last executing test programs: 50.430176956s ago: executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) close(r0) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x30004081) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r3, r2, 0x26}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r3}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) recvmsg(r1, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f0000000a80)=""/20, 0x14}], 0x1, 0x0, 0x0, 0x2}, 0x0) 50.226902388s ago: executing program 3: r0 = socket$kcm(0xa, 0x2, 0x3a) sendmsg$kcm(r0, &(0x7f0000000440)={&(0x7f0000000800)=@in6={0xa, 0x0, 0x0, @dev, 0xd}, 0x80, &(0x7f0000000c00)=[{&(0x7f0000000040)="80005b020eaa4da2e5d6c51263887f5078f903b4d2dbf9d06fa0536082dc2bec16c75e059f2dc4e1b00e613868bc67d257218b000000000000", 0x39}, {0x0}], 0x2, 0x0, 0x0, 0x900}, 0x0) 50.090768375s ago: executing program 3: recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1}, 0x0) socketpair(0x1e, 0x801, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=[@rights={{0x10}}], 0x10}, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030031000b12d25a80648c2594f90324fc60100c084002200600053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 49.105737625s ago: executing program 4: r0 = memfd_create(&(0x7f0000000200)='\x00\xac=\x9d\xd2\xdb\x1a\'\xf8\n\xedcJ\x8e\x84\xd4N\x00\x9b\x1f\t\xbd\x11+\x86T\x16\xa3\xb3\xae0\x9f9?\xefo\xa4k\x012>\xa1\x9c\x86x\x1c\x9f\x84\x195\xde\x97_\t~\xf3Y\x12\"p^\x00\x02\xb4\xfdHA\xce\x9a\xde\xe4\xb6\xbcK#^\x00}2\xc6:|R\x04\xc2\xb8I\xa3\xb9\xe2\xa2\xebw^I\x0f7i$\xf1\xd4\x9b\xc7\xb2\xbeD`\x8f\xc3\x96\xbc#4\x17\xf5\xb3\xc9\xb2\x94\xa8_f!\xdf\x90}\xba\xa3\x01\xe2\xcf\xb7\"S\a\x04ry\x00#4\x87m\xf7\xe3\xf5\xa7\xda\xb9\xcb\x02\xb9\xd0\tCM\xbb\tiR\xab`\xa6I\xcaU\xbe\x06]\xa9\xb6R~\xc9l}\xb7I\xfeH\xb3\x15\x8c\x06d\xf8c\xc0{\v\xd2\x9d\x8e\\\xae>\xf6quc9\xe0\xbf\xdd\xdc\x99\xf4\\\xd0\x96:\xfb\x8c\x12o\xcc-\x13\x14\xbev\xae\x80Zp\x95c]\x98\x8c\x01\x8fo\xafjN\xcb\x98\xdf\xd3[V\xbd[\xb9\x10v\xee\xdc\xc8G\xd0\xdc9\xccO\xf74\x84o\x99\xe9\x14\x00\x00dU\x00\x00\x00\b\xfb\xb5Z\xb0-\xc8\xdb\x88f\xf4W\xeb\x06\xc2\xd1\xb6\xd1%\xca\x8f\x013|\x8ez\x1eo\x18\xb6#@P&[\xad\xda\nmU\x823\\&P\xdc\xbcS\x80\xc1dJ!LH\xaa\a\x82\xf3\xde\x96\x85\xc5\xdd\xa8\x92\xc7\xcb\x91\xf2[Y\x06\x8a\x9fN\x10\xb9\xf4\xecq\xce\xd2\x17\x88\xae\xcc7r\xd7\xeaz\xcevR\xcau\r\xf1\t\xc2$k\xdf\x8f\xe2\xbe\xfe\x14AN\xf8\xc6\xa8`Fs[6kYH+\xa5\xdcxUY30x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r0, 0x47f9, 0x0, 0x0, 0x0, 0x0) clock_nanosleep(0x2, 0x225c17d03, &(0x7f00000000c0)={0x0, 0x989680}, 0x0) 48.027828284s ago: executing program 4: fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[], 0xa0}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0) socket$l2tp(0x2, 0x2, 0x73) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000018000280080002001100000004000100080004"], 0x44}}, 0x0) 47.561506027s ago: executing program 1: r0 = socket$inet(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180800000000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) io_setup(0x2, &(0x7f0000000180)=0x0) io_submit(r3, 0x1, &(0x7f0000000480)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) 46.145735587s ago: executing program 1: openat$adsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000100)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000), 0x48) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, 0x0) syz_open_procfs(0x0, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r3, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) 44.490267341s ago: executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000000c0)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) r3 = dup(0xffffffffffffffff) ftruncate(r3, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0x40305829, &(0x7f0000000000)={0x0, 0xffffffffffffffff, 0x0, 0x40c000}) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) r4 = socket(0x10, 0x3, 0x0) sendto$inet6(r4, &(0x7f0000000080)="7800000018002505b9409b14ffff00000214be04020206050a02040c430009003f002403100000000f0085a168d0bf46d32345653600648d270005000a00000049935ade4a460c89b6ec0cff3959547f509058ba86c902007a00004a320004000a0005000a0000000000e000e218d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0x0) 34.694427258s ago: executing program 2: gettid() write$cgroup_devices(0xffffffffffffffff, 0x0, 0x8) socketpair$nbd(0x1, 0x1, 0x0, 0x0) write$char_usb(0xffffffffffffffff, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) rt_sigreturn() futex(&(0x7f0000000700)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) rt_sigreturn() mlockall(0x1) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x541b, 0x0) 34.535569941s ago: executing program 2: r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) write$binfmt_script(r1, &(0x7f0000000200)={'#! ', '', [{0x20, '#!2'}, {0x20, '#! '}, {0x20, '/proc/sys/net/ipv4/tcp_congestion_control\x00'}, {}], 0xa, "8855d1bef46f70e481dbdabbfc3bcc3f005c1079e7344e4392717247b88b05708cd1663511237737ac00004c03fa9d00005380"}, 0xfffffe59) r2 = msgget$private(0x0, 0x0) msgrcv(r2, 0x0, 0x0, 0x0, 0x0) rt_sigreturn() msgsnd(r2, &(0x7f0000000040)={0x2}, 0x8, 0x0) 34.367805536s ago: executing program 2: r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) syz_read_part_table(0x401f, &(0x7f0000000000)="$eJzs0DEOAUEUBuB/NqKgUbuERk2UjrKNTqLRuIrKMSQaB3EBJ9CMZElIVuv7mvlnMjMv741vp1WSMttu2l1eNJ28bJKSZF73Jf/nvedrsjgnGfX5pDvUtPcvNycfzveHGoZ96j4N6ro+Ti+/vAcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAe7MCBAAAAAACQ/2sjVFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVWEHDgQAAAAAgPxfG6GqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqoKO3AgAwAAACDM3zqP9gMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwEsBAAD//4IoCls=") bind$unix(0xffffffffffffffff, 0x0, 0x0) rt_sigreturn() futex(&(0x7f0000000000)=0x2, 0x0, 0x2, &(0x7f0000000740)={0x0, 0x3938700}, 0x0, 0x0) rt_sigreturn() timer_settime(0x0, 0x0, &(0x7f00000040c0)={{0x77359400}, {0x0, 0x3938700}}, 0x0) r1 = memfd_create(&(0x7f0000000140)='}\xa4-}{\x00\xaa\x81\xde\xac\xc0\xe8\xf1v\xbd\xd2\xd4\x03[t\xe8\x92\x9d\xc2\xdep\x11y\xf7\xb0\x90\v\xb9\x9f\x12\xfc\x8c\x19\xf7v\xdb\r\xf4\xce\xdb\xf8Cw\xe6c\xd1\xe9\xe1\x8e\x1bKn\x9c{[\xbe|\x13\x97{\x12z\xea(\xb8\xc7\xca\x9a\x17)\xfcl\xe9\x87\xe7\xf5U\xc9@\xeb\x02\x90\'\x8d\xccd\x05\xf7zJ\x8f+\\\x16\x9e\x10t^\xb7\x90\xa7\x8f \xc0#\xeb&s\xc6\x11\xfb\xc3\x1fp\xeb^\x82\x8a\x1d\xe3\x93\xfdt\x86-\b*c2\xe6\xd4\xc6\xf9\x172\xf7', 0x0) r2 = dup(r1) fallocate(r1, 0x0, 0x0, 0x8002004) fchown(r2, 0xffffffffffffffff, 0x0) 33.917032507s ago: executing program 2: futex(&(0x7f0000000700)=0x2, 0x0, 0x2, &(0x7f0000000740)={0x0, 0x3938700}, 0x0, 0x0) rt_sigreturn() syz_read_part_table(0x4019, &(0x7f0000000000)="$eJzszzEOAUEAheE3G1FwA5fQqInSUbbRSTQaV1E5hkTjIC7gBBqSJRNBu99XzUtm/mTG1+MySZlu1u02L5rOedEkJcnssUv65/3Pl2R+SjL6JTLsjvZWvTP4WNjta6lvPdurw+T8z3sAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuLMDBwIAAAAAQP6vjVBVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVWFHTgQAAAAAADyf22EqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqKuzAgQwAAACAMH/rPNoPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALwUAAD//xe4ClM=") bind$unix(0xffffffffffffffff, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000004100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) write$cgroup_int(r1, &(0x7f0000000380), 0xffffff8d) 33.769079327s ago: executing program 2: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x20001439) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d00000007000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000080)='./bus\x00', 0x2000010, &(0x7f00000013c0)=ANY=[], 0xb, 0x6a1, &(0x7f0000000240)="$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") sendmsg$NL80211_CMD_VENDOR(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000880)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01070000004e59000000670000000c00990000000000000000000800c3"], 0x38}}, 0x0) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f00000000c0)=0x2050a0c) ioctl$TUNSETOFFLOAD(r1, 0x4004743d, 0x2000000b) syz_open_dev$tty1(0xc, 0x4, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00'}, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r3) r5 = socket$nl_generic(0x10, 0x3, 0x10) poll(0x0, 0x0, 0x9d) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_freezer_state(r6, &(0x7f00000000c0), 0x2, 0x0) r8 = openat$cgroup_procs(r6, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r8, &(0x7f0000000040), 0x12) syz_mount_image$xfs(&(0x7f0000000140), &(0x7f0000000040)='./file1\x00', 0x884, &(0x7f0000000080)={[{@logbsize={'logbsize', 0x3d, [0x36, 0x34, 0x4b]}}, {@quota}, {@qnoenforce}]}, 0x1, 0x98d1, &(0x7f0000000a00)="$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") write$cgroup_freezer_state(r7, &(0x7f0000000400)='FROZEN\x00', 0x7) write$cgroup_freezer_state(r7, &(0x7f0000000080)='THAWED\x00', 0x7) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) sendmsg$NL80211_CMD_SET_WOWLAN(r3, &(0x7f0000000ac0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000900)={&(0x7f0000000980)=ANY=[@ANYBLOB="90000000", @ANYRES16=r4, @ANYBLOB="00012bbd7000fcdbdf254a00000008000300", @ANYRES32=r9, @ANYBLOB="2c00758004000e80100012800400ff0008009e00c20000000400020004000300040002000400090004000100000075800c001280060098000400000004000900040008000400060004000800040009000c0075800400090004000900080075800400070010007580040001000400020004000300"], 0x90}}, 0x0) read(r1, 0x0, 0x0) 32.30252644s ago: executing program 0: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f00000000c0)={0x400000, "0300001b000000fd480000000000b4c98300", 0xffffffffffffffff}) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000100)={0x30000000}) 32.227536579s ago: executing program 0: socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000040)) mount$tmpfs(0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000ff6000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) syz_open_dev$MSR(0x0, 0x0, 0x0) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x11) ioctl$SNDCTL_DSP_GETBLKSIZE(0xffffffffffffffff, 0xc0045004, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0xd, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000300008500000014000000850000000500000095"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 31.33880844s ago: executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1, 0x4, 0x8, 0x8}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x0, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$inet6(r6, &(0x7f00000000c0), 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) r7 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x200000a, 0x11012, r7, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYRESOCT], &(0x7f0000000040)='GPL\x00', 0xfffffe01, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2d, 0x0, 0x0, 0x0, 0x64, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0}, 0xce) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r8}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg(r10, &(0x7f0000003b00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0) dup2(r10, r9) 30.401462478s ago: executing program 0: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = epoll_create(0x5) epoll_pwait(r1, &(0x7f0000000300)=[{}], 0x1, 0x0, &(0x7f00000003c0), 0x8) 30.024508547s ago: executing program 0: socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="805a72f9caca3a57d0fb"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x90) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100)=0xffffffffffffffff, 0x4) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{0x1}, &(0x7f0000000180), &(0x7f0000000280)='%-5lx \x00'}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4, 0x3}, 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x90) socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000200)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="380000001000050700000000000400", @ANYRES32=r2, @ANYBLOB="00000016010000001800120008000100736974000c00020008000300", @ANYRES32=0x0, @ANYRES32=r2, @ANYRESOCT, @ANYRES8=r2, @ANYRES16=r0], 0x38}, 0x1, 0x0, 0x0, 0x4045}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x68, 0x10, 0x439, 0x70fd2c, 0x0, {0x0, 0x0, 0xe403, 0x0, 0x0, 0x610c3}, [@IFLA_LINKINFO={0x48, 0x12, 0x0, 0x1, @sit={{0x8}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}, @IFLA_IPTUN_ENCAP_DPORT={0x6, 0x12, 0x4e23}, @IFLA_IPTUN_PMTUDISC={0x5}, @IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0x40}, @IFLA_IPTUN_6RD_PREFIXLEN={0x6, 0xd, 0x9}, @IFLA_IPTUN_ENCAP_DPORT={0x6, 0x12, 0x4e21}, @IFLA_IPTUN_6RD_RELAY_PREFIX={0x8, 0xc, 0x80000000}]}}}]}, 0x68}, 0x1, 0x0, 0x0, 0x8000}, 0x4000040) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00'}, 0x10) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r7, 0x0, 0xf3a, 0x0) tee(r6, r4, 0x8, 0x0) 18.64310701s ago: executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x258a, 0x6a88, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) syz_usb_control_io$hid(r0, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000000000), 0x0}, 0x0) 17.996869427s ago: executing program 4: syz_mount_image$xfs(&(0x7f0000009600), &(0x7f0000009640)='./file0\x00', 0x200800, &(0x7f0000000140), 0x4, 0x9655, &(0x7f0000009680)="$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") r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c016f21bc7a2e232f1b0000"], 0x3c}}, 0x0) r2 = open(&(0x7f0000000180)='./bus\x00', 0x14d27e, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000007940)={0x0, 0x0, 0x0}, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) open(&(0x7f0000000040)='./bus/../file0\x00', 0x1a74e, 0x4) mmap(&(0x7f000000d000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) mlockall(0x0) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) preadv(r4, 0x0, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r4, 0xc018937b, &(0x7f0000002500)={{0x1, 0x1, 0x18, r3, {0xee00}}, './file0\x00'}) setsockopt$inet6_IPV6_HOPOPTS(r5, 0x29, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="0c190000000000000502000600bf8480dd9d2b653790005ce5fabe6ce3c636fdd2790a7414cedcd35dff26a72d67b94e4d1cf8a9306e3354ddea3cfbf06793ba124477692e44400768e472340ec1067d96df6a596ac01bba80baa3288bfefcf34937bfe6028c1a75f8784338d2e7e5e94967151f2d117a86c69f56be4f18ffe52427a4d994e010ee43e2c4da9bfd79656925a4ef44242125ef727cc6085bad597090961c08ef9f5a42861223ec3e9dc29d7a881d08f0b49b6f109b7d306dbc006a17612c8a8fb600007dfc03112926b88c1ef3385027897b29ebd00de40502000900000000000000"], 0xd8) fstat(r0, &(0x7f0000002540)) shmctl$IPC_SET(0x0, 0x1, 0x0) madvise(&(0x7f00000ab000/0x800000)=nil, 0x800000, 0x0) eventfd(0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001840)=@newtaction={0xe68, 0x30, 0x25, 0x0, 0x4, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x3}, [{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x80000000}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, {0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {0x0, 0xdeb0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x7}, {0x0, 0x0, 0x0, 0x38ce}, {}, {}, {}, {}, {0x0, 0x100000}, {}, {}, {0x0, 0x0, 0x4}, {0x400}, {}, {}, {}, {0x0, 0x8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0x8000000}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {0x0, 0x8000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xffff, 0x9ad}, {}, {}, {}, {0x0, 0x7fff}, {0x6}, {}, {}, {}, {0x0, 0x0, 0x3, 0x0, 0x9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff81}, {}, {}, {}, {}, {}, {0x9, 0x0, 0x0, 0x81}, {0x7}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0xfffffffc, 0x20}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x100}], [{}, {}, {0x2}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {0x3}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@gettaction={0x34, 0x32, 0x6dd711a25f4cb68b, 0x70bd2d, 0x0, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1, 0x1}}, @action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x0) fallocate(r2, 0x0, 0x0, 0x7000) r8 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$UHID_CREATE2(r8, &(0x7f00000001c0)=ANY=[@ANYBLOB='%'], 0x118) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r8, &(0x7f0000000200)={0x40000002}) close(r8) 14.47220994s ago: executing program 1: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0xa2602, 0x0) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000200), 0x2) 3.736655048s ago: executing program 2: syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="02c8000c000800010002"], 0x11) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0x5}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f00000029c0)={0xc, {"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", 0x1000}}, 0x1006) 0s ago: executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) socket$isdn_base(0x22, 0x3, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): p1): recovering from clean shutdown, journal seq 8 [ 555.159081][T11218] bcachefs (loop1): alloc_read... done [ 555.245160][T11218] bcachefs (loop1): stripes_read... done [ 555.265498][T11218] bcachefs (loop1): snapshots_read... done [ 555.280121][T11218] bcachefs (loop1): journal_replay... done [ 555.286527][T10588] bcachefs (loop4): shutting down [ 555.293572][T11218] bcachefs (loop1): resume_logged_ops... done [ 555.301375][T11218] bcachefs (loop1): going read-write [ 555.330606][T10588] bcachefs (loop4): going read-only [ 555.335912][T10588] bcachefs (loop4): finished waiting for writes to stop [ 555.355387][T11218] bcachefs (loop1): done starting filesystem [ 555.397555][T10588] bcachefs (loop4): flushing journal and stopping allocators, journal seq 12 [ 555.434335][T10588] bcachefs (loop4): flushing journal and stopping allocators complete, journal seq 14 [ 555.573416][ T5154] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 555.594862][T10588] bcachefs (loop4): shutdown complete, journal seq 15 [ 555.602848][T11259] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 555.612629][T10588] bcachefs (loop4): marking filesystem clean [ 555.754173][T11263] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 555.935863][T10588] bcachefs (loop4): shutdown complete [ 556.322419][ T8994] bcachefs (loop1): shutting down [ 556.338092][ T8994] bcachefs (loop1): going read-only [ 556.353261][ T8994] bcachefs (loop1): finished waiting for writes to stop [ 556.409684][ T8994] bcachefs (loop1): flushing journal and stopping allocators, journal seq 8 [ 556.428869][ T8994] bcachefs (loop1): flushing journal and stopping allocators complete, journal seq 8 [ 556.615297][ T8994] bcachefs (loop1): shutdown complete, journal seq 9 [ 556.640291][ T8994] bcachefs (loop1): marking filesystem clean [ 556.786151][ T8994] bcachefs (loop1): shutdown complete [ 556.799451][ T5154] usb 4-1: Using ep0 maxpacket: 32 [ 556.813292][ T5154] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 557.327470][ T5154] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 557.337465][ T5154] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 557.346059][ T5154] usb 4-1: Product: syz [ 557.351139][ T5154] usb 4-1: Manufacturer: syz [ 557.355964][ T5154] usb 4-1: SerialNumber: syz [ 557.533096][ T5154] usb 4-1: config 0 descriptor?? [ 557.538862][T11255] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 558.620201][T11274] loop2: detected capacity change from 0 to 256 [ 558.627442][T11274] exfat: Unknown parameter 'allow_utĘ' [ 559.250584][ T29] audit: type=1804 audit(1718857695.693:238): pid=11287 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir4183922959/syzkaller.KF8C3F/13/bus" dev="sda1" ino=1960 res=1 errno=0 [ 559.304115][ T5152] usb 4-1: USB disconnect, device number 27 [ 559.324019][T11274] loop2: detected capacity change from 0 to 4096 [ 559.515800][T11290] loop4: detected capacity change from 0 to 4096 [ 559.563137][T11291] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 559.769624][T11285] loop0: detected capacity change from 0 to 32768 [ 560.559659][T11274] ntfs3: loop2: Failed to read $UpCase (-4). [ 560.833830][T11285] bcachefs (loop0): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,nocow [ 560.849345][T11285] bcachefs (loop0): recovering from clean shutdown, journal seq 10 [ 560.946467][T11306] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 560.957070][T11285] bcachefs (loop0): alloc_read... done [ 560.974378][T11285] bcachefs (loop0): stripes_read... done [ 560.991313][T11285] bcachefs (loop0): snapshots_read... done [ 561.035949][T11285] bcachefs (loop0): journal_replay... done [ 561.057069][T11285] bcachefs (loop0): resume_logged_ops... done [ 561.084717][T11285] bcachefs (loop0): going read-write [ 561.149392][T11285] bcachefs (loop0): done starting filesystem [ 561.436804][T11284] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 561.476686][T11304] ceph: No mds server is up or the cluster is laggy [ 561.484765][ T5152] libceph: connect (1)[c::]:6789 error -101 [ 561.496972][ T5152] libceph: mon0 (1)[c::]:6789 connect error [ 561.648717][T11303] loop3: detected capacity change from 0 to 32768 [ 561.714682][T11303] XFS (loop3): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 561.783819][T11303] XFS (loop3): Ending clean mount [ 561.788688][T11311] loop4: detected capacity change from 0 to 32768 [ 561.878567][T11311] bcachefs (076a1832-646e-4f3c-b13d-b3e266154efd): filesystem UUID already open [ 561.893999][ T931] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 561.906895][T11311] bcachefs (076a1832-646e-4f3c-b13d-b3e266154efd): shutdown complete [ 561.962226][T11337] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 562.017696][T11336] loop1: detected capacity change from 0 to 4096 [ 562.082735][ T931] usb 3-1: Using ep0 maxpacket: 32 [ 562.106228][ T931] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 562.198240][ T8913] bcachefs (loop0): shutting down [ 562.219616][ T8913] bcachefs (loop0): going read-only [ 562.225707][ T931] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 562.299043][ T8913] bcachefs (loop0): finished waiting for writes to stop [ 562.299371][ T931] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 562.329295][ T931] usb 3-1: Product: syz [ 562.333516][ T931] usb 3-1: Manufacturer: syz [ 562.355123][ T931] usb 3-1: SerialNumber: syz [ 562.364406][ T931] usb 3-1: config 0 descriptor?? [ 562.376746][ T8913] bcachefs (loop0): flushing journal and stopping allocators, journal seq 13 [ 562.399565][T11316] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 562.424471][ T8913] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 14 [ 562.446105][ T8913] bcachefs (loop0): shutdown complete, journal seq 15 [ 562.460145][ T8913] bcachefs (loop0): marking filesystem clean [ 562.577282][T11303] syz-executor.3 (11303): drop_caches: 1 [ 562.584934][ T8913] bcachefs (loop0): shutdown complete [ 562.593360][T11311] loop4: detected capacity change from 0 to 128 [ 562.615287][T11311] VFS: Found a Xenix FS (block size = 512) on device loop4 [ 562.628087][T11311] sysv_free_block: trying to free block not in datazone [ 562.644972][ T7145] XFS (loop3): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 562.645285][T11311] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 564.009683][ T1248] ieee802154 phy0 wpan0: encryption failed: -22 [ 564.016173][ T1248] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.309592][ T931] usb 3-1: USB disconnect, device number 12 [ 564.533753][T11359] loop1: detected capacity change from 0 to 128 [ 564.633880][T11361] loop2: detected capacity change from 0 to 4096 [ 564.641183][T11362] loop3: detected capacity change from 0 to 256 [ 564.668407][T11362] exfat: Unknown parameter 'allow_utĘ' [ 564.698659][T11364] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 565.441785][ T2937] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 565.629900][T11362] loop3: detected capacity change from 0 to 4096 [ 566.089658][T11371] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 567.108514][T11375] ceph: No mds server is up or the cluster is laggy [ 567.138039][ T784] libceph: connect (1)[c::]:6789 error -101 [ 567.145286][T11379] loop1: detected capacity change from 0 to 256 [ 567.152545][ T784] libceph: mon0 (1)[c::]:6789 connect error [ 567.516663][T11377] loop4: detected capacity change from 0 to 32768 [ 567.542206][T11379] loop1: detected capacity change from 0 to 512 [ 567.561602][T11379] ext3: Unknown parameter 'obj_type' [ 567.703614][T11394] loop0: detected capacity change from 0 to 256 [ 567.804270][T11377] bcachefs (loop4): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,nocow [ 567.872149][T11377] bcachefs (loop4): recovering from clean shutdown, journal seq 10 [ 567.957681][T11377] bcachefs (loop4): alloc_read... done [ 567.963524][T11377] bcachefs (loop4): stripes_read... done [ 567.969382][T11377] bcachefs (loop4): snapshots_read... done [ 567.977897][T11377] bcachefs (loop4): journal_replay... done [ 567.983921][T11377] bcachefs (loop4): resume_logged_ops... done [ 568.025954][T11377] bcachefs (loop4): going read-write [ 568.283966][T11377] bcachefs (loop4): done starting filesystem [ 568.627715][T11400] loop0: detected capacity change from 0 to 512 [ 568.693193][T11400] ext3: Unknown parameter 'obj_type' [ 568.748742][T11410] loop1: detected capacity change from 0 to 164 [ 568.889070][T11387] loop3: detected capacity change from 0 to 32768 [ 568.939564][T11376] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 569.007100][T11387] bcachefs (076a1832-646e-4f3c-b13d-b3e266154efd): filesystem UUID already open [ 569.024879][T11387] bcachefs (076a1832-646e-4f3c-b13d-b3e266154efd): shutdown complete [ 569.089437][ T9163] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 569.299302][ T9163] usb 3-1: Using ep0 maxpacket: 32 [ 569.312818][ T9163] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 569.344319][ T9163] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 569.369369][ T9163] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 569.377672][ T9163] usb 3-1: Product: syz [ 569.430814][ T9163] usb 3-1: Manufacturer: syz [ 569.435570][ T9163] usb 3-1: SerialNumber: syz [ 569.474808][ T9163] usb 3-1: config 0 descriptor?? [ 569.502549][ T8559] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 569.535234][T11412] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 569.562352][T11423] loop0: detected capacity change from 0 to 128 [ 569.636391][T10588] bcachefs (loop4): shutting down [ 569.677560][T10588] bcachefs (loop4): going read-only [ 569.741574][T10588] bcachefs (loop4): finished waiting for writes to stop [ 569.795500][T10588] bcachefs (loop4): flushing journal and stopping allocators, journal seq 13 [ 569.838174][T10588] bcachefs (loop4): flushing journal and stopping allocators complete, journal seq 14 [ 569.924915][T10588] bcachefs (loop4): shutdown complete, journal seq 15 [ 569.964510][ T8559] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 569.993231][T11387] loop3: detected capacity change from 0 to 128 [ 570.001749][T10588] bcachefs (loop4): marking filesystem clean [ 570.072181][T11387] VFS: Found a Xenix FS (block size = 512) on device loop3 [ 570.092376][T11387] sysv_free_block: trying to free block not in datazone [ 570.149376][T10588] bcachefs (loop4): shutdown complete [ 570.163537][T11387] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 570.202163][ T8559] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 570.443580][ T5118] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 570.496514][ T5118] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 570.513390][ T5118] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 570.524300][T11434] loop0: detected capacity change from 0 to 256 [ 570.537031][ T5118] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 570.549725][ T5118] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 570.557654][ T5118] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 570.561305][T11434] exfat: Unknown parameter 'allow_utĘ' [ 570.701447][ T8559] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 570.712009][ T9163] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 570.828516][ T784] usb 3-1: USB disconnect, device number 13 [ 570.944230][T11434] loop0: detected capacity change from 0 to 4096 [ 570.949291][ T9163] usb 4-1: Using ep0 maxpacket: 32 [ 570.985089][ T9163] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 571.022295][ T9163] usb 4-1: config 0 has no interfaces? [ 571.077832][ T9163] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 571.122983][ T9163] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 571.149274][ T9163] usb 4-1: Product: syz [ 571.153663][ T9163] usb 4-1: Manufacturer: syz [ 571.159512][ T9163] usb 4-1: SerialNumber: syz [ 571.233253][ T9163] usb 4-1: config 0 descriptor?? [ 571.474211][T11430] chnl_net:caif_netlink_parms(): no params data found [ 571.498425][T11433] netlink: 'syz-executor.3': attribute type 29 has an invalid length. [ 571.866520][T11437] ceph: No mds server is up or the cluster is laggy [ 571.873790][ T9163] libceph: connect (1)[c::]:6789 error -101 [ 571.896373][ T9163] libceph: mon0 (1)[c::]:6789 connect error [ 571.974745][T11451] loop4: detected capacity change from 0 to 256 [ 571.984696][T11452] loop3: detected capacity change from 0 to 1024 [ 572.196121][T11451] loop4: detected capacity change from 0 to 512 [ 572.218795][T11451] ext3: Unknown parameter 'obj_type' [ 572.751467][ T5111] Bluetooth: hci3: command tx timeout [ 573.512312][T11467] loop2: detected capacity change from 0 to 256 [ 573.668224][ T8559] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 573.696908][ T8559] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 573.738751][ T8559] bond0 (unregistering): Released all slaves [ 573.814003][ T8559] bond1 (unregistering): Released all slaves [ 573.825058][T11469] loop2: detected capacity change from 0 to 512 [ 573.847667][T11471] loop4: detected capacity change from 0 to 256 [ 573.858828][T11469] ext3: Unknown parameter 'obj_type' [ 573.872008][T11433] netlink: 'syz-executor.3': attribute type 29 has an invalid length. [ 573.987949][T11471] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 574.021356][ T9163] usb 4-1: USB disconnect, device number 28 [ 574.078941][ T8566] hfsplus: b-tree write err: -5, ino 4 [ 574.407078][T11430] bridge0: port 1(bridge_slave_0) entered blocking state [ 574.424758][T11430] bridge0: port 1(bridge_slave_0) entered disabled state [ 574.439338][T11430] bridge_slave_0: entered allmulticast mode [ 574.451366][T11430] bridge_slave_0: entered promiscuous mode [ 574.475429][T11479] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 574.486910][T11430] bridge0: port 2(bridge_slave_1) entered blocking state [ 574.507066][T11430] bridge0: port 2(bridge_slave_1) entered disabled state [ 574.531815][T11430] bridge_slave_1: entered allmulticast mode [ 574.544004][ T9163] libceph: connect (1)[c::]:6789 error -101 [ 574.550558][T11430] bridge_slave_1: entered promiscuous mode [ 574.556834][ T9163] libceph: mon0 (1)[c::]:6789 connect error [ 574.737006][T11430] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 574.758395][T11477] loop2: detected capacity change from 0 to 32768 [ 574.774334][T11430] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 574.819389][ T8559] hsr_slave_0: left promiscuous mode [ 574.826000][ T8559] hsr_slave_1: left promiscuous mode [ 574.840150][ T8559] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 574.847863][ T8559] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 574.865741][ T9163] libceph: connect (1)[c::]:6789 error -101 [ 574.879611][ T9163] libceph: mon0 (1)[c::]:6789 connect error [ 574.889182][ T784] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 574.901632][ T8559] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 574.909983][ T5111] Bluetooth: hci3: command tx timeout [ 574.936367][ T8559] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 574.978636][ T8559] veth1_macvtap: left promiscuous mode [ 574.984452][ T8559] veth0_macvtap: left promiscuous mode [ 574.987721][T11477] bcachefs (loop2): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names [ 574.990482][ T8559] veth1_vlan: left promiscuous mode [ 575.013377][ T8559] veth0_vlan: left promiscuous mode [ 575.033952][T11477] bcachefs (loop2): recovering from clean shutdown, journal seq 13 [ 575.087780][T11483] loop4: detected capacity change from 0 to 32768 [ 575.097654][T11477] bcachefs (loop2): alloc_read... done [ 575.103740][T11477] bcachefs (loop2): stripes_read... done [ 575.109636][ T784] usb 4-1: Using ep0 maxpacket: 32 [ 575.115563][T11477] bcachefs (loop2): snapshots_read... done [ 575.123169][ T784] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 575.131666][T11477] bcachefs (loop2): journal_replay... done [ 575.135919][ T784] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 575.148412][ T784] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 575.160756][T11477] bcachefs (loop2): resume_logged_ops... done [ 575.162402][ T784] usb 4-1: Product: syz [ 575.166944][T11477] bcachefs (loop2): going read-write [ 575.173426][ T784] usb 4-1: Manufacturer: syz [ 575.182263][ T784] usb 4-1: SerialNumber: syz [ 575.189458][ T784] usb 4-1: config 0 descriptor?? [ 575.206243][T11489] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 575.218322][T11477] bcachefs (loop2): done starting filesystem [ 575.287123][T11484] ceph: No mds server is up or the cluster is laggy [ 575.296990][T11477] overlayfs: failed to resolve './file1': -2 [ 575.307893][T11483] bcachefs (loop4): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=xxhash,compression=zstd,nojournal_transaction_names [ 575.354422][T11483] bcachefs (loop4): recovering from clean shutdown, journal seq 10 [ 575.443231][T11483] bcachefs (loop4): alloc_read... done [ 575.474405][T11483] bcachefs (loop4): stripes_read... done [ 575.537218][T11483] bcachefs (loop4): snapshots_read... done [ 575.579074][T11483] bcachefs (loop4): journal_replay... done [ 575.585480][T11483] bcachefs (loop4): resume_logged_ops... done [ 575.611316][T11483] bcachefs (loop4): going read-write [ 575.646945][T11483] bcachefs (loop4): done starting filesystem [ 576.097778][ T5161] libceph: connect (1)[c::]:6789 error -101 [ 576.127037][T10588] bcachefs (loop4): shutting down [ 576.132845][ T5161] libceph: mon0 (1)[c::]:6789 connect error [ 576.138921][T11518] ceph: No mds server is up or the cluster is laggy [ 576.159502][T10588] bcachefs (loop4): going read-only [ 576.193373][T10588] bcachefs (loop4): finished waiting for writes to stop [ 576.270095][T10588] bcachefs (loop4): flushing journal and stopping allocators, journal seq 13 [ 576.395714][T10588] bcachefs (loop4): flushing journal and stopping allocators complete, journal seq 15 [ 576.472060][T10588] bcachefs (loop4): shutdown complete, journal seq 16 [ 576.549147][T10588] bcachefs (loop4): marking filesystem clean [ 576.700779][T10588] bcachefs (loop4): shutdown complete [ 577.049354][ T5118] Bluetooth: hci3: command tx timeout [ 577.593484][T11530] loop0: detected capacity change from 0 to 1024 [ 577.699937][ T29] audit: type=1326 audit(1718857714.173:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11529 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ec107cf29 code=0x7ffc0000 [ 577.781183][ T29] audit: type=1326 audit(1718857714.193:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11529 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ec107cf29 code=0x7ffc0000 [ 577.827826][ T29] audit: type=1326 audit(1718857714.193:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11529 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6ec107cf29 code=0x7ffc0000 [ 577.858883][ T29] audit: type=1326 audit(1718857714.193:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11529 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ec107cf29 code=0x7ffc0000 [ 577.906639][ T8559] team0 (unregistering): Port device team_slave_1 removed [ 577.931715][ T29] audit: type=1326 audit(1718857714.193:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11529 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f6ec107cf29 code=0x7ffc0000 [ 577.954666][ T29] audit: type=1326 audit(1718857714.193:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11529 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ec107cf29 code=0x7ffc0000 [ 577.990930][ T29] audit: type=1326 audit(1718857714.193:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11529 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f6ec107cf29 code=0x7ffc0000 [ 578.029208][ T29] audit: type=1326 audit(1718857714.203:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11529 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ec107cf29 code=0x7ffc0000 [ 578.068031][ T8559] team0 (unregistering): Port device team_slave_0 removed [ 578.074520][T11532] loop4: detected capacity change from 0 to 256 [ 578.089228][ T29] audit: type=1326 audit(1718857714.203:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11529 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ec107cf29 code=0x7ffc0000 [ 578.115322][ T29] audit: type=1326 audit(1718857714.203:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11529 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f6ec107cf29 code=0x7ffc0000 [ 578.151010][ T12] hfsplus: b-tree write err: -5, ino 4 [ 578.430773][T11532] loop4: detected capacity change from 0 to 512 [ 578.449846][T11532] ext3: Unknown parameter 'obj_type' [ 578.507295][T11541] loop0: detected capacity change from 0 to 256 [ 578.731442][ T8952] bcachefs (loop2): shutting down [ 578.736792][ T8952] bcachefs (loop2): going read-only [ 578.758351][ T8952] bcachefs (loop2): finished waiting for writes to stop [ 578.776091][T11541] loop0: detected capacity change from 0 to 512 [ 578.785495][ T8952] bcachefs (loop2): flushing journal and stopping allocators, journal seq 13 [ 578.786014][T11541] ext3: Unknown parameter 'obj_type' [ 578.799328][ T8952] bcachefs (loop2): flushing journal and stopping allocators complete, journal seq 13 [ 578.834101][ T8952] bcachefs (loop2): shutdown complete, journal seq 14 [ 578.857743][ T8952] bcachefs (loop2): marking filesystem clean [ 578.958394][T11546] loop4: detected capacity change from 0 to 256 [ 578.970353][ T8952] bcachefs (loop2): shutdown complete [ 578.975735][T11546] exfat: Unknown parameter 'allow_utĘ' [ 579.071537][ T5118] Bluetooth: hci3: command tx timeout [ 579.278773][T11546] loop4: detected capacity change from 0 to 4096 [ 580.176422][T11550] loop2: detected capacity change from 0 to 256 [ 580.217024][T11430] team0: Port device team_slave_0 added [ 580.241326][T11550] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 580.278836][T11430] team0: Port device team_slave_1 added [ 580.420349][T11430] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 580.427386][T11430] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 580.499247][T11430] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 580.514496][ T5154] usb 4-1: USB disconnect, device number 29 [ 580.559876][T11430] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 580.567138][T11548] loop0: detected capacity change from 0 to 32768 [ 580.574524][T11430] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 580.604715][T11430] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 580.619645][ T5154] libceph: connect (1)[c::]:6789 error -101 [ 580.626240][ T5154] libceph: mon0 (1)[c::]:6789 connect error [ 580.821076][T11430] hsr_slave_0: entered promiscuous mode [ 580.859845][T11430] hsr_slave_1: entered promiscuous mode [ 580.879767][T11430] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 580.887392][T11430] Cannot create hsr debugfs directory [ 580.891890][ T5154] libceph: connect (1)[c::]:6789 error -101 [ 580.902980][ T5154] libceph: mon0 (1)[c::]:6789 connect error [ 581.363034][T11554] ceph: No mds server is up or the cluster is laggy [ 581.606185][ T5154] libceph: connect (1)[c::]:6789 error -101 [ 581.619690][ T5154] libceph: mon0 (1)[c::]:6789 connect error [ 581.625969][T11566] ceph: No mds server is up or the cluster is laggy [ 581.655451][T11563] loop4: detected capacity change from 0 to 32768 [ 581.786113][T11581] loop0: detected capacity change from 0 to 256 [ 581.839371][T11430] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 581.859137][T11430] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 581.898386][T11430] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 581.948541][T11430] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 581.992807][T11563] bcachefs (loop4): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=xxhash,compression=zstd,nojournal_transaction_names [ 582.010239][T11563] bcachefs (loop4): recovering from clean shutdown, journal seq 10 [ 582.067131][T11595] loop2: detected capacity change from 0 to 256 [ 582.095537][T11581] loop0: detected capacity change from 0 to 512 [ 582.110098][T11581] ext3: Unknown parameter 'obj_type' [ 582.110205][T11563] bcachefs (loop4): alloc_read... done [ 582.139358][T11563] bcachefs (loop4): stripes_read... done [ 582.145164][T11563] bcachefs (loop4): snapshots_read... done [ 582.168576][T11563] bcachefs (loop4): journal_replay... done [ 582.201114][T11430] 8021q: adding VLAN 0 to HW filter on device bond0 [ 582.214413][T11563] bcachefs (loop4): resume_logged_ops... done [ 582.234228][T11563] bcachefs (loop4): going read-write [ 582.246085][T11563] bcachefs (loop4): done starting filesystem [ 582.247093][T11430] 8021q: adding VLAN 0 to HW filter on device team0 [ 582.272916][ T5155] bridge0: port 1(bridge_slave_0) entered blocking state [ 582.280134][ T5155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 582.311196][ T5155] bridge0: port 2(bridge_slave_1) entered blocking state [ 582.318377][ T5155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 582.339339][ T8152] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 582.376219][T11599] loop2: detected capacity change from 0 to 512 [ 582.384980][T11599] ext3: Unknown parameter 'obj_type' [ 582.406488][T10588] bcachefs (loop4): shutting down [ 582.419715][T10588] bcachefs (loop4): going read-only [ 582.461811][T10588] bcachefs (loop4): finished waiting for writes to stop [ 582.501438][T10588] bcachefs (loop4): flushing journal and stopping allocators, journal seq 12 [ 582.533720][T10588] bcachefs (loop4): flushing journal and stopping allocators complete, journal seq 13 [ 582.548068][T10588] bcachefs (loop4): shutdown complete, journal seq 14 [ 582.556197][T10588] bcachefs (loop4): marking filesystem clean [ 582.600283][ T8152] usb 4-1: Using ep0 maxpacket: 32 [ 582.618328][T10588] bcachefs (loop4): shutdown complete [ 582.626527][ T8152] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 582.655233][ T8152] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 582.675900][ T8152] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 582.695455][ T8152] usb 4-1: Product: syz [ 582.704258][ T8152] usb 4-1: Manufacturer: syz [ 582.708904][ T8152] usb 4-1: SerialNumber: syz [ 582.730220][ T8152] usb 4-1: config 0 descriptor?? [ 582.740131][T11597] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 582.794795][T11430] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 582.878613][T11430] veth0_vlan: entered promiscuous mode [ 582.908709][T11430] veth1_vlan: entered promiscuous mode [ 582.930437][ T5110] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 583.044204][T11430] veth0_macvtap: entered promiscuous mode [ 583.096038][T11430] veth1_macvtap: entered promiscuous mode [ 583.139485][ T5110] usb 1-1: Using ep0 maxpacket: 8 [ 583.154257][ T5110] usb 1-1: unable to get BOS descriptor set [ 583.186988][ T5110] usb 1-1: config 0 has no interfaces? [ 583.209387][ T5110] usb 1-1: New USB device found, idVendor=2be7, idProduct=97bf, bcdDevice= 0.40 [ 583.254354][T11430] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 583.259653][ T5110] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 583.286624][ T5110] usb 1-1: Product: syz [ 583.301558][T11430] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 583.309150][ T5110] usb 1-1: Manufacturer: syz [ 583.323093][T11430] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 583.333978][ T5110] usb 1-1: SerialNumber: syz [ 583.337968][T11430] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 583.354280][T11430] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 583.365316][T11430] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 583.366024][ T5110] usb 1-1: config 0 descriptor?? [ 583.408701][T11430] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 583.495245][T11430] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 583.543173][T11430] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 583.554363][T11430] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 583.567641][T11430] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 583.578461][T11430] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 583.603597][T11430] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 583.623562][T11609] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 583.629706][T11617] loop4: detected capacity change from 0 to 256 [ 583.634062][T11612] loop2: detected capacity change from 0 to 32768 [ 583.648730][T11609] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 583.650234][T11617] exfat: Unknown parameter 'allow_utĘ' [ 583.678474][T11609] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 583.679210][T11430] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 583.696021][T11609] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 583.703173][T11430] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 583.736454][T11430] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 583.748813][T11430] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 583.777963][T11430] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 583.801929][ T5110] usb 1-1: USB disconnect, device number 22 [ 583.818448][T11430] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 583.844631][T11430] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 583.922464][ T5161] usb 4-1: USB disconnect, device number 30 [ 584.059001][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 584.115333][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 584.265553][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 584.289502][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 584.323437][T11619] vxcan1: entered allmulticast mode [ 584.379765][T11617] loop4: detected capacity change from 0 to 4096 [ 584.598721][ T5154] libceph: connect (1)[c::]:6789 error -101 [ 584.612384][ T5154] libceph: mon0 (1)[c::]:6789 connect error [ 584.785470][ T5154] libceph: connect (1)[c::]:6789 error -101 [ 584.812106][ T5154] libceph: mon0 (1)[c::]:6789 connect error [ 584.871512][ T5154] libceph: connect (1)[c::]:6789 error -101 [ 585.586953][ T5154] libceph: mon0 (1)[c::]:6789 connect error [ 585.595260][ T5152] libceph: connect (1)[c::]:6789 error -101 [ 585.601478][ T5152] libceph: mon0 (1)[c::]:6789 connect error [ 585.649269][ T5161] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 585.671198][T11628] ceph: No mds server is up or the cluster is laggy [ 585.723823][T11631] ceph: No mds server is up or the cluster is laggy [ 585.874862][ T5161] usb 4-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 255 [ 585.906640][T11645] loop0: detected capacity change from 0 to 512 [ 585.916395][ T5161] usb 4-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 0 [ 585.956010][T11645] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 585.959034][ T5161] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 585.994588][ T5161] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 586.031522][ T5161] usb 4-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 586.057580][ T5161] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 586.069643][ T5161] usb 4-1: config 0 descriptor?? [ 586.083003][T11645] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 586.083265][ T5161] usb-storage 4-1:0.0: USB Mass Storage device detected [ 586.154164][ T5161] usb-storage 4-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 586.170603][T11645] EXT4-fs (loop0): 1 truncate cleaned up [ 586.211408][T11645] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 586.286288][ T5161] usb 4-1: USB disconnect, device number 31 [ 586.437936][T11652] ceph: No mds server is up or the cluster is laggy [ 586.448176][ T5152] libceph: connect (1)[c::]:6789 error -101 [ 586.467011][ T5152] libceph: mon0 (1)[c::]:6789 connect error [ 586.548748][ T8913] EXT4-fs error (device loop0): ext4_inlinedir_to_tree:1403: inode #12: block 7: comm syz-executor.0: path /root/syzkaller-testdir3393957356/syzkaller.WPAdej/113/bus/file0/file0: bad entry in directory: rec_len is smaller than minimal - offset=20, inode=2147483648, rec_len=0, size=60 fake=0 [ 586.872567][T11647] loop2: detected capacity change from 0 to 32768 [ 586.914896][ T8913] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 586.970593][T11656] loop1: detected capacity change from 0 to 256 [ 587.001629][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 587.199535][T11647] bcachefs (loop2): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=xxhash,compression=zstd,nojournal_transaction_names [ 587.204054][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 587.249378][T11647] bcachefs (loop2): recovering from clean shutdown, journal seq 10 [ 587.269674][ T50] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 587.311772][T11667] loop1: detected capacity change from 0 to 512 [ 587.329486][T11667] ext3: Unknown parameter 'obj_type' [ 587.336053][T11647] bcachefs (loop2): alloc_read... done [ 587.351720][T11647] bcachefs (loop2): stripes_read... done [ 587.357844][T11647] bcachefs (loop2): snapshots_read... done [ 587.384718][T11647] bcachefs (loop2): journal_replay... done [ 587.415871][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 587.429303][T11647] bcachefs (loop2): resume_logged_ops... done [ 587.465523][T11647] bcachefs (loop2): going read-write [ 587.489507][ T50] usb 4-1: Using ep0 maxpacket: 32 [ 587.501422][T11647] bcachefs (loop2): done starting filesystem [ 587.668201][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 587.683252][ T50] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 587.698401][ T50] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 587.707887][ T50] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 587.732098][ T50] usb 4-1: Product: syz [ 587.743841][ T50] usb 4-1: Manufacturer: syz [ 587.748684][ T50] usb 4-1: SerialNumber: syz [ 587.762710][ T50] usb 4-1: config 0 descriptor?? [ 587.771126][T11663] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 588.615098][ T8952] bcachefs (loop2): shutting down [ 588.627063][ T8952] bcachefs (loop2): going read-only [ 588.666306][ T8952] bcachefs (loop2): finished waiting for writes to stop [ 588.935781][T11688] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 589.055073][ T8952] bcachefs (loop2): flushing journal and stopping allocators, journal seq 13 [ 589.081215][ T8952] bcachefs (loop2): flushing journal and stopping allocators complete, journal seq 13 [ 589.103889][ T5161] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 589.131050][ T8952] bcachefs (loop2): shutdown complete, journal seq 14 [ 589.144245][ T8952] bcachefs (loop2): marking filesystem clean [ 589.195010][ T5152] usb 4-1: USB disconnect, device number 32 [ 589.202321][ T12] bridge_slave_0: left allmulticast mode [ 589.239417][ T8952] bcachefs (loop2): shutdown complete [ 589.241821][ T12] bridge_slave_0: left promiscuous mode [ 589.294994][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 589.342046][ T5161] usb 2-1: Using ep0 maxpacket: 32 [ 589.363933][ T5161] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 589.404374][T11690] loop3: detected capacity change from 0 to 512 [ 589.415713][T11690] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 589.469855][ T5161] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 589.478965][ T5161] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 589.518857][ T5111] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 589.534297][T11690] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 589.554782][ T5111] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 589.565063][ T5161] usb 2-1: Product: syz [ 589.569750][ T5111] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 589.577531][ T5161] usb 2-1: Manufacturer: syz [ 589.596940][ T5111] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 589.605716][T11690] EXT4-fs (loop3): 1 truncate cleaned up [ 589.615033][ T5111] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 589.615633][ T5161] usb 2-1: SerialNumber: syz [ 589.629990][ T5111] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 589.631068][T11690] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 589.690309][ T5161] usb 2-1: config 0 descriptor?? [ 589.695998][T11683] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 590.021699][ T7145] EXT4-fs error (device loop3): ext4_inlinedir_to_tree:1403: inode #12: block 7: comm syz-executor.3: path /root/syzkaller-testdir1194673376/syzkaller.OrbZU5/238/bus/file0/file0: bad entry in directory: rec_len is smaller than minimal - offset=20, inode=2147483648, rec_len=0, size=60 fake=0 [ 590.513826][ T5110] libceph: connect (1)[c::]:6789 error -101 [ 590.520038][ T5110] libceph: mon0 (1)[c::]:6789 connect error [ 590.602226][T11699] loop4: detected capacity change from 0 to 32768 [ 590.746416][T11699] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 590.787185][ T5110] libceph: connect (1)[c::]:6789 error -101 [ 590.793643][ T5110] libceph: mon0 (1)[c::]:6789 connect error [ 590.875207][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 590.886967][ T12] bond0 (unregistering): Released all slaves [ 590.934886][T11699] XFS (loop4): Ending clean mount [ 590.966658][T11699] XFS (loop4): Quotacheck needed: Please wait. [ 591.103132][T11699] XFS (loop4): Quotacheck: Done. [ 591.181643][T10588] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 591.211467][ T5110] usb 2-1: USB disconnect, device number 16 [ 591.221156][ T7145] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 591.299800][ T8152] libceph: connect (1)[c::]:6789 error -101 [ 591.313594][ T8152] libceph: mon0 (1)[c::]:6789 connect error [ 591.319808][T11704] ceph: No mds server is up or the cluster is laggy [ 591.613144][T11692] chnl_net:caif_netlink_parms(): no params data found [ 591.732069][ T12] hsr_slave_0: left promiscuous mode [ 591.789346][ T5118] Bluetooth: hci4: command tx timeout [ 591.817178][T11724] loop4: detected capacity change from 0 to 256 [ 591.823848][ T12] hsr_slave_1: left promiscuous mode [ 591.864967][T11724] exfat: Unknown parameter 'allow_utĘ' [ 591.994754][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 592.004202][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 592.022614][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 592.049900][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 593.270860][ T12] veth1_macvtap: left promiscuous mode [ 593.276497][ T12] veth0_macvtap: left promiscuous mode [ 593.301898][ T12] veth1_vlan: left promiscuous mode [ 593.307325][ T12] veth0_vlan: left promiscuous mode [ 593.593625][ T5111] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 593.608161][ T5111] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 593.618194][ T5111] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 593.626423][ T5111] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 593.634566][ T5111] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 593.642071][ T5111] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 593.869280][ T5118] Bluetooth: hci4: command tx timeout [ 593.923747][T11721] loop2: detected capacity change from 0 to 40427 [ 593.962419][T11721] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 593.983630][T11721] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 593.989379][T11724] loop4: detected capacity change from 0 to 4096 [ 594.026731][T11721] F2FS-fs (loop2): Found nat_bits in checkpoint [ 594.178134][T11721] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 594.185867][T11721] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 594.551530][T11740] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 595.042621][ T12] team0 (unregistering): Port device team_slave_1 removed [ 595.119048][ T12] team0 (unregistering): Port device team_slave_0 removed [ 595.154887][ T50] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 595.363031][ T50] usb 5-1: Using ep0 maxpacket: 32 [ 595.372179][ T50] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 595.398187][ T50] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 595.425741][ T50] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 595.434107][ T50] usb 5-1: Product: syz [ 595.438302][ T50] usb 5-1: Manufacturer: syz [ 595.444489][ T50] usb 5-1: SerialNumber: syz [ 595.451484][ T50] usb 5-1: config 0 descriptor?? [ 595.475195][T11742] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 595.653246][T11751] loop2: detected capacity change from 0 to 64 [ 595.680254][T11751] hfs: unable to parse mount options [ 595.715260][ T5118] Bluetooth: hci2: command tx timeout [ 595.949264][ T5118] Bluetooth: hci4: command tx timeout [ 596.099226][ T5155] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 596.289248][ T5155] usb 3-1: Using ep0 maxpacket: 32 [ 596.335945][ T5155] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 596.362015][ T5155] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 596.373270][ T5155] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 596.381879][ T5155] usb 3-1: Product: syz [ 596.386156][ T5155] usb 3-1: Manufacturer: syz [ 596.392982][ T5155] usb 3-1: SerialNumber: syz [ 596.401584][ T5155] usb 3-1: config 0 descriptor?? [ 596.407560][T11756] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 596.450712][ T5155] chaoskey 3-1:0.0: Unable to register with hwrng [ 596.613084][ C0] IPv4: Oversized IP packet from 127.0.0.1 [ 596.700935][ T2834] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 596.719499][T11692] bridge0: port 1(bridge_slave_0) entered blocking state [ 596.769326][T11692] bridge0: port 1(bridge_slave_0) entered disabled state [ 596.795741][T11692] bridge_slave_0: entered allmulticast mode [ 596.842193][ T5155] usb 5-1: USB disconnect, device number 21 [ 596.856145][T11692] bridge_slave_0: entered promiscuous mode [ 596.907915][T11692] bridge0: port 2(bridge_slave_1) entered blocking state [ 596.959270][T11692] bridge0: port 2(bridge_slave_1) entered disabled state [ 596.979771][T11692] bridge_slave_1: entered allmulticast mode [ 596.986472][T11692] bridge_slave_1: entered promiscuous mode [ 597.095507][T11774] netlink: 'syz-executor.4': attribute type 9 has an invalid length. [ 597.103841][T11774] netlink: 'syz-executor.4': attribute type 7 has an invalid length. [ 597.113008][T11774] netlink: 'syz-executor.4': attribute type 8 has an invalid length. [ 597.208543][ T29] kauditd_printk_skb: 57 callbacks suppressed [ 597.208561][ T29] audit: type=1326 audit(1718857733.703:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11771 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7357a7cf29 code=0x7ffc0000 [ 597.246601][T11692] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 597.246795][T11774] loop4: detected capacity change from 0 to 4096 [ 597.258845][T11692] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 597.372494][T11692] team0: Port device team_slave_0 added [ 597.395949][T11692] team0: Port device team_slave_1 added [ 597.414761][ T29] audit: type=1326 audit(1718857733.703:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11771 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7357a7cf29 code=0x7ffc0000 [ 597.457217][ T29] audit: type=1326 audit(1718857733.703:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11771 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7357a7cf29 code=0x7ffc0000 [ 597.484308][ T29] audit: type=1326 audit(1718857733.703:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11771 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7357a7cf29 code=0x7ffc0000 [ 597.518023][ T5110] usb 3-1: USB disconnect, device number 14 [ 597.552917][ T29] audit: type=1326 audit(1718857733.703:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11771 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7357a7cf29 code=0x7ffc0000 [ 597.579269][ T29] audit: type=1326 audit(1718857733.713:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11771 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7357a7cf29 code=0x7ffc0000 [ 597.644357][ T29] audit: type=1326 audit(1718857733.713:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11771 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7357a7cf29 code=0x7ffc0000 [ 597.697813][ T29] audit: type=1326 audit(1718857733.713:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11771 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7f7357a7cf29 code=0x7ffc0000 [ 597.741840][ T29] audit: type=1326 audit(1718857733.713:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11771 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7357a7cf29 code=0x7ffc0000 [ 597.775831][T11692] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 597.783422][ T29] audit: type=1326 audit(1718857733.713:315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11771 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7357a7cf29 code=0x7ffc0000 [ 597.785365][T11692] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 597.812361][ T5118] Bluetooth: hci2: command tx timeout [ 597.831903][ C0] vkms_vblank_simulate: vblank timer overrun [ 597.922082][T11692] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 598.029541][ T5118] Bluetooth: hci4: command tx timeout [ 598.029707][ T9163] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 598.056334][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 598.086571][T11692] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 598.095264][T11790] loop4: detected capacity change from 0 to 256 [ 598.134553][T11692] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 598.164794][T11790] exfat: Unknown parameter 'allow_utĘ' [ 598.172176][T11692] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 598.188014][T11733] chnl_net:caif_netlink_parms(): no params data found [ 598.229257][ T9163] usb 2-1: device descriptor read/64, error -71 [ 598.292816][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 598.499309][ T9163] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 598.513867][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 598.596123][T11692] hsr_slave_0: entered promiscuous mode [ 598.624983][T11692] hsr_slave_1: entered promiscuous mode [ 598.627387][T11790] loop4: detected capacity change from 0 to 4096 [ 598.655867][T11692] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 598.666187][ T9163] usb 2-1: device descriptor read/64, error -71 [ 598.674066][T11692] Cannot create hsr debugfs directory [ 598.723906][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 598.789575][ T9163] usb usb2-port1: attempt power cycle [ 599.018142][T11733] bridge0: port 1(bridge_slave_0) entered blocking state [ 599.040996][T11733] bridge0: port 1(bridge_slave_0) entered disabled state [ 599.054387][T11792] loop2: detected capacity change from 0 to 40427 [ 599.063775][T11733] bridge_slave_0: entered allmulticast mode [ 599.080036][T11733] bridge_slave_0: entered promiscuous mode [ 599.113298][T11792] F2FS-fs (loop2): Found nat_bits in checkpoint [ 599.132411][T11733] bridge0: port 2(bridge_slave_1) entered blocking state [ 599.140938][T11733] bridge0: port 2(bridge_slave_1) entered disabled state [ 599.149202][T11733] bridge_slave_1: entered allmulticast mode [ 599.164330][T11733] bridge_slave_1: entered promiscuous mode [ 599.199377][ T9163] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 599.249976][ T9163] usb 2-1: device descriptor read/8, error -71 [ 599.267127][T11733] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 599.289936][T11792] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 599.335648][T11733] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 599.387729][ T12] bridge_slave_0: left allmulticast mode [ 599.429478][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 599.519574][ T9163] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 599.570143][ T9163] usb 2-1: device descriptor read/8, error -71 [ 599.654709][ T8952] syz-executor.2: attempt to access beyond end of device [ 599.654709][ T8952] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 599.683951][ T8952] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 599.710198][ T9163] usb usb2-port1: unable to enumerate USB device [ 599.869216][ T5118] Bluetooth: hci2: command tx timeout [ 600.320849][ T5153] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 600.343952][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 600.354840][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 600.365991][ T12] bond0 (unregistering): (slave team_slave_0): Releasing backup interface [ 600.380497][ T12] bond0 (unregistering): Released all slaves [ 600.468989][T11733] team0: Port device team_slave_0 added [ 600.529220][ T5153] usb 5-1: Using ep0 maxpacket: 32 [ 600.537328][ T12] tipc: Disabling bearer [ 600.547859][ T12] tipc: Left network mode [ 600.555222][ T5153] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 600.557704][T11733] team0: Port device team_slave_1 added [ 600.588255][ T5153] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 600.619522][ T5153] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 600.637317][ T5153] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 600.650773][ T5153] usb 5-1: New USB device found, idVendor=1b96, idProduct=9f0a, bcdDevice= 0.15 [ 600.660916][ T5153] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 600.672043][T11733] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 600.679408][T11733] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 600.826966][ T5153] usb 5-1: config 0 descriptor?? [ 600.837850][T11733] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 601.075063][T11733] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 601.082291][T11733] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 601.108697][T11733] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 601.177031][T11733] hsr_slave_0: entered promiscuous mode [ 601.190939][T11733] hsr_slave_1: entered promiscuous mode [ 601.197368][T11733] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 601.208347][T11733] Cannot create hsr debugfs directory [ 601.301385][ T5153] hid-generic 0003:1B96:9F0A.0004: unknown main item tag 0x0 [ 601.336289][ T5153] hid-generic 0003:1B96:9F0A.0004: unknown main item tag 0x0 [ 601.349493][ T5153] hid-generic 0003:1B96:9F0A.0004: unknown main item tag 0x0 [ 601.385914][ T5153] hid-generic 0003:1B96:9F0A.0004: unknown main item tag 0x0 [ 601.407116][ T5153] hid-generic 0003:1B96:9F0A.0004: unknown main item tag 0x0 [ 601.435724][ T5153] hid-generic 0003:1B96:9F0A.0004: hidraw0: USB HID v0.00 Device [HID 1b96:9f0a] on usb-dummy_hcd.4-1/input0 [ 601.538952][ T5110] usb 5-1: USB disconnect, device number 22 [ 601.728365][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 601.756612][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 601.791915][ T12] veth1_macvtap: left promiscuous mode [ 601.809367][ T12] veth0_macvtap: left promiscuous mode [ 601.815062][ T12] veth1_vlan: left promiscuous mode [ 601.830312][ T12] veth0_vlan: left promiscuous mode [ 601.866134][ T8152] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 601.917823][T11821] loop2: detected capacity change from 0 to 32768 [ 601.948698][T11821] XFS (loop2): DAX unsupported by block device. Turning off DAX. [ 601.956858][ T5118] Bluetooth: hci2: command tx timeout [ 601.970920][T11821] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 602.056220][T11821] XFS (loop2): Ending clean mount [ 602.079179][ T8152] usb 