capacity change from 0 to 32768 [ 962.260931][ T844] ERROR: (device loop4): diAllocAG: error reading iag [ 962.260931][ T844] [ 962.337438][ T844] ialloc: diAlloc returned -5! [ 962.945941][ T960] xt_CT: You must specify a L4 protocol and not use inversions on it [ 963.045525][ T970] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 963.453978][ T994] (unnamed net_device) (uninitialized): peer notification delay (9) is not a multiple of miimon (100), value rounded to 0 ms [ 963.515035][ T994] (unnamed net_device) (uninitialized): option use_carrier: invalid value (5) [ 963.574708][ T1003] netlink: 'syz.2.10162': attribute type 15 has an invalid length. [ 963.605041][ T1003] netlink: 666 bytes leftover after parsing attributes in process `syz.2.10162'. [ 963.901435][ T1019] loop0: detected capacity change from 0 to 512 [ 963.948289][ T1019] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 964.010039][ T1019] EXT4-fs (loop0): invalid journal inode [ 964.032205][ T1019] EXT4-fs (loop0): can't get journal size [ 964.033451][ T6413] usb 5-1: new high-speed USB device number 110 using dummy_hcd [ 964.076761][ T1019] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 964.119214][ T1019] EXT4-fs (loop0): orphan cleanup on readonly fs [ 964.125671][ T1019] EXT4-fs error (device loop0): ext4_iget_extra_inode:4693: inode #15: comm syz.0.10166: corrupted in-inode xattr: bad e_name length [ 964.164651][ T1019] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.10166: couldn't read orphan inode 15 (err -117) [ 964.250225][ T6413] usb 5-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 964.281449][ T6413] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 964.297829][ T1019] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 964.354489][ T6413] usb 5-1: config 0 descriptor?? [ 964.389139][ T1046] loop2: detected capacity change from 0 to 2048 [ 964.441594][ T1046] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 964.567143][ T1065] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 964.598811][ T6413] usb 5-1: Cannot read MAC address [ 964.601331][ T6774] udevd[6774]: incorrect nilfs2 checksum on /dev/loop2 [ 964.611594][ T6413] MOSCHIP usb-ethernet driver 5-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 964.623843][ T1046] NILFS error (device loop2): nilfs_check_folio: bad entry in directory #2: unaligned directory entry - offset=152, inode=18446462598732840977, rec_len=65535, name_len=254 [ 964.658368][ T6156] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 964.705308][ T1046] Remounting filesystem read-only [ 964.713152][ T6413] usb 5-1: USB disconnect, device number 110 [ 965.019914][ T31] INFO: task syz-executor:21258 blocked for more than 143 seconds. [ 965.028752][ T31] Not tainted 6.15.0-rc7-syzkaller-00082-g5cdb2c77c4c3 #0 [ 965.036476][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 965.104695][ T31] task:syz-executor state:D stack:22232 pid:21258 tgid:21258 ppid:1 task_flags:0x400140 flags:0x00004006 [ 965.145435][ T999] loop7: detected capacity change from 0 to 32768 [ 965.177071][ T31] Call Trace: [ 965.190105][ T31] [ 965.202397][ T31] __schedule+0x16e2/0x4cd0 [ 965.223055][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 965.234029][ T999] ERROR: (device loop7): diAllocAG: numfree > numinos [ 965.234029][ T999] [ 965.256095][ T31] ? schedule+0x165/0x360 [ 965.281017][ T31] ? __lock_acquire+0xaac/0xd20 [ 965.288351][ T999] ialloc: diAlloc returned -5! [ 965.304201][ T31] ? __pfx___schedule+0x10/0x10 [ 965.321649][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 965.344400][ T31] ? schedule+0x91/0x360 [ 965.364369][ T31] schedule+0x165/0x360 [ 965.380466][ T31] io_schedule+0x81/0xe0 [ 965.399911][ T31] folio_wait_bit_common+0x6b0/0xb90 [ 965.420777][ T31] ? __pfx_folio_wait_bit_common+0x10/0x10 [ 965.438503][ T31] ? __pfx_wake_page_function+0x10/0x10 [ 965.475766][ T31] ? folios_put_refs+0x559/0x640 [ 965.483303][ T31] ? __pfx_find_lock_entries+0x10/0x10 [ 965.496144][ T31] __filemap_get_folio+0x139/0xaf0 [ 965.509157][ T31] truncate_inode_pages_range+0x3ed/0xda0 [ 965.522027][ T31] ? evict+0x847/0x9c0 [ 965.529982][ T31] ? evict_inodes+0x636/0x6c0 [ 965.544078][ T31] ? generic_shutdown_super+0x9a/0x2c0 [ 965.559716][ T31] ? kill_block_super+0x44/0x90 [ 965.574192][ T31] ? deactivate_locked_super+0xbc/0x130 [ 965.592748][ T31] ? __pfx_truncate_inode_pages_range+0x10/0x10 [ 965.606546][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 965.620271][ T1081] loop0: detected capacity change from 0 to 32768 [ 965.620402][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 965.639531][ T31] ? __lock_acquire+0xaac/0xd20 [ 965.645102][ T1081] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.10176 (1081) [ 965.650403][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 965.665186][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 965.670574][ T31] evict+0x517/0x9c0 [ 965.674693][ T31] ? __pfx_evict+0x10/0x10 [ 965.685891][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 965.691719][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 965.697509][ T31] ? do_raw_spin_unlock+0x122/0x240 [ 965.703918][ T31] evict_inodes+0x636/0x6c0 [ 965.708524][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 965.718606][ T1081] BTRFS info (device loop0): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 965.721316][ T31] ? __pfx_evict_inodes+0x10/0x10 [ 965.735256][ T31] generic_shutdown_super+0x9a/0x2c0 [ 965.739541][ T1081] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 965.745106][ T31] kill_block_super+0x44/0x90 [ 965.750279][ T1081] BTRFS info (device loop0): disk space caching is enabled [ 965.762077][ T1081] BTRFS warning (device loop0): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 965.762181][ T31] deactivate_locked_super+0xbc/0x130 [ 965.792698][ T31] cleanup_mnt+0x425/0x4c0 [ 965.798818][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 965.804613][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 965.810134][ T31] task_work_run+0x1d4/0x260 [ 965.814794][ T31] ? __pfx_task_work_run+0x10/0x10 [ 965.821207][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 965.826969][ T31] resume_user_mode_work+0x5e/0x80 [ 965.832642][ T31] syscall_exit_to_user_mode+0x9a/0x120 [ 965.838645][ T31] do_syscall_64+0x103/0x210 [ 965.843693][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 965.849355][ T31] ? exc_page_fault+0x91/0x110 [ 965.854700][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 965.860634][ T31] RIP: 0033:0x7f5c4518fc97 [ 965.865521][ T31] RSP: 002b:00007ffd9bfb4258 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 965.874401][ T31] RAX: 0000000000000000 RBX: 00007f5c4521089d RCX: 00007f5c4518fc97 [ 965.875348][ T1081] BTRFS info (device loop0): rebuilding free space tree [ 965.882814][ T31] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd9bfb4310 [ 965.897836][ T31] RBP: 00007ffd9bfb4310 R08: 0000000000000000 R09: 0000000000000000 [ 965.919917][ T31] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffd9bfb53a0 [ 965.936814][ T1081] BTRFS info (device loop0): disabling free space tree [ 965.944388][ T31] R13: 00007f5c4521089d R14: 00000000000bc638 R15: 00007ffd9bfb53e0 [ 965.963267][ T1081] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 965.978635][ T31] [ 965.978643][ T1081] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 965.983386][ T31] [ 965.983386][ T31] Showing all locks held in the system: [ 966.008513][ T31] 1 lock held by khungtaskd/31: [ 966.068353][ T31] #0: ffffffff8df3dee0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 966.090367][ T31] 2 locks held by getty/5587: [ 966.095061][ T31] #0: ffff8880343520a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 966.113654][ T31] #1: ffffc90002ffe2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 966.124337][ T31] 1 lock held by syz-executor/21258: [ 966.130132][ T31] #0: ffff888047df80e0 (&type->s_umount_key#120){+.+.}-{4:4}, at: deactivate_super+0xa9/0xe0 [ 966.140826][ T31] 1 lock held by syz-executor/25573: [ 966.146125][ T31] 1 lock held by syz.0.10176/1081: [ 966.152433][ T31] #0: ffffffff8df439b8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2f4/0x730 [ 966.173737][ T31] 3 locks held by udevadm/1118: [ 966.178719][ T31] [ 966.181116][ T31] ============================================= [ 966.181116][ T31] [ 966.204160][ T31] NMI backtrace for cpu 0 [ 966.204177][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-rc7-syzkaller-00082-g5cdb2c77c4c3 #0 PREEMPT(full) [ 966.204206][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 966.204221][ T31] Call Trace: [ 966.204231][ T31] [ 966.204241][ T31] dump_stack_lvl+0x189/0x250 [ 966.204280][ T31] ? __wake_up_klogd+0xd9/0x110 [ 966.204309][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 966.204341][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 966.204376][ T31] ? __pfx__printk+0x10/0x10 [ 966.204416][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 966.204446][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 966.204469][ T31] ? _printk+0xcf/0x120 [ 966.204498][ T31] ? __pfx__printk+0x10/0x10 [ 966.204525][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 966.204555][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 966.204585][ T31] watchdog+0xfee/0x1030 [ 966.204629][ T31] ? watchdog+0x1de/0x1030 [ 966.204670][ T31] kthread+0x711/0x8a0 [ 966.204704][ T31] ? __pfx_watchdog+0x10/0x10 [ 966.204735][ T31] ? __pfx_kthread+0x10/0x10 [ 966.204764][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 966.204793][ T31] ? __pfx_kthread+0x10/0x10 [ 966.204822][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 966.204850][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 966.204877][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 966.204908][ T31] ? __pfx_kthread+0x10/0x10 [ 966.204937][ T31] ret_from_fork+0x4e/0x80 [ 966.204963][ T31] ? __pfx_kthread+0x10/0x10 [ 966.204992][ T31] ret_from_fork_asm+0x1a/0x30 [ 966.205033][ T31] [ 966.205043][ T31] Sending NMI from CPU 0 to CPUs 1: [ 966.371191][ C1] NMI backtrace for cpu 1 [ 966.371209][ C1] CPU: 1 UID: 0 PID: 81 Comm: kworker/u8:5 Not tainted 6.15.0-rc7-syzkaller-00082-g5cdb2c77c4c3 #0 PREEMPT(full) [ 966.371235][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 966.371249][ C1] Workqueue: bat_events batadv_iv_send_outstanding_bat_ogm_packet [ 966.371284][ C1] RIP: 0010:__rcu_read_unlock+0x0/0xe0 [ 966.371313][ C1] Code: 89 d9 80 e1 07 80 c1 03 38 c1 7c dc 48 89 df e8 96 1e 7a 00 eb d2 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 41 57 41 56 41 55 41 54 53 49 bf 00 00 00 00 00 fc ff [ 966.371332][ C1] RSP: 0018:ffffc9000240f938 EFLAGS: 00000282 [ 966.371358][ C1] RAX: 889d5daea892ba00 RBX: 00000000000001b4 RCX: 889d5daea892ba00 [ 966.371374][ C1] RDX: 0000000000000003 RSI: ffffffff8d938bac RDI: ffffffff8bc1f3c0 [ 966.371390][ C1] RBP: ffffc9000240fa70 R08: 0000000000000000 R09: 0000000000000000 [ 966.371404][ C1] R10: 0000000000000000 R11: ffffffff8b1f6568 R12: dffffc0000000000 [ 966.371420][ C1] R13: dffffc0000000000 R14: 0000000000000001 R15: ffff888057c850b4 [ 966.371437][ C1] FS: 0000000000000000(0000) GS:ffff8881261c2000(0000) knlGS:0000000000000000 [ 966.371456][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 966.371471][ C1] CR2: 00007f05a25f7e9c CR3: 0000000031e7a000 CR4: 0000000000350ef0 [ 966.371488][ C1] Call Trace: [ 966.371497][ C1] [ 966.371505][ C1] batadv_iv_ogm_schedule+0x6d6/0xea0 [ 966.371542][ C1] ? batadv_iv_ogm_schedule+0x3f8/0xea0 [ 966.371568][ C1] ? __pfx_batadv_iv_ogm_schedule+0x10/0x10 [ 966.371593][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 966.371619][ C1] ? batadv_send_skb_packet+0x45d/0x6d0 [ 966.371658][ C1] batadv_iv_send_outstanding_bat_ogm_packet+0x6c6/0x7e0 [ 966.371694][ C1] ? process_scheduled_works+0x9ec/0x17a0 [ 966.371718][ C1] process_scheduled_works+0xade/0x17a0 [ 966.371760][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 966.371801][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 966.371832][ C1] worker_thread+0x8a0/0xda0 [ 966.371856][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 966.371888][ C1] ? __kthread_parkme+0x7b/0x200 [ 966.371923][ C1] kthread+0x711/0x8a0 [ 966.371952][ C1] ? __pfx_worker_thread+0x10/0x10 [ 966.371973][ C1] ? __pfx_kthread+0x10/0x10 [ 966.371999][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 966.372025][ C1] ? __pfx_kthread+0x10/0x10 [ 966.372050][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 966.372073][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 966.372098][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 966.372126][ C1] ? __pfx_kthread+0x10/0x10 [ 966.372151][ C1] ret_from_fork+0x4e/0x80 [ 966.372174][ C1] ? __pfx_kthread+0x10/0x10 [ 966.372201][ C1] ret_from_fork_asm+0x1a/0x30 [ 966.372234][ C1] [ 966.651464][ T6156] BTRFS info (device loop0): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 966.669300][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 966.676164][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-rc7-syzkaller-00082-g5cdb2c77c4c3 #0 PREEMPT(full) [ 966.687980][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 966.698049][ T31] Call Trace: [ 966.701339][ T31] [ 966.704282][ T31] dump_stack_lvl+0x99/0x250 [ 966.708900][ T31] ? __asan_memcpy+0x40/0x70 [ 966.713509][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 966.718730][ T31] ? __pfx__printk+0x10/0x10 [ 966.723316][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 966.728952][ T31] panic+0x2db/0x790 [ 966.732850][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 966.738486][ T31] ? __pfx_panic+0x10/0x10 [ 966.742900][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 966.748527][ T31] ? nmi_backtrace_stall_check+0x433/0x440 [ 966.754339][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 966.759976][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 966.765365][ T31] ? nmi_trigger_cpumask_backtrace+0x2b6/0x300 [ 966.771515][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 966.777175][ T31] watchdog+0x102d/0x1030 [ 966.781515][ T31] ? watchdog+0x1de/0x1030 [ 966.785946][ T31] kthread+0x711/0x8a0 [ 966.790021][ T31] ? __pfx_watchdog+0x10/0x10 [ 966.794705][ T31] ? __pfx_kthread+0x10/0x10 [ 966.799305][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 966.804948][ T31] ? __pfx_kthread+0x10/0x10 [ 966.809556][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 966.814766][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 966.820399][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 966.825612][ T31] ? __pfx_kthread+0x10/0x10 [ 966.830208][ T31] ret_from_fork+0x4e/0x80 [ 966.834632][ T31] ? __pfx_kthread+0x10/0x10 [ 966.839224][ T31] ret_from_fork_asm+0x1a/0x30 [ 966.844006][ T31] [ 966.847222][ T31] Kernel Offset: disabled [ 966.851542][ T31] Rebooting in 86400 seconds..