last executing test programs: 52.263605408s ago: executing program 1: connect$inet6(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="d8000000180081064e81f782db4cb9040a1d0800fd007c05e8fe55a10a000600014002020c600e41b0000900ac00060311000000a40005", 0x37}], 0x1}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000003000000180001801400020073797a5f74756e000000000000000000050003000200000005"], 0x3c}}, 0x0) 21.906730959s ago: executing program 0: r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x0, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) poll(0x0, 0x0, 0x64) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x77359400}, {0x0, 0x3938700}}, 0x0) rt_sigreturn() mlockall(0x1) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) pipe(&(0x7f0000000040)={0xffffffffffffffff}) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r1, 0x541b, 0x0) 21.471497697s ago: executing program 0: pipe2(0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0xf, 0x0) preadv2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = msgget$private(0x0, 0x0) shmat(r0, &(0x7f0000ea3000/0x3000)=nil, 0x0) 21.020305801s ago: executing program 0: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000006, &(0x7f0000000680)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x1000}}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@jqfmt_vfsv1}, {@block_validity}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7b1}}, {@orlov}, {@bsdgroups}, {@max_batch_time={'max_batch_time', 0x3d, 0x400}}, {@user_xattr}, {@quota}]}, 0x1, 0x54f, &(0x7f0000000b00)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbZdnamc8HbnvOvTc995t7v6fn5iQkgKE1kf0oRLwcEd8kEQfbto1GvnFibb/V+1dnsyWJRuPTv5JI8nWt/ZP89/688lJE/PZVxPHCxnZryysLpXI5Xczrk/XKpcna8sqJC5XSfDqfXpyemTn19sz0e+++M7BY3zj7z/ef3P7w1NdHV7/75e6hm0mcjgP5tvY4nsC19spETOTPyVicfmTHqQE0tpMk230A9GUkz/OxyPqAgzGSZz3w//dlRDSAIZXIfxhSrXFA695+QPfBz417H6zdAG2Mf3TttZHY07w32reaPHRnlN3vjg+g/ayNX/+8dTNbYnCvQwBs6dr1iDg5Orqx/0vy/q9/J3vY59E29H/w7NzOxj9vdhr/FNbHP9Fh/LO/Q+72Y+v8L9wdQDNdZeO/9zuOf9cnrcZH8toLzTHfWHL+QjnN+rYXI+JYjO3O6pvN55xavdPotq19/JctWfutsWB+HHdHdz/8mLlSvfQkMbe7dz3ilY7j32T9/Ccdzn/2fJztsY0j6a3Xum3bOv6nq/FTxOsdz/+DGa1k8/nJyeb1MNm6Kjb6+8aR37u1v93xZ+d/3+bxjyft87W1x2/jxz3/pt229Xv970o+a5Z35euulOr1xamIXcnHG9dPP3hsq97aP4v/2NHN+79O1//eiPi8x/hvHP751f7jf7qy+Oce6/w/fuHOR1/80K393s7/W83SsXxNL/1frwf4JM8dAAAAAAAA7DSFiDgQSaG4Xi4UisW193ccjn2FcrVWP36+unRxLpqflR2PsUJrpvtg2/shpvL3w7bq04/UZyLiUER8O7K3WS/OVstz2x08AAAAAAAAAAAAAAAAAAAA7BD7u3z+P/PHyHYfHfDU+cpvGF5b5v8gvukJ2JH8/4fhJf9heMl/GF7yH4aX/IfhJf9heMl/GF7yHwAAAAAAAAAAAAAAAAAAAAAAAAAAAAbq7Jkz2dJYvX91NqvPXV5eWqhePjGX1haKlaXZ4mx18VJxvlqdL6fF2Wplq79XrlYvTU3H0pXJelqrT9aWV85VqksX6+cuVErz6bl07JlEBQAAAAAAAAAAAAAAAAAAAM+X2vLKQqlcThcVFPoqjO6Mw1AYcGG7eyYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeOC/AAAA///ktDiZ") r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mounts\x00') r1 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) open(0x0, 0x0, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, "ee289f413bb90152f7d6d1ce5ca93c0f7c41499dc28ac63a01000000000000004faa2ad9c084a003ea00", "03bdbcef549ba19704007ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c20c62df7a8d5da5c00000000ff030000fff2ff008900"}) sendfile(r1, r0, 0x0, 0x8000000d) 19.430131946s ago: executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}, @call={0x85, 0x0, 0x0, 0x2a}]}, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) 18.382166478s ago: executing program 1: connect$inet6(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="d8000000180081064e81f782db4cb9040a1d0800fd007c05e8fe55a10a000600014002020c600e41b0000900ac00060311000000a40005", 0x37}], 0x1}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000003000000180001801400020073797a5f74756e000000000000000000050003000200000005"], 0x3c}}, 0x0) 18.209281069s ago: executing program 0: symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000240)='./file0\x00') symlink(0x0, 0x0) rename(&(0x7f0000000140)='./file0\x00', &(0x7f0000000700)='./file0/file0/..\x00') 17.63333253s ago: executing program 1: socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x40000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) open(0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) setreuid(0x0, 0xee01) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0x5ba8, 0xfffffffffffffffd) 16.036261633s ago: executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) syz_mount_image$f2fs(&(0x7f00000004c0), &(0x7f0000000040)='./bus\x00', 0x2008412, &(0x7f0000001f80)=ANY=[@ANYBLOB="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", @ANYRESDEC], 0x1, 0x553b, &(0x7f000000ac00)="$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") ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, 0x0) sched_setscheduler(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x298) memfd_create(0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x12, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x6}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xa}, 0x90) lsetxattr$security_ima(&(0x7f0000000400)='./bus\x00', &(0x7f0000000040), &(0x7f0000000100)=ANY=[@ANYBLOB="0440"], 0x2, 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) write$binfmt_elf64(r1, &(0x7f00000004c0)=ANY=[], 0xfe3c) open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 9.487330269s ago: executing program 4: syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./file2\x00', 0x0, &(0x7f0000000240)=ANY=[], 0xfd, 0x11f3, &(0x7f0000001b80)="$eJzs3E+LW1UYB+C3cWrHqfNHrdV2oQfduLo0s3AlSJApyASU2gitINw6NxpyTUJuGIiI1ZVbP4e4dCeIX2A2fgZ3s3HZhXiFpLVNTdUuOpH6PJv7kvf8cu8hEDjhnBy/8c2n/W6VdfNJNE6disYoIt1KkaIRd7y0P79eu77farf3rqR0uXW1+XpKaevlHz/4/LtXfpqcff/7rR/OxNHOh8e/7v5ydP7owvHvVz/pValXpcFwkvJ0Yzic5DfKIh30qn6W0rtlkVdF6g2qYrzQ75bD0Wia8sHB5sZoXFRVygfT1C+maTJMk/E05R/nvUHKsixtbgQPdPqfh3S+vVXXdURdn44no67r+qnYiLPxdGzGVnwZEc/Es/FcnIvn43y8EC/Ghdmok3h8AAAAAAAAAAAAAAAAAAAA+P/4u/P/27Hj/D8AAAAAAAAAAAAAAAAAAACcgPeuXd9vtdt7V1Jajyi/PuwcdubXeb/VjV6UUcSl2I7fYnb6f25eX367vXcpzezEV+XN2/mbh50nFvPN2d8J3M6vzXp38s15Pi3mz8TGvfnd2I5zy++/uzS/Hq+9ek8+i+34+aMYRhkHs3vfzX/RTOmtd9r35S/OxgEAAMDjIEt/Wrp+z7IH9ef5h/h94L719VpcXFvt3Imopp/187IsxovF+l9eUfz7ovGI3rkR/5EJKh7/YtXfTJyEux/6qp8EAAAAAAAAAACAh/GIdxGuxZKdZW+uZqoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB/sAPHAgAAAADC/K3T6NgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgqAAD//99CzUo=") bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x40, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1451c2, 0x0) ftruncate(r1, 0x2007ffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x800000008) syz_io_uring_setup(0xa94, &(0x7f00000005c0), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(0xffffffffffffffff, 0x48e9, 0x0, 0x0, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003f00), 0x0, 0x0) getpid() ftruncate(0xffffffffffffffff, 0x100c17a) 9.116834701s ago: executing program 2: getsockopt(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff}) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xfdef) write(r0, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0xe) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r1, &(0x7f0000000040)={0x2a, 0x0, 0x4000}, 0xc) write$binfmt_script(r1, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0xb, &(0x7f0000000000), 0x18) 8.082287201s ago: executing program 2: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000366000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r0, 0x0) accept4(r0, 0x0, 0x0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) rt_sigreturn() prlimit64(0x0, 0x7, &(0x7f0000002040), 0x0) connect$unix(r1, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ioctl$sock_SIOCDELDLCI(0xffffffffffffffff, 0x8981, 0x0) 7.587220354s ago: executing program 2: r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r1 = signalfd(0xffffffffffffffff, &(0x7f0000000080), 0x8) readv(r1, 0x0, 0x0) close(r1) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/class/dmi', 0x0, 0x0) rt_sigreturn() timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) mlockall(0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) tee(r2, r3, 0x100000af5, 0x0) 6.841488614s ago: executing program 3: syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x804810, &(0x7f0000000a40), 0x6, 0x756, &(0x7f00000002c0)="$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") chdir(&(0x7f0000000240)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) creat(&(0x7f0000000140)='./file0\x00', 0x0) 6.341850119s ago: executing program 4: r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) timer_settime(0x0, 0x1, &(0x7f0000000080)={{0x77359400}, {r1, r2+60000000}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) fcntl$lock(r3, 0x26, &(0x7f0000000000)) fcntl$lock(r3, 0x7, &(0x7f00000006c0)={0x1}) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r5 = dup(r4) dup3(r5, r3, 0x0) rt_sigreturn() futex(&(0x7f0000000700)=0x2, 0x0, 0x2, &(0x7f0000000740)={0x0, 0x3938700}, 0x0, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x1000, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 6.073332906s ago: executing program 3: r0 = open(&(0x7f0000000100)='./file1\x00', 0x46142, 0x0) write$P9_RREADDIR(r0, 0x0, 0x0) 4.94665231s ago: executing program 3: timerfd_create(0x7, 0x0) pipe2$9p(&(0x7f0000004880)={0xffffffffffffffff}, 0x84000) ioctl$VT_SETMODE(r0, 0x5450, 0x0) timer_create(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) futex(&(0x7f0000004840)=0x2, 0x0, 0x2, &(0x7f0000000740)={0x0, 0x3938700}, 0x0, 0x0) rt_sigreturn() syz_read_part_table(0x401f, &(0x7f0000000000)="$eJzs0DEOAUEUBuB/NqKgUbuERk2UjrKNTqLRuIrKMSQaB3EBJ9CMZElIVuv7mvlnMjMv741vp1WSMttu2l1eNJ28bJKSZF73Jf/nvedrsjgnGfX5pDvUtPcvNycfzveHGoZ96j4N6ro+Ti+/vAcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAe7MCBAAAAAACQ/2sjVFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVWEHDgQAAAAAgPxfG6GqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqoKO3AgAwAAACDM3zqP9gMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwEsBAAD//4IoCls=") futex(&(0x7f0000000700)=0x2, 0x0, 0x2, &(0x7f0000004800)={0x77359400}, 0x0, 0x0) 4.205655803s ago: executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000000)) fcntl$lock(r0, 0x7, &(0x7f00000006c0)={0x1}) r1 = semget$private(0x0, 0x4, 0x0) semop(r1, &(0x7f00000000c0)=[{0x0, 0x5}, {}], 0x2) rt_sigreturn() socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x0, r3) write$FUSE_LSEEK(r4, &(0x7f0000000080)={0x18}, 0xfffffe36) semctl$SETALL(r1, 0x0, 0x11, &(0x7f0000002240)=[0x7fff]) ioctl$sock_inet_SIOCGIFDSTADDR(r4, 0x8917, &(0x7f0000000040)={'pim6reg1\x00', {0x2, 0x0, @loopback}}) 3.976160784s ago: executing program 4: r0 = msgget$private(0x0, 0x0) msgrcv(r0, 0x0, 0x0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) rt_sigreturn() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) write$binfmt_script(r2, &(0x7f0000000340), 0xffffff46) poll(0x0, 0x0, 0x100) pipe2$9p(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r3, &(0x7f0000000000)={0x7}, 0x69ff9a93bfc25838) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x77359400}, {0x0, 0x3938700}}, 0x0) r4 = msgget$private(0x0, 0x0) msgrcv(r4, 0x0, 0x0, 0x0, 0x0) rt_sigreturn() r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) recvfrom(r5, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$PTRACE_GETSIGMASK(0x420a, 0x0, 0x0, 0x0) 3.337150753s ago: executing program 3: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.log\x00', 0x88cc1, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/custom1\x00', 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) recvmsg(r1, &(0x7f0000000000)={&(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, 0x0}, 0x0) close(r2) recvmsg(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000140)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, 0x0}, 0x0) ioctl$TIOCSISO7816(r0, 0x5450, 0x0) 3.205206245s ago: executing program 4: socket$inet6_tcp(0xa, 0x1, 0x0) open(0x0, 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOVER(0xffffffffffffffff, 0x5451, 0x0) memfd_create(0x0, 0x0) openat$incfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$P9_RWSTAT(0xffffffffffffffff, 0x0, 0x0) openat$incfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) pipe2$9p(0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001240)) epoll_create1(0x80000) r0 = socket$inet6_icmp(0xa, 0x3, 0x3a) dup3(0xffffffffffffffff, r0, 0x0) r1 = epoll_create(0x1) r2 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup3(0xffffffffffffffff, r2, 0x0) openat$incfs(0xffffffffffffff9c, &(0x7f0000000080)='.pending_reads\x00', 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCGIFPFLAGS(r4, 0x8903, &(0x7f00000000c0)={'veth0_to_hsr\x00'}) recvmsg(r3, &(0x7f0000000180)={&(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, 0x0}, 0x0) close(r5) ioctl$TUNSETVNETLE(r1, 0x5451, 0x0) 3.097333937s ago: executing program 1: getsockopt(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff}) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xfdef) write(r0, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0xe) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r1, &(0x7f0000000040)={0x2a, 0x0, 0x4000}, 0xc) write$binfmt_script(r1, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0xb, &(0x7f0000000000), 0x18) 2.401282802s ago: executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) recvfrom$packet(r0, 0x0, 0x0, 0x0, 0x0, 0xfffffdce) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x3938700}}, 0x0) poll(0x0, 0x0, 0x100) pipe2$9p(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r2, &(0x7f0000000000)={0x7}, 0x69ff9a93bfc25838) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'veth0\x00', 0x2}) preadv2(r3, 0x0, 0x0, 0x0, 0x0, 0x0) close(r3) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) write$9p(r2, 0x0, 0x0) rt_sigreturn() pipe2$9p(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r4, &(0x7f0000000000)={0x7}, 0x69ff9a93bfc25838) socketpair(0x0, 0x0, 0x0, 0x0) 2.083650494s ago: executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) recvmsg(r0, &(0x7f0000000140)={&(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, 0x0}, 0x0) close(r1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) open(0x0, 0x40, 0x0) dup2(r2, 0xffffffffffffffff) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0x5451, 0x0) 1.915659546s ago: executing program 3: syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./file2\x00', 0x0, &(0x7f0000000240)=ANY=[], 0xfd, 0x11f3, &(0x7f0000001b80)="$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") bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x40, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1451c2, 0x0) ftruncate(r1, 0x2007ffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x800000008) syz_io_uring_setup(0xa94, &(0x7f00000005c0), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(0xffffffffffffffff, 0x48e9, 0x0, 0x0, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003f00), 0x0, 0x0) getpid() ftruncate(0xffffffffffffffff, 0x100c17a) 1.894034162s ago: executing program 4: syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x804810, &(0x7f0000000a40), 0x6, 0x756, &(0x7f00000002c0)="$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") chdir(&(0x7f0000000240)='./file0\x00') ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x40806685, &(0x7f0000000b00)={0x1, 0x2, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) creat(&(0x7f0000000140)='./file0\x00', 0x0) 1.577167453s ago: executing program 1: bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) syz_mount_image$bcachefs(&(0x7f000001f540), &(0x7f0000005dc0)='./file0\x00', 0x0, &(0x7f0000005f80)=ANY=[@ANYBLOB="646174615f636865636b73756d3f6e6f6e652c7374725f686173683d6372633332632c646174615f636865636b73756d3d7878686173682c6261636b67726f756e645f636f6d7072657373696f6e3d6e6f6e652c6d657461646174615f636865636b73756d3d63726336342c7374725f686173683d63726336342c636f6d7072657373696f6e3d677a69702c00b12ad55da9e690f3f671e2a963c6e436c7504557f0fbadaab9607da576d448dd11521821e84b69dce1a85442e5ffd2b948d59a9ab54444559714cabaaa60824f890721ff2a820fe81299e633"], 0xff, 0x5d5e, &(0x7f0000000000)="$eJzs3X2QHOWZGPDumVntSquPlSybFRJiMbIdccEWKBDLd442ztmxHdnIwgIsTicJWGEdQhL6QCBdwlcOCCYpVUEdBOKUDihylbpKcOkSwp1SJWPAV74qCpn4D458HRWcP+IjqrPEEcnlTe1u9+5Mb7/Ts9OzQuDfr0o78/Y+87zv0/NOd7+j3dkIAACAXwmv/N6ed79+/hd/dO/Qqbu+/Ce33hP1Vke396QBfcntHe/XCJlOy398puGZ7a71j95m58V5f7rw3b771nztoVVf+vHmP5s/uHTZ0JXfO3LV/fe9+PlfvPjYE2uK+knn0yUT7fiv4iha+vaRx+5/+c/PG9kWj/Qf990dzZ8fL/j+/DiTYsXpKIpuGh9n4zePnFq5deT2nu90N2yfl0livv9q60nm2cFNNzx17JbBl48M7Fr5s5NX7Lx7IiTuqZtPUTR3c/3ju6Iompn8G5HOtv70wcnt2iiKZtU97rMF47q4xfFfGmgvSW5nJLe9BXnS71+UaddaHEctc9vd4uPaVZnm/FnZ/Zc9GE2XtM65ye3zye0lU8xTTf/FUSWOauPD3x5PzJGo7nmLo3h0bveMtyuj7Wi8HWXbcaZdybSrXZm6RvtNdmw1jhu3p3GZ7enhuJZsv6j+WJ1jXWD7ouS2J3mhvpe2o+ydMb2T7kzUEdWN68TZmhgBlcBrL90+PrzkyehNtvXGCyY9ZjhH+r0TP9yy4Z03DjzfFxhH/Fyc5I/byj849OSxZ687uqg/lH9zJclfaSv/K9VXTz9zsn92MP+hNH+1rfzrf/nTB++9ev/C4P45ke6fWlv5lz08++Cp/eu6B0L5D6f5e9rKf+XGpasuOLnv9uD4V6T7Z2Zb+X/yyPIzGw+9cDSYP0rzz2or/5tPPr2kuujR48H8x9L909tW/mtWPr76q4vveyK4/19L889pK/+G4/dv3vXUS8uD83Ntun/62sp/evXrb53pW/N06NgZHz7bZ1iAD5ePJNdYDybtdteZZdWtFx4fqI1d881O/s3pZEcZcd3aBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADa9ejq/3BbffsT/+f29cf/49JttaTdXYuiOIqid6pj7XT7jCiKZ0ZRtGfvlt17t+24eeB3du7bvWPL9oEteweGduzdfefA3/nbA7uHdm3fcufId1dcunLscQtGs0XRgviCSWMZHh4ejqJooH5b2t8ffOW5/7f+ib/+VhSt+OjrS2vBej7zX9/64sKcrxnx4PDaf3XFIwdm/K95Yxv6knH1hcbV17gtHUHv4Gt/8YXn3xgZ18eajeuxV6/9vw0DGt0wkSdR6Y4qo3e641m54xgf9cR4RvdXbeu27UMrivdvHNi/n3rpj0/++zvW//Ox/dsTrKPF/TuyV2vDD/383k/d/YWhz53Dz3vR/q4rYXR86f7rSfb33KSuuYG6KoG6bh9488S/+Hf/+Zm7oxW1n184ue+iurqSCdAVL2qp37SHWfH8htieJD59xtPHfWbvrbs+s+fOA5duu3XLzUM3D+1YufKKVZetvOzyVSs/M1r62NeO1Z/2/6kW65+dZJodL87db9mtab8Xjn6tRsmw05u6O426ot6x28x+TsOzVfcm3+uNF0zKNZwj/d6JH27Z8M4bB54PvfLi58Z6nBnNGbuNlwQit2ceWB0fcF7/Z+d1ufP3e7anX1t7XRaNq2hejYyreF7Vj6jJcezVix/8+VMP/MvrWzhe1IWOji8d56yRl8tlUd3rdvK+yqurhednMG8/3Hjp7j++c9uGQ0XH8/pnpv5rRjw4/D+XxF/bt+cvdo9tOCvny/oBtXm+HB/1xHhG91dP8nycq/u3O6omdfXmjmtd/NTnP3Xr0V8bH9+MGdEdW/bu3X3Z2NcPal1/OWPewm33LL5gUl2Xj30tOu5fmGkXHvcr+fUVHfez/UzE5+cbyLR7o2pb54n1v/zpg/devX9h8DxxotXzxO82tKolzxOVwOv9ob/+7sC713/z3aL5dNWexXctzPmaLW9w+IU/+vXLPnft1V8a23BWjkP1A2rzODQ+6mQ86f4aPQ5dfu7U8f49zw0vxHhw+MLvffKaM6du+8bYhqL9Ox6dt39XFh/nq4G6ru/6+PxHfrb4452bv3s2/c3Fn541+xybvz3J/u0J7N/xUSfjqdbv30/fuHP7TWPtc/e6bUx3wfonPe/sufPALVu2bx/avae1ulo9n6b9ZPdyu+fT9OyxoKCu9PmaqGv67rSyv1p9vaXjvymTo93XG0Bq4rwwo2F79viZvu+3dG60/tMP/ODVeGDsfNmp91vTfs7PnJjbfb+1aJ308Uy7cZ1Ui+rqHjN5nTT6kKJ1UrafonXSxZl28TrmwdxKQs9fV3LmzXvfNDPe2kiG0PzoT/L3J+30enPpp6Mrqs9/4ivxYGvzo9Xr6bSfv5XZQe1eTxfNj2VR/rg6PT8+mXlQ8fN9KHdkPYHno+j5XtaQaHi47Lq8LzDqdF3eG8Vt5R8cevLYs9cdXRTMv7mS5K+0lf+V6qunnznZPzuY/1Cav9ZW/mUPzz54av+67mD+w+n+6Wkr/5Ubl6664OS+24P5V6Tjn9lW/p88svzMxkMvHA3mj9L8vW3lv2bl46u/uvi+J4L5X4uTfkZeu1F05NTKrWPtOOpK5n86jq6GcUXZdpxpVzLtan27MvZ/veMdVOO4cXsal9me1lFLtl9UN8Y86wPb01dtT/LCfi9tR9k7zbenh6d0XCcC55+zpVJ37ZG3vej9yU555+3+P6hvp///n86B7trYc3d5Zn8VnT+yR+80X/B92MBbGEXXC5P//21WW6+/N598ekl10aPHg++rHmv1fdVdDa1ZBe+rlh1v8HhxLD2eljse9Yfyv5bmL3c+COZPzgdF8+wTmXbhPOvK769onmWvU3qjOW3VveH4/Zt3PfXS8uA8Wzv2gi+eZ482tOYUzrNy/y8dnGfPxR3ZH8H8aztzXROcZ8l1TdE8uyTTLj/PGq9Hv5bc3pGJ703eIZ5q3adXv/7Wmb41Twfn2eFW59kfNrT6CudZuevb4PM0fn073dfnH+zrz/ft+jD579zpuj5cF9g+1evD3kl3JuqIPojXh4HjDAA086OH7vzf9e10/Z+eu9P1/w8yjyu7rsz+PFSqU+vKYP7DnVmvBK9Tx9cr073emu7r7Oldb7mOD+Qffx95ut8Xmt51pXVI0o6yd8ZYhwAA8H646N989zfr2+n6f/zn3pLf/38pbWceb50byH/W1rnT/T6JdXRu/g79fEXx+2DT/T6V9wG8D1DM+wAAAB8Om7buHhras2vLjUObtu3Ytnd8e9foymnyz6n+3eR2bSZP0c9P58XPahL/jWD+xvF8NhAfUhv9mdcouuHGb1++6aah26daf6i/ovrz4pvVn11fhOpfFYgPKVt/qL+i+vPim9V/dTB/43g+F4gPKVt/qL+i+vPim9X/zWD+xvH8eiA+pGz9of6K6s+Lb1Z/9vfBQvX/RiA+pGz9of6K6s+Lb1b/NcH8jeP5fCA+pGz9of6K6s+Lb1b/tcH8jeP5e4H4kLL1h/orqj8vvln91wXzN45ndSA+pGz9of6K6s+Lb1b/t4L5G8czGIgPKVt/qL+i+vPim9W/IZi/cTx/PxAfUrb+UH9F9efFN6v/+mD+xvF8IRAfUrb+UH9F9efFN6v/t4L5G8fzDwLxIWXrD/VXVH9efLP6NwbzN47nNwPxIWXrD/VXVH9efLP6fzuYv3E8XwzEh5StP9RfUf158c3q3xTM3zieLwXiQ8rWH+qvqP68+Gb1bw7mbxzPPwzEh5StP9RfUf158c3q3xLM3zieLwfiQ8rWH+qvqP68+Gb13xDM3zierwTiQ8rWH+qvqP68+Gb13xjM3zierwbiQ8rWH+qvqP68+Gb1Zz/vMFT/PwrEh5StP9RfUf158c3qHwrmbxzPmkB8SNn6Q/0V1Z8X36z+rcH8+Z8bkI0PKVt/qL+i+vPim9V/czB/43i+HogPKVt/qL+i+vPim9X/7WD+xvFcFYgPKVt/qL+i+vPim9W/LZi/cTxrA/EhZesP9VdUf158s/p/J5i/cTzfCMSHlK0/1F9R/Xnxzeq/JZi/cTzrAvEhZesP9VdUf158s/q3B/M3jufqQHxI2fpD/RXVnxffrP5bg/kbx/PNQHxI2fpD/RXVnxffrP4dwfyN41kfiA8pW3+ov6L68+Kb1b8zmL9xPNcE4kPK1h/qr6j+vPhm9e8K5m8cz7WB+JCy9Yf6K6o/L75Z/bcF8zeO57pAfEjZ+kP9FdWfF9+s/t3B/I3j+VYgPqRs/aH+iurPi29W/55g/sbxbAjEh5StP9RfUf158c3q3xvM3zie6wPxIWXrD/VXVH9efLP69wXzN47ntwLxIWXrD/VXVH9efLP6bw/mbxzPxkB8SNn6Q/0V1Z8X36z+/cH8jeP57UB8SNn6Q/0V1Z8X36z+7OdAhurfFIgPGa9/7+6hoU37dt20Ze/Qph07bxras2n/7m179w4lF2plf68s/HtB7/MvstBUw+tjbJJs27FnaPfk4/fMpvO3fk5Eo7/2NHPsNv5YS/HZj71ud9acK/O9K6o13V/nZ9rzks+jnRf4PNpsfJp28eidyZ9Hm+22VvA5rkXHp2z/oeNT3CQ+7/gaOp4Vnf+mfPwrnN89TevPbu5OfrGvO/5oS/FRk7/v1tp8Lfd7p8H5+lpr8zX7uetF8zUbP9X52ltyvmb7D82nSpP4ZtdDrc7XDYH4VOvzMw7Wmzevpvp3BtO0U/o7g5kvk7Txtwxafz2U+z3y4OshGXTR6yH7e9xFr4ds/FRfDzNLvh6y/Re9HvLim62PW309XBuID2l9PpT73ILgfFjR2nzI/h2rovmQjZ/qfOgpOR+y/RfNh7z4Zu8XtjofvhmIb1Xr86Pc54oE58fm1uZH9u9JFM2PbPxU50dccn5k+y+aH3nxzf4/pdX58Y1AfKrh/Ll1z+iiftuW7dsOZH4Aoy85f77f58Ozcl7+m9/4y/fGviTjqEwaR9H1RJwZx/xkJPNDf/cwMO4b/8u/Xf+DXzzw3Sha8dHqkvC4J4Y88SUjHhxecNeyZ6/72PEvjIy/0nT845Hp3y0u+HvH2fi0ntr2nXv2/trWnft2tPoTV82ln4dSGW9P0+ehJBurLX6+Sej3Cab6+SZdk+6cm1r+fBOAD4l5h5+bU99OP/8vPR/1J8e+mckBMN3e+nV2uc/XC15nH2rtOnt5tt6C6+xsfFpvq9fZlZLX2dn+i66z8+Kb/dxeq9fZXw/ET1XjPBmZIKPzY2jT/p27638mbrr/bm3nxzu9f8e3/Pim93Mb29X6+Kf3cyGnf/zT+3eAp3/80/t3ntt11tZLyYdFFn1+ZNE6KvR76VNdR82YdOfcZB0FAOe+f7b77X9d307X/8kqdnz9/52kXe1w/9O9jprudeV0Xyd/8D9/f3rXQdYDTTo7B1gPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOT7w//+n75f3+6u9Y/evvJ7e979+vlf/NG9Q6fu+vKf3HrPeX+68N2++9Z87aFVX/rx5j+bP7h02dCV3zty1f33vfj5X7z42BNrCjvqG7u5JGn2RFH8V3EULX37yGP3v/zn541si0f6j/vujubPjxd8f36cybDidBRFN42Ps/GbR06t3Dpye893uhu2z8skydYV9VbT8TSMM7qjsCI+gHqSeXZw0w1PHbtl8OUjA7tW/uzkFTvvngiJe+rmUxTN3Vz/+K4oimYm/0aks60/fXByuzaKoll1j/tswbgubnH8lwbaS5LbGcltb0Ge9PsXZdq1FsdRy9x2t/i4dlWmOX9Wdv9lD0bTJa1zbnL7fHJ7yRTzVNN/cVSJo9r48LfHE3Mkqnve4igends94+3KaDsab0fZdpxpVzLtalemrtF+kx1bjePG7WlcZnt6OK4l2y+qP1bnWBfYvii57UleqO+l7Sh7Z0zvpDsTdUR14zpxtiZGQCXw2ku3jw8veTJ6k2298YJJjxnOkX7vxA+3bHjnjQPP9wXGET8XJ/njtvIPDj157Nnrji7qD+XfXEnyV9rK/0r11dPPnOyfHcx/KM1fbSv/+l/+9MF7r96/MLh/TqT7p9ZW/mUPzz54av+67oFQ/sNp/p628l+5cemqC07uuz04/hXp/pnZVv6fPLL8zMZDLxwN5o/S/LPayv/mk08vqS569Hgw/7F0//S2lf+alY+v/uri+54I7v/X0vxz2sq/4fj9m3c99dLy4Pxcm+6fvrbyn179+ltn+tY8HTp2xofP9hkW4MPlI8k11oNJu911Zll164XHB2pj13yzk39zOtlRRly3dgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgJCdw9V99e23jj501bf/x6b/VoujKA48ZjhH+r3qjMHBgTbGsezh2QdP7V/XnbZH+u5vIw8AAAAw2eI3H7itvp2uwytJO456ov5ofzwzWpz7+PQ9gsVpK27cnn0PYeZEZEfyVDqUp9qhPLUO5enqUJ4ZHcrT3aE8PQV5eqLW8sxsmqfS8nhmdShPb4fyzO5QnjkdyjO3Q3nmdShPX9M8rc/D+R3Ks6BDeT7SoTwLO5Tnox3K87EO5TmvQ3my7ylPdR7OSSLPD+UZvVMtzFOLq+PfyHs/Pe3ngpL99LbYT/Y9+6n2M7PFfi4u2U9Pi/18smQ/cYv9LM88rjLFfioF/aTz9o5QPWmrxfl/Z4fyHOhQnoMdyvO7HcrzjzuU5590KM9dJfMAhPz+i5f8UX07Xf+n68846ou6a5dHs5IjTvZdgHS9e+Ho18nnu9ABKc23JLO9qyhfdoGdyXfhVMeXfQMhk+/jTfPVJq1Xc/LV6vMt61A+AAAAmIp/evpgw3/NTV7/90fdtYXj69dPZB5fuF7P/kd2Is13SYfyAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADw/9m11xi5yvIB4O/ZmZ2Z/3LpQtoypbdN2z+FEHqhqRFUmDSRBCNsEVsuDVkrLGzD0kK3BVo1RTC22QSDFi/cPliQGEIEEpIGXRMMKPGDjQ1iuLgurAS+EEF6A4qOmd1zds/OzrDLKK3V3y/knHnOeZ73ec8hIXnOAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD/+f74/b89m44H+3rbuwY6+kMUKv/UVK4huZfJlUptDezjnefWXvnXl7buTuJK73y2gYUAAACAcR4/b8bp6TiZw5PROwqFkM8uDfkoN6auGH8HKMZxU+vwec6isDyz+/8vjEpNQ/HJ0Ulj6gpxXSGOM3Fdz5at16/t7u7c+An+qPSpfo7q/UQhDH2+mHNiWLVo+zN7orbh52iZ4Dma4rrFm264cXHPlq1nrbth7XWd13WuX7Zs+TlLly09+5xli69d1925ZPgY8hOsF0IojX0vE/yLBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAI2Dbb3d/Kx0P9vW2dw109LdEIUR1aso1JPcyuVKprYF9vHLfg7MyM+7em8SV3vlsAwsBAAAA4/zq8Rnnp+NkDk9G7ygUQj6bC5kwYyieN5qaDaFcTq4vqLp+JPYOAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcWfsOtv85HQ/29bZ3DXT0HxeFENWpKdeQ3MvkSqW2BvaxetmPzv/CzDvuTeJK72ID6wAAAADjvXB68x3pOJnDm+I4CoVQDPNDczRjTF3ybeDUqvWq85J1Zk8yr/rbQb28+ZPMO22SeWdMkHdxfL41AAAAwLHnitbfrU7HyfzfHMdRaA35bDFk4niiOT75LjC3Ki+pn2i+T+rn1amfaO5P6qvnfgAAAPhfdtabT3yYjsfP/8WQzxZG5u+J/p5+UXz2d3IAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoJ5fH7zwF+l4sK+3vWugoz8ThRDVqSnXkNzL5Eqltgb2seofb+y4/dJbpiZxpXc+28BCAAAAwDiP5j59SzpO5vBk9I5CIeSzLaE5HDc097+WmzJ13Tdnzg4hlIYScrlw69pNmzaePXxM8r4U7frcwhv6zhyXt3T4eOSfFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+Fcte2TnmnQ82Nfb3jXQ0f9/UQhRnZpyDcm9TK5UamtgHy/sPOPwVXc91ZfEld7FBtYBAAAAxpvV/fRf0nEyhyezfxQKoRhyIRemD8XpWb+iqWq9et8MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgP8ePVu2Xr+2u7tzox9++OHHyI+j/V8mAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgaPn5+u+9nY4H+3rbuwY6+gtRCFGdmnINyb1MrlRqa2Afn7pqzjmz92++OYkrvYsNrAMAAACMt+atzfvTcTKHJ7N/FAqhGJpDc5gWx+MNzf+tR2K3AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA0TQ3RKH8MZ2y8mjvGgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPgkHHhx1X3peLCvt71roKP/hCiEqE5NuYbkXiZXKrU1sI8r9377KzfuevaMJK70zmcbWAgAAAAYp/nNF7+ajpM5PBm9o1AI+eyskA+z4ivdYxeIMklize8Co3VfH1OWmXTdjqodD++sEH+HKIzsMwx9dhitu+sj64rx1abWyb0nAAAAOJZN23HxN9JxMv83x3EUWkM+Oy01V984pr5l0nP83WPqTph03U/H1LVOUPdveCUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQIPuXPncKel4sK+3vWugoz+KQojq1JRrSO5lcqVSWwP7KHXe9/TDl/fNSOJK72ID6wAAAADjXfpG4bvpOJnDk9k/CoVQDLPDiWH20NwfWsfWJ3nHlX7/8ordL10RwpLpz8/J1u33wz2XvR0Offa194YPQ2EITWOTmkKYEveL6vS7+g+PrHrmw+0PhLBkWmZW/X6jrUYPVaJS+eRtCx6+fPreFXWXAQAAgGNa4cEDP0nHyfyfTNRRaA357Pq683+S97Hm//aemdumxsf4C0BVRVNr3K+pTr/edx9oO7jmywcr8//zcwoj/6/A6fPH5qdbpY9V3xyiUnnuE6etPnzgpkuGLyT9M3X6r2med9LOt2bOS/oX4uvXhMn2D1X9ezoOzV/UcvwFY/uHENpq9f/xhY+/v+red68Y7l//fS/+0+Dnp4YNPyh0J8fhK+P7r7x/+c6tudenjO0f1em/8Nkn9z9266o7q5//1Gyt/uOPVSpds+XefbcvvG1F57mp/k11+t/c9so73/nZLx+q9N83t2Wk/8KPeP4J+++Zv2Pfru33rBn7/ku1+l991sYnt6y78q7q52+pWjj95tPH8e//1VnRRZt7Xt5YfQsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAODY1vHYB4fS8WBfb3vXQEd/UxRCVKemXENyL5Mrldoa2MdvMns+eGh/8fgkrvQuNrAOAAAAMN4lK169Lh0nc3gy+0ehEIohF3KhZWjuP3nbgocvn753RWiN78fnbPeGnk1nXrth8/prjvQjAAAAABPYdd77K9JxMv9n4zgKrSGfXRCa4/l/5f3Ld27NvT4lmf9DCEN/7s9eu667c0kY+U7Q03Fo/qKW4y9I8jLxuVDJW3T1hu74M0Gy7lOPfmbpuZddOpLflM4/ezRv7hOnrT584KZLauYtG817dVZ00eaelzem9lkayVs6mte77/aFt63oPDd5jig+F+LnSfL2zN+xb9f2e9YkeU3xuSVeDwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAI4aT3/v61dDzY19veNdDRHzIhRHVqyjUk9zK5UqmtgX18cP7zg4dbv/hgEld657MNLAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPyTHTgQAAAAAADyf22EqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqKuzXT2gcVRwH8Pd2t2bbTeumFppoDSn20oJQCBZ7kObiHyRqqShaKEYxXlQsiFbswbbBUNRDQaGlvZRWPCs5FLWHWGwVBbGKB/GkoCeVHJIiqagkmbfZTDskjraU8vnA8Pb3Zuc7b96+nd0BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBr2uM/3ltrrztq3bPtuddfvPDgzXd/cWB46rX7Pnp+/9qP11xojgw+8MbWe74Z+rxroHfD8JYPxh4aHTlz159nDh8dXPREr8w1m7KyHkL8LYbQ+/PY4dGzX66d6Ysz54/NfaGrK67+pCvmEjZPhxCebo1z4c6xqf5nZtr9b3Ys6L8xF5K/rtCopvHMaS4cL9eXerbO9j7x1InxZwfOjvXt7v918o4X9s2/Jdbb1lMIq4baj18WQliebTPSautOB2ft9hDCirbj7lxkXLctcfy3F9TrsvaGrG0skpP2r8/VtSWOo5ZrO5Z4XFmVK5yfl5+//M3oSknXuSprT2Xtpn+ZU01bDJUYaq3hPxfn10ho+9xiiLNru96qK7N1aNUhX8dcXcnV1WW565o9bzax1RgX9qf35frT7biW9a9vv1dfxo6C/p6srWdf1D9SHfIv5jQueTF/HaFtXBNXa2EUqBR891J/a3jZh9HI+hpx9SXH/H0Zad/EZ0/u/P37V081C8YR349ZfiyVPzB8bPy9x073dBflD1Wy/Eqp/HPVr6bfnezuLMw/lPKrpfIf+euXgwce3rOmcH4m0vzUSuVveKtz79SeHR19RfnHU369VP6WXb1bb5186eXC8W9O87O8VP53b2+8uOvQh6cL80PKX1Eq/4djJ9dVe945X5g/nuanUSr/0f4j2+6/ZeRo4fx/nfJXlsrfeX50aPeJTzcWrs/taX6apfKnt33708Xm4Mmie2c8frV/YQGuLzdl/7EOZnXZ58z/qu154Uhfbe4/X2e2rfw/T5QT255dAAAAAAD+YQeOBQAAAACE+Vt3ZbEBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwAoAAP//pgBmrg==") socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000005e00)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(0xffffffffffffffff, &(0x7f0000006080)={&(0x7f0000005d80)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000005f40)={&(0x7f0000005e40)=ANY=[@ANYBLOB="e4000000", @ANYRES16=0x0, @ANYBLOB="0300", @ANYRES32=r0, @ANYBLOB="1400c7000303f90304020007b336b09bb94f85e31800c70004060906fa071f00000200005d05e6103a8e5bc83000c70008017f04b004060705040e010700080006060001830403050007000105021f0000060205b7610f6d0b1c374d2600c7000900000706070601040401040201080005030000030602061e02b134a19c8ba3676500000c00c7000e77cff5c9ae8a021600c700ff000904f8070400090669dff249340461d300002000c700ff023f0600050002800477040901b50006060800ba78"], 0xe4}, 0x1, 0x0, 0x0, 0x4814}, 0x24044040) openat(0xffffffffffffffff, &(0x7f0000000200)='./bus\x00', 0xc706f252a8b33b54, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu\x00', 0x275a, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x40, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(0xffffffffffffffff, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000180)={0x0, @in6={{0xa, 0x0, 0x0, @private0}}, 0xfffffffd, 0x0, 0x0, 0x4, 0x10}, 0x9c) r2 = open(&(0x7f0000000040)='./bus\x00', 0x1451c2, 0x0) ftruncate(r2, 0x2007ffb) syz_io_uring_setup(0xa94, &(0x7f00000005c0), &(0x7f0000000040)=0x0, &(0x7f0000000140)) syz_io_uring_submit(r3, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x48e9, 0x0, 0x0, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003f00), 0x0, 0x0) getpid() 667.100474ms ago: executing program 2: ioctl$SIOCGSTAMPNS(0xffffffffffffffff, 0x8946, 0x0) 463.586474ms ago: executing program 4: timer_create(0x0, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$KDGKBENT(r0, 0x5414, 0x0) 0s ago: executing program 2: r0 = gettid() timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'ipvlan0\x00', 0x2}) preadv2(r1, 0x0, 0x0, 0x0, 0x0, 0x0) close(r1) rt_sigreturn() poll(0x0, 0x0, 0x64) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) rt_sigreturn() mlockall(0x1) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$sock_timeval(r2, 0x1, 0x0, 0x0, 0x2a) kernel console output (not intermixed with test programs): gid=0 ses=4294967295 subj=unconfined pid=14375 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea90a7cea9 code=0x7fc00000 [ 1525.741601][ T29] audit: type=1800 audit(1718139093.429:950): pid=14379 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="file0" dev="sda1" ino=1960 res=0 errno=0 [ 1525.765706][ T29] audit: type=1326 audit(1718139093.459:951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14375 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fea90a7cea9 code=0x7fc00000 [ 1526.382693][T14331] bcm5974 3-1:0.0: could not read from device [ 1526.390066][ T29] audit: type=1326 audit(1718139094.089:952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14375 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea90a7cea9 code=0x7fc00000 [ 1526.443102][ T4473] bcm5974 3-1:0.0: could not read from device [ 1526.533280][ T4473] bcm5974 3-1:0.0: could not read from device [ 1526.645380][ T4473] bcm5974 3-1:0.0: could not read from device [ 1526.704080][ T5126] usb 3-1: USB disconnect, device number 12 [ 1527.139233][ T29] audit: type=1326 audit(1718139094.849:953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14392 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fae2627cea9 code=0x0 [ 1527.273563][T14395] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1527.527237][T14403] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1530.182621][ T29] audit: type=1326 audit(1718139097.859:954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14430 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f05c7a7cea9 code=0x0 [ 1530.867930][T14435] loop2: detected capacity change from 0 to 40427 [ 1530.924679][ T4034] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1530.933247][ T4034] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1530.941126][T14435] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 1530.949285][T14435] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 1531.027894][T14435] F2FS-fs (loop2): Found nat_bits in checkpoint [ 1531.970519][T14442] loop0: detected capacity change from 0 to 40427 [ 1532.009607][T14435] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 1532.011660][T14442] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 1532.017068][T14435] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 1532.033199][T14442] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 1532.149339][ T7463] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1532.157546][ T7463] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1532.229983][T14442] F2FS-fs (loop0): Found nat_bits in checkpoint [ 1532.938297][T14442] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 1532.946028][T14442] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 1533.189626][T14447] syz-executor.2: attempt to access beyond end of device [ 1533.189626][T14447] loop2: rw=2049, sector=45096, nr_sectors = 128 limit=40427 [ 1533.791790][T14453] binder: 14451:14453 ioctl c0306201 0 returned -14 [ 1533.894199][T14450] syz-executor.0: attempt to access beyond end of device [ 1533.894199][T14450] loop0: rw=2049, sector=45096, nr_sectors = 128 limit=40427 [ 1534.125417][ T29] audit: type=1804 audit(1718139101.679:955): pid=14450 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir3687526315/syzkaller.eKx2dG/138/bus/bus" dev="loop0" ino=10 res=1 errno=0 [ 1535.968008][T14469] loop4: detected capacity change from 0 to 256 [ 1536.072442][T14469] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x4ec6003b, utbl_chksum : 0xe619d30d) [ 1538.123877][ T29] audit: type=1326 audit(1718139105.819:956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14488 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fea90a7cea9 code=0x0 [ 1539.454596][T14494] loop3: detected capacity change from 0 to 40427 [ 1539.576187][T14494] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 1539.584505][T14494] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 1539.951466][T14504] binder: 14503:14504 ioctl c0306201 0 returned -14 [ 1540.142215][T14494] F2FS-fs (loop3): Found nat_bits in checkpoint [ 1540.194906][T14497] loop2: detected capacity change from 0 to 4096 [ 1540.510020][T14494] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 1540.517681][T14494] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 1541.284072][T14512] loop0: detected capacity change from 0 to 40427 [ 1541.353445][T14512] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 1541.361501][T14512] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 1541.626087][T14512] F2FS-fs (loop0): Found nat_bits in checkpoint [ 1542.075325][T14512] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 1542.082883][T14512] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 1542.765023][ T29] audit: type=1804 audit(1718139110.419:957): pid=14527 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir3687526315/syzkaller.eKx2dG/140/bus/bus" dev="loop0" ino=10 res=1 errno=0 [ 1542.792308][ T29] audit: type=1804 audit(1718139110.419:958): pid=14524 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir3687526315/syzkaller.eKx2dG/140/bus/bus" dev="loop0" ino=10 res=1 errno=0 [ 1542.818041][ T29] audit: type=1804 audit(1718139110.439:959): pid=14526 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir3687526315/syzkaller.eKx2dG/140/bus/bus" dev="loop0" ino=10 res=1 errno=0 [ 1542.897303][T14522] loop2: detected capacity change from 0 to 1024 [ 1545.994334][T14550] loop2: detected capacity change from 0 to 256 [ 1546.375346][T14550] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x4ec6003b, utbl_chksum : 0xe619d30d) [ 1546.847932][T14559] binder: 14556:14559 ioctl c0306201 0 returned -14 [ 1546.870778][T14558] loop3: detected capacity change from 0 to 256 [ 1547.022536][T14558] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x4ec6003b, utbl_chksum : 0xe619d30d) [ 1549.281955][T14571] loop3: detected capacity change from 0 to 40427 [ 1549.387596][T14573] loop0: detected capacity change from 0 to 40427 [ 1549.407189][T14571] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 1549.415589][T14571] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 1549.428519][T14573] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 1549.436856][T14573] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 1549.515222][T14573] F2FS-fs (loop0): Found nat_bits in checkpoint [ 1549.544027][T14571] F2FS-fs (loop3): Found nat_bits in checkpoint [ 1549.888530][T14573] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 1549.896520][T14573] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 1549.897132][T14571] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 1549.916109][T14571] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 1550.962194][T14585] syz-executor.3: attempt to access beyond end of device [ 1550.962194][T14585] loop3: rw=2049, sector=45096, nr_sectors = 128 limit=40427 [ 1552.878487][T14589] syz-executor.0: attempt to access beyond end of device [ 1552.878487][T14589] loop0: rw=2049, sector=45096, nr_sectors = 128 limit=40427 [ 1553.762222][ T29] audit: type=1804 audit(1718139120.159:960): pid=14590 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir3687526315/syzkaller.eKx2dG/142/bus/bus" dev="loop0" ino=10 res=1 errno=0 [ 1555.080834][T14606] loop4: detected capacity change from 0 to 256 [ 1555.189178][T14608] binder: 14607:14608 ioctl c0306201 0 returned -14 [ 1555.685036][T14606] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x4ec6003b, utbl_chksum : 0xe619d30d) [ 1557.288113][T14617] loop1: detected capacity change from 0 to 40427 [ 1557.321161][T14617] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 1557.329327][T14617] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 1557.496295][T14617] F2FS-fs (loop1): Found nat_bits in checkpoint [ 1557.751023][T14620] loop4: detected capacity change from 0 to 256 [ 1557.807804][T14617] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 1557.815373][T14617] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 1557.850088][T14620] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x4ec6003b, utbl_chksum : 0xe619d30d) [ 1559.119667][ T29] audit: type=1800 audit(1718139126.869:961): pid=14632 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=1947 res=0 errno=0 [ 1561.858371][T14646] loop3: detected capacity change from 0 to 4096 [ 1561.861929][T14647] loop0: detected capacity change from 0 to 40427 [ 1561.884929][T14647] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 1561.900356][T14647] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 1561.981490][T14647] F2FS-fs (loop0): Found nat_bits in checkpoint [ 1562.397220][T14647] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 1562.410206][T14647] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 1563.107705][ T29] audit: type=1804 audit(1718139130.419:962): pid=14665 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir3687526315/syzkaller.eKx2dG/144/bus/bus" dev="loop0" ino=10 res=1 errno=0 [ 1563.458137][T14668] loop3: detected capacity change from 0 to 1024 [ 1563.953054][T14677] binder: 14672:14677 ioctl c0306201 0 returned -14 [ 1563.977379][T14674] loop2: detected capacity change from 0 to 256 [ 1564.099121][T14674] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x4ec6003b, utbl_chksum : 0xe619d30d) [ 1566.055752][T14679] loop2: detected capacity change from 0 to 40427 [ 1566.073101][T14679] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 1566.081184][T14679] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 1566.218621][ T29] audit: type=1800 audit(1718139133.929:963): pid=14686 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=1961 res=0 errno=0 [ 1566.244224][T14679] F2FS-fs (loop2): Found nat_bits in checkpoint [ 1566.557956][T14679] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 1566.565461][T14679] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 1568.631669][T14711] loop4: detected capacity change from 0 to 256 [ 1568.689501][T14711] exfat: Deprecated parameter 'utf8' [ 1568.695820][T14711] exfat: Deprecated parameter 'utf8' [ 1569.131367][T14711] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 1570.253179][T14725] loop1: detected capacity change from 0 to 40427 [ 1570.302799][T14725] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 1570.310819][T14725] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 1570.553982][T14725] F2FS-fs (loop1): Found nat_bits in checkpoint [ 1570.867749][T14725] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 1570.875443][T14725] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 1571.667789][T14735] binder: 14731:14735 ioctl c0306201 0 returned -14 [ 1571.937092][ T29] audit: type=1804 audit(1718139139.689:964): pid=14730 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir2912577726/syzkaller.a1WAlQ/223/bus/bus" dev="loop1" ino=10 res=1 errno=0 [ 1571.997424][T14738] loop3: detected capacity change from 0 to 256 [ 1572.121866][T14738] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x4ec6003b, utbl_chksum : 0xe619d30d) [ 1572.295091][T14741] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1572.304875][T14741] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1572.896933][T14736] loop0: detected capacity change from 0 to 4096 [ 1573.132335][T14730] syz-executor.1: attempt to access beyond end of device [ 1573.132335][T14730] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1573.190182][T14741] xt_CT: No such helper "pptp" [ 1574.697773][T14750] loop4: detected capacity change from 0 to 40427 [ 1574.720482][T14749] loop0: detected capacity change from 0 to 1024 [ 1574.739273][T14750] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 1574.747902][T14750] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 1574.883119][T14750] F2FS-fs (loop4): Found nat_bits in checkpoint [ 1575.141834][T14750] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 1575.149314][T14750] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 1575.989509][T11248] syz-executor.1: attempt to access beyond end of device [ 1575.989509][T11248] loop1: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 1576.352731][T14766] loop2: detected capacity change from 0 to 256 [ 1576.419896][T14766] exfat: Deprecated parameter 'utf8' [ 1576.426444][T14766] exfat: Deprecated parameter 'utf8' [ 1577.380889][T14766] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 1578.895258][T14777] loop0: detected capacity change from 0 to 256 [ 1578.913317][T14777] exfat: Deprecated parameter 'utf8' [ 1578.919494][T14777] exfat: Deprecated parameter 'utf8' [ 1579.208843][T14777] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 1580.539764][T14791] binder: 14790:14791 ioctl c0306201 0 returned -14 [ 1581.055708][ T1219] ieee802154 phy0 wpan0: encryption failed: -22 [ 1581.062607][ T1219] ieee802154 phy1 wpan1: encryption failed: -22 [ 1581.148332][T14787] loop4: detected capacity change from 0 to 40427 [ 1581.166682][T14787] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 1581.175360][T14787] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 1581.197860][T14787] F2FS-fs (loop4): invalid crc value [ 1581.203799][T14795] loop1: detected capacity change from 0 to 256 [ 1581.291058][T14787] F2FS-fs (loop4): Mismatch valid blocks 0 vs. 2 [ 1581.311363][T14787] F2FS-fs (loop4): Failed to initialize F2FS segment manager (-117) [ 1581.439728][T14795] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x4ec6003b, utbl_chksum : 0xe619d30d) [ 1581.806354][T14799] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1581.816251][T14799] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1582.923716][T14807] loop0: detected capacity change from 0 to 40427 [ 1583.053584][T14807] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 1583.061925][T14807] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 1583.283465][T14802] xt_CT: No such helper "pptp" [ 1583.390508][T14807] F2FS-fs (loop0): Found nat_bits in checkpoint [ 1583.685710][T14807] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 1583.693200][T14807] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 1584.607811][ T29] audit: type=1804 audit(1718139152.359:965): pid=14816 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir3687526315/syzkaller.eKx2dG/151/bus/bus" dev="loop0" ino=10 res=1 errno=0 [ 1584.700937][ T29] audit: type=1804 audit(1718139152.399:966): pid=14814 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir3687526315/syzkaller.eKx2dG/151/bus/bus" dev="loop0" ino=10 res=1 errno=0 [ 1585.093875][T14814] syz-executor.0: attempt to access beyond end of device [ 1585.093875][T14814] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1586.338025][T14826] loop1: detected capacity change from 0 to 40427 [ 1586.430959][T14826] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 1586.439331][T14826] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 1586.538725][T14829] loop2: detected capacity change from 0 to 256 [ 1586.585598][T14826] F2FS-fs (loop1): Found nat_bits in checkpoint [ 1586.809852][T14829] exfat: Deprecated parameter 'utf8' [ 1586.816724][T14829] exfat: Deprecated parameter 'utf8' [ 1586.971844][T14826] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 1586.984940][T14826] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 1586.988106][T14823] loop3: detected capacity change from 0 to 4096 [ 1587.119504][T14829] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 1587.759598][T11988] syz-executor.0: attempt to access beyond end of device [ 1587.759598][T11988] loop0: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 1589.017757][T14823] loop3: detected capacity change from 0 to 1024 [ 1590.684136][T14852] binder: 14850:14852 ioctl c0306201 0 returned -14 [ 1590.828212][T14854] loop2: detected capacity change from 0 to 256 [ 1591.615701][T14856] loop0: detected capacity change from 0 to 40427 [ 1591.680269][T14856] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 1591.688307][T14856] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 1591.716756][T14856] F2FS-fs (loop0): invalid crc value [ 1591.800834][T14854] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x4ec6003b, utbl_chksum : 0xe619d30d) [ 1591.843741][T14856] F2FS-fs (loop0): Mismatch valid blocks 0 vs. 2 [ 1591.856100][T14856] F2FS-fs (loop0): Failed to initialize F2FS segment manager (-117) [ 1593.657798][T14879] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 1594.016252][T14882] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1594.026479][T14882] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1594.062382][T11607] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 1595.196106][T14885] loop4: detected capacity change from 0 to 40427 [ 1595.290335][T14885] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 1595.298815][T14885] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 1595.380881][T14889] loop1: detected capacity change from 0 to 40427 [ 1595.400007][T14889] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 1595.408188][T14889] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 1595.411908][T14885] F2FS-fs (loop4): Found nat_bits in checkpoint [ 1595.457894][T14883] xt_CT: No such helper "pptp" [ 1595.558120][T14889] F2FS-fs (loop1): Found nat_bits in checkpoint [ 1595.734066][T11607] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1595.745639][T11607] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1595.759190][T11607] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1595.769106][T11607] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1595.909294][T14889] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 1595.912275][T14885] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 1595.916773][T14889] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 1595.924061][T14885] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 1595.999874][T11607] usb 1-1: config 0 descriptor?? [ 1596.475707][ T29] audit: type=1804 audit(1718139164.229:967): pid=14904 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir2912577726/syzkaller.a1WAlQ/228/bus/bus" dev="loop1" ino=10 res=1 errno=0 [ 1597.998488][T11607] usbhid 1-1:0.0: can't add hid device: -71 [ 1598.005595][T11607] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1598.060947][T14912] loop3: detected capacity change from 0 to 256 [ 1598.113357][T11607] usb 1-1: USB disconnect, device number 10 [ 1598.370764][T14912] exfat: Deprecated parameter 'utf8' [ 1598.377288][T14912] exfat: Deprecated parameter 'utf8' [ 1598.443171][T14917] binder: 14915:14917 ioctl c0306201 0 returned -14 [ 1599.280809][T14912] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 1599.748168][T14921] loop0: detected capacity change from 0 to 256 [ 1600.082570][T14921] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x4ec6003b, utbl_chksum : 0xe619d30d) [ 1602.289686][T14940] loop4: detected capacity change from 0 to 4096 [ 1602.668994][T14942] loop1: detected capacity change from 0 to 40427 [ 1602.725657][T14942] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 1602.734115][T14942] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 1602.752668][T14942] F2FS-fs (loop1): invalid crc value [ 1603.510145][T14947] loop0: detected capacity change from 0 to 40427 [ 1603.542574][T14947] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 1603.550526][T14947] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 1603.636704][T14942] F2FS-fs (loop1): Mismatch valid blocks 0 vs. 2 [ 1603.655845][T14947] F2FS-fs (loop0): Found nat_bits in checkpoint [ 1603.659944][T14942] F2FS-fs (loop1): Failed to initialize F2FS segment manager (-117) [ 1603.866049][T14945] loop2: detected capacity change from 0 to 256 [ 1604.390817][T14947] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 1604.400082][T14947] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 1605.560568][T14945] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x4ec6003b, utbl_chksum : 0xe619d30d) [ 1606.176874][T14964] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 1606.589108][ T5126] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 1607.151150][T14976] binder: 14975:14976 ioctl c0306201 0 returned -14 [ 1607.262641][ T5126] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1607.274252][ T5126] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1607.287873][ T5126] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1607.297449][ T5126] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1607.394190][ T5126] usb 5-1: config 0 descriptor?? [ 1608.012927][T14974] loop3: detected capacity change from 0 to 40427 [ 1608.027687][T14974] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 1608.036022][T14974] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 1608.044164][ T5126] usbhid 5-1:0.0: can't add hid device: -71 [ 1608.051099][ T5126] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1608.079955][T14974] F2FS-fs (loop3): invalid crc value [ 1608.159205][ T5126] usb 5-1: USB disconnect, device number 11 [ 1608.213532][T14974] F2FS-fs (loop3): Mismatch valid blocks 0 vs. 2 [ 1608.270612][T14974] F2FS-fs (loop3): Failed to initialize F2FS segment manager (-117) [ 1608.920350][T14983] loop1: detected capacity change from 0 to 256 [ 1609.488152][T14983] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x4ec6003b, utbl_chksum : 0xe619d30d) [ 1609.869630][T14995] loop0: detected capacity change from 0 to 256 [ 1610.183652][T14995] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x4ec6003b, utbl_chksum : 0xe619d30d) [ 1611.845131][ T29] audit: type=1800 audit(1718139178.709:968): pid=15009 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="file1" dev="sda1" ino=1960 res=0 errno=0 [ 1611.868765][ T29] audit: type=1804 audit(1718139178.729:969): pid=15009 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir231328980/syzkaller.ABIGR5/27/file1" dev="sda1" ino=1960 res=1 errno=0 [ 1612.126960][ T29] audit: type=1800 audit(1718139179.829:970): pid=15012 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=1966 res=0 errno=0 [ 1612.465450][T15016] loop2: detected capacity change from 0 to 256 [ 1612.503243][T15006] loop1: detected capacity change from 0 to 4096 [ 1612.509831][T15016] exfat: Deprecated parameter 'utf8' [ 1612.510524][T15016] exfat: Deprecated parameter 'utf8' [ 1612.841353][T15016] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 1613.784688][T15022] loop3: detected capacity change from 0 to 40427 [ 1613.869765][T15022] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 1613.878972][T15022] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 1613.951406][T15022] F2FS-fs (loop3): Found nat_bits in checkpoint [ 1614.232536][T15022] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 1614.239890][T15022] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 1614.656517][T15023] loop1: detected capacity change from 0 to 1024 [ 1614.988739][ T29] audit: type=1804 audit(1718139182.379:971): pid=15029 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir2148809523/syzkaller.LAyJbP/127/bus/bus" dev="loop3" ino=10 res=1 errno=0 [ 1615.015284][ T29] audit: type=1804 audit(1718139182.399:972): pid=15028 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir2148809523/syzkaller.LAyJbP/127/bus/bus" dev="loop3" ino=10 res=1 errno=0 [ 1615.512481][T15036] binder: 15035:15036 ioctl c0306201 0 returned -14 [ 1617.060480][T15044] loop1: detected capacity change from 0 to 256 [ 1617.365340][T15044] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x4ec6003b, utbl_chksum : 0xe619d30d) [ 1618.788975][ T29] audit: type=1800 audit(1718139185.759:973): pid=15061 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="file1" dev="sda1" ino=1962 res=0 errno=0 [ 1618.810597][ T29] audit: type=1804 audit(1718139185.759:974): pid=15061 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir3030163302/syzkaller.IT5jgI/244/file1" dev="sda1" ino=1962 res=1 errno=0 [ 1618.963461][T10195] Bluetooth: hci3: command 0x0406 tx timeout [ 1620.516292][T15067] loop0: detected capacity change from 0 to 40427 [ 1620.552123][T15069] loop4: detected capacity change from 0 to 40427 [ 1620.632789][T15069] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 1620.640860][T15069] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 1620.641235][T15067] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 1620.657915][T15067] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 1620.711303][T15069] F2FS-fs (loop4): Found nat_bits in checkpoint [ 1620.970514][T15067] F2FS-fs (loop0): Found nat_bits in checkpoint [ 1621.249553][T15069] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 1621.257173][T15069] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 1621.272813][T15067] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 1621.280463][T15067] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 1621.673700][ T29] audit: type=1800 audit(1718139189.059:975): pid=15070 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1963 res=0 errno=0 [ 1622.434334][ T29] audit: type=1804 audit(1718139189.869:976): pid=15081 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir3687526315/syzkaller.eKx2dG/162/bus/bus" dev="loop0" ino=10 res=1 errno=0 [ 1622.475187][T15084] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 1622.999375][T15086] syz-executor.4: attempt to access beyond end of device [ 1622.999375][T15086] loop4: rw=2049, sector=45096, nr_sectors = 128 limit=40427 [ 1623.013173][ T29] audit: type=1804 audit(1718139190.329:977): pid=15088 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir3687526315/syzkaller.eKx2dG/162/bus/bus" dev="loop0" ino=10 res=1 errno=0 [ 1623.380733][ T29] audit: type=1804 audit(1718139190.799:978): pid=15087 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir231328980/syzkaller.ABIGR5/30/bus/bus" dev="loop4" ino=10 res=1 errno=0 [ 1623.714440][T11060] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 1624.159362][T11060] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1624.171011][T11060] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1624.184809][T11060] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1624.194307][T11060] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1624.308018][T11060] usb 4-1: config 0 descriptor?? [ 1624.498685][T11060] usb 4-1: can't set config #0, error -71 [ 1624.555045][T11060] usb 4-1: USB disconnect, device number 14 [ 1624.856833][T15094] binder: 15093:15094 ioctl c0306201 0 returned -14 [ 1625.054540][T15092] loop2: detected capacity change from 0 to 4096 [ 1625.907990][T15102] loop2: detected capacity change from 0 to 1024 [ 1626.552645][ T29] audit: type=1800 audit(1718139194.069:979): pid=15107 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="file1" dev="sda1" ino=1955 res=0 errno=0 [ 1626.575217][ T29] audit: type=1804 audit(1718139194.079:980): pid=15107 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir2912577726/syzkaller.a1WAlQ/236/file1" dev="sda1" ino=1955 res=1 errno=0 [ 1627.060994][T15109] loop3: detected capacity change from 0 to 256 [ 1627.333053][T15109] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x4ec6003b, utbl_chksum : 0xe619d30d) [ 1629.060274][T15125] loop3: detected capacity change from 0 to 40427 [ 1629.108475][T15125] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 1629.117044][T15125] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 1629.287803][T15125] F2FS-fs (loop3): Found nat_bits in checkpoint [ 1630.267451][T15133] loop1: detected capacity change from 0 to 40427 [ 1630.316017][T15133] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 1630.323870][T15125] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 1630.324018][T15125] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 1630.339228][T15133] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 1630.356679][T15133] F2FS-fs (loop1): invalid crc value [ 1630.447936][T15133] F2FS-fs (loop1): Mismatch valid blocks 0 vs. 2 [ 1630.468093][T15133] F2FS-fs (loop1): Failed to initialize F2FS segment manager (-117) [ 1632.014809][T15141] syz-executor.3: attempt to access beyond end of device [ 1632.014809][T15141] loop3: rw=2049, sector=45096, nr_sectors = 128 limit=40427 [ 1632.850656][ T29] audit: type=1804 audit(1718139199.959:981): pid=15141 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir2148809523/syzkaller.LAyJbP/132/bus/bus" dev="loop3" ino=10 res=1 errno=0 [ 1632.938897][T15141] syz-executor.3: attempt to access beyond end of device [ 1632.938897][T15141] loop3: rw=2049, sector=45224, nr_sectors = 8 limit=40427 [ 1634.090198][T15150] loop1: detected capacity change from 0 to 40427 [ 1634.168214][T15150] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 1634.177490][T15150] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 1634.242160][ T29] audit: type=1326 audit(1718139201.879:982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15148 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc96dc7cea9 code=0x7ffc0000 [ 1634.265684][ T29] audit: type=1326 audit(1718139201.879:983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15148 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc96dc7cea9 code=0x7ffc0000 [ 1634.304019][ T29] audit: type=1326 audit(1718139202.049:984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15148 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc96dc7cea9 code=0x7ffc0000 [ 1634.328404][ T29] audit: type=1326 audit(1718139202.059:985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15148 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc96dc7cea9 code=0x7ffc0000 [ 1634.352488][ T29] audit: type=1326 audit(1718139202.059:986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15148 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc96dc7cea9 code=0x7ffc0000 [ 1634.376612][ T29] audit: type=1326 audit(1718139202.089:987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15148 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fc96dc7cea9 code=0x7ffc0000 [ 1634.404430][ T29] audit: type=1326 audit(1718139202.089:988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15148 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc96dc7cea9 code=0x7ffc0000 [ 1634.436678][T15150] F2FS-fs (loop1): Found nat_bits in checkpoint [ 1634.515544][T12230] syz-executor.3: attempt to access beyond end of device [ 1634.515544][T12230] loop3: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 1634.619523][T15153] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 1634.894899][T15150] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 1634.909118][T15150] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 1635.523403][T10813] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 1636.424536][ T29] audit: type=1804 audit(1718139203.639:989): pid=15167 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir2912577726/syzkaller.a1WAlQ/239/bus/bus" dev="loop1" ino=10 res=1 errno=0 [ 1636.452865][ T29] audit: type=1804 audit(1718139203.639:990): pid=15165 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir2912577726/syzkaller.a1WAlQ/239/bus/bus" dev="loop1" ino=10 res=1 errno=0 [ 1637.348330][T15170] loop4: detected capacity change from 0 to 256 [ 1637.577146][T10813] usb 1-1: device descriptor read/all, error -71 [ 1637.635067][T15170] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x4ec6003b, utbl_chksum : 0xe619d30d) [ 1638.276044][T15176] loop0: detected capacity change from 0 to 4096 [ 1638.870230][T15183] loop2: detected capacity change from 0 to 256 [ 1639.290068][T15184] loop0: detected capacity change from 0 to 1024 [ 1639.371348][T15183] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x4ec6003b, utbl_chksum : 0xe619d30d) [ 1641.206288][T15188] loop4: detected capacity change from 0 to 40427 [ 1641.237704][T15188] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 1641.245871][T15188] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 1641.304982][T15188] F2FS-fs (loop4): invalid crc value [ 1641.373852][T15188] F2FS-fs (loop4): Mismatch valid blocks 0 vs. 2 [ 1641.393257][T15188] F2FS-fs (loop4): Failed to initialize F2FS segment manager (-117) [ 1642.655114][ T1219] ieee802154 phy0 wpan0: encryption failed: -22 [ 1642.662169][ T1219] ieee802154 phy1 wpan1: encryption failed: -22 [ 1643.571482][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 1643.571543][ T29] audit: type=1326 audit(1718139211.319:994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15218 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae2627cea9 code=0x7ffc0000 [ 1643.663556][ T29] audit: type=1326 audit(1718139211.359:995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15218 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae2627cea9 code=0x7ffc0000 [ 1643.687460][ T29] audit: type=1326 audit(1718139211.399:996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15218 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fae2627cea9 code=0x7ffc0000 [ 1643.715098][ T29] audit: type=1326 audit(1718139211.399:997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15218 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae2627cea9 code=0x7ffc0000 [ 1643.743352][ T29] audit: type=1326 audit(1718139211.399:998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15218 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae2627cea9 code=0x7ffc0000 [ 1643.767704][ T29] audit: type=1326 audit(1718139211.409:999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15218 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fae2627cea9 code=0x7ffc0000 [ 1643.792238][ T29] audit: type=1326 audit(1718139211.409:1000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15218 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae2627cea9 code=0x7ffc0000 [ 1643.950018][T15225] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 1644.372448][ T5126] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 1645.090418][T15231] loop1: detected capacity change from 0 to 40427 [ 1645.153060][T15231] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 1645.161129][T15231] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 1645.261898][ T29] audit: type=1800 audit(1718139212.969:1001): pid=15232 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="file1" dev="sda1" ino=1961 res=0 errno=0 [ 1645.284199][ T29] audit: type=1804 audit(1718139212.979:1002): pid=15232 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir3030163302/syzkaller.IT5jgI/253/file1" dev="sda1" ino=1961 res=1 errno=0 [ 1645.385744][T15231] F2FS-fs (loop1): Found nat_bits in checkpoint [ 1645.629177][ T29] audit: type=1800 audit(1718139213.119:1003): pid=15235 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=1966 res=0 errno=0 [ 1645.678587][T15231] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 1645.686118][T15231] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 1645.913236][ T5126] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1645.925084][ T5126] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1645.939080][ T5126] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1645.948796][ T5126] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1645.967118][ T5126] usb 4-1: config 0 descriptor?? [ 1646.713045][ T5126] usbhid 4-1:0.0: can't add hid device: -71 [ 1646.719943][ T5126] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1646.786693][ T5126] usb 4-1: USB disconnect, device number 15 [ 1647.272978][T15246] loop2: detected capacity change from 0 to 256 [ 1647.715137][T15246] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x4ec6003b, utbl_chksum : 0xe619d30d) [ 1648.123311][T15247] loop4: detected capacity change from 0 to 4096 [ 1649.466420][T15261] loop2: detected capacity change from 0 to 40427 [ 1649.485466][T15261] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 1649.493682][T15261] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 1649.514142][T15261] F2FS-fs (loop2): invalid crc value [ 1649.572679][T15261] F2FS-fs (loop2): Mismatch valid blocks 0 vs. 2 [ 1649.588978][T15261] F2FS-fs (loop2): Failed to initialize F2FS segment manager (-117) [ 1651.266494][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 1651.266581][ T29] audit: type=1326 audit(1718139219.019:1006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15271 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae2627cea9 code=0x7ffc0000 [ 1651.300359][ T29] audit: type=1326 audit(1718139219.019:1007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15271 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae2627cea9 code=0x7ffc0000 [ 1651.413995][ T29] audit: type=1326 audit(1718139219.089:1008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15271 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fae2627cea9 code=0x7ffc0000 [ 1651.439794][ T29] audit: type=1326 audit(1718139219.099:1009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15271 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae2627cea9 code=0x7ffc0000 [ 1651.463793][ T29] audit: type=1326 audit(1718139219.139:1010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15271 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fae2627cea9 code=0x7ffc0000 [ 1651.487277][ T29] audit: type=1326 audit(1718139219.139:1011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15271 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae2627cea9 code=0x7ffc0000 [ 1651.521221][ T29] audit: type=1326 audit(1718139219.139:1012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15271 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae2627cea9 code=0x7ffc0000 [ 1651.545497][ T29] audit: type=1326 audit(1718139219.159:1013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15271 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fae2627cea9 code=0x7ffc0000 [ 1651.569501][ T29] audit: type=1326 audit(1718139219.159:1014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15271 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae2627cea9 code=0x7ffc0000 [ 1651.597846][ T29] audit: type=1326 audit(1718139219.159:1015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15271 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae2627cea9 code=0x7ffc0000 [ 1654.162875][T15292] loop4: detected capacity change from 0 to 40427 [ 1654.213565][T15292] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 1654.221616][T15292] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 1654.298324][T15292] F2FS-fs (loop4): Found nat_bits in checkpoint [ 1654.591627][T15292] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 1654.599108][T15292] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 1654.819210][T15303] loop2: detected capacity change from 0 to 256 [ 1654.911534][T15297] loop3: detected capacity change from 0 to 256 [ 1654.928385][T15302] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 1655.749731][T15303] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x4ec6003b, utbl_chksum : 0xe619d30d) [ 1655.821840][T15297] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x4ec6003b, utbl_chksum : 0xe619d30d) [ 1656.004559][T11060] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 1656.833149][T11060] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1656.845951][T11060] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1656.859574][T11060] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1656.869018][T11060] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1656.946212][T11060] usb 2-1: config 0 descriptor?? [ 1657.543912][T11060] usbhid 2-1:0.0: can't add hid device: -71 [ 1657.550842][T11060] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1657.609110][T11060] usb 2-1: USB disconnect, device number 11 [ 1657.858228][T15318] loop0: detected capacity change from 0 to 4096 [ 1658.818720][T15318] loop0: detected capacity change from 0 to 1024 [ 1658.961620][T15331] loop3: detected capacity change from 0 to 256 [ 1659.254779][T15331] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x4ec6003b, utbl_chksum : 0xe619d30d) [ 1660.180065][T15341] loop4: detected capacity change from 0 to 40427 [ 1660.243280][T15341] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 1660.251521][T15341] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 1660.315894][T15341] F2FS-fs (loop4): invalid crc value [ 1660.478429][T15341] F2FS-fs (loop4): Mismatch valid blocks 0 vs. 2 [ 1660.488508][T15341] F2FS-fs (loop4): Failed to initialize F2FS segment manager (-117) [ 1663.421427][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 1663.421521][ T29] audit: type=1800 audit(1718139230.419:1020): pid=15355 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file1" dev="sda1" ino=1962 res=0 errno=0 [ 1663.449740][ T29] audit: type=1804 audit(1718139230.419:1021): pid=15355 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir3687526315/syzkaller.eKx2dG/173/file1" dev="sda1" ino=1962 res=1 errno=0 [ 1663.933549][ T29] audit: type=1800 audit(1718139231.589:1022): pid=15357 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=1939 res=0 errno=0 [ 1664.732169][T15360] loop4: detected capacity change from 0 to 40427 [ 1664.796413][T15360] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 1664.809123][T15360] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 1664.958810][T15360] F2FS-fs (loop4): Found nat_bits in checkpoint [ 1665.251491][T15360] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 1665.258986][T15360] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 1665.330679][T15368] loop1: detected capacity change from 0 to 256 [ 1665.451460][T15368] exfat: Bad value for 'uid' [ 1665.729562][ T29] audit: type=1804 audit(1718139233.469:1023): pid=15370 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir231328980/syzkaller.ABIGR5/41/bus/bus" dev="loop4" ino=10 res=1 errno=0 [ 1666.729736][T15377] loop3: detected capacity change from 0 to 256 [ 1667.040368][T15379] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 1667.211206][T15377] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x4ec6003b, utbl_chksum : 0xe619d30d) [ 1667.442764][T11060] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 1667.832806][T11060] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1667.844419][T11060] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1667.857739][T11060] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1667.867107][T11060] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1667.967759][T11060] usb 3-1: config 0 descriptor?? [ 1668.512846][T15393] loop0: detected capacity change from 0 to 4096 [ 1668.546632][T11060] usbhid 3-1:0.0: can't add hid device: -71 [ 1668.553387][T11060] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1668.620404][T11060] usb 3-1: USB disconnect, device number 13 [ 1669.409526][T15402] loop0: detected capacity change from 0 to 1024 [ 1669.532640][ T29] audit: type=1800 audit(1718139237.199:1024): pid=15404 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=1948 res=0 errno=0 [ 1670.471646][ T29] audit: type=1800 audit(1718139238.109:1025): pid=15414 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="file1" dev="sda1" ino=1948 res=0 errno=0 [ 1670.494307][ T29] audit: type=1804 audit(1718139238.109:1026): pid=15414 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir2912577726/syzkaller.a1WAlQ/249/file1" dev="sda1" ino=1948 res=1 errno=0 [ 1671.435180][T15419] loop1: detected capacity change from 0 to 40427 [ 1671.520788][T15419] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 1671.529146][T15419] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 1671.629296][T15420] loop2: detected capacity change from 0 to 256 [ 1671.643381][T15419] F2FS-fs (loop1): Found nat_bits in checkpoint [ 1671.899844][T15419] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 1671.907257][T15419] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 1672.450701][ T29] audit: type=1800 audit(1718139240.199:1027): pid=15434 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1966 res=0 errno=0 [ 1672.555188][T15425] loop4: detected capacity change from 0 to 256 [ 1672.735469][T15425] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x4ec6003b, utbl_chksum : 0xe619d30d) [ 1672.759394][T15420] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x4ec6003b, utbl_chksum : 0xe619d30d) [ 1673.284429][ T29] audit: type=1804 audit(1718139240.529:1028): pid=15432 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir2912577726/syzkaller.a1WAlQ/250/bus/bus" dev="loop1" ino=10 res=1 errno=0 [ 1674.849804][T15448] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 1675.333628][T10813] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 1675.773350][T10813] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1675.784777][T10813] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1675.798327][T10813] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1675.807938][T10813] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1675.875652][T10813] usb 5-1: config 0 descriptor?? [ 1676.413606][ T29] audit: type=1800 audit(1718139244.039:1029): pid=15466 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="file1" dev="sda1" ino=1937 res=0 errno=0 [ 1676.436144][ T29] audit: type=1804 audit(1718139244.049:1030): pid=15466 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir3030163302/syzkaller.IT5jgI/267/file1" dev="sda1" ino=1937 res=1 errno=0 [ 1676.584608][T10813] usbhid 5-1:0.0: can't add hid device: -71 [ 1676.591491][T10813] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1676.631234][T10813] usb 5-1: USB disconnect, device number 12 [ 1676.908098][T15467] loop0: detected capacity change from 0 to 4096 [ 1676.941718][ T29] audit: type=1800 audit(1718139244.629:1031): pid=15473 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=1960 res=0 errno=0 [ 1677.395663][T15479] loop1: detected capacity change from 0 to 256 [ 1677.720870][T15479] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x4ec6003b, utbl_chksum : 0xe619d30d) [ 1677.981709][T15485] loop0: detected capacity change from 0 to 1024 [ 1678.854515][T15491] loop3: detected capacity change from 0 to 40427 [ 1678.962503][T15491] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 1678.970575][T15491] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 1679.115980][T15495] binder: 15489:15495 ioctl c0306201 0 returned -14 [ 1679.152771][T15491] F2FS-fs (loop3): Found nat_bits in checkpoint [ 1679.406053][T15491] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 1679.413532][T15491] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 1680.513093][ T29] audit: type=1804 audit(1718139248.029:1032): pid=15503 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir2148809523/syzkaller.LAyJbP/146/bus/bus" dev="loop3" ino=10 res=1 errno=0 [ 1680.540234][ T29] audit: type=1804 audit(1718139248.049:1033): pid=15502 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir2148809523/syzkaller.LAyJbP/146/bus/bus" dev="loop3" ino=10 res=1 errno=0 [ 1681.378329][T15507] loop4: detected capacity change from 0 to 256 [ 1681.531117][T15507] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x4ec6003b, utbl_chksum : 0xe619d30d) [ 1682.965706][ T29] audit: type=1800 audit(1718139250.599:1034): pid=15524 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="file1" dev="sda1" ino=1947 res=0 errno=0 [ 1682.988510][ T29] audit: type=1804 audit(1718139250.599:1035): pid=15524 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir2912577726/syzkaller.a1WAlQ/254/file1" dev="sda1" ino=1947 res=1 errno=0 [ 1683.304482][T15530] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 1683.703251][T11060] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 1683.839187][ T29] audit: type=1800 audit(1718139251.539:1036): pid=15537 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=1948 res=0 errno=0 [ 1684.155030][T11060] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1684.173665][T11060] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1684.190302][T11060] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1684.200361][T11060] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1684.292593][T11060] usb 3-1: config 0 descriptor?? [ 1684.328785][T15545] loop1: detected capacity change from 0 to 256 [ 1684.410082][T15545] exfat: Bad value for 'uid' [ 1684.839069][T11060] usbhid 3-1:0.0: can't add hid device: -71 [ 1684.845720][T11060] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1685.554905][T15552] loop0: detected capacity change from 0 to 40427 [ 1685.586488][T11060] usb 3-1: USB disconnect, device number 14 [ 1685.614634][T15552] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 1685.622893][T15552] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 1685.685300][T15550] loop3: detected capacity change from 0 to 256 [ 1685.723118][T15552] F2FS-fs (loop0): Found nat_bits in checkpoint [ 1686.046987][T15552] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 1686.054926][T15552] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 1686.166060][T15550] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x4ec6003b, utbl_chksum : 0xe619d30d) [ 1686.335055][T15553] loop4: detected capacity change from 0 to 4096 [ 1687.414033][T15553] loop4: detected capacity change from 0 to 1024 [ 1688.480702][T15576] binder: 15575:15576 ioctl c0306201 0 returned -14 [ 1689.333431][ T29] audit: type=1800 audit(1718139257.029:1037): pid=15584 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="file1" dev="sda1" ino=1960 res=0 errno=0 [ 1689.355655][ T29] audit: type=1804 audit(1718139257.029:1038): pid=15584 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir231328980/syzkaller.ABIGR5/50/file1" dev="sda1" ino=1960 res=1 errno=0 [ 1690.599779][T15599] loop0: detected capacity change from 0 to 256 [ 1690.766790][T15599] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x4ec6003b, utbl_chksum : 0xe619d30d) [ 1691.113680][ T29] audit: type=1800 audit(1718139258.809:1039): pid=15604 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=1939 res=0 errno=0 [ 1691.331519][T15607] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 1692.275351][T15610] loop3: detected capacity change from 0 to 40427 [ 1692.325803][T15610] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 1692.334136][T15610] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 1692.370475][T10813] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 1692.421603][T15610] F2FS-fs (loop3): Found nat_bits in checkpoint [ 1692.727306][T15610] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 1692.735047][T15610] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 1692.942739][T10813] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1692.954284][T10813] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1692.971154][T10813] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1692.981741][T10813] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1693.113337][T10813] usb 3-1: config 0 descriptor?? [ 1694.333649][T15621] loop4: detected capacity change from 0 to 40427 [ 1694.447475][T15621] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 1694.455932][T15621] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 1694.584386][T15621] F2FS-fs (loop4): Found nat_bits in checkpoint [ 1694.843274][T10813] usbhid 3-1:0.0: can't add hid device: -71 [ 1694.850114][T10813] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1694.897533][T15621] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 1694.905078][T15621] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 1694.953536][T10813] usb 3-1: USB disconnect, device number 15 [ 1695.881595][T15629] syz-executor.4: attempt to access beyond end of device [ 1695.881595][T15629] loop4: rw=2049, sector=45096, nr_sectors = 128 limit=40427 [ 1695.893900][ T29] audit: type=1804 audit(1718139263.629:1040): pid=15630 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir231328980/syzkaller.ABIGR5/53/bus/bus" dev="loop4" ino=10 res=1 errno=0 [ 1696.914228][ T29] audit: type=1800 audit(1718139264.479:1041): pid=15633 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="file1" dev="sda1" ino=1950 res=0 errno=0 [ 1696.937063][ T29] audit: type=1804 audit(1718139264.479:1042): pid=15633 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir2912577726/syzkaller.a1WAlQ/258/file1" dev="sda1" ino=1950 res=1 errno=0 [ 1696.953684][T15628] loop0: detected capacity change from 0 to 4096 [ 1696.999982][T15629] syz-executor.4: attempt to access beyond end of device [ 1696.999982][T15629] loop4: rw=2049, sector=45224, nr_sectors = 8 limit=40427 [ 1698.758387][T14165] syz-executor.4: attempt to access beyond end of device [ 1698.758387][T14165] loop4: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 1699.130518][T15643] loop0: detected capacity change from 0 to 1024 [ 1699.556671][T15643] hfsplus: failed to load root directory [ 1700.588734][T15656] loop2: detected capacity change from 0 to 256 [ 1700.744397][T15656] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x4ec6003b, utbl_chksum : 0xe619d30d) [ 1701.493271][T15660] loop3: detected capacity change from 0 to 40427 [ 1701.529870][T15660] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 1701.538324][T15660] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 1701.628562][T15660] F2FS-fs (loop3): Found nat_bits in checkpoint [ 1701.916461][T15660] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 1701.924079][T15660] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 1703.172193][T15675] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 1703.179627][T15676] binder: 15673:15676 ioctl c0306201 0 returned -14 [ 1703.823271][ T5119] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 1703.933533][ T1219] ieee802154 phy0 wpan0: encryption failed: -22 [ 1703.940393][ T1219] ieee802154 phy1 wpan1: encryption failed: -22 [ 1704.192948][ T5119] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1704.204528][ T5119] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1704.218420][ T5119] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1704.232719][ T5119] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1704.311483][ T5119] usb 3-1: config 0 descriptor?? [ 1704.884857][ T5119] usbhid 3-1:0.0: can't add hid device: -71 [ 1704.891776][ T5119] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1704.973581][ T5119] usb 3-1: USB disconnect, device number 16 [ 1705.927625][ T29] audit: type=1800 audit(1718139273.529:1043): pid=15690 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="file1" dev="sda1" ino=1955 res=0 errno=0 [ 1705.949962][ T29] audit: type=1804 audit(1718139273.529:1044): pid=15690 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir2148809523/syzkaller.LAyJbP/153/file1" dev="sda1" ino=1955 res=1 errno=0 [ 1706.688565][T15693] loop2: detected capacity change from 0 to 40427 [ 1706.811310][T15693] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 1706.819667][T15693] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 1706.838561][T15693] F2FS-fs (loop2): invalid crc value [ 1706.899442][T15693] F2FS-fs (loop2): Mismatch valid blocks 0 vs. 2 [ 1706.917293][T15693] F2FS-fs (loop2): Failed to initialize F2FS segment manager (-117) [ 1707.684685][T15701] loop0: detected capacity change from 0 to 4096 [ 1708.826137][T15714] loop3: detected capacity change from 0 to 256 [ 1708.959377][T15701] loop0: detected capacity change from 0 to 1024 [ 1709.082656][T15714] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x4ec6003b, utbl_chksum : 0xe619d30d) [ 1710.111216][T15722] loop1: detected capacity change from 0 to 40427 [ 1710.182235][T15722] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 1710.190307][T15722] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 1710.289309][T15722] F2FS-fs (loop1): Found nat_bits in checkpoint [ 1710.572216][T15722] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 1710.584768][T15722] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 1711.307904][T15733] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 1711.779283][T15737] loop3: detected capacity change from 0 to 256 [ 1711.798272][T15737] exfat: Deprecated parameter 'utf8' [ 1711.805574][T15737] exfat: Deprecated parameter 'utf8' [ 1711.812710][T10813] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 1712.200518][T15737] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 1712.307365][ T29] audit: type=1800 audit(1718139279.919:1045): pid=15740 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file1" dev="sda1" ino=1964 res=0 errno=0 [ 1712.333406][ T29] audit: type=1804 audit(1718139279.919:1046): pid=15740 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir3687526315/syzkaller.eKx2dG/188/file1" dev="sda1" ino=1964 res=1 errno=0 [ 1712.443660][T10813] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1712.455269][T10813] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1712.468868][T10813] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1712.478351][T10813] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1712.582456][T10813] usb 3-1: config 0 descriptor?? [ 1713.357573][T15744] loop0: detected capacity change from 0 to 40427 [ 1713.405167][T15744] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 1713.413649][T15744] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 1713.435875][T15744] F2FS-fs (loop0): invalid crc value [ 1713.569688][T15744] F2FS-fs (loop0): Mismatch valid blocks 0 vs. 2 [ 1713.597854][T15744] F2FS-fs (loop0): Failed to initialize F2FS segment manager (-117) [ 1713.804368][T10813] usbhid 3-1:0.0: can't add hid device: -71 [ 1713.811254][T10813] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1713.919192][T10813] usb 3-1: USB disconnect, device number 17 [ 1716.712311][T15760] loop2: detected capacity change from 0 to 40427 [ 1716.773311][T15760] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 1716.781408][T15760] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 1716.814326][T15760] F2FS-fs (loop2): invalid crc value [ 1716.964033][T15760] F2FS-fs (loop2): Mismatch valid blocks 0 vs. 2 [ 1716.986309][T15760] F2FS-fs (loop2): Failed to initialize F2FS segment manager (-117) [ 1717.016027][T15761] loop3: detected capacity change from 0 to 256 [ 1717.601089][T15769] binder: 15768:15769 ioctl c0306201 0 returned -14 [ 1718.697097][T15761] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x4ec6003b, utbl_chksum : 0xe619d30d) [ 1719.498343][T15776] loop1: detected capacity change from 0 to 40427 [ 1719.538895][T15776] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 1719.547447][T15776] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 1719.619165][T15776] F2FS-fs (loop1): Found nat_bits in checkpoint [ 1719.914707][T15776] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 1719.922250][T15776] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 1722.107707][T15785] loop4: detected capacity change from 0 to 40427 [ 1722.125621][T15785] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 1722.133849][T15785] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 1722.263475][T15785] F2FS-fs (loop4): Found nat_bits in checkpoint [ 1722.525167][T15786] loop2: detected capacity change from 0 to 4096 [ 1722.596832][T15785] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 1722.605333][T15785] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 1723.823847][T15803] loop3: detected capacity change from 0 to 256 [ 1723.893934][T15803] exfat: Deprecated parameter 'utf8' [ 1723.899916][T15803] exfat: Deprecated parameter 'utf8' [ 1724.235327][T15804] loop2: detected capacity change from 0 to 1024 [ 1724.368003][T15803] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 1725.401415][T15806] loop0: detected capacity change from 0 to 40427 [ 1725.501107][T15806] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 1725.512345][T15806] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 1725.597937][T15806] F2FS-fs (loop0): Found nat_bits in checkpoint [ 1725.899771][T15806] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 1725.907173][T15806] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 1726.656683][ T29] audit: type=1804 audit(1718139294.229:1047): pid=15814 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir3687526315/syzkaller.eKx2dG/192/bus/bus" dev="loop0" ino=10 res=1 errno=0 [ 1726.683632][ T29] audit: type=1804 audit(1718139294.239:1048): pid=15811 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir3687526315/syzkaller.eKx2dG/192/bus/bus" dev="loop0" ino=10 res=1 errno=0 [ 1726.709227][ T29] audit: type=1804 audit(1718139294.239:1049): pid=15813 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir3687526315/syzkaller.eKx2dG/192/bus/bus" dev="loop0" ino=10 res=1 errno=0 [ 1728.084182][T15825] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1728.094507][ T29] audit: type=1800 audit(1718139295.789:1050): pid=15823 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="file1" dev="sda1" ino=1960 res=0 errno=0 [ 1728.094777][ T29] audit: type=1804 audit(1718139295.809:1051): pid=15823 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir2912577726/syzkaller.a1WAlQ/265/file1" dev="sda1" ino=1960 res=1 errno=0 [ 1728.366832][T15830] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 1728.430734][T15825] bridge_slave_1: left allmulticast mode [ 1728.436966][T15825] bridge_slave_1: left promiscuous mode [ 1728.444191][T15825] bridge0: port 2(bridge_slave_1) entered disabled state [ 1728.541758][T15828] bridge2: port 1(veth1_to_bond) entered blocking state [ 1728.549809][T15828] bridge2: port 1(veth1_to_bond) entered disabled state [ 1728.558017][T15828] veth1_to_bond: entered allmulticast mode [ 1728.567437][T15828] veth1_to_bond: entered promiscuous mode [ 1728.579249][T15828] bridge2: port 1(veth1_to_bond) entered blocking state [ 1728.587134][T15828] bridge2: port 1(veth1_to_bond) entered forwarding state [ 1728.668529][T15836] loop1: detected capacity change from 0 to 256 [ 1728.773322][T15836] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x4ec6003b, utbl_chksum : 0xe619d30d) [ 1728.822367][ T5119] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 1729.240958][ T5119] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1729.252693][ T5119] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1729.267135][ T5119] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1729.276872][ T5119] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1729.340444][ T5119] usb 5-1: config 0 descriptor?? [ 1729.747824][T15844] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1729.757654][T15844] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1729.765634][T15844] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1729.819044][T15844] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1729.832129][T15844] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1730.454027][T15840] loop2: detected capacity change from 0 to 40427 [ 1730.475108][T15840] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 1730.483786][T15840] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 1730.661752][T15840] F2FS-fs (loop2): Found nat_bits in checkpoint [ 1730.920297][ T5119] usbhid 5-1:0.0: can't add hid device: -71 [ 1730.927381][ T5119] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1731.013713][ T5119] usb 5-1: USB disconnect, device number 13 [ 1731.027913][T15840] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 1731.035689][T15840] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 1731.818028][T15857] loop0: detected capacity change from 0 to 40427 [ 1732.231496][T15857] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 1732.239708][T15857] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 1732.251865][T15857] F2FS-fs (loop0): invalid crc value [ 1732.311028][T15857] F2FS-fs (loop0): Mismatch valid blocks 0 vs. 2 [ 1732.338611][T15857] F2FS-fs (loop0): Failed to initialize F2FS segment manager (-117) [ 1735.950912][T15879] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1736.090384][T15881] bridge_slave_1: left allmulticast mode [ 1736.096756][T15881] bridge_slave_1: left promiscuous mode [ 1736.105251][T15881] bridge0: port 2(bridge_slave_1) entered disabled state [ 1736.349863][T15873] loop4: detected capacity change from 0 to 4096 [ 1736.449774][T15882] bridge1: port 1(veth1_to_bond) entered blocking state [ 1736.460546][T15882] bridge1: port 1(veth1_to_bond) entered disabled state [ 1736.470340][T15882] veth1_to_bond: entered allmulticast mode [ 1736.482319][T15882] veth1_to_bond: entered promiscuous mode [ 1736.499675][T15882] bridge1: port 1(veth1_to_bond) entered blocking state [ 1736.507600][T15882] bridge1: port 1(veth1_to_bond) entered forwarding state [ 1736.636305][T15876] loop3: detected capacity change from 0 to 40427 [ 1736.660903][T15876] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 1736.669223][T15876] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 1736.940141][T15876] F2FS-fs (loop3): Found nat_bits in checkpoint [ 1737.264928][T15876] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 1737.272291][T15876] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 1737.888412][T15890] loop4: detected capacity change from 0 to 1024 [ 1737.934798][ T29] audit: type=1804 audit(1718139305.659:1052): pid=15896 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir2148809523/syzkaller.LAyJbP/165/bus/bus" dev="loop3" ino=10 res=1 errno=0 [ 1737.961369][ T29] audit: type=1804 audit(1718139305.669:1053): pid=15892 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir2148809523/syzkaller.LAyJbP/165/bus/bus" dev="loop3" ino=10 res=1 errno=0 [ 1740.167521][T15890] hfsplus: failed to load extents file [ 1740.216478][T15895] loop1: detected capacity change from 0 to 256 [ 1740.300595][T15895] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x4ec6003b, utbl_chksum : 0xe619d30d) [ 1741.881611][T15910] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 1741.882527][ T5119] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 1742.181112][ T29] audit: type=1800 audit(1718139309.899:1054): pid=15913 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="file1" dev="sda1" ino=1961 res=0 errno=0 [ 1742.193199][ T5119] usb 5-1: Using ep0 maxpacket: 16 [ 1742.203600][ T29] audit: type=1804 audit(1718139309.899:1055): pid=15913 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir3030163302/syzkaller.IT5jgI/287/file1" dev="sda1" ino=1961 res=1 errno=0 [ 1742.242996][ T780] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 1742.414589][ T5119] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1742.432983][ T5119] usb 5-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 1742.444166][ T5119] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1742.471874][ T5119] usb 5-1: config 0 descriptor?? [ 1742.555710][ T5119] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 1743.288625][T15915] loop0: detected capacity change from 0 to 40427 [ 1743.336298][T15915] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 1743.349250][T15915] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 1743.428751][ T780] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1743.440217][ T780] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1743.457346][ T780] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1743.467464][ T780] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1743.488415][T15915] F2FS-fs (loop0): Found nat_bits in checkpoint [ 1743.697794][ T780] usb 2-1: config 0 descriptor?? [ 1743.769036][T15915] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 1743.776821][T15915] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 1744.377847][ T780] usbhid 2-1:0.0: can't add hid device: -71 [ 1744.386373][ T780] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1744.497190][ T780] usb 2-1: USB disconnect, device number 12 [ 1744.786095][T10813] usb 5-1: USB disconnect, device number 14 [ 1745.034970][T15928] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1745.044756][T15928] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1745.053054][T15928] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1745.157436][T15928] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1745.165429][T15928] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1745.467923][T15925] loop2: detected capacity change from 0 to 40427 [ 1745.487374][T15925] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 1745.502304][T15925] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 1745.524299][T15925] F2FS-fs (loop2): invalid crc value [ 1745.586902][T15925] F2FS-fs (loop2): Mismatch valid blocks 0 vs. 2 [ 1745.616665][T15925] F2FS-fs (loop2): Failed to initialize F2FS segment manager (-117) [ 1746.669940][T15934] loop4: detected capacity change from 0 to 40427 [ 1746.732016][T15936] loop1: detected capacity change from 0 to 40427 [ 1746.816617][T15936] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 1746.831827][T15936] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 1746.910427][T15934] F2FS-fs (loop4): Found nat_bits in checkpoint [ 1747.249840][T15934] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 1747.271508][T15936] F2FS-fs (loop1): Found nat_bits in checkpoint [ 1747.605741][T15936] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 1747.613778][T15936] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 1749.237371][T15945] syz-executor.1: attempt to access beyond end of device [ 1749.237371][T15945] loop1: rw=2049, sector=45096, nr_sectors = 128 limit=40427 [ 1749.853349][ T29] audit: type=1804 audit(1718139317.009:1056): pid=15945 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir2912577726/syzkaller.a1WAlQ/272/bus/bus" dev="loop1" ino=10 res=1 errno=0 [ 1750.045340][T15951] loop2: detected capacity change from 0 to 256 [ 1750.250184][T15951] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x4ec6003b, utbl_chksum : 0xe619d30d) [ 1751.005138][T14165] syz-executor.4: attempt to access beyond end of device [ 1751.005138][T14165] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1751.616872][ T29] audit: type=1800 audit(1718139319.309:1057): pid=15964 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="file1" dev="sda1" ino=1953 res=0 errno=0 [ 1751.643111][ T29] audit: type=1804 audit(1718139319.309:1058): pid=15964 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir3030163302/syzkaller.IT5jgI/291/file1" dev="sda1" ino=1953 res=1 errno=0 [ 1753.043581][T15970] loop0: detected capacity change from 0 to 40427 [ 1753.056163][T15970] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 1753.064297][T15970] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 1753.154084][T11607] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 1753.203760][T15970] F2FS-fs (loop0): Found nat_bits in checkpoint [ 1753.532481][T15970] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 1753.543277][T15970] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 1753.664285][T11607] usb 4-1: Using ep0 maxpacket: 16 [ 1753.889228][T11607] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1753.907601][T11607] usb 4-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 1753.918588][T11607] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1753.984713][T11607] usb 4-1: config 0 descriptor?? [ 1754.046159][T11607] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 1755.054996][T15981] loop1: detected capacity change from 0 to 4096 [ 1755.462423][ T5126] usb 4-1: USB disconnect, device number 16 [ 1755.911657][T15997] binder: 15995:15997 ioctl c0306201 0 returned -14 [ 1756.393252][T15981] loop1: detected capacity change from 0 to 1024 [ 1756.600013][T16005] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 1757.062537][ T5126] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 1757.888968][T16010] loop2: detected capacity change from 0 to 40427 [ 1757.931682][T16009] loop3: detected capacity change from 0 to 256 [ 1757.990968][T16010] F2FS-fs (loop2): Found nat_bits in checkpoint [ 1758.270321][T16010] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 1758.391709][T16009] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x4ec6003b, utbl_chksum : 0xe619d30d) [ 1758.410428][ T5126] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1758.422865][ T5126] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1758.436465][ T5126] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1758.447542][ T5126] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1758.758640][ T5126] usb 1-1: config 0 descriptor?? [ 1759.454322][ T29] audit: type=1800 audit(1718139327.079:1059): pid=16017 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="file1" dev="sda1" ino=1960 res=0 errno=0 [ 1759.476525][ T29] audit: type=1804 audit(1718139327.079:1060): pid=16017 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir2912577726/syzkaller.a1WAlQ/274/file1" dev="sda1" ino=1960 res=1 errno=0 [ 1759.533142][ T5126] usbhid 1-1:0.0: can't add hid device: -71 [ 1759.539891][ T5126] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1759.607291][ T5126] usb 1-1: USB disconnect, device number 13 [ 1759.858531][T11087] syz-executor.2: attempt to access beyond end of device [ 1759.858531][T11087] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1762.783306][T10195] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1762.817446][T10195] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1762.828113][T10195] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1762.843051][T10195] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1762.856249][T10195] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1763.101451][T10195] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1765.242944][T10195] Bluetooth: hci5: command tx timeout [ 1765.380333][ T1219] ieee802154 phy0 wpan0: encryption failed: -22 [ 1765.387225][ T1219] ieee802154 phy1 wpan1: encryption failed: -22 [ 1766.378893][T16040] chnl_net:caif_netlink_parms(): no params data found [ 1766.472542][T16057] loop3: detected capacity change from 0 to 2048 [ 1766.784157][T14747] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1766.872611][T16057] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1767.020673][T14747] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1767.317820][T14747] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1767.400240][T16067] loop1: detected capacity change from 0 to 128 [ 1767.416760][T10195] Bluetooth: hci5: command tx timeout [ 1767.517133][T12230] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1767.689820][T14747] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1768.213287][T14747] bridge_slave_0: left allmulticast mode [ 1768.219448][T14747] bridge_slave_0: left promiscuous mode [ 1768.234060][T14747] bridge0: port 1(bridge_slave_0) entered disabled state [ 1768.341475][T14747] veth1_to_bond: left allmulticast mode [ 1768.347445][T14747] veth1_to_bond: left promiscuous mode [ 1768.354447][T14747] bridge1: port 1(veth1_to_bond) entered disabled state [ 1769.274071][T14747] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1769.364684][T14747] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1769.422988][T14747] bond0 (unregistering): Released all slaves [ 1769.482201][T10195] Bluetooth: hci5: command tx timeout [ 1770.373207][T14747] hsr_slave_0: left promiscuous mode [ 1770.396329][T14747] hsr_slave_1: left promiscuous mode [ 1770.424141][T14747] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1770.432565][T14747] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1770.476553][T14747] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1770.487633][T14747] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1770.542680][T14747] veth1_macvtap: left promiscuous mode [ 1770.548667][T14747] veth0_macvtap: left promiscuous mode [ 1770.555275][T14747] veth1_vlan: left promiscuous mode [ 1770.560897][T14747] veth0_vlan: left promiscuous mode [ 1771.226341][T16088] loop2: detected capacity change from 0 to 1024 [ 1771.232146][ T29] audit: type=1804 audit(1718139338.909:1061): pid=16086 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir2148809523/syzkaller.LAyJbP/180/file1" dev="sda1" ino=1951 res=1 errno=0 [ 1771.292472][T16088] hfsplus: unable to parse mount options [ 1771.568159][T10195] Bluetooth: hci5: command tx timeout [ 1771.939874][T14747] team0 (unregistering): Port device team_slave_1 removed [ 1772.031165][ T29] audit: type=1800 audit(1718139339.609:1062): pid=16092 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=1946 res=0 errno=0 [ 1772.100545][T16092] loop3: detected capacity change from 0 to 512 [ 1772.115009][T14747] team0 (unregistering): Port device team_slave_0 removed [ 1772.379973][T16092] ext4: Unknown parameter 'nouser_xattr' [ 1773.569102][T16040] bridge0: port 1(bridge_slave_0) entered blocking state [ 1773.577029][T16040] bridge0: port 1(bridge_slave_0) entered disabled state [ 1773.585262][T16040] bridge_slave_0: entered allmulticast mode [ 1773.594832][T16040] bridge_slave_0: entered promiscuous mode [ 1773.812207][T16040] bridge0: port 2(bridge_slave_1) entered blocking state [ 1773.820309][T16040] bridge0: port 2(bridge_slave_1) entered disabled state [ 1773.828389][T16040] bridge_slave_1: entered allmulticast mode [ 1773.838028][T16040] bridge_slave_1: entered promiscuous mode [ 1773.866100][T11058] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 1774.158669][T16097] loop3: detected capacity change from 0 to 512 [ 1774.279249][T11058] usb 2-1: Using ep0 maxpacket: 16 [ 1774.352970][T16097] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1774.403114][T16040] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1774.494728][T11058] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 5.00 [ 1774.504438][T11058] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1774.600599][T16040] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1774.636588][T11058] usb 2-1: config 0 descriptor?? [ 1774.661292][T16097] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1774.675177][T16097] ext4 filesystem being mounted at /root/syzkaller-testdir2148809523/syzkaller.LAyJbP/182/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1774.760231][T11058] hub 2-1:0.0: bad descriptor, ignoring hub [ 1774.768354][T11058] hub 2-1:0.0: probe with driver hub failed with error -5 [ 1774.787047][T11058] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 1774.798284][T11058] usb 2-1: Detected FT2232C/D [ 1774.984625][T11058] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 1775.005417][T16040] team0: Port device team_slave_0 added [ 1775.059682][T11058] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 1775.081580][T11058] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1775.083837][T16040] team0: Port device team_slave_1 added [ 1775.124093][T12230] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1775.174644][T11058] usb 2-1: USB disconnect, device number 13 [ 1775.249704][T11058] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1775.260724][T11058] ftdi_sio 2-1:0.0: device disconnected [ 1775.332939][T16040] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1775.340306][T16040] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1775.367088][T16040] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1775.409933][T16040] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1775.417422][T16040] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1775.444083][T16040] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1776.118613][T16110] loop3: detected capacity change from 0 to 256 [ 1776.228283][T16040] hsr_slave_0: entered promiscuous mode [ 1776.479919][T16040] hsr_slave_1: entered promiscuous mode [ 1776.571355][T16040] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1776.579487][T16040] Cannot create hsr debugfs directory [ 1778.754047][T16128] loop1: detected capacity change from 0 to 1024 [ 1778.802925][T16128] hfsplus: unable to parse mount options [ 1778.913939][T16133] syz-executor.2[16133] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1778.914580][T16133] syz-executor.2[16133] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1778.977984][T10813] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 1779.524478][T10813] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1779.536109][T10813] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1779.546436][T10813] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1779.559967][T10813] usb 4-1: New USB device found, idVendor=11c2, idProduct=2208, bcdDevice= 0.00 [ 1779.569789][T10813] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1779.740558][T10813] usb 4-1: config 0 descriptor?? [ 1779.786607][T16040] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1779.829727][T16040] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1779.896188][T16040] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1780.869523][T16130] syz-executor.3[16130] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1780.870159][T16130] syz-executor.3[16130] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1780.952638][T16040] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1781.133138][T16142] loop4: detected capacity change from 0 to 512 [ 1781.261556][T16142] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 1781.271192][T16142] EXT4-fs (loop4): blocks per group (256) and clusters per group (32768) inconsistent [ 1782.543291][T10813] usbhid 4-1:0.0: can't add hid device: -71 [ 1782.550360][T10813] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1782.617951][T10813] usb 4-1: USB disconnect, device number 17 [ 1782.773742][T15846] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 1782.912132][T16040] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1783.190758][T15846] usb 3-1: config index 0 descriptor too short (expected 25275, got 18) [ 1783.200088][T15846] usb 3-1: config 42 has too many interfaces: 147, using maximum allowed: 32 [ 1783.209433][T15846] usb 3-1: config 42 has an invalid descriptor of length 0, skipping remainder of the config [ 1783.220089][T15846] usb 3-1: config 42 has 0 interfaces, different from the descriptor's value: 147 [ 1783.230121][T15846] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 1783.239640][T15846] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1783.277369][T16040] 8021q: adding VLAN 0 to HW filter on device team0 [ 1783.307662][T16151] loop1: detected capacity change from 0 to 512 [ 1783.367683][T16151] EXT4-fs: Ignoring removed i_version option [ 1783.433768][ T5126] bridge0: port 1(bridge_slave_0) entered blocking state [ 1783.442127][ T5126] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1783.462471][T16151] EXT4-fs (loop1): orphan cleanup on readonly fs [ 1783.469290][T16151] EXT4-fs error (device loop1): ext4_orphan_get:1420: comm syz-executor.1: bad orphan inode 1 [ 1783.508172][T16151] EXT4-fs (loop1): Remounting filesystem read-only [ 1783.515298][T16151] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1783.571394][ T5126] bridge0: port 2(bridge_slave_1) entered blocking state [ 1783.579400][ T5126] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1784.097104][T15846] usb 3-1: string descriptor 0 read error: -71 [ 1784.172491][T15846] usb 3-1: USB disconnect, device number 18 [ 1784.531636][T11248] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1785.496785][T14747] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1786.107336][T16166] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1786.283109][T16166] macvtap2: entered promiscuous mode [ 1786.289866][T16166] macvtap2: entered allmulticast mode [ 1786.301020][T16166] 8021q: adding VLAN 0 to HW filter on device macvtap2 [ 1786.589191][T16168] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1786.599361][T16168] macvtap2: left promiscuous mode [ 1786.610435][T16168] macvtap2: left allmulticast mode [ 1787.368755][T14747] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1787.670291][T14747] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1787.895839][T14747] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1787.970894][T16040] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1788.263448][T14747] bridge_slave_1: left allmulticast mode [ 1788.269424][T14747] bridge_slave_1: left promiscuous mode [ 1788.276516][T14747] bridge0: port 2(bridge_slave_1) entered disabled state [ 1788.303406][T11608] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 1788.332774][T14747] bridge_slave_0: left allmulticast mode [ 1788.338728][T14747] bridge_slave_0: left promiscuous mode [ 1788.346115][T14747] bridge0: port 1(bridge_slave_0) entered disabled state [ 1788.625235][T16177] loop3: detected capacity change from 0 to 1024 [ 1788.672774][T16177] hfsplus: unable to parse mount options [ 1788.723847][T11608] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1788.731077][T11608] usb 5-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 1788.740687][T11608] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1788.866718][T11608] usb 5-1: config 0 descriptor?? [ 1789.915374][T14747] bond0 (unregistering): left allmulticast mode [ 1789.922342][T14747] bond_slave_0: left allmulticast mode [ 1789.928124][T14747] bond_slave_1: left allmulticast mode [ 1789.944466][T14747] bond0 (unregistering): left promiscuous mode [ 1789.952388][T14747] bond_slave_0: left promiscuous mode [ 1789.961642][T14747] bond_slave_1: left promiscuous mode [ 1790.352225][T11608] video4linux radio32: keene_cmd_set failed (-71) [ 1790.358987][T11608] radio-keene 5-1:0.0: V4L2 device registered as radio32 [ 1790.488617][T11608] usb 5-1: USB disconnect, device number 15 [ 1790.663048][T14747] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1790.776591][T14747] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1790.854550][T14747] bond0 (unregistering): Released all slaves [ 1791.404082][ T5073] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1791.429123][ T5073] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1791.446205][ T5073] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1791.464409][ T5073] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1791.490829][ T5073] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1791.506793][ T5073] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1792.117242][T16040] veth0_vlan: entered promiscuous mode [ 1792.303151][T14747] hsr_slave_0: left promiscuous mode [ 1792.325385][T14747] hsr_slave_1: left promiscuous mode [ 1792.358009][T14747] veth1_macvtap: left promiscuous mode [ 1792.363850][T14747] veth0_macvtap: left promiscuous mode [ 1792.369663][T14747] veth1_vlan: left promiscuous mode [ 1792.375494][T14747] veth0_vlan: left promiscuous mode [ 1792.625307][ T5126] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 1793.290536][ T5126] usb 5-1: config index 0 descriptor too short (expected 25275, got 18) [ 1793.299499][ T5126] usb 5-1: config 42 has too many interfaces: 147, using maximum allowed: 32 [ 1793.309090][ T5126] usb 5-1: config 42 has an invalid descriptor of length 0, skipping remainder of the config [ 1793.322552][ T5126] usb 5-1: config 42 has 0 interfaces, different from the descriptor's value: 147 [ 1793.333206][ T5126] usb 5-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 1793.342816][ T5126] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1793.387599][T14747] team0 (unregistering): Port device team_slave_1 removed [ 1793.459851][T14747] team0 (unregistering): Port device team_slave_0 removed [ 1793.653128][ T5073] Bluetooth: hci0: command tx timeout [ 1794.040700][T16040] veth1_vlan: entered promiscuous mode [ 1794.372590][ T5126] usb 5-1: string descriptor 0 read error: -71 [ 1794.383365][ T5126] usb 5-1: USB disconnect, device number 16 [ 1794.635409][T16040] veth0_macvtap: entered promiscuous mode [ 1794.706427][T16205] loop3: detected capacity change from 0 to 8 [ 1794.751848][T16040] veth1_macvtap: entered promiscuous mode [ 1794.794186][T16205] unable to read id index table [ 1794.839457][T16207] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 1794.921750][T16206] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 1794.943198][T16184] chnl_net:caif_netlink_parms(): no params data found [ 1795.000580][T16040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1795.011735][T16040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1795.022245][T16040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1795.033164][T16040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1795.048683][T16040] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1795.319448][T16205] netlink: 'syz-executor.3': attribute type 12 has an invalid length. [ 1795.361697][T16040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1795.375798][T16040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1795.386745][T16040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1795.397803][T16040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1795.416738][T16040] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1795.551318][T16040] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1795.560810][T16040] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1795.573113][T16040] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1795.583144][T16040] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1795.732376][ T5073] Bluetooth: hci0: command tx timeout [ 1795.748911][T16205] loop3: detected capacity change from 0 to 1764 [ 1795.892778][T16216] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1795.919674][T16216] vlan2: entered promiscuous mode [ 1795.925185][T16216] macvtap0: entered promiscuous mode [ 1795.933073][T16216] vlan2: entered allmulticast mode [ 1795.938497][T16216] macvtap0: entered allmulticast mode [ 1795.944719][T16216] veth0_macvtap: entered allmulticast mode [ 1795.986401][T16216] macvtap0: left allmulticast mode [ 1795.992548][T16216] veth0_macvtap: left allmulticast mode [ 1795.998487][T16216] macvtap0: left promiscuous mode [ 1796.359132][T16211] loop3: detected capacity change from 0 to 512 [ 1796.468372][T16211] EXT4-fs (loop3): blocks per group (71) and clusters per group (20800) inconsistent [ 1796.897359][T16184] bridge0: port 1(bridge_slave_0) entered blocking state [ 1796.910950][T16184] bridge0: port 1(bridge_slave_0) entered disabled state [ 1796.919149][T16184] bridge_slave_0: entered allmulticast mode [ 1796.928625][T16184] bridge_slave_0: entered promiscuous mode [ 1797.095477][T16184] bridge0: port 2(bridge_slave_1) entered blocking state [ 1797.106649][T16184] bridge0: port 2(bridge_slave_1) entered disabled state [ 1797.114727][T16184] bridge_slave_1: entered allmulticast mode [ 1797.124257][T16184] bridge_slave_1: entered promiscuous mode [ 1797.521502][T16184] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1797.633803][T16184] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1797.779024][T16232] loop2: detected capacity change from 0 to 1024 [ 1797.802270][ T5073] Bluetooth: hci0: command tx timeout [ 1797.844785][T16232] hfsplus: unable to parse mount options [ 1797.953859][T16184] team0: Port device team_slave_0 added [ 1798.072765][T16184] team0: Port device team_slave_1 added [ 1798.105785][T16235] loop3: detected capacity change from 0 to 1024 [ 1798.184938][T16235] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1798.299076][T16184] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1798.306653][T16184] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1798.336737][T16184] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1798.439215][T16184] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1798.447042][T16184] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1798.474009][T16184] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1798.501098][T16235] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1799.511107][T12230] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1799.827507][T16184] hsr_slave_0: entered promiscuous mode [ 1799.932432][ T5073] Bluetooth: hci0: command tx timeout [ 1799.940293][T16184] hsr_slave_1: entered promiscuous mode [ 1800.022498][T16184] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1800.030461][T16184] Cannot create hsr debugfs directory [ 1802.073814][ T5126] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 1802.514622][T16259] syz-executor.2: attempt to access beyond end of device [ 1802.514622][T16259] nbd2: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1802.528374][T16259] FAT-fs (nbd2): unable to read boot sector [ 1804.263597][ T5126] usb 5-1: config index 0 descriptor too short (expected 25275, got 18) [ 1804.274920][ T5126] usb 5-1: config 42 has too many interfaces: 147, using maximum allowed: 32 [ 1804.285052][ T5126] usb 5-1: config 42 has an invalid descriptor of length 0, skipping remainder of the config [ 1804.296070][ T5126] usb 5-1: config 42 has 0 interfaces, different from the descriptor's value: 147 [ 1804.305992][ T5126] usb 5-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 1804.315517][ T5126] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1804.518167][T16184] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1804.557764][T16184] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1804.589550][T16184] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1804.642491][T16262] netlink: 332 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1804.669270][T16184] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1804.872674][ T5126] usb 5-1: string descriptor 0 read error: -71 [ 1804.933123][ T5126] usb 5-1: USB disconnect, device number 17 [ 1805.120454][T16270] loop3: detected capacity change from 0 to 64 [ 1805.839779][T16278] loop4: detected capacity change from 0 to 256 [ 1805.931846][T16184] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1806.177166][T16184] 8021q: adding VLAN 0 to HW filter on device team0 [ 1806.240399][T10813] bridge0: port 1(bridge_slave_0) entered blocking state [ 1806.248308][T10813] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1806.371988][T10813] bridge0: port 2(bridge_slave_1) entered blocking state [ 1806.379795][T10813] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1807.030179][T16184] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1809.565194][ T7472] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1809.573506][ T7472] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1809.977948][T15846] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1809.986393][T15846] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1811.708970][T16184] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1812.557390][T16184] veth0_vlan: entered promiscuous mode [ 1812.757335][T16184] veth1_vlan: entered promiscuous mode [ 1813.833576][T16184] veth0_macvtap: entered promiscuous mode [ 1814.108777][T16184] veth1_macvtap: entered promiscuous mode [ 1814.500259][T16184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1814.514004][T16184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1814.525113][T16184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1814.535932][T16184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1814.546112][T16184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1814.556908][T16184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1814.572851][T16184] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1815.135791][T16184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1815.146733][T16184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1815.157000][T16184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1815.167950][T16184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1815.178265][T16184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1815.189283][T16184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1815.205039][T16184] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1815.808411][T16184] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1815.820493][T16184] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1815.830309][T16184] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1815.839542][T16184] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1817.905134][ T5119] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 1818.307166][ T5119] usb 5-1: config index 0 descriptor too short (expected 25275, got 18) [ 1818.316240][ T5119] usb 5-1: config 42 has too many interfaces: 147, using maximum allowed: 32 [ 1818.325519][ T5119] usb 5-1: config 42 has an invalid descriptor of length 0, skipping remainder of the config [ 1818.336152][ T5119] usb 5-1: config 42 has 0 interfaces, different from the descriptor's value: 147 [ 1818.345848][ T5119] usb 5-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 1818.355369][ T5119] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1819.142737][ T5119] usb 5-1: string descriptor 0 read error: -71 [ 1819.183315][ T5119] usb 5-1: USB disconnect, device number 18 [ 1820.473900][T16403] loop0: detected capacity change from 0 to 1024 [ 1820.535507][T16403] EXT4-fs: Ignoring removed orlov option [ 1820.612550][T16403] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1820.777201][T16403] loop0: detected capacity change from 1024 to 0 [ 1820.791012][T16414] syz-executor.0: attempt to access beyond end of device [ 1820.791012][T16414] loop0: rw=524288, sector=10, nr_sectors = 2 limit=0 [ 1820.805711][T16414] syz-executor.0: attempt to access beyond end of device [ 1820.805711][T16414] loop0: rw=524288, sector=12, nr_sectors = 2 limit=0 [ 1820.820221][T16414] syz-executor.0: attempt to access beyond end of device [ 1820.820221][T16414] loop0: rw=524288, sector=14, nr_sectors = 2 limit=0 [ 1820.834793][T16414] syz-executor.0: attempt to access beyond end of device [ 1820.834793][T16414] loop0: rw=524288, sector=18, nr_sectors = 2 limit=0 [ 1820.851778][T16414] syz-executor.0: attempt to access beyond end of device [ 1820.851778][T16414] loop0: rw=524288, sector=20, nr_sectors = 2 limit=0 [ 1820.869315][T16414] syz-executor.0: attempt to access beyond end of device [ 1820.869315][T16414] loop0: rw=524288, sector=22, nr_sectors = 2 limit=0 [ 1820.884457][T16414] syz-executor.0: attempt to access beyond end of device [ 1820.884457][T16414] loop0: rw=524288, sector=24, nr_sectors = 2 limit=0 [ 1820.898671][T16414] syz-executor.0: attempt to access beyond end of device [ 1820.898671][T16414] loop0: rw=524288, sector=26, nr_sectors = 2 limit=0 [ 1820.912840][T16414] syz-executor.0: attempt to access beyond end of device [ 1820.912840][T16414] loop0: rw=12288, sector=16, nr_sectors = 2 limit=0 [ 1820.927595][T16414] EXT4-fs error (device loop0): ext4_get_inode_loc:4502: inode #15: block 8: comm syz-executor.0: unable to read itable block [ 1820.941271][T16414] syz-executor.0: attempt to access beyond end of device [ 1820.941271][T16414] loop0: rw=145409, sector=2, nr_sectors = 2 limit=0 [ 1820.955916][T16414] buffer_io_error: 2 callbacks suppressed [ 1820.956001][T16414] Buffer I/O error on dev loop0, logical block 1, lost sync page write [ 1820.973521][T16414] EXT4-fs (loop0): I/O error while writing superblock [ 1820.981040][T16414] EXT4-fs error (device loop0): ext4_get_inode_loc:4502: inode #15: block 8: comm syz-executor.0: unable to read itable block [ 1820.995399][T16414] Buffer I/O error on dev loop0, logical block 1, lost sync page write [ 1821.004964][T16414] EXT4-fs (loop0): I/O error while writing superblock [ 1821.013558][T16414] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5738: IO failure [ 1821.022871][T16414] Buffer I/O error on dev loop0, logical block 1, lost sync page write [ 1821.031393][T16414] EXT4-fs (loop0): I/O error while writing superblock [ 1821.038751][T16414] EXT4-fs error (device loop0): ext4_dirty_inode:5942: inode #15: comm syz-executor.0: mark_inode_dirty error [ 1821.051033][T16414] Buffer I/O error on dev loop0, logical block 1, lost sync page write [ 1821.059759][T16414] EXT4-fs (loop0): I/O error while writing superblock [ 1821.069638][T16414] EXT4-fs error (device loop0): ext4_get_inode_loc:4502: inode #15: block 8: comm syz-executor.0: unable to read itable block [ 1821.084011][T16414] Buffer I/O error on dev loop0, logical block 1, lost sync page write [ 1821.092702][T16414] EXT4-fs (loop0): I/O error while writing superblock [ 1821.099857][T16414] EXT4-fs error (device loop0): ext4_get_max_inline_size:116: inode #15: comm syz-executor.0: can't get inode location 15 [ 1821.113242][T16414] Buffer I/O error on dev loop0, logical block 1, lost sync page write [ 1821.121786][T16414] EXT4-fs (loop0): I/O error while writing superblock [ 1821.129391][T16414] EXT4-fs error (device loop0): ext4_get_inode_loc:4502: inode #15: block 8: comm syz-executor.0: unable to read itable block [ 1821.143076][T16414] Buffer I/O error on dev loop0, logical block 1, lost sync page write [ 1821.151614][T16414] EXT4-fs (loop0): I/O error while writing superblock [ 1821.241247][T16413] loop3: detected capacity change from 0 to 2048 [ 1821.319397][T16417] pim6reg1: entered promiscuous mode [ 1821.325382][T16417] pim6reg1: entered allmulticast mode [ 1821.471030][T16413] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1821.488557][T16413] ext4 filesystem being mounted at /root/syzkaller-testdir2148809523/syzkaller.LAyJbP/204/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1821.598103][T16423] loop4: detected capacity change from 0 to 64 [ 1821.748993][ T29] audit: type=1804 audit(1718139389.419:1063): pid=16413 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir2148809523/syzkaller.LAyJbP/204/file0/file0/file0" dev="loop3" ino=13 res=1 errno=0 [ 1821.795043][T16040] EXT4-fs error (device loop0): ext4_get_inode_loc:4502: inode #2: block 5: comm syz-executor.0: unable to read itable block [ 1821.811243][T16040] Buffer I/O error on dev loop0, logical block 1, lost sync page write [ 1821.820924][T16040] EXT4-fs (loop0): I/O error while writing superblock [ 1821.828151][T16040] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5738: IO failure [ 1821.837586][T16040] Buffer I/O error on dev loop0, logical block 1, lost sync page write [ 1821.846379][T16040] EXT4-fs (loop0): I/O error while writing superblock [ 1821.853720][T16040] EXT4-fs error (device loop0): ext4_dirty_inode:5942: inode #2: comm syz-executor.0: mark_inode_dirty error [ 1821.869620][T16040] Buffer I/O error on dev loop0, logical block 1, lost sync page write [ 1821.945586][T12230] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1822.304036][T14747] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1822.312325][T14747] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1822.434885][ T5126] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1822.443451][ T5126] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1823.204408][ T7472] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1823.514175][T16442] loop4: detected capacity change from 0 to 1024 [ 1823.538530][ T7472] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1824.103294][ T4034] hfsplus: b-tree write err: -5, ino 4 [ 1824.119209][T16445] loop2: detected capacity change from 0 to 2048 [ 1824.289602][ T7472] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1824.465762][T16445] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1824.478769][T16445] ext4 filesystem being mounted at /root/syzkaller-testdir3030163302/syzkaller.IT5jgI/339/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1824.710880][ T29] audit: type=1804 audit(1718139392.409:1064): pid=16450 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir3030163302/syzkaller.IT5jgI/339/file0/file0/file0" dev="loop2" ino=13 res=1 errno=0 [ 1824.719969][ T7472] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1824.737853][ T29] audit: type=1800 audit(1718139392.449:1065): pid=16445 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.2" name="file0" dev="loop2" ino=13 res=0 errno=0 [ 1824.912710][T16455] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow [ 1824.953930][ T29] audit: type=1804 audit(1718139392.659:1066): pid=16455 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir231328980/syzkaller.ABIGR5/99/.log" dev="sda1" ino=1964 res=1 errno=0 [ 1825.396629][ T7472] bridge_slave_1: left allmulticast mode [ 1825.405510][ T7472] bridge_slave_1: left promiscuous mode [ 1825.412539][ T7472] bridge0: port 2(bridge_slave_1) entered disabled state [ 1825.555004][ T7472] bridge_slave_0: left allmulticast mode [ 1825.561274][ T7472] bridge_slave_0: left promiscuous mode [ 1825.568411][ T7472] bridge0: port 1(bridge_slave_0) entered disabled state [ 1825.744931][T11087] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1826.547421][T16462] loop4: detected capacity change from 0 to 256 [ 1827.350367][ T1219] ieee802154 phy0 wpan0: encryption failed: -22 [ 1827.357604][ T1219] ieee802154 phy1 wpan1: encryption failed: -22 [ 1828.406390][T16470] loop2: detected capacity change from 0 to 1024 [ 1830.272912][ T7472] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1830.499258][ T5073] Bluetooth: hci4: unexpected event for opcode 0x0809 [ 1830.888827][T16462] FAT-fs (loop4): Directory bread(block 64) failed [ 1830.903409][T16462] FAT-fs (loop4): Directory bread(block 65) failed [ 1830.910523][T16462] FAT-fs (loop4): Directory bread(block 66) failed [ 1830.919224][T16462] FAT-fs (loop4): Directory bread(block 67) failed [ 1830.926350][T16462] FAT-fs (loop4): Directory bread(block 68) failed [ 1830.933581][T16462] FAT-fs (loop4): Directory bread(block 69) failed [ 1830.940565][T16462] FAT-fs (loop4): Directory bread(block 70) failed [ 1830.947575][T16462] FAT-fs (loop4): Directory bread(block 71) failed [ 1830.954647][T16462] FAT-fs (loop4): Directory bread(block 72) failed [ 1830.961444][T16462] FAT-fs (loop4): Directory bread(block 73) failed [ 1831.042844][ T7472] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1831.298123][ T7472] bond0 (unregistering): Released all slaves [ 1831.731449][T10195] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1831.742282][T10195] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1831.763360][T10195] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1831.780605][T10195] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1831.795908][T10195] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1831.806568][T10195] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1833.211492][T16483] loop4: detected capacity change from 0 to 8192 [ 1833.289468][T16483] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1833.680306][ T29] audit: type=1800 audit(1718139401.329:1067): pid=16483 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="loop4" ino=1048764 res=0 errno=0 [ 1833.970753][T10195] Bluetooth: hci2: command tx timeout [ 1834.662185][ T7472] hsr_slave_0: left promiscuous mode [ 1834.671520][T16502] loop3: detected capacity change from 0 to 2048 [ 1834.763368][ T7472] hsr_slave_1: left promiscuous mode [ 1834.814287][T16502] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1834.827281][T16502] ext4 filesystem being mounted at /root/syzkaller-testdir2148809523/syzkaller.LAyJbP/211/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1834.894176][ T7472] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1834.902435][ T7472] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1834.910236][ T29] audit: type=1804 audit(1718139402.619:1068): pid=16502 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir2148809523/syzkaller.LAyJbP/211/file0/file0/file0" dev="loop3" ino=13 res=1 errno=0 [ 1834.977278][ T7472] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1834.985268][ T7472] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1835.098096][T12230] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1835.123189][ T7472] veth1_macvtap: left promiscuous mode [ 1835.129006][ T7472] veth0_macvtap: left promiscuous mode [ 1835.135575][ T7472] veth1_vlan: left promiscuous mode [ 1835.141211][ T7472] veth0_vlan: left promiscuous mode [ 1836.008117][ T29] audit: type=1800 audit(1718139403.699:1069): pid=16507 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="file1" dev="sda1" ino=1946 res=0 errno=0 [ 1836.079709][T10195] Bluetooth: hci2: command tx timeout [ 1836.766543][ T7472] team0 (unregistering): Port device team_slave_1 removed [ 1836.905601][ T7472] team0 (unregistering): Port device team_slave_0 removed [ 1837.412335][T16478] chnl_net:caif_netlink_parms(): no params data found [ 1838.122369][T10195] Bluetooth: hci2: command tx timeout [ 1839.310276][T16478] bridge0: port 1(bridge_slave_0) entered blocking state [ 1839.318765][T16478] bridge0: port 1(bridge_slave_0) entered disabled state [ 1839.326940][T16478] bridge_slave_0: entered allmulticast mode [ 1839.336646][T16478] bridge_slave_0: entered promiscuous mode [ 1839.457929][T16478] bridge0: port 2(bridge_slave_1) entered blocking state [ 1839.466431][T16478] bridge0: port 2(bridge_slave_1) entered disabled state [ 1839.474737][T16478] bridge_slave_1: entered allmulticast mode [ 1839.484477][T16478] bridge_slave_1: entered promiscuous mode [ 1839.689240][T16542] loop4: detected capacity change from 0 to 2048 [ 1839.905886][T16478] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1840.026097][T16542] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1840.039102][T16542] ext4 filesystem being mounted at /root/syzkaller-testdir231328980/syzkaller.ABIGR5/105/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1840.104789][T16478] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1840.293031][T10195] Bluetooth: hci2: command tx timeout [ 1840.581066][T16545] loop1: detected capacity change from 0 to 32768 [ 1840.740642][T14165] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1840.741591][T16478] team0: Port device team_slave_0 added [ 1840.777182][T16543] loop3: detected capacity change from 0 to 8192 [ 1840.865930][T16545] bcachefs (loop1): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=crc64,data_checksum=xxhash,compression=gzip,str_hash=crc64,nojournal_transaction_names [ 1840.884021][T16545] bcachefs (loop1): recovering from clean shutdown, journal seq 7 [ 1840.942264][T16543] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1841.070108][T16478] team0: Port device team_slave_1 added [ 1841.112641][T16545] bcachefs (loop1): alloc_read... done [ 1841.118600][T16545] bcachefs (loop1): stripes_read... done [ 1841.124816][T16545] bcachefs (loop1): snapshots_read... done [ 1841.147937][T16545] bcachefs (loop1): journal_replay... done [ 1841.154196][T16545] bcachefs (loop1): resume_logged_ops... done [ 1841.220032][T16545] bcachefs (loop1): going read-write [ 1841.265649][T16545] bcachefs (loop1): done starting filesystem [ 1841.330007][T16557] ===================================================== [ 1841.337591][T16557] BUG: KMSAN: uninit-value in crc64_be+0x202/0x310 [ 1841.347061][T16557] crc64_be+0x202/0x310 [ 1841.351370][T16557] bch2_checksum_update+0x15e/0x1d0 [ 1841.357759][T16557] bch2_checksum+0x3c5/0x7c0 [ 1841.362694][T16557] __bch2_btree_node_write+0x528c/0x67c0 [ 1841.368479][T16557] bch2_btree_node_write+0xa5/0x2e0 [ 1841.373934][T16557] __btree_node_flush+0x4d0/0x640 2024/06/11 20:56:49 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 1841.379085][T16557] bch2_btree_node_flush0+0x35/0x60 [ 1841.384590][T16557] journal_flush_pins+0xce6/0x1780 [ 1841.389980][T16557] __bch2_journal_reclaim+0xd88/0x1610 [ 1841.396620][T16557] bch2_journal_reclaim_thread+0x18e/0x760 [ 1841.402776][T16557] kthread+0x3e2/0x540 [ 1841.407009][T16557] ret_from_fork+0x6d/0x90 [ 1841.411553][T16557] ret_from_fork_asm+0x1a/0x30 [ 1841.416581][T16557] [ 1841.418970][T16557] Uninit was stored to memory at: [ 1841.425190][T16557] bch2_sort_keys+0x1b4d/0x2cb0 [ 1841.430312][T16557] __bch2_btree_node_write+0x3acd/0x67c0 [ 1841.436363][T16557] bch2_btree_node_write+0xa5/0x2e0 [ 1841.441832][T16557] __btree_node_flush+0x4d0/0x640 [ 1841.450550][T16557] bch2_btree_node_flush0+0x35/0x60 [ 1841.457129][T16557] journal_flush_pins+0xce6/0x1780 [ 1841.462614][T16557] __bch2_journal_reclaim+0xd88/0x1610 [ 1841.468298][T16557] bch2_journal_reclaim_thread+0x18e/0x760 [ 1841.474429][T16557] kthread+0x3e2/0x540 [ 1841.478706][T16557] ret_from_fork+0x6d/0x90 [ 1841.483401][T16557] ret_from_fork_asm+0x1a/0x30 [ 1841.488323][T16557] [ 1841.490725][T16557] Uninit was created at: [ 1841.495229][T16557] __kmalloc_large_node+0x231/0x370 [ 1841.500546][T16557] __kmalloc_node+0xb10/0x10c0 [ 1841.505521][T16557] kvmalloc_node+0xc0/0x2d0 [ 1841.510164][T16557] bch2_btree_node_read_done+0x4e68/0x75e0 [ 1841.517133][T16557] btree_node_read_work+0x8a5/0x1eb0 [ 1841.522700][T16557] bch2_btree_node_read+0x3d42/0x4b50 [ 1841.528219][T16557] bch2_btree_root_read+0xa6c/0x13d0 [ 1841.533730][T16557] read_btree_roots+0x454/0xee0 [ 1841.538771][T16557] bch2_fs_recovery+0x7b6a/0x93e0 [ 1841.544197][T16557] bch2_fs_start+0x7b2/0xbd0 [ 1841.551247][T16557] bch2_fs_open+0x152a/0x15f0 [ 1841.556840][T16557] bch2_mount+0x90d/0x1d90 [ 1841.561430][T16557] legacy_get_tree+0x114/0x290 [ 1841.566509][T16557] vfs_get_tree+0xa7/0x570 [ 1841.571120][T16557] do_new_mount+0x71f/0x15e0 [ 1841.575972][T16557] path_mount+0x742/0x1f20 [ 1841.580550][T16557] __se_sys_mount+0x725/0x810 [ 1841.585488][T16557] __x64_sys_mount+0xe4/0x150 [ 1841.590318][T16557] x64_sys_call+0x2bf4/0x3b50 [ 1841.595248][T16557] do_syscall_64+0xcf/0x1e0 [ 1841.600005][T16557] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1841.606378][T16557] [ 1841.608780][T16557] CPU: 1 PID: 16557 Comm: bch-reclaim/loo Not tainted 6.9.0-syzkaller-02707-g614da38e2f7a #0 [ 1841.619168][T16557] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 1841.629452][T16557] ===================================================== [ 1841.636568][T16557] Disabling lock debugging due to kernel taint [ 1841.644497][T16557] Kernel panic - not syncing: kmsan.panic set ... [ 1841.651022][T16557] CPU: 1 PID: 16557 Comm: bch-reclaim/loo Tainted: G B 6.9.0-syzkaller-02707-g614da38e2f7a #0 [ 1841.662857][T16557] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 1841.673115][T16557] Call Trace: [ 1841.676477][T16557] [ 1841.679485][T16557] dump_stack_lvl+0x216/0x2d0 [ 1841.684319][T16557] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 1841.690269][T16557] dump_stack+0x1e/0x30 [ 1841.694559][T16557] panic+0x4e2/0xcd0 [ 1841.698642][T16557] ? kmsan_get_metadata+0xf1/0x1d0 [ 1841.703920][T16557] kmsan_report+0x2d5/0x2e0 [ 1841.708573][T16557] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 1841.714524][T16557] ? __msan_warning+0x95/0x120 [ 1841.719401][T16557] ? crc64_be+0x202/0x310 [ 1841.723871][T16557] ? bch2_checksum_update+0x15e/0x1d0 [ 1841.729393][T16557] ? bch2_checksum+0x3c5/0x7c0 [ 1841.734293][T16557] ? __bch2_btree_node_write+0x528c/0x67c0 [ 1841.740254][T16557] ? bch2_btree_node_write+0xa5/0x2e0 [ 1841.745859][T16557] ? __btree_node_flush+0x4d0/0x640 [ 1841.751240][T16557] ? bch2_btree_node_flush0+0x35/0x60 [ 1841.756839][T16557] ? journal_flush_pins+0xce6/0x1780 [ 1841.762287][T16557] ? __bch2_journal_reclaim+0xd88/0x1610 [ 1841.768079][T16557] ? bch2_journal_reclaim_thread+0x18e/0x760 [ 1841.774205][T16557] ? kthread+0x3e2/0x540 [ 1841.778602][T16557] ? ret_from_fork+0x6d/0x90 [ 1841.783322][T16557] ? ret_from_fork_asm+0x1a/0x30 [ 1841.788428][T16557] ? filter_irq_stacks+0x60/0x1a0 [ 1841.793676][T16557] ? stack_depot_save_flags+0x2c/0x6e0 [ 1841.799322][T16557] ? kmsan_get_metadata+0x146/0x1d0 [ 1841.804656][T16557] ? kmsan_get_metadata+0x146/0x1d0 [ 1841.809977][T16557] ? kmsan_internal_set_shadow_origin+0x66/0xe0 [ 1841.816368][T16557] ? kmsan_get_metadata+0x146/0x1d0 [ 1841.821684][T16557] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 1841.827628][T16557] ? kmsan_get_metadata+0x146/0x1d0 [ 1841.832972][T16557] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 1841.838914][T16557] __msan_warning+0x95/0x120 [ 1841.843617][T16557] crc64_be+0x202/0x310 [ 1841.847921][T16557] bch2_checksum_update+0x15e/0x1d0 [ 1841.853307][T16557] bch2_checksum+0x3c5/0x7c0 [ 1841.858127][T16557] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 1841.864086][T16557] ? kmsan_get_metadata+0x146/0x1d0 [ 1841.869409][T16557] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 1841.875357][T16557] ? bch2_sort_keys+0x2bf8/0x2cb0 [ 1841.880534][T16557] ? kvmalloc_node+0xc0/0x2d0 [ 1841.885346][T16557] ? kmsan_get_metadata+0x146/0x1d0 [ 1841.890673][T16557] ? kmsan_get_metadata+0x146/0x1d0 [ 1841.896001][T16557] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 1841.902136][T16557] __bch2_btree_node_write+0x528c/0x67c0 [ 1841.908062][T16557] ? kmsan_get_metadata+0x146/0x1d0 [ 1841.913464][T16557] bch2_btree_node_write+0xa5/0x2e0 [ 1841.918833][T16557] __btree_node_flush+0x4d0/0x640 [ 1841.923999][T16557] ? __btree_node_flush+0xd1/0x640 [ 1841.929272][T16557] ? __pfx_bch2_btree_node_flush0+0x10/0x10 [ 1841.935306][T16557] bch2_btree_node_flush0+0x35/0x60 [ 1841.940649][T16557] journal_flush_pins+0xce6/0x1780 [ 1841.945947][T16557] __bch2_journal_reclaim+0xd88/0x1610 [ 1841.951551][T16557] ? kmsan_get_metadata+0x146/0x1d0 [ 1841.956962][T16557] bch2_journal_reclaim_thread+0x18e/0x760 [ 1841.963026][T16557] kthread+0x3e2/0x540 [ 1841.967336][T16557] ? __pfx_bch2_journal_reclaim_thread+0x10/0x10 [ 1841.973812][T16557] ? __pfx_kthread+0x10/0x10 [ 1841.978555][T16557] ret_from_fork+0x6d/0x90 [ 1841.983098][T16557] ? __pfx_kthread+0x10/0x10 [ 1841.987828][T16557] ret_from_fork_asm+0x1a/0x30 [ 1841.992767][T16557] [ 1841.996286][T16557] Kernel Offset: disabled [ 1842.000694][T16557] Rebooting in 86400 seconds..