2-1: Using ep0 maxpacket: 32 [ 602.086246][ T8152] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 602.097622][T11821] XFS (loop2): Quotacheck needed: Please wait. [ 602.098952][ T8152] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 602.115829][ T8152] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 602.129200][ T8152] usb 2-1: Product: syz [ 602.133442][ T8152] usb 2-1: Manufacturer: syz [ 602.149411][ T8152] usb 2-1: SerialNumber: syz [ 602.181603][ T8152] usb 2-1: config 0 descriptor?? [ 602.184980][T11821] XFS (loop2): Quotacheck: Done. [ 602.189513][T11823] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 602.292330][ T8952] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 603.494713][ T12] team0 (unregistering): Port device team_slave_1 removed [ 603.614174][T11845] loop4: detected capacity change from 0 to 40427 [ 603.665114][T11845] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 603.680333][T11845] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 603.761902][T11845] F2FS-fs (loop4): Found nat_bits in checkpoint [ 603.977520][T11845] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 603.984979][T11845] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 604.099432][ T5155] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 604.290033][T11855] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 604.329256][ T5155] usb 3-1: Using ep0 maxpacket: 8 [ 604.352215][ T5155] usb 3-1: config 0 has no interfaces? [ 604.364649][ T5155] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 604.387081][ T5155] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 604.405057][ T5155] usb 3-1: Product: syz [ 604.418823][ T5155] usb 3-1: Manufacturer: syz [ 604.449263][ T5155] usb 3-1: SerialNumber: syz [ 604.464849][ T5155] usb 3-1: config 0 descriptor?? [ 604.703498][ T5155] usb 3-1: USB disconnect, device number 15 [ 605.567763][T11860] loop4: detected capacity change from 0 to 8192 [ 605.601276][T11860] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 605.624688][T11692] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 605.675064][T11692] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 605.743152][T11692] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 605.766161][T11692] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 605.839737][ T9163] usb 2-1: USB disconnect, device number 21 [ 606.023214][T11692] 8021q: adding VLAN 0 to HW filter on device bond0 [ 606.128048][ T12] IPVS: stop unused estimator thread 0... [ 606.171165][T11692] 8021q: adding VLAN 0 to HW filter on device team0 [ 606.217431][ T8152] bridge0: port 1(bridge_slave_0) entered blocking state [ 606.221722][T11859] loop2: detected capacity change from 0 to 32768 [ 606.224627][ T8152] bridge0: port 1(bridge_slave_0) entered forwarding state [ 606.237184][ T8152] bridge0: port 2(bridge_slave_1) entered blocking state [ 606.246027][ T8152] bridge0: port 2(bridge_slave_1) entered forwarding state [ 606.247086][T11859] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz-executor.2 (11859) [ 606.277732][T11859] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 606.288267][T11859] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 606.303769][T11859] BTRFS info (device loop2): using free-space-tree [ 606.521300][T11733] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 606.532420][T11733] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 606.543296][T11733] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 606.554506][T11733] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 606.604472][T11859] xt_TPROXY: Can be used only with -p tcp or -p udp [ 606.811682][T11733] 8021q: adding VLAN 0 to HW filter on device bond0 [ 606.873451][T11733] 8021q: adding VLAN 0 to HW filter on device team0 [ 606.911981][ T5154] bridge0: port 1(bridge_slave_0) entered blocking state [ 606.919256][ T5154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 606.959914][ T931] bridge0: port 2(bridge_slave_1) entered blocking state [ 606.967272][ T931] bridge0: port 2(bridge_slave_1) entered forwarding state [ 607.077211][T11692] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 607.078475][ T8952] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 607.114807][T11733] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 607.182560][T11867] loop1: detected capacity change from 0 to 32768 [ 607.330897][T11692] veth0_vlan: entered promiscuous mode [ 607.386928][T11692] veth1_vlan: entered promiscuous mode [ 607.388139][T11882] loop4: detected capacity change from 0 to 32768 [ 607.511592][T11882] XFS (loop4): Mounting V5 Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a [ 607.538315][T11867] bcachefs (loop1): mounting version 1.7: mi_btree_bitmap opts=compression=lz4,nojournal_transaction_names [ 607.556553][T11733] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 607.587784][T11912] loop2: detected capacity change from 0 to 128 [ 607.605349][T11912] syz-executor.2: attempt to access beyond end of device [ 607.605349][T11912] loop2: rw=2051, sector=112, nr_sectors = 940 limit=128 [ 607.626843][T11692] veth0_macvtap: entered promiscuous mode [ 607.645354][T11867] bcachefs (loop1): recovering from clean shutdown, journal seq 7 [ 607.654474][T11882] XFS (loop4): Ending clean mount [ 607.703088][T11692] veth1_macvtap: entered promiscuous mode [ 607.746968][T11867] bcachefs (loop1): alloc_read... done [ 607.768796][T11867] bcachefs (loop1): stripes_read... done [ 607.778511][T11916] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 607.809276][T11867] bcachefs (loop1): snapshots_read... done [ 607.821724][T11692] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 607.834457][T11867] bcachefs (loop1): journal_replay... done [ 607.836334][T11692] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 607.851816][T11867] bcachefs (loop1): resume_logged_ops... done [ 607.873228][T11692] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 607.884308][T11692] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 607.884969][T11867] bcachefs (loop1): going read-write [ 607.894770][T11692] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 607.912440][T11692] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 607.938677][T11692] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 607.973472][T11867] bcachefs (loop1): done starting filesystem [ 607.988869][T11733] veth0_vlan: entered promiscuous mode [ 608.024581][T11922] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 608.049965][T10588] XFS (loop4): Unmounting Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a [ 608.086461][T11692] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 608.162859][T11692] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 608.184213][T11692] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 608.197125][T11692] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 608.209756][T11692] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 608.236290][T11692] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 608.256830][T11692] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 608.276730][T11733] veth1_vlan: entered promiscuous mode [ 608.337622][T11692] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 608.364572][T11692] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 608.391061][T11692] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 608.446099][T11692] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 608.637397][T11733] veth0_macvtap: entered promiscuous mode [ 608.706290][ T2937] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 608.717781][ T2937] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 608.741265][T11733] veth1_macvtap: entered promiscuous mode [ 608.761771][ T931] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 608.807406][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 608.822479][T11733] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 608.829608][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 608.845693][T11733] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 608.855709][T11733] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 608.867519][T11733] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 608.877513][T11733] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 608.890689][T11733] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 608.900983][T11733] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 608.911805][T11733] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 608.928226][T11733] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 608.959616][ T931] usb 3-1: Using ep0 maxpacket: 8 [ 608.976467][T11733] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 608.994267][ T931] usb 3-1: config 0 has no interfaces? [ 609.022607][T11733] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 609.036013][T11733] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 609.047344][T11733] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 609.060814][ T931] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 609.076339][T11733] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 609.093283][ T931] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 609.102300][T11733] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 609.114210][ T931] usb 3-1: Product: syz [ 609.118515][ T931] usb 3-1: Manufacturer: syz [ 609.119187][T11733] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 609.123374][ T931] usb 3-1: SerialNumber: syz [ 609.141149][ T931] usb 3-1: config 0 descriptor?? [ 609.145731][T11733] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 609.170918][T11733] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 609.202358][T11733] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 609.214798][T11733] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 609.224490][T11733] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 609.235209][T11733] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 609.380631][ T5154] usb 3-1: USB disconnect, device number 16 [ 609.495818][ T2937] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 609.519859][ T2937] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 609.635206][ T2469] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 609.649170][ T2469] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 609.896910][T11936] loop3: detected capacity change from 0 to 256 [ 610.129250][ T5110] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 610.244910][T11936] loop3: detected capacity change from 0 to 512 [ 610.284432][T11936] ext3: Unknown parameter 'obj_type' [ 610.319956][ T5110] usb 5-1: Using ep0 maxpacket: 32 [ 610.336619][ T5110] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 610.340546][T11932] loop0: detected capacity change from 0 to 40427 [ 610.381943][ T5110] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 610.408287][T11932] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 610.416611][ T5110] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 610.443749][T11932] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 610.457383][ T5110] usb 5-1: Product: syz [ 610.470750][ T5110] usb 5-1: Manufacturer: syz [ 610.497230][ T5110] usb 5-1: SerialNumber: syz [ 610.504528][T11932] F2FS-fs (loop0): Found nat_bits in checkpoint [ 610.542694][ T5110] usb 5-1: config 0 descriptor?? [ 610.548806][T11938] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 610.608323][T11867] syz-executor.1 (11867) used greatest stack depth: 13336 bytes left [ 610.653412][T11430] bcachefs (loop1): shutting down [ 610.658504][T11430] bcachefs (loop1): going read-only [ 610.668981][T11430] bcachefs (loop1): finished waiting for writes to stop [ 610.686553][T11430] bcachefs (loop1): flushing journal and stopping allocators, journal seq 11 [ 610.698408][T11932] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 610.716663][T11932] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 610.718181][T11430] bcachefs (loop1): flushing journal and stopping allocators complete, journal seq 12 [ 610.750210][T11430] bcachefs (loop1): shutdown complete, journal seq 13 [ 610.773170][T11430] bcachefs (loop1): marking filesystem clean [ 610.894327][T11430] bcachefs (loop1): shutdown complete [ 610.911199][T11932] syz-executor.0: attempt to access beyond end of device [ 610.911199][T11932] loop0: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 610.948329][T11932] syz-executor.0: attempt to access beyond end of device [ 610.948329][T11932] loop0: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 610.996261][T11949] syz-executor.0: attempt to access beyond end of device [ 610.996261][T11949] loop0: rw=2049, sector=45112, nr_sectors = 8 limit=40427 [ 611.070691][T11692] syz-executor.0: attempt to access beyond end of device [ 611.070691][T11692] loop0: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 611.085600][T11941] loop2: detected capacity change from 0 to 40427 [ 611.092763][T11941] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 611.092794][T11941] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 611.296100][T11692] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 611.383965][T11956] netlink: 5856 bytes leftover after parsing attributes in process `syz-executor.3'. [ 611.627948][T11941] F2FS-fs (loop2): invalid crc value [ 612.150531][T11941] F2FS-fs (loop2): Found nat_bits in checkpoint [ 612.186885][ T5110] usb 5-1: USB disconnect, device number 23 [ 612.345259][T11941] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 612.390462][T11941] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 612.436781][T11967] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 612.481475][T11941] syz-executor.2: attempt to access beyond end of device [ 612.481475][T11941] loop2: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 612.554859][T11941] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 612.874626][T11973] hub 9-0:1.0: USB hub found [ 612.881918][T11973] hub 9-0:1.0: 8 ports detected [ 613.006124][T11973] xt_connbytes: Forcing CT accounting to be enabled [ 613.013238][T11973] No such timeout policy "syz0" [ 614.006725][T11977] loop3: detected capacity change from 0 to 40427 [ 614.020822][T11977] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 614.028701][T11977] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 614.079689][T11977] F2FS-fs (loop3): Found nat_bits in checkpoint [ 614.117393][T11986] loop0: detected capacity change from 0 to 256 [ 614.148468][T11977] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 614.155697][T11977] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 614.327458][ T5110] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 614.414191][ T29] kauditd_printk_skb: 10 callbacks suppressed [ 614.414210][ T29] audit: type=1804 audit(1718857750.923:326): pid=11988 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir797966261/syzkaller.hRj9rj/6/bus/bus" dev="loop3" ino=10 res=1 errno=0 [ 614.598359][T11988] syz-executor.3: attempt to access beyond end of device [ 614.598359][T11988] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 614.748513][T11986] loop0: detected capacity change from 0 to 512 [ 614.759221][ T5110] usb 5-1: Using ep0 maxpacket: 8 [ 614.764576][ T29] audit: type=1804 audit(1718857750.953:327): pid=11989 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir797966261/syzkaller.hRj9rj/6/bus/bus" dev="loop3" ino=10 res=1 errno=0 [ 614.820247][T11986] ext3: Unknown parameter 'obj_type' [ 614.842519][ T5110] usb 5-1: config 0 has no interfaces? [ 614.850250][ T5110] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 614.864962][ T5110] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 614.865494][T11994] loop1: detected capacity change from 0 to 256 [ 614.883544][T11733] syz-executor.3: attempt to access beyond end of device [ 614.883544][T11733] loop3: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 614.898044][ T5110] usb 5-1: Product: syz [ 614.902598][ T5110] usb 5-1: Manufacturer: syz [ 614.907319][ T5110] usb 5-1: SerialNumber: syz [ 614.912796][T11733] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 614.931923][ T5110] usb 5-1: config 0 descriptor?? [ 615.023714][T11994] exfat: Unknown parameter 'allow_utĘ' [ 615.145979][ T5110] usb 5-1: USB disconnect, device number 24 [ 615.523067][T12001] bridge0: port 2(bridge_slave_1) entered disabled state [ 615.568881][T12001] bridge_slave_1: left allmulticast mode [ 615.575109][T12001] bridge_slave_1: left promiscuous mode [ 615.581927][T12001] bridge0: port 2(bridge_slave_1) entered disabled state [ 615.628314][T12002] loop0: detected capacity change from 0 to 256 [ 615.637677][T11994] loop1: detected capacity change from 0 to 4096 [ 615.853887][T12002] FAT-fs (loop0): Directory bread(block 64) failed [ 615.870168][T12002] FAT-fs (loop0): Directory bread(block 65) failed [ 615.890830][T12002] FAT-fs (loop0): Directory bread(block 66) failed [ 615.909987][T11996] loop2: detected capacity change from 0 to 32768 [ 615.926193][T12002] FAT-fs (loop0): Directory bread(block 67) failed [ 615.940006][T12002] FAT-fs (loop0): Directory bread(block 68) failed [ 615.946759][T12002] FAT-fs (loop0): Directory bread(block 69) failed [ 615.954592][T12002] FAT-fs (loop0): Directory bread(block 70) failed [ 615.961863][T12002] FAT-fs (loop0): Directory bread(block 71) failed [ 615.968630][T12002] FAT-fs (loop0): Directory bread(block 72) failed [ 615.977474][T12002] FAT-fs (loop0): Directory bread(block 73) failed [ 616.172139][T11996] bcachefs (loop2): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=xxhash,compression=zstd,nojournal_transaction_names [ 616.191443][T11996] bcachefs (loop2): recovering from clean shutdown, journal seq 10 [ 616.199880][T12020] loop3: detected capacity change from 0 to 1024 [ 616.307367][T12020] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 616.339861][ T5110] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 616.386934][T11996] bcachefs (loop2): alloc_read... done [ 616.400145][T11996] bcachefs (loop2): stripes_read... done [ 616.408414][T11996] bcachefs (loop2): snapshots_read... done [ 616.421055][T11996] bcachefs (loop2): journal_replay... done [ 616.426987][T11996] bcachefs (loop2): resume_logged_ops... done [ 616.435544][T11996] bcachefs (loop2): going read-write [ 616.442965][T12020] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 616.469834][T11996] bcachefs (loop2): done starting filesystem [ 616.999323][ T5110] usb 5-1: Using ep0 maxpacket: 32 [ 617.015511][ T5110] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 617.058668][ T5110] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 617.115740][ T5110] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 617.142631][ T5110] usb 5-1: Product: syz [ 617.288102][ T5110] usb 5-1: Manufacturer: syz [ 618.081637][ T5110] usb 5-1: SerialNumber: syz [ 618.106695][ T5110] usb 5-1: config 0 descriptor?? [ 618.116163][T12019] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 618.132780][T11733] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 618.314685][ T8952] bcachefs (loop2): shutting down [ 618.347952][ T8952] bcachefs (loop2): going read-only [ 618.369266][ T8952] bcachefs (loop2): finished waiting for writes to stop [ 618.392610][T12036] loop3: detected capacity change from 0 to 2048 [ 618.418614][ T8952] bcachefs (loop2): flushing journal and stopping allocators, journal seq 13 [ 618.487233][ T8952] bcachefs (loop2): flushing journal and stopping allocators complete, journal seq 15 [ 618.508858][ T8952] bcachefs (loop2): shutdown complete, journal seq 16 [ 618.553229][T12036] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 618.569742][ T8952] bcachefs (loop2): marking filesystem clean [ 618.591634][T12036] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 618.693376][ T8952] bcachefs (loop2): shutdown complete [ 618.903601][T12044] loop3: detected capacity change from 0 to 256 [ 619.010498][ T5153] usb 5-1: USB disconnect, device number 25 [ 619.163239][T12047] loop3: detected capacity change from 0 to 512 [ 619.194287][T12047] ext3: Unknown parameter 'obj_type' [ 619.340099][T12034] loop0: detected capacity change from 0 to 32768 [ 619.632632][ T29] audit: type=1326 audit(1718857756.143:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12052 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd66f87cf29 code=0x0 [ 619.677113][ T5155] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 619.753275][T12056] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 619.767098][T12056] netlink: 'syz-executor.1': attribute type 7 has an invalid length. [ 619.778087][T12056] netlink: 'syz-executor.1': attribute type 8 has an invalid length. [ 619.870211][ T5155] usb 5-1: Using ep0 maxpacket: 8 [ 619.877374][T12056] loop1: detected capacity change from 0 to 4096 [ 619.885709][ T5155] usb 5-1: config 0 has no interfaces? [ 619.895459][ T5155] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 619.906261][ T5155] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 619.916990][ T5155] usb 5-1: Product: syz [ 619.939006][ T5155] usb 5-1: Manufacturer: syz [ 619.943971][ T5155] usb 5-1: SerialNumber: syz [ 619.953076][ T5155] usb 5-1: config 0 descriptor?? [ 619.975012][ T29] audit: type=1800 audit(1718857756.483:329): pid=12056 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="loop1" ino=33 res=0 errno=0 [ 620.002700][ T29] audit: type=1800 audit(1718857756.513:330): pid=12056 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="loop1" ino=33 res=0 errno=0 [ 620.182918][ T5110] usb 5-1: USB disconnect, device number 26 [ 620.272528][T10629] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 620.281936][T10629] Bluetooth: hci3: Injecting HCI hardware error event [ 620.294506][ T5111] Bluetooth: hci3: hardware error 0x00 [ 620.466131][T12069] loop1: detected capacity change from 0 to 1024 [ 620.515487][T12069] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 620.566789][T12069] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 620.596852][T12061] loop0: detected capacity change from 0 to 32768 [ 620.908755][T12071] loop3: detected capacity change from 0 to 32768 [ 620.923862][T12082] loop4: detected capacity change from 0 to 512 [ 621.019016][T12061] bcachefs (loop0): mounting version 1.7: mi_btree_bitmap opts=compression=lz4,nojournal_transaction_names [ 621.039382][T12061] bcachefs (loop0): recovering from clean shutdown, journal seq 7 [ 621.095981][T12071] bcachefs (loop3): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=xxhash,compression=zstd,nojournal_transaction_names [ 621.119852][T12063] loop2: detected capacity change from 0 to 32768 [ 621.129649][T12082] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 621.144579][T12071] bcachefs (loop3): recovering from clean shutdown, journal seq 10 [ 621.158273][T12082] ext4 filesystem being mounted at /root/syzkaller-testdir4183922959/syzkaller.KF8C3F/52/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 621.166798][T12061] bcachefs (loop0): alloc_read... done [ 621.181848][T12061] bcachefs (loop0): stripes_read... done [ 621.203343][T12061] bcachefs (loop0): snapshots_read... done [ 621.216421][T12071] bcachefs (loop3): alloc_read... done [ 621.222165][T12071] bcachefs (loop3): stripes_read... done [ 621.227836][T12071] bcachefs (loop3): snapshots_read... done [ 621.264722][T12061] bcachefs (loop0): journal_replay... done [ 621.289248][T12061] bcachefs (loop0): resume_logged_ops... done [ 621.295454][T12061] bcachefs (loop0): going read-write [ 621.306027][T12071] bcachefs (loop3): journal_replay... done [ 621.318421][T11430] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 621.323394][T12063] bcachefs (076a1832-646e-4f3c-b13d-b3e266154efd): filesystem UUID already open [ 621.337164][T12063] bcachefs (076a1832-646e-4f3c-b13d-b3e266154efd): shutdown complete [ 621.338980][T12071] bcachefs (loop3): resume_logged_ops... done [ 621.367537][T12071] bcachefs (loop3): going read-write [ 621.401687][T12071] bcachefs (loop3): done starting filesystem [ 621.407891][T12061] bcachefs (loop0): done starting filesystem [ 621.844635][T12082] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 622.044855][T11733] bcachefs (loop3): shutting down [ 622.055629][T10588] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 622.064920][T11733] bcachefs (loop3): going read-only [ 622.078186][T11733] bcachefs (loop3): finished waiting for writes to stop [ 622.130339][T11692] bcachefs (loop0): shutting down [ 622.135523][T11692] bcachefs (loop0): going read-only [ 622.149252][T11692] bcachefs (loop0): finished waiting for writes to stop [ 622.165873][T11733] bcachefs (loop3): flushing journal and stopping allocators, journal seq 13 [ 622.209650][T11692] bcachefs (loop0): flushing journal and stopping allocators, journal seq 8 [ 622.218658][T11733] bcachefs (loop3): flushing journal and stopping allocators complete, journal seq 14 [ 622.254909][T11692] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 10 [ 622.268152][T11733] bcachefs (loop3): shutdown complete, journal seq 15 [ 622.296631][T11692] bcachefs (loop0): shutdown complete, journal seq 11 [ 622.304126][T11733] bcachefs (loop3): marking filesystem clean [ 622.320073][T11692] bcachefs (loop0): marking filesystem clean [ 622.328158][T12112] loop2: detected capacity change from 0 to 256 [ 622.344369][T12112] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xbe9e488b, utbl_chksum : 0xe619d30d) [ 622.369332][ T5111] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 622.378150][T12112] exFAT-fs (loop2): error, invalid access to FAT bad cluster (entry 0x00000005) [ 622.387536][T12112] exFAT-fs (loop2): failed to initialize root inode [ 622.437304][T11733] bcachefs (loop3): shutdown complete [ 622.460192][T11692] bcachefs (loop0): shutdown complete [ 622.518371][T12114] loop4: detected capacity change from 0 to 8192 [ 622.550338][T12114] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 622.617908][T12106] loop1: detected capacity change from 0 to 40427 [ 622.668005][T12112] loop2: detected capacity change from 0 to 2048 [ 622.674805][T12106] F2FS-fs (loop1): Invalid Fs Meta Ino: node(0) meta(2) root(0) [ 622.701467][T12112] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 622.715388][T12106] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 622.807028][T12106] F2FS-fs (loop1): invalid crc value [ 622.880768][T12106] F2FS-fs (loop1): Found nat_bits in checkpoint [ 623.093960][T12122] loop2: detected capacity change from 0 to 16 [ 623.101198][T12106] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 623.124054][T12106] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 623.133160][T12122] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 623.237787][T12106] syz-executor.1: attempt to access beyond end of device [ 623.237787][T12106] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 623.405185][ T5155] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 623.533880][T12131] netlink: 'syz-executor.2': attribute type 9 has an invalid length. [ 623.557336][T11430] syz-executor.1: attempt to access beyond end of device [ 623.557336][T11430] loop1: rw=2049, sector=45104, nr_sectors = 16 limit=40427 [ 623.582472][T12131] netlink: 'syz-executor.2': attribute type 7 has an invalid length. [ 623.600214][T12131] netlink: 'syz-executor.2': attribute type 8 has an invalid length. [ 623.603289][T11430] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 623.623759][T12134] loop0: detected capacity change from 0 to 256 [ 623.629362][T11430] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 623.659205][ T5155] usb 4-1: Using ep0 maxpacket: 32 [ 623.666525][ T5155] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 623.689503][ T5155] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 623.718898][ T5155] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 623.727237][ T5155] usb 4-1: Product: syz [ 623.756661][ T5155] usb 4-1: Manufacturer: syz [ 623.775232][ T5155] usb 4-1: SerialNumber: syz [ 623.796164][ T5155] usb 4-1: config 0 descriptor?? [ 623.801382][T12136] loop2: detected capacity change from 0 to 4096 [ 623.820353][T12121] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 623.910208][T12137] loop0: detected capacity change from 0 to 512 [ 623.917068][T12137] ext3: Unknown parameter 'obj_type' [ 624.014534][ T29] audit: type=1800 audit(1718857760.523:331): pid=12131 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="loop2" ino=33 res=0 errno=0 [ 624.069259][ T29] audit: type=1800 audit(1718857760.523:332): pid=12131 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="loop2" ino=33 res=0 errno=0 [ 624.148120][T12128] loop4: detected capacity change from 0 to 32768 [ 624.285689][T12128] bcachefs (loop4): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=xxhash,compression=gzip,nojournal_transaction_names [ 624.301235][T12128] bcachefs (loop4): recovering from clean shutdown, journal seq 10 [ 624.331533][T12128] bcachefs (loop4): alloc_read... done [ 624.339456][T12128] bcachefs (loop4): stripes_read... done [ 624.379450][T12128] bcachefs (loop4): snapshots_read... done [ 624.415057][T12128] bcachefs (loop4): journal_replay... done [ 624.427723][T12128] bcachefs (loop4): resume_logged_ops... done [ 624.459499][T12128] bcachefs (loop4): going read-write [ 624.485981][T12128] bcachefs (loop4): done starting filesystem [ 624.679306][ T5155] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 624.729937][ T5110] usb 4-1: USB disconnect, device number 33 [ 624.788429][T10588] bcachefs (loop4): shutting down [ 624.797740][T12156] netlink: 210620 bytes leftover after parsing attributes in process `syz-executor.2'. [ 624.823938][T12160] loop1: detected capacity change from 0 to 512 [ 624.824604][T10588] bcachefs (loop4): going read-only [ 624.847231][T10588] bcachefs (loop4): finished waiting for writes to stop [ 624.869812][T10588] bcachefs (loop4): flushing journal and stopping allocators, journal seq 12 [ 624.904214][T12160] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 624.930357][ T5155] usb 1-1: Using ep0 maxpacket: 8 [ 624.940355][T12160] ext4 filesystem being mounted at /root/syzkaller-testdir2688400239/syzkaller.VocjO8/22/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 624.951107][ T5155] usb 1-1: config 0 has no interfaces? [ 624.955286][T10588] bcachefs (loop4): flushing journal and stopping allocators complete, journal seq 13 [ 624.972715][T10588] bcachefs (loop4): shutdown complete, journal seq 14 [ 624.979779][T12166] binder: 12164:12166 ioctl c0306201 0 returned -14 [ 624.984943][T10588] bcachefs (loop4): marking filesystem clean [ 624.996810][ T5155] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 625.026950][ T5155] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 625.037467][T10588] bcachefs (loop4): shutdown complete [ 625.054967][ T5155] usb 1-1: Product: syz [ 625.069640][ T5155] usb 1-1: Manufacturer: syz [ 625.091164][ T5155] usb 1-1: SerialNumber: syz [ 625.123155][ T5155] usb 1-1: config 0 descriptor?? [ 625.165648][ T1248] ieee802154 phy0 wpan0: encryption failed: -22 [ 625.175003][ T1248] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.291761][T12176] bridge0: port 2(bridge_slave_1) entered disabled state [ 625.315619][T12176] bridge_slave_1: left allmulticast mode [ 625.345762][T12150] netlink: 1004 bytes leftover after parsing attributes in process `syz-executor.0'. [ 625.366524][T12176] bridge_slave_1: left promiscuous mode [ 625.386975][T12176] bridge0: port 2(bridge_slave_1) entered disabled state [ 625.436626][T12175] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 625.460981][ T9163] usb 1-1: USB disconnect, device number 23 [ 625.496654][T12176] loop3: detected capacity change from 0 to 256 [ 625.631265][T11430] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 625.657607][T12176] FAT-fs (loop3): Directory bread(block 64) failed [ 625.664353][T12176] FAT-fs (loop3): Directory bread(block 65) failed [ 625.674959][T12176] FAT-fs (loop3): Directory bread(block 66) failed [ 625.683280][T12176] FAT-fs (loop3): Directory bread(block 67) failed [ 625.690129][T12176] FAT-fs (loop3): Directory bread(block 68) failed [ 625.700245][T12176] FAT-fs (loop3): Directory bread(block 69) failed [ 625.707075][T12176] FAT-fs (loop3): Directory bread(block 70) failed [ 625.726956][T12176] FAT-fs (loop3): Directory bread(block 71) failed [ 625.737168][T12176] FAT-fs (loop3): Directory bread(block 72) failed [ 625.745925][T12176] FAT-fs (loop3): Directory bread(block 73) failed [ 625.937291][T12180] loop1: detected capacity change from 0 to 16 [ 625.947242][T12180] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 626.014906][T12172] loop2: detected capacity change from 0 to 32768 [ 626.245822][T12172] bcachefs (loop2): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,nojournal_transaction_names [ 626.279338][T12172] bcachefs (loop2): recovering from clean shutdown, journal seq 10 [ 626.328509][T12172] bcachefs (loop2): alloc_read... done [ 626.334459][T12172] bcachefs (loop2): stripes_read... done [ 626.343614][T12197] netlink: 'syz-executor.3': attribute type 9 has an invalid length. [ 626.359197][T12172] bcachefs (loop2): snapshots_read... done [ 626.369204][T12197] netlink: 'syz-executor.3': attribute type 7 has an invalid length. [ 626.380300][T12172] bcachefs (loop2): journal_replay... done [ 626.386204][T12172] bcachefs (loop2): resume_logged_ops... done [ 626.409235][T12197] netlink: 'syz-executor.3': attribute type 8 has an invalid length. [ 626.417688][T12172] bcachefs (loop2): going read-write [ 626.447420][T12172] bcachefs (loop2): done starting filesystem [ 626.496701][T12203] 9pnet_fd: Insufficient options for proto=fd [ 626.585453][T12200] loop3: detected capacity change from 0 to 4096 [ 626.599509][T12205] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.4'. [ 626.623777][T12205] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.4'. [ 626.769819][ T29] audit: type=1800 audit(1718857763.283:333): pid=12197 