last executing test programs: 1m47.279423159s ago: executing program 0 (id=101): prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0xc}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x8000, &(0x7f0000000240)={[{@ref_verify}, {@nobarrier}, {@autodefrag}, {@thread_pool={'thread_pool', 0x3d, 0x7}}, {@discard}, {@ssd_spread}]}, 0x1, 0x559d, &(0x7f000000ac40)="$eJzs3X1sVWcdB/BzeynlJaFlyjLUhfkPThCpmFiEoEVgAoPRgSbDwCgO2BAGhQRhY9OOOZ0jk4Y5xoovDKQCxq6+rJiYIbqIcU4mi8OGEXnJIuICK4yoJNOZ3nufy73n0vYO5zq3z4e05z73d57nPPfk/HG/lz7nRgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABBF0cHlC/627gfLv/nQdSenbLz/zAMnap57fNP4u+fsHnX4gVVXtp1uaip99fmzNyy67+GqoSf2zD8URYlUv0Sm/7xPTZ65aNa86X3CgLU3prcVFZ0dMt31WLrRO+/Jjn75P/OjKCqNDZDMbCf1z2kn4geIVhYO2KXtVWNWDdw4cdrmssmDFibrGgtfOh369PQEekrmunrx4rVUnfpdEtsj28659BJ5l2i6f/yCe1NeBADwulTWpDbZt6OZt7jZdn28HmtXx9oNsXZ4h9CQ27gc6XF7dzbPa+L1HppndToqlHU6z1g9c/6z7Zp4/1g7FjVexzzzd81Emj6dzbMuVu+peQIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC8ldx9/JanSzb96H1L149MHh887BdfbdryvUnt5VO+tm9D2+9bn3tPU1Ppq8+fvWHRfQ9XDT2xZ/6hKKpI9Uukuyfm7mjd8LMVU1b/fM6jzefee8euZGbcsO2Vs3PUFh58vDyKPp9TeTEMe2pAFNXkF1LN6NHCwuLUgymhAAAAwNvJ4NTvkmw7HQdL89qJVJpMpP4F6bC4vWrMqoEbJ07bXDZ50MJkXePlj1fTyXjVlxwv2664+JPICcYh/sbHu1gPu64sGKdr8RHjeX7U0AuHj3x9+Ya1jf1P7u87MDnpV1+uHXzFnNGvXDt2zG1/fWRHQf6v6Dr/hzMn/wMAAPDfkP/j43Stu/w/7Mj9Z+469dN1tZ/ZNvf4+G/UDnhX5Zo/NX/4c+uHTZ3Y69iVWwry/zV5hyzI/2HGIf+XRJeX/wEAAOCt7H+d/6sLxulad/l/2ZoRf592YdbEJ8Zd+OGZO4f88uCRaG/9iC+03P6B/bP7DWj4SUH+rywu//fKnXZ48pkw4SXlUVRZ/EkFAAAA8oT/d7/40ULI6+lPDuJ5fc75g5NuLn3w7EdmXzt029Ehu9rP/2PJ8k0XRjfPGF716acrNhTk/+ri8n/pm/NyAQAAgCI8tfgTN+2Mpk/6UPU9h/cv2P5I/bK1K5c2liWm/ntl2/X/au5dkP9risv/ZT3zcgAAAIBLOPSlbbtfm7msdXhz2fmtf3jtz49fPXz1gabKoyt/O7B0RWvt4oL8X1tc/u+X2WZWPqQ77Q9/hfBQeRT16XhQly78Jmr4ZLYAAAAAvEFCTv/nsbaRO68r+/VT339586zvfHvQ3m/NONj43Qn9b5n44IEZB56sLcj/dV3f/z/c6SCs/8+7/1/B+v+cQvquf2PdGAAAAIB3osL1/OH2+OlvLujs+/eLXf9/4xdbXzp++/yvtL97yE3LXr7tils/Nv7UH6ffmdw57q6SqVNfOl2Q/+uLy//J3O0b+f1/AAAAcBn+377/b3bBOF3r7v7/Mx+752j7X14YN2Jm49pFJ8dv/PG8Lc88trvq6nMLbu77wWeX7i3I/w3F5f+w7Z/78vaF83NveRRd1fEgczfBXWG6S2KFltKcQvrEx3rMCj0yhZaynEJKXazHqPIoen/Hg/pYYWAoNMQK7QMyha2xwrOhkLkesoXmWGFfuNI2DchMN17YEwqZBRYtYQVF/+ySiFiPVzrr0VG4ZI8XsgcHAAB4RwnhOZNlS/ObUTzKtiS626FfdzuUdLdDsrsdesV2iO/Y2fNRbX4hPH9+zRO/q/xoyWcP3XrHhOEjF667t2HsgeTcCdc/uaPvuRWnR68uyP9bi8v/4VT0Tm86W/8fhfX/me81zK7/rw2FilihJRRq4ncMqAnHSIfd9eEYFTWZHu1XZQsAAADwthY+F0j28DwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgP+zde5xU1Z0g8NNNP2homhbjK2JsdW1Fh6ZBUT/BB2omGmBNo+zMuPhohEaRVhBhIq5RULObxMEoKlFnRmEVRlZx8AVkNQE1ooloNI5mRh1DMGrcjR/FiH6yxrif7lunqLrVZRcCSjvf7x9dp+p3nrceXefeW+cCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD/Max/9MYj/umiJ0eP2jBvwPJXDv/vH9YfumzRO//rT89ed9ve8763ftWSJZV/en7jSZO/c8PhjRtWTnghhJbOcmVJ8bLTF6/4waoLvvGtB0+76e5395y9tCpTbyYe+nb8Kc/cuTK2+tt+IawsC6EiHRhcmwQqM/drY30Da0PYKWwOZEu09UlKpBsOj9WEsDBsDmSr+lFNCLU5gXG/fGT1vI7E9TUh7B9CqE638e/VSRs16UBjVRLokw5Mq0gCH3ycyAZWlScB2GrxzZB90S9vyc9Q33W5Iq+/ym3Wsc9Xeni9YqK+eL63jt3OncpRlX6gZauetoLq2C4K3h5rvNt6wLutYDtf42nL/SKV+Yby8eZQdSif1DZ5wqz2mfGR8tDU1KtYTdvpeX5x4yUTtyTdY16HsQP12+R1+Pj5A+9c0Dhm15sf3jD59apnF2xtN4tt3u2tOmRecz3meYxG+jzpAW+/gm9JDb50hRBuP37T2799aez//dWDTw9+75tDzxrywitD627+7rR+f332/6m8ZerGgvl//SfP/+PLOd6W5+WOrX5Yl8zN4yO1MfF2XTI3BwAAgB6jJ+w1fWPEQW/Xrmt4eN+vr5h83qJ5r51+7p+rftp3wkEnnjL0+3fcOPW0gvl/Q2nH/+Mh/9rc0a4JYWRn4or+Ieze+XgSWBq7c1b/EPbpTLXkB45NBdaEsEdnYlC2qlSJ3rFEQyrwRl0mMDIVWBsDLanA4hi4JhW4MgaWpwITY2BNKnBcDIQp+eM4qC4zjpIDNTHQmmzE5fEshD/UxdZS2+qlbFUAAADbSGZ2WJl/N+dch63NEKeXy2u6yxDPwC6aoTpVQ3oGm51WFa2horsayrurITvuOZ88/IKay7qrueA0jLL8DO8deN/c1Q/8249vnHDYUwd92HrGy+tXPTp6U6+/e2fMjy8dN3/Y+IL5f/Mnz/+ru+hIWcHx/xDGdv6NucszkfZsvLUlLwMAAACwFSpeW3ryL+Z+VLbkZ+ds3P8vTxt3de8V++47YO3B9/2/hjcHHL9q/4L5/8jSzv+P+0R65WQO6+JuiKn9Q2jODyTVjigMJEe9+2YCAAAA0BNkj8dnj4VPydwmp2in59OF+Vu2MH888D+yy/yDx129rnn17adMGXHomjWbztj15WUbntpl/3deOPDk00+4f2rDPQXz/5bSzv/vk3+bdGJt7MV1/UPonRN4PPayI9CpIQbWH5MfyIx/bdwAV8WqMicmZKu6KpZojYHmVGBhsRLPZEvsnh/IPFnZxq/IjmNKpkROAAAAAD5zcXdAPC4fz/9/+tx+j/7jslsueXDJutD37OW/uOzo4QPnD+791rRnDnnkb989eWrB/L91y87/75wHF5ze3943hCEVIfRK/zBgXZ9kYcAYqC3LJH7cJ6mrV7qqy/uEMKJjYOmqNmTW/69IrzH4XE1SVQzsvu8dGxs7ErfXhDAkN/DC+EXDOxKzUoFs439VE8LeHaNNN76id9J4ZbrxG3uH8JWcQLaqib1D6GisKl3Vo9WZ6xikq1peHcLOOYFsVYdXhzA7ANBTxf+lk3IfvHD2xVMntLe3zdiOibgTvyZMntLe1jRxWvuk6iJ9mpTqc946RnMLx1TqpW9ezqxRdNeopv6lpLM/FGzObSuzI7/gzMHM/fhlqLJznMMq8+4ekh7ygfsVNhFyvkoVG3L5dh5yn9xKNj+JBfXH/FWhb+g968K2GU0XTZg5c8bQ5G+p2Yclf+NxpmRbDU1vqz5d9a2El0fR5bJSPu22asytZMjM86YPuXD2xYOnnDfh7Laz284/bPhhRxwx7NBDhw/pGFRz8rebkTZ2VXNqpB8vKnFY23CkX67IqeSz+NCQkJDoaYlVv9vj5aN3Wfq9FbcsnvHz9qPafv71nXces6Tqmy9suvSy/Z/+Hx8UzP+nf/L8P37qxA/+zPoMxY7/18fD/Mnjmw/zt8bAwlKP/9cXO5qfPTGgIRWYEwNzHOYHAADgiyHujox7M+NO6Ufm7/Yvd467b8z89Qc/ue65svV9Dv77D39fXnnZuP9yzAMNt333bwrm/3NK+/3/Nlr/P7t0/ahiy/wPiiWai63/n17mP7v+/5xi6/+nl/nPrv+/8HNY/39WNpDaJH+w/j8AAPBF8Nmt/9/t8v7pCwQUZOh2ef/0BQIKMnS7jH+pFwjY4vX/H2k4aORPVn/nN43LLpj2zn8bct/oAXs2/O6Rva6cNHXk6NEjBv9Lwfz/mtLm/xbuBwAAgB3HAROPfWrjpL2Pvfp/3rbTHj9p/fauh+3y/WVHts3ftH7i39z27jl/XTD/X1ja/P+zX/8vFDv/v6FYoKXYwoDW/wMAAKCHKrb+39Abv3X5q4uPu/+ey6eNam0dP/uKq/dbfUD1qeGl0fMb/mLGvR8VzP+Xlzb/j6ddlOfljr35sC5Z0y6k17R7uy77kwEAAADoGcpDU1NliXnzFkY99tO3+WJmKdBPSud68sH9nn/gqyNOnL+46urXynYb9vFT1888+Piv/fDVjXtdcse55+1XMP9fU9r8P+93GY+fP/DOBY1jdv3w5oc3TH696tkFm4//AwAAANtPqfslAAAAAAAAAAAAAACAz98JD//k6rcnLvnanIW/3PWnvcY+u3zDrDlNs2uvf/WH1/7qiDsfHlfw+/8wtrNcsd//x+v+xd8XfCkvd2y1+/X/MvfHjb57dueShevqQtgvNzD18qk7hcy1+Q/IDaw+fdBuHYnL0yUeeuW41zoSZ6YDJw4e8H5H4shUoDUukrhHOhCvqvh+v1QgLq/4XDoQt8fydKAqE/hev2QcZelt9WZtsq3K0tvqxdoQ+ucEsttqZW3SRll6gNenAtkBXpAOxAGelAmUp3t1d9+kVzFQG4ve2jfpFQAAO6z4LbAyTJ7S3tYcv8LH2y9X5N9GeUuWzS2stqzE5l/OLE1216im/qWke6W/i26+1nhlqO4YwtCCr6u5Wco6R7ltaulm032pyJC7W+2tvEi5tC3ddFXFR1STjKhp4rT2SZXdDvyQ7rMMq+g2y9CCyU5ulvLOTVpCLSX0pYQRlbhtSuhyvF8empp6pXJ9NQbrQ57uXhGl/l4/d52/Yq+C3DxPvtn+1BP//PzKfR7/89Nnf/BXk7596byzznj3yHOq/+E/lz39XwfuXDD/ry9t/l+dO673MxcDmBOvrDeifwitJY4IAAAAvvjOOf+V+d999No31rc0vjZtyLWr/3X2jRdX1C298i9ffOhvN42/+sytjb/58zv2eXjyhGe+dO4hy054fZ+DL2s88637/mLeuAev6nvLD+ff8YOC+X9DafP/uAcrcyg42duxJl7//4r+IXReWr8+CSyNwz2rfwj7dKZaYonkgvqjYonmJLA07jAZFEu0tuRX1TsGlqcCb9RlAmtSgbUxkNlLcUfI7Mq5ti6E4Z2psfklpscS9anAN2OgIRVoioHmVKBfDIxMBX7fLxNoSQWejIEwJX9b3dcvs60AAAC2RGaeVZl/N6TnecsrustQ1l2GPt1lKO8uQ3V3GYqNIt6/N2aoTJ28UpaTqTJda02qloIM8WL4W9yvggzhmfyc6YIFTcfzD7LnG5TlZ3jg5K/ec9WCyYPKf/XR2qWt790/ccWts49eec5Df/fEpH0X3XX93gXz/+bS5v998m+T1tfG+f/m6/8lgcdj966Lp443xMD6Y/IDmR0Da+Nk96psVS2ZEplJ+1WxxMgYaEgFpsfAyFSgdWwmsHC3/EBmpp1t/Ips41MyJXICAAAA8JmLOwjibpo4///jsmePeqxi0V3/+ur4u+6d89Y99/70nntuvXf07Zu+/twVF7970UcF8/+Rpc3/Y3t9cxu7Mvbmt/1CWFm2uTfZwODaJBD3Y9TGn8cPrA1hp5wdHNkSbX2SElWphsNjNckv1KvSVf2oJlljIN4f98tHVs/rSFxfE8L+OXtfsm38e3XSRk060FiVBPqkA9MqkkDc85MNrCpPArDVsnsF4wsqc6pLVn3X5Yq8/r4o1wRND69gH2gX+br6zdX2Up1+ILNPNWvLnraC6tguCt4ea7zbeuK7rd67LfeLVOYbysebQ9WhfFLb5Amz2mfGR3J/yVpgOz3Pub9SLSW9DV6Hcz59b7tXne5Ac+rjo7nrcl2/DstidY+fP/DOBY1jdr354Q2TX696dkHJ3Sgi/lD4maoB9bmbd3urDpnXXI/7PGnxedIT/w00eNpCCBsuPeG6kVXTr1g5+pAj93rttFOqZ7437+/vf+mBd/f9xxUTh31tQMH8v6W0+X9F6rbTH+PGvLB/CAfmbNx1cfMf3z/5HMwJJJ+SOxcGkkPur9YV/eQEAACAbS27uyO7v2BK5jY5ITw9Ty7M37KF+eP+ipFd5i+13z8adMpe9+9297hrTz3qpn/+zdh+G8e/uOSYFa1HNS49+mf/6cyaeQXz/9ZPnv/3TnXT8X/H/9lOHP/v0o6+K7p3+oE5W7UruqA6tgvH/7u0o7/bHP/vkuP/jv93xfH/bjj+36Ud/Wkr+JY03ZeuEMKwMWcMrr1r8BPvD1z96yeemvJvc1sn3PONq27Z8+Nv1y9eUL9r34L5//TS5v/W/+t60b7s+n+txdb/m15s/b851v8DAAC2qyILzaXneQWr9xVkSK/eV5Ch2wUCu11i0Pp/W7z+32NHHTl++ejFv16z95gDLus7d+6puzx504stM9+vue2D93f7xYGjCub/c0qb/8eXQ9/c1nvK+n8NY4tUdU0MTLcwIAAAADuiYjsIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+HztfsN1449prj7pN8dfWjP6+w+tO6D6mldOvXTZhFsnfeX28wfNWrFkSeWfnt940uTv3HB444aVE14IYUpnubKkeNnpi1f8YNUF3/jWg6fddPe7e85eWp2ptzJzu2de7tjqh3UhLMx5pDYm3q7ruLM5MG703bMrOhLr6kLYLzcw9fKpO3UkFteFcEBuYPXpg3brSFyeLvHQK8e91pE4Mx04cfCA9zsSR2YCZenu/kO/pLtl6e7O6xdC/5xAtrvn9suvKtvGCZlAebqNf6pN2oiB2lj0xtqkjRhojyWm9A5hSEUIvdJV/aw6qapXuqr/XZ1U1Std1WXVIYwIIVSkq/p1VVJVRXrkz1QlVcXA7vvesbGxI7GoKoQhuYEXxi8a3pGYkQpkGz+lKoS9O14y6cbvq0war0w3fkNlCF8JIVSlS2yqSEpUpUtsqAhh55zA5o1YEcLswBdD/PSZlPvghbMvnjqhvb1txnZMVGXaqgmTp7S3NU2c1j6pOtWnYspy0h/P/fRjf3njJRM7bu8a1dS/lHRFplxlZ5eHVebdPWRH733sV5/cSjY/HwX1x/xVoW/oPevCthlNF02YOXPG0ORvqdmHJX97ZaLJthraU7ZVY24lQ2aeN33IhbMvHjzlvAlnt53ddv5hww874ohhhx46fEjHoJqTv9tipIs++5F+uSKnks/i/S8hIdHTEuV5n27NO/rneMEX/c0drQzVnR/QBdOK3CxlnaPcFoM+9lOO+NN8Tel2REMLJg4FWYZ1n+WQgsnE5iw1SZbOr3UFk8Pcmso7N2m8Xx6amnoV2w71+XdzN+9bW7F5X8xsulLTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMD/ZwcOBAAAAACA/F8boaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqgo7cCAAAAAAAOT/2ghVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVV2IFjAQAAAABh/tZh9GwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFwKAAD//y85Ijg=") r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) 1m46.363241885s ago: executing program 0 (id=107): socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=@setlink={0x3c, 0x13, 0x1, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, r3}, @IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}]}, 0x3c}}, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r4, 0x8922, &(0x7f0000000080)={'dummy0\x00'}) r5 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r5, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0xb}}) 1m44.875135319s ago: executing program 0 (id=117): r0 = syz_open_dev$video(&(0x7f0000000000), 0x7ff, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f0000000080)={0x0, 0x56555958, 0x280, 0x3f7a, 0x0, @stepwise={{0x0, 0x1}, {0x6}}}) 1m44.728794558s ago: executing program 0 (id=119): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x20044e, &(0x7f0000000340)={[{@minixdf}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1ff}}, {@stripe}, {@noblock_validity}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x8}}]}, 0x3, 0x451, &(0x7f0000000f80)="$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") unlinkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0x0) open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) syz_mount_image$udf(&(0x7f0000000e40), &(0x7f00000000c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2a00014, &(0x7f0000001680)=ANY=[@ANYBLOB='gid=', @ANYRESDEC=0x0, @ANYBLOB=',nostrict,dmode=00000000000000000000077,iocharset=cp862,uid=forget,lastblock=00000000000000000004,noadinicb,partition=00000000000000000006,unhide,shortad,fileset=00000000000000062560,unhide,uid=', @ANYRESDEC=0xee01, @ANYBLOB="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"], 0x1, 0xc43, &(0x7f00000001c0)="$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") mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000001900)='./bus\x00', 0x0, 0x21002, 0x0) r0 = open(&(0x7f00000005c0)='./bus\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x4c02, &(0x7f0000000140)) rmdir(&(0x7f0000000080)='./file0\x00') 1m44.078158846s ago: executing program 0 (id=129): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB=' '], 0x20}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000580)={0x0, 0x0, 0xe9}, &(0x7f00000005c0)=0x8) 1m35.298599441s ago: executing program 0 (id=228): ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000300)={{&(0x7f0000ffb000/0x3000)=nil, 0x3000}, 0x6}) r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io(r0, &(0x7f0000000140)={0x2c, 0x0, &(0x7f0000000380)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xc38, &(0x7f0000000200)=ANY=[]) 1m35.14451276s ago: executing program 32 (id=228): ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000300)={{&(0x7f0000ffb000/0x3000)=nil, 0x3000}, 0x6}) r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io(r0, &(0x7f0000000140)={0x2c, 0x0, &(0x7f0000000380)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xc38, &(0x7f0000000200)=ANY=[]) 1m28.372313883s ago: executing program 3 (id=276): syz_usb_connect(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000e5876e4040200516940a0000000109022400010000000009040000025883b2000905850140000000000905f3"], 0x0) 1m26.612131256s ago: executing program 3 (id=286): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000e00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x8010) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a80)={{0x14}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x6c}, 0x1, 0x0, 0x0, 0x48000}, 0x0) r1 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r1, &(0x7f0000001000)={&(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000940)=[{&(0x7f0000001040)="5346f7f875528ef24043c68e04180a33", 0x10}], 0x1, &(0x7f0000000580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x14}, @loopback}}}], 0x20}, 0x0) 1m26.350565195s ago: executing program 3 (id=288): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x4, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) 1m26.212020915s ago: executing program 3 (id=290): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000a40)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}, {@bsdgroups}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@noauto_da_alloc}, {@bsdgroups}, {@oldalloc}, {@resuid={'resuid', 0x3d, 0xee01}}]}, 0x2, 0x44a, &(0x7f0000000400)="$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") mount$overlay(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f0000000380), 0x1000040, &(0x7f0000000140)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) llistxattr(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) 1m25.498541292s ago: executing program 3 (id=294): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000005ec0)=@newtaction={0x6c, 0x30, 0xb, 0xfffffffd, 0x0, {}, [{0x58, 0x1, [@m_vlan={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x62e}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x3, 0x4, 0x5, 0x5, 0x8}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) 1m24.806532109s ago: executing program 3 (id=300): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={r0, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000400)=[0x0], 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) 1m24.541163868s ago: executing program 33 (id=300): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={r0, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000400)=[0x0], 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) 44.198989917s ago: executing program 6 (id=664): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r0, r1, 0x2, 0x2, 0x0, @void, @value}, 0x10) socket$inet6(0xa, 0x3, 0x3c) 44.080441256s ago: executing program 6 (id=665): syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0xcc04, &(0x7f0000000680)={[{@dots}, {@fat=@gid={'gid', 0x3d, 0xee01}}, {@nodots}, {@nodots}, {@nodots}, {@dots}, {@fat=@usefree}, {@nodots}, {}, {@dots}, {@dots}, {@nodots}, {@nodots}, {}, {@fat=@flush}, {@fat=@sys_immutable}, {@dots}, {@fat=@showexec}, {@nodots}, {@fat=@errors_continue}, {@dots}, {@fat=@quiet}]}, 0x1, 0x1fe, &(0x7f0000000480)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000640)='.\x00', 0x0, 0x0) renameat2(r0, &(0x7f00000001c0)='./file0\x00', r0, &(0x7f0000000200)='.\x02\x00', 0x0) 43.666643235s ago: executing program 6 (id=668): r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000600), 0x200, 0x0) ioctl$SOUND_MIXER_WRITE_RECSRC(r0, 0xc0044dff, &(0x7f0000000640)=0x8a2) 32.857496962s ago: executing program 6 (id=668): r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000600), 0x200, 0x0) ioctl$SOUND_MIXER_WRITE_RECSRC(r0, 0xc0044dff, &(0x7f0000000640)=0x8a2) 20.879796254s ago: executing program 6 (id=668): r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000600), 0x200, 0x0) ioctl$SOUND_MIXER_WRITE_RECSRC(r0, 0xc0044dff, &(0x7f0000000640)=0x8a2) 11.520403386s ago: executing program 6 (id=668): r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000600), 0x200, 0x0) ioctl$SOUND_MIXER_WRITE_RECSRC(r0, 0xc0044dff, &(0x7f0000000640)=0x8a2) 5.119959621s ago: executing program 2 (id=937): userfaultfd(0x801) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0x8010aa01, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) ptrace(0x10, 0x0) msgctl$IPC_SET(0x0, 0x1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) msgsnd(0x0, &(0x7f0000000100)=ANY=[@ANYRESOCT], 0x2000, 0x0) msgctl$IPC_RMID(0x0, 0x0) 4.99001137s ago: executing program 2 (id=939): r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmmsg$inet_sctp(r0, &(0x7f0000004b80)=[{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000003c0)="a0", 0x1}], 0x1, &(0x7f0000000800)=[@sndinfo={0x20, 0x84, 0x2, {0x6, 0x200, 0xd7b5, 0x81}}, @prinfo={0x18, 0x84, 0x5, {0x10, 0x9}}], 0x38, 0x4000040}], 0x1, 0x80) 4.92485295s ago: executing program 2 (id=940): bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000000000fe8d0000"]) 4.661886279s ago: executing program 2 (id=942): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000240), 0x1, 0x787, &(0x7f0000001000)="$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") socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x48c0, &(0x7f0000000340)=ANY=[@ANYBLOB="61636c2c6865617274626561743d6e6f636f686572656e63793d66756c6c2c646174613d77726974656261636b2c1def8d606c616c6c6f863d30303030303030303030303030303070303030312c61636c2c010061636c2c6c6f63616c616c6c6f633d30323030303030303030305230303030303030302d00"], 0x1, 0x442d, &(0x7f0000004480)="$eJzs3c9PHGUfAPBnBvoW+rZ9oW8PfZM3cRObaNQQ6EmliZTSUmixptrGeNkusG3RhW1gMR56wFsTTyYejIdGE2+cGg5e65/gxWM9N9GDFxOTRszuzgIz7IaVsGDr53NgmOc3fGeefeYw+8SJyp25pdzcUq6wkCvP3Fo6k/u4XFqeL4Z4nzTt/9D+9U97OnGdHPS190929fzFd2+cCeH72R+frK+vr4eq7tDU0Jbff/v13szWY0OcqVNtt3lre+WDEMLJbeOq6gohvP9dCFEI4VySNpoce0MIx0I978a9z27m9mg0Dx8Xz+afTt1fGz49ufpgrfXfHoXwVel/r92e//nFruGfXtmj7gEAAAAAAAAAAAAAAAAAeMaNX7t6/Z3BofAoCt2r0fb3dceTY6v3Y9f3zAsh9HX+7wUAAAAAAAAAAAAAAAAAAIC/o833/3PRiSbv/48lx5EW9dff6vwY6ZyJt6+OXRgcSvZ/j7blv54k/XKuK/Q32fc9u//7uUz95vu/b+9ntxrja/TbF6J4IHUexwMDIXyTbPx+KjoSl8pLlVdvlZcXZvdsGM+sdPzru/enopNs6N9u/Ecz7Xd+////bruaquc39+4Se66l49/Vsty3n0Ztxf98pt5+xJ/dS8e/u5bWu7XASH0CqMb/8+6d4z+Wab9T8T8eQshF1bHmUjNAdQ1TTW+1XiEtHf9DtbTU1Jn8I1vd/79n4n8h0/5Bzf8r2Q8imkrH/1+1tJ5Uic37vz/e+f6/mGn/IOJfHf+Kz/+2pON/uJ7YnSpS+0+2O/+PZ9rvVPyvx8k4j0epK2A1qqe3+r460tLx79mWv/n8F7e1/ruUqb9fz3+NfhvPf43p/+Wo/vxHc+n497Ys1+79P5Gp1+n5f6S2/mO30vE/UktLr53rX8rZbvwnM+13Kv61VUlPI/6b88kfh+vpX1v/tSUd/3/XE+OtJVZqP2vrv2jn9f/lTPsHsf6rjn8l7myvz4t0/I+2LFeN/w9tfP5fydTrfPxDGLTW37V0/I+1LFe7/3t2jv9Upl6n4/9SJxsHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeAaMJse+EMUDqfM4HhgI4XxyfiociaYLs/npUnnmo6UQxpL0XDgR3S6Vpwul/NxCebaYL5RK5ZkQLiT5J0NPtFQqV/LzhbsXN9rqje4UC4uV6WKhEkIYT9L/H4412pqeq8wX7oYQLm3k/ScuL969U1jIz84tvjk4ODgYJjbG0B8VP6kUFyr13uu5IUxu1O2Ltgyuln15YyxHow/Ly4sLhVIt/cqWOqXyTKG0pc5UkvdF6I8qi8sLM4VKMV8q3270d5BGkuPYxLX3rl0Z2pZ/M6ofR/d3WAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD8RY+G3/gyhNBdP4tDCCONX6Jm5R8+Lp7NP526vzZ8enL1wdqTVuUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgT3bgQAAAAAAAyP+1EaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwS8coDQRRGIDfjIXaeQyrZbezXVFEC1cET6DH8DB6FC/hHVKkSJsiBJJZCJtd2Capvq95MD8z78E8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYJ6n9+7jrW4iUlxtLiP+vv4Xh/lLqT/34/cvzjAjp/P82j081k3593SU35WjZZt36Xr1/Rkjtfc72JPhPu31fa4n55rat6n5+r43kXIVEW3Jb1POVTXvLQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAtO3AgAAAAAADk/9oIVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVdiBYwEAAAAAYf7WUfRtAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPwKAAD//+UFHyA=") r0 