last executing test programs: 30.313504281s ago: executing program 3 (id=321): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000400)='./file1\x00', 0x200000, &(0x7f0000000780)={[{@jqfmt_vfsv1}, {@min_batch_time={'min_batch_time', 0x3d, 0xc0}}, {@noblock_validity}, {@noauto_da_alloc}, {@i_version}, {@errors_remount}, {@resgid}, {@grpquota}, {@sysvgroups}]}, 0xfd, 0x580, &(0x7f00000016c0)="$eJzs3V1rHNUbAPBnNtm+//9NoRT1Qgq9sFK72yS+VBCsl6LFgt63S7INJZtuyW5KEwu2F/bGGymCiAXxA3jvZfEL+CkKWihSggoiRGYzG6fNbpJut82a/f1gknNmZvfMszNneM7MLhPA0Dqa/ilEvBgRXyYRB3PLRiNbeHR1veWH16fSKYmVlY9/SyLJ5rXXT7L/+7PKCxHx0+cRJwrr220sLs1WarXqfFYvN+eulBuLSycvzVVmqjPVyxOTk6ffmJx4+603+xbrq+f++Oaju++f/uLY8tc/3D90O4kzcSBblo/jKdzIV45W/s5KxTjz2IrjfWhskCTbvQH0ZCTr58VIzwEHYyTr9cDO91lErABDKtH/YUi184D22L7DOHjk+Wclz8+D91YHQOvjH129NhJ7WmOjfcvJIyOjdLw71of20zZ+/PXO7XSKja9D7N2kDvBEbtyMiFOjo+vPf0l2/uvdqdbF44093kafrsMCW3A3zX9e65T/FNbyn+iQ/+zv0Hd7sXn/L9zvQzNdpfnfOx3z37VT19hIVvtfK+crJhcv1aqnIuL/EXE8irvT+kb3c04v31vptiyf/6VT2n47F8y24/7o7kdfM11pVp4m5rwHNyNe6pj/Jmv7P+mw/9PP49wW2zhSvfNyvp6/SbZ5/J0lfbrjtPJ9xCsd93+Sayui3K6svz9Zbh0P5fZRsd7vt4783K39XuPvl3T/79s4/rEkf7+2sbX3zQ9OvtvzV7Xber0e/7uST1rlXdm8a5Vmc348Ylfy4fr5E/++tl1vr5/Gf/xYRGxw/ut0/KfxXYgtJDgRcevwrQu9x/9spfFPP9H+f/LCvQ8+/bZb+1vb/6+3SsezOd3Of3/mylvdwKf9/AAAAAAAAGCQFCLiQCSF0lq5UCiVVr/fcTj2FWr1RvPExfrC5elo/VZ2LIqF9p3ug7nvQ4xn34dt1yceq09GxKGI+Gpkb6temqrXprc7eAAAAAAAAAAAAAAAAAAAABgQ+4udf/+f+mVHP/kLaGk92GD3dm8FsB02feR/P570BAykTfs/sGPp/zC89H8YXvo/DC/9H4aX/g/DS/+H4aX/AwAAAAAAAAAAAAAAAAAAAAAAAAAAQF+dO3s2nVaWH16fSuvTVxcXZutXT05XG7OluYWp0lR9/kpppl6fqVVLU/W5zd6vVq9fGZ+IhWvlZrXRLDcWl87P1RcuN89fmqvMVM9Xi88lKgAAAAAAAAAAAAAAAAAAAPhvaSwuzVZqteq8QtfCuzEQm/EsA1zV08tHByUKhb4WtvnEBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA5/wQAAP//R9Azzw==") chdir(&(0x7f0000000080)='./file0\x00') lsetxattr$trusted_overlay_upper(&(0x7f0000000180)='./file1\x00', &(0x7f00000001c0), &(0x7f0000000200)=ANY=[], 0xe01, 0x0) rename(&(0x7f0000000300)='./file0\x00', &(0x7f00000000c0)='./file1\x00') creat(&(0x7f0000000000)='./bus\x00', 0x109) 29.576254188s ago: executing program 3 (id=324): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000051fa7824c74186dc02ec0696c37b64e3b24da3180100000005165c0f63cdc2e82818254950ee03568b8809a1ff4c7c4750eabfafcb9531b31e6a86827d1010c5a909ab98e00e19644a88e95ba26d1c9eecddb2d11c541418ceeb29b9b6829c6e433822bdb3cc85244aab60c1aae1314d7381fcfeb970bea672cf1e926f6a51479343144648a07a975bd89dc398712376610f6254f12495b4658319684387f6f3543205d4bc4ce05b8b961103673dff7f158052e62b20f05fd24108d8363d44fcd0f8f3647899762a17282a1914452d11f557c28f396eebdc858558db0276d14f9035f2b5f703e5be7e4acf8b78c2834ae5805fffee38a9a0033d520bcf6b08ede50899d4b9bdf85c71c5de2503dab358f42a2624c7daa9ed44039aab46419496362e54cfad05a0004ac71a003d7b85d07191bed4e5a890826300214146f7ed569985439baa355c2766dd056f5d79e454f3d873095e7a237bc06d035a8d601f21746d886419f38b34a495040000000071c2f0cce8c93cc17e9afa314fcb2ba15d646c66b0f65021829f87d988b4e2d71753b1549fa734f0b2e56dbd21ed2e09d0cddad721971637f384eed3034597c93e1c52f42cad0ed09c395dc6e9703660fefa1c80f467367c006f25caf0cbcefd13d68839893e39c588eb032905f91cafa4996dbf0c9be9654db05fb918086cc8228d02a3092c0830b8f587a5624515298b2d4eb2bde6f9a2eb83d53f717f13fa7552d92c51dbd32ea50c490ecd085d2811a7555c538cffffff7f00000000dd872244bfa64779e0f43a9c277e2910b7ccdc3d6726d34ad2101033a623ca2a49ad344884289130bc71cee2b7de62bf48129ae1af052a2d46a61625735a9eea7f793946b3229e861d8ea49806b3f7d4295f6b000000000000f337b1ceb2d8a65dcdcd895d7ba37098d2593fdaaef445af5bee02019c00000099b13ecda2a5b37de0519e974cba92ebaf0f701611a9b027ce04340bda4594cc9049c3f101629ab028145e004209ebe71a6fe84af50804000000000000004a27213354964e250a98fe357676f94b6947383e320fbb1118f586d5b9b1b977e1e1a4490ff67703a9b5900f8a6f8a805879dd91ec5ff435b219c53680c0ae04dcc4ef69b98fcb0d6b6a03a8b71a66b4e2876dc4b610444bf10000000000b046b6ae5d68156bcbd6d8793ade9a22ac8fc7857e5bbc14adc4e12b08f350c6789283b9990c72e64372a1f79769a8bdc632fc1a0b3417855d8b7d25ca4d404c23631ad3d2f55dcd385371c86170a4bca58c2b2b4eabc365f45bd10bb45b0c5bc354456a52be18d9b44014d20a3c51c8f013dade83562e73278662829e4f5a9ac00fd91178468c737f0872d97d38d11a176be5a0d7294c51eb161eddcfefa8837c7430721851ec2a107af0df6d43e732bbc01e76c66895eb85d36798d61622773591ee21ad9f6a1b73fa9cf3ffeb8a00b63af800a81d0fb8aa29df8b8ad6fbafefb5802a23cbdeeabceda5bfc5ff2fa5c1d61d04a1324794c6ed000696d9f04010c35474e690545c3d9bd836d4cef2585ba616e01c3d000000000000000000470ebc6f3453ecbf3047e4547d7632d3ad21798e730cb5d1da059b5bdb8107815dff995c0788906790406dfb4f8ee9f24ff94233e2e6e581e6e5de33a5f254c9a8b612547473c3001df3928dac9203b744619082421a8da7c00000000000000000000000000000018a73ef40cca690fb7595c6962984f8276677be6f66cbdbccf1896433808c9c84d74ac4a7c186a04a2250972f7acb156b21f9826b6acb7db32c4e3b3ec8b59fd972975edb1da872d81a35e4fda2f5cbde6b40bea20418c6e9dad30b791eea58f53e80fee4dd7fe08373ea2784fcd3a65261de71eb866458d2c22a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000005c0)=ANY=[@ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="02"], 0x10) socket$inet6_mptcp(0xa, 0x1, 0x106) 29.409331217s ago: executing program 3 (id=326): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000002a40)={0x1, {{0x2, 0x4e23, @multicast1}}}, 0x88) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$inet_buf(r0, 0x0, 0x29, &(0x7f0000000000)=""/145, &(0x7f0000695ffc)=0x192) 28.923953376s ago: executing program 3 (id=329): syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file1\x00', 0x1000801, &(0x7f0000000840)=ANY=[], 0x2, 0x1ea, &(0x7f00000003c0)="$eJzsmb2LE0EYxp+Z3eydh/jRWNhYeOCJ3mZ3o3LNFSdYCsIpahm89YhuEklWSAKCwcbG0kKwtbG0sLCy8C+w1UIFwcKUdsLIfGQz2WxC/MCI9/4gM898vTPzQp6FXRAEsWf59PHbh0fnNy6fBrAfq1gy/V8cXYuD4/PfP7l76vHmhacv3j170zhw71U+HpNrxPz7ewBebzlIwVyz49jqVV0dsjSugOOk0VfB4Gv5XSh0IwbDdTPnlqWb+4xIYv9GM9m5WUviQBahLCJZVOz95aEGfYYdAMvqdEIwa7zd7d2uJkncyouSGO4zMfSzYlb+1Pm2ODYxzJ4QHMC1hw/6sm1ygwA8y18IjtDoChi2jd7AEnzfH6XEuv9RdxTfmef+ixXPlTi8/rc2Bdfp+Bfu/h+L0h+Jw/I98g+d9RwZDD3QnvN54Xf/daGMC8DE0NuVJLn4G5G9gkRlYuRP0tlPWP7kws38o5zW75Tb3d56rV7djXfjRhRVzgVnguBsVFZGpMsZ/res/GnFil+aMtdjHjrVNG2FHSBthVk70qXluNsvm1/VGq78j2PtuI7BzDMre1DmYObHVS3VmlM88/7UOxEEQRAEQRAEQRAEQRAEQRRzDAz6S5hg5oVoEdEl9YbyRwAAAP//yYpnDA==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) fadvise64(r0, 0xe1fcff, 0x4101, 0x3) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) 20.639013842s ago: executing program 3 (id=329): syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file1\x00', 0x1000801, &(0x7f0000000840)=ANY=[], 0x2, 0x1ea, &(0x7f00000003c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) fadvise64(r0, 0xe1fcff, 0x4101, 0x3) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) 18.670882064s ago: executing program 2 (id=394): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, 0x0, 0x0) r0 = socket$l2tp6(0xa, 0x2, 0x73) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000240)={'mangle\x00', 0x0, [0x3, 0x1, 0x6, 0x10001, 0xfdfffffe]}, &(0x7f00000002c0)=0x54) 17.321690319s ago: executing program 2 (id=402): syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000340)='./file0\x00', 0x0, &(0x7f00000000c0)={[{@compress_algo={'compress', 0x3d, 'zstd'}}, {@ref_verify}, {@compress_algo={'compress', 0x3d, 'zstd'}}]}, 0x3, 0x50d4, &(0x7f00000051c0)="$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") r0 = open(&(0x7f0000000000)='./bus\x00', 0x64942, 0x0) r1 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x1}], 0x1, 0x2000, 0x0, 0x6) sendfile(r0, r0, 0x0, 0x1000200201005) 15.346016461s ago: executing program 2 (id=410): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="54000000000000000000000400000000000000600000000100010001000000010000000700000007442cc05000000000000000010000ee06000000080000000100000e4a0000002000650e0300000005000000080000000030000000000000000100000001"], 0x88}, 0x0) close(r1) close(r0) 14.359987947s ago: executing program 2 (id=411): syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x2000480, &(0x7f0000001900), 0x1, 0x769, &(0x7f0000000380)="$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") getgroups(0x3, &(0x7f0000000000)=[0xee00, 0xffffffffffffffff, 0xffffffffffffffff]) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f00000002c0)='./mnt\x00', 0x0, &(0x7f0000000540)={[{@nomblk_io_submit}, {@journal_checksum}, {@data_writeback}, {@resgid={'resgid', 0x3d, r0}}, {@init_itable_val={'init_itable', 0x3d, 0xfffffffffffffffc}}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x83}}, {@nodiscard}, {@noquota}]}, 0x1, 0x24f, &(0x7f0000001940)="$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") mount$bind(&(0x7f0000000040)='./file1\x00', &(0x7f00000000c0)='./file1\x00', 0x0, 0x3002, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000002080)='./file1\x00', 0x80b0, &(0x7f0000000540)=ANY=[], 0x0, 0x0, 0x0) 13.936462505s ago: executing program 2 (id=415): syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x0, &(0x7f00000005c0)={[{@nogrpid}, {@min_batch_time}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@nobarrier}, {@nodiscard}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='io.stat\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000200), 0xfdef) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ioctl$FITRIM(r1, 0xc0185879, &(0x7f0000000000)={0x0, 0xaeae}) 12.52689676s ago: executing program 2 (id=422): mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='huge=always,mpol=interleave']) chdir(&(0x7f0000000140)='./file0\x00') open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) stat(&(0x7f00000001c0)='./bus\x00', &(0x7f0000000200)) 12.229493228s ago: executing program 32 (id=422): mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='huge=always,mpol=interleave']) chdir(&(0x7f0000000140)='./file0\x00') open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) stat(&(0x7f00000001c0)='./bus\x00', &(0x7f0000000200)) 6.582878576s ago: executing program 3 (id=329): syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file1\x00', 0x1000801, &(0x7f0000000840)=ANY=[], 0x2, 0x1ea, &(0x7f00000003c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) fadvise64(r0, 0xe1fcff, 0x4101, 0x3) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) 2.39474301s ago: executing program 1 (id=487): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000300)={@local, @random='\x00\x00\x00\x00@&', @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) 1.977531498s ago: executing program 0 (id=490): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000000)=[@in6={0xa, 0x4e20, 0x0, @remote, 0xa}], 0x1c) setsockopt(r0, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000100), 0x4) recvmsg(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) 1.890433187s ago: executing program 1 (id=491): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000040)={&(0x7f00000000c0)="82", 0x1}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000000)={&(0x7f0000000100)="bc83", 0x2}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f00000001c0)={&(0x7f0000000280)="923cbe7d", 0x4, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r0, 0xc00464be, &(0x7f0000000180)={r1}) 1.705938206s ago: executing program 1 (id=492): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') read$FUSE(r0, &(0x7f0000000080)={0x2020}, 0x2020) 1.531989146s ago: executing program 4 (id=494): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x1c, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 1.433107915s ago: executing program 1 (id=495): setreuid(0xee00, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x20) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000000100), 0x200008, &(0x7f00000004c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) listxattr(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 1.367019705s ago: executing program 4 (id=496): r0 = syz_open_dev$loop(&(0x7f0000000480), 0x1, 0x88243) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, "fee8a2ab78fc179fd1f8a0e91ddaaccabd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) pwritev(r1, &(0x7f0000000d00)=[{&(0x7f0000000780)="cc83c25489efc3f0db809307baf3c47fc7344e5875adfaa5d36d2d8035e2644b96fafe5a4a3f0460d74e307e3f33cab8d4bc81aa416be096af41c868f34b1946e3443ab315902cca5171567aa4c2b52bbf80f631d5a052ad6f596c439ad91d0e22b4978cf8c9c747a8263bfbd142509a0e4c30b610c65c342b40adb8e487e90d10578c668e3f6476c8be65628322f05fc267ed9a59c04fd7f9255a666b8029cf479ff13afd603da3c70ec248877c53c2a6b9ad98e1b6c316edc53d66fd3523f15a9b", 0xc2}, {&(0x7f0000000880)="1f98643928117b5567affc5b7c6cdc81de5d73e3a7d82d5485fb0494a83290b2ee2549f58811e1e3cd9305500b4202a836604b4d438acd86c26e1fdf655196790d04a149b7cfb500b85f99b9839c3aaf2dcb75b69c2bf004138d9e2cbaf864d658f0ff1189e8295ef7a4dad0889504e3675555ca0a36d962", 0x78}, {&(0x7f0000000900)="7945b23b745a4236fd2f30c757275330ea50571b073b246fd927928446076e6db0586e02", 0x24}, {&(0x7f0000000940)="fa6b4ce231bee07eae61a161766e485ffa278ce469753c26c536985779e6ec7d601ab6b80014069bb7b7ac4acbff6588331fb7f78284cd6c46c5f15d9fc7a3d2a1f66df0015c0750f150cb9fade717a5bfdc8386e9f8acb9f6f720d1d1fc2aba98917386d0a3ca5df851b9bb1e3aeb9d7ca24325caa02732ac24a0a635556ca111640c9822027a6955dc2828fd7e6f5539d3ce6d62d321999e214cce10e777e09d038f4e993b97", 0xa7}], 0x4, 0x5, 0x53) ioctl$LOOP_CHANGE_FD(r0, 0x4c07, 0xffffffffffffffff) 1.137543204s ago: executing program 4 (id=497): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000480)={0xa, 0x4e20, 0xfffffffe, @mcast1, 0x4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000f59ffc)=0x8000004, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) 1.091986634s ago: executing program 1 (id=498): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)=':', 0x1, 0x4fed0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) 1.048042604s ago: executing program 0 (id=499): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$inet6(0xa, 0x5, 0x0) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f00000000c0)=@assoc_value={r2, 0x9}, 0x8) 900.265473ms ago: executing program 4 (id=500): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = memfd_create(&(0x7f0000000240)='+\x8b\x8a\xa9\x16\x11\x91J\xbc+ \x18\x17\xc2:}\xa3\x9bO\xdd\xdf\xdf\x92\xd5\xed\xb4\x17\xe5\xd6\x9a\xb2\xd8\x9ba\xde\xb2.F\xc0\x99}|\xaf\xd3\x1d\x84[*_\x9f\x9d\xb0rYP\x1b\x9f \xe0\x9cgq\x103\x89\x11\x87Rv\x169\xdf\xe3>B\x04\x00\x00\x00W\xd3\xec\xfb\xdf?\xa2\x90+\xa4!\xb2\xf2\xff\x90\a\xc3\x12\xc4;\xffh\xf1x=\xb9c\xce\x03h\xdap\x88U\x1788\x82\xd7\xfd\x83\x00Sx\x91%\x99_\xfe\xd4c\x83\x86\x0f\xa4a-\xaf\x9e\xd9\xef\xe0)]\x00F\xfa\x03\xbc4\xc4\x9a\v\x03\x8b\xa4\xf3\x8f\xf4\"\'\xd3\a9\x14H}j&~\xe9\x16\x83o\xbd\xab\xcd[\xbd\xcb\x04\xfc\xe7\xe3\x9e?\x12\xf0\xf4\x83M3\xd88\x92?@\v\xe6\xd1\xd2\xe4\xde\xdaUeJ\x9fR\xd1`\xfa\xc8\v\xed\xfd\x0e\xc8\x89W\x847\x88\x82\x94\x14\xe33\xb7H\xc8b\xd6@3F#\xb7\x04C\x8dm\t\x16a\x0fI\xf4\xfe\xf8\x06j\x19Pz&\xb8\x0f\x98`W\xdb\xc6\"81A\xa4\x8bT\xf1\xcb\xab\xa3\t\xef\xdf&\x0e\xad\x03\x123.\xc2V\xaa\xd5\xf8\xde\x8aV\xa4p{\xcez\xa2\x92\xdb8*wLO\f\x97X\x05\x9a\xc2\xe8\x85\x9d\xcb\xc8\xf0\xc4\x01\x03\xe3?\x9f1\xf4\xfb\xa5y`KB\xdf\xae#\x94C\a\x04\xea\xccG\xf2\b\x8f\xf7\xb1\xe96\x90\xf5P\xa4\'\xce\xe3\xa24\x196\xc5Q\xa1K\x95\xd6\xfal\xe9\xd1\\\r&\xb2c\xb3\x8d\xa7\xb7\xa8\x03S\xbd\xdd\b{\xae\f\x10\xc2\xbb\xd0\xdd*\xa3\xb4\fJ\x00X\xab`N; LF\xa5D\xee\xdf\x7f\x80p\xf6o\x1c\xbdXR\xf2\xa0\x81a\xa1\xe1B\x93Xn\xaf\xfc\x05?\xab\xac\x91x\xa8#\xe1\xbeQ\xd1^\x9b\xb9)\xd3\n\xf7(3!\x18\b\xc0\xaampRl\xfdQ\x03\x8c\xd5\xe4\\\xed\x9a\xd1?\xd21\xc8\x90\x1dl|\xd1\x14\xbc3\xe0\x1e\x0e\xe6\x88Y\x99K\x93\x1c@_P\x8c\xc7\x9eZ\xb74KT:\x8a\xdbJ#w\x18\x14\x00\x93\x86\xa5wo\xf6M\xe7D\xf4*\xe3X\x1d\x19\x83\xa7w\xc7+7\x89s\xed\x8a\xd7O\xdd\rhh`\xc0\xa8$\x06pu\xa0\xd0L\x0ez@I\xb8\x83\xb2f\x93j\a0I\xc8l\xe5\x9b\x06\xb5\xac`d\xa3\xcf/\x14\x10\xab\xab\t\xec\xc1c\fA\xaf\x14\xef\xbap@*7\x86\xdf\',\x03Y\xb1$\xf0\xb5}\xf0\x82%)9`\x8f\x04\x85m\x80\xd2\xcf@\x06}\xea\xe7w`\xa5\x11\x9f\x9b\x9e\x8f\xb7cb\x1a\xe1\xcf\x87\x1c\\\xf5\xc21\xf7\x82C*\xd5;\x00\x00\x00\x00\x03\xba\xe3\xdc\x92\'\x8e\xd5\x7fG\xfd.\x91\x89T\x99t\xd4d,\xd5\x92O\xf1\xafT!Y\x8e\\\xac\xf7\x11R\x05p\x1a\"\r\xe9\xe5\x8b&\x0f\x8c\xfb\xef\xf8\xd5\x18\xde\xeb\xe5\x19\xdd\xebQ8\xc5iS+\x06D\x16\xfe\xf5.\xe5\v\x89\xb0\"\xa3M\xe9\x81\x11P\xdb\xc4\xc2y\x14\x04\x06\xf6\f\xb0\xecz\x8d`\xb5\x9b\xb43\xcc1\xa7\x9e\xa8\xb5\'\xc6MAe\x0f\xd1\xfcG\xc2/\xe8\xe9t\xcaQ\xf1\fI\x1chM\xc1\x92\xe3\xc3\x01M\xc8/\xefJ\xcb\xd0]\f\xff\xf5\x92\xce\x97Z\xea\xe8\x99\xfa\x96\xce\xa7\x02\xad\xa2\xce\x955\xeaNg\x02\xcd\xfd\x1a}.\xd3\"x\x89/8H\xc2\x93B\na)\x86\xa9U\xa0\xb7\x18\xfb\xe9\xd1\x97', 0x3) write$binfmt_misc(r1, &(0x7f0000000740), 0xff67) sendfile(r0, r1, &(0x7f0000000000), 0xfffb) fcntl$addseals(r1, 0x409, 0x8) 821.224403ms ago: executing program 5 (id=423): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000180)={0x20, r0, 0x1, 0x0, 0x0, {0x1e}, [@ETHTOOL_A_PAUSE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x20}}, 0x20000000) 814.890673ms ago: executing program 1 (id=501): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x8, &(0x7f0000001dc0)=ANY=[@ANYBLOB="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"/3816], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x49) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f00000000c0)={0x14, &(0x7f0000000300)={0x40, 0x2d, 0xa, {0xa, 0xe, "c26d564100375337"}}, 0x0}, 0x0) 772.627473ms ago: executing program 0 (id=502): r0 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r0, &(0x7f0000000700)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)=""/43, 0x2b}, 0x4}], 0x1, 0x40000023, 0x0) setsockopt$inet_int(r0, 0x0, 0x7, &(0x7f0000000140)=0x30, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x36, &(0x7f00000002c0)={@broadcast, @link_local, @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty, {[@timestamp={0x44, 0x4, 0xc6}]}}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0) 640.661022ms ago: executing program 5 (id=503): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001600)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000940)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001940)=@newtaction={0xe98, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe50, 0x2, {{{}, 0x97, 0x0, [{0x0, 0x5, 0x9c}, {0x0, 0x0, 0x2}]}, [{}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, {0x448eade7}, {0x0, 0x0, 0x80000000, 0x0, 0x1}, {}, {0x0, 0x0, 0x0, 0x2000}, {0x0, 0x0, 0x0, 0x0, 0x400}, {0x2, 0x0, 0x0, 0x0, 0x87}, {}, {}, {0x0, 0x1, 0x0, 0x0, 0xfffffffe, 0x8001}, {}, {}, {}, {}, {}, {}, {0x0, 0x3, 0x0, 0x0, 0x0, 0x9}, {}, {0x0, 0x0, 0x100}, {0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x3}, {}, {0xfffffffc}, {}, {}, {}, {0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x9}, {0xfffffffe}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x401}, {0xd5, 0x0, 0x2, 0xc}, {}, {0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {0x0, 0x10}, {0x8}, {}, {0x0, 0x0, 0x0, 0x0, 0x800, 0x6}, {}, {}, {0x0, 0x0, 0x0, 0x3}, {}, {}, {0x0, 0x5, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, {}, {0x0, 0x80000}, {0xffffffff}, {}, {}, {0x0, 0x0, 0x0, 0x100}, {0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {0x0, 0x800000}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x7}, {}, {0xa7}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x1000}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20800000}, {}, {}, {}, {0x4, 0x0, 0x0, 0x0, 0x1}, {}, {0x0, 0x9}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0xffffffff}, {}, {0x0, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x10000000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, {0x0, 0x0, 0x0, 0x0, 0xf}], [{}, {}, {}, {}, {}, {}, {0x2}, {0x3}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {0x1}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {0x0, 0x1}, {0x4}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {0x5}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {0x0, 0x1}, {}, {}, {}, {}, {0x0, 0x1}, {0x2}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) 583.926392ms ago: executing program 0 (id=504): r0 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000100)={@mcast2, 0x800, 0x0, 0x3, 0x1, 0x0, 0x3}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x7fff, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x380000, @ipv4={'\x00', '\xff\xff', @remote}, 0x9}, 0x1c) sendmmsg$alg(r0, &(0x7f0000000240)=[{0x20000000, 0xff00, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYRES8], 0xd8}], 0x1, 0x4040010) 532.125892ms ago: executing program 4 (id=505): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) syz_mount_image$jfs(&(0x7f0000000080), &(0x7f0000000000)='./bus\x00', 0x0, &(0x7f0000000480)=ANY=[], 0x1, 0x6229, &(0x7f0000001080)="$eJzs3c1vHGcdB/Df7JtfStOoh6pECLlteCmleS0hUKDtAQ5cOKBcUSLXrSJSQElAaRURV75w4I8AIXFBQogjJ/6AHrhy4w8gUoIE6qmD1n4eZzxde+2k3ln7+XwkZ+Y3z4z3mXx3vLueGT8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMQPf/Dj81VEXP1VWnAy4nPRj+hFLI3rlYhYWjmZ1x9ExPOx2RzPRcRwIaLKjc9EvBYRH52IePDw7up40YV99uP7f/nnH37y1I/+8efh2f/99Xb/9d3Wu3Pnt//9273H318AAAAoUV3XdZU+5p9Kn+97XXcKAJiJ/PpfJ3m5eu7q9Tnrj1qtVquPYN1UT3avWUTEenOb8XsGp+MB4IhZj4+77gIdkn/RBhHxVNedAOZa1XUHOBQPHt5drVK+VfP1YGWrPV8LsiP/9Wr7/o7dptO0rzGZ1fNrI/rx7C79WZpRH+ZJzr/Xzv/qVvsorXfY+c/KbvmPtm59Kk7Ov9/Ov+X45N+bmH+pcv6DA+Xflz8AAAAAAMyx/Pv/kx2f/1148l3Zl73O/67MqA8AAAAAAAAA8Fl70vH/tlXG/wMAAIB5Nf6sPva7E4+WNa/1H8XO5VeqiKdb6wOFSTfLLHfdDwAAAAAAAAAAAAAoyWDrGt4rVcQwIp5eXq7revzV1K4P6km3P+pK338oWdc/5AEAYMtHJ1r38lcRixFxJf2tv+Hy8nJdLy4t18v10kJ+PztaWKyXGp9r83S8bGG0jzfEg1E9/maLje2apn1entbe/n7jxxrV/X10bDY6DBwAImLr1eiBV6Rjpq6fia7f5XA0OP6PH8c/+9H18xQAAAA4fHVd11X6c96n0jn/XtedAgBmIr/+t88LqNVqtVqtPn51Uz3ZvWYREevNbcbvGQzHDwBHzHp83HUX6JD8izaIiOe77gQw16quO8ChePDw7mqV8q2arwdpfPd8LciO/Nerze3y9pOm07SvMZnV82sj+vHsLv15bkZ9mCc5/147/6tb7aO03mHnPyu75T/ez5Md9KdrOf9+O/+W45N/b2L+pcr5Dw6Uf1/+AAAAAAAwx/Lv/0/O1fnf0ePuzlR7nf9dObRHBQAAAAAAAIDD9eDh3dV832s+//+FCeu5//N4yvlX8i9Szr/Xyv+rrfX6jfn7bz3K/z8P767+8fa/P5+n+81/Ic9U6ZlVpWdElR6pGqTpk+zdp20M+6PxIw2rXn+Qrvmph+/E9bgRa3Fux7q99P/xqP38jvZxT4eb7XV/q/3CjvbBdnve/uKO9mG60qleyu1nYjV+Hjfi7c32cdvClP1fnNJeT2nP+fcd/0XK+Q8aX+P8l1N71ZqO3f+w96njvjmd9DhvXv/ib84d/u5MtRH97X1rGu/fix30Z/P/5KlR/PLW2s0zd67dvn3zfKTJjqUXIk0+Yzn/Yfra/vn/0lZ7/rnfPF7vfzg6cP7zYiMGu+b/UmN+vL8vz7hvXcj5j9JXzv/t1D75+D9A/r0/zWxf9mOv4/+VDvoDAAAAAAAAAAAAAAAAe6nrevMW0Tcj4lK6/6erezMBgNnKr/91kpfPqu7P+PHU6iNeV3PWn5nWn9Tz1R+1+ijWTfVkbzSLiPh7c5vxe4ZfT/pmAMA8+yQi/tV1J+iM/AuW/97feHq6684AM3Xr/Q9+eu3GjbWbt7ruCQAAAAAAAADwuPL4nyuN8Z9P13V9r7XejvFf34qVJx3/dZBntgcY3WWg6v7B92kvG71Rv9cYbvyF2G387+H23F7jfw+mPN5wSvtoSvvClPbFKe0Tb/RoyPm/0Bjv/HREnGoNv/7Y47/Omb3Gf22PeV+CnP+LjefzOP+vtNZr5l///ijn39uR/9nb7/3i7K33P3j1+nvX3l17d+1nF8+fP3fx0qXLly+ffef6jbVzW/922OPDlfPPY1+7DrQsOf+cufzLkvP/UqrlX5ac/5dTLf+y5Pzz+z35lyXnnz/7yL8sOf+XUy3/suT8v5Zq+Zcl5/9KquVflpz/11Mt/7Lk/F9NtfzLkvM/k2r5lyXnfzbV+8x/6bD7xWzk/PMZLsd/WXL++coG+Zcl538h1fIvS87/YqrlX5ac/2upln9Zcv7fSLX8y5Lzv5Rq+Zcl5//NVMu/LDn/y6mWf1ly/t9KtfzLkvP/dqrlX5ac/+upln9Zcv7fSbX8y5Lz/26q5V+WnP/3Ui3/suT830i1/Mvy6O//mzFjxkye6fonEwAAAAAAAAAAAADQNovLibveRwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg/+zAgQAAAAAAkP9rI1RVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVhBw4EAAAAAID8XxuhqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqCnv3FiPXXd8B/MzevHEgMRBSJzVh7RhjnE12fYkvtC4mXBtuJSEUesF2vWuz4BteuwQa1Y4CJRJGRRVtw0NbQKjNS4VV8UArQHlArSpVgvaBviAqVB6iKqCAVKmtgK1mzv//35nZ2Zld73hz5pzPR0p+2Zkzc86cOXN2v7v5zgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQbOsbZj9Vy7KsVqvlF2zKshfV500TmxqXvPaF3T4AAABg7X7e+Pfzt6YLjqzgRk3L/NNd3/7qwsLCQva+4T8d/dzCQrpiIstGN2RZ47ro2g/eX2teJngiG68NNX091GP1wz2uH+lx/WiP68d6XL+hx/XjPa5fsgOWuCmrpTvb3vjPTfkuzW7LRhvXbe9wqydqG4bq+y7dNqs1brMwejKby05ns9l0y/L5srXG8l/fWl/XW7O4rqGmdW2pHyE/eexE3IZa2MfbW9a1eJ/Rj16fTfz0J4+d+OuLz93RafbcDS33l2/nzm317fxEuCTf1lq2Ie2TuJ1DTdu5pcNzMtyynbXG7er/3b6dz69wO4cXN3NdtT/n49lQ47+/09hPI7Wsw37aEi77n7uzLLuyuNntyyxZVzaUbWy5ZGjx+RnPj8j6fdQPpZdmI92P04Vay3G6dQXHaX3ObG89TttfE/H53xpuN7LMNjQ/TT96fKzpef/ZwvUcp1H9US/3Wmk/Bvv9WinKMRiPi+80HvSTHY/B7eHxP7Zj+WOw47HT4RhMj7vpGNzW6xgcGhtubHN6EmqN2yweg7tblh9urKnWmM/u6H4MTl08c35q/mMfv3fuzPFTs6dmz+7dvXt67/79Bw8enDo5d3p2Ov/3de7t4tuYDaXXwLaw7+Jr4NVtyzYfqgtfHFty/r3e1+F4l9fhprZl+/06HGl/cLX1eUEuPabz18Z76jt9/OpQtsxrrPH87Fr76zA97qbX4UjT67Dj95QOr8ORFbwO68uc37Wyn1lGmv7ptA3Lfy9Y2zG4qekYbP95pP0Y7PfPI0U5BsfDcfG9Xct/L9gStvfJydX+PDK85BhMDzece+qXpJ/3xw82Rqfj8s76FTePZZfmZy/c9+jxixcv7M7CWBcvazpW2o/XjU2PKVtyvA6t+ng9MnfXk3d2uHxT2Ffj99b/Nb7sc1VfZt993Z+rxne3zvuz5dI9WRh9tt77s9N38/r+HMuyz3/r8Ye+8djn37Ds/qznzU9Mrf1n8ZRLm86/o8ucf2Pu/0W+vnRXTwyPjuSv3+G0d0ZbzsetT9VI49xVa6z7+amVnY9Hwz/rfT6+rcv5eHPbsv0+H4+2P7h4Pq71+m3H2rQ/n+PhODk93f18XF9m857VHpMjXc/Hd4dZC/v/NSEppFzUdOwsd9ymdY2MjIbHNRLX0Hqc7m1ZfjRks/q6nt5zfcfpzrvz+xpOj27Reh2nE23L9vs4Tb/7Wu44rfX67dv1aX8+x8Nxcdve7sdpfZln9q393HlT/M+mc+dYr2NwdHisvs2j6SBsnO+zhZviMXhfdiI7l53OZhrXjjWOp1pjXZP3r+wYHAv/rPe5cnOXY3Bn27L9PgbT97Hljr3ayNIH3wftz+d4OC6eur/7MVhf5o0H+vuz685wSVqm6WfX9t+vLfc7rzvbdtONOlZGwnZ+60D3383Wlzl9cLU5s/t+uidccnOH/dT++l3uNTWTrc9+2hy287mDy++n+vbUl/ncoRUeT0eyLLv8kQcav+8Nf1/5u0vf/WrL3106/U3n8kce+PGLT/7jarYfgMH3i3xszL/XNf1laiV//wcAAAAGQsz9Q2Em8j8AAACURsz98f8KT+R/AAAAKI2Y+0fCTCqS/ze/8bm5X1zOUjN/IYjXp93wYL5c7LhOh68nFhbVL3/gy7P//Q+XV7buoSzLfvbgH3RcfvODcbtyE2E7r72p9fIlvnrvitZ97JHLab3N/fUvhPuPj2elh0GnCu50lmVfv/UzjfVMvP9qYz7z4LHGfOjKk0/Ul3n+UP51vP2zL8uX/4tQ/j1y8njL7Z8N++GHYU6/rfP+iLf7ytXXbDnw3sX1xdvVtt3SeNhPfSC/3/g+OZ99Il8+7ufltv8bn376K/XlH31V5+2/PNR5+58O9/vlMP/3Ffnyzc9B/et4u0+G7Y/ri7e770vf7Lj91z6VL3/+zflyx8KM698Zvt7+5ufmmvfXo7XjLY8re0u+XFz/9Hf/uHF9vL94/+3bP370asv+aD8+nvm3/H6m2paPl8f1RH/ftv76/TQfn3H9T//RsZb93Gv91x569hX1+21f/z1ty53/yK7G+hfvr/Udm/7yk5/puL64PUf+9nzL4zny7vA6Dut/6gPheAzX/9+1/P7a313h2Ltbzz9x+S9sutzyeKK3/jRf/7XXnWrMDeM3bbz5RS++5cor6/suy76zIb+/Xus/9VfnWrb/i7fn+yNeHzv67etfTlz/hY9Onj03f2luJu3Vx25tvHfO2/Ptidt7azi3tn999NzFD85emJiemM6yifK+hd51+1KYP87Hle5LLyw5g+56JDyfd/751zfu+NdPx8v//T355Vffln/fenVY7rPh8k3h+Vvd+pd6auvtjdd37ZmwhQtL3y94LbZs/6+DK1owPP72nwvi8X7+5R9s7If6dY3vG/F1vcbt//5Mfj9fC/t1Ibwz87bbF9fXvHx8b4SrD+ev9zXvv3Cai8/r34Tn+x0/zO8/bld8vN8PP8d8c3Pr+S4eH1+7PNR+/4138bgSzifZlfz6uFTc31efv73j5sX3Icmu3NH4+k/S/dyxqoe5nPmPzU+dnjt76dGpi7PzF6fmP/bxo2fOXTp78WjjvTyPfqjX7RfPTxsb56eZ2f37ssbZ6lw+brAXevvPP3Ji5sD0jpnZk8cvnbz4yPnZC6dOzM+fmJ2Z33H85MnZj/a6/dzM4d17Du09sGfy1NzM4YOHDu09NDl39lx9M/KN6mH/9Icnz1442rjJ/OF9h3bff/++6ckz52ZmDx+Ynp681Ov2je9Nk/Vb//7khdnTxy/OnZmdnJ/7+Ozh3Yf279/T890Az5w/OT8xdeHS2alL87MXpvLHMnGxcXH9e1+v21NO8/+R/zzbrpa/EV/2rnv2p/dnrfvy48veVb5I2xuIPhfei+afX3L+4Eq+jrl/NMykIvkfAAAAqiDm/rEwE/kfAAAASiPm/g1hJvI/AAAAlEbM/eNhJhXJ/6Xr/2++vKL16//r/zfvL/3/ivX/Hy5a/z8/X+j/98da+/f6/4H+v/6//v/A9P8Xwjck/X+KqGj9/5j7b8qySuZ/AAAAqIKY+zeGmcj/AAAAUBox998cZiL/AwAAQGnE3P+iMJOK5H/9f/1//X/9f/3/zuvX/x9M+v/d6f/3oP8/lVWr/3+ln9vv8//1/1mqaP3/mPtfHGZSkfwPAAAAVRBz/y1hJvI/AAAAlEbM/beGmcj/AAAAUBox928KM6lI/tf/1//X/9f/1//vvH79/8Gk/9+d/n8P+v8+/1//X/+fvipa/z/m/peEmVQk/wMAAEAVxNz/0jAT+R8AAACKZ+T6bhZz/8vCTJbk/+tcAQAAAPCCi7n/tqytCF6Rv//r/+v/F7//vyFdp/+v/58Vsv8/nOn/F4f+f3f6/z3o/+v/6//r/9NXRev/N3J/Np69PMykIvkfAAAAqiDm/tvDTOR/AAAAKI2Y+38pzET+BwAAgNKIuX9zmElF8r/+v/5/8fv/Pv9f/7/o/X+f/18k+v/d6f/3oP+v/6//r/9PXxWt/x9z/x1hJhXJ/wAAAFAFMfffGWYi/wMAAEBpxNz/y2Em8j8AAACURsz9W8JMKpL/9f8L3v+PzVH9f/1//X/9f/3/FdH/707/vwf9f/1//X/9f/qqaP3/mPtfEWZSkfwPAAAAVRBz/11hJvI/AAAAlEbM/a8MM5H/AQAAoDRi7p8IM6lI/tf/L3j/P+/Bj/n8f/1//X/9f/3/ldH/707/v4dwmvtRlmX6//r/+v/6/6xd0fr/MfdvDTOpSP4HAACAKoi5f1uYifwPAAAApRFz/91hJvI/AAAAlEbM/dvDTCqS//X/B6L/n+n/6//r/+v/6/+vjP5/d/r/Pfj8f/1//X/9f/qqaP3/mPtfFWZSkfwPAAAAVRBz/44wE/kfAAAASiPm/leHmcj/AAAAUBox9+8MM6lI/tf/1//X/9f/1//vvH79/8Gk/9+d/n8P+v/6//r/+v/0VdH6/zH3vybMpCL5HwAAAKog5v5dYSbyPwAAAJRGzP33hJnI/wAAAFAaMfdPhplUJP/r/+v/6//r/+v/d16//v9g0v/vTv+/B/1//X/9f/1/+qpo/f+Y++8NM6lI/gcAAIAqiLn/vjAT+R8AAABKI+b+qTAT+R8AAABKI+b+6TCTiuR//X/9f/1//f9V9f9fuXi/+v85/f9i0f/vTv+/B/1//f8XvP8/qv9PqRSt/x9z/+4wk4rkfwAAAKiCmPv3hJnI/wAAAFAaMffvDTOR/wEAAKA0Yu7fF2ZSkfyv/6//r/+v/+/z/zuvX/9/MOn/d9f//n98iPr/+v/6/z7/X/+fpYrW/4+5//4wk4rkfwAAAKiCmPv3h5nI/wAAAFAaMfcfCDOR/wEAAKA0Yu4/GGZSkfyv/6//r/+v/6//33n9+v+DSf+/O5//30Px+v+va775evb/6+vS/9f/1/9n9R7+w+avitb/j7n/UJhJRfI/AAAAVEHM/a8NM5H/AQAAoDRi7v+VMJPu+X/Djd0qAAAAoJ9i7v/VMJOK/P1f/1//X/9f/1//v/P69f8Hk/5/d/r/PRSv/9/C5/8Xe/v1//X/Wapo/f+Y+w+HmVQk/wMAAEAVxNz/a2Em8j8AAACURsz9rwszkf8BAACgNGLuPxJm0KnOXUr6//r/+v/6//r/nde/3v3/sXi/+v9rov/fnf5/D/r/+v/6//r/9FXR+v8x978+zMTf/wEAAKA0Yu5/IMxE/gcAAIDSiLn/DWEm8j8AAACURsz9bwwzqUj+1//X/9f/1//X/++8fp//P5j0/7vT/+9B/1//X/9f/5++Klr/P+b+N4WZVCT/AwAAQBXE3P/mMBP5HwAAAEoj5v63hJnI/wAAAFAaMfe/NcykIvlf/1//X/9f/1//v/P69f8Hk/5/d/r/Pej/6//r/+v/01dF6//H3P/rYSYVyf8AAABQBTH3PxhmIv8DAABAacTc/7YwE/kfAAAASiPm/reHmVQk/+v/6//r/+v/6/93Xr/+/2DS/+9uwPr/P78lXK7/n9P/L/b2r7b/P9L29Q3p//9guf7/wob22+v/cyMUrf8fc/87wkwqkv8BAACgCmLuf2eYifwPAAAApRFz/7vCTJryf1//xzsAAABg3cXc/xthJhX5+7/+f307FtvL+v/6/40L9P/1//X/B5b+f3cD1v/3+f9t9P+Lvf0+/1//n6WK1v+Puf/dYSYVyf8AAABQBTH3PxRmIv8DAABAacTc/3CYifwPAAAApRFz/3vCTCqS//X/ff6//r/+v/5/5/Xr/w8m/f/u9P970P/X/y9a//8/9f8ZbEXr/8fc/0iYSUXyPwAAAFRBzP3vDTOR/wEAAKA0Yu7/zTAT+R8AAABKI+b+94WZVCT/6/8PSv9/YkD7/4/r/9/A/v9dt+TL6f/r/7NI/787/f8e9P/1/4vW//f5/wy4ovX/Y+5/f5jJyvP/+IqXBAAAAG6gkWWvibn/t8JMKvL3fwAAAKiCmPt/O8xE/gcAAIDSiLn/d8JMKpL/9f8Hpf/v8/8z/X+f/9/2ePT/9f87Wb/+fzzz6P/r/+v/R/r/Ve3/598Z9f/ppGj9/5j7fzfMpCL5HwAAAKog5v4PhJnI/wAAADAQOv0/2e1i7j8aZiL/AwAAQGnE3H8szKQi+V//X/9f/7+g/f8/2/Yv3/v2O4/t1v/X/9f/X5V1/fz/+ovf5//r/+v/J4PS/68t89Fg+v8+/5/+K1r/P+b+42EmFcn/AAAAUAUx9/9emIn8DwAAAKURc/+JMBP5HwAAAEoj5v6ZMJOK5H/9f/1//f+C9v8H+PP/4/7Q/2/Vt/5/POnq/3e0rv3/9y72xPX/V9v/H+t4qf6//v8gb7/+v/4/SxWt/x9z/2yYSUXyPwAAAFRByP1DJ/O5eIX8DwAAAKURc/+pMBP5HwAAAEoj5v4PhplUJP/r/+v/6//r//v8/87r79b/r434/P+i0v/vrjj9/870//X/B3n79f/1/1mqaP3/mPvnwkwqkv8BAACgCmLu/1CYifwPAAAApRFz/4fDTOR/AAAAKI2Y+0+HmVQk/+v/6//r/+v/6/93Xn9hP/9f/78r/f/u9P970P/X/9f/1/+nr4rW/4+5/0yYSUXyPwAAwP+zdydPlpVlHsdvQkFlBb3oXS960xG97D+BRbPu3ncvetOL7gjDBaioOFM4jygqzoriPOAAgoiK8wROKM6gouI84oSoUQaZz/NUDifvzcy6t/Kc9/18Fjxd2WTda0UJ9ausrwd6kLv/4rjF/gcAAIBm5O6/JG6x/wEAAKAZufsfFrd0sv/1//r/Zvv/f9f/7/X6+n/9f8v0//Pp/xfQ/+v/9f/6f5ZqbP1/7v6Hxy2d7H8AAADoQe7+R8Qt9j8AAAA0I3f/pXGL/Q8AAADNyN3/yLilk/2/o/9fm/XZ/2fGq/9vqf/3/P89X1//fwb9/7n6/7E7u/3/FQ/+k0//r//X/wf9/776/+N7fb7+nxaNrf/P3f+ouKWT/Q8AAAA9yN3/6LjF/gcAAIBm5O6/LG6x/wEAAKAZufsfE7d0sv+X9/z/Exsfn2j/X/T/+v+ND+j/9f979f/HTn9b/z9Onv8/X0/9/6V3XnDxfTf9880HeX39v/7f8//1/yzX2Pr/3P2PjVs62f8AAADQg9z9j4tb7H8AAABoRu7+x8ct9j8AAAA0I3f/E+KWTvb/8vr/ST//v+j/9f8bH9D/6//36v//y/P/x07/P19P/f9hXl//r//X/+v/Wa6j7v/zO85v5+5/YtzSyf4HAACAHuTuf1LcYv8DAABAM3L3Xx632P8AAADQjNz9J+OWTva//n/1/f/f9P/6/7j6f/2//n/19P/z6f8X0P/r//X/+n+W6qj7/53fzt1/RdzSyf4HAACAHuTuf3LcYv8DAABAM3L3PyVusf8BAACgGbn7nxq3dLL/9f+e/6//1//r/4dfX/8/Tfr/+fT/C+j/z7SfP0//P8H+P34hpf9nFQ7Y/z8w5x/bS+n/c/c/LW7pZP8DAABAD3L3Pz1usf8BAACgGbn7nxG32P8AAADQjNz9z4xbOtn/+n/9v/5f/3/o/n/3T70N+v9h+v+zQ/8/32j6/7Vjgx/W/0++//f8/yn2/0H/zyqM7fn/ufufFbd0sv8BAACgB7n7nx23zNn/B/7NfAAAAOBI5e5/Ttzi6/8AAAAweVmd5e5/btzSyf7X/+v/9f/6f8//H379ef3/zVven/5/XPT/842m/9+D/l//P+X3r//X/7Pb2Pr/3P3Pi1s62f8AAADQg9z9V8Yt9j8AAAA0I3f/8+MW+x8AAACakbv/BXFLJ/t/uP8//f/X/++P/n/7+9f/D//8WFb/n9+j/n9u/3+R5//3Sf8/39nv/4/r/7d///r/FTrq9994/39i0efr/xkytv4/d/9VcUsn+x8AAAB6kLv/hXGL/Q8AAADNyN3/orjF/gcAAIBm5O5/cdzSyf4/4uf/X3H+Xu9L/79B/6//9/z/cT7/f3bW+/9j+v990v/P5/n/C+j/9f/6f8//Z6nG1v/n7r86bulk/wMAAEAPrr5/trH7XzKb2f8AAAAwRVv/7MDOP1Aacve/NG6x/wEAAKAZuftfFrd0sv+PuP9f1fP/z1v02vp//f/WHy/9v/5/6PXH1f97/v9+6f/n0/8voP9fRT9/rLH+/5q9Pn8M/f/l+n9GZlv/f+vpjx9V/5+7/+VxSyf7HwAAAHqQu/8VcYv9DwAAAM3I3f/KuMX+BwAAgGbk7n9V3NLJ/l95/39i79deYf+/kP5f/7/1x0v/r/8fen39/zTp/+fT/y+g//f8f8//1/+zVNv6/y2Oqv/P3f/quKWT/Q8AAAA9yN3/mrjF/gcAAIBm5O6/Jm6x/wEAAKAZuftfG7d0sv8bff7/Qvp//f/WHy/9v/5/6PX1/9Ok/59P/7+A/l//r/9f3P/v/Bd10P8zZGz9f+7+18Utnex/AAAA6EHu/mvjFvsfAAAAmpG7//Vxi/0PAAAAzcjd/4a4pZP9r/9fbf+fH9f/6/9nB+n/4xP0/5v0//r/g5ha/7/zvz+H7tfXhv5NtNse/f/tDzn5n9s/ov/X/+v/9f+e/88SjKL/P3X6V5e5+98Yt3Sy/wEAAKAHufvfFLfY/wAAANCM3P1vjlvsfwAAAGhG7v63xC0H3P//uNR3dfbo/z3/X/8/wv4/6P836f/1/wcxtf5/J8//1//r/6f7/vX/+n92G0X/v+XbufvfGrf4+j8AAAA0I3f/2+IW+x8AAACakbv/7XGL/Q8AAADNyN3/jrilk/2v/9f/6//1//r/4dc/bP+/Phum/z879P/z6f8X0P/r//X/+n+Wamz9f+7+6+KWTvY/AAAA9CB3/zvjFvsfAAAAmpG7/11xi/0PAAAAzcjd/+64pZP9r//X/+v/9f/6/+HX9/z/adL/z7eq/v/cKfX/1895A0P9/6nj+n/9v/5f/88hja3/z93/nrilk/0PAAAAPcjdf33cYv8DAABAM3L33xC32P8AAADQjNz9741bOtn/+n/9v/5f/6//H359/f806f/n8/z/BTz/X/+v/9f/s1Rj6/9z998Yt3Sy/wEAAKAHuftvilvsfwAAAGhG7v73xS32PwAAADQjd//NcUsn+1//r//X/+v/9f/Dr6//n6bV9f+zo+v/7z3noN/NnvT/C+j/9f/6f/0/SzW2/j93//vjlk72PwAAAPQgd/8tcYv9DwAAAM3I3f+BuMX+BwAAgGbk7v9g3NLJ/tf/6/+n2f9ftT70/vX/+v+Z/r97nv8/n/5/Af2//l//r/9nqcbW/+fu/1Dc0sn+BwAAgB7k7r81brH/AQAAoBm5+z8ct9j/AAAA0Izc/R+JWzrZ//p//f/2/n82m0b/7/n/M/1/C/3/+kz/v3T6//n21/9fpP/X/7fV/58za6j/P7Hn5+v/GaOx9f+5+z8at3Sy/wEAAKAHufs/FrfY/wAAANCAzT87k7v/43GL/Q8AAADNyN3/ibilk/0//f7/+I5P1P/PZrO7Lmv++f/6/5n+v4X+v35U9f/Lo/+fz/P/F9D/t9n/e/6//p8jM7b+P3f/J+OWTvY/AAAA9CB3/6fiFvsfAAAAmpG7/9Nxi/0PAAAAzcjd/5m4pZP9P/3+f+cn6v9nZ/T8f/3/xgf0//p//f9k6f/n0/8voP9f2M+v7fHrnpn+X/+v/2fA2Pr/3P2fjVs62f8AAADQg9z9t8Ut9j8AAAA0I3f/7XGL/Q8AAADNyN3/ubilk/2v/9f/6/+n2f+v6//1//r/QWPp/y+88D/u0P/r/1vs/+fR/+v/9f/sNLb+P3f/5+OWTvY/AAAA9CB3/xfiFvsfAAAAmpG7/4txi/0PAAAAzcjd/6W4pZP9v7v/P2+2WahuGur/o1HT/2+h/9/+/vX/wz8/PP9f/6//X72x9P+e/3+496//1/9P+f0fqP//l92fr/+nRWPr/3P33xG3dLL/AQAAoAe5+78ct9j/AAAA0Izc/V+JW+x/AAAAaEbu/jvjlk72v+f/6//1//p//f/w6+v/p0n/P5/+fwH9v/7f8/8v+b9z9f8sz9j6/9z9X41bNobfv/7DIf9jAgAAACOSu/9rcUsnX/8HAACAHuTu/3rcYv8DAABAM3L3fyNu6WT/6//1//p//b/+f/j19f/TpP+fT/+/QD/9//rQB4+6nz9TR/3+m+n/Pf+fJRpb/5+7/5txSyf7HwAAAHqQu/9bcYv9DwAAAM3I3f/tuMX+BwAAgGbk7r8rbulk/+v/9f/t9///q//f8fr6f/1/y/T/+W/0Yfr/Bfrp/wcddT8/9fev/9f/s9vY+v/c/XfHLZ3sfwAAAOhB7v7vxC32PwAAADQjd/934xb7HwAAAJqRu/97cUsn+1//31f/vzbrsf/3/H/9v/6/J9Pp/689NvRRz//X/+v/p/v+9f/6f3YbW/+fu/+etWNd7n8AAACYqv/+t4fevd+/956Nv67Pvh+32P8AAADQjNz9P4hb7H8AAABoRu7+H8Ytnex//X9f/X+fz//X/+v/9f89mU7/P0z/r//X/0/3/ev/9f/sNrb+P3f/vXHLluE3+D/QAwAAAExG7v4fxS2dfP0fAAAAepC7/8dxy679f2qff6odAAAAGJvc/T+JWzr5+r/+f+T9/2xF/X/8ffr/Tfp//f/Q6+v/p6m1/v/4bFT9/6k1/b/+fw79v/5f/89OY+v/c/ffcuOsy/0PAAAAjdr2Owo/3fjr+uxncYv9DwAAAM3I3f/zuMX+BwAAgGbk7v9F3NLJ/tf/j7z/P9Tz/0/U/+X5/533/1euD76+/l//37LW+n/P/9/8uP5/k/5/3O9f/6//Z7cD9P8bg3TV/X/u/l/GLZ3sfwAAAOhB7v5fxS32PwAAADQjd/+v4xb7HwAAAJqRu/83cUsn+1//fwT9/1XHZ7OV9v/7eP6//r+P/n+P12+n//+nC07e9j//f8N1+n9OO5v9f/5c0P/r//X/m/T/+n/9PzuN7fn/uft/G7d0sv8BAACgB7n774tb7H8AAABoRu7+38Ut9j8AAAA0I3f/7+OWTva//r/F5/9Ps//PH+sj6P9PTq//z6a49/7f8//1/7t5/v98+v8F9P/6f/2//p+lGlv/n7v/D3FLJ/sfAAAAepC7/49xS+7/tQP/1j0AAAAwMrn7/xS3+Po/AAAANCN3//1xSyf7X/+v/x9L/588///053n+/yb9v/7/IPT/8+n/F9D/6//1//p/lmps/X/u/j/HLZ3sfwAAAOhB7v4H4hb7HwAAAJqRu/8vcYv9DwAAAM3I3f/XuKWT/a//1//r//X/+v/h19f/T5P+fz79/4PO3/sN6P/1//p//T9LNbb+P3f/3wMAAP//80tlEQ==") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents(r0, 0xfffffffffffffffd, 0x58) 450.109652ms ago: executing program 0 (id=506): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000080"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x4, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 214.525091ms ago: executing program 5 (id=507): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f0000000840)={[{@iocharset={'iocharset', 0x3d, 'macceltic'}}, {@fmask={'fmask', 0x3d, 0xa0}}, {@errors_remount}, {@iocharset={'iocharset', 0x3d, 'cp936'}}, {@iocharset={'iocharset', 0x3d, 'cp861'}}, {@dmask}, {@gid}, {@dmask={'dmask', 0x3d, 0x1}}, {@errors_continue}, {@errors_continue}]}, 0x1, 0x152f, &(0x7f00000037c0)="$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") syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc0ed000e, &(0x7f00000000c0)={[{@jqfmt_vfsold}, {@data_err_abort}, {@debug}, {@noload}, {@mblk_io_submit}, {@commit={'commit', 0x3d, 0x5}}, {@init_itable_val={'init_itable', 0x3d, 0x601}}, {@debug}]}, 0xfe, 0x46d, &(0x7f0000000f00)="$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") setsockopt$netlink_NETLINK_CAP_ACK(0xffffffffffffffff, 0x10e, 0xa, 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000c, 0x3032, 0xffffffffffffffff, 0x0) rename(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 153.19544ms ago: executing program 0 (id=508): r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000300)={0x0, 0x1, 0x1, '6'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000000080)="0001000000000000") 0s ago: executing program 4 (id=509): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000540)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000980)={0x2c, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000940)={0x20, 0x3, 0x1, 0x81}}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r1, 0x5b04, 0x0) kernel console output (not intermixed with test programs): es unique to avoid problems! [ 65.797695][ T4167] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.805613][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 65.814526][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 65.823376][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 65.832146][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 65.843885][ T4179] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.852613][ T4179] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.861722][ T7] Bluetooth: hci0: command 0x040f tx timeout [ 65.868202][ T7] Bluetooth: hci1: command 0x040f tx timeout [ 65.871073][ T4179] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.883979][ T4179] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.895366][ T4175] device veth1_vlan entered promiscuous mode [ 65.943325][ T4208] Bluetooth: hci2: command 0x040f tx timeout [ 65.943447][ T4167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.949481][ T4208] Bluetooth: hci3: command 0x040f tx timeout [ 65.965676][ T4167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.975930][ T4167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.986698][ T4167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.997649][ T4167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.009257][ T4167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.013729][ T4208] Bluetooth: hci4: command 0x040f tx timeout [ 66.021680][ T4167] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.036502][ T4167] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.045745][ T4167] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.054887][ T4167] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.064642][ T4167] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.091439][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 66.100406][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 66.109103][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.118278][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.186059][ T4223] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.196361][ T4223] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.206858][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.220131][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.248141][ T4175] device veth0_macvtap entered promiscuous mode [ 66.263065][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 66.271387][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 66.304617][ T4175] device veth1_macvtap entered promiscuous mode [ 66.329054][ T4223] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.329060][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.329126][ T4223] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.362143][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.388295][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 66.397489][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 66.427845][ T4175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.440051][ T4223] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.441553][ T4175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.460365][ T4223] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.460433][ T4175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.478339][ T4175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.488822][ T4175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.500699][ T4175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.510884][ T4175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.522035][ T4175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.536043][ T4175] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.562939][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 66.583648][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 66.592688][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.611849][ T4175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.623303][ T4175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.634901][ T4175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.645696][ T4175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.656665][ T4175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.667758][ T4175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.677998][ T4175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.688847][ T4175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.700466][ T4175] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.733089][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.741858][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.777299][ T4242] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2'. [ 66.794619][ T4223] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.799136][ T4175] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.802617][ T4223] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.822604][ T4175] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.838716][ T4175] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.847874][ T4175] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.883563][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 66.920012][ T4223] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.943668][ T4223] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.983281][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.992464][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 67.004262][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.015280][ T4223] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.040309][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 67.059401][ T4223] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.110672][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 67.172405][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.216250][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.268445][ T4251] loop2: detected capacity change from 0 to 256 [ 67.276737][ T4223] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.304806][ T4223] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.314698][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 67.343971][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 67.457493][ T4251] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 67.933536][ T4210] Bluetooth: hci1: command 0x0419 tx timeout [ 67.940307][ T4210] Bluetooth: hci0: command 0x0419 tx timeout [ 68.014649][ T4210] Bluetooth: hci3: command 0x0419 tx timeout [ 68.026620][ T4210] Bluetooth: hci2: command 0x0419 tx timeout [ 68.105003][ T4240] Bluetooth: hci4: command 0x0419 tx timeout [ 68.169140][ T4247] loop1: detected capacity change from 0 to 32768 [ 68.212631][ T4249] loop4: detected capacity change from 0 to 32768 [ 68.224459][ T4247] XFS: ikeep mount option is deprecated. [ 68.228899][ T1108] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 68.370021][ T4247] XFS (loop1): Mounting V5 Filesystem [ 68.380025][ T4249] XFS (loop4): Mounting V5 Filesystem [ 68.454393][ T4249] XFS (loop4): Ending clean mount [ 68.489162][ T1108] usb 3-1: Using ep0 maxpacket: 8 [ 68.494985][ T4247] XFS (loop1): Ending clean mount [ 68.511160][ T4258] loop3: detected capacity change from 0 to 32768 [ 68.524642][ T4247] XFS (loop1): Quotacheck needed: Please wait. [ 68.582010][ T4258] gfs2: fsid=statfs_quantum: Trying to join cluster "lock_nolock", "statfs_quantum" [ 68.623108][ T1108] usb 3-1: config 150 has an invalid interface number: 204 but max is 1 [ 68.635258][ T4258] gfs2: fsid=statfs_quantum: Now mounting FS (format 1801)... [ 68.649740][ T1108] usb 3-1: config 150 has no interface number 0 [ 68.670061][ T1108] usb 3-1: config 150 interface 204 has no altsetting 0 [ 68.695969][ T4247] XFS (loop1): Quotacheck: Done. [ 68.703799][ T1108] usb 3-1: config 150 interface 1 has no altsetting 0 [ 68.713624][ T4249] syz.4.5 (4249) used greatest stack depth: 19936 bytes left [ 68.760844][ T4258] gfs2: fsid=statfs_quantum.s: journal 0 mapped with 16 extents in 0ms [ 68.861969][ T4173] XFS (loop4): Unmounting Filesystem [ 68.875893][ T4171] XFS (loop1): Unmounting Filesystem [ 68.903270][ T1108] usb 3-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 68.944467][ T1108] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 68.973030][ T1108] usb 3-1: Product: syz [ 68.978590][ T4258] gfs2: fsid=statfs_quantum.s: first mount done, others may mount [ 68.983477][ T1108] usb 3-1: Manufacturer: syz [ 69.018809][ T1108] usb 3-1: SerialNumber: syz [ 69.316008][ T1108] xr_serial 3-1:150.204: xr_serial converter detected [ 69.961251][ T4306] loop4: detected capacity change from 0 to 32768 [ 69.979679][ T4207] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 70.029770][ T4310] loop1: detected capacity change from 0 to 256 [ 70.060987][ T4306] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.16 (4306) [ 70.092560][ T4304] loop3: detected capacity change from 0 to 32768 [ 70.151225][ T4306] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 70.173073][ T4306] BTRFS info (device loop4): using free space tree [ 70.185287][ T4306] BTRFS info (device loop4): has skinny extents [ 70.193137][ T1108] xr_serial ttyUSB0: Failed to set reg 0x0e: -71 [ 70.199727][ T1108] xr_serial: probe of ttyUSB0 failed with error -71 [ 70.229600][ T1108] usb 3-1: USB disconnect, device number 2 [ 70.243939][ T1108] xr_serial 3-1:150.204: device disconnected [ 70.263376][ T4304] XFS (loop3): Mounting V5 Filesystem [ 70.383212][ T4207] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 70.435286][ T4207] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 70.459613][ T4207] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 70.471892][ T4207] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.509570][ T4339] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 70.513815][ T4207] usb 1-1: config 0 descriptor?? [ 70.556140][ T4304] XFS (loop3): Ending clean mount [ 70.570967][ T4306] BTRFS info (device loop4): enabling ssd optimizations [ 70.633801][ T4306] BTRFS error (device loop4): balance: invalid convert metadata profile single [ 70.753545][ T4175] XFS (loop3): Unmounting Filesystem [ 71.044945][ T4207] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 71.077466][ T4207] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 71.216592][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.223356][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.287871][ T4207] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 71.333034][ T4240] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 71.368327][ T4207] usb 1-1: USB disconnect, device number 2 [ 71.519775][ T4369] loop2: detected capacity change from 0 to 128 [ 71.633275][ T4240] usb 2-1: too many configurations: 33, using maximum allowed: 8 [ 71.701668][ T4369] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 71.717332][ T4369] ext4 filesystem being mounted at /4/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 71.820509][ T4378] ALSA: mixer_oss: invalid OSS volume '' [ 71.826648][ T4378] ALSA: mixer_oss: invalid OSS volume '' [ 71.882503][ T4382] loop4: detected capacity change from 0 to 1024 [ 72.458558][ T4403] loop4: detected capacity change from 0 to 64 [ 72.473650][ T4403] ======================================================= [ 72.473650][ T4403] WARNING: The mand mount option has been deprecated and [ 72.473650][ T4403] and is ignored by this kernel. Remove the mand [ 72.473650][ T4403] option from the mount to silence this warning. [ 72.473650][ T4403] ======================================================= [ 72.593278][ T4240] usb 2-1: New USB device found, idVendor=0eb1, idProduct=6668, bcdDevice=57.b8 [ 72.615830][ T4240] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 72.660083][ T4240] usb 2-1: Product: syz [ 72.674658][ T4240] usb 2-1: Manufacturer: syz [ 72.679336][ T4240] usb 2-1: SerialNumber: syz [ 72.716388][ T4240] usb 2-1: config 0 descriptor?? [ 72.767138][ T4240] go7007-loader 2-1:0.0: can't handle multiple config [ 72.787615][ T4240] go7007-loader 2-1:0.0: probe failed [ 72.951608][ T4421] loop4: detected capacity change from 0 to 128 [ 72.996161][ T2358] usb 2-1: USB disconnect, device number 2 [ 73.233482][ T4421] EXT4-fs (loop4): Test dummy encryption mode enabled [ 73.250493][ T4421] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: none. [ 73.284816][ T4421] ext4 filesystem being mounted at /8/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 73.342540][ T4411] loop2: detected capacity change from 0 to 32768 [ 73.418101][ T4421] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 73.464254][ T4419] loop3: detected capacity change from 0 to 32768 [ 73.503257][ T4411] XFS (loop2): Mounting V5 Filesystem [ 73.531427][ T4419] XFS (loop3): Mounting V5 Filesystem [ 73.688971][ T4411] XFS (loop2): Ending clean mount [ 73.772665][ T4419] XFS (loop3): Ending clean mount [ 73.868946][ T4411] capability: warning: `syz.2.53' uses 32-bit capabilities (legacy support in use) [ 73.922134][ T4175] XFS (loop3): Unmounting Filesystem [ 73.944632][ T4179] XFS (loop2): Unmounting Filesystem [ 74.026616][ T4158] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 74.178050][ T4467] loop0: detected capacity change from 0 to 8192 [ 74.257511][ T4467] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 74.313867][ T4467] REISERFS (device loop0): using ordered data mode [ 74.356384][ T4467] reiserfs: using flush barriers [ 74.396762][ T4158] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 74.410649][ T4467] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 74.411319][ T4467] REISERFS (device loop0): checking transaction log (loop0) [ 74.424090][ T4467] REISERFS (device loop0): Using r5 hash to sort names [ 74.445911][ T4158] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 74.476695][ T4158] usb 2-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 74.493705][ T4158] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.504181][ T4474] loop3: detected capacity change from 0 to 64 [ 74.516553][ T4158] usb 2-1: config 0 descriptor?? [ 74.522889][ T4467] REISERFS (device loop0): using 3.5.x disk format [ 74.540309][ T4467] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 74.997292][ T4158] isku 0003:1E7D:319C.0002: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.1-1/input0 [ 75.186689][ T4491] loop3: detected capacity change from 0 to 128 [ 75.193001][ T4493] loop0: detected capacity change from 0 to 1024 [ 75.283128][ T4493] EXT4-fs (loop0): Ignoring removed oldalloc option [ 75.325631][ T4493] EXT4-fs (loop0): mounted filesystem without journal. Opts: stripe=0x0000000000000003,noauto_da_alloc,jqfmt=vfsold,data_err=ignore,noauto_da_alloc,delalloc,noinit_itable,oldalloc,jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 75.364623][ T4489] loop4: detected capacity change from 0 to 32768 [ 75.433094][ T4489] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.71 (4489) [ 75.464536][ T4158] usb 2-1: USB disconnect, device number 3 [ 75.580831][ T4489] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 75.632845][ T4489] BTRFS info (device loop4): setting nodatacow, compression disabled [ 75.673019][ T4489] BTRFS info (device loop4): enabling auto defrag [ 75.680584][ T4489] BTRFS info (device loop4): max_inline at 0 [ 75.739770][ T4489] BTRFS info (device loop4): using free space tree [ 75.759367][ T4489] BTRFS info (device loop4): has skinny extents [ 76.107953][ T4538] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 76.352199][ T4542] device syz_tun entered promiscuous mode [ 76.378452][ T4542] device batadv_slave_0 entered promiscuous mode [ 76.418947][ T4545] syz.0.86 uses obsolete (PF_INET,SOCK_PACKET) [ 76.571870][ T4519] loop2: detected capacity change from 0 to 40427 [ 76.637096][ T4519] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 76.677682][ T4519] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 76.869587][ T4519] F2FS-fs (loop2): Found nat_bits in checkpoint [ 76.928410][ T4566] loop0: detected capacity change from 0 to 64 [ 76.948807][ T4563] loop1: detected capacity change from 0 to 2048 [ 77.039955][ T4563] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 77.046483][ T4519] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 77.066795][ T4519] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 77.117542][ T4566] hfs: request for non-existent node 16777216 in B*Tree [ 77.156608][ T4566] hfs: request for non-existent node 16777216 in B*Tree [ 77.162417][ T26] audit: type=1800 audit(1734642271.688:2): pid=4563 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.92" name="bus" dev="loop1" ino=1336 res=0 errno=0 [ 77.182092][ T4566] hfs: request for non-existent node 16777216 in B*Tree [ 77.208680][ T4566] hfs: request for non-existent node 16777216 in B*Tree [ 77.225117][ T4576] hfs: request for non-existent node 16777216 in B*Tree [ 77.243202][ T4576] hfs: request for non-existent node 16777216 in B*Tree [ 77.326483][ T4252] hfs: request for non-existent node 16777216 in B*Tree [ 77.353391][ T4252] hfs: request for non-existent node 16777216 in B*Tree [ 77.720917][ T4589] loop1: detected capacity change from 0 to 16 [ 77.743080][ T4206] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 77.832650][ T4589] erofs: (device loop1): mounted with root inode @ nid 36. [ 78.131941][ T4595] loop1: detected capacity change from 0 to 2048 [ 78.133184][ T4206] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 78.169889][ T4206] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 78.180203][ T4206] usb 4-1: config 0 interface 0 has no altsetting 0 [ 78.192995][ T4206] usb 4-1: New USB device found, idVendor=06a3, idProduct=0621, bcdDevice= 0.00 [ 78.207192][ T4595] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 78.252983][ T4206] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.273322][ T4206] usb 4-1: config 0 descriptor?? [ 78.311148][ T4580] loop4: detected capacity change from 0 to 40427 [ 78.390338][ T4580] F2FS-fs (loop4): invalid crc value [ 78.433596][ T4603] loop2: detected capacity change from 0 to 512 [ 78.435412][ T1108] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 78.449966][ T4580] F2FS-fs (loop4): Found nat_bits in checkpoint [ 78.522425][ T4603] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 78.553113][ T4603] process 'syz.2.106' launched './file1' with NULL argv: empty string added [ 78.602323][ T4610] loop1: detected capacity change from 0 to 8192 [ 78.646944][ T4580] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 78.689910][ T4610] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 78.703067][ T1108] usb 1-1: Using ep0 maxpacket: 16 [ 78.735195][ T4610] REISERFS (device loop1): using ordered data mode [ 78.742036][ T4610] reiserfs: using flush barriers [ 78.765322][ T4206] saitek 0003:06A3:0621.0003: unbalanced collection at end of report description [ 78.788807][ T4610] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 78.805908][ T4206] saitek 0003:06A3:0621.0003: parse failed [ 78.815225][ T4206] saitek: probe of 0003:06A3:0621.0003 failed with error -22 [ 78.817254][ T4610] REISERFS (device loop1): checking transaction log (loop1) [ 78.823628][ T1108] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 78.858883][ T1108] usb 1-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 78.898702][ T1108] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.930053][ T1108] usb 1-1: config 0 descriptor?? [ 79.002514][ T4173] attempt to access beyond end of device [ 79.002514][ T4173] loop4: rw=2049, want=45104, limit=40427 [ 79.019347][ T4610] REISERFS (device loop1): Using tea hash to sort names [ 79.043957][ T4570] usb 4-1: USB disconnect, device number 2 [ 79.054804][ T4610] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2) [ 79.074745][ T4610] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 79.178479][ T4610] REISERFS error (device loop1): vs-7000 search_by_entry_key: search_by_key returned item position == 0 [ 79.191332][ T4610] REISERFS (device loop1): Remounting filesystem read-only [ 79.418510][ T1108] input: HID 041e:3100 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:041E:3100.0004/input/input5 [ 79.433188][ T4570] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 79.522107][ T1108] creative-sb0540 0003:041E:3100.0004: input,hidraw0: USB HID v0.00 Device [HID 041e:3100] on usb-dummy_hcd.0-1/input0 [ 79.712972][ T4570] usb 3-1: Using ep0 maxpacket: 16 [ 79.796245][ T1108] usb 1-1: USB disconnect, device number 3 [ 79.853222][ T4570] usb 3-1: config 0 has an invalid interface number: 212 but max is 0 [ 79.861742][ T4559] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 79.882086][ T4570] usb 3-1: config 0 has no interface number 0 [ 80.063119][ T4570] usb 3-1: New USB device found, idVendor=0403, idProduct=fa78, bcdDevice=d9.5d [ 80.079892][ T4570] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.089137][ T4570] usb 3-1: Product: syz [ 80.096782][ T4570] usb 3-1: Manufacturer: syz [ 80.106571][ T4570] usb 3-1: SerialNumber: syz [ 80.132819][ T4570] usb 3-1: config 0 descriptor?? [ 80.143117][ T4559] usb 2-1: Using ep0 maxpacket: 16 [ 80.263243][ T4559] usb 2-1: config 0 has no interfaces? [ 80.268863][ T4559] usb 2-1: New USB device found, idVendor=045e, idProduct=05da, bcdDevice= 0.00 [ 80.316327][ T4635] loop3: detected capacity change from 0 to 40427 [ 80.320451][ T4559] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.343662][ T4559] usb 2-1: config 0 descriptor?? [ 80.440611][ T4635] F2FS-fs (loop3): invalid crc value [ 80.464739][ T4635] F2FS-fs (loop3): Found nat_bits in checkpoint [ 80.542989][ T4635] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 80.595077][ T4618] udc-core: couldn't find an available UDC or it's busy [ 80.602104][ T4618] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 80.664429][ T4570] ftdi_sio 3-1:0.212: FTDI USB Serial Device converter detected [ 80.687816][ T4570] usb 3-1: Detected FT-X [ 80.690621][ T4635] attempt to access beyond end of device [ 80.690621][ T4635] loop3: rw=10241, want=45208, limit=40427 [ 80.713057][ T4570] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 80.733202][ T4570] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 80.752990][ T4570] ftdi_sio 3-1:0.212: GPIO initialisation failed: -71 [ 80.763564][ T4570] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 80.817851][ T4570] usb 3-1: USB disconnect, device number 3 [ 80.853359][ T4570] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 80.873267][ T4570] ftdi_sio 3-1:0.212: device disconnected [ 80.946229][ T4649] loop0: detected capacity change from 0 to 32768 [ 80.957100][ T4647] loop4: detected capacity change from 0 to 40427 [ 81.008550][ T4647] F2FS-fs (loop4): Found nat_bits in checkpoint [ 81.099468][ T4649] XFS (loop0): Mounting V5 Filesystem [ 81.129402][ T4647] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 81.269147][ T4173] attempt to access beyond end of device [ 81.269147][ T4173] loop4: rw=2049, want=45104, limit=40427 [ 81.272192][ T4649] XFS (loop0): Ending clean mount [ 81.438648][ T4167] XFS (loop0): Unmounting Filesystem [ 81.482963][ T4559] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 81.752982][ T4559] usb 3-1: Using ep0 maxpacket: 8 [ 81.898899][ T4559] usb 3-1: config 0 has no interfaces? [ 81.904692][ T4559] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 81.921067][ T4559] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.958782][ T4559] usb 3-1: config 0 descriptor?? [ 82.277273][ T4668] loop3: detected capacity change from 0 to 131072 [ 82.295364][ T21] cfg80211: failed to load regulatory.db [ 82.319455][ T4354] usb 3-1: USB disconnect, device number 4 [ 82.381874][ T4668] F2FS-fs (loop3): Found nat_bits in checkpoint [ 82.444424][ T4668] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 82.555883][ T1108] usb 2-1: USB disconnect, device number 4 [ 82.769222][ T4676] loop1: detected capacity change from 0 to 4096 [ 82.856331][ T4676] ntfs3: loop1: Different NTFS' sector size (2048) and media sector size (512) [ 82.970454][ T4680] loop2: detected capacity change from 0 to 1024 [ 83.021172][ T4676] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 83.039359][ T4676] ntfs3: loop1: Failed to load $Extend. [ 83.107018][ T26] audit: type=1800 audit(1734642277.638:3): pid=4676 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.129" name="bus" dev="loop1" ino=33 res=0 errno=0 [ 83.160112][ T26] audit: type=1800 audit(1734642277.678:4): pid=4683 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.129" name="bus" dev="loop1" ino=33 res=0 errno=0 [ 83.180174][ C1] vkms_vblank_simulate: vblank timer overrun [ 83.243886][ T4680] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 83.267072][ T4674] loop0: detected capacity change from 0 to 32768 [ 83.273666][ T1108] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 83.316683][ T4680] EXT4-fs (loop2): shut down requested (0) [ 83.435215][ T4674] XFS (loop0): Mounting V5 Filesystem [ 83.599549][ T4674] XFS (loop0): Ending clean mount [ 83.643240][ T1108] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 83.655105][ T4674] XFS (loop0): User initiated shutdown received. [ 83.662213][ T4674] XFS (loop0): Log I/O Error (0x6) detected at xfs_fs_goingdown+0xde/0x150 (fs/xfs/xfs_fsops.c:491). Shutting down filesystem. [ 83.676012][ T1108] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 83.686748][ T4674] XFS (loop0): Please unmount the filesystem and rectify the problem(s) [ 83.706524][ T1108] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 83.762295][ T4167] XFS (loop0): Unmounting Filesystem [ 83.766696][ T1108] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 83.777269][ T1108] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.809828][ T1108] usb 5-1: config 0 descriptor?? [ 83.934240][ T4570] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 83.962271][ T4705] loop2: detected capacity change from 0 to 512 [ 84.104880][ T4705] EXT4-fs error (device loop2): ext4_orphan_get:1401: inode #15: comm syz.2.137: casefold flag without casefold feature [ 84.119255][ T4705] EXT4-fs error (device loop2): ext4_orphan_get:1406: comm syz.2.137: couldn't read orphan inode 15 (err -117) [ 84.138100][ T4705] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 84.295345][ T1108] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 84.304617][ T1108] plantronics 0003:047F:FFFF.0005: No inputs registered, leaving [ 84.323210][ T1108] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 84.323220][ T4570] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 84.323251][ T4570] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 84.365189][ T4570] usb 4-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00 [ 84.375202][ T4570] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.393153][ T4570] usb 4-1: config 0 descriptor?? [ 84.861521][ T4722] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 84.893688][ T4570] hid (null): global environment stack underflow [ 84.909009][ T4570] uclogic 0003:5543:0522.0006: global environment stack underflow [ 84.935409][ T4570] uclogic 0003:5543:0522.0006: item 0 1 1 11 parsing failed [ 84.951378][ T4570] uclogic 0003:5543:0522.0006: parse failed [ 84.964374][ T4570] uclogic: probe of 0003:5543:0522.0006 failed with error -22 [ 84.981305][ T4724] loop1: detected capacity change from 0 to 2048 [ 85.118760][ T1108] usb 4-1: USB disconnect, device number 3 [ 85.122748][ T4724] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 85.148590][ T4724] ext4 filesystem being mounted at /33/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 85.208345][ T4734] device sit0 entered promiscuous mode [ 85.243184][ T4734] netlink: 'syz.0.148': attribute type 1 has an invalid length. [ 85.255120][ T4734] netlink: 1 bytes leftover after parsing attributes in process `syz.0.148'. [ 85.609549][ T1108] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 85.621462][ T4749] loop2: detected capacity change from 0 to 256 [ 85.770727][ T4749] FAT-fs (loop2): Directory bread(block 64) failed [ 85.807085][ T4749] FAT-fs (loop2): Directory bread(block 65) failed [ 85.824368][ T4749] FAT-fs (loop2): Directory bread(block 66) failed [ 85.830981][ T4749] FAT-fs (loop2): Directory bread(block 67) failed [ 85.862546][ T4759] loop0: detected capacity change from 0 to 256 [ 85.870234][ T1108] usb 2-1: Using ep0 maxpacket: 16 [ 85.877326][ T4749] FAT-fs (loop2): Directory bread(block 68) failed [ 85.888035][ T4749] FAT-fs (loop2): Directory bread(block 69) failed [ 85.920559][ T4749] FAT-fs (loop2): Directory bread(block 70) failed [ 85.938162][ T4749] FAT-fs (loop2): Directory bread(block 71) failed [ 85.946832][ T4759] exFAT-fs (loop0): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 85.959897][ T4749] FAT-fs (loop2): Directory bread(block 72) failed [ 85.978949][ T4749] FAT-fs (loop2): Directory bread(block 73) failed [ 85.993981][ T1108] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 86.014107][ T1108] usb 2-1: config 0 interface 0 has no altsetting 0 [ 86.038916][ T1108] usb 2-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 86.071319][ T1108] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.104086][ T1108] usb 2-1: config 0 descriptor?? [ 86.118032][ T4759] exFAT-fs (loop0): error, exfat_alloc_cluster: invalid used clusters(t:15,u:4294967293) [ 86.118032][ T4759] [ 86.132281][ T4759] exFAT-fs (loop0): Filesystem has been set read-only [ 86.162684][ T4759] exFAT-fs (loop0): error, failed to bmap (inode : ffff8880639b0e60 iblock : 8, err : -5) [ 86.195152][ T4767] exFAT-fs (loop0): error, exfat_alloc_cluster: invalid used clusters(t:15,u:4294967293) [ 86.195152][ T4767] [ 86.214577][ T4767] exFAT-fs (loop0): error, failed to bmap (inode : ffff8880639b07e0 iblock : 0, err : -5) [ 86.328130][ T4770] device syzkaller1 entered promiscuous mode [ 86.480147][ T4559] usb 5-1: USB disconnect, device number 2 [ 86.583681][ T1108] hid (null): unknown global tag 0xe [ 86.589179][ T1108] hid (null): report_id 58501 is invalid [ 86.607796][ T1108] hid (null): unknown global tag 0x1c [ 86.611914][ T4783] loop0: detected capacity change from 0 to 1024 [ 86.629520][ T1108] hid (null): unknown global tag 0xe [ 86.681231][ T1108] hid (null): unknown global tag 0xe [ 86.702868][ T1108] hid (null): unknown global tag 0xe [ 86.725216][ T1108] hid (null): unknown global tag 0xe [ 86.763017][ T1108] hid (null): invalid report_count 1640429044 [ 86.770438][ T1108] hid (null): unknown global tag 0x16 [ 86.790365][ T1108] hid (null): unknown global tag 0xd [ 86.809884][ T1108] hid (null): report_id 2384115945 is invalid [ 86.819696][ T4785] loop2: detected capacity change from 0 to 8192 [ 86.828739][ T1108] cougar 0003:060B:500A.0007: unknown main item tag 0x0 [ 86.866138][ T1108] cougar 0003:060B:500A.0007: unknown main item tag 0x0 [ 86.881846][ T1108] cougar 0003:060B:500A.0007: unknown main item tag 0x0 [ 86.900726][ T1108] cougar 0003:060B:500A.0007: unknown main item tag 0x0 [ 86.920887][ T1108] cougar 0003:060B:500A.0007: unknown main item tag 0x0 [ 86.944508][ T1108] cougar 0003:060B:500A.0007: unknown main item tag 0x0 [ 86.946826][ T4785] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 86.957168][ T1108] cougar 0003:060B:500A.0007: unknown main item tag 0x0 [ 86.977991][ T1108] cougar 0003:060B:500A.0007: unknown main item tag 0x0 [ 86.995292][ T1108] cougar 0003:060B:500A.0007: unknown main item tag 0x0 [ 87.005417][ T1108] cougar 0003:060B:500A.0007: unknown main item tag 0x0 [ 87.022905][ T1108] cougar 0003:060B:500A.0007: unknown main item tag 0x3 [ 87.030174][ T1108] cougar 0003:060B:500A.0007: unknown main item tag 0x4 [ 87.048527][ T1108] cougar 0003:060B:500A.0007: unknown main item tag 0x6 [ 87.052642][ T4785] REISERFS (device loop2): using ordered data mode [ 87.058641][ T1108] cougar 0003:060B:500A.0007: unexpected long global item [ 87.070482][ T4785] reiserfs: using flush barriers [ 87.080302][ T1108] cougar 0003:060B:500A.0007: parse failed [ 87.087202][ T1108] cougar: probe of 0003:060B:500A.0007 failed with error -22 [ 87.099904][ T4785] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 87.107245][ T1108] usb 2-1: USB disconnect, device number 5 [ 87.164179][ T4783] hfsplus: can't free extent [ 87.201906][ T4785] REISERFS (device loop2): checking transaction log (loop2) [ 87.250732][ T4793] hfsplus: can't free extent [ 87.324440][ T4799] loop4: detected capacity change from 0 to 128 [ 87.400775][ T4799] netlink: 12 bytes leftover after parsing attributes in process `syz.4.177'. [ 87.485337][ T4785] REISERFS (device loop2): Using tea hash to sort names [ 87.522614][ T4785] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 87.549279][ T4801] loop1: detected capacity change from 0 to 256 [ 87.585597][ T144] hfsplus: b-tree write err: -5, ino 4 [ 87.658958][ T4801] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 87.720273][ T1092] block nbd4: Attempted send on invalid socket [ 87.728145][ T1092] blk_update_request: I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 87.743479][ T4804] loop3: detected capacity change from 0 to 1024 [ 87.775455][ T4809] loop4: detected capacity change from 0 to 128 [ 87.805549][ T26] audit: type=1800 audit(1734642282.338:5): pid=4801 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.180" name="file2" dev="loop1" ino=1048597 res=0 errno=0 [ 87.877842][ T4804] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,debug_want_extra_isize=0x0000000000000088,resuid=0x0000000000000000,usrjquota=,lazytime,noblock_validity,data_err=abort,data_err=abort,,errors=continue. Quota mode: writeback. [ 87.891171][ T4809] EXT4-fs error (device loop4): ext4_fill_super:4841: inode #2: comm syz.4.178: iget: checksum invalid [ 87.984203][ T4809] EXT4-fs (loop4): get root inode failed [ 87.989889][ T4809] EXT4-fs (loop4): mount failed [ 88.268613][ T4825] netlink: 24 bytes leftover after parsing attributes in process `syz.3.185'. [ 88.608704][ T4843] netlink: 8 bytes leftover after parsing attributes in process `syz.2.196'. [ 88.612991][ T4158] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 88.900765][ T4851] loop2: detected capacity change from 0 to 64 [ 89.023167][ T4158] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 89.054215][ T4158] usb 1-1: config 0 interface 0 altsetting 129 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 89.092897][ T4158] usb 1-1: config 0 interface 0 altsetting 129 endpoint 0x81 has invalid wMaxPacketSize 0 [ 89.132901][ T4158] usb 1-1: config 0 interface 0 has no altsetting 0 [ 89.160030][ T4158] usb 1-1: New USB device found, idVendor=0c12, idProduct=0005, bcdDevice= 0.00 [ 89.187130][ T4158] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.236873][ T4158] usb 1-1: config 0 descriptor?? [ 89.339850][ T4839] loop4: detected capacity change from 0 to 40427 [ 89.373179][ T4833] loop1: detected capacity change from 0 to 40427 [ 89.414460][ T4839] F2FS-fs (loop4): invalid crc value [ 89.434555][ T4839] F2FS-fs (loop4): Found nat_bits in checkpoint [ 89.478847][ T4833] F2FS-fs (loop1): invalid crc value [ 89.513076][ T1108] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 89.516159][ T4839] F2FS-fs (loop4): Cannot turn on quotas: -2 on 1 [ 89.548185][ T4839] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 89.553605][ T4833] F2FS-fs (loop1): Found nat_bits in checkpoint [ 89.663620][ T4833] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 89.703926][ T4173] attempt to access beyond end of device [ 89.703926][ T4173] loop4: rw=2049, want=45112, limit=40427 [ 89.745100][ T4158] zeroplus 0003:0C12:0005.0008: item fetching failed at offset 1/5 [ 89.762399][ T4158] zeroplus 0003:0C12:0005.0008: parse failed [ 89.770122][ T4171] attempt to access beyond end of device [ 89.770122][ T4171] loop1: rw=2049, want=45104, limit=40427 [ 89.772037][ T4158] zeroplus: probe of 0003:0C12:0005.0008 failed with error -22 [ 89.883232][ T1108] usb 3-1: config 0 has an invalid interface number: 255 but max is 0 [ 89.891457][ T1108] usb 3-1: config 0 has no interface number 0 [ 89.905850][ T1108] usb 3-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 89.931358][ T1108] usb 3-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 89.978915][ T1108] usb 3-1: config 0 interface 255 has no altsetting 0 [ 89.988537][ T1108] usb 3-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 89.999498][ T1108] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.014582][ T4158] usb 1-1: USB disconnect, device number 4 [ 90.025215][ T1108] usb 3-1: config 0 descriptor?? [ 90.046495][ T4867] loop3: detected capacity change from 0 to 4096 [ 90.064409][ T1108] ums-realtek 3-1:0.255: USB Mass Storage device detected [ 90.147105][ T4867] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 90.287028][ T4867] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 90.307102][ T4206] usb 3-1: USB disconnect, device number 5 [ 90.441876][ T4873] loop1: detected capacity change from 0 to 128 [ 90.568105][ T4873] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 90.580872][ T4873] ext4 filesystem being mounted at /38/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 90.620295][ T4880] loop4: detected capacity change from 0 to 256 [ 90.785048][ T4886] input: syz1 as /devices/virtual/input/input6 [ 91.163017][ T2358] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 91.220359][ T26] audit: type=1326 audit(1734642285.748:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4900 comm="syz.2.220" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f37911ead29 code=0x0 [ 91.422896][ T2358] usb 5-1: Using ep0 maxpacket: 16 [ 91.426624][ T4878] loop0: detected capacity change from 0 to 32768 [ 91.555870][ T4878] XFS (loop0): Mounting V5 Filesystem [ 91.635895][ T4878] XFS (loop0): Ending clean mount [ 91.716900][ T4167] XFS (loop0): Unmounting Filesystem [ 91.763204][ T2358] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 91.790676][ T2358] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.820375][ T2358] usb 5-1: Product: syz [ 91.830346][ T2358] usb 5-1: Manufacturer: syz [ 91.835102][ T2358] usb 5-1: SerialNumber: syz [ 91.850241][ T2358] usb 5-1: config 0 descriptor?? [ 91.898848][ T2358] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 91.907178][ T2358] usb 5-1: Detected FT-X [ 92.113106][ T2358] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 92.648794][ T2358] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 92.915134][ T4570] usb 5-1: USB disconnect, device number 3 [ 92.983334][ T4570] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 93.060404][ T4570] ftdi_sio 5-1:0.0: device disconnected [ 93.144501][ T4929] loop1: detected capacity change from 0 to 131072 [ 93.289519][ T4945] loop2: detected capacity change from 0 to 16 [ 93.307320][ T4929] F2FS-fs (loop1): invalid crc value [ 93.324493][ T4945] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 93.343983][ T4929] F2FS-fs (loop1): Found nat_bits in checkpoint [ 93.407112][ T4929] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 93.467851][ T4923] loop0: detected capacity change from 0 to 40427 [ 93.566923][ T4923] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 93.585727][ T4923] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 93.611361][ T4923] F2FS-fs (loop0): invalid crc value [ 93.683733][ T4923] F2FS-fs (loop0): Found nat_bits in checkpoint [ 93.783856][ T4962] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 93.826616][ T4923] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 93.849788][ T4923] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 93.872544][ T4962] syz.3.242 (4962) used greatest stack depth: 18168 bytes left [ 93.958731][ T4559] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 94.013563][ T4967] loop4: detected capacity change from 0 to 2048 [ 94.204889][ T4967] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 94.271282][ T4967] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 94.294572][ T4967] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 1 with error 28 [ 94.308657][ T4967] EXT4-fs (loop4): This should not happen!! Data will be lost [ 94.308657][ T4967] [ 94.319868][ T4967] EXT4-fs (loop4): Total free blocks count 0 [ 94.327318][ T4559] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 94.337838][ T4967] EXT4-fs (loop4): Free/Dirty block details [ 94.344353][ T4559] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 94.353780][ T4559] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 94.363414][ T4967] EXT4-fs (loop4): free_blocks=2415919104 [ 94.369338][ T4559] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.378317][ T4967] EXT4-fs (loop4): dirty_blocks=16 [ 94.385114][ T4978] EXT4-fs (loop4): Online defrag not supported with bigalloc [ 94.394181][ T4559] usb 3-1: config 0 descriptor?? [ 94.400687][ T4967] EXT4-fs (loop4): Block reservation details [ 94.426172][ T4967] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 94.458241][ T4977] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 11 with error 28 [ 94.683886][ T4559] usb 3-1: USB disconnect, device number 6 [ 94.789601][ T4984] loop4: detected capacity change from 0 to 64 [ 94.995811][ T4984] overlayfs: upper fs needs to support d_type. [ 95.049443][ T4984] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 95.061924][ T4993] loop0: detected capacity change from 0 to 128 [ 95.079220][ T4984] overlayfs: failed to set xattr on upper [ 95.091499][ T4984] overlayfs: ...falling back to index=off,metacopy=off. [ 95.157374][ T4993] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 95.190362][ T4993] ext4 filesystem being mounted at /56/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 95.222252][ C0] vkms_vblank_simulate: vblank timer overrun [ 95.246850][ T4982] loop3: detected capacity change from 0 to 32768 [ 95.290379][ T4993] syz.0.253 (pid 4993) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 95.317466][ T4982] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop3 scanned by syz.3.251 (4982) [ 95.388696][ T4982] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 95.403164][ T4982] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 95.415005][ T4982] BTRFS info (device loop3): use zstd compression, level 3 [ 95.432827][ T4982] BTRFS info (device loop3): doing ref verification [ 95.439469][ T4982] BTRFS info (device loop3): using free space tree [ 95.492875][ T4982] BTRFS info (device loop3): has skinny extents [ 95.638427][ T5009] netlink: 4 bytes leftover after parsing attributes in process `syz.0.256'. [ 95.772531][ T26] audit: type=1326 audit(2000000003.990:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5021 comm="syz.4.259" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f106a1e2d29 code=0x0 [ 95.795164][ C0] vkms_vblank_simulate: vblank timer overrun [ 95.879894][ T4982] BTRFS info (device loop3): enabling ssd optimizations [ 95.952817][ T26] audit: type=1800 audit(2000000004.170:8): pid=4982 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.251" name="bus" dev="loop3" ino=263 res=0 errno=0 [ 96.070798][ T5041] loop0: detected capacity change from 0 to 8 [ 96.112884][ T26] audit: type=1800 audit(2000000004.190:9): pid=4982 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.251" name="bus" dev="loop3" ino=263 res=0 errno=0 [ 96.129278][ T5043] loop2: detected capacity change from 0 to 512 [ 96.290775][ T5043] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 96.313206][ T5043] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 96.483993][ T5043] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2816: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 96.544567][ T5043] EXT4-fs (loop2): 1 truncate cleaned up [ 96.564541][ T5043] EXT4-fs (loop2): mounted filesystem without journal. Opts: i_version,nombcache,debug_want_extra_isize=0x0000000000000068,lazytime,block_validity,init_itable=0x0000000000008001,errors=remount-ro,data_err=ignore,. Quota mode: none. [ 96.719832][ T5043] EXT4-fs error (device loop2): ext4_find_extent:893: inode #15: comm syz.2.265: inode has invalid extent depth: 25964 [ 96.727747][ T5058] input: syz0 as /devices/virtual/input/input7 [ 96.831583][ T5043] EXT4-fs (loop2): Remounting filesystem read-only [ 96.854317][ T5043] fs-verity (loop2, inode 15): Error -117 getting verity descriptor size [ 96.887113][ T5054] loop3: detected capacity change from 0 to 4096 [ 96.945184][ T26] audit: type=1326 audit(2000000005.170:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5059 comm="syz.4.271" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f106a1e2d29 code=0x0 [ 97.153480][ T5067] loop2: detected capacity change from 0 to 512 [ 97.239378][ T5070] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 97.248381][ T5067] EXT4-fs (loop2): mounted filesystem without journal. Opts: sb=0x0000000000000001,nodioread_nolock,,errors=continue. Quota mode: writeback. [ 97.263305][ T5067] ext4 filesystem being mounted at /52/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 97.386697][ T5075] ALSA: mixer_oss: invalid OSS volume ',ß=»Mp„F œŠz˜“Ç{jîĨÌYÙ*9OF ' [ 97.575706][ T5081] device geneve2 entered promiscuous mode [ 97.853527][ T4209] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 97.889331][ T5093] netlink: 8 bytes leftover after parsing attributes in process `syz.0.284'. [ 98.248159][ T4209] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 98.259430][ T4209] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 98.276974][ T4209] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 98.290916][ T4209] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 98.437776][ T4209] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 98.443573][ T5111] capability: warning: `syz.1.292' uses deprecated v2 capabilities in a way that may be insecure [ 98.447296][ T4209] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 98.472400][ T4209] usb 3-1: Manufacturer: syz [ 98.479515][ T4209] usb 3-1: config 0 descriptor?? [ 98.790294][ T5113] loop1: detected capacity change from 0 to 32768 [ 98.833703][ T5113] XFS: ikeep mount option is deprecated. [ 98.915842][ T5113] XFS (loop1): Mounting V5 Filesystem [ 98.966082][ T5113] XFS (loop1): Ending clean mount [ 98.980524][ T5113] XFS (loop1): Quotacheck needed: Please wait. [ 99.004857][ T4209] appleir 0003:05AC:8243.0009: No inputs registered, leaving [ 99.038415][ T4209] appleir 0003:05AC:8243.0009: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 99.122628][ T5113] XFS (loop1): Quotacheck: Done. [ 99.357272][ T21] usb 3-1: USB disconnect, device number 7 [ 99.385805][ T4171] XFS (loop1): Unmounting Filesystem [ 99.410037][ T5138] device syzkaller1 entered promiscuous mode [ 99.776869][ T5146] loop4: detected capacity change from 0 to 256 [ 99.855821][ T5146] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001e4a3, chksum : 0x009b275e, utbl_chksum : 0x7319d30d) [ 100.302923][ T1108] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 100.481352][ T5173] loop4: detected capacity change from 0 to 128 [ 100.565687][ T1108] usb 2-1: Using ep0 maxpacket: 16 [ 100.612691][ T5148] loop3: detected capacity change from 0 to 32768 [ 100.704236][ T1108] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 100.740932][ T1108] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 100.762889][ T1108] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 100.789164][ T1108] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 100.840340][ T1108] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.856982][ T5187] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 100.867183][ T5187] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 100.868685][ T26] audit: type=1800 audit(2000000009.090:11): pid=5148 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.306" name="bus" dev="loop3" ino=7 res=0 errno=0 [ 100.876268][ T5187] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 100.896181][ C0] vkms_vblank_simulate: vblank timer overrun [ 100.911025][ T5187] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 100.936914][ T5187] device vxlan0 entered promiscuous mode [ 100.950232][ T1108] usb 2-1: config 0 descriptor?? [ 100.972469][ T5187] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 100.981598][ T5187] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 100.990718][ T5187] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 100.999695][ T5187] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 101.320670][ T5195] loop3: detected capacity change from 0 to 1024 [ 101.450271][ T5195] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsv1,min_batch_time=0x00000000000000c0,noblock_validity,noauto_da_alloc,i_version,errors=remount-ro,resgid=0x0000000000000000,grpquota,sysvgroups,. Quota mode: writeback. [ 101.455242][ T1108] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0 [ 101.481386][ T1108] microsoft 0003:045E:07DA.000A: ignoring exceeding usage max [ 101.491958][ T1108] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0 [ 101.499327][ T1108] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0 [ 101.506739][ T1108] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0 [ 101.514080][ T1108] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0 [ 101.521330][ T1108] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0 [ 101.538233][ T1108] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.000A/input/input8 [ 101.599855][ T5195] EXT4-fs error (device loop3): ext4_clear_blocks:883: inode #14: comm syz.3.321: attempt to clear invalid blocks 1634560256 len 1 [ 101.632129][ T5195] EXT4-fs (loop3): Remounting filesystem read-only [ 101.637683][ T1108] microsoft 0003:045E:07DA.000A: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 101.713016][ T4209] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 101.894508][ T7] usb 2-1: USB disconnect, device number 6 [ 102.004175][ T4209] usb 3-1: Using ep0 maxpacket: 16 [ 102.143086][ T4209] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 102.152257][ T4209] usb 3-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 102.171697][ T4175] device syz_tun left promiscuous mode [ 102.180464][ T4209] usb 3-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 102.193184][ T4209] usb 3-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 102.228395][ T4209] usb 3-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 102.253989][ T4209] usb 3-1: config 1 interface 0 has no altsetting 0 [ 102.284630][ T4209] usb 3-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 102.303470][ T4209] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.370624][ T4209] ums-sddr09 3-1:1.0: USB Mass Storage device detected [ 102.370878][ T5206] loop0: detected capacity change from 0 to 32768 [ 102.539976][ T5217] fuse: Bad value for 'fd' [ 102.557596][ T5216] loop1: detected capacity change from 0 to 1024 [ 102.662908][ T4209] scsi host1: usb-storage 3-1:1.0 [ 102.756319][ T5216] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:476: comm syz.1.330: Invalid block bitmap block 0 in block_group 0 [ 102.798944][ T5216] Quota error (device loop1): write_blk: dquota write failed [ 102.808502][ T5216] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 102.822713][ T5216] EXT4-fs error (device loop1): ext4_acquire_dquot:6197: comm syz.1.330: Failed to acquire dquot type 0 [ 102.825417][ T5221] loop0: detected capacity change from 0 to 128 [ 102.841745][ T5216] EXT4-fs error (device loop1): ext4_free_blocks:6223: comm syz.1.330: Freeing blocks not in datazone - block = 0, count = 4096 [ 102.873184][ T4209] usb 3-1: USB disconnect, device number 8 [ 102.896926][ T5216] EXT4-fs error (device loop1): ext4_read_inode_bitmap:140: comm syz.1.330: Invalid inode bitmap blk 0 in block_group 0 [ 102.916729][ T9] Quota error (device loop1): remove_tree: Getting block too big (0 >= 9) [ 102.931598][ T9] EXT4-fs error (device loop1): ext4_release_dquot:6220: comm kworker/u4:0: Failed to release dquot type 0 [ 102.990538][ T5216] EXT4-fs error (device loop1) in ext4_free_inode:362: Corrupt filesystem [ 103.042349][ T5216] EXT4-fs (loop1): 1 orphan inode deleted [ 103.069994][ T5216] EXT4-fs (loop1): mounted filesystem without journal. Opts: €; ,errors=continue. Quota mode: writeback. [ 103.216304][ T5222] chnl_net:caif_netlink_parms(): no params data found [ 103.273682][ T5222] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.281091][ T5222] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.292457][ T5222] device bridge_slave_0 entered promiscuous mode [ 103.317307][ T2358] kernel read not supported for file / (pid: 2358 comm: kworker/0:3) [ 103.338338][ T5222] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.366033][ T5222] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.378401][ T5222] device bridge_slave_1 entered promiscuous mode [ 103.405655][ T5222] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 103.417996][ T5222] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 103.499654][ T5237] netlink: 'syz.2.336': attribute type 3 has an invalid length. [ 103.534688][ T5222] team0: Port device team_slave_0 added [ 103.551097][ T5239] loop1: detected capacity change from 0 to 1024 [ 103.560740][ T5222] team0: Port device team_slave_1 added [ 103.578852][ T5241] loop2: detected capacity change from 0 to 128 [ 103.612414][ T5222] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 103.619859][ T5222] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 103.622886][ T4158] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 103.646297][ T5222] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.648481][ T5222] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 103.679054][ T5222] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 103.709812][ T5222] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.780139][ T26] audit: type=1804 audit(2000000012.000:12): pid=5241 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.337" name="/newroot/62/file0/file0" dev="loop2" ino=1048600 res=1 errno=0 [ 103.811510][ T5239] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 103.827003][ T5222] device hsr_slave_0 entered promiscuous mode [ 103.836760][ T5239] ext4 filesystem being mounted at /56/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 103.854041][ T5222] device hsr_slave_1 entered promiscuous mode [ 103.873235][ T5222] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 103.882539][ T5222] Cannot create hsr debugfs directory [ 103.913748][ T4158] usb 5-1: Using ep0 maxpacket: 8 [ 104.042982][ T4158] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 104.065475][ T4158] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 104.106495][ T4158] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 104.118793][ T4158] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 104.147867][ T5222] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.173241][ T4158] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 104.182337][ T4158] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.222572][ T5251] loop0: detected capacity change from 0 to 256 [ 104.239468][ T5252] loop2: detected capacity change from 0 to 47 [ 104.321924][ T5252] minix_free_block (loop2:20): bit already cleared [ 104.331964][ T5251] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 104.338888][ T5252] minix_free_block (loop2:21): bit already cleared [ 104.355886][ T5252] minix_free_block (loop2:19): bit already cleared [ 104.366748][ T5222] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.378373][ T5251] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 104.449523][ T26] audit: type=1326 audit(2000000012.670:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5250 comm="syz.0.341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56ee66cd29 code=0x7ffc0000 [ 104.498215][ T5222] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.521355][ T26] audit: type=1326 audit(2000000012.670:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5250 comm="syz.0.341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56ee66cd29 code=0x7ffc0000 [ 104.524315][ T4158] usb 5-1: usb_control_msg returned -32 [ 104.558264][ T5254] loop1: detected capacity change from 0 to 1024 [ 104.559593][ T4158] usbtmc 5-1:16.0: can't read capabilities [ 104.565630][ T26] audit: type=1326 audit(2000000012.670:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5250 comm="syz.0.341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f56ee66cd29 code=0x7ffc0000 [ 104.593360][ T26] audit: type=1326 audit(2000000012.670:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5250 comm="syz.0.341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56ee66cd29 code=0x7ffc0000 [ 104.628414][ T26] audit: type=1326 audit(2000000012.670:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5250 comm="syz.0.341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56ee66cd29 code=0x7ffc0000 [ 104.687782][ T5222] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.714974][ T5258] loop2: detected capacity change from 0 to 1024 [ 104.726208][ T26] audit: type=1326 audit(2000000012.670:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5250 comm="syz.0.341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=8 compat=0 ip=0x7f56ee66cd29 code=0x7ffc0000 [ 104.952066][ T5222] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 104.967044][ T154] hfsplus: b-tree write err: -5, ino 4 [ 105.043011][ T5222] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 105.063896][ T4567] Bluetooth: hci3: command 0x0409 tx timeout [ 105.079598][ T5222] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 105.184123][ T5222] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 105.210298][ T5271] loop0: detected capacity change from 0 to 16 [ 105.303113][ T5271] erofs: (device loop0): mounted with root inode @ nid 36. [ 105.451106][ T5222] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.494829][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 105.528961][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 105.552188][ T5222] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.586424][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 105.602617][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 105.625928][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.633117][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.672196][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 105.694243][ T5281] netlink: 'syz.0.352': attribute type 4 has an invalid length. [ 105.714684][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 105.726664][ T5279] delete_channel: no stack [ 105.739764][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 105.761724][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.768922][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.834066][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 105.879892][ T5269] loop2: detected capacity change from 0 to 40427 [ 105.890351][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 105.933516][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 105.946368][ T5269] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 105.946397][ T5269] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 105.956902][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 105.957740][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 105.959193][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 105.969432][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 105.970176][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 105.973963][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 105.974570][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 105.978318][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 106.064298][ T5222] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 106.077972][ T5269] F2FS-fs (loop2): Found nat_bits in checkpoint [ 106.181387][ T5269] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 106.202627][ T5269] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 106.359696][ T5303] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 106.371742][ T4158] usb 5-1: USB disconnect, device number 4 [ 106.395802][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 106.400327][ T5303] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 106.422405][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 106.428531][ T5269] attempt to access beyond end of device [ 106.428531][ T5269] loop2: rw=2049, want=40968, limit=40427 [ 106.439494][ T5222] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.493282][ T2358] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 106.510723][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 106.534275][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 106.582263][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 106.597979][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 106.631351][ T5222] device veth0_vlan entered promiscuous mode [ 106.649187][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 106.674354][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 106.704867][ T5222] device veth1_vlan entered promiscuous mode [ 106.777114][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 106.814665][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 106.843487][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 106.874028][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 106.904608][ T5222] device veth0_macvtap entered promiscuous mode [ 106.936788][ T5222] device veth1_macvtap entered promiscuous mode [ 106.939805][ T2358] usb 2-1: config index 0 descriptor too short (expected 45, got 36) [ 106.964053][ T2358] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 106.992817][ T2358] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 107.001250][ T5222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 107.012843][ T2358] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 107.037823][ T5222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.045627][ T2358] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 107.068338][ T5222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 107.073445][ T2358] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.096105][ T5222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.112081][ T2358] usb 2-1: config 0 descriptor?? [ 107.128796][ T5222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 107.137223][ T4207] Bluetooth: hci3: command 0x041b tx timeout [ 107.145954][ T5296] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 107.167962][ T5222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.195408][ T5222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 107.227859][ T5222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.273253][ T5222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 107.284303][ T5222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.296764][ T5222] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.312373][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 107.322012][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 107.338983][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 107.351250][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 107.395032][ T5222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 107.420479][ T5222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.438021][ T5222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 107.449984][ T5222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.468041][ T5222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 107.488712][ T5222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.500369][ T5222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 107.522411][ T5222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.549668][ T5222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 107.568380][ T5222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.595642][ T5222] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.614959][ T2358] plantronics 0003:047F:FFFF.000B: unknown main item tag 0xd [ 107.626952][ T2358] plantronics 0003:047F:FFFF.000B: No inputs registered, leaving [ 107.630271][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 107.655360][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 107.670648][ T2358] plantronics 0003:047F:FFFF.000B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 107.691342][ T5222] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.710542][ T5222] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.725129][ T5322] loop4: detected capacity change from 0 to 256 [ 107.761988][ T5222] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.784711][ T5222] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.948175][ T5322] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 108.002414][ T4252] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.015659][ T2358] usb 2-1: USB disconnect, device number 7 [ 108.027403][ T4252] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.068206][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 108.105440][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.140812][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.163704][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 108.245054][ T21] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 108.522989][ T21] usb 3-1: Using ep0 maxpacket: 32 [ 108.637938][ T5335] loop1: detected capacity change from 0 to 256 [ 108.653137][ T21] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 108.671662][ T5329] loop0: detected capacity change from 0 to 32768 [ 108.682896][ T21] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 108.764456][ T5335] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 108.796599][ T5335] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 108.818893][ T5329] (syz.0.370,5329,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 108.873288][ T21] usb 3-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 108.885738][ T21] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.894729][ T5329] (syz.0.370,5329,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 108.919424][ T21] usb 3-1: Product: syz [ 108.924146][ T21] usb 3-1: Manufacturer: syz [ 108.935256][ T21] usb 3-1: SerialNumber: syz [ 108.947521][ T21] usb 3-1: config 0 descriptor?? [ 109.012299][ T5329] JBD2: Ignoring recovery information on journal [ 109.125072][ T5329] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 109.216698][ T2358] usb 3-1: USB disconnect, device number 9 [ 109.275394][ T5329] (syz.0.370,5329,0):ocfs2_read_blocks_sync:112 ERROR: status = -12 [ 109.285792][ T5329] (syz.0.370,5329,0):ocfs2_get_suballoc_slot_bit:2709 ERROR: read block 17179869188 failed -12 [ 109.296568][ T5329] (syz.0.370,5329,0):ocfs2_get_suballoc_slot_bit:2741 ERROR: status = -12 [ 109.305613][ T5329] (syz.0.370,5329,0):ocfs2_test_inode_bit:2823 ERROR: get alloc slot and bit failed -12 [ 109.315831][ T5329] (syz.0.370,5329,0):ocfs2_test_inode_bit:2864 ERROR: status = -12 [ 109.324487][ T5329] (syz.0.370,5329,0):ocfs2_get_dentry:78 ERROR: test inode bit failed -12 [ 109.365632][ T5333] loop4: detected capacity change from 0 to 32768 [ 109.419449][ T4167] ocfs2: Unmounting device (7,0) on (node local) [ 109.469882][ T5333] BTRFS: device fsid d552757d-9c39-40e3-95f0-16d819589928 devid 1 transid 8 /dev/loop4 scanned by syz.4.372 (5333) [ 109.569562][ T5333] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 109.598893][ T5333] BTRFS info (device loop4): enabling ssd optimizations [ 109.631059][ T5333] BTRFS info (device loop4): using spread ssd allocation scheme [ 109.684701][ T5333] BTRFS info (device loop4): not using spread ssd allocation scheme [ 109.723026][ T5333] BTRFS info (device loop4): disabling tree log [ 109.729725][ T5333] BTRFS info (device loop4): turning on sync discard [ 109.736822][ T5333] BTRFS info (device loop4): setting nodatacow, compression disabled [ 109.745257][ T5333] BTRFS info (device loop4): force clearing of disk cache [ 109.752615][ T5333] BTRFS info (device loop4): using spread ssd allocation scheme [ 109.772934][ T5333] BTRFS info (device loop4): setting datasum, datacow enabled [ 109.820902][ T5333] BTRFS info (device loop4): using free space tree [ 109.834719][ T5333] BTRFS info (device loop4): has skinny extents [ 110.054479][ T5363] netlink: 12 bytes leftover after parsing attributes in process `syz.1.377'. [ 110.145412][ T5333] BTRFS info (device loop4): clearing free space tree [ 110.152732][ T5333] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 110.213817][ T5333] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 110.394365][ T5333] BTRFS info (device loop4): creating free space tree [ 110.404980][ T5333] BTRFS info (device loop4): setting compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 110.414743][ T5333] BTRFS info (device loop4): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 110.485772][ T5372] loop1: detected capacity change from 0 to 8192 [ 110.550928][ T5346] loop2: detected capacity change from 0 to 40427 [ 110.583525][ T5372] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 110.594207][ T5372] REISERFS (device loop1): using ordered data mode [ 110.601125][ T5372] reiserfs: using flush barriers [ 110.607869][ T5372] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 110.624985][ T5372] REISERFS (device loop1): checking transaction log (loop1) [ 110.646300][ T5346] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 110.743021][ T5346] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 110.779758][ T5346] F2FS-fs (loop2): invalid crc value [ 110.857274][ T5346] F2FS-fs (loop2): Found nat_bits in checkpoint [ 110.887684][ T9] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.982506][ T5372] REISERFS (device loop1): Using tea hash to sort names [ 111.006913][ T5372] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 111.109921][ T5346] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 111.152677][ T5346] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 111.713940][ T5393] loop0: detected capacity change from 0 to 4096 [ 111.775985][ T5393] __ntfs_error: 5 callbacks suppressed [ 111.776004][ T5393] ntfs: (device loop0): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 111.776790][ T4252] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 111.781507][ T5393] ntfs: (device loop0): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 111.813090][ T5393] ntfs: (device loop0): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 111.871858][ T4252] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 111.881641][ T5393] ntfs: (device loop0): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 111.920515][ T5393] ntfs: (device loop0): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 111.992331][ T5393] ntfs: volume version 3.1. [ 112.022420][ T5393] ntfs: (device loop0): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 112.067393][ T5393] ntfs: (device loop0): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 112.101831][ T9] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.162896][ T5393] ntfs: (device loop0): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 112.272516][ T5393] ntfs: (device loop0): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 112.297160][ T9] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.320487][ T5393] ntfs: (device loop0): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 112.391282][ T5390] chnl_net:caif_netlink_parms(): no params data found [ 112.563619][ T9] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.654812][ T5415] loop4: detected capacity change from 0 to 2048 [ 112.732547][ T5415] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 112.780144][ T5390] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.805618][ T5422] loop0: detected capacity change from 0 to 128 [ 112.832365][ T5390] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.851968][ T5390] device bridge_slave_0 entered promiscuous mode [ 112.965145][ T5390] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.979381][ T5390] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.011798][ T5390] device bridge_slave_1 entered promiscuous mode [ 113.176710][ T5390] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 113.246456][ T5390] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 113.423372][ T5390] team0: Port device team_slave_0 added [ 113.517988][ T5390] team0: Port device team_slave_1 added [ 113.613228][ T4210] Bluetooth: hci3: command 0x0409 tx timeout [ 113.633378][ T5390] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 113.654978][ T5390] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 113.754940][ T5390] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 114.050550][ T5390] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 114.068067][ T5390] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 114.185998][ T5390] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 114.322996][ T2358] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 114.367593][ T5390] device hsr_slave_0 entered promiscuous mode [ 114.393831][ T5390] device hsr_slave_1 entered promiscuous mode [ 114.413512][ T5390] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 114.438138][ T5390] Cannot create hsr debugfs directory [ 114.592889][ T2358] usb 1-1: Using ep0 maxpacket: 8 [ 114.735831][ T2358] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 114.758637][ T2358] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 114.794097][ T2358] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 114.815661][ T2358] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 114.842459][ T2358] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 114.862092][ T2358] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.869509][ T5451] loop2: detected capacity change from 0 to 32768 [ 114.957348][ T5451] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop2 scanned by syz.2.402 (5451) [ 114.999453][ T5456] loop4: detected capacity change from 0 to 40427 [ 115.050989][ T5451] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 115.078189][ T5456] F2FS-fs (loop4): Insane cp_payload (553648128 >= 504) [ 115.095504][ T5456] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 115.104263][ T5451] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 115.158696][ T5456] F2FS-fs (loop4): invalid crc value [ 115.168102][ T5451] BTRFS info (device loop2): use zstd compression, level 3 [ 115.182972][ T2358] usb 1-1: usb_control_msg returned -32 [ 115.188772][ T2358] usbtmc 1-1:16.0: can't read capabilities [ 115.207501][ T5451] BTRFS info (device loop2): doing ref verification [ 115.223429][ T5451] BTRFS info (device loop2): using free space tree [ 115.225511][ T5456] F2FS-fs (loop4): Found nat_bits in checkpoint [ 115.238843][ T5451] BTRFS info (device loop2): has skinny extents [ 115.294558][ T5480] loop1: detected capacity change from 0 to 8 [ 115.425087][ T5456] F2FS-fs (loop4): Start checkpoint disabled! [ 115.489623][ T5456] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 115.513045][ T5456] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 115.570106][ T5451] BTRFS info (device loop2): enabling ssd optimizations [ 115.683158][ T1108] Bluetooth: hci3: command 0x041b tx timeout [ 115.990359][ T5390] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 116.044455][ T5390] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 116.483592][ T9] device hsr_slave_0 left promiscuous mode [ 116.511069][ T9] device hsr_slave_1 left promiscuous mode [ 116.524895][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 116.561329][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 116.573305][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 116.580777][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 116.623973][ T9] device bridge_slave_1 left promiscuous mode [ 116.665642][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.700314][ T5522] loop4: detected capacity change from 0 to 2048 [ 116.740455][ T9] device bridge_slave_0 left promiscuous mode [ 116.753153][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.758114][ T5522] EXT4-fs (loop4): Ignoring removed nobh option [ 116.803676][ T5522] EXT4-fs (loop4): Mount option "nouser_xattr" will be removed by 3.5 [ 116.803676][ T5522] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 116.803676][ T5522] [ 116.873512][ T9] device veth1_macvtap left promiscuous mode [ 116.883774][ T9] device veth0_macvtap left promiscuous mode [ 116.889903][ T9] device veth1_vlan left promiscuous mode [ 116.891453][ T5522] EXT4-fs (loop4): mounted filesystem without journal. Opts: lazytime,i_version,nobh,delalloc,minixdf,lazytime,nouser_xattr,inode_readahead_blks=0x0000000008000000,abort,bsddf,,errors=continue. Quota mode: none. [ 116.955906][ T5522] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 116.968840][ T9] device veth0_vlan left promiscuous mode [ 117.074175][ T4210] usb 1-1: USB disconnect, device number 5 [ 117.086395][ T5530] loop2: detected capacity change from 0 to 2048 [ 117.088807][ T5508] loop1: detected capacity change from 0 to 40427 [ 117.183486][ T5508] F2FS-fs (loop1): invalid crc value [ 117.186018][ T5530] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 117.253612][ T5508] F2FS-fs (loop1): Found nat_bits in checkpoint [ 117.288790][ T5530] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 117.296473][ T5530] EXT4-fs (loop2): Remounting file system with no journal so ignoring journalled data option [ 117.331173][ T5538] loop4: detected capacity change from 0 to 2048 [ 117.390899][ T5538] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 117.435291][ T5541] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 117.460448][ T4179] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2219: inode #12: comm syz-executor: corrupted in-inode xattr [ 117.483505][ T5508] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 117.538710][ T4179] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2219: inode #12: comm syz-executor: corrupted in-inode xattr [ 117.650039][ T26] kauditd_printk_skb: 10 callbacks suppressed [ 117.650063][ T26] audit: type=1800 audit(2000000025.870:28): pid=5508 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.409" name="file1" dev="loop1" ino=10 res=0 errno=0 [ 117.715605][ T4171] attempt to access beyond end of device [ 117.715605][ T4171] loop1: rw=2049, want=45104, limit=40427 [ 117.762921][ T4158] Bluetooth: hci3: command 0x040f tx timeout [ 117.965212][ T9] team0 (unregistering): Port device team_slave_1 removed [ 117.989457][ T9] team0 (unregistering): Port device team_slave_0 removed [ 118.029733][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 118.101261][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 118.281066][ T9] bond0 (unregistering): Released all slaves [ 118.418071][ T5390] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 118.449492][ T5390] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 118.829650][ T5390] 8021q: adding VLAN 0 to HW filter on device bond0 [ 118.843015][ T1108] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 118.876474][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 118.893713][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 118.935298][ T5390] 8021q: adding VLAN 0 to HW filter on device team0 [ 118.975185][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 119.010938][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 119.043961][ T1278] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.051125][ T1278] bridge0: port 1(bridge_slave_0) entered forwarding state [ 119.104925][ T1108] usb 1-1: Using ep0 maxpacket: 16 [ 119.112177][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 119.154263][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 119.184209][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 119.208653][ T1278] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.215887][ T1278] bridge0: port 2(bridge_slave_1) entered forwarding state [ 119.225650][ T1108] usb 1-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 119.245458][ T1108] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.295172][ T1108] usb 1-1: config 0 descriptor?? [ 119.330542][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 119.348771][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 119.388793][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 119.400220][ T1108] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 119.421748][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 119.438032][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 119.464121][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 119.489249][ T5390] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 119.513354][ T5390] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 119.546687][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 119.573746][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 119.593921][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 119.629023][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 119.668807][ T5554] loop1: detected capacity change from 0 to 40427 [ 119.671690][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 119.705745][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 119.720031][ T5554] F2FS-fs (loop1): Small segment_count (9 < 1 * 24) [ 119.727849][ T5575] netlink: 'syz.4.424': attribute type 10 has an invalid length. [ 119.736394][ T5554] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 119.801955][ T5554] F2FS-fs (loop1): Found nat_bits in checkpoint [ 119.844950][ T5575] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 119.845840][ T4158] Bluetooth: hci3: command 0x0419 tx timeout [ 119.874438][ T5575] team0: Port device batadv0 added [ 119.951396][ T5554] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 119.989260][ T5554] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 120.049955][ T5583] loop4: detected capacity change from 0 to 256 [ 120.192119][ T5390] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 120.205787][ T26] audit: type=1804 audit(2000000028.430:29): pid=5583 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.425" name="/newroot/85/bus/file0" dev="loop4" ino=1048605 res=1 errno=0 [ 120.229255][ T4171] attempt to access beyond end of device [ 120.229255][ T4171] loop1: rw=2049, want=45104, limit=40427 [ 120.250234][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 120.263121][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 120.264765][ T1108] gspca_sonixj: reg_r err -71 [ 120.306868][ T1108] sonixj: probe of 1-1:0.0 failed with error -71 [ 120.344503][ T361] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 120.369651][ T361] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 120.378842][ T1108] usb 1-1: USB disconnect, device number 6 [ 120.560458][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 120.578909][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 120.605365][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 120.662438][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 120.684428][ T5572] chnl_net:caif_netlink_parms(): no params data found [ 120.716091][ T5390] device veth0_vlan entered promiscuous mode [ 120.801290][ T5390] device veth1_vlan entered promiscuous mode [ 120.938596][ T4354] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 120.992239][ T5572] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.006232][ T5572] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.019826][ T5572] device bridge_slave_0 entered promiscuous mode [ 121.033670][ T5572] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.040755][ T5572] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.049522][ T5572] device bridge_slave_1 entered promiscuous mode [ 121.114346][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 121.143522][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 121.179704][ T5390] device veth0_macvtap entered promiscuous mode [ 121.235286][ T5572] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 121.257380][ T5390] device veth1_macvtap entered promiscuous mode [ 121.284172][ T5572] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 121.303438][ T4354] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 121.344177][ T4354] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 121.369664][ T5572] team0: Port device team_slave_0 added [ 121.379781][ T4354] usb 5-1: New USB device found, idVendor=0419, idProduct=0600, bcdDevice= 0.00 [ 121.391397][ T5572] team0: Port device team_slave_1 added [ 121.405748][ T4354] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.423032][ T7] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 121.451581][ T4354] usb 5-1: config 0 descriptor?? [ 121.479766][ T5572] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 121.488460][ T5572] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 121.520918][ T5572] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 121.544729][ T5390] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 121.557100][ T5390] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.567501][ T5390] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 121.578496][ T5390] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.588799][ T5390] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 121.603533][ T1108] Bluetooth: hci4: command 0x0409 tx timeout [ 121.618990][ T5390] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.622985][ T2358] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 121.632238][ T5390] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 121.656581][ T5390] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.676633][ T5390] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 121.693054][ T5390] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.705037][ T5390] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 121.715282][ T5572] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 121.724080][ T5572] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 121.751308][ T5572] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 121.762734][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 121.786530][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 121.802729][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 121.811764][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 121.825440][ T5390] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 121.836661][ T5390] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.846859][ T5390] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 121.858714][ T7] usb 2-1: config 0 has an invalid interface number: 3 but max is 0 [ 121.866890][ T7] usb 2-1: config 0 has no interface number 0 [ 121.873065][ T5390] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.883199][ T2358] usb 1-1: Using ep0 maxpacket: 16 [ 121.888495][ T7] usb 2-1: config 0 interface 3 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 121.898261][ T5390] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 121.908803][ T7] usb 2-1: config 0 interface 3 altsetting 0 endpoint 0x8 has invalid maxpacket 1024, setting to 64 [ 121.919776][ T5390] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.931228][ T7] usb 2-1: config 0 interface 3 altsetting 0 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 121.937791][ T5390] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 121.942337][ T7] usb 2-1: config 0 interface 3 altsetting 0 endpoint 0xA has invalid maxpacket 1023, setting to 64 [ 121.963179][ T5390] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.964699][ T7] usb 2-1: New USB device found, idVendor=1199, idProduct=6821, bcdDevice=98.59 [ 121.980660][ T5390] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 121.982536][ T7] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.003811][ T7] usb 2-1: config 0 descriptor?? [ 122.003848][ T4354] samsung 0003:0419:0600.000C: unknown main item tag 0x0 [ 122.014144][ T5390] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.026018][ T4354] samsung 0003:0419:0600.000C: unknown main item tag 0x0 [ 122.028599][ T5390] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 122.038350][ T4354] samsung 0003:0419:0600.000C: unknown main item tag 0x0 [ 122.051663][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 122.061594][ T7] hub 2-1:0.3: bad descriptor, ignoring hub [ 122.063763][ T4354] samsung 0003:0419:0600.000C: unknown main item tag 0x0 [ 122.067946][ T2358] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 122.082255][ T4354] samsung 0003:0419:0600.000C: unknown main item tag 0x0 [ 122.087123][ T7] hub: probe of 2-1:0.3 failed with error -5 [ 122.103645][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 122.121825][ T4354] samsung 0003:0419:0600.000C: hidraw0: USB HID v0.00 Device [HID 0419:0600] on usb-dummy_hcd.4-1/input0 [ 122.124783][ T7] sierra 2-1:0.3: Sierra USB modem converter detected [ 122.157301][ T2358] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 122.179285][ T2358] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 122.197185][ T2358] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 122.210839][ T5390] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.220025][ T2358] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.231378][ T5390] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.241206][ T2358] usb 1-1: config 0 descriptor?? [ 122.251642][ T5390] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.267981][ T7] usb 2-1: Sierra USB modem converter now attached to ttyUSB0 [ 122.270813][ T5390] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.279660][ T7] usb 2-1: Sierra USB modem converter now attached to ttyUSB1 [ 122.296246][ T5572] device hsr_slave_0 entered promiscuous mode [ 122.303448][ T5572] device hsr_slave_1 entered promiscuous mode [ 122.313718][ T4210] usb 5-1: USB disconnect, device number 5 [ 122.334300][ T5572] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 122.345315][ T7] usb 2-1: USB disconnect, device number 8 [ 122.357474][ T5572] Cannot create hsr debugfs directory [ 122.379096][ T7] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 122.400047][ T7] sierra ttyUSB1: Sierra USB modem converter now disconnected from ttyUSB1 [ 122.411351][ T7] sierra 2-1:0.3: device disconnected [ 122.640212][ T4223] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.656542][ T4223] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 122.690314][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 122.700449][ T5572] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 122.749561][ T5572] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 122.760694][ T2358] microsoft 0003:045E:07DA.000D: unknown main item tag 0x0 [ 122.774365][ T2358] microsoft 0003:045E:07DA.000D: unknown main item tag 0x0 [ 122.792877][ T2358] microsoft 0003:045E:07DA.000D: unknown main item tag 0x0 [ 122.800134][ T2358] microsoft 0003:045E:07DA.000D: unknown main item tag 0x0 [ 122.817667][ T2358] microsoft 0003:045E:07DA.000D: unknown main item tag 0x0 [ 122.829115][ T2358] microsoft 0003:045E:07DA.000D: unknown main item tag 0x0 [ 122.843238][ T2358] microsoft 0003:045E:07DA.000D: unknown main item tag 0x0 [ 122.850572][ T2358] microsoft 0003:045E:07DA.000D: unknown main item tag 0x0 [ 122.871559][ T2358] microsoft 0003:045E:07DA.000D: unknown main item tag 0x0 [ 122.879747][ T2358] microsoft 0003:045E:07DA.000D: unknown main item tag 0x0 [ 122.942040][ T2358] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.000D/input/input10 [ 122.968419][ T2358] microsoft 0003:045E:07DA.000D: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 122.984597][ T2358] usb 1-1: USB disconnect, device number 7 [ 123.015674][ T361] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 123.050748][ T361] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 123.105957][ T5572] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 123.136543][ T9] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.168328][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 123.193811][ T5572] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 123.277809][ T9] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.515504][ T9] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.635739][ T9] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.693925][ T4558] Bluetooth: hci4: command 0x041b tx timeout [ 123.792491][ T5572] 8021q: adding VLAN 0 to HW filter on device bond0 [ 123.906744][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 123.929363][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 123.986703][ T5572] 8021q: adding VLAN 0 to HW filter on device team0 [ 124.029905][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 124.054656][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 124.066788][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.073929][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 124.119151][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 124.138423][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 124.160200][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 124.182257][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 124.189422][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 124.297471][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 124.310968][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 124.338943][ T5639] UBIFS error (pid: 5639): cannot open "./file0", error -22 [ 124.367442][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 124.399617][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 124.474124][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 124.503487][ T5647] loop4: detected capacity change from 0 to 64 [ 124.505322][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 124.550420][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 124.586679][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 124.629275][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 124.720159][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 124.743987][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 124.784951][ T5572] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 124.788438][ T5653] loop1: detected capacity change from 0 to 4096 [ 125.322203][ T5572] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 125.350390][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 125.362910][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 125.382606][ T5674] Zero length message leads to an empty skb [ 125.536087][ T5690] loop0: detected capacity change from 0 to 256 [ 125.773193][ T4208] Bluetooth: hci4: command 0x040f tx timeout [ 125.785690][ T5697] loop4: detected capacity change from 0 to 128 [ 125.917091][ T5697] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 125.937343][ T5697] ext4 filesystem being mounted at mnt:[4026533049] supports timestamps until 2038-01-19 (0x7fffffff) [ 126.052526][ T9] device hsr_slave_0 left promiscuous mode [ 126.067472][ T9] device hsr_slave_1 left promiscuous mode [ 126.088468][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 126.101382][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 126.122649][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 126.142297][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 126.160876][ T9] device bridge_slave_1 left promiscuous mode [ 126.192999][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.235440][ T9] device bridge_slave_0 left promiscuous mode [ 126.241690][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.309762][ T9] device veth1_macvtap left promiscuous mode [ 126.339090][ T9] device veth0_macvtap left promiscuous mode [ 126.372609][ T9] device veth1_vlan left promiscuous mode [ 126.390559][ T9] device veth0_vlan left promiscuous mode [ 126.788113][ T9] team0 (unregistering): Port device team_slave_1 removed [ 126.808581][ T9] team0 (unregistering): Port device team_slave_0 removed [ 126.822086][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 126.839038][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 126.927855][ T9] bond0 (unregistering): Released all slaves [ 126.999104][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 127.013326][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 127.080498][ T361] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 127.107602][ T361] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 127.164157][ T5572] device veth0_vlan entered promiscuous mode [ 127.175114][ T5686] chnl_net:caif_netlink_parms(): no params data found [ 127.206626][ T5572] device veth1_vlan entered promiscuous mode [ 127.216509][ T361] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 127.226103][ T361] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 127.234352][ T361] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 127.337567][ T5740] loop1: detected capacity change from 0 to 256 [ 127.470605][ T5740] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 127.504665][ T5686] bridge0: port 1(bridge_slave_0) entered blocking state [ 127.525784][ T5740] FAT-fs (loop1): Filesystem has been set read-only [ 127.532699][ T5740] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 127.555201][ T5686] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.575036][ T5740] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 127.585557][ T5740] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 127.594583][ T5740] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 127.603628][ T5686] device bridge_slave_0 entered promiscuous mode [ 127.610116][ T4209] Bluetooth: hci3: command 0x0409 tx timeout [ 127.613183][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 127.616425][ T5740] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 127.626516][ T5753] vivid-001: ================= START STATUS ================= [ 127.633669][ T5740] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 127.651738][ T5740] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 127.661156][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 127.675509][ T5740] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 127.704078][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 127.707191][ T5740] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 127.715795][ T5753] vivid-001: Radio HW Seek Mode: [ 127.732679][ T5572] device veth0_macvtap entered promiscuous mode [ 127.743304][ T5753] Bounded [ 127.760494][ T5753] vivid-001: Radio Programmable HW Seek: false [ 127.772977][ T5753] vivid-001: RDS Rx I/O Mode: Block I/O [ 127.779107][ T26] audit: type=1800 audit(2000000036.000:30): pid=5740 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.472" name="file1" dev="loop1" ino=1048609 res=0 errno=0 [ 127.794215][ T5686] bridge0: port 2(bridge_slave_1) entered blocking state [ 127.821728][ T5753] vivid-001: Generate RBDS Instead of RDS: false [ 127.825576][ T5686] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.843323][ T7] Bluetooth: hci4: command 0x0419 tx timeout [ 127.847900][ T5686] device bridge_slave_1 entered promiscuous mode [ 127.856071][ T5753] vivid-001: RDS Reception: true [ 127.861172][ T5753] vivid-001: RDS Program Type: 0 inactive [ 127.880173][ T5753] vivid-001: RDS PS Name: inactive [ 127.882559][ T5572] device veth1_macvtap entered promiscuous mode [ 127.897649][ T5753] vivid-001: RDS Radio Text: inactive [ 127.920868][ T5753] vivid-001: RDS Traffic Announcement: false inactive [ 127.949295][ T5753] vivid-001: RDS Traffic Program: false inactive [ 127.961331][ T5753] vivid-001: RDS Music: false inactive [ 127.983099][ T5753] vivid-001: ================== END STATUS ================== [ 128.040201][ T5572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 128.142940][ T5572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.168259][ T5572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 128.200089][ T5572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.262935][ T5572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 128.280346][ T5773] loop1: detected capacity change from 0 to 4096 [ 128.288559][ T5572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.305864][ T5572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 128.316902][ T5572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.328213][ T5572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 128.339868][ T5572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.353467][ T5572] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 128.361836][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 128.377773][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 128.386923][ T5773] ntfs: (device loop1): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 128.396293][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 128.419595][ T5773] ntfs: (device loop1): read_ntfs_boot_sector(): Primary boot sector is invalid. [ 128.430544][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 128.438869][ T5773] ntfs: (device loop1): read_ntfs_boot_sector(): Hot-fix: Recovering invalid primary boot sector from backup copy. [ 128.455227][ T5686] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 128.470553][ T5773] ntfs: (device loop1): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 128.483752][ T5773] ntfs: (device loop1): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 128.498654][ T5686] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 128.503706][ C0] vkms_vblank_simulate: vblank timer overrun [ 128.519592][ T5773] ntfs: (device loop1): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 128.528899][ T5773] ntfs: (device loop1): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x200 because its location on disk could not be determined even after retrying (error code -5). [ 128.549902][ T5773] ntfs: (device loop1): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 128.565635][ T5572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 128.587669][ T5572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.604761][ T5773] ntfs: (device loop1): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x1, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 128.617569][ T5572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 128.650999][ T5572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.672849][ T5572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 128.702483][ T5773] ntfs: volume version 3.1. [ 128.725067][ T5572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.757391][ T5572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 128.782992][ T5572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.801637][ T5572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 128.816641][ T5572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.848366][ T5572] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 128.877914][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 128.888800][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 128.944732][ T5783] netlink: 16 bytes leftover after parsing attributes in process `syz.0.482'. [ 128.980438][ T5572] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.002577][ T5789] loop4: detected capacity change from 0 to 256 [ 129.016480][ T5572] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.033035][ T5572] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.041972][ T5572] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.071637][ T5686] team0: Port device team_slave_0 added [ 129.102894][ T5686] team0: Port device team_slave_1 added [ 129.161485][ T5789] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000001) [ 129.215421][ T5686] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 129.217817][ T5796] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 129.222431][ T5686] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 129.259917][ C0] vkms_vblank_simulate: vblank timer overrun [ 129.368686][ T5686] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 129.490433][ T5686] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 129.510709][ T5686] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 129.536768][ C0] vkms_vblank_simulate: vblank timer overrun [ 129.684795][ T4208] Bluetooth: hci3: command 0x041b tx timeout [ 129.690989][ T5686] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 129.914096][ T5686] device hsr_slave_0 entered promiscuous mode [ 129.944330][ T5686] device hsr_slave_1 entered promiscuous mode [ 129.964264][ T5686] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 129.971859][ T5686] Cannot create hsr debugfs directory [ 130.012965][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 130.042189][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 130.060175][ T5826] loop1: detected capacity change from 0 to 1 [ 130.123363][ T5396] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 130.202739][ T4252] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 130.211129][ T4252] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 130.316027][ T5396] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 130.345060][ T5831] Bluetooth: hci0: service_discovery: expected 4 bytes, got 7 bytes [ 130.404080][ T5834] sctp: [Deprecated]: syz.0.499 (pid 5834) Use of struct sctp_assoc_value in delayed_ack socket option. [ 130.404080][ T5834] Use struct sctp_sack_info instead [ 130.566067][ T5686] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.689287][ T5686] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.812867][ T4206] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 130.835256][ T5686] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.059096][ T5686] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.071868][ T4206] usb 2-1: Using ep0 maxpacket: 32 [ 131.108632][ T5851] loop4: detected capacity change from 0 to 32768 [ 131.167740][ T5851] [ 131.167740][ T5851] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 131.167740][ T5851] [ 131.193175][ T4206] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 131.270597][ T4206] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 131.282582][ T5859] loop5: detected capacity change from 0 to 256 [ 131.298756][ T5396] [ 131.298756][ T5396] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 131.298756][ T5396] [ 131.325532][ T4206] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 131.333139][ T5396] [ 131.333139][ T5396] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 131.333139][ T5396] [ 131.354887][ T4206] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.380132][ T4173] [ 131.380132][ T4173] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 131.380132][ T4173] [ 131.399093][ T4173] [ 131.399093][ T4173] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 131.399093][ T4173] [ 131.404487][ T5686] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 131.422406][ T5859] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 131.432074][ T275] [ 131.432074][ T275] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 131.432074][ T275] [ 131.458932][ T4206] usb 2-1: config 0 descriptor?? [ 131.495346][ T275] ================================================================== [ 131.504140][ T275] BUG: KASAN: use-after-free in txEnd+0x350/0x560 [ 131.510607][ T275] Write of size 8 at addr ffff88807ed28840 by task jfsCommit/275 [ 131.518614][ T275] [ 131.520952][ T275] CPU: 1 PID: 275 Comm: jfsCommit Not tainted 5.15.175-syzkaller #0 [ 131.528948][ T275] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 131.539032][ T275] Call Trace: [ 131.542323][ T275] [ 131.545266][ T275] dump_stack_lvl+0x1e3/0x2d0 [ 131.549970][ T275] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 131.555628][ T275] ? _printk+0xd1/0x120 [ 131.559818][ T275] ? __wake_up_klogd+0xcc/0x100 [ 131.564687][ T275] ? panic+0x860/0x860 [ 131.568776][ T275] ? _raw_spin_lock_irqsave+0xdd/0x120 [ 131.574263][ T275] ? __mutex_unlock_slowpath+0x6f6/0x750 [ 131.579927][ T275] print_address_description+0x63/0x3b0 [ 131.585500][ T275] ? txEnd+0x350/0x560 [ 131.589598][ T275] kasan_report+0x16b/0x1c0 [ 131.594215][ T275] ? txEnd+0x350/0x560 [ 131.598315][ T275] kasan_check_range+0x27e/0x290 [ 131.603199][ T4558] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 131.603360][ T275] txEnd+0x350/0x560 [ 131.614715][ T275] jfs_lazycommit+0x60d/0xc30 [ 131.619410][ T275] ? _raw_spin_unlock_irqrestore+0x8b/0x130 [ 131.625330][ T275] ? lockdep_hardirqs_on+0x94/0x130 [ 131.630566][ T275] ? txFreelock+0x580/0x580 [ 131.635105][ T275] ? sched_dynamic_update+0x240/0x240 [ 131.640517][ T275] kthread+0x3f6/0x4f0 [ 131.644707][ T275] ? txFreelock+0x580/0x580 [ 131.649228][ T275] ? kthread_blkcg+0xd0/0xd0 [ 131.653926][ T275] ret_from_fork+0x1f/0x30 [ 131.658377][ T275] [ 131.661406][ T275] [ 131.663738][ T275] Allocated by task 5851: [ 131.668067][ T275] ____kasan_kmalloc+0xba/0xf0 [ 131.672846][ T275] kmem_cache_alloc_trace+0x143/0x290 [ 131.678240][ T275] lmLogOpen+0x314/0x1030 [ 131.682591][ T275] jfs_mount_rw+0xe3/0x640 [ 131.687025][ T275] jfs_fill_super+0x69f/0xc70 [ 131.691816][ T275] mount_bdev+0x2c9/0x3f0 [ 131.696251][ T275] legacy_get_tree+0xeb/0x180 [ 131.700954][ T275] vfs_get_tree+0x88/0x270 [ 131.705390][ T275] do_new_mount+0x2ba/0xb40 [ 131.709915][ T275] __se_sys_mount+0x2d5/0x3c0 [ 131.714603][ T275] do_syscall_64+0x3b/0xb0 [ 131.719042][ T275] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 131.724957][ T275] [ 131.727302][ T275] Freed by task 4173: [ 131.731289][ T275] kasan_set_track+0x4b/0x80 [ 131.735902][ T275] kasan_set_free_info+0x1f/0x40 [ 131.740864][ T275] ____kasan_slab_free+0xd8/0x120 [ 131.745916][ T275] slab_free_freelist_hook+0xdd/0x160 [ 131.751317][ T275] kfree+0xf1/0x270 [ 131.755149][ T275] lmLogClose+0x29d/0x530 [ 131.759528][ T275] jfs_umount+0x298/0x370 [ 131.763872][ T275] jfs_put_super+0x86/0x180 [ 131.768923][ T275] generic_shutdown_super+0x130/0x310 [ 131.774320][ T275] kill_block_super+0x7a/0xe0 [ 131.779013][ T275] deactivate_locked_super+0xa0/0x110 [ 131.784393][ T275] cleanup_mnt+0x44e/0x500 [ 131.788836][ T275] task_work_run+0x129/0x1a0 [ 131.793547][ T275] exit_to_user_mode_loop+0x106/0x130 [ 131.798946][ T275] exit_to_user_mode_prepare+0xb1/0x140 [ 131.804160][ T2358] Bluetooth: hci3: command 0x040f tx timeout [ 131.804509][ T275] syscall_exit_to_user_mode+0x5d/0x240 [ 131.816019][ T275] do_syscall_64+0x47/0xb0 [ 131.820452][ T275] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 131.826364][ T275] [ 131.828703][ T275] The buggy address belongs to the object at ffff88807ed28800 [ 131.828703][ T275] which belongs to the cache kmalloc-1k of size 1024 [ 131.841195][ T5686] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 131.842765][ T275] The buggy address is located 64 bytes inside of [ 131.842765][ T275] 1024-byte region [ffff88807ed28800, ffff88807ed28c00) [ 131.842790][ T275] The buggy address belongs to the page: [ 131.842811][ T275] page:ffffea0001fb4a00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7ed28 [ 131.878683][ T275] head:ffffea0001fb4a00 order:3 compound_mapcount:0 compound_pincount:0 [ 131.887056][ T275] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 131.895078][ T275] raw: 00fff00000010200 0000000000000000 0000000d00000001 ffff888017441dc0 [ 131.903683][ T275] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 131.912277][ T275] page dumped because: kasan: bad access detected [ 131.918720][ T275] page_owner tracks the page as allocated [ 131.924442][ T275] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d2a20(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 4223, ts 121338874430, free_ts 121254426421 [ 131.944515][ T275] get_page_from_freelist+0x3b78/0x3d40 [ 131.950088][ T275] __alloc_pages+0x272/0x700 [ 131.954697][ T275] new_slab+0xbb/0x4b0 [ 131.958783][ T275] ___slab_alloc+0x6f6/0xe10 [ 131.963476][ T275] __kmalloc_node_track_caller+0x1f6/0x390 [ 131.969401][ T275] __alloc_skb+0x12c/0x590 [ 131.973842][ T275] skb_copy+0x127/0x820 [ 131.978019][ T275] mac80211_hwsim_tx_frame_no_nl+0xe37/0x1840 [ 131.984106][ T275] mac80211_hwsim_tx_frame+0x1cc/0x220 [ 131.989588][ T275] mac80211_hwsim_beacon_tx+0x48f/0x8a0 [ 131.995153][ T275] __iterate_interfaces+0x21e/0x4b0 [ 132.000371][ T275] ieee80211_iterate_active_interfaces_atomic+0xaf/0x140 [ 132.007445][ T275] mac80211_hwsim_beacon+0xa7/0x180 [ 132.012668][ T275] __hrtimer_run_queues+0x598/0xcf0 [ 132.017884][ T275] hrtimer_run_softirq+0x196/0x2c0 [ 132.023015][ T275] handle_softirqs+0x3a7/0x930 [ 132.027797][ T275] page last free stack trace: [ 132.032475][ T275] free_unref_page_prepare+0xc34/0xcf0 [ 132.037957][ T275] free_unref_page+0x95/0x2d0 [ 132.042654][ T275] __unfreeze_partials+0x1b7/0x210 [ 132.047790][ T275] put_cpu_partial+0x132/0x1a0 [ 132.052577][ T275] ___cache_free+0xe3/0x100 [ 132.057099][ T275] qlist_free_all+0x36/0x90 [ 132.061620][ T275] kasan_quarantine_reduce+0x162/0x180 [ 132.067093][ T275] __kasan_slab_alloc+0x2f/0xc0 [ 132.071956][ T275] slab_post_alloc_hook+0x53/0x380 [ 132.077080][ T275] __kmalloc+0x120/0x300 [ 132.081344][ T275] fib_create_info+0xaab/0x2570 [ 132.086217][ T275] fib_table_insert+0x213/0x1f90 [ 132.091257][ T275] fib_add_ifaddr+0x47f/0x1730 [ 132.096035][ T275] fib_inetaddr_event+0x12b/0x2b0 [ 132.101075][ T275] blocking_notifier_call_chain+0x104/0x1b0 [ 132.106985][ T275] __inet_insert_ifa+0x9f8/0xc10 [ 132.111943][ T275] [ 132.114272][ T275] Memory state around the buggy address: [ 132.119910][ T275] ffff88807ed28700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 132.127978][ T275] ffff88807ed28780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 132.136051][ T275] >ffff88807ed28800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 132.144120][ T275] ^ [ 132.150281][ T275] ffff88807ed28880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 132.158356][ T275] ffff88807ed28900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 132.166433][ T275] ================================================================== [ 132.174525][ T275] Disabling lock debugging due to kernel taint [ 132.188357][ T4206] hub 2-1:0.0: USB hub found [ 132.202720][ T5686] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 132.212225][ T5686] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 132.223254][ T4558] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 132.252523][ T4558] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 132.287492][ T4558] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 132.316174][ T4558] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 132.347858][ T4558] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 132.461950][ T5686] 8021q: adding VLAN 0 to HW filter on device bond0 [ 132.476151][ T4206] hub 2-1:0.0: config failed, can't read hub descriptor (err -90) [ 132.516351][ T4558] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 132.532915][ T4558] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 132.536650][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 132.551234][ T4558] usb 1-1: Product: syz [ 132.557918][ T4558] usb 1-1: Manufacturer: syz [ 132.566899][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 132.589924][ T5686] 8021q: adding VLAN 0 to HW filter on device team0 [ 132.603843][ T4558] cdc_wdm 1-1:1.0: skipping garbage [ 132.609651][ T4558] cdc_wdm 1-1:1.0: skipping garbage [ 132.611892][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 132.631804][ T4558] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 132.636629][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 132.640389][ T4558] cdc_wdm 1-1:1.0: Unknown control protocol [ 132.656111][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.661950][ T4252] bridge0: port 1(bridge_slave_0) entered blocking state [ 132.662451][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.669447][ T4252] bridge0: port 1(bridge_slave_0) entered forwarding state [ 132.694111][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 132.702566][ T275] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 132.709783][ T275] CPU: 0 PID: 275 Comm: jfsCommit Tainted: G B 5.15.175-syzkaller #0 [ 132.719174][ T275] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 132.729237][ T275] Call Trace: [ 132.732524][ T275] [ 132.735456][ T275] dump_stack_lvl+0x1e3/0x2d0 [ 132.740133][ T275] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 132.746223][ T275] ? panic+0x860/0x860 [ 132.750291][ T275] ? preempt_schedule_common+0xa6/0xd0 [ 132.755744][ T275] ? preempt_schedule+0xd9/0xe0 [ 132.760589][ T275] panic+0x318/0x860 [ 132.764480][ T275] ? check_panic_on_warn+0x1d/0xa0 [ 132.769586][ T275] ? fb_is_primary_device+0xd0/0xd0 [ 132.774785][ T275] ? _raw_spin_unlock_irqrestore+0x128/0x130 [ 132.780761][ T275] ? _raw_spin_unlock+0x40/0x40 [ 132.785608][ T275] check_panic_on_warn+0x7e/0xa0 [ 132.790552][ T275] ? txEnd+0x350/0x560 [ 132.794616][ T275] end_report+0x6d/0xf0 [ 132.798777][ T275] kasan_report+0x18e/0x1c0 [ 132.803277][ T275] ? txEnd+0x350/0x560 [ 132.807374][ T275] kasan_check_range+0x27e/0x290 [ 132.812306][ T275] txEnd+0x350/0x560 [ 132.816198][ T275] jfs_lazycommit+0x60d/0xc30 [ 132.820869][ T275] ? _raw_spin_unlock_irqrestore+0x8b/0x130 [ 132.826757][ T275] ? lockdep_hardirqs_on+0x94/0x130 [ 132.831965][ T275] ? txFreelock+0x580/0x580 [ 132.836479][ T275] ? sched_dynamic_update+0x240/0x240 [ 132.841869][ T275] kthread+0x3f6/0x4f0 [ 132.845929][ T275] ? txFreelock+0x580/0x580 [ 132.850423][ T275] ? kthread_blkcg+0xd0/0xd0 [ 132.855008][ T275] ret_from_fork+0x1f/0x30 [ 132.859428][ T275] [ 132.862804][ T275] Kernel Offset: disabled [ 132.867158][ T275] Rebooting in 86400 seconds..