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="loop3" ino=33 res=0 errno=0 [ 626.828344][ T29] audit: type=1800 audit(1718857763.333:334): pid=12200 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="loop3" ino=33 res=0 errno=0 [ 626.906398][T12187] loop0: detected capacity change from 0 to 32768 [ 626.934899][T12193] loop1: detected capacity change from 0 to 32768 [ 626.979639][T12187] XFS (loop0): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 627.038831][T12187] XFS (loop0): Ending clean mount [ 627.085466][ T8952] bcachefs (loop2): shutting down [ 627.114146][ T8952] bcachefs (loop2): going read-only [ 627.132320][ T8952] bcachefs (loop2): finished waiting for writes to stop [ 627.157385][ T8952] bcachefs (loop2): flushing journal and stopping allocators, journal seq 11 [ 627.171316][T12193] bcachefs (loop1): mounting version 1.7: mi_btree_bitmap opts=compression=lz4,nojournal_transaction_names [ 627.188904][T12193] bcachefs (loop1): recovering from clean shutdown, journal seq 7 [ 627.198160][ T8952] bcachefs (loop2): flushing journal and stopping allocators complete, journal seq 12 [ 627.233304][ T8952] bcachefs (loop2): shutdown complete, journal seq 13 [ 627.265465][ T8952] bcachefs (loop2): marking filesystem clean [ 627.303699][T12193] bcachefs (loop1): alloc_read... done [ 627.334156][T12193] bcachefs (loop1): stripes_read... done [ 627.351848][T12193] bcachefs (loop1): snapshots_read... done [ 627.355938][T12228] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 627.372512][T12193] bcachefs (loop1): journal_replay... done [ 627.378541][T12193] bcachefs (loop1): resume_logged_ops... done [ 627.428481][ T8952] bcachefs (loop2): shutdown complete [ 627.429196][T12193] bcachefs (loop1): going read-write [ 627.497471][T12193] bcachefs (loop1): done starting filesystem [ 627.791682][T12187] syz-executor.0 (12187): drop_caches: 1 [ 627.843819][T11692] XFS (loop0): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 628.009441][ T5110] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 628.189331][ T5110] usb 4-1: Using ep0 maxpacket: 32 [ 628.201675][ T5110] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 628.222745][ T5110] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 628.246619][ T5110] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 628.256911][ T5110] usb 4-1: Product: syz [ 628.261590][ T5110] usb 4-1: Manufacturer: syz [ 628.266450][ T5110] usb 4-1: SerialNumber: syz [ 628.293098][ T5110] usb 4-1: config 0 descriptor?? [ 628.300679][T12237] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 628.811324][ T9163] usb 4-1: USB disconnect, device number 34 [ 629.959813][T11430] bcachefs (loop1): shutting down [ 629.964902][T11430] bcachefs (loop1): going read-only [ 630.022008][T11430] bcachefs (loop1): finished waiting for writes to stop [ 630.064733][T11430] bcachefs (loop1): flushing journal and stopping allocators, journal seq 11 [ 630.129170][T11430] bcachefs (loop1): flushing journal and stopping allocators complete, journal seq 12 [ 630.140004][T11430] bcachefs (loop1): shutdown complete, journal seq 13 [ 630.147735][T11430] bcachefs (loop1): marking filesystem clean [ 630.169205][ T50] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 630.253098][T11430] bcachefs (loop1): shutdown complete [ 630.358576][T12259] netlink: 210620 bytes leftover after parsing attributes in process `syz-executor.0'. [ 630.376275][ T50] usb 3-1: Using ep0 maxpacket: 8 [ 630.402371][ T50] usb 3-1: config 0 has no interfaces? [ 630.411673][ T50] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 630.435247][ T50] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 630.470954][ T50] usb 3-1: Product: syz [ 630.487604][ T50] usb 3-1: Manufacturer: syz [ 630.505769][ T50] usb 3-1: SerialNumber: syz [ 630.519491][T12255] delete_channel: no stack [ 630.527486][ T50] usb 3-1: config 0 descriptor?? [ 630.607060][T12266] netlink: 'syz-executor.0': attribute type 9 has an invalid length. [ 630.615485][T12266] netlink: 'syz-executor.0': attribute type 7 has an invalid length. [ 630.636522][T12266] netlink: 'syz-executor.0': attribute type 8 has an invalid length. [ 630.742389][T12254] netlink: 1004 bytes leftover after parsing attributes in process `syz-executor.2'. [ 630.759442][ T50] usb 3-1: USB disconnect, device number 17 [ 630.818452][T12266] loop0: detected capacity change from 0 to 4096 [ 630.843341][T12270] loop3: detected capacity change from 0 to 1024 [ 630.929462][T12270] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 631.016688][ T931] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 631.072326][ T29] audit: type=1800 audit(1718857767.583:335): pid=12266 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="loop0" ino=33 res=0 errno=0 [ 631.164767][T12270] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 631.201741][ T29] audit: type=1800 audit(1718857767.613:336): pid=12266 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="loop0" ino=33 res=0 errno=0 [ 631.233711][ T931] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 631.246057][ T931] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 631.295900][ T931] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 631.325234][ T931] usb 5-1: config 0 descriptor?? [ 632.147422][T12280] loop1: detected capacity change from 0 to 16 [ 632.181052][T12280] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 632.194956][T12269] loop4: detected capacity change from 0 to 4096 [ 632.216503][T12269] ntfs3: loop4: Different NTFS sector size (2048) and media sector size (512). [ 632.231346][T11733] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 632.326482][T12269] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 632.482312][T12282] loop0: detected capacity change from 0 to 8192 [ 632.502523][T12269] ntfs3: loop4: ino=5, "/" ntfs3_write_inode failed, -22. [ 632.513686][T12269] ntfs3: loop4: ino=5, "/" ntfs3_write_inode failed, -22. [ 632.519688][T12282] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 632.671563][T12276] loop2: detected capacity change from 0 to 32768 [ 632.689387][T12276] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz-executor.2 (12276) [ 632.721794][T12276] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 632.746376][T12276] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 632.761606][ T5155] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 632.769263][T12276] BTRFS info (device loop2): using free-space-tree [ 632.979596][ T5155] usb 2-1: Using ep0 maxpacket: 32 [ 632.988308][ T5155] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 633.001684][T12312] netlink: 'syz-executor.0': attribute type 7 has an invalid length. [ 633.005612][ T5155] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 633.021135][ T5155] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 633.031647][ T5155] usb 2-1: Product: syz [ 633.035911][ T5155] usb 2-1: Manufacturer: syz [ 633.040785][ T5155] usb 2-1: SerialNumber: syz [ 633.040871][T12312] netlink: 'syz-executor.0': attribute type 39 has an invalid length. [ 633.055356][ T12] BTRFS info (device loop2): qgroup scan completed (inconsistency flag cleared) [ 633.067403][ T8952] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 633.079281][ T5155] usb 2-1: config 0 descriptor?? [ 633.089038][T12286] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 633.095672][T12312] netlink: 'syz-executor.0': attribute type 7 has an invalid length. [ 633.104841][T12312] netlink: 'syz-executor.0': attribute type 39 has an invalid length. [ 633.261232][ T931] usbhid 5-1:0.0: can't add hid device: -71 [ 633.280046][ T931] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 633.298670][ T931] usb 5-1: USB disconnect, device number 27 [ 634.701031][T12312] loop0: detected capacity change from 0 to 32768 [ 634.725976][T12325] netlink: 'syz-executor.3': attribute type 8 has an invalid length. [ 634.759363][T12325] netlink: 199836 bytes leftover after parsing attributes in process `syz-executor.3'. [ 634.824568][ T931] usb 2-1: USB disconnect, device number 22 [ 634.940427][T12312] bcachefs (loop0): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,nojournal_transaction_names [ 634.973017][T12312] bcachefs (loop0): recovering from clean shutdown, journal seq 10 [ 635.026916][T12312] bcachefs (loop0): alloc_read... done [ 635.042047][T12312] bcachefs (loop0): stripes_read... done [ 635.047952][T12312] bcachefs (loop0): snapshots_read... done [ 635.084235][T12312] bcachefs (loop0): journal_replay... done [ 635.100825][T12312] bcachefs (loop0): resume_logged_ops... done [ 635.107070][T12312] bcachefs (loop0): going read-write [ 635.353059][T12312] bcachefs (loop0): done starting filesystem [ 635.560483][T12312] bcachefs (loop0): going read-only [ 635.565763][T12312] bcachefs (loop0): finished waiting for writes to stop [ 635.607292][T12312] bcachefs (loop0): flushing journal and stopping allocators, journal seq 11 [ 635.711900][T12312] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 13 [ 635.761192][T12312] bcachefs (loop0): shutdown complete, journal seq 14 [ 635.768897][T12312] bcachefs (loop0): marking filesystem clean [ 635.902743][T11692] bcachefs (loop0): shutting down [ 635.970907][T11692] bcachefs (loop0): shutdown complete [ 636.984142][T12381] overlay: Unknown parameter 'rootcontext' [ 637.269290][ T5110] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 637.493678][ T5110] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 637.529377][ T5110] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 637.571581][ T5110] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 637.599445][ T5110] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 637.630321][ T5110] usb 1-1: config 0 descriptor?? [ 637.785941][T12392] loop2: detected capacity change from 0 to 2048 [ 637.799250][T12392] nilfs2: Unknown parameter './file0' [ 639.208699][ T5110] keytouch 0003:0926:3333.0005: fixing up Keytouch IEC report descriptor [ 639.243216][ T5110] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.0005/input/input19 [ 639.347003][ T5110] keytouch 0003:0926:3333.0005: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 639.537270][ T5155] usb 1-1: USB disconnect, device number 24 [ 640.585595][T12407] loop2: detected capacity change from 0 to 32768 [ 640.596268][T12407] BTRFS: device fsid 34a2da50-e117-4d40-8878-8e0fb0127b5f devid 1 transid 8 /dev/loop2 (7:2) scanned by syz-executor.2 (12407) [ 640.621267][T12407] BTRFS info (device loop2): first mount of filesystem 34a2da50-e117-4d40-8878-8e0fb0127b5f [ 640.640065][T12407] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm [ 640.654182][T12407] BTRFS info (device loop2): using free-space-tree [ 640.890499][T12409] loop0: detected capacity change from 0 to 32768 [ 640.935707][T12409] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 640.968774][ T12] BTRFS info (device loop2): qgroup scan completed (inconsistency flag cleared) [ 641.114416][T12409] XFS (loop0): Ending clean mount [ 641.139297][T12409] XFS (loop0): Quotacheck needed: Please wait. [ 641.170011][ T8952] BTRFS info (device loop2): last unmount of filesystem 34a2da50-e117-4d40-8878-8e0fb0127b5f [ 641.220688][T12409] XFS (loop0): Quotacheck: Done. [ 641.256673][ T29] audit: type=1800 audit(1718857777.753:337): pid=12409 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="loop0" ino=9291 res=0 errno=0 [ 641.412469][T11692] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 642.366429][T12435] loop2: detected capacity change from 0 to 40427 [ 642.414687][T12435] F2FS-fs (loop2): Found nat_bits in checkpoint [ 642.505696][T12435] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 643.554278][ T29] audit: type=1326 audit(1718857780.043:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12451 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efd46c7cf29 code=0x0 [ 643.916117][T12455] loop0: detected capacity change from 0 to 8 [ 644.247943][T12455] SQUASHFS error: Failed to read block 0x4e8: -5 [ 644.263370][T12455] SQUASHFS error: Failed to read block 0x6e6: -5 [ 644.274759][T12455] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 644.282292][T12455] SQUASHFS error: read_indexes: reading block [6e4:0] [ 644.289273][T12455] SQUASHFS error: Failed to read block 0x0: -5 [ 644.295707][T12455] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 644.303291][T12455] SQUASHFS error: read_indexes: reading block [6e4:0] [ 644.312318][T12455] SQUASHFS error: Failed to read block 0x0: -5 [ 644.359323][T12455] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 644.397949][T12455] SQUASHFS error: read_indexes: reading block [6e4:0] [ 644.405104][T12455] SQUASHFS error: Failed to read block 0x0: -5 [ 644.411802][T12455] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 644.443610][T12455] SQUASHFS error: read_indexes: reading block [6e4:0] [ 644.451298][T12455] SQUASHFS error: Failed to read block 0x0: -5 [ 644.457806][T12455] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 644.465436][T12455] SQUASHFS error: read_indexes: reading block [6e4:0] [ 644.472569][T12455] SQUASHFS error: Failed to read block 0x0: -5 [ 644.478973][T12455] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 644.486501][T12455] SQUASHFS error: read_indexes: reading block [6e4:0] [ 644.493595][T12455] SQUASHFS error: Failed to read block 0x0: -5 [ 644.500197][T12455] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 644.507595][T12455] SQUASHFS error: read_indexes: reading block [6e4:0] [ 644.514654][T12455] SQUASHFS error: Failed to read block 0x0: -5 [ 644.592151][T12455] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 644.599722][T12455] SQUASHFS error: read_indexes: reading block [6e4:0] [ 644.606709][T12455] SQUASHFS error: Failed to read block 0x0: -5 [ 644.613163][T12455] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 644.620663][T12455] SQUASHFS error: read_indexes: reading block [6e4:0] [ 644.700061][T12455] SQUASHFS error: Failed to read block 0x0: -5 [ 644.706531][T12455] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 644.714033][T12455] SQUASHFS error: read_indexes: reading block [6e4:0] [ 644.721104][T12455] SQUASHFS error: Failed to read block 0x0: -5 [ 644.783948][T12455] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 644.791456][T12455] SQUASHFS error: read_indexes: reading block [6e4:0] [ 644.798420][T12455] SQUASHFS error: Failed to read block 0x0: -5 [ 644.805101][T12455] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 644.812536][T12455] SQUASHFS error: read_indexes: reading block [6e4:0] [ 644.819696][T12455] SQUASHFS error: Failed to read block 0x0: -5 [ 644.826077][T12455] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 644.930243][T12455] SQUASHFS error: read_indexes: reading block [6e4:0] [ 645.032763][T12455] SQUASHFS error: Failed to read block 0x0: -5 [ 645.076998][T12455] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 645.084667][T12455] SQUASHFS error: read_indexes: reading block [6e4:0] [ 645.091845][T12455] SQUASHFS error: Failed to read block 0x0: -5 [ 645.098168][T12455] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 645.105724][T12455] SQUASHFS error: read_indexes: reading block [6e4:0] [ 645.112814][T12455] SQUASHFS error: Failed to read block 0x0: -5 [ 645.119267][T12455] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 645.126695][T12455] SQUASHFS error: read_indexes: reading block [6e4:0] [ 645.133849][T12455] SQUASHFS error: Failed to read block 0x0: -5 [ 645.199205][T12455] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 645.206637][T12455] SQUASHFS error: read_indexes: reading block [6e4:0] [ 645.213729][T12455] SQUASHFS error: Failed to read block 0x0: -5 [ 645.220241][T12455] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 645.227663][T12455] SQUASHFS error: read_indexes: reading block [6e4:0] [ 645.234753][T12455] SQUASHFS error: Failed to read block 0x0: -5 [ 645.297669][T12455] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 645.305167][T12455] SQUASHFS error: read_indexes: reading block [6e4:0] [ 645.312252][T12455] SQUASHFS error: Failed to read block 0x0: -5 [ 645.318606][T12455] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 645.326097][T12455] SQUASHFS error: read_indexes: reading block [6e4:0] [ 645.333184][T12455] SQUASHFS error: Failed to read block 0x0: -5 [ 645.359515][T12455] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 645.366924][T12455] SQUASHFS error: read_indexes: reading block [6e4:0] [ 645.373935][T12455] SQUASHFS error: Failed to read block 0x0: -5 [ 645.380417][T12455] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 645.387775][T12455] SQUASHFS error: read_indexes: reading block [6e4:0] [ 645.394942][T12455] SQUASHFS error: Failed to read block 0x0: -5 [ 645.401490][T12455] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 645.408924][T12455] SQUASHFS error: read_indexes: reading block [6e4:0] [ 645.416100][T12455] SQUASHFS error: Failed to read block 0x0: -5 [ 645.422671][T12455] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 