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) setitimer(0x3, 0x0, 0x0) ftruncate(r0, 0x2007ffc) sendfile(r0, r0, 0x0, 0x800000009) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x40942, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r2 = open(&(0x7f00000000c0)='./file1\x00', 0x185042, 0x182) copy_file_range(r2, 0x0, r1, 0x0, 0xfffffbffa003e45c, 0x700000000000000) socket$inet6(0xa, 0x802, 0x0) 3.642476715s ago: executing program 2 (id=946): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xd9, 0x72, 0xa4, 0x40, 0x20b7, 0x1540, 0xb75a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000080)={0x44, &(0x7f0000000140)=ANY=[@ANYBLOB="1a0103000000", @ANYRES64=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.532875254s ago: executing program 5 (id=947): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x400, &(0x7f0000000300)={[{@force}, {@barrier}, {@uid}, {@gid={'gid', 0x3d, 0xee01}}, {@nls={'nls', 0x3d, 'macroman'}}, {}, {@force}, {@umask={'umask', 0x3d, 0x399}}, {@type={'type', 0x3d, "3562f949"}}]}, 0x3, 0x6b3, &(0x7f0000000780)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x4240c, 0x0, 0x1, 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000003c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x8000, 0x3e) 3.288467543s ago: executing program 5 (id=951): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) truncate(0x0, 0xc00) modify_ldt$write(0x1, 0x0, 0x0) 3.162532802s ago: executing program 4 (id=952): setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_GET_VERSION_NUM(r0, 0x2284, &(0x7f0000000080)) 2.974084072s ago: executing program 4 (id=955): syz_mount_image$hfs(&(0x7f0000000240), &(0x7f0000000080)='./file1\x00', 0x4000, &(0x7f0000000000)=ANY=[], 0x2, 0x28a, &(0x7f0000000640)="$eJzs3U9u004UwPE3k/T3M7Qq7h+EhBCLQiVWiJYNYgNCuQEbVghoglQRFQmKBGworBEHYM8VOAQrxBqJHSsOkF3QvJkQO4ntEGqmod+PlNSJ59lvYrszL1VlAXBs3Wp9+3D1u3sYkYY0pOnetSKSiC6fljPJs7393f1up122oYZGuIcRH2kya2342ZkU6uL8fr3UvWrKUua95p/1EkWSr7EzwFGgV/8EVuT/cP3p+uSvZ1aPg9gJRGZ60pPnshw7DwBAXGH8t2GcXwrzd2tFNsOwnx//53wA7cVOILLM+K+1Vd+443tKVw3rPS3h3Ho7qBJn2dd/4s+s3ATTVFWVmos98XC327m887jbtvJGbgSZZuv63B6WmE4229fjm97I1aaVZu/7ovZhwfVhuyD/tcPdYzXzyXw2d00q76X9a/7X7Bt3mPRIpSNHyud/pXiL2svUtyro5Yru5Gx+y6W9bEhBRSKDM2pl5GuBtCpPjVodifK926qIWpsYtV0RtT4aNTybiyPrZt6ZO2ZDfshHaWXm/9Z92psyzZXp2mjLcGaU9qepLVMdT8JVd3BuYks7a49Q5vzkt9/KA7kmy09fvHx0v9vtPGHhGC0MToJZwk3s5OdgIXy8N3UhShqDcaesTSJl26n/NxPiGx703wzkLzL/CjfvMq7+67/yr/2sTidr7iktmaf3qzaeqYC2CmqDVX0+WVzB5Rj96mGxuIKbtua6cEnk4jR79NKQ59FVUtMujDduyRe5x/f/AAAAAAAAAAAAAAAAAAAA8+bw/uUgkaJVsfsIAAAAAAAAAAAAAAAAAAAAAMC8G7v/r8j1Gu7/6+3sVd//97b4V/n7/wKowc8AAAD//4QTcyg=") unlinkat(0xffffffffffffffff, &(0x7f00000005c0)='./file1\x00', 0x0) 2.914446852s ago: executing program 5 (id=956): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000580)='./file1\x00', 0x40, &(0x7f00000005c0), 0x1, 0x54e, &(0x7f00000010c0)="$eJzs3U1oHOUbAPBnZrPtv23+pgUFlR6KChVKN0k/tHpKr2Kh0IPgpS6bbQjZZEN2U5uQQ3ovYkFR6aXe9OBR8eBBvHj06kXxLIgGhaYHiUx2N/1Isq61ydbO7wezfT+GPu+bmWey7zBDAsitI9lHGvFMRJxPIobu6huIdueR1n6rK0uV2ytLlSTW1i78mkQSEbdWliqd/ZP2vwciYjkino6Ib4oRx9LNcRsLi1PlWq06164PN6dnhxsLi8cnp8sT1YnqzMmXXzl95tTp0ROjD22u1368/s617167ef3Tzw4vV94vJzEWg+2+u+fxMLV+JsUYu6/91E4E66Ok3wPggRTaeV6MiKdiKArtrAcef2t7I9aAnErkP+RU53tAtv7tbLv5/eOXs60FSBZ3tb21egZa9ybif+trk/2/J/esTLL15sHdHCiPpeWrETEyMLD5/E/a59+DG3kYA2RHfX22daA2H/904/oTW1x/Bjv3Tv+lzvVvddP17078wjbXv/M9xvjzzZ8+2jb+1Yhnt4yfbMRPtoifRsRbPca/8caXZ7brW/s44mhsHb8j6X5/ePjSZK060vrcMsZXRw+/2m3++7eJP9Zl/lnbbI/z/+Lbz59b7hL/xee7H/+t4u+LiHd7jH/o1ievb9eXxR/fZv7d4mdtN3uM/9LYkR963BUAAAAAAAAAAPgH0vVn2ZK0tFFO01Kp9Q7vk7E/rdUbzWOX6vMz461n3g5GMe08aTXUqidZfbT9PG6nfuK++smIOBQR7xX2rddLlXptvN+TBwAAAAAAAAAAAAAAAAAAgEfEgfve//+j0Hr/H8gJf/Ib8kv+Q37dm/9J38YB7D6//yG/5D/kl/yH/JL/kF/yH/JL/kN+yX/IL/kPAAAAAAAAAAAAAAAAAAAAAAAAAAA74vy5c9m2dntlqZLVxy8vzE/VLx8frzamStPzlVKlPjdbmqjXJ2rVUqU+/Xf/X61enx2Jmfkrw81qozncWFi8OF2fn2lenJwuT1QvVou7MisAAAAAAAAAAAAAAAAAAAD4bxlc35K0FBHpejlNS6WI/0fEwSgmlyZr1ZGIeCIivi8U92b10X4PGgAAAAAAAAAAAAAAAAAAAB4zjYXFqXKtVp1T2FyIiOVHYBgKCn05+QEAAAAAAAAAAAAAAAAAgF1156Xffo8EAAAAAAAAAAAAAAAAAAAA8iz9OYmIbDs69MLg3T17I2JPslrIynsi4u0bFz64Um4250az9t822psftttP9GsOQC86edrJYwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOCOxsLiVLlWq87tYKHfcwQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4EH8FAAD//46R2W8=") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpu.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f00000002c0)={0x0, 0x2904c, 0x0, 0x10003, '\x00', [{0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000}, {0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xd}]}) 2.57834807s ago: executing program 4 (id=957): socket(0x11, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r0}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'macsec0\x00', @random="00e9008000e9"}) 2.45846773s ago: executing program 5 (id=959): close(0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x8002, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r1, 0x2) 2.230538329s ago: executing program 1 (id=960): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) ioctl$KVM_SET_CLOCK(r1, 0x4030ae7b, &(0x7f0000000000)={0x2, 0x0, 0x2, 0x1, 0x6}) 2.160157499s ago: executing program 1 (id=961): syz_mount_image$hfs(&(0x7f0000000140), &(0x7f0000000880)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x30008c0, &(0x7f0000001f80)=ANY=[@ANYBLOB="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"], 0x11, 0x2b6, &(0x7f0000000200)="$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") syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000240)=""/164, 0xa4) 2.018551648s ago: executing program 5 (id=962): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x97, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x7, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x4, 0x20}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000580)={0x2c, &(0x7f0000000240)=ANY=[@ANYBLOB='@\fD'], 0x0, 0x0, 0x0, 0x0}, 0x0) 2.018077968s ago: executing program 4 (id=963): syz_mount_image$hfs(&(0x7f0000000100), &(0x7f0000000040)='./file0\x00', 0x1000008, &(0x7f0000001b40)=ANY=[@ANYBLOB="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"], 0x1, 0x2e5, &(0x7f0000000140)="$eJzs3U1PE0Ecx/HfbFsoD8EVMCZeNCiJXoioB+OlxvTq3ZNR25IQG4iAiXoRjUfjC/DuW/BFeNH4BvTkybucHDPTadnCdkvFshS/n4RmOzuz+5/OPsx/Y60A/LfuVL99uP7D/RmpoIKkW1IkqSwVJZ3R2fLTta3VrWajnrWhgm/h/oxaLc2+OrW1RlpT1863CGL3rqjpZBmGw1p7+3veQSB3/uxPEUnj4Tz068tHHNewbEvn847hqCUH2OxoR880k2M4AIBjINz/o3CbmPZFRlEkLYbb/om6/++cnK44N5r7imxmg8T938/urHHje8qv2s33fArn1kftLPEgwZT2vB9T68jqmmCaflmljyWaWFktaqn2SvVIr1UJEtXm/Wu9dei29Yl2ISU3zdB7ayXdnWz1xs8o92qHtLLabIy7hZT45wbb4+GZT+aLuW9ivVe9M/8rWuOGyY9UvGekopKL/2rvLU75Vq6WQtpfqVSiriqn/U7OhT0EfXpZTs9IkttsPyDY7kSQFaff96y6Hyu0erfcp9VcWqu4865Hq/muVoVwJCzV1puZj1KGo91F887cMwv6qY+qJub/kYtvUYkzM+v6aHzNcGTU1vXb2rH0mkVfM953ud09XS50IgjGB+4bpAGflr3VI93UzObzF48LzWZjwy08TFl4Mr1hQknpjZRaZ/gLBWXU0fZuiXVeWnvQLdtDBGb6fRpX+m/n18F36q4fnRJ3+qRVdmdZpyT6B5+8NTkM93FfqH5W1gE5OgvWSj1WDe06hWNk07QHPRRM5BwQjpqbd5lW/udn8mFW51Mk9xJnzNOzk0x1bXG5k8F1TwVn/evkQBncVO8MLrHHaz1yRp9zXbwsXUoUGmXuMQ5xnhCmqq96wPN/AAAAAAAAAAAAAAAAAACAURP+0X/7K5tD+aZBzl0EAAAAAAAAAAAAAAAAAAAAAGDk/dXv/6b9H/H+939jfv8XGCF/AgAA///7WndM") 1.912020468s ago: executing program 1 (id=964): r0 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r0, 0x3) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r2, 0x0, 0x400c0) r3 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000005e00)=[{{0xfffffffffffffffe, 0x0, 0x0}, 0x2}], 0x1, 0x12023, 0x0) sendmmsg(r3, &(0x7f0000007c80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) sendmmsg$inet(r1, &(0x7f0000004800)=[{{&(0x7f0000004580)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}}], 0x1, 0x8010) 1.876996577s ago: executing program 4 (id=965): syz_mount_image$udf(&(0x7f00000004c0), &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x81, 0x4ac, &(0x7f00000011c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f00000001c0)='!', 0x1}], 0x1, 0x400003, 0x7, 0x3) pwrite64(r0, &(0x7f0000000140)='2', 0x1, 0x8000c61) 1.394571316s ago: executing program 4 (id=966): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x10c4, 0x8acf, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, &(0x7f00000000c0)={0x0, 0xf, 0x5, {0x5, 0x30, "0064d8"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 959.977914ms ago: executing program 1 (id=967): syz_mount_image$hfs(&(0x7f0000000240), &(0x7f0000000080)='./file1\x00', 0x4000, &(0x7f0000000000)=ANY=[], 0x2, 0x28a, &(0x7f0000000640)="$eJzs3U9u004UwPE3k/T3M7Qq7h+EhBCLQiVWiJYNYgNCuQEbVghoglQRFQmKBGworBEHYM8VOAQrxBqJHSsOkF3QvJkQO4ntEGqmod+PlNSJ59lvYrszL1VlAXBs3Wp9+3D1u3sYkYY0pOnetSKSiC6fljPJs7393f1up122oYZGuIcRH2kya2342ZkU6uL8fr3UvWrKUua95p/1EkWSr7EzwFGgV/8EVuT/cP3p+uSvZ1aPg9gJRGZ60pPnshw7DwBAXGH8t2GcXwrzd2tFNsOwnx//53wA7cVOILLM+K+1Vd+443tKVw3rPS3h3Ho7qBJn2dd/4s+s3ATTVFWVmos98XC327m887jbtvJGbgSZZuv63B6WmE4229fjm97I1aaVZu/7ovZhwfVhuyD/tcPdYzXzyXw2d00q76X9a/7X7Bt3mPRIpSNHyud/pXiL2svUtyro5Yru5Gx+y6W9bEhBRSKDM2pl5GuBtCpPjVodifK926qIWpsYtV0RtT4aNTybiyPrZt6ZO2ZDfshHaWXm/9Z92psyzZXp2mjLcGaU9qepLVMdT8JVd3BuYks7a49Q5vzkt9/KA7kmy09fvHx0v9vtPGHhGC0MToJZwk3s5OdgIXy8N3UhShqDcaesTSJl26n/NxPiGx703wzkLzL/CjfvMq7+67/yr/2sTidr7iktmaf3qzaeqYC2CmqDVX0+WVzB5Rj96mGxuIKbtua6cEnk4jR79NKQ59FVUtMujDduyRe5x/f/AAAAAAAAAAAAAAAAAAAA8+bw/uUgkaJVsfsIAAAAAAAAAAAAAAAAAAAAAMC8G7v/r8j1Gu7/6+3sVd//97b4V/n7/wKowc8AAAD//4QTcyg=") unlinkat(0xffffffffffffffff, &(0x7f00000005c0)='./file1\x00', 0x0) 717.855243ms ago: executing program 1 (id=968): r0 = socket$kcm(0x10, 0x400000002, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) openat$sndseq(0xffffffffffffff9c, 0x0, 0x2) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) fadvise64(0xffffffffffffffff, 0x40000001, 0x8, 0x2bc166d65ffafd3b) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000003680)=[{&(0x7f0000001600)=""/4098, 0x1002}, {&(0x7f0000004700)=""/4092, 0xffc}, {&(0x7f0000002640)=""/4103, 0x1007}], 0x3}, 0x40000002) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) 542.272782ms ago: executing program 2 (id=969): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) write$UHID_INPUT(0xffffffffffffffff, &(0x7f00000001c0)={0xd, {"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", 0x1000}}, 0xffffff5c) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f00000001c0)=0x2001) r1 = fcntl$dupfd(r0, 0x0, r0) readv(r1, &(0x7f0000000000)=[{&(0x7f0000001140)=""/136, 0x3f}], 0x1) 89.15487ms ago: executing program 1 (id=970): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{0x0, 0x1000, 0x4, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x10}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x2000, 0x5000, 0x3, 0x1, 0x7, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd}, {0x3000, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x5000, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x3c}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2}, {0x0, 0x0, 0xc, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xa, 0xff, 0x0, 0x0, 0x10}, {0x1000}, {}, 0xfdfcffdf, 0x0, 0x2000, 0x4, 0x3, 0x7c00, 0x0, [0x0, 0x0, 0x1]}) 0s ago: executing program 5 (id=971): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000010c0)=ANY=[@ANYBLOB="12010000c73d8a0870272091776c0102ef010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000004c0)={0x24, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) kernel console output (not intermixed with test programs): nvalid descriptor buffer length [ 130.263277][ T5588] usbserial_generic 7-1:1.0: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 130.290380][ T5588] usbserial_generic 7-1:1.0: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 130.311564][ T5588] usbserial_generic 7-1:1.0: device has no bulk endpoints [ 130.319642][ T6062] loop5: detected capacity change from 0 to 720 [ 130.350521][ T5588] usb 7-1: USB disconnect, device number 4 [ 130.356409][ T5780] usb 3-1: USB disconnect, device number 8 [ 130.425099][ T5784] hid-generic 0003:0C70:F003.0006: item fetching failed at offset 1/5 [ 130.460172][ T5784] hid-generic: probe of 0003:0C70:F003.0006 failed with error -22 [ 130.652980][ T4551] usb 5-1: USB disconnect, device number 7 [ 130.805223][ T6069] loop5: detected capacity change from 0 to 256 [ 130.814046][ T6063] loop1: detected capacity change from 0 to 65536 [ 130.905284][ T6072] loop6: detected capacity change from 0 to 2048 [ 130.919455][ T6063] XFS (loop1): Mounting V5 Filesystem [ 130.982409][ T6072] EXT4-fs (loop6): Ignoring removed mblk_io_submit option [ 131.002754][ T6083] loop5: detected capacity change from 0 to 256 [ 131.018077][ T6063] XFS (loop1): Ending clean mount [ 131.071632][ T6083] process 'syz.5.524' launched './file0' with NULL argv: empty string added [ 131.105985][ T6072] EXT4-fs (loop6): mounted filesystem without journal. Opts: nodioread_nolock,usrjquota=,delalloc,dioread_lock,max_batch_time=0x0000000000000005,mblk_io_submit,minixdf,barrier=0x0000000000000000,min_batch_time=0x0000000000000002,bsddf,,errors=continue. Quota mode: none. [ 131.285655][ T6089] EXT4-fs error (device loop6): ext4_validate_block_bitmap:438: comm syz.6.523: bg 0: block 234: padding at end of block bitmap is not set [ 131.321372][ T4168] XFS (loop1): Unmounting Filesystem [ 131.367255][ T6089] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 762 with error 28 [ 131.435450][ T6089] EXT4-fs (loop6): This should not happen!! Data will be lost [ 131.435450][ T6089] [ 131.502118][ T6089] EXT4-fs (loop6): Total free blocks count 0 [ 131.513162][ T6093] loop5: detected capacity change from 0 to 2048 [ 131.539085][ T6089] EXT4-fs (loop6): Free/Dirty block details [ 131.580230][ T6089] EXT4-fs (loop6): free_blocks=0 [ 131.617911][ T6089] EXT4-fs (loop6): dirty_blocks=768 [ 131.650527][ T6089] EXT4-fs (loop6): Block reservation details [ 131.672214][ T6094] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 131.761276][ T6091] loop4: detected capacity change from 0 to 65536 [ 131.767294][ T6089] EXT4-fs (loop6): i_reserved_data_blocks=48 [ 131.770735][ T4551] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 131.828400][ T4271] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 762 with max blocks 2 with error 28 [ 131.882363][ T4271] EXT4-fs (loop6): This should not happen!! Data will be lost [ 131.882363][ T4271] [ 131.996593][ T6091] XFS (loop4): Mounting V5 Filesystem [ 132.042062][ T4551] usb 3-1: Using ep0 maxpacket: 8 [ 132.090349][ T6091] XFS (loop4): Ending clean mount [ 132.180572][ T6110] loop5: detected capacity change from 0 to 64 [ 132.202388][ T4551] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 132.221947][ T4551] usb 3-1: config 0 has no interfaces? [ 132.229593][ T4551] usb 3-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 8.00 [ 132.239286][ T4167] XFS (loop4): Unmounting Filesystem [ 132.249263][ T4551] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.271347][ T4551] usb 3-1: config 0 descriptor?? [ 132.388324][ T6110] Trying to free block not in datazone [ 132.406680][ T6116] loop1: detected capacity change from 0 to 64 [ 132.413492][ T6110] Trying to free block not in datazone [ 132.438781][ T6110] Trying to free block not in datazone [ 132.478703][ T6110] Trying to free block not in datazone [ 132.532352][ T6110] minix_free_inode: bit 6 already cleared [ 132.552638][ T5780] usb 3-1: USB disconnect, device number 9 [ 132.756990][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.763369][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.910265][ T6132] loop5: detected capacity change from 0 to 256 [ 133.000381][ T6132] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 133.108475][ T6132] exFAT-fs (loop5): hint_cluster is invalid (17) [ 133.192003][ T4212] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 133.252845][ T26] audit: type=1326 audit(1736230167.599:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6145 comm="syz.4.531" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc5284b2d29 code=0x0 [ 133.442064][ T4212] usb 2-1: Using ep0 maxpacket: 16 [ 133.519003][ T6162] loop6: detected capacity change from 0 to 256 [ 133.543388][ T6159] loop5: detected capacity change from 0 to 2048 [ 133.564473][ T4212] usb 2-1: config index 0 descriptor too short (expected 16456, got 72) [ 133.586072][ T4212] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 133.612855][ T4212] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 133.626097][ T4212] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 133.651668][ T4212] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 133.669620][ T6159] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 133.680595][ T4212] usb 2-1: config 0 has no interface number 0 [ 133.706192][ T26] audit: type=1800 audit(1736230168.049:22): pid=6159 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.541" name="bus" dev="loop5" ino=18 res=0 errno=0 [ 133.749251][ T4212] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 133.766920][ T4212] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 133.777364][ T4212] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 133.794962][ T4212] usb 2-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 133.818392][ T4212] usb 2-1: config 0 interface 125 has no altsetting 0 [ 133.827848][ T4212] usb 2-1: config 0 interface 125 has no altsetting 2 [ 133.992311][ T4212] usb 2-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 133.999279][ T6185] netlink: 20 bytes leftover after parsing attributes in process `syz.6.546'. [ 134.012594][ T4212] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.033569][ T4212] usb 2-1: Product: syz [ 134.047281][ T4212] usb 2-1: Manufacturer: syz [ 134.054706][ T6185] netlink: 24 bytes leftover after parsing attributes in process `syz.6.546'. [ 134.108653][ T4212] usb 2-1: SerialNumber: syz [ 134.119977][ T6186] dccp_close: ABORT with 136 bytes unread [ 134.147920][ T4212] usb 2-1: config 0 descriptor?? [ 134.205286][ T4212] usb 2-1: selecting invalid altsetting 2 [ 134.367126][ T6199] loop2: detected capacity change from 0 to 4096 [ 134.919453][ T6226] loop5: detected capacity change from 0 to 4096 [ 134.961473][ T6130] loop1: detected capacity change from 0 to 4096 [ 135.120260][ T6245] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 135.144856][ T6243] loop6: detected capacity change from 0 to 1024 [ 135.212511][ T6249] device netdevsim0 entered promiscuous mode [ 135.230684][ T6243] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 135.232573][ T4212] get_1284_register timeout [ 135.255119][ T4212] uss720: probe of 2-1:0.125 failed with error -5 [ 135.269967][ T6249] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 135.271954][ C1] usb 2-1: async_complete: urb error -104 [ 135.360889][ T6243] mmap: syz.6.563 (6243) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 135.362662][ T4212] usb 2-1: USB disconnect, device number 9 [ 135.467712][ T6259] loop5: detected capacity change from 0 to 2048 [ 135.475008][ T6262] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 135.543755][ T6264] loop4: detected capacity change from 0 to 512 [ 135.550502][ T6262] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 131129 with max blocks 5 with error 28 [ 135.571101][ T6262] EXT4-fs (loop6): This should not happen!! Data will be lost [ 135.571101][ T6262] [ 135.587429][ T6264] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 135.618980][ T6262] EXT4-fs (loop6): Total free blocks count 0 [ 135.633281][ T6270] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 135.665582][ T6262] EXT4-fs (loop6): Free/Dirty block details [ 135.668836][ T6264] EXT4-fs (loop4): 1 truncate cleaned up [ 135.671510][ T6262] EXT4-fs (loop6): free_blocks=68451041280 [ 135.671533][ T6262] EXT4-fs (loop6): dirty_blocks=16 [ 135.671549][ T6262] EXT4-fs (loop6): Block reservation details [ 135.701051][ T6262] EXT4-fs (loop6): i_reserved_data_blocks=1 [ 135.740058][ T6264] EXT4-fs (loop4): mounted filesystem without journal. Opts: debug_want_extra_isize=0x000000000000002e,min_batch_time=0x0000000000000fff,inode_readahead_blks=0x0000000000000080,stripe=0x0000000000004000,errors=remount-ro,max_batch_time=0x0000000000000004,. Quota mode: none. [ 135.979305][ T6282] loop2: detected capacity change from 0 to 2048 [ 136.001262][ T6285] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 136.166785][ T6295] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 136.190680][ T6298] loop1: detected capacity change from 0 to 64 [ 136.195056][ T6293] loop6: detected capacity change from 0 to 256 [ 136.365320][ T6293] loop6: detected capacity change from 0 to 512 [ 136.521313][ T6313] netlink: 4 bytes leftover after parsing attributes in process `syz.2.582'. [ 136.963182][ T6346] loop5: detected capacity change from 0 to 256 [ 137.115081][ T26] audit: type=1800 audit(1736230171.459:23): pid=6346 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.591" name="file1" dev="loop5" ino=1048607 res=0 errno=0 [ 137.174258][ T6356] loop2: detected capacity change from 0 to 64 [ 137.246662][ T26] audit: type=1326 audit(1736230171.589:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6359 comm="syz.4.597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5284b2d29 code=0x7ffc0000 [ 137.258522][ T6356] hfs: unable to locate alternate MDB [ 137.287181][ T6354] loop1: detected capacity change from 0 to 4096 [ 137.334599][ T6356] hfs: continuing without an alternate MDB [ 137.341251][ T26] audit: type=1326 audit(1736230171.619:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6359 comm="syz.4.597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc5284b2d29 code=0x7ffc0000 [ 137.454741][ T6354] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 137.474053][ T26] audit: type=1326 audit(1736230171.619:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6359 comm="syz.4.597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5284b2d29 code=0x7ffc0000 [ 137.796126][ T26] audit: type=1326 audit(1736230171.639:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6359 comm="syz.4.597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5284b2d29 code=0x7ffc0000 [ 137.975798][ T6370] loop4: detected capacity change from 0 to 65536 [ 137.998641][ T6354] ntfs3: loop1: Failed to load $Extend. [ 138.005829][ T6324] loop6: detected capacity change from 0 to 32768 [ 138.128248][ T6370] XFS (loop4): Mounting V5 Filesystem [ 138.137177][ T6324] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 138.201966][ T4213] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 138.216617][ T6370] XFS (loop4): Ending clean mount [ 138.269101][ T5179] ocfs2: Unmounting device (7,6) on (node local) [ 138.314151][ T6404] loop1: detected capacity change from 0 to 2048 [ 138.368232][ T4167] XFS (loop4): Unmounting Filesystem [ 138.445000][ T6404] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 138.732042][ T4213] usb 3-1: New USB device found, idVendor=133e, idProduct=0815, bcdDevice=7e.66 [ 138.782089][ T4213] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.818083][ T4213] usb 3-1: Product: syz [ 138.842160][ T4213] usb 3-1: Manufacturer: syz [ 138.855711][ T4213] usb 3-1: SerialNumber: syz [ 138.918305][ T4213] usb 3-1: config 0 descriptor?? [ 138.994820][ T4213] snd-usb-audio: probe of 3-1:0.0 failed with error -22 [ 139.195067][ T4213] usb 3-1: USB disconnect, device number 10 [ 139.241762][ T6432] loop1: detected capacity change from 0 to 128 [ 139.271992][ T4551] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 139.399498][ T6426] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.594204][ T6426] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.662339][ T4551] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 139.684847][ T4551] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 139.803019][ T4551] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 139.832173][ T4551] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 139.849305][ T4551] usb 6-1: SerialNumber: syz [ 139.891351][ T6458] loop2: detected capacity change from 0 to 256 [ 139.913125][ T6426] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.943953][ T6458] exfat: Deprecated parameter 'namecase' [ 139.951275][ T6458] exfat: Deprecated parameter 'utf8' [ 139.970506][ T6458] exfat: Unknown parameter 'sys_tz' [ 140.098899][ T6426] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.106843][ T6466] loop2: detected capacity change from 0 to 512 [ 140.175283][ T4551] usb 6-1: 0:2 : does not exist [ 140.195669][ T4551] usb 6-1: unit 255 not found! [ 140.238775][ T4551] usb 6-1: USB disconnect, device number 4 [ 140.258853][ T6466] EXT4-fs (loop2): mounted filesystem without journal. Opts: noquota,barrier=0x0000000000001000,grpjquota=,noauto_da_alloc,dioread_lock,,errors=continue. Quota mode: writeback. [ 140.279164][ T6466] ext4 filesystem being mounted at /145/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 140.392782][ T4213] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 140.425839][ T6426] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.481443][ T6426] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.521509][ T6426] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.557868][ T4279] udevd[4279]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 140.563398][ T6426] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.632003][ T4213] usb 7-1: Using ep0 maxpacket: 32 [ 140.740465][ T6495] Cannot find del_set index 0 as target [ 140.762312][ T4213] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 140.793954][ T4213] usb 7-1: New USB device found, idVendor=1044, idProduct=7a4d, bcdDevice= 0.00 [ 140.816869][ T4213] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.864204][ T4213] usb 7-1: config 0 descriptor?? [ 140.879945][ T6503] loop1: detected capacity change from 0 to 1024 [ 140.988859][ T6510] loop2: detected capacity change from 0 to 1024 [ 141.042184][ T154] hfsplus: b-tree write err: -5, ino 4 [ 141.066229][ T6510] EXT4-fs (loop2): mounted filesystem without journal. Opts: dioread_lock,noblock_validity,lazytime,noblock_validity,,errors=continue. Quota mode: none. [ 141.329290][ T6526] EXT4-fs (loop2): shut down requested (0) [ 141.344978][ T4213] hid-generic 0003:1044:7A4D.0007: item fetching failed at offset 0/3 [ 141.384598][ T4213] hid-generic: probe of 0003:1044:7A4D.0007 failed with error -22 [ 141.398782][ T6529] netlink: 24 bytes leftover after parsing attributes in process `syz.4.636'. [ 141.550828][ T4213] usb 7-1: USB disconnect, device number 5 [ 141.560277][ T6536] loop4: detected capacity change from 0 to 2048 [ 141.657424][ T6536] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 141.730807][ T26] audit: type=1800 audit(1736230176.069:28): pid=6536 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.638" name="bus" dev="loop4" ino=18 res=0 errno=0 [ 141.771755][ T5784] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 141.831821][ T4353] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 141.863938][ T26] audit: type=1800 audit(1736230176.099:29): pid=6536 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.638" name="bus" dev="loop4" ino=18 res=0 errno=0 [ 141.903675][ T4353] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 141.927936][ T4353] EXT4-fs (loop2): This should not happen!! Data will be lost [ 141.927936][ T4353] [ 141.937925][ T4353] EXT4-fs (loop2): Total free blocks count 0 [ 141.944168][ T4353] EXT4-fs (loop2): Free/Dirty block details [ 141.951626][ T4353] EXT4-fs (loop2): free_blocks=68451041280 [ 141.957640][ T4353] EXT4-fs (loop2): dirty_blocks=5040 [ 141.963388][ T4353] EXT4-fs (loop2): Block reservation details [ 141.969385][ T4353] EXT4-fs (loop2): i_reserved_data_blocks=315 [ 142.021932][ T5784] usb 2-1: Using ep0 maxpacket: 8 [ 142.037905][ T4353] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 2048 with error 28 [ 142.183514][ T5784] usb 2-1: config 0 has no interfaces? [ 142.190635][ T5784] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 142.200733][ T5784] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.236290][ T5784] usb 2-1: config 0 descriptor?? [ 142.261053][ T6553] loop5: detected capacity change from 0 to 512 [ 142.324399][ T6555] netlink: 56 bytes leftover after parsing attributes in process `syz.4.643'. [ 142.372110][ T6553] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 142.437970][ T6561] loop4: detected capacity change from 0 to 128 [ 142.487577][ T6553] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #16: comm syz.5.644: invalid indirect mapped block 4294967295 (level 0) [ 142.507956][ T4551] usb 2-1: USB disconnect, device number 10 [ 142.538190][ T6564] netlink: 4 bytes leftover after parsing attributes in process `syz.2.647'. [ 142.565407][ T6553] EXT4-fs (loop5): Remounting filesystem read-only [ 142.572383][ T6553] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #16: comm syz.5.644: invalid indirect mapped block 4294967295 (level 1) [ 142.593641][ T6564] device bridge_slave_1 left promiscuous mode [ 142.599744][ T6566] loop6: detected capacity change from 0 to 24 [ 142.603069][ T6564] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.616661][ T6553] EXT4-fs (loop5): Remounting filesystem read-only [ 142.626470][ T6553] EXT4-fs (loop5): 1 orphan inode deleted [ 142.632704][ T6553] EXT4-fs (loop5): 1 truncate cleaned up [ 142.638365][ T6553] EXT4-fs (loop5): mounted filesystem without journal. Opts: errors=remount-ro,lazytime,debug_want_extra_isize=0x000000000000006e,block_validity,block_validity,quota,. Quota mode: writeback. [ 142.677713][ T6553] EXT4-fs error (device loop5): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz.5.644: bad entry in directory: rec_len is too small for name_len - offset=12, inode=2, rec_len=12, size=1024 fake=0 [ 142.700783][ T4167] sysv_free_block: flc_count > flc_size [ 142.709652][ T6564] device bridge_slave_0 left promiscuous mode [ 142.720572][ T4167] sysv_free_block: flc_count > flc_size [ 142.722825][ T6564] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.735169][ T4167] sysv_free_block: flc_count > flc_size [ 142.735728][ T6553] EXT4-fs (loop5): Remounting filesystem read-only [ 142.740725][ T4167] sysv_free_block: flc_count > flc_size [ 142.788931][ T4167] sysv_free_block: flc_count > flc_size [ 142.795041][ T4167] sysv_free_block: flc_count > flc_size [ 142.800600][ T4167] sysv_free_block: flc_count > flc_size [ 142.808252][ T4167] sysv_free_block: flc_count > flc_size [ 142.830098][ T4167] sysv_free_block: flc_count > flc_size [ 142.839824][ T4167] sysv_free_block: flc_count > flc_size [ 142.862206][ T4167] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 142.995825][ T6575] loop4: detected capacity change from 0 to 256 [ 143.072896][ T6575] exfat: Deprecated parameter 'namecase' [ 143.131821][ T6575] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x36bd6320, utbl_chksum : 0xe619d30d) [ 143.193490][ T6580] netlink: 68 bytes leftover after parsing attributes in process `syz.2.653'. [ 143.220607][ T6570] loop6: detected capacity change from 0 to 4096 [ 143.329360][ T6589] loop1: detected capacity change from 0 to 1024 [ 143.354342][ T6570] ntfs3: loop6: try to read out of volume at offset 0x3fffffc0c00 [ 143.368415][ T6570] ntfs3: loop6: try to read out of volume at offset 0x3fffffc0c00 [ 143.442370][ T6570] ntfs3: loop6: try to read out of volume at offset 0x3fffffc0c00 [ 143.453630][ T6570] ntfs3: loop6: try to read out of volume at offset 0x3fffffc0c00 [ 143.508989][ T6570] ntfs3: loop6: try to read out of volume at offset 0x3fffffc1c00 [ 143.586275][ T6570] ntfs3: loop6: try to read out of volume at offset 0x3fffffc2c00 [ 143.600322][ T6593] loop5: detected capacity change from 0 to 32768 [ 143.622020][ T6570] ntfs3: loop6: try to read out of volume at offset 0x3fffffc4c00 [ 143.638741][ T6570] ntfs3: loop6: try to read out of volume at offset 0x3fffffc8c00 [ 143.650591][ T6589] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 143.662939][ T4182] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 143.674921][ T4182] CPU: 1 PID: 4182 Comm: kworker/u5:5 Not tainted 5.15.175-syzkaller #0 [ 143.683273][ T4182] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 143.693348][ T4182] Workqueue: hci2 hci_rx_work [ 143.698072][ T4182] Call Trace: [ 143.701628][ T4182] [ 143.704573][ T4182] dump_stack_lvl+0x1e3/0x2d0 [ 143.709369][ T4182] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 143.715022][ T4182] ? panic+0x860/0x860 [ 143.719111][ T4182] ? sysfs_create_dir_ns+0x282/0x390 [ 143.724426][ T4182] sysfs_create_dir_ns+0x2c6/0x390 [ 143.729563][ T4182] ? sysfs_warn_dup+0xa0/0xa0 [ 143.733881][ T6570] ntfs3: loop6: try to read out of volume at offset 0x3fffffd0c00 [ 143.734259][ T4182] ? do_raw_spin_unlock+0x137/0x8b0 [ 143.747281][ T4182] kobject_add_internal+0x6e0/0xe00 [ 143.752508][ T4182] kobject_add+0x14e/0x210 [ 143.756942][ T4182] ? device_add+0x3c2/0xfd0 [ 143.761465][ T4182] ? kobject_init+0x1d0/0x1d0 [ 143.766159][ T4182] ? __raw_spin_lock_init+0x41/0x100 [ 143.768632][ T6570] ntfs3: loop6: try to read out of volume at offset 0x3fffffe0c00 [ 143.771465][ T4182] ? get_device_parent+0x128/0x400 [ 143.771499][ T4182] device_add+0x476/0xfd0 [ 143.788720][ T4182] hci_conn_add_sysfs+0xe4/0x1f0 [ 143.793684][ T4182] le_conn_complete_evt+0xc15/0x1500 [ 143.799004][ T4182] ? cs_le_create_conn+0x5f0/0x5f0 [ 143.801262][ T6589] EXT4-fs warning (device loop1): ext4_resize_fs:1981: can't read last block, resize aborted [ 143.804145][ T4182] hci_le_meta_evt+0x28c/0x3f50 [ 143.804177][ T4182] ? __lock_acquire+0x1ff0/0x1ff0 [ 143.804211][ T4182] ? __mutex_lock_common+0x444/0x25a0 [ 143.829608][ T4182] ? hci_remote_host_features_evt+0x280/0x280 [ 143.835692][ T4182] ? __mutex_unlock_slowpath+0x218/0x750 [ 143.841342][ T4182] ? hci_event_packet+0x3b4/0x1550 [ 143.846472][ T4182] ? mutex_unlock+0x10/0x10 [ 143.850993][ T4182] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 143.856992][ T4182] ? print_irqtrace_events+0x210/0x210 [ 143.862483][ T4182] hci_event_packet+0xc41/0x1550 [ 143.867446][ T4182] ? rcu_lock_release+0x20/0x20 [ 143.872333][ T4182] ? hci_send_to_monitor+0x99/0x4d0 [ 143.877553][ T4182] hci_rx_work+0x237/0xa10 [ 143.881995][ T4182] process_one_work+0x8a1/0x10c0 [ 143.886965][ T4182] ? worker_detach_from_pool+0x260/0x260 [ 143.892618][ T4182] ? _raw_spin_lock_irqsave+0x120/0x120 [ 143.898183][ T4182] ? kthread_data+0x4e/0xc0 [ 143.902731][ T4182] ? wq_worker_running+0x97/0x170 [ 143.907776][ T4182] worker_thread+0xaca/0x1280 [ 143.912507][ T4182] kthread+0x3f6/0x4f0 [ 143.916592][ T4182] ? rcu_lock_release+0x20/0x20 [ 143.921461][ T4182] ? kthread_blkcg+0xd0/0xd0 [ 143.926064][ T4182] ret_from_fork+0x1f/0x30 [ 143.930508][ T4182] [ 143.933586][ C1] vkms_vblank_simulate: vblank timer overrun [ 143.940383][ T6593] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop5 scanned by syz.5.657 (6593) [ 143.963437][ T4182] kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 143.975254][ T6593] BTRFS info (device loop5): using blake2b (blake2b-256-generic) checksum algorithm [ 143.978164][ T4182] Bluetooth: hci2: failed to register connection device [ 143.986203][ T6593] BTRFS info (device loop5): doing ref verification [ 143.999834][ T6593] BTRFS info (device loop5): turning off barriers [ 144.006365][ T6593] BTRFS info (device loop5): enabling auto defrag [ 144.013385][ T6593] BTRFS info (device loop5): turning on sync discard [ 144.020080][ T6593] BTRFS info (device loop5): force clearing of disk cache [ 144.027275][ T6593] BTRFS info (device loop5): using free space tree [ 144.033871][ T6593] BTRFS info (device loop5): has skinny extents [ 144.198376][ T6593] BTRFS info (device loop5): enabling ssd optimizations [ 144.207082][ T6593] BTRFS info (device loop5): clearing free space tree [ 144.214428][ T6593] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 144.224390][ T6593] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 144.250478][ T6593] BTRFS info (device loop5): creating free space tree [ 144.258347][ T6593] BTRFS info (device loop5): setting compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 144.268307][ T6593] BTRFS info (device loop5): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 144.761961][ T5588] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 144.842079][ T23] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 145.021921][ T5588] usb 3-1: Using ep0 maxpacket: 32 [ 145.070019][ T6644] loop5: detected capacity change from 0 to 256 [ 145.082089][ T23] usb 2-1: Using ep0 maxpacket: 16 [ 145.142420][ T5588] usb 3-1: config 0 has an invalid interface number: 35 but max is 0 [ 145.150536][ T5588] usb 3-1: config 0 has no interface number 0 [ 145.166996][ T6644] FAT-fs (loop5): Directory bread(block 64) failed [ 145.182150][ T6644] FAT-fs (loop5): Directory bread(block 65) failed [ 145.199232][ T6644] FAT-fs (loop5): Directory bread(block 66) failed [ 145.206216][ T23] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 145.229689][ T23] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 145.238841][ T6644] FAT-fs (loop5): Directory bread(block 67) failed [ 145.251953][ T23] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 145.271533][ T6644] FAT-fs (loop5): Directory bread(block 68) failed [ 145.278992][ T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.288558][ T6644] FAT-fs (loop5): Directory bread(block 69) failed [ 145.309013][ T23] usb 2-1: config 0 descriptor?? [ 145.314258][ T6644] FAT-fs (loop5): Directory bread(block 70) failed [ 145.341538][ T6644] FAT-fs (loop5): Directory bread(block 71) failed [ 145.351442][ T5588] usb 3-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f [ 145.371587][ T6644] FAT-fs (loop5): Directory bread(block 72) failed [ 145.380487][ T5588] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.399123][ T6644] FAT-fs (loop5): Directory bread(block 73) failed [ 145.405785][ T5588] usb 3-1: Product: syz [ 145.430332][ T5588] usb 3-1: Manufacturer: syz [ 145.435100][ T5588] usb 3-1: SerialNumber: syz [ 145.460863][ T5588] usb 3-1: config 0 descriptor?? [ 145.583882][ T6630] netlink: 24 bytes leftover after parsing attributes in process `syz.1.660'. [ 145.594619][ T23] usb 2-1: USB disconnect, device number 11 [ 145.631685][ T6655] loop4: detected capacity change from 0 to 256 [ 145.732030][ T5588] radio-si470x 3-1:0.35: this is not a si470x device. [ 145.743307][ T4272] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.755947][ T6655] FAT-fs (loop4): Directory bread(block 64) failed [ 145.765973][ T6655] FAT-fs (loop4): Directory bread(block 65) failed [ 145.779407][ T6655] FAT-fs (loop4): Directory bread(block 66) failed [ 145.786503][ T6655] FAT-fs (loop4): Directory bread(block 67) failed [ 145.793818][ T6655] FAT-fs (loop4): Directory bread(block 68) failed [ 145.800922][ T6655] FAT-fs (loop4): Directory bread(block 69) failed [ 145.811622][ T6655] FAT-fs (loop4): Directory bread(block 70) failed [ 145.839044][ T4272] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.862081][ T6655] FAT-fs (loop4): Directory bread(block 71) failed [ 145.868713][ T6655] FAT-fs (loop4): Directory bread(block 72) failed [ 145.885064][ T6655] FAT-fs (loop4): Directory bread(block 73) failed [ 145.937808][ T4272] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.993195][ T5588] radio-raremono 3-1:0.35: Thanko's Raremono connected: (10C4:818A) [ 146.054292][ T4272] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.201983][ T5588] radio-raremono 3-1:0.35: raremono_cmd_main failed (-71) [ 146.232992][ T5588] radio-raremono 3-1:0.35: V4L2 device registered as radio48 [ 146.248885][ T5588] usb 3-1: USB disconnect, device number 11 [ 146.255603][ T5588] radio-raremono 3-1:0.35: Thanko's Raremono disconnected [ 146.432168][ T4213] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 146.621727][ T6666] chnl_net:caif_netlink_parms(): no params data found [ 146.682092][ T4213] usb 5-1: Using ep0 maxpacket: 16 [ 146.769294][ T6689] loop2: detected capacity change from 0 to 164 [ 146.802129][ T4213] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 146.824887][ T4213] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 146.840046][ T4213] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 146.850592][ T4213] usb 5-1: config 1 has no interface number 1 [ 146.857105][ T4213] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 146.880460][ T4213] usb 5-1: config 1 interface 2 altsetting 1 has an invalid endpoint with address 0xFF, skipping [ 146.920229][ T6666] bridge0: port 1(bridge_slave_0) entered blocking state [ 146.943438][ T6666] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.971330][ T6666] device bridge_slave_0 entered promiscuous mode [ 147.062241][ T4213] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 147.071650][ T6666] bridge0: port 2(bridge_slave_1) entered blocking state [ 147.082755][ T6666] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.085918][ T4213] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.100598][ T6666] device bridge_slave_1 entered promiscuous mode [ 147.122190][ T5779] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 147.131937][ T4213] usb 5-1: Product: syz [ 147.154710][ T4213] usb 5-1: Manufacturer: syz [ 147.159903][ T4213] usb 5-1: SerialNumber: syz [ 147.226316][ T6666] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 147.284998][ T6666] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 147.349816][ T6706] loop2: detected capacity change from 0 to 64 [ 147.385740][ T6666] team0: Port device team_slave_0 added [ 147.395903][ T6666] team0: Port device team_slave_1 added [ 147.492356][ T6666] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 147.505723][ T6666] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 147.540997][ T5779] usb 2-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 147.560455][ T5779] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.563558][ T4213] usb 5-1: USB disconnect, device number 8 [ 147.589157][ T6709] loop2: detected capacity change from 0 to 256 [ 147.617188][ T6696] loop5: detected capacity change from 0 to 32768 [ 147.651417][ T5779] usb 2-1: config 0 descriptor?? [ 147.698136][ T6709] FAT-fs (loop2): Directory bread(block 64) failed [ 147.704895][ T6666] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 147.730648][ T5779] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 147.732102][ T6709] FAT-fs (loop2): Directory bread(block 65) failed [ 147.769495][ T6709] FAT-fs (loop2): Directory bread(block 66) failed [ 147.780502][ T6666] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 147.787818][ T6666] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 147.813715][ C1] vkms_vblank_simulate: vblank timer overrun [ 147.824587][ T6709] FAT-fs (loop2): Directory bread(block 67) failed [ 147.831802][ T6709] FAT-fs (loop2): Directory bread(block 68) failed [ 147.838897][ T6709] FAT-fs (loop2): Directory bread(block 69) failed [ 147.847671][ T6709] FAT-fs (loop2): Directory bread(block 70) failed [ 147.848575][ T6696] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 147.863282][ T6666] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 147.900772][ T4279] udevd[4279]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 147.906768][ T6709] FAT-fs (loop2): Directory bread(block 71) failed [ 147.923617][ T6709] FAT-fs (loop2): Directory bread(block 72) failed [ 147.930315][ T6709] FAT-fs (loop2): Directory bread(block 73) failed [ 148.089817][ T4867] ocfs2: Unmounting device (7,5) on (node local) [ 148.197781][ T6666] device hsr_slave_0 entered promiscuous mode [ 148.205658][ T6666] device hsr_slave_1 entered promiscuous mode [ 148.212943][ T6666] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 148.260257][ T6666] Cannot create hsr debugfs directory [ 148.272133][ T4213] Bluetooth: hci4: command 0x0409 tx timeout [ 148.306042][ T4272] device hsr_slave_0 left promiscuous mode [ 148.312965][ T4272] device hsr_slave_1 left promiscuous mode [ 148.334963][ T4272] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 148.342940][ T4272] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 148.351351][ T4272] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 148.382372][ T4272] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 148.396975][ T4272] device bridge_slave_1 left promiscuous mode [ 148.403512][ T4272] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.417377][ T4272] device bridge_slave_0 left promiscuous mode [ 148.424140][ T4272] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.468604][ T4272] device veth1_macvtap left promiscuous mode [ 148.476651][ T4272] device veth0_macvtap left promiscuous mode [ 148.485262][ T4272] device veth1_vlan left promiscuous mode [ 148.491592][ T4272] device veth0_vlan left promiscuous mode [ 148.507442][ T6732] loop5: detected capacity change from 0 to 512 [ 148.602522][ T6732] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 148.619533][ T6732] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802e01c, mo2=0002] [ 148.627889][ T6732] System zones: 1-12 [ 148.633068][ T6732] EXT4-fs (loop5): orphan cleanup on readonly fs [ 148.639893][ T6732] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #11: comm syz.5.683: invalid indirect mapped block 12 (level 1) [ 148.671350][ T6732] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #11: comm syz.5.683: invalid indirect mapped block 2 (level 2) [ 148.702035][ T6732] EXT4-fs (loop5): 1 truncate cleaned up [ 148.708035][ T6732] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,,errors=continue. Quota mode: none. [ 148.783426][ T6724] loop4: detected capacity change from 0 to 32768 [ 148.852725][ T6724] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.682 (6724) [ 148.930635][ T5779] usb 2-1: USB disconnect, device number 12 [ 148.938762][ T6724] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 148.970047][ T4272] team0 (unregistering): Port device team_slave_1 removed [ 148.972088][ T6724] BTRFS info (device loop4): using free space tree [ 148.992047][ T6724] BTRFS info (device loop4): has skinny extents [ 149.005134][ T4272] team0 (unregistering): Port device team_slave_0 removed [ 149.042181][ T4272] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 149.062803][ T4272] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 149.154131][ T6724] BTRFS info (device loop4): enabling ssd optimizations [ 149.248328][ T4272] bond0 (unregistering): Released all slaves [ 149.432760][ T6758] loop5: detected capacity change from 0 to 8 [ 149.508194][ T6758] netlink: 16 bytes leftover after parsing attributes in process `syz.5.687'. [ 149.782133][ T6765] loop1: detected capacity change from 0 to 512 [ 149.825376][ T6765] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 149.932238][ T6765] EXT4-fs (loop1): 1 truncate cleaned up [ 149.938306][ T6765] EXT4-fs (loop1): mounted filesystem without journal. Opts: minixdf,max_dir_size_kb=0x00000000000001ff,stripe=0x0000000000000000,noblock_validity,debug_want_extra_isize=0x0000000000000008,,errors=continue. Quota mode: none. [ 150.162824][ T26] audit: type=1800 audit(1736230184.509:30): pid=6765 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.692" name="file0" dev="loop1" ino=13 res=0 errno=0 [ 150.329583][ T6784] loop2: detected capacity change from 0 to 2048 [ 150.352043][ T5590] Bluetooth: hci4: command 0x041b tx timeout [ 150.475133][ T6791] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 150.781956][ T5778] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 150.848492][ T6809] loop1: detected capacity change from 0 to 2048 [ 150.921676][ T6812] loop4: detected capacity change from 0 to 1024 [ 150.958813][ T6809] loop1: [ICS] [ 151.047570][ T4551] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 151.069041][ T6812] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 151.175041][ T6666] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 151.203107][ T5778] usb 6-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 151.211577][ T6666] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 151.226745][ T5778] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.257701][ T6666] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 151.290167][ T5778] usb 6-1: config 0 descriptor?? [ 151.298847][ T6666] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 151.502220][ T4551] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 151.514634][ T6818] kvm [6817]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc1 data 0x2900000080 [ 151.524302][ T4551] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 151.552151][ T6818] kvm [6817]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc2 data 0x2a00000000 [ 151.571979][ T4551] usb 3-1: New USB device found, idVendor=056a, idProduct=00fa, bcdDevice= 0.00 [ 151.607059][ T4551] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.614699][ T6666] 8021q: adding VLAN 0 to HW filter on device bond0 [ 151.649091][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 151.653305][ T4551] usb 3-1: config 0 descriptor?? [ 151.663969][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 151.705663][ T6666] 8021q: adding VLAN 0 to HW filter on device team0 [ 151.725340][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 151.749826][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 151.768915][ T4353] bridge0: port 1(bridge_slave_0) entered blocking state [ 151.776068][ T4353] bridge0: port 1(bridge_slave_0) entered forwarding state [ 151.810153][ T5778] [drm] Initialized udl 0.0.1 20120220 for 6-1:0.0 on minor 2 [ 151.839997][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 151.851433][ T5778] [drm] Initialized udl on minor 2 [ 151.863528][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 151.885087][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 151.916624][ T4353] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.923773][ T4353] bridge0: port 2(bridge_slave_1) entered forwarding state [ 151.954492][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 151.972213][ T5778] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err 0 [ 151.983320][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 151.997817][ T5778] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 152.013706][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 152.062612][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 152.092498][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 152.123224][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 152.160197][ T6666] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 152.181418][ T5779] usb 6-1: USB disconnect, device number 5 [ 152.202386][ T6666] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 152.205769][ T4551] wacom 0003:056A:00FA.0008: collection stack underflow [ 152.219940][ T5778] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 152.247861][ T6845] loop1: detected capacity change from 0 to 64 [ 152.249940][ T4551] wacom 0003:056A:00FA.0008: item 0 2 0 12 parsing failed [ 152.259856][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 152.275003][ T5778] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffed [ 152.275132][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 152.292300][ T4551] wacom 0003:056A:00FA.0008: parse failed [ 152.298799][ T5778] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 152.308427][ T4551] wacom: probe of 0003:056A:00FA.0008 failed with error -22 [ 152.312775][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 152.348681][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 152.380555][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 152.414753][ T6806] netlink: 304 bytes leftover after parsing attributes in process `syz.2.701'. [ 152.432149][ T23] Bluetooth: hci4: command 0x040f tx timeout [ 152.439837][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 152.710523][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 152.718695][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 152.725316][ T6829] loop4: detected capacity change from 0 to 32768 [ 152.739203][ T6666] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 152.803868][ T6829] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.710 (6829) [ 152.888230][ T6829] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 152.942314][ T6829] BTRFS info (device loop4): using free space tree [ 153.035980][ T6829] BTRFS info (device loop4): has skinny extents [ 153.237649][ T6865] loop1: detected capacity change from 0 to 40427 [ 153.286835][ T6865] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 153.294980][ T6865] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 153.306100][ T6883] loop5: detected capacity change from 0 to 512 [ 153.325126][ T6865] F2FS-fs (loop1): invalid crc value [ 153.379864][ T6865] F2FS-fs (loop1): Found nat_bits in checkpoint [ 153.453233][ T6883] EXT4-fs (loop5): Ignoring removed oldalloc option [ 153.471706][ T6865] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 153.479077][ T6865] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 153.494750][ T6883] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 153.510175][ T26] audit: type=1804 audit(1736230187.849:31): pid=6865 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.715" name="/newroot/118/bus/bus" dev="loop1" ino=10 res=1 errno=0 [ 153.557890][ T26] audit: type=1804 audit(1736230187.879:32): pid=6865 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.715" name="/newroot/118/bus/bus" dev="loop1" ino=10 res=1 errno=0 [ 153.601363][ T6865] attempt to access beyond end of device [ 153.601363][ T6865] loop1: rw=10241, want=45104, limit=40427 [ 153.615262][ T6865] attempt to access beyond end of device [ 153.615262][ T6865] loop1: rw=2049, want=45104, limit=40427 [ 153.619093][ T6829] BTRFS info (device loop4): enabling ssd optimizations [ 153.653957][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 153.694228][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 153.695423][ T6883] EXT4-fs (loop5): 1 truncate cleaned up [ 153.740483][ T6883] EXT4-fs (loop5): mounted filesystem without journal. Opts: quota,oldalloc,nodelalloc,debug_want_extra_isize=0x0000000000000080,block_validity,jqfmt=vfsv1,,errors=continue. Quota mode: writeback. [ 153.744288][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 153.811233][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 153.823270][ T6666] device veth0_vlan entered promiscuous mode [ 153.833551][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 153.851639][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 153.860222][ T6883] loop_set_status: loop5 () has still dirty pages (nrpages=2) [ 153.875755][ T6666] device veth1_vlan entered promiscuous mode [ 153.885237][ T23] usb 3-1: USB disconnect, device number 12 [ 154.040771][ T6911] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 154.065744][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 154.105677][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 154.174961][ T4867] EXT4-fs error (device loop5): mb_free_blocks:1865: group 0, inode 16: block 35:freeing already freed block (bit 34); block bitmap corrupt. [ 154.197258][ T6666] device veth0_macvtap entered promiscuous mode [ 154.219821][ T6666] device veth1_macvtap entered promiscuous mode [ 154.266851][ T6666] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 154.298716][ T6666] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.329470][ T6666] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 154.374987][ T6666] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.432552][ T6666] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 154.483857][ T6666] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.514068][ T5590] Bluetooth: hci4: command 0x0419 tx timeout [ 154.537159][ T6666] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 154.559123][ T6666] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.576717][ T6666] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 154.589901][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 154.631507][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 154.652816][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 154.675807][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 154.690916][ T6666] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 154.708410][ T6666] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.731941][ T6666] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 154.768747][ T6666] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.796174][ T6666] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 154.828973][ T6666] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.880514][ T6666] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 154.921977][ T6666] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.943717][ T6666] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 154.962818][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 154.989509][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 155.008893][ T6935] loop2: detected capacity change from 0 to 1024 [ 155.035376][ T6666] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.094255][ T6666] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.142102][ T6666] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.168914][ T6666] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.402663][ T6935] EXT4-fs (loop2): mounted filesystem without journal. Opts: dioread_lock,noblock_validity,lazytime,noblock_validity,,errors=continue. Quota mode: none. [ 155.546202][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 155.557246][ T6959] EXT4-fs (loop2): shut down requested (0) [ 155.604422][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 155.616935][ T4316] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 155.652576][ T4316] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 155.756409][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 155.776900][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 155.794813][ T4235] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 155.871248][ T4235] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 596 with error 28 [ 155.936105][ T4235] EXT4-fs (loop2): This should not happen!! Data will be lost [ 155.936105][ T4235] [ 155.999112][ T4235] EXT4-fs (loop2): Total free blocks count 0 [ 156.019400][ T4235] EXT4-fs (loop2): Free/Dirty block details [ 156.049632][ T4235] EXT4-fs (loop2): free_blocks=68451041280 [ 156.063244][ T4235] EXT4-fs (loop2): dirty_blocks=608 [ 156.077748][ T4235] EXT4-fs (loop2): Block reservation details [ 156.108701][ T4235] EXT4-fs (loop2): i_reserved_data_blocks=38 [ 156.302026][ T6951] loop1: detected capacity change from 0 to 32768 [ 156.437410][ T6951] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 156.471733][ T6978] netlink: 48 bytes leftover after parsing attributes in process `syz.2.731'. [ 156.561081][ T154] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.591776][ T4168] ocfs2: Unmounting device (7,1) on (node local) [ 156.722576][ T6978] loop2: detected capacity change from 0 to 4096 [ 157.009096][ T154] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.280620][ T154] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.384647][ T6998] loop2: detected capacity change from 0 to 128 [ 157.396454][ T154] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.439206][ T6998] VFS: Found a Xenix FS (block size = 512) on device loop2 [ 157.482074][ T6778] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 157.533826][ T6998] sysv_free_block: trying to free block not in datazone [ 157.553595][ T26] audit: type=1804 audit(1736230191.899:33): pid=6998 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.739" name="/newroot/173/file0" dev="loop2" ino=2 res=1 errno=0 [ 157.574578][ C0] vkms_vblank_simulate: vblank timer overrun [ 157.623495][ T4170] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 157.688803][ T6982] chnl_net:caif_netlink_parms(): no params data found [ 157.756400][ T7004] loop2: detected capacity change from 0 to 128 [ 157.833297][ T7004] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 157.902225][ T7004] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 157.938213][ T6987] loop1: detected capacity change from 0 to 32768 [ 157.954222][ T6982] bridge0: port 1(bridge_slave_0) entered blocking state [ 157.961574][ T6982] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.970047][ T6982] device bridge_slave_0 entered promiscuous mode [ 157.979091][ T6982] bridge0: port 2(bridge_slave_1) entered blocking state [ 157.986638][ T6982] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.995282][ T6982] device bridge_slave_1 entered promiscuous mode [ 158.002023][ T6778] usb 6-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 158.011208][ T6778] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.029715][ T6778] usb 6-1: Product: syz [ 158.039849][ T6778] usb 6-1: Manufacturer: syz [ 158.044747][ T6778] usb 6-1: SerialNumber: syz [ 158.065661][ T6778] usb 6-1: config 0 descriptor?? [ 158.114423][ T6778] i2c-tiny-usb 6-1:0.0: version 6d.cc found at bus 006 address 006 [ 158.167648][ T7009] loop1: detected capacity change from 0 to 128 [ 158.251446][ T6982] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 158.276059][ T6982] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 158.439893][ T6982] team0: Port device team_slave_0 added [ 158.477078][ T6982] team0: Port device team_slave_1 added [ 158.487272][ T7013] loop2: detected capacity change from 0 to 4096 [ 158.542175][ T6778] (null): failure reading functionality [ 158.612059][ T6778] i2c i2c-1: connected i2c-tiny-usb device [ 158.629366][ T7013] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 158.742077][ T7021] netlink: 'syz.1.746': attribute type 21 has an invalid length. [ 158.750625][ T7013] ntfs3: loop2: Failed to load $Extend. [ 158.754137][ T7021] netlink: 128 bytes leftover after parsing attributes in process `syz.1.746'. [ 158.791923][ T4551] usb 6-1: USB disconnect, device number 6 [ 158.810539][ T7021] netlink: 3 bytes leftover after parsing attributes in process `syz.1.746'. [ 158.895410][ T6982] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 158.912762][ T6982] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 158.992638][ T5590] Bluetooth: hci4: command 0x0409 tx timeout [ 159.023855][ T6982] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 159.073209][ T6982] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 159.080193][ T6982] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 159.153722][ T5784] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 159.162321][ T6982] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 159.342380][ T6982] device hsr_slave_0 entered promiscuous mode [ 159.377427][ T6982] device hsr_slave_1 entered promiscuous mode [ 159.395027][ T6982] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 159.424551][ T6982] Cannot create hsr debugfs directory [ 159.464161][ T7046] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 159.612145][ T5784] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 159.636334][ T5784] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.659662][ T7055] loop2: detected capacity change from 0 to 256 [ 159.668566][ T5784] usb 5-1: config 0 descriptor?? [ 159.742813][ T7055] exfat: Unknown parameter 'zero_size_dir' [ 159.765119][ T5784] cp210x 5-1:0.0: cp210x converter detected [ 159.976496][ T7073] binder: 7072:7073 ioctl c0306201 200004c0 returned -22 [ 159.999297][ T7073] binder: 7072:7073 ioctl c0306201 0 returned -14 [ 160.189627][ T7078] loop2: detected capacity change from 0 to 1024 [ 160.221999][ T6778] usb 2-1: new full-speed USB device number 13 using dummy_hcd [ 160.318590][ T7078] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 160.343357][ T154] device hsr_slave_0 left promiscuous mode [ 160.361360][ T154] device hsr_slave_1 left promiscuous mode [ 160.372465][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 160.379915][ T154] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 160.402038][ T7078] loop_set_status: loop2 () has still dirty pages (nrpages=1) [ 160.436640][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 160.472904][ T5784] cp210x 5-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 160.485172][ T5784] cp210x 5-1:0.0: GPIO initialisation failed: -71 [ 160.517998][ T154] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 160.580006][ T5784] usb 5-1: cp210x converter now attached to ttyUSB0 [ 160.582361][ T6778] usb 2-1: config 1 has an invalid interface number: 129 but max is 1 [ 160.593902][ T5784] usb 5-1: USB disconnect, device number 9 [ 160.603909][ T6778] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 160.613205][ T5784] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 160.631098][ T5784] cp210x 5-1:0.0: device disconnected [ 160.638381][ T6778] usb 2-1: config 1 has 3 interfaces, different from the descriptor's value: 2 [ 160.658861][ T6778] usb 2-1: config 1 has no interface number 2 [ 160.668204][ T6778] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 160.696982][ T6778] usb 2-1: config 1 interface 129 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 160.729525][ T6778] usb 2-1: config 1 interface 129 has no altsetting 0 [ 160.740434][ T5576] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 160.740715][ T7095] loop2: detected capacity change from 0 to 512 [ 160.755698][ T5576] Bluetooth: hci2: Injecting HCI hardware error event [ 160.756279][ T4183] Bluetooth: hci2: hardware error 0x00 [ 160.790198][ T154] device bridge_slave_1 left promiscuous mode [ 160.797542][ T154] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.835213][ T154] device bridge_slave_0 left promiscuous mode [ 160.844470][ T154] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.863792][ T154] device veth1_macvtap left promiscuous mode [ 160.869868][ T154] device veth0_macvtap left promiscuous mode [ 160.877188][ T154] device veth1_vlan left promiscuous mode [ 160.886316][ T154] device veth0_vlan left promiscuous mode [ 160.892264][ T6778] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 160.901338][ T6778] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.909692][ T6778] usb 2-1: Product: syz [ 160.914462][ T6778] usb 2-1: Manufacturer: syz [ 160.919138][ T6778] usb 2-1: SerialNumber: syz [ 160.944050][ T7095] EXT4-fs (loop2): mounted filesystem without journal. Opts: sb=0x0000000000000001,nodioread_nolock,acl,,errors=continue. Quota mode: writeback. [ 160.966453][ T6778] usb 2-1: selecting invalid altsetting 1 [ 160.972913][ T7095] ext4 filesystem being mounted at /181/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 161.072187][ T5576] Bluetooth: hci4: command 0x041b tx timeout [ 161.305836][ T7103] loop2: detected capacity change from 0 to 512 [ 161.344780][ T7103] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 161.392243][ T6778] cdc_ncm 2-1:1.0: failed GET_NTB_PARAMETERS [ 161.398454][ T6778] cdc_ncm 2-1:1.0: bind() failure [ 161.419340][ T6778] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 161.428814][ T6778] cdc_ncm 2-1:1.1: bind() failure [ 161.548195][ T154] team0 (unregistering): Port device team_slave_1 removed [ 161.583909][ T7108] netlink: 4 bytes leftover after parsing attributes in process `syz.2.770'. [ 161.598113][ T154] team0 (unregistering): Port device team_slave_0 removed [ 161.611102][ T154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 161.626844][ T154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 161.690457][ T6778] usb 2-1: USB disconnect, device number 13 [ 161.729368][ T154] bond0 (unregistering): Released all slaves [ 161.803469][ T7101] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 161.813064][ T7101] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 161.822262][ T7101] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 161.831085][ T7101] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 162.174526][ T6982] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 162.187310][ T6982] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 162.254351][ T6982] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 162.292074][ T1107] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 162.361235][ T6982] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 162.520244][ T7140] ax25_connect(): syz.1.780 uses autobind, please contact jreuter@yaina.de [ 162.770026][ T6982] 8021q: adding VLAN 0 to HW filter on device bond0 [ 162.775417][ T7158] loop5: detected capacity change from 0 to 256 [ 162.812296][ T1107] usb 3-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 162.825103][ T1107] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.857037][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 162.869575][ T7158] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 162.884617][ T1107] usb 3-1: Product: syz [ 162.893656][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 162.902438][ T1107] usb 3-1: Manufacturer: syz [ 162.924396][ T1107] usb 3-1: SerialNumber: syz [ 162.941361][ T6982] 8021q: adding VLAN 0 to HW filter on device team0 [ 162.952947][ T1107] usb 3-1: config 0 descriptor?? [ 162.988211][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 162.999318][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 163.050033][ T4235] bridge0: port 1(bridge_slave_0) entered blocking state [ 163.057207][ T4235] bridge0: port 1(bridge_slave_0) entered forwarding state [ 163.167070][ T5778] Bluetooth: hci4: command 0x040f tx timeout [ 163.180453][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 163.192689][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 163.220038][ T5576] usb 3-1: USB disconnect, device number 13 [ 163.268796][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 163.300904][ T4235] bridge0: port 2(bridge_slave_1) entered blocking state [ 163.308053][ T4235] bridge0: port 2(bridge_slave_1) entered forwarding state [ 163.334231][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 163.381994][ T1107] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 163.464675][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 163.505334][ T7175] tipc: Failed to remove unknown binding: 66,1,1/0:562067591/562067592 [ 163.528215][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 163.608231][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 163.642059][ T1107] usb 5-1: Using ep0 maxpacket: 16 [ 163.725283][ T6982] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 163.797693][ T7171] loop1: detected capacity change from 0 to 65536 [ 163.807405][ T6982] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 163.824082][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 163.833381][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 163.887179][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 163.902815][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 163.922138][ T1107] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 163.923131][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 163.965788][ T1107] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.991987][ T1107] usb 5-1: Product: syz [ 163.996475][ T1107] usb 5-1: Manufacturer: syz [ 164.006598][ T1107] usb 5-1: SerialNumber: syz [ 164.023743][ T1107] r8152-cfgselector 5-1: config 0 descriptor?? [ 164.038749][ T7171] XFS (loop1): Mounting V5 Filesystem [ 164.049115][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 164.140568][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 164.226765][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 164.239666][ T7171] XFS (loop1): Ending clean mount [ 164.457890][ T4168] XFS (loop1): Unmounting Filesystem [ 164.609297][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 164.617550][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 164.642230][ T6982] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 164.780907][ T1107] r8152-cfgselector 5-1: Unknown version 0x0000 [ 164.800245][ T1107] r8152-cfgselector 5-1: bad CDC descriptors [ 164.854612][ T1107] r8152-cfgselector 5-1: Unknown version 0x0000 [ 164.859774][ T4171] Bluetooth: hci5: sending frame failed (-49) [ 164.917120][ T1107] r8152-cfgselector 5-1: USB disconnect, device number 10 [ 164.943323][ T7199] loop2: detected capacity change from 0 to 32768 [ 165.045648][ T7199] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 scanned by syz.2.796 (7199) [ 165.159447][ T7199] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 165.183221][ T7199] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 165.220945][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 165.232259][ T4551] Bluetooth: hci4: command 0x0419 tx timeout [ 165.242848][ T7199] BTRFS info (device loop2): use zstd compression, level 3 [ 165.254730][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 165.270536][ T7199] BTRFS info (device loop2): using free space tree [ 165.332802][ T7199] BTRFS info (device loop2): has skinny extents [ 165.383652][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 165.413969][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 165.465389][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 165.553406][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 165.630205][ T6982] device veth0_vlan entered promiscuous mode [ 165.652031][ T7199] BTRFS info (device loop2): enabling ssd optimizations [ 165.688250][ T7199] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_LZO (0x8) [ 165.703732][ T6982] device veth1_vlan entered promiscuous mode [ 165.861997][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 165.871653][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 165.905060][ T6982] device veth0_macvtap entered promiscuous mode [ 165.943590][ T6982] device veth1_macvtap entered promiscuous mode [ 165.986850][ T6982] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 166.021903][ T6982] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.031751][ T6982] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 166.113368][ T6982] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.141962][ T6982] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 166.171891][ T6982] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.191910][ T6982] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 166.231556][ T6982] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.269333][ T6982] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 166.308529][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 166.317996][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 166.337445][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 166.360501][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 166.383652][ T6982] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 166.407522][ T6982] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.464212][ T6982] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 166.498478][ T6982] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.540380][ T6982] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 166.567126][ T6982] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.583994][ T6982] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 166.598412][ T6982] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.614065][ T6982] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 166.626871][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 166.640611][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 166.667747][ T6982] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.713147][ T6982] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.747714][ T6982] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.769197][ T6982] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.914021][ T5784] Bluetooth: hci5: command 0x1003 tx timeout [ 166.920171][ T4171] Bluetooth: hci5: sending frame failed (-49) [ 166.981641][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 167.034002][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 167.087077][ T4316] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 167.106418][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 167.132149][ T4316] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 167.148818][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 167.440555][ T7278] loop4: detected capacity change from 0 to 32768 [ 167.517082][ T7295] loop1: detected capacity change from 0 to 512 [ 167.621365][ T7295] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,auto_da_alloc,minixdf,,errors=continue. Quota mode: writeback. [ 167.644417][ T7278] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 167.649815][ T7295] ext4 filesystem being mounted at /145/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 167.681242][ T4167] ocfs2: Unmounting device (7,4) on (node local) [ 167.939363][ T7306] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 167.950784][ T7306] tipc: Started in network mode [ 167.956954][ T7306] tipc: Node identity 7f000001, cluster identity 4711 [ 167.966418][ T7306] tipc: Enabled bearer , priority 10 [ 168.008654][ T7308] netlink: 68 bytes leftover after parsing attributes in process `syz.4.818'. [ 168.060584][ T7310] loop1: detected capacity change from 0 to 2048 [ 168.169591][ T7311] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 168.311937][ T4214] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 168.551950][ T4214] usb 5-1: Using ep0 maxpacket: 32 [ 168.682054][ T4214] usb 5-1: config 0 has an invalid interface number: 35 but max is 0 [ 168.690309][ T4214] usb 5-1: config 0 has no interface number 0 [ 168.862157][ T4214] usb 5-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f [ 168.881010][ T4214] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.906564][ T4214] usb 5-1: Product: syz [ 168.921017][ T4214] usb 5-1: Manufacturer: syz [ 168.930399][ T4214] usb 5-1: SerialNumber: syz [ 168.962023][ T5784] tipc: Node number set to 2130706433 [ 168.967579][ T4214] usb 5-1: config 0 descriptor?? [ 169.002104][ T5784] Bluetooth: hci5: command 0x1001 tx timeout [ 169.008264][ T4184] Bluetooth: hci5: sending frame failed (-49) [ 169.120120][ T4168] NILFS (loop1): DAT doesn't have a block to manage vblocknr = 8796093022222 [ 169.149637][ T4168] NILFS error (device loop1): nilfs_bmap_truncate: broken bmap (inode number=16) [ 169.191712][ T4168] Remounting filesystem read-only [ 169.210919][ T4168] NILFS (loop1): error -5 truncating bmap (ino=16) [ 169.230623][ T4168] NILFS (loop1): disposed unprocessed dirty file(s) when detaching log writer [ 169.252061][ T4214] radio-si470x 5-1:0.35: this is not a si470x device. [ 169.265142][ T4168] NILFS (loop1): discard dirty page: offset=0, ino=2 [ 169.272524][ T4168] NILFS (loop1): discard dirty block: blocknr=18, size=1024 [ 169.279835][ T4168] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 169.289381][ T4168] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 169.298356][ T4168] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 169.309128][ T4168] NILFS (loop1): discard dirty page: offset=0, ino=6 [ 169.316471][ T4168] NILFS (loop1): discard dirty block: blocknr=35, size=1024 [ 169.325961][ T4168] NILFS (loop1): discard dirty block: blocknr=36, size=1024 [ 169.332153][ T4214] radio-raremono 5-1:0.35: this is not Thanko's Raremono. [ 169.333377][ T4168] NILFS (loop1): discard dirty block: blocknr=37, size=1024 [ 169.347802][ T4168] NILFS (loop1): discard dirty block: blocknr=38, size=1024 [ 169.356291][ T4168] NILFS (loop1): discard dirty page: offset=4096, ino=6 [ 169.363312][ T4168] NILFS (loop1): discard dirty block: blocknr=39, size=1024 [ 169.370674][ T4168] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 169.377839][ T4214] usb 5-1: USB disconnect, device number 11 [ 169.381348][ T4168] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 169.394937][ T4168] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 169.404072][ T4168] NILFS (loop1): discard dirty page: offset=0, ino=18 [ 169.410862][ T4168] NILFS (loop1): discard dirty block: blocknr=0, size=1024 [ 169.418153][ T4168] NILFS (loop1): discard dirty block: blocknr=0, size=1024 [ 169.425412][ T4168] NILFS (loop1): discard dirty block: blocknr=0, size=1024 [ 169.435140][ T4168] NILFS (loop1): discard dirty block: blocknr=0, size=1024 [ 169.443022][ T4168] NILFS (loop1): discard dirty page: offset=8192, ino=18 [ 169.450079][ T4168] NILFS (loop1): discard dirty block: blocknr=0, size=1024 [ 169.462821][ T4168] NILFS (loop1): discard dirty block: blocknr=0, size=1024 [ 169.470062][ T4168] NILFS (loop1): discard dirty block: blocknr=0, size=1024 [ 169.484774][ T4168] NILFS (loop1): discard dirty block: blocknr=0, size=1024 [ 169.486991][ T7321] chnl_net:caif_netlink_parms(): no params data found [ 169.494666][ T4168] NILFS (loop1): discard dirty page: offset=12288, ino=18 [ 169.509740][ T4168] NILFS (loop1): discard dirty block: blocknr=0, size=1024 [ 169.519528][ T4168] NILFS (loop1): discard dirty block: blocknr=0, size=1024 [ 169.530345][ T4168] NILFS (loop1): discard dirty block: blocknr=0, size=1024 [ 169.541436][ T4168] NILFS (loop1): discard dirty block: blocknr=0, size=1024 [ 169.556157][ T4168] NILFS (loop1): discard dirty page: offset=16384, ino=18 [ 169.571096][ T4168] NILFS (loop1): discard dirty block: blocknr=0, size=1024 [ 169.606512][ T4168] NILFS (loop1): discard dirty block: blocknr=0, size=1024 [ 169.623810][ T4168] NILFS (loop1): discard dirty block: blocknr=0, size=1024 [ 169.631042][ T4168] NILFS (loop1): discard dirty block: blocknr=0, size=1024 [ 169.639335][ T7329] loop2: detected capacity change from 0 to 64 [ 169.653100][ T4168] NILFS (loop1): discard dirty page: offset=24576, ino=18 [ 169.701109][ T7329] attempt to access beyond end of device [ 169.701109][ T7329] loop2: rw=0, want=1026, limit=64 [ 169.723808][ T7321] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.730966][ T7321] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.731905][ T4168] NILFS (loop1): discard dirty block: blocknr=0, size=1024 [ 169.739473][ T7321] device bridge_slave_0 entered promiscuous mode [ 169.760893][ T7329] Buffer I/O error on dev loop2, logical block 512, async page read [ 169.781479][ T7321] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.784256][ T4168] NILFS (loop1): discard dirty block: blocknr=0, size=1024 [ 169.788738][ T7321] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.817149][ T7321] device bridge_slave_1 entered promiscuous mode [ 169.822973][ T7329] attempt to access beyond end of device [ 169.822973][ T7329] loop2: rw=0, want=113154, limit=64 [ 169.833198][ T7334] IPVS: sync thread started: state = MASTER, mcast_ifn = geneve0, syncid = 0, id = 0 [ 169.844477][ T7335] IPVS: sync thread started: state = MASTER, mcast_ifn = geneve0, syncid = 0, id = 1 [ 169.854642][ T7336] IPVS: sync thread started: state = MASTER, mcast_ifn = geneve0, syncid = 0, id = 2 [ 169.868632][ T4168] NILFS (loop1): discard dirty block: blocknr=0, size=1024 [ 169.895162][ T7337] IPVS: sync thread started: state = MASTER, mcast_ifn = geneve0, syncid = 0, id = 3 [ 169.898708][ T4168] NILFS (loop1): discard dirty block: blocknr=0, size=1024 [ 169.940580][ T7329] Buffer I/O error on dev loop2, logical block 56576, async page read [ 169.998087][ T7321] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 170.033888][ T7321] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 170.108940][ T7321] team0: Port device team_slave_0 added [ 170.183574][ T4168] NILFS (loop1): discard dirty page: offset=0, ino=3 [ 170.190375][ T4168] NILFS (loop1): discard dirty block: blocknr=42, size=1024 [ 170.199809][ T7321] team0: Port device team_slave_1 added [ 170.217644][ T4168] NILFS (loop1): discard dirty block: blocknr=43, size=1024 [ 170.227730][ T4168] NILFS (loop1): discard dirty block: blocknr=44, size=1024 [ 170.259334][ T4168] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 170.301324][ T4168] NILFS (loop1): discard dirty page: offset=65536, ino=3 [ 170.317006][ T4168] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 170.328106][ T7321] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 170.345342][ T7321] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 170.371314][ C1] vkms_vblank_simulate: vblank timer overrun [ 170.381977][ T4168] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 170.391017][ T4168] NILFS (loop1): discard dirty block: blocknr=0, size=1024 [ 170.398451][ T4168] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 170.407552][ T4168] NILFS (loop1): discard dirty page: offset=163840, ino=3 [ 170.416072][ T7321] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 170.426968][ T4168] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 170.438252][ T4168] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 170.447333][ T4168] NILFS (loop1): discard dirty block: blocknr=47, size=1024 [ 170.455122][ T4168] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 170.464581][ T7321] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 170.471534][ T7321] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 170.503565][ T7352] loop2: detected capacity change from 0 to 512 [ 170.521315][ T4168] NILFS (loop1): discard dirty page: offset=196608, ino=3 [ 170.533118][ T4168] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 170.547916][ T4168] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 170.579311][ T7321] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 170.580853][ T4168] NILFS (loop1): discard dirty block: blocknr=49, size=1024 [ 170.605481][ T4168] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 170.615098][ T4168] NILFS (loop1): discard dirty page: offset=229376, ino=3 [ 170.616346][ T7352] EXT4-fs (loop2): mounted filesystem without journal. Opts: noauto_da_alloc,noquota,auto_da_alloc,,errors=continue. Quota mode: writeback. [ 170.622404][ T4168] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 170.622433][ T4168] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 170.622453][ T4168] NILFS (loop1): discard dirty block: blocknr=50, size=1024 [ 170.622493][ T4168] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 170.686745][ T7321] device hsr_slave_0 entered promiscuous mode [ 170.714815][ T7352] ext4 filesystem being mounted at /197/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 170.733597][ T7321] device hsr_slave_1 entered promiscuous mode [ 170.763533][ T7321] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 170.771125][ T7321] Cannot create hsr debugfs directory [ 171.018851][ T7367] loop4: detected capacity change from 0 to 256 [ 171.072282][ T5588] Bluetooth: hci4: command 0x0409 tx timeout [ 171.078467][ T5588] Bluetooth: hci5: command 0x1009 tx timeout [ 171.121757][ T7367] exFAT-fs (loop4): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 171.213872][ T7321] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.415861][ T7321] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.528638][ T7385] loop1: detected capacity change from 0 to 512 [ 171.531504][ T7321] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.620958][ T7391] netlink: 56 bytes leftover after parsing attributes in process `syz.2.845'. [ 171.662647][ T7385] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 171.700812][ T7389] loop4: detected capacity change from 0 to 4096 [ 171.729905][ T7321] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.751179][ T7385] EXT4-fs (loop1): 1 truncate cleaned up [ 171.768369][ T7385] EXT4-fs (loop1): mounted filesystem without journal. Opts: minixdf,max_dir_size_kb=0x00000000000001ff,stripe=0x0000000000000000,noblock_validity,debug_want_extra_isize=0x0000000000000008,,errors=continue. Quota mode: none. [ 171.792665][ T5784] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 171.801373][ T5784] Bluetooth: hci1: Injecting HCI hardware error event [ 171.809928][ T4183] Bluetooth: hci1: hardware error 0x00 [ 171.833882][ T26] audit: type=1800 audit(1736230206.179:34): pid=7385 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.844" name="file0" dev="loop1" ino=13 res=0 errno=0 [ 171.954036][ T7321] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 171.975600][ T7321] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 172.005780][ T7321] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 172.044643][ T7321] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 172.045164][ T7396] loop4: detected capacity change from 0 to 164 [ 172.187784][ T7396] ISOFS: unable to read i-node block [ 172.194929][ T7396] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 172.417756][ T7321] 8021q: adding VLAN 0 to HW filter on device bond0 [ 172.470644][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 172.484259][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 172.493114][ T7406] loop4: detected capacity change from 0 to 24 [ 172.519447][ T7321] 8021q: adding VLAN 0 to HW filter on device team0 [ 172.558862][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 172.574258][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 172.607922][ T4235] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.615163][ T4235] bridge0: port 1(bridge_slave_0) entered forwarding state [ 172.625926][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 172.636015][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 172.646982][ T4235] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.654134][ T4235] bridge0: port 2(bridge_slave_1) entered forwarding state [ 172.717899][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 172.741028][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 172.776936][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 172.827149][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 172.865930][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 172.902268][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 172.921391][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 172.945333][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 172.983869][ T7321] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 173.001886][ T7321] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 173.038446][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 173.050027][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 173.092685][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 173.101375][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 173.125466][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 173.153662][ T5587] Bluetooth: hci4: command 0x041b tx timeout [ 173.359292][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 173.368327][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 173.399888][ T7321] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 173.458941][ T7422] device bond_slave_0 entered promiscuous mode [ 173.465786][ T7422] device bond_slave_1 entered promiscuous mode [ 173.502350][ T7422] device vlan2 entered promiscuous mode [ 173.507928][ T7422] device bond0 entered promiscuous mode [ 173.527478][ T7422] device bond0 left promiscuous mode [ 173.542481][ T7422] device bond_slave_0 left promiscuous mode [ 173.548464][ T7422] device bond_slave_1 left promiscuous mode [ 173.673099][ T154] device hsr_slave_0 left promiscuous mode [ 173.685312][ T154] device hsr_slave_1 left promiscuous mode [ 173.720273][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 173.731966][ T154] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 173.745752][ T7430] dccp_invalid_packet: P.Data Offset(100) too large [ 173.758763][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 173.777117][ T154] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 173.785414][ T154] device bridge_slave_1 left promiscuous mode [ 173.792947][ T154] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.805385][ T154] device bridge_slave_0 left promiscuous mode [ 173.811725][ T154] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.835403][ T154] device veth1_macvtap left promiscuous mode [ 173.841582][ T154] device veth0_macvtap left promiscuous mode [ 173.876195][ T154] device veth1_vlan left promiscuous mode [ 173.908312][ T154] device veth0_vlan left promiscuous mode [ 174.079142][ T7433] loop1: detected capacity change from 0 to 32768 [ 174.166459][ T7433] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 174.236020][ T154] team0 (unregistering): Port device team_slave_1 removed [ 174.239561][ T4168] ocfs2: Unmounting device (7,1) on (node local) [ 174.251547][ T154] team0 (unregistering): Port device team_slave_0 removed [ 174.277884][ T154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 174.299889][ T154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 174.464655][ T154] bond0 (unregistering): Released all slaves [ 174.653665][ T7447] netlink: 4 bytes leftover after parsing attributes in process `syz.2.866'. [ 174.716393][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 174.732384][ T7445] loop1: detected capacity change from 0 to 2048 [ 174.753124][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 174.848516][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 174.891496][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 174.900176][ T7445] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 174.943482][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 174.951365][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 174.968664][ T26] audit: type=1800 audit(1736230209.309:35): pid=7445 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.865" name="bus" dev="loop1" ino=18 res=0 errno=0 [ 175.054978][ T7321] device veth0_vlan entered promiscuous mode [ 175.088216][ T26] audit: type=1800 audit(1736230209.309:36): pid=7445 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.865" name="bus" dev="loop1" ino=18 res=0 errno=0 [ 175.174755][ T7321] device veth1_vlan entered promiscuous mode [ 175.232240][ T5591] Bluetooth: hci4: command 0x040f tx timeout [ 175.500108][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 175.523737][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 175.576958][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 175.640542][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 175.757632][ T7321] device veth0_macvtap entered promiscuous mode [ 175.784199][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 175.845505][ T7321] device veth1_macvtap entered promiscuous mode [ 175.896051][ T7321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 175.951898][ T7321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.963055][ T7484] loop5: detected capacity change from 0 to 4096 [ 175.982955][ T7482] loop1: detected capacity change from 0 to 4096 [ 175.992282][ T7321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 176.039818][ T7321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.056892][ T7480] loop2: detected capacity change from 0 to 4096 [ 176.064796][ T7321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 176.081000][ T7321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.092599][ T7321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 176.110831][ T7321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.125284][ T7321] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 176.139654][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 176.158983][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 176.165789][ T7489] loop4: detected capacity change from 0 to 16 [ 176.183309][ T7321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 176.202221][ T7482] ntfs3: loop1: Different NTFS' sector size (1024) and media sector size (512) [ 176.238634][ T7321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.259975][ T7321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 176.271037][ T7321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.287733][ T7321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 176.298727][ T7321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.314881][ T7321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 176.329082][ T7321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.368966][ T7321] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 176.378174][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 176.402154][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 176.405530][ T7489] erofs: (device loop4): erofs_load_compr_cfgs: try to load compressed fs with unsupported algorithms fffe [ 176.419663][ T7321] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.440694][ T7321] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.461552][ T7321] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.476444][ T7321] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.585484][ T7493] loop2: detected capacity change from 0 to 1024 [ 176.733784][ T4316] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 176.742780][ T7493] hfsplus: request for non-existent node 33423360 in B*Tree [ 176.747414][ T7498] loop5: detected capacity change from 0 to 1024 [ 176.750662][ T7493] hfsplus: request for non-existent node 33423360 in B*Tree [ 176.769564][ T4316] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 176.816550][ T7501] loop1: detected capacity change from 0 to 256 [ 176.827688][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 176.841976][ T7503] hfsplus: request for non-existent node 33423360 in B*Tree [ 176.849334][ T7503] hfsplus: request for non-existent node 33423360 in B*Tree [ 176.864956][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 176.883288][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 176.898848][ T7493] hfsplus: request for non-existent node 33423360 in B*Tree [ 176.932038][ T7501] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 176.956388][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 176.982542][ T7493] hfsplus: request for non-existent node 33423360 in B*Tree [ 176.998060][ T7505] netlink: 24 bytes leftover after parsing attributes in process `syz.4.887'. [ 177.040380][ T9] hfsplus: b-tree write err: -5, ino 4 [ 177.042708][ T7506] hfsplus: request for non-existent node 33423360 in B*Tree [ 177.092083][ T7506] hfsplus: request for non-existent node 33423360 in B*Tree [ 177.164518][ T7503] hfsplus: request for non-existent node 33423360 in B*Tree [ 177.231481][ T7513] loop1: detected capacity change from 0 to 256 [ 177.236997][ T7503] hfsplus: request for non-existent node 33423360 in B*Tree [ 177.355164][ T7507] netlink: 24 bytes leftover after parsing attributes in process `syz.4.887'. [ 177.393890][ T7493] hfsplus: request for non-existent node 33423360 in B*Tree [ 177.404768][ T7507] nbd: device at index 64 is going down [ 177.421572][ T7493] hfsplus: request for non-existent node 33423360 in B*Tree [ 177.590391][ T7517] loop1: detected capacity change from 0 to 1024 [ 177.682440][ T5784] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 177.805669][ T7517] hfsplus: cannot replace xattr [ 177.942079][ T5784] usb 6-1: Using ep0 maxpacket: 16 [ 177.982282][ T7526] loop1: detected capacity change from 0 to 512 [ 178.012887][ T6635] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 178.029035][ T7526] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 178.098106][ T7526] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 178.117772][ T5784] usb 6-1: unable to get BOS descriptor or descriptor too short [ 178.145550][ T7526] EXT4-fs (loop1): 1 truncate cleaned up [ 178.151233][ T7526] EXT4-fs (loop1): mounted filesystem without journal. Opts: noload,resuid=0x000000000000ee01,debug_want_extra_isize=0x000000000000002e,lazytime,quota,quota,,errors=continue. Quota mode: writeback. [ 178.195138][ T7526] EXT4-fs warning (device loop1): ext4_resize_begin:83: There are errors in the filesystem, so online resizing is not allowed [ 178.247465][ T5784] usb 6-1: config 127 has an invalid interface number: 132 but max is 1 [ 178.262051][ T5784] usb 6-1: config 127 has an invalid interface number: 91 but max is 1 [ 178.270335][ T5784] usb 6-1: config 127 has no interface number 0 [ 178.281923][ T6635] usb 3-1: Using ep0 maxpacket: 32 [ 178.288095][ T5784] usb 6-1: config 127 has no interface number 1 [ 178.299350][ T5784] usb 6-1: config 127 interface 132 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 178.338208][ T5784] usb 6-1: config 127 interface 91 altsetting 251 endpoint 0x7 has an invalid bInterval 170, changing to 11 [ 178.351136][ T5784] usb 6-1: config 127 interface 91 has no altsetting 0 [ 178.422439][ T6635] usb 3-1: config 0 has an invalid interface number: 129 but max is 0 [ 178.439254][ T6635] usb 3-1: config 0 has no interface number 0 [ 178.523652][ T5784] usb 6-1: New USB device found, idVendor=12d1, idProduct=52ff, bcdDevice=db.39 [ 178.542309][ T5784] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.569763][ T7536] loop4: detected capacity change from 0 to 64 [ 178.571523][ T5784] usb 6-1: Product: syz [ 178.591009][ T5784] usb 6-1: Manufacturer: syz [ 178.600819][ T5784] usb 6-1: SerialNumber: syz [ 178.627895][ T6635] usb 3-1: New USB device found, idVendor=05a9, idProduct=7670, bcdDevice= c.e1 [ 178.651870][ T6635] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.685465][ T6635] usb 3-1: Product: syz [ 178.689782][ T6635] usb 3-1: Manufacturer: syz [ 178.715124][ T6635] usb 3-1: SerialNumber: syz [ 178.732647][ T6635] usb 3-1: config 0 descriptor?? [ 178.963723][ T5784] cdc_ncm 6-1:127.132: CDC Union missing and no IAD found [ 178.984174][ T5784] cdc_ncm 6-1:127.132: bind() failure [ 179.007521][ T6635] usb 3-1: USB disconnect, device number 14 [ 179.069353][ T5784] usb 6-1: USB disconnect, device number 7 [ 179.240882][ T154] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.261200][ T7555] loop4: detected capacity change from 0 to 64 [ 179.309237][ T154] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.343515][ T7558] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input8 [ 179.420511][ T154] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.479886][ T7539] chnl_net:caif_netlink_parms(): no params data found [ 179.518529][ T154] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.724578][ T7574] netlink: 8 bytes leftover after parsing attributes in process `syz.1.909'. [ 179.724946][ T7568] loop4: detected capacity change from 0 to 4096 [ 179.769923][ T7579] loop5: detected capacity change from 0 to 256 [ 179.818831][ T7568] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 179.957423][ T7539] bridge0: port 1(bridge_slave_0) entered blocking state [ 179.987836][ T7539] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.015219][ T7539] device bridge_slave_0 entered promiscuous mode [ 180.039854][ T7539] bridge0: port 2(bridge_slave_1) entered blocking state [ 180.056062][ T7539] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.093361][ T7539] device bridge_slave_1 entered promiscuous mode [ 180.312050][ T4214] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 181.154789][ T5778] Bluetooth: hci4: command 0x0409 tx timeout [ 181.239102][ T7539] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 181.325803][ T7539] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 181.343958][ T7593] netlink: 32 bytes leftover after parsing attributes in process `syz.5.917'. [ 181.509469][ T7539] team0: Port device team_slave_0 added [ 181.533362][ T7590] loop4: detected capacity change from 0 to 65536 [ 181.546842][ T7539] team0: Port device team_slave_1 added [ 181.568317][ T7569] loop2: detected capacity change from 0 to 32768 [ 181.583421][ T4214] usb 2-1: Using ep0 maxpacket: 32 [ 181.629498][ T7539] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 181.650356][ T7539] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 181.678284][ T7539] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 181.702199][ T4214] usb 2-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 181.711670][ T4214] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.745646][ T7609] loop5: detected capacity change from 0 to 64 [ 181.780734][ T7590] XFS (loop4): Mounting V5 Filesystem [ 181.780923][ T7539] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 181.787017][ T7569] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 181.793822][ T7539] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 181.828534][ T4214] usb 2-1: config 0 descriptor?? [ 181.828857][ T7539] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 181.852403][ T7569] (syz.2.910,7569,0):ocfs2_reflink_ioctl:4454 ERROR: status = -14 [ 181.905712][ T7590] XFS (loop4): Ending clean mount [ 181.931106][ T4170] ocfs2: Unmounting device (7,2) on (node local) [ 181.943152][ T4214] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 181.968334][ T7539] device hsr_slave_0 entered promiscuous mode [ 182.032800][ T7539] device hsr_slave_1 entered promiscuous mode [ 182.052085][ T4167] XFS (loop4): Unmounting Filesystem [ 182.080604][ T7539] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 182.164957][ T7539] Cannot create hsr debugfs directory [ 182.200604][ T7620] loop5: detected capacity change from 0 to 1024 [ 182.602021][ T4214] gspca_nw80x: reg_w err -71 [ 182.606834][ T4214] nw80x: probe of 2-1:0.0 failed with error -71 [ 182.647474][ T4214] usb 2-1: USB disconnect, device number 14 [ 183.232317][ T6635] Bluetooth: hci4: command 0x041b tx timeout [ 183.303948][ T7539] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 183.338346][ T7539] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 183.414556][ T7539] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 183.435417][ T7626] loop5: detected capacity change from 0 to 32768 [ 183.445639][ T7658] loop1: detected capacity change from 0 to 1024 [ 183.497685][ T7658] EXT4-fs (loop1): Ignoring removed nobh option [ 183.504408][ T4552] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 183.518765][ T7662] loop2: detected capacity change from 0 to 64 [ 183.530364][ T7539] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 183.553759][ T7626] read_mapping_page failed! [ 183.554664][ T7658] EXT4-fs (loop1): Ignoring removed bh option [ 183.558316][ T7626] ERROR: (device loop5): txCommit: [ 183.558316][ T7626] [ 183.620125][ T7658] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 183.652743][ T7664] ERROR: (device loop5): diAllocAG: numfree > numinos [ 183.652743][ T7664] [ 183.657118][ T154] device hsr_slave_0 left promiscuous mode [ 183.665086][ T7664] ialloc: diAlloc returned -5! [ 183.719340][ T154] device hsr_slave_1 left promiscuous mode [ 183.738252][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 183.739078][ T7658] EXT4-fs (loop1): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 183.745851][ T154] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 183.777825][ T4867] ERROR: (device loop5): diFree: numfree > numinos [ 183.777825][ T4867] [ 183.792214][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 183.817383][ T154] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 183.827499][ T26] audit: type=1800 audit(1736230218.159:37): pid=7658 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.931" name="bus" dev="loop1" ino=18 res=0 errno=0 [ 183.837614][ T7658] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:3876: comm syz.1.931: Allocating blocks 481-513 which overlap fs metadata [ 183.861705][ T154] device bridge_slave_1 left promiscuous mode [ 183.877941][ T154] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.901421][ T154] device bridge_slave_0 left promiscuous mode [ 183.908850][ T154] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.930963][ T7669] loop2: detected capacity change from 0 to 64 [ 183.941461][ T7658] EXT4-fs (loop1): pa ffff888074a3a000: logic 256, phys. 369, len 9 [ 183.950617][ T7658] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:4893: group 0, free 0, pa_free 2 [ 183.982116][ T4552] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 183.994424][ T154] device veth1_macvtap left promiscuous mode [ 184.000505][ T154] device veth0_macvtap left promiscuous mode [ 184.002871][ T4552] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 184.015679][ T154] device veth1_vlan left promiscuous mode [ 184.023788][ T154] device veth0_vlan left promiscuous mode [ 184.026255][ T4552] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.039530][ T4552] usb 5-1: config 0 descriptor?? [ 184.084498][ T4552] pwc: Askey VC010 type 2 USB webcam detected. [ 184.515936][ T7683] loop5: detected capacity change from 0 to 256 [ 184.531108][ T7685] loop1: detected capacity change from 0 to 2048 [ 184.537978][ T4552] pwc: recv_control_msg error -32 req 02 val 2b00 [ 184.582023][ T4552] pwc: recv_control_msg error -32 req 02 val 2700 [ 184.600458][ T7685] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 184.622097][ T4552] pwc: recv_control_msg error -32 req 02 val 2c00 [ 184.645641][ T7683] FAT-fs (loop5): Directory bread(block 64) failed [ 184.667625][ T4552] pwc: recv_control_msg error -32 req 04 val 1000 [ 184.677982][ T7683] FAT-fs (loop5): Directory bread(block 65) failed [ 184.699647][ T7688] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 184.712836][ T4552] pwc: recv_control_msg error -32 req 04 val 1300 [ 184.722228][ T7683] FAT-fs (loop5): Directory bread(block 66) failed [ 184.743173][ T7683] FAT-fs (loop5): Directory bread(block 67) failed [ 184.771805][ T7683] FAT-fs (loop5): Directory bread(block 68) failed [ 184.783899][ T4552] pwc: recv_control_msg error -32 req 04 val 1400 [ 184.792044][ T7683] FAT-fs (loop5): Directory bread(block 69) failed [ 184.799558][ T7690] loop2: detected capacity change from 0 to 2048 [ 184.804228][ T7683] FAT-fs (loop5): Directory bread(block 70) failed [ 184.822305][ T4552] pwc: recv_control_msg error -32 req 02 val 2000 [ 184.827701][ T7683] FAT-fs (loop5): Directory bread(block 71) failed [ 184.862246][ T4552] pwc: recv_control_msg error -32 req 02 val 2100 [ 184.867082][ T7683] FAT-fs (loop5): Directory bread(block 72) failed [ 184.879738][ T7683] FAT-fs (loop5): Directory bread(block 73) failed [ 184.898208][ T154] team0 (unregistering): Port device team_slave_1 removed [ 184.909299][ T7690] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 184.923438][ T154] team0 (unregistering): Port device team_slave_0 removed [ 184.930624][ T4552] pwc: recv_control_msg error -32 req 04 val 1500 [ 184.938546][ T154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 184.972096][ T4552] pwc: recv_control_msg error -32 req 02 val 2500 [ 184.990230][ T7695] loop1: detected capacity change from 0 to 64 [ 184.999419][ T154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 185.221959][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 185.233475][ T4552] pwc: recv_control_msg error -71 req 02 val 2600 [ 185.251769][ T26] audit: type=1800 audit(1736230219.589:38): pid=7690 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.942" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 185.312305][ T5588] Bluetooth: hci4: command 0x040f tx timeout [ 185.318281][ T4552] pwc: recv_control_msg error -71 req 02 val 2900 [ 185.322263][ T7690] syz.2.942 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 185.325978][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 185.355279][ T7690] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 185.373290][ T7690] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 32 with error 28 [ 185.385593][ T7690] EXT4-fs (loop2): This should not happen!! Data will be lost [ 185.385593][ T7690] [ 185.395335][ T7690] EXT4-fs (loop2): Total free blocks count 0 [ 185.401325][ T7690] EXT4-fs (loop2): Free/Dirty block details [ 185.407273][ T7690] EXT4-fs (loop2): free_blocks=2415919104 [ 185.413004][ T7690] EXT4-fs (loop2): dirty_blocks=32 [ 185.418102][ T7690] EXT4-fs (loop2): Block reservation details [ 185.424244][ T7690] EXT4-fs (loop2): i_reserved_data_blocks=2 [ 185.528725][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!! [ 185.538398][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 185.551866][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 185.560854][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 185.569839][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 185.578828][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 185.587803][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 185.642170][ T4552] pwc: recv_control_msg error -71 req 02 val 2800 [ 185.652551][ T26] audit: type=1800 audit(1736230219.789:39): pid=7690 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.942" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 185.678984][ T4271] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 185.699009][ T4552] pwc: recv_control_msg error -71 req 04 val 1100 [ 185.732340][ T4552] pwc: recv_control_msg error -71 req 04 val 1200 [ 185.752623][ T4552] pwc: Registered as video103. [ 185.757577][ T4271] EXT4-fs (loop2): This should not happen!! Data will be lost [ 185.757577][ T4271] [ 185.768909][ T4552] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input9 [ 185.799382][ T4552] usb 5-1: USB disconnect, device number 12 [ 185.870736][ T154] bond0 (unregistering): Released all slaves [ 185.926753][ T7703] loop5: detected capacity change from 0 to 1024 [ 186.099483][ T4235] hfsplus: b-tree write err: -5, ino 4 [ 186.267524][ T7539] 8021q: adding VLAN 0 to HW filter on device bond0 [ 186.295182][ T7715] sd 0:0:1:0: device reset [ 186.350555][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 186.374380][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 186.390263][ T7721] loop1: detected capacity change from 0 to 256 [ 186.401063][ T7539] 8021q: adding VLAN 0 to HW filter on device team0 [ 186.462511][ T3054] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 186.471302][ T3054] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 186.482902][ T7723] loop4: detected capacity change from 0 to 64 [ 186.518239][ T7721] FAT-fs (loop1): Directory bread(block 64) failed [ 186.520545][ T3054] bridge0: port 1(bridge_slave_0) entered blocking state [ 186.531936][ T3054] bridge0: port 1(bridge_slave_0) entered forwarding state [ 186.531979][ T7721] FAT-fs (loop1): Directory bread(block 65) failed [ 186.552521][ T7726] loop5: detected capacity change from 0 to 1024 [ 186.572060][ T5591] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 186.595472][ T7721] FAT-fs (loop1): Directory bread(block 66) failed [ 186.622735][ T7721] FAT-fs (loop1): Directory bread(block 67) failed [ 186.634439][ T3054] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 186.639684][ T7721] FAT-fs (loop1): Directory bread(block 68) failed [ 186.655172][ T7721] FAT-fs (loop1): Directory bread(block 69) failed [ 186.659963][ T7726] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 186.662975][ T7721] FAT-fs (loop1): Directory bread(block 70) failed [ 186.679453][ T7721] FAT-fs (loop1): Directory bread(block 71) failed [ 186.686668][ T7721] FAT-fs (loop1): Directory bread(block 72) failed [ 186.694018][ T7721] FAT-fs (loop1): Directory bread(block 73) failed [ 186.712400][ T3054] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 186.722807][ T3054] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 186.724868][ T7726] ext4 filesystem being mounted at /159/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 186.731318][ T3054] bridge0: port 2(bridge_slave_1) entered blocking state [ 186.748391][ T3054] bridge0: port 2(bridge_slave_1) entered forwarding state [ 186.762306][ T7721] attempt to access beyond end of device [ 186.762306][ T7721] loop1: rw=2051, want=1256, limit=256 [ 186.819619][ T3054] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 186.847232][ T3054] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 186.934852][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 186.958721][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 186.983739][ T7735] device veth1_macvtap left promiscuous mode [ 186.989849][ T7735] device macsec0 entered promiscuous mode [ 187.052629][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 187.070818][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 187.108489][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 187.116857][ T5591] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 187.142008][ T5591] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.171396][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 187.208644][ T5591] usb 3-1: Product: syz [ 187.213210][ T5591] usb 3-1: Manufacturer: syz [ 187.217840][ T5591] usb 3-1: SerialNumber: syz [ 187.223756][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 187.249719][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 187.286590][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 187.312826][ T5591] usb 3-1: config 0 descriptor?? [ 187.321092][ T7539] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 187.330344][ T7751] loop1: detected capacity change from 0 to 64 [ 187.357049][ T7754] loop4: detected capacity change from 0 to 64 [ 187.393094][ T5587] Bluetooth: hci4: command 0x0419 tx timeout [ 187.662155][ T2303] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 187.671802][ T7770] loop4: detected capacity change from 0 to 128 [ 187.708471][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 187.745080][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 187.770254][ T7770] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 187.778595][ T7539] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 187.809068][ T7770] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 187.851999][ T5591] usb 3-1: atusb_control_msg: req 0x21 val 0x0 idx 0x1e, error -32 [ 187.869706][ T5591] usb 3-1: Firmware version (0.0) predates our first public release. [ 187.915738][ T5591] usb 3-1: Please update to version 0.2 or newer [ 187.922864][ T2303] usb 6-1: Using ep0 maxpacket: 16 [ 187.972189][ T5591] usb 3-1: Firmware: build  [ 187.979274][ T5591] usb 3-1: atusb_probe: initialization failed, error = -32 [ 188.024231][ T5591] atusb: probe of 3-1:0.0 failed with error -32 [ 188.042360][ T2303] usb 6-1: New USB device found, idVendor=056a, idProduct=0097, bcdDevice= 0.00 [ 188.058210][ T2303] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.099887][ T2303] usb 6-1: config 0 descriptor?? [ 188.179263][ T5591] usb 3-1: USB disconnect, device number 15 [ 188.196485][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 188.209743][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 188.251052][ T3054] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 188.267116][ T3054] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 188.296946][ T7539] device veth0_vlan entered promiscuous mode [ 188.303481][ T6635] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 188.318588][ T3054] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 188.333434][ T3054] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 188.346997][ T7539] device veth1_vlan entered promiscuous mode [ 188.384345][ T3054] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 188.398283][ T3054] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 188.417065][ T3054] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 188.450553][ T3054] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 188.471173][ T7539] device veth0_macvtap entered promiscuous mode [ 188.486775][ T7794] loop1: detected capacity change from 0 to 64 [ 188.504916][ T7539] device veth1_macvtap entered promiscuous mode [ 188.572050][ T6635] usb 5-1: Using ep0 maxpacket: 32 [ 188.585422][ T2303] wacom 0003:056A:0097.0009: unknown main item tag 0x0 [ 188.599169][ T7539] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 188.625373][ T2303] wacom 0003:056A:0097.0009: unknown main item tag 0x0 [ 188.639405][ T2303] wacom 0003:056A:0097.0009: unknown main item tag 0x0 [ 188.647090][ T7539] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.657374][ T2303] wacom 0003:056A:0097.0009: unknown main item tag 0x0 [ 188.670355][ T7539] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 188.681498][ T2303] wacom 0003:056A:0097.0009: unknown main item tag 0x0 [ 188.692171][ T6635] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 188.694670][ T7539] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.720711][ T6635] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 188.741534][ T2303] wacom 0003:056A:0097.0009: hidraw0: USB HID v0.07 Device [HID 056a:0097] on usb-dummy_hcd.5-1/input0 [ 188.755895][ T6635] usb 5-1: New USB device found, idVendor=10c4, idProduct=8acf, bcdDevice= 0.00 [ 188.786361][ T6635] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.796906][ T2303] usb 6-1: USB disconnect, device number 8 [ 188.803298][ T7539] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 188.833993][ T7539] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.855840][ T7539] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 188.856752][ T6635] usb 5-1: config 0 descriptor?? [ 188.879591][ T7539] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.918389][ T7539] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 188.942704][ T3054] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 188.960893][ T3054] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 188.999718][ T3054] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 189.026270][ T3054] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 189.049809][ T7539] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 189.083699][ T7539] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.111862][ T7539] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 189.128025][ T7539] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.144504][ T7539] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 189.162110][ T7539] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.180221][ T7539] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 189.191229][ T7539] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.210319][ T7539] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 189.221050][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 189.247082][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 189.284917][ T7539] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.314260][ T7539] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.346607][ T7539] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.375029][ T6635] hid-u2fzero 0003:10C4:8ACF.000A: unknown main item tag 0x0 [ 189.385919][ T7539] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.399946][ T6635] hid-u2fzero 0003:10C4:8ACF.000A: hidraw0: USB HID v0.00 Device [HID 10c4:8acf] on usb-dummy_hcd.4-1/input0 [ 189.436156][ T6635] hid-u2fzero 0003:10C4:8ACF.000A: U2F Zero LED initialised [ 189.446995][ T6635] general protection fault, probably for non-canonical address 0xdffffc0000000015: 0000 [#1] PREEMPT SMP KASAN [ 189.458740][ T6635] KASAN: null-ptr-deref in range [0x00000000000000a8-0x00000000000000af] [ 189.467180][ T6635] CPU: 0 PID: 6635 Comm: kworker/0:19 Not tainted 5.15.175-syzkaller #0 [ 189.475521][ T6635] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 189.485596][ T6635] Workqueue: usb_hub_wq hub_event [ 189.490644][ T6635] RIP: 0010:u2fzero_rng_read+0x21a/0x700 [ 189.496296][ T6635] Code: df 41 80 7c 05 00 00 74 08 4c 89 f7 e8 7f 84 ef f9 bb a8 00 00 00 49 03 1e 48 89 d8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <80> 3c 08 00 74 08 48 89 df e8 d8 84 ef f9 48 8d 54 24 60 48 89 13 [ 189.515946][ T6635] RSP: 0018:ffffc9000319e760 EFLAGS: 00010202 [ 189.522040][ T6635] RAX: 0000000000000015 RBX: 00000000000000a8 RCX: dffffc0000000000 [ 189.530027][ T6635] RDX: 000000000000003b RSI: 0000000000000000 RDI: ffff888079954169 [ 189.538013][ T6635] RBP: ffffc9000319e8f0 R08: dffffc0000000000 R09: ffff88807995412e [ 189.546001][ T6635] R10: ffffffffffffffff R11: dffffc0000000001 R12: ffff88807a9a8388 [ 189.553993][ T6635] R13: 1ffff1100f535006 R14: ffff88807a9a8030 R15: 1ffff1100f535005 [ 189.561983][ T6635] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 189.570952][ T6635] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 189.577556][ T6635] CR2: 00007f1cf2816fe0 CR3: 00000000644da000 CR4: 00000000003526f0 [ 189.585556][ T6635] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 189.593542][ T6635] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 189.601579][ T6635] Call Trace: [ 189.604872][ T6635] [ 189.607826][ T6635] ? __die_body+0x5e/0xa0 [ 189.612179][ T6635] ? die_addr+0x95/0xc0 [ 189.616358][ T6635] ? exc_general_protection+0x327/0x4f0 [ 189.621945][ T6635] ? asm_exc_general_protection+0x22/0x30 [ 189.627768][ T6635] ? u2fzero_rng_read+0x21a/0x700 [ 189.632830][ T6635] ? u2fzero_brightness_set+0x280/0x280 [ 189.638405][ T6635] ? _raw_spin_unlock+0x40/0x40 [ 189.643281][ T6635] ? u2fzero_brightness_set+0x280/0x280 [ 189.648946][ T6635] add_early_randomness+0x78/0x140 [ 189.654080][ T6635] hwrng_register+0x430/0x4c0 [ 189.658789][ T6635] devm_hwrng_register+0x43/0xb0 [ 189.663763][ T6635] u2fzero_probe+0x266/0x2e0 [ 189.668371][ T6635] ? hid_map_usage_clear+0x180/0x180 [ 189.673691][ T6635] hid_device_probe+0x2a6/0x3a0 [ 189.678578][ T6635] ? hid_uevent+0x310/0x310 [ 189.683102][ T6635] really_probe+0x24e/0xb60 [ 189.687636][ T6635] __driver_probe_device+0x1a2/0x3d0 [ 189.692940][ T6635] driver_probe_device+0x50/0x420 [ 189.697989][ T6635] __device_attach_driver+0x2b9/0x500 [ 189.703388][ T6635] ? deferred_probe_work_func+0x230/0x230 [ 189.709135][ T6635] bus_for_each_drv+0x183/0x200 [ 189.714029][ T6635] ? subsys_find_device_by_id+0x310/0x310 [ 189.719790][ T6635] __device_attach+0x359/0x570 [ 189.724588][ T6635] ? device_attach+0x20/0x20 [ 189.729207][ T6635] ? kobject_uevent_env+0x36a/0x8d0 [ 189.734433][ T6635] bus_probe_device+0xba/0x1e0 [ 189.739231][ T6635] ? device_add+0xab9/0xfd0 [ 189.743755][ T6635] device_add+0xb48/0xfd0 [ 189.748110][ T6635] hid_add_device+0x3a5/0x510 [ 189.752816][ T6635] usbhid_probe+0xb32/0xec0 [ 189.757359][ T6635] usb_probe_interface+0x5c0/0xaf0 [ 189.762501][ T6635] ? usb_register_driver+0x3d0/0x3d0 [ 189.767822][ T6635] really_probe+0x24e/0xb60 [ 189.772351][ T6635] __driver_probe_device+0x1a2/0x3d0 [ 189.777634][ T6635] driver_probe_device+0x50/0x420 [ 189.782653][ T6635] __device_attach_driver+0x2b9/0x500 [ 189.788018][ T6635] ? deferred_probe_work_func+0x230/0x230 [ 189.793737][ T6635] bus_for_each_drv+0x183/0x200 [ 189.798601][ T6635] ? subsys_find_device_by_id+0x310/0x310 [ 189.804322][ T6635] ? lockdep_hardirqs_on+0x94/0x130 [ 189.809521][ T6635] __device_attach+0x359/0x570 [ 189.814299][ T6635] ? kobject_uevent_env+0x36a/0x8d0 [ 189.819520][ T6635] ? device_attach+0x20/0x20 [ 189.824102][ T6635] ? kobject_uevent_env+0x36a/0x8d0 [ 189.829294][ T6635] bus_probe_device+0xba/0x1e0 [ 189.834049][ T6635] ? device_add+0xab9/0xfd0 [ 189.838550][ T6635] device_add+0xb48/0xfd0 [ 189.842876][ T6635] usb_set_configuration+0x19dd/0x2020 [ 189.848334][ T6635] usb_generic_driver_probe+0x84/0x140 [ 189.853790][ T6635] usb_probe_device+0x130/0x260 [ 189.858635][ T6635] ? usb_register_device_driver+0x240/0x240 [ 189.864523][ T6635] really_probe+0x24e/0xb60 [ 189.869023][ T6635] __driver_probe_device+0x1a2/0x3d0 [ 189.874305][ T6635] driver_probe_device+0x50/0x420 [ 189.879325][ T6635] __device_attach_driver+0x2b9/0x500 [ 189.884691][ T6635] ? deferred_probe_work_func+0x230/0x230 [ 189.890402][ T6635] bus_for_each_drv+0x183/0x200 [ 189.895245][ T6635] ? subsys_find_device_by_id+0x310/0x310 [ 189.900959][ T6635] ? lockdep_hardirqs_on+0x94/0x130 [ 189.906156][ T6635] __device_attach+0x359/0x570 [ 189.910920][ T6635] ? kobject_uevent_env+0x36a/0x8d0 [ 189.916116][ T6635] ? device_attach+0x20/0x20 [ 189.920696][ T6635] ? kobject_uevent_env+0x36a/0x8d0 [ 189.925884][ T6635] bus_probe_device+0xba/0x1e0 [ 189.930639][ T6635] ? device_add+0xab9/0xfd0 [ 189.935137][ T6635] device_add+0xb48/0xfd0 [ 189.939505][ T6635] usb_new_device+0xc17/0x18e0 [ 189.944271][ T6635] ? usb_disconnect+0x8c0/0x8c0 [ 189.949116][ T6635] ? do_raw_spin_unlock+0x137/0x8b0 [ 189.954309][ T6635] ? _raw_spin_unlock_irq+0x1f/0x40 [ 189.959502][ T6635] ? lockdep_hardirqs_on+0x94/0x130 [ 189.964728][ T6635] hub_event+0x2cdf/0x54c0 [ 189.969163][ T6635] ? led_work+0x700/0x700 [ 189.973522][ T6635] ? read_lock_is_recursive+0x10/0x10 [ 189.978893][ T6635] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 189.984875][ T6635] ? down+0x10/0xc0 [ 189.988703][ T6635] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 189.994638][ T6635] ? do_raw_spin_unlock+0x137/0x8b0 [ 189.999856][ T6635] process_one_work+0x8a1/0x10c0 [ 190.004796][ T6635] ? worker_detach_from_pool+0x260/0x260 [ 190.010427][ T6635] ? _raw_spin_lock_irqsave+0x120/0x120 [ 190.015973][ T6635] ? kthread_data+0x4e/0xc0 [ 190.020472][ T6635] ? wq_worker_running+0x97/0x170 [ 190.025499][ T6635] worker_thread+0xaca/0x1280 [ 190.030217][ T6635] kthread+0x3f6/0x4f0 [ 190.034298][ T6635] ? rcu_lock_release+0x20/0x20 [ 190.039164][ T6635] ? kthread_blkcg+0xd0/0xd0 [ 190.043747][ T6635] ret_from_fork+0x1f/0x30 [ 190.048158][ T6635] [ 190.051171][ T6635] Modules linked in: [ 190.058660][ T6635] ---[ end trace 004fe2038ec32d15 ]--- [ 190.064951][ T6635] RIP: 0010:u2fzero_rng_read+0x21a/0x700 [ 190.071495][ T6635] Code: df 41 80 7c 05 00 00 74 08 4c 89 f7 e8 7f 84 ef f9 bb a8 00 00 00 49 03 1e 48 89 d8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <80> 3c 08 00 74 08 48 89 df e8 d8 84 ef f9 48 8d 54 24 60 48 89 13 [ 190.091548][ T6635] RSP: 0018:ffffc9000319e760 EFLAGS: 00010202 [ 190.097704][ T6635] RAX: 0000000000000015 RBX: 00000000000000a8 RCX: dffffc0000000000 [ 190.106095][ T6635] RDX: 000000000000003b RSI: 0000000000000000 RDI: ffff888079954169 [ 190.114331][ T6635] RBP: ffffc9000319e8f0 R08: dffffc0000000000 R09: ffff88807995412e [ 190.126839][ T6635] R10: ffffffffffffffff R11: dffffc0000000001 R12: ffff88807a9a8388 [ 190.135166][ T6635] R13: 1ffff1100f535006 R14: ffff88807a9a8030 R15: 1ffff1100f535005 [ 190.146333][ T6635] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 190.147808][ T7539] ieee80211 phy24: Selected rate control algorithm 'minstrel_ht' [ 190.160856][ T6635] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 190.170072][ T6635] CR2: 00007f1cf2816fe0 CR3: 00000000185fb000 CR4: 00000000003526f0 [ 190.181264][ T6635] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 190.188266][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 190.191666][ T6635] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 190.203230][ T7539] ieee80211 phy25: Selected rate control algorithm 'minstrel_ht' [ 190.208044][ T6635] Kernel panic - not syncing: Fatal exception [ 190.213071][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 190.226544][ T6635] Kernel Offset: disabled [ 190.230863][ T6635] Rebooting in 86400 seconds..