645.430104][T12455] SQUASHFS error: read_indexes: reading block [6e4:0] [ 645.437115][T12455] SQUASHFS error: Failed to read block 0x0: -5 [ 645.544206][T12455] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 645.575693][T12455] SQUASHFS error: read_indexes: reading block [6e4:0] [ 645.583445][T12455] SQUASHFS error: Failed to read block 0x0: -5 [ 645.592616][T12455] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 645.599993][T12455] SQUASHFS error: read_indexes: reading block [6e4:0] [ 645.606784][T12455] SQUASHFS error: Failed to read block 0x0: -5 [ 645.613010][T12455] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 645.620318][T12455] SQUASHFS error: read_indexes: reading block [6e4:0] [ 645.627229][T12455] SQUASHFS error: Failed to read block 0x0: -5 [ 645.630499][T12454] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 645.637050][T12455] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 645.643327][T12454] SQUASHFS error: read_indexes: reading block [6e4:0] [ 645.649123][T12455] SQUASHFS error: read_indexes: reading block [6e4:0] [ 645.658276][T12454] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 645.663438][T12455] SQUASHFS error: Failed to read block 0x0: -5 [ 645.670509][T12454] SQUASHFS error: read_indexes: reading block [6e4:0] [ 645.676714][T12455] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 645.683873][T12454] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 645.690775][T12455] SQUASHFS error: read_indexes: reading block [6e4:0] [ 645.690846][T12455] SQUASHFS error: Failed to read block 0x0: -5 [ 645.698045][T12454] SQUASHFS error: read_indexes: reading block [6e4:0] [ 645.704936][T12455] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 645.711145][T12454] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 645.717811][T12455] SQUASHFS error: read_indexes: reading block [6e4:0] [ 645.725095][T12454] SQUASHFS error: read_indexes: reading block [6e4:0] [ 645.746183][T12455] SQUASHFS error: Failed to read block 0x0: -5 [ 645.754054][T12455] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 645.761400][T12455] SQUASHFS error: read_indexes: reading block [6e4:0] [ 645.768213][T12455] SQUASHFS error: Failed to read block 0x0: -5 [ 645.774474][T12455] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 645.781826][T12455] SQUASHFS error: read_indexes: reading block [6e4:0] [ 645.788624][T12455] SQUASHFS error: Failed to read block 0x0: -5 [ 645.794894][T12455] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 645.802220][T12455] SQUASHFS error: read_indexes: reading block [6e4:0] [ 645.809012][T12455] SQUASHFS error: Failed to read block 0x0: -5 [ 645.815257][T12455] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 645.822600][T12455] SQUASHFS error: read_indexes: reading block [6e4:0] [ 645.829469][T12455] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 645.836771][T12455] SQUASHFS error: read_indexes: reading block [6e4:0] [ 645.843658][T12455] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 645.850984][T12455] SQUASHFS error: read_indexes: reading block [6e4:0] [ 645.920341][ T29] audit: type=1800 audit(1718857780.773:339): pid=12455 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz-executor.0" name="file1" dev="loop0" ino=5 res=0 errno=0 [ 650.150617][T12499] loop2: detected capacity change from 0 to 1024 [ 650.173468][T12499] hfsplus: invalid extent max_key_len 0 [ 650.189454][T12499] hfsplus: failed to load extents file [ 651.172835][T12507] loop2: detected capacity change from 0 to 32768 [ 651.205600][T12507] XFS (loop2): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 651.236995][T12507] XFS (loop2): Ending clean mount [ 651.249460][T12507] XFS (loop2): Quotacheck needed: Please wait. [ 651.298567][T12507] XFS (loop2): Quotacheck: Done. [ 653.353019][ T29] audit: type=1326 audit(1718857789.863:340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12533 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd46c7cf29 code=0x7ffc0000 [ 653.383474][ T29] audit: type=1326 audit(1718857789.863:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12533 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd46c7cf29 code=0x7ffc0000 [ 653.426178][ T29] audit: type=1326 audit(1718857789.893:342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12533 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efd46c7cf29 code=0x7ffc0000 [ 653.460455][ T29] audit: type=1326 audit(1718857789.893:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12533 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd46c7cf29 code=0x7ffc0000 [ 653.491186][ T29] audit: type=1326 audit(1718857789.893:344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12533 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd46c7cf29 code=0x7ffc0000 [ 653.520895][ T29] audit: type=1326 audit(1718857789.893:345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12533 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efd46c7cf29 code=0x7ffc0000 [ 653.552626][ T29] audit: type=1326 audit(1718857790.003:346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12533 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd46c7cf29 code=0x7ffc0000 [ 653.583454][ T29] audit: type=1326 audit(1718857790.003:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12533 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7efd46c7a6a7 code=0x7ffc0000 [ 653.611692][ T29] audit: type=1326 audit(1718857790.003:348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12533 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7efd46c40379 code=0x7ffc0000 [ 653.636863][ T29] audit: type=1326 audit(1718857790.003:349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12533 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7efd46c7a6a7 code=0x7ffc0000 [ 665.484059][ T5111] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 665.509566][ T5111] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 665.523761][ T5111] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 665.531940][ T5111] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 665.541490][ T5111] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 665.550856][ T5111] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 666.036835][ T5111] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 666.048138][ T5111] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 666.057798][ T5111] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 666.079695][ T5111] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 666.091136][ T5111] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 666.099788][ T5111] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 667.629538][ T53] Bluetooth: hci5: command tx timeout [ 668.189665][ T53] Bluetooth: hci6: command tx timeout [ 669.563514][ T5111] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 669.578007][ T5111] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 669.589357][ T5111] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 669.597367][ T5111] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 669.611485][ T5111] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 669.618824][ T5111] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 669.719464][ T53] Bluetooth: hci5: command tx timeout [ 670.269206][ T53] Bluetooth: hci6: command tx timeout [ 671.710354][ T53] Bluetooth: hci7: command tx timeout [ 671.789245][ T53] Bluetooth: hci5: command tx timeout [ 672.349377][ T53] Bluetooth: hci6: command tx timeout [ 673.789943][ T53] Bluetooth: hci7: command tx timeout [ 673.869280][ T5111] Bluetooth: hci5: command tx timeout [ 674.430556][ T5111] Bluetooth: hci6: command tx timeout [ 675.879292][ T53] Bluetooth: hci7: command tx timeout [ 677.954993][ T53] Bluetooth: hci7: command tx timeout [ 680.401038][ T5111] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 680.418292][ T5111] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 680.427994][ T5111] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 680.451156][ T5111] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 680.458918][ T5111] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 680.467294][ T5111] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 682.509541][ T5111] Bluetooth: hci8: command tx timeout [ 684.055938][ T53] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 684.075136][ T53] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 684.084867][ T53] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 684.103672][ T53] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 684.111677][ T53] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 684.119018][ T53] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 684.589420][ T53] Bluetooth: hci8: command tx timeout [ 686.189241][ T53] Bluetooth: hci9: command tx timeout [ 686.593215][ T1248] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.599924][ T1248] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.669382][ T53] Bluetooth: hci8: command tx timeout [ 688.269145][ T53] Bluetooth: hci9: command tx timeout [ 688.749293][ T53] Bluetooth: hci8: command tx timeout [ 690.349190][ T53] Bluetooth: hci9: command tx timeout [ 692.439262][ T53] Bluetooth: hci9: command tx timeout [ 714.277409][ T53] Bluetooth: hci4: command 0x0406 tx timeout [ 719.389146][ T5111] Bluetooth: hci2: command 0x0406 tx timeout [ 730.949954][ T5111] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 730.963102][ T5111] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 730.974070][ T5111] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 730.982319][ T5111] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 730.991967][ T5111] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 730.999528][ T5111] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 731.189220][ T5111] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 731.202064][ T5111] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 731.213436][ T5111] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 731.224742][ T5111] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 731.235825][ T5111] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 731.243608][ T5111] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 733.069380][ T5111] Bluetooth: hci10: command tx timeout [ 733.309365][ T5111] Bluetooth: hci11: command tx timeout [ 734.673784][ T53] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 734.693804][ T53] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 734.709283][ T53] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 734.717577][ T53] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 734.731154][ T53] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 734.744019][ T53] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 735.149227][ T5111] Bluetooth: hci10: command tx timeout [ 735.389276][ T5111] Bluetooth: hci11: command tx timeout [ 736.829347][ T5111] Bluetooth: hci12: command tx timeout [ 737.229196][ T5111] Bluetooth: hci10: command tx timeout [ 737.469292][ T5111] Bluetooth: hci11: command tx timeout [ 738.909396][ T5111] Bluetooth: hci12: command tx timeout [ 739.309135][ T5111] Bluetooth: hci10: command tx timeout [ 739.549320][ T5111] Bluetooth: hci11: command tx timeout [ 740.989446][ T5111] Bluetooth: hci12: command tx timeout [ 743.069746][ T5111] Bluetooth: hci12: command tx timeout [ 745.469468][ T53] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 745.483017][ T53] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 745.495803][ T53] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 745.512511][ T53] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 745.520407][ T53] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 745.527880][ T53] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 747.629301][ T53] Bluetooth: hci13: command tx timeout [ 748.039701][ T1248] ieee802154 phy0 wpan0: encryption failed: -22 [ 748.046042][ T1248] ieee802154 phy1 wpan1: encryption failed: -22 [ 749.118808][ T5111] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 749.139372][ T5111] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 749.159142][ T5111] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 749.167297][ T5111] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 749.184616][ T5111] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3 [ 749.192212][ T5111] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 749.709236][ T53] Bluetooth: hci13: command tx timeout [ 751.229404][ T5111] Bluetooth: hci14: command tx timeout [ 751.789171][ T5111] Bluetooth: hci13: command tx timeout [ 753.309224][ T5111] Bluetooth: hci14: command tx timeout [ 753.869121][ T5111] Bluetooth: hci13: command tx timeout [ 755.398925][ T5111] Bluetooth: hci14: command tx timeout [ 757.473224][ T5111] Bluetooth: hci14: command tx timeout [ 781.959206][ T30] INFO: task syz-executor.4:12367 blocked for more than 143 seconds. [ 781.967329][ T30] Not tainted 6.10.0-rc3-syzkaller-00044-g2ccbdf43d5e7 #0 [ 781.976076][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 781.984856][ T30] task:syz-executor.4 state:D stack:26112 pid:12367 tgid:12366 ppid:10588 flags:0x00000006 [ 781.995150][ T30] Call Trace: [ 781.998439][ T30] [ 782.002437][ T30] __schedule+0x1796/0x49d0 2024/06/20 04:31:58 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 782.006999][ T30] ? __pfx___schedule+0x10/0x10 [ 782.011920][ T30] ? __pfx_lock_release+0x10/0x10 [ 782.016962][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 782.022948][ T30] ? schedule+0x90/0x320 [ 782.027455][ T30] schedule+0x14b/0x320 [ 782.031732][ T30] schedule_preempt_disabled+0x13/0x30 [ 782.037216][ T30] __mutex_lock+0x6a4/0xd70 [ 782.068007][ T30] ? __mutex_lock+0x527/0xd70 [ 782.080852][ T30] ? ethnl_default_set_doit+0x38f/0x900 [ 782.086456][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 782.099106][ T30] ethnl_default_set_doit+0x38f/0x900 [ 782.104521][ T30] ? __pfx_ethnl_default_set_doit+0x10/0x10 [ 782.129092][ T30] ? genl_family_rcv_msg_attrs_parse+0x1d1/0x290 [ 782.135501][ T30] genl_rcv_msg+0xb14/0xec0 [ 782.149100][ T30] ? mark_lock+0x9a/0x350 [ 782.153502][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 782.158598][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 782.179126][ T30] ? __pfx_ethnl_default_set_doit+0x10/0x10 [ 782.185122][ T30] ? __pfx___might_resched+0x10/0x10 [ 782.199182][ T30] netlink_rcv_skb+0x1e3/0x430 [ 782.204039][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 782.219062][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 782.224456][ T30] ? __netlink_deliver_tap+0x77e/0x7c0 [ 782.249886][ T30] genl_rcv+0x28/0x40 [ 782.253944][ T30] netlink_unicast+0x7ea/0x980 [ 782.258733][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 782.283223][ T30] ? __virt_addr_valid+0x183/0x520 [ 782.288408][ T30] ? __check_object_size+0x49c/0x900 [ 782.299035][ T30] ? bpf_lsm_netlink_send+0x9/0x10 [ 782.304197][ T30] netlink_sendmsg+0x8db/0xcb0 [ 782.319070][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 782.324418][ T30] ? __import_iovec+0x536/0x820 [ 782.339073][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 782.344460][ T30] ? security_socket_sendmsg+0x87/0xb0 [ 782.375337][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 782.390327][ T30] __sock_sendmsg+0x221/0x270 [ 782.395129][ T30] ____sys_sendmsg+0x525/0x7d0 [ 782.419259][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 782.424642][ T30] __sys_sendmsg+0x2b0/0x3a0 [ 782.439196][ T30] ? __pfx___sys_sendmsg+0x10/0x10 [ 782.444523][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 782.458286][ T30] ? do_syscall_64+0x100/0x230 [ 782.463410][ T30] ? do_syscall_64+0xb6/0x230 [ 782.468138][ T30] do_syscall_64+0xf3/0x230 [ 782.478582][ T30] ? clear_bhb_loop+0x35/0x90 [ 782.483367][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 782.495102][ T30] RIP: 0033:0x7f09aa47cf29 [ 782.499642][ T30] RSP: 002b:00007f09ab2780c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 782.508086][ T30] RAX: ffffffffffffffda RBX: 00007f09aa5b3f80 RCX: 00007f09aa47cf29 [ 782.527477][ T30] RDX: 0000000000000000 RSI: 0000000020001540 RDI: 0000000000000004 [ 782.536122][ T30] RBP: 00007f09aa4ec074 R08: 0000000000000000 R09: 0000000000000000 [ 782.549086][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 782.565189][ T30] R13: 000000000000000b R14: 00007f09aa5b3f80 R15: 00007ffc5c4d3548 [ 782.573461][ T30] [ 782.576632][ T30] [ 782.576632][ T30] Showing all locks held in the system: [ 782.595503][ T30] 3 locks held by kworker/u8:1/12: [ 782.600833][ T30] #0: ffff888029d1e148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 782.625179][ T30] #1: ffffc90000117d00 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 782.642598][ T30] #2: ffffffff8f5d5508 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_verify_work+0x19/0x30 [ 782.659754][ T30] 1 lock held by khungtaskd/30: [ 782.664673][ T30] #0: ffffffff8e333fa0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [