last executing test programs: 2m33.597705472s ago: executing program 4 (id=255): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) mlock2(&(0x7f0000627000/0x3000)=nil, 0x3000, 0x0) mremap(&(0x7f0000532000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000190000/0x1000)=nil) mlock(&(0x7f0000626000/0x5000)=nil, 0x5000) 2m33.521169503s ago: executing program 4 (id=258): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000480)={'syz_tun\x00', 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18020000200000000000000000000000850000004100000095000000000000004be98911ed5a3cf4451d51e400827eef4df9eb3fd52b8f0a456c3a6cfd127868ad3fe3f9a9b946c97f9fc091e4c3f4b0a0d7ed298717a480c48868562f04005972b6a5265519fee4cb1b8b93f0b164770fd40c7a8060ce72beff7cda177e28a1a97b2c8c56a3f15b2f7a9b7ae2cf52d08555d3c3315e95095217bff8c9441a45fd00000000000000979ed4e35d21d13d428af521c553b9420385390207dc1634aee0244045e5c380e6090329d37b29a56c16d5c7bee160b91246bd2c205047bd92581165c774b1fd46072c161f1d33e6d5c1a5db7a714e3ed5468408f279bd9f98ec3c5ffd79cd37810f03000000b65d147fa05253a600adfb03775847b220369339529d434f3190c81c3dd501a780cfaaaa916c8a33ee4b52d18e160428893f33d206d3a7195e7f69c831099bdc940000aa2c2e61509bf6c58b100000000000000000000000005e3210346531c1eb14fbec6eb35d6f3e3853512c6bf186bd8b75d17aeeaa07"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, r1, 0x25, 0x8, @val=@tcx={@void, @value}}, 0x1c) 2m33.433841614s ago: executing program 4 (id=259): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_emit_ethernet(0x66, &(0x7f0000000300)={@multicast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x30, 0x3a, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast2, {[], @dest_unreach={0x1, 0xc8ff9f55e8dc000f, 0x0, 0x0, '\x00', {0x0, 0x6, "00b295", 0x0, 0x3a, 0x0, @dev={0xfe, 0x80, '\x00', 0x1d}, @mcast1}}}}}}}, 0x0) ioctl$SIOCGSTAMP(r0, 0x8906, 0x0) recvmmsg(r0, &(0x7f0000000c00)=[{{0x0, 0x0, 0x0}, 0x101}], 0x1, 0x140, 0x0) 2m33.387451144s ago: executing program 4 (id=262): syz_mount_image$jfs(&(0x7f0000000200), &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x1, 0x61ae, &(0x7f0000007640)="$eJzs3c1vHGcdB/DfvvolNLV6qEqEkJuWl1KaxEkJgQJtD3Dg0gPKFSVy3SoiBZQYlFYWceULB078BSAkjghxRBz4A3rgyo0TJyLZSKCeGDT288Szm92uXds7a8/nIzkzv3lmvc/4u7MvmZl9AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACI73/vByutiLj187RgKeIz0YloRyyU9XJELCwv5fW7EfFc7DbHsxHRm4sob7/7z9MRr0bER+cjtnc2VsvFVw/Yj+/+8e+/++G5t/72h97l//5pffx6Dx786j9/fniULQYAAIDmKYqiaKWP+RfS5/t23Z0CAKYiv/4XSV5+5utf//Otv8xSf9RqtVqtnkJdVYz2sFpExGb1NuV7BofjAeCU2YyP6+4CNZJ/o3Uj4lzdnQBmWqvuDnAitnc2Vlsp31b19WB5rz2fCzKQ/2br8fUd46aTDJ9jMq3H11Z04pkx/VmYUh9mSc6/PZz/rb32flrvpPOflnH59/cufWqcnH9nOP8hZyf/9sj8myrn3z1U/h35AwAAAADADMv//79U8/HfuaNvyoF80vHf5Sn1AQAAAAAAAACO21HH/3vsWMf/67w2bj3j/wEAAMDhlZ/VS785v79s3HexlctvtiKeGlofaJh0scxi3f0AAAAAAAAAAAAAgCbp7p3De7MV0YuIpxYXi6Iof6qG68M66u1Pu6ZvPzRZ3U/yAACw56PzQ9fytyLmI+Jm+q6/3uLiYlHMLywWi8XCXH4/25+bLxYqn2vztFw21z/AG+Juvyh/2XzldlWTPi9Pah/+feV99YvOATp2THrprzmmuaawASDZezXa9op0xhTF0+PefMAA+/8ZtBRLdT+umH11P0wBAACAk1cURdFKX+d9IR3zb9fdKQBgKvLr//BxgSPV7THtEcfz+9VqtVqtVn+quqoY7WG1iIjN6m3K9wyG4weAU2YzPq67C9RI/o3WjYjn6u4EMNNadXeAE7G9s7HaSvm2qq8HaXz3fC7IQP6brd3b5duPmk4yfI7JtB5fW9GJZ8b059kp9WGW5Pzbw/nf2mvvp/VOOv9pGZd/f/eSuebJ+XeG8x9ydvJvj8y/qXL+3UPl35E/AAAAAADMsPz//0uO/+ZNBgAAAAAAAIBTZ3tnYzVf95qP/39uxHqu/zybcv6tw+a/kOblf6rl/NtD+X95aL1OZf7Rm/v7/793NlZ/v/6vz+bpQfOfyzOt9MhqpUdEK91Tq5umR9m6J231Ov3ynnqtdqebzvkpeu/Enbgba3FlYN12+nvst68MtJc97Q20Xx1o7z7Rfm2gvZe+d6BYyO2XYjV+Enfj7d32sm1uwvbPT2gvJrTn/Due/xsp59+t/JT5L6b21tC09OjD9hP7fXU66n7euPP5X145+c2ZaCs6j7etqty+izX0Z/dvcq4fP7u/du/Sg9vr6/dWIk0Gll6NNDlmOf/e7s/c/vP/C3vt+Xm/ur8++rB/6PxnxVZ0x+b/QmW+3N6Xpty3OuT8++kn5/92ah+9/5/m/Mfv/y/X0B8AAAAAAAAAAAAAAAD4JEVR7F4i+kZEXE/X/9R1bSYAMF359b9I8nK1Wq1Wq9Vnr64qRnu9WkTEX6u3Kd8z/GLULwMAZtn/IuIfdXeC2si/wfL3/ZXTF+vuDDBV99//4Ee3795du3e/7p4AAAAAAAAAAJ9WHv9zuTL+84sRsTS03sD4r2/G8lHH/+zmmccDjB7zQN9jbLX7nXZluPHnY3d87kvjxv++GE+O/53HxO1Ut2OM3oT2/oT2uQnt8yOX7qc18kKPipz/85Xxzsv8LwwNv96E8V+Hx7xvgpz/xcrjucz/S0PrVfMvfjtz+W8edMWtaA/kf3n9vZ9evv/+B6/cee/2u2vvrv342srKlWvXr9+4cePyO3furl3Z+/dkej0Dcv557GvngTZLzj9nLv9myfl/IdXyb5ac/xdTLf9myfnn93vyb5acf/7sI/9myfm/lGr5N0vO/yupln+zbO9szJX5v5xq+TdL3v+/mmr5N0vO/5VUy79Zcv6XUi3/Zsn5X071AfL39fBnSM4/H+Gy/zdLzn8l1fJvlpz/1VTLv1ly/tdSLf9myfm/mmr5N0vO/2upln+z5Pyvp1r+zZLz/3qq5d8sOf8bqZZ/s+T8v5Fq+TdLzv+bqZZ/s+T8X0u1/Jsl5/+tVMu/WXL+3061/Jsl5/+dVMu/WXL+r6da/s2y//3/ZsyYMZNn6n5mAgAAAAAAAAAAAACGTeN04rq3EQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4PztwIAAAAAAA5P/aCFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVXYgQMBAAAAACD/10aoqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwt7dxch11mcAP7PetddOQgyE4KQGNokJIXGyazvxB22KCZ8NUAokFPqB43rXZsFfeO0SKJJNAyUSRkUVFelFW0CojVRVRBUXtKI0F1U/rkp7QW8q2kpIjaqAAipSW1G2mnPe992Z2dmZWe9kPXve309K/rszZ+acOXNmdp9dP3sAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAaHXL6+c+3SiKovlf+b/tRXFt8+OtU9vLy15ztbcQAAAAWKv/K///3PXpgsMD3Khlmb99+T98bXFxcbF476bfnfj84mK6YqooJrYURXld9NS/v6/RukzwWDHZGGv5fKzP6jf1uX68z/UTfa7f3Of6LX2un+xz/bIdsMzW6ucx5Z3tKj/cXu3S4oZiorxuV5dbPdbYMjYWf5ZTapS3WZw4XswXJ4u5YqZt+WrZRrn8N25prustRVzXWMu6djaPkB98/FjchkbYx7va1rV0n9H3XldM/fAHHz/2R+efvanb7Lsb2u6v2s47bm1u5yfDJdW2NootaZ/E7Rxr2c6dXZ6TTW3b2Shv1/y4czufG3A7Ny1t5rrqfM4ni7Hy42+V+2m89cd6aT/tDJf9921FUVxa2uzOZZatqxgrtrVdMrb0/ExWR2TzPpqH0ouK8VUdp7cMcJw25+yu9uO08zURn/9bwu3GV9iG1qfpe5/YvOx5X+1xGjUf9Uqvlc5jcNivlVE5BuNx8a3yQT/e9RjcFR7/x29f+Rjseux0OQbT4245Bm/tdwyObd5UbnN6EhrlbZaOwT1ty28q19Qo5zO39z4Gp8+fOju98NGP3T1/6uiJuRNzp/ft2TOzb//+gwcPTh+fPzk3U/3/Cvf26NtWjKXXwK1h38XXwKs6lm09VBe/NLzX4WSP1+H2jmWH/Toc73xwjfV5QS4/pqvXxkPNnT55eaxY4TVWPj93rv11mB53y+twvOV12PVrSpfX4fgAr8PmMmfvHOx7lvGW/7ptw/P1tWB7yzHY+f1I5zE47O9HRuUYnAzHxb/cufLXgp1hex/fvdrvRzYtOwbTww3vPc1L0vf7kwfL0e24vLl5xTWbiwsLc+fuefTo+fPn9hRhrIsXtxwrncfrtpbHVCw7XsdWfbwenn/54zd3uXx72FeTdzf/N7nic9Vc5t57ej9X5Ve37vuz7dK9RRhDtt77s9tX8+b+TFmyx/5sLvPJ6bV/L55yacv778QK778x9/+kWl+6q8c2TYxXr99Nae9MtL0ftz9V4+V7V6Nc93PTg70fT4T/1vv9+IYe78c7OpYd9vvxROeDi+/HjX4/7VibzudzMhwnJ2d6vx83l9mxd7XH5HjP9+PbwmyE/f/qkBRSLmo5dlY6btO6xscnwuMaj2toP073tS0/EbJZc11P7r2y4/SO26r72pQe3ZL1Ok6nOpYd9nGa3q9WOk4b/X76dmU6n8/JcFzcsK/3cdpc5ul71/7euTV+2PLeubnfMTixaXNzmyfSQVi93y9ujcfgPcWx4kxxspgtr91cHk+Ncl277xvsGNwc/lvv98odPY7BOzqWHfYxmL6OrXTsNcaXP/gh6Hw+J8Nx8cR9vY/B5jJvODDc713vCJekZVq+d+38+dpKP/O6uWM3PZ8/82pu518f6P2z2eYyJw+uNmf23k93hUuu6bKfOl+/K72mZov12U87wnY+e3Dl/dTcnuYynz804PF0uCiKix9+oPx5b/j9yp9d+PbX2n7v0u13Ohc//MD3rzv+N6vZfgA2vp9UY1v1ta7lN1OD/P4fAAAA2BBi7h8LM5H/AQAAoDZi7o//KjyR/wEAAKA2Yu4fDzPJJP/veMOz8z+5WKRm/mIQr0+74cFqudhxnQmfTy0uaV7+wFfmfvQXFwdb91hRFD9+8De6Lr/jwbhdlamwnU+9sf3y5Te8OND6H3l4abnW/voXw/3HxzPoYdCtgjtTFMU3rv9suZ6p910u59MPPlLOd116/LHmMs8dqj6Pt3/mxdXyvx/Kv4ePH227/TNhP3w3zJm3dt8f8XZfvfzqnQfes7S+eLvGrS8oH/YT76/uN/6dnM89Vi0f9/NK2/+Xn3nyq83lH31l9+2/ONZ9+58M9/uVMP/nZdXyrc9B8/N4u0+F7Y/ri7e758vf7Lr9T326Wv7sm6rlHgkzrv+O8PmuNz0737q/Hm0cbXtcxZur5eL6Z7792+X18f7i/Xdu/+SRy237o/P4ePqfqvuZ7lg+Xh7XE/15x/qb99N6fMb1P/lbj7Tt537rf+pdz7yseb+d67+rY7lNHbfv/ItNf/Cpz3ZdX9yew396tu3xHH5neB2H9T/x/nA8huv/96nPtq03euSd7e8/cfkvbr/Y9niit/ywWv9Trz1Rzv+Y+tHvXXPtdS+49IrmviuKb727ur9+6z/xh2fatv9LN95ZPh/x+tjR71z/SuL6z31k9+kzCxfmZ1v2avm3c95Wbc+Wya3bmtt7fXhv7fz8yJnzH5g7NzUzNVMUU/X9E3pX7Mthfr8al1Z7+zsfDs/nzV/4xrbb//Ez8fJ/fqi6/PJbq69brwrLfS5cvr16/hYba1z/E7fcWL6+G09Xn7f12Idg567/PDjQguHxd35fEI/3sy/5QLkfmteVXzfi63qN2/+d2ep+vh7262L4y8y33ri0vtbl499GuPzu6vW+5v0X3ubi8/rH4fl++3er+4/bFR/vd8L3Md/c0f5+F4+Pr18c67z/8q94XArvJ8Wl6vq4VNzfl5+7sevmxb9DUly6qfz8d9L93LSqh7mShY8uTJ+cP33h0enzcwvnpxc++rEjp85cOH3+SPm3PI98sN/tl96ftpXvT7Nz++8tZrYWRXGmmFmHN6znZ/ubHw22/WcfPjZ7YOb22bnjRy8cP//w2blzJ44tLBybm124/ejx43Mf6Xf7+dn79+w9tO/A3t0n5mfvP3jo0L5Du+dPn2luRrVRfeyf+dDu0+eOlDdZuP/eQ3vuu+/emd2nzszO3X9gZmb3hX63L7827W7e+td3n5s7efT8/Km53QvzH5u7f8+h/fv39v1rgKfOHl+Ymj534fT0hYW5c9PVY5k6X17c/NrX7/bU08K/Vt/PdmpUf4iveMdd+9PfZ236yidWvKtqkY4/IPps+Fs0f//CswcH+Tzm/okwk0zyPwAAAOQg5v7NYSbyPwAAANRGzP1bwkzkfwAAAKiNmPsnw0wyyf/6//r/g/X/q+v1//Pq/5/9cNUr3ej9/9if1//Pw1Xu/695/fr/+v/16/8P3p/f6Nuv/6//z3Kj1v+PuX9rUWSZ/wEAACAHMfdvCzOR/wEAAKA2Yu6/JsxE/gcAAIDaiLn/2jCTTPK//v9A/f+9/QpX9e//O/+//n+xMfv/8cnR/8/Gqvv373mo7VP9/0D/X/9f/1//X/+fNZtY8Zqr1f+Puf+6MJNM8j8AAADkIOb+F4SZyP8AAABQGzH3Xx9mIv8DAABAbcTcvz3MJJP8r//v/P/6//r/te7/r/X8/y0bo/+/MTj/f2/6/31ccf9/Uv9/I/b/J4a7/aPd/++7+fr/PC9G7fz/Mfe/MMwkk/wPAAAAOYi5/0VhJvI/AAAA1EbM/S8OM5H/AQAAoDZi7r8hzCST/K//r/8/Wv3/L9zd3PP6/xX9/8pV7f/3PP9/9ZH+/2jR/+9N/78P5//Pq/8/5O0f7f7/sM//P/HGztvr/9PNqPX/Y+5/SZhJJvkfAAAAchBz/41hJvI/AAAA1EbM/S8NM5H/AQAAoDZi7t8RZpJJ/tf/1/8frf6/8//r/2+k/n9F/3+06P/3pv/fh/6//r/+/2D9/y7f/Or/082o9f9j7r8pzCST/A8AAAA5iLn/5jAT+R8AAABqI+b+nwozkf8BAACgNmLu3xlmkkn+1//X/9f/z6v/f9dm/X/9/3rT/+9N/78P/X/9f/3/Ac//v9xq+v9b+t0ZtTFq/f+Y+18WZpJJ/gcAAIAcxNz/8jAT+R8AAABqI+b+V4SZyP8AAABQGzH3T4WZZJL/9f/r1f//k7964hWF/r/+f5/117T/Hw8D/f/M6f/3pv/fh/6//r/+/7r0/8nHqPX/Y+6/Jcwkk/wPAAAAOYi5/9YwE/kfAAAAaiPm/tvCTOR/AAAAqI2Y+3eFmWSS//X/69X/j/T/9f97rb+m/f9E/z9v+v9dtLxI9f/70P/X/8++/x+/+9X/ZzhGrf8fc/8rw0wyyf8AAACQg5j7bw8zkf8BAACgNmLuf1WYifwPAAAAtRFz/x1hJpnkf/1//X/9f/1//f/u69f/35j0/3tbbf9/s/6//r/+f2b9f+f/Z7iufv+/+s4tfh5z/6vDTDLJ/wAAAJCDmPvvDDOR/wEAAKA24r/frP7dq/wPAAAAdRRz/+4wk0zyv/6//n9O/f+G/r/+v/5/7en/9+b8/33o/+v/6//r/zNUV7//3/55zP13h5lkkv8BAAAgBzH33xNmIv8DAABAbcTcPx1mIv8DAABAbcTcPxNmUub/iau0VetH/1//P6f+v/P/6//r/9ef/n9v+v996P/r/9et/18U+v9cVaPW/4+5f0+Yid//AwAAQG3E3L83zET+BwAAgNqIuX9fmIn8DwAAALURc/+9YSaZ5H/9f/1//X/9f/3/7uvX/9+Y9P970//vQ/9f/79u/X/n/+cqG7X+f8z994WZZJL/AQAAIAcx9+8PM5H/AQAAoDZi7j8QZhLyf7d/1w0AAABsLDH3HwwzyeT3//r/Nen//+bfta1b/1//v9f6h9P/36r/H6b+/2hZ6t+Xx2td+v+dL4srpv/fh/6//r/+v/4/QzVq/f+Y+w+FmWSS/wEAACAHMfe/JsxE/gcAAIDaiLn/p8NM5H8AAACojZj7fybMJJP8r/9fk/5/B/1//f9e63f+f/3/OnP+/95q1f8f0//X/x+t7df/1/9nuee//x8/Gqz/H3P//WEmmeR/AAAAyEHM/T8bZiL/AwAAQG3E3P/aMBP5HwAAAGoj5v7DYSaZ5H/9f/1//X/9/+en///aotMo9v+bB4/+f73o//dWq/6/8//r/4/Y9uv/6/+z3Kid/z/m/teFmWSS/wEAACAHMfc/EGYi/wMAAEBtxNz/+jAT+R8AAABqI+b+N4SZZJL/9f/1//X/9f+d/7/7+vX/Nyb9/970//vQ/9f/1//X/2eoRq3/H3P/G8NMMsn/AAAAkIOY+98UZiL/AwAAQG3E3P/mMBP5HwAAAGoj5v63hJlkkv/1//X/9f/1//X/u69/0P5/8W/6/6Mk4/7/xCAL6f/3of+v/6//r//PUI1a/z/m/p8LM8kk/wMAAEAOYu5/MMxE/gcAAIDaiLn/rWEm8j8AAADURsz9bwszyST/6//r/+v/6//r/3dfv/P/b0wZ9/8Hov/fh/6//r/+v/4/QzVq/f+Y+98eZpJJ/gcAAIAcxNz/82Em8j8AAADURsz97wgzkf8BAABgdHUrYvcQc/8vhJlkkv/1//X/R6v/v3ix9Xb6//r/xbD6/80b6f9nQf+/N/3/Prr0/7fo/+v/6//r/3PFRq3/H3P/O8NMMsn/AAAAkIOY+98VZiL/AwAAQG3E3P/uMBP5HwAAAGoj5v6Hwkwyyf/6/1n2/9NDHr3+v/P/6/87/7/+/9ro//em/9+H8/8PqT9/rf6//r/+P6VR6//H3P9wmEkm+R8AAAByEHP/e8JM5H8AAACojZj7fzHMRP4HAACA2oi5/71hJpnkf/3/LPv/I3z+/7r1/8fbjo+c+v+TLc9nOi71//X/14H+f2/6/33o/zv//yj3/8PRvHWF2+v/M4pGrf8fc//7wkwyyf8AAACQg5j7fynMRP4HAACA2oiJ/5fbPpP/AQAAoE5i7v+VMJNM8r/+v/6//r/z/zv/f/f16/9vTPr/ven/96H/r/8/yv3/PvT/GUWj1v+Puf9Xw0xWDH7f/68BHiYAAAAwQmLuf3+YSSa//wcAAIAcxNx/JMxE/gcAAIDaiLn/kTCTTPK//n9n/z+eUVX/X/9f/1//X/9/Ixpe//+l1xWF/r/+v/6//r/+v/4/azFq/f+Y+4+GmWSS/wEAACAHMff/WpiJ/A8AAAC1EXP/sTAT+R8AAABqI+b+2TCTTPL/Vez/T4xm/9/5/6+0//9j/X/9/0D/vzv9//Xh/P+96f/3of+v/6//r//PUI1a/z/m/rkwk0zyPwAAANRY+nFwzP3Hw0zkfwAAAKiNmPtPhJnI/wAAAFAbMfd/IMwkk/zv/P/6/87/fzX6/+Nty+v/V/T/9f+HQf+/N/3/PvT/9f/1//X/GapR6//H3D8fZpJJ/gcAAIAcxNz/wTAT+R8AAABqI+b+D4WZyP8AAABQGzH3nwwzyST/6//r/+fe/28UxSXn/9f/77Z+/f+NSf+/N/3/PvT/9f/1//X/GapR6//H3H8qzCST/A8AAAA5iLn/dJiJ/A/A/7N3H012ndUeh499bYXR5SMwZsQQRuYjMGVGFWOKZHKwTc5gcg7G5JwzmJxzziZjMphoqBLl7rWW1Dqn95bUu8/Z+32fZ7KuVNbtI9z2rf8Vv3oBAGhG7v77xC32PwAAADQjd/9945ZO9r/+X//fe/+/2sn7/wf/ev3/Pv2//n8Ka/39FZv/usOi8EP7/zvf5ep76v/1/9P0/yfrx/r/Se368+v/9f+sm1v/n7v/fnFLJ/sfAAAAepC7//5xi/0PAAAAzcjd/4C4xf4HAACAZuTuvzpu6WT/d93/nzr7OZL+X/+/9xM99/836f/1/8vm/f9h+v8R3v/X/+v/9f9Mam79f+7+B8Ytnex/AAAA6EHu/gfFLfY/AAAANCN3/4PjFvsfAAAAmpG7/yFxSyf7v+v+3/v/+v+wjP7/hPf/z/v96P/1/5vo/4fp/0fo//X/+n/9P5OaW/+fu/+hcUsn+x8AAAB6kLv/YXGL/Q8AAADNyN3/8LjF/gcAAIBm5O5/RNzSyf7X/+v/9f9L6f+39P6//l//v3A3rM7+O0H/v07/P2Kk/1+t9P9DLrif3/zbW87nP4T+X//Purn1/7n7Hxm33G21OnGpv0kAAABgVnL3Pypu6eTP/wEAAKAHufuviVvsfwAAAGhG7v5r45ZO9r/+X/+v/9f/6/83f339/zJ5/3/Y0fv/O93h3vfqt//3/v8w7/9P3f/f/p2h/2fZ5tb/5+6/Lm7pZP8DAABAD3L3Pzpusf8BAACgGbn7HxO32P8AAADQjNz9j41bOtn/+v/W+v//O/Drzun/92oX/b/+X/+v/2+d/n+Y9/9H7P1r7nT9UP+v//f+/7n9//Dr6Pp/Nplb/5+7/3FxSyf7HwAAAHqQu//xcYv9DwAAAM3I3f+EuMX+BwAAgGbk7n9i3NLJ/t9O/785yNf/e/9f/6//1//r/6em/x+m/x/Ryvv/l/hds+t+/qh2/fnb7/+H6f/ZZG79f+7+J8Utnex/AAAA6EHu/ifHLfY/AAAANCN3/1PiFvsfAAAAmpG7/6lxSyf73/v/+v9l9P/5FfT/+v/j7/+T/n+Z9P/D9P8jWun/L9Gu+/mlf379v/6fdXPr/3P3Py1u6WT/AwAAQA9y9z89brH/AQAAoBm5+58Rt9j/AAAA0Izc/c+MWzrZ//p//f8y+n/v/+v/vf+v/78w+v9h+v8R+n/9v/5f/8+k5tb/5+6/Pm7pZP8DAABAD3L3Pytusf8BAACgGbn7nx232P8AAADQjNz9z4lbOtn/+n/9v/5f/6//3/z19f/LpP8fpv8fof/X/+v/9f9Makb9/zm/6tTquXFLJ/sfAAAAepC7/3lxi/0PAAAAzcjd//y4xf4HAACAZuTuf0Hc0sn+1//Ppv/fy/na6v9Pr1Yr/f+q0/7/9Dl/P+v7Uv+v/98C/f+wi+//b7lx/zt3n/5f/z9E/6//1/9zvhn1/3s/zt3/wrilk/0PAAAAPcjd/6K4xf4HAACAZuTuf3HcYv8DAABAM3L3vyRu6WT/6/9n0//vaav/9/7/+d8fPfX/3v9fp//fDv3/MO//j9D/6//1//p/JjW3/j93/0vjphNXXvJvEQAAAJiZ3P0vi1s6+fN/AAAA6EHu/pfHLfY/AAAALNT1az+Tu/8VcUsn+1//P23/f+Kcn9P/6//P//7Q/+v/9f/HT/8/TP8/Qv+v/9f/6/+Z1Nz6/9z9r4xbOtn/AAAA0IPc/TfELfY/AAAANCN3/6viFvsfAAAAmpG7/8a4pZP9r//3/r/+X/+v/9/89fX/y6T/H6b/H6H/1//vtv8/efZ/1P/Thovo/8+cOXPNsff/uftfHbd0sv8BAACgB7n7XxO32P8AAADQjNz9r41b7H8AAABoRu7+18Utnex//X+n/X9+qy+r/792tdL/6//1//r/Yfr/Yfr/Efp//b/3//X/TGpu7//n7n993NLJ/gcAAIAe5O5/Q9xi/wMAAEAzcve/MW6x/wEAAKAZufvfFLd0sv/1/532/97/1//r/7fd/9+20v9vxSL6/9OHf/259//X6f/1/wO66//vftcDP9T/6/9ZN7f+P3f/m+OWTvY/AAAA9CB3/1viFvsfAAAAmpG7/61xi/0PAAAAzcjd/7a46YpO9r/+X/+v/9f/6/83f/0tv/9/YrVa6f8nsIj+f8Dc+/9p3v8//5/ys/T/+v8lf379v/6fdXPr/3P3vz1u6WT/AwAAQA9y978jbrH/AQAAoBm5+98Zt9j/AAAA0Izc/e+KWzrZ//p//b/+f7r+/7JDvh/0//H9sKv+/7pF9P/e/5+I/n/YPPr/w+n/9f9L/vz6f/0/F25X/X/u/nfHLZ3sfwAAAOhB7v73xC32PwAAADQjd/974xb7HwAAAJqRu/99cUsn+1//r/+/mP4/P6f+v633/0/Orv8/deB/Xyfv/+v/J6L/H6b/H6H/1//r/6/X/zOlub3/n7v//XFLJ/sfAAAAepC7/wNx6/91a/8DAABAM3L3fzBusf8BAACgGbn7PxS3dLL/9f/6f+//6/+bf/9f/98V/f8w/f8I/f8x9PO3f2r9/4L6f+//M6m59f+5+z8ct3Sy/wEAAKAHufs/ErfY/wAAANCM3P0fjVvsfwAAAGhG7v6b4pZO9r/+X/+v/9f/6//3/x7q/9ug/x+2nf7/tP5f/1/9/GXxT4H+X/8/9utp09z6/9z9H4tbOtn/AAAA0IPc/R+PW+x/AAAAaEbu/k/ELfY/AAAALNIVG34ud/8n45ZO9r/+X/+v/9f/6/83f339/zLtpP/Pbwr9v/f/Qz/9/x0P/Oio/fy2P//5//dL/6//Z3pz6/9z938qbulk/wMAAEAPcvd/Om6x/wEAAKAZufs/E7fY/wAAANCM3P2fjVs62f/6/2X0//mdqf/X/+v/9f/6/2He/x+m/x+h/9/p+/lL//z6f/0/6+bW/+fu/1zc0sn+BwAAgB7k7v983GL/AwAAQDNy938hbrH/AQAAoBl7uz/jsg73v/5/Gf2/9//1//p//b/+/8Lo/4fp/0fo//X/+n/9P5OaW///xb1fdWr1pbilk/0PAAAAPcjd/+W4xf4HAACAWTr8vypwuNz9X4lb7H8AAABoRu7+r8Ytnex//b/+fxn9/5kzZ67R/+v/D/5+zvb/N+v/Kfr/Yfr/Efp//b/+X//PpObW/+fu/1rc0sn+BwAAgB7k7v963GL/AwAAQDNy938jbrH/AQAAoBm5+78Zt3Sy//X/M+j/T+n/vf+v/195/1//PxH9/zD9/4gW+/9TF/7b33U/f1S7/vz6f/0/6+bW/+fu/1bc0sn+BwAAgB7k7v923GL/AwAAQDNy938nbrH/AQAAoBm5+78bt3Sy//X/2+v/b//Prpf3/0+vNn9+/b/+X/+v/z9u+v9h+v8RLfb/F2HX/fzSP7/+X//Purn1/7n7vxe3HBx+V17c7xIAAACYk9z9349bOvnzfwAAAOhB7v4fxC32PwAAADQjd/8P45ZO9r/+fwbv/zfY/3v/f/P3h/5/1v3/5fr/Nuj/h+n/R+j/9f/6/4n6//xu1v/3bm79f+7+H8Utnex/AAAA6EHu/h/HLfY/AAAANCN3/0/iFvsfAAAAmpG7/+a45Zz9v6ntboX+X/+v/9f/6/83f339/zLp/4ddaP9/cnW0/j/p//X/+v9e+3/v/7Nvbv1/7v6fxi3+/B8AAAAW58pDfj53/8/iFvsfAAAAmpG7/+dxi/0PAAAAzcjd/4u45dbLd/WRtkr/r//X/+v/9f+bv77+f5n0/8O8/z9C/z9FP3+V/r+N/n+10v9zdHPr/3P3/zJu8ef/AAAA0Izc/b+KW+x/AAAAaEbu/l/HLfY/AAAANCN3/2/ilk72v/5f/3/E/n8vzdT/79P/79P/b6b/3w79/zD9/wj9v/f/9f/e/2dSc+v/c/ffErd0sv8BAACgB7n7fxu32P8AAADQjNz9v4tb7H8AAABoRu7+38ctnez/nfX/8R+1/n/x/b/3//X/+n/9/6zo/4fp/0fo//X/+n/9P5OaW/+fu/8PcUsn+x8AAAB6kLv/j3GL/Q8AAADNyN3/p7jF/gcAAIBm5O7/c9zSyf73/v9R+//9QEX/f/Dz6/8P0v/H94P+X/+/Bfr/Yfr/zepvlP5f/6//1/8zqbn1/7n7/xK3dLL/AQAAoAe5+/8at9j/AAAA0Izc/bfGLfY/AAAANCN3/9/ilk72v/7f+//6f/2//n/z19f/L5P+f9gu+/97/P/4l/X+/877//wI+n/9v/6fScyt/8/d//e4pZP9DwAAAD3I3f+PuMX+BwAAgGbk7v9n3GL/AwAAQDNy9/8rbulk/4/0/yfrL9T/D9L/H/z8+v/N3x/6f/2//v/46f+Hef9/hP7f+//6f/0/k5pb/5+7/99xSyf7HwAAAHqQu/+2uMX+BwAAgGbk7v9P3GL/AwAAQDNy9/83bulk/3v/f0n9/1X6f/2//l//r/8fof8fpv8fof/X/+v/9f9Mam79f+7+/wUAAP//h5xMZQ==") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1204001, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f}) chdir(&(0x7f00000001c0)='./file0\x00') lgetxattr(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)=@random={'os2.', 'system.posix_acl_default\x00'}, 0x0, 0x0) 2m32.741741493s ago: executing program 4 (id=270): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb010018000000000000007c0000007c00000002000000f3ff00000000000e0000000000000000000000000600000d00000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000c20000000000000000000000900000000000000000000000900000000000000000000000902"], 0x0, 0x96, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a00)={r1, 0xd8, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001000), 0x8, 0x0, 0x8, 0xffffffffffffff0e, 0x0}}, 0x10) 2m31.849546635s ago: executing program 4 (id=280): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) r0 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x1}, 0x1c) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x953c, &(0x7f0000000100)=[{&(0x7f0000000000)="2b10", 0xffbd}], 0x1, 0x0, 0x0, 0x2c}, 0x4) 2m31.660168287s ago: executing program 32 (id=280): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) r0 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x1}, 0x1c) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x953c, &(0x7f0000000100)=[{&(0x7f0000000000)="2b10", 0xffbd}], 0x1, 0x0, 0x0, 0x2c}, 0x4) 1m4.307821199s ago: executing program 0 (id=1234): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001fd8)=ANY=[@ANYBLOB="850000007d00000084000000000000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000000)=r1, 0x4) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="58000000100001"], 0x58}}, 0x0) 1m3.842623444s ago: executing program 0 (id=1237): syz_mount_image$bfs(&(0x7f00000001c0), &(0x7f0000000400)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x4, &(0x7f0000000600)=ANY=[], 0x8, 0xad, &(0x7f0000000040)="$eJzs0btpA0EUBdC7H/xJ7ALcg3tw6twVbOjQkY3BjlSGOlArKmE7ULCpkhHLrkChEAhJcA7MzA3mwYW33q5e8pSUv6SUUu6SPGbKX98/nx/v490kyTJt7jPZv9y4ej4P486fp7x5y+L/4E8//HZ9la4fyuyChQEAgJPVeZ1TdfxQm6Q5VyMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA67ILAAD//1vZIlc=") r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') getdents64(r0, 0x0, 0x0) creat(&(0x7f0000000240)='./cgroup\x00', 0xecf86c37d53049cc) 1m3.496775309s ago: executing program 0 (id=1239): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00', r0}, 0x18) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDGKBDIACR(r1, 0x4b4a, &(0x7f00000001c0)=""/222) 1m3.218257603s ago: executing program 0 (id=1242): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000000)={[{@errors_remount}, {@grpquota}]}, 0x4, 0x4f2, &(0x7f0000000c80)="$eJzs3c9vVF0ZAOD3Tjttv34DBWWhRgURRUOY/gAaggthozGExEhcuYDaDk3TGabptEgri7J0byKJK/0T3LkwYeXCnTvducGFCSrRUBMXY+6dSzu0HVqk7dDO8yR37j3nXuY9Z4ZzztzDDCeAnnUuItYiYiAi7kfESJ6f5FvcbG3pda9fPZlef/VkOolm8+4/kux8mhdtfyb1af6cQxHxg+9G/DjZHrexsjo/Va1WFvP06FJtYbSxsnp5rpDnTEyOT45dv3JtYt/qerb2m5ffmbv9w9/99ksv/rj2zZ+mxSr97ER2rr0e+6lV9WKU2vL6I+L2QQTrkv787w9HT9raPhMR57P2PxJ92bsJABxnzeZINEfa0wDAcZfe/5ciKZTzuYBSFArlcmsO70wMF6r1xtKlkfryw5nI5rBORbHwYK5aGcvnCk9FMUnT49nxZnpiS/pKRJyOiJ8PfpKly9P16kw3P/gAQA/7dMv4/+/B1vgPABxzQ+95va8IAMDR977jPwBw9Bn/AaD3vMf4b+ofAI4J9/8A0HuM/wDQe3Yd/58eTjkAgEPx/Tt30q25nv//1zOPVpa/VXp0eabSmC/XlqfL0/XFhfJsvT5brZSnm83dnq9ary+MX91INlZW79Xqyw+X7s3VpmYr9yrFA64PALC702ef/zmJiLUbn2RbtK3lYKyG463Q7QIAXdPX7QIAXeP3PNC79nCPbxoAjrkdluh9S8evCD2z+CscVRc/b/4fepX5f+hd/9/8/7f3vRzA4TP/D72r2Uys+Q8APcYcP/BB//4PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPaqUbUmhnK0FvpY+FsrliBMRcSqKyYO5amUsIk5GxJ8Gi4NperzbhQYAPlDhb0m+/tfFkQulrWcHkv8MZvuI+Mkv7/7i8dTS0uJ4mv/PjfylZ3n+xEA3KgAAtLu5Pas1Tuf7thv516+eTL/ZDrOIL2+1FhdN467nW+tMf/Rn+6EoRsTwv5I83ZJ+Xunbh/hrTyPic5v1f9wWoZTNgbRWPt0aP4194gDib77+W+MX3opfyM6l+2L2Wnx2H8oCveb5rVY/mbe9tInl7a8Q57L9zu1/KOuhPtyb/m99W/9X2Oj/+rbFT7I2f24j/e6SvLz6++9ty2yOtM49jfhC/07xk434SYf+98Ie6/iXL375fKdzzV9FXIyd47fUsm52dKm2MNpYWb08V5uarcxWHk5MTI5Pjl2/cm1iNJujbj3+YacYf79x6WSn+Gn9hzvEH9ql/l/bY/1//d/7P/rKO+J/46s7v/9n3hE/HRO/vsf4U8M3Oy7fncaf6VD/3d7/S3uM/+KvqzN7vBQAOASNldX5qWq1srjLQfpZc7drHBzNg1iL+AiKkR8MxEdRjJ4/6HbPBBy0zUbf7ZIAAAAAAAAAAAAAAACdNFZW5wfjYH9O1O06AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcHz9LwAA//9Jt84K") unlinkat(0xffffffffffffff9c, &(0x7f0000000c40)='./file1\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000380)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000002240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000440)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './file0'}}]}) 1m2.287316966s ago: executing program 0 (id=1245): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f00000005c0)={[{@abort}, {@errors_remount}]}, 0x3, 0x445, &(0x7f0000000b00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x42, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) fstat(r0, &(0x7f0000009340)) 1m0.679108167s ago: executing program 0 (id=1259): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@delchain={0x198, 0x65, 0x2, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0x0, 0x4}}, [@filter_kind_options=@f_bpf={{0x8}, {0x4}}, @TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_CHAIN={0x8, 0xb, 0x20000000}, @TCA_RATE={0x6, 0x5, {0x6, 0x2}}, @filter_kind_options=@f_route={{0xa}, {0x144, 0x2, [@TCA_ROUTE4_POLICE={0x10, 0x5, [@TCA_POLICE_RATE64={0xc, 0x8, 0x6db}]}, @TCA_ROUTE4_TO={0x8, 0x2, 0xca}, @TCA_ROUTE4_IIF={0x8}, @TCA_ROUTE4_ACT={0x120, 0x6, [@m_csum={0x4c, 0x1a, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x7, 0x7, 0x7, 0x4, 0x8000}, 0x4}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_mirred={0xa4, 0x9, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x7, 0x5, 0x10000000, 0xae, 0x2}, 0x3}}]}, {0x55, 0x6, "2c62c963eac0c6d668d82240967b7532e338321003de4e40bb9a304114863218887c7f704cc0dde2d8751577a0cb3b9ce396244c01aee32fabd7de1a861872b7e69509162637f5e3f477128b1098ac6ea7"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2}}}}, @m_bpf={0x2c, 0x4, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x198}, 0x1, 0x0, 0x0, 0x81}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 1m0.51284683s ago: executing program 33 (id=1259): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@delchain={0x198, 0x65, 0x2, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0x0, 0x4}}, [@filter_kind_options=@f_bpf={{0x8}, {0x4}}, @TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_CHAIN={0x8, 0xb, 0x20000000}, @TCA_RATE={0x6, 0x5, {0x6, 0x2}}, @filter_kind_options=@f_route={{0xa}, {0x144, 0x2, [@TCA_ROUTE4_POLICE={0x10, 0x5, [@TCA_POLICE_RATE64={0xc, 0x8, 0x6db}]}, @TCA_ROUTE4_TO={0x8, 0x2, 0xca}, @TCA_ROUTE4_IIF={0x8}, @TCA_ROUTE4_ACT={0x120, 0x6, [@m_csum={0x4c, 0x1a, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x7, 0x7, 0x7, 0x4, 0x8000}, 0x4}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_mirred={0xa4, 0x9, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x7, 0x5, 0x10000000, 0xae, 0x2}, 0x3}}]}, {0x55, 0x6, "2c62c963eac0c6d668d82240967b7532e338321003de4e40bb9a304114863218887c7f704cc0dde2d8751577a0cb3b9ce396244c01aee32fabd7de1a861872b7e69509162637f5e3f477128b1098ac6ea7"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2}}}}, @m_bpf={0x2c, 0x4, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x198}, 0x1, 0x0, 0x0, 0x81}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 50.284507646s ago: executing program 5 (id=1365): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000100)={0x24, r1, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}]}, 0x24}}, 0x0) 49.99817326s ago: executing program 5 (id=1370): r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x2012, r1, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40046f41, &(0x7f0000000440)=0x20000) 49.838714273s ago: executing program 5 (id=1373): syz_usb_connect(0x0, 0x24, &(0x7f0000002480)={{0x12, 0x1, 0x0, 0xbd, 0x99, 0x2d, 0x40, 0x1943, 0x2250, 0x1, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x84, 0x6d, 0xcf}}]}}]}}, 0x0) r0 = syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) 47.909927578s ago: executing program 5 (id=1402): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000300)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) umount2(&(0x7f0000000000)='./file0\x00', 0x0) 47.830800219s ago: executing program 5 (id=1405): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4016, &(0x7f0000000180)={[{@dioread_nolock}, {@debug}, {@noauto_da_alloc}, {@lazytime}, {@grpjquota}, {@quota}]}, 0x1, 0x43c, &(0x7f0000000280)="$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") capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000140)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, 0x0) 47.321842036s ago: executing program 5 (id=1418): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000008c0)={'wlan0\x00', 0x400}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000080)={'batadv_slave_0\x00'}) 47.214689977s ago: executing program 34 (id=1418): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000008c0)={'wlan0\x00', 0x400}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000080)={'batadv_slave_0\x00'}) 3.813833119s ago: executing program 2 (id=1808): r0 = io_uring_setup(0x7d5, &(0x7f0000000500)={0x0, 0x1000000, 0x0, 0x20002, 0xfffffffc}) close_range(r0, 0xffffffffffffffff, 0x0) io_setup(0x8, &(0x7f0000004200)=0x0) io_pgetevents(r1, 0x3, 0x3, &(0x7f0000000440)=[{}, {}, {}], &(0x7f00000004c0)={0x0, 0x3938700}, 0x0) 3.547046853s ago: executing program 2 (id=1812): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x202, 0x0) ioctl$SNDCTL_TMR_START(r0, 0x5402) ioctl$SNDCTL_SEQ_RESET(r0, 0x5100) ioctl$SNDCTL_TMR_CONTINUE(r0, 0x5404) 3.500739583s ago: executing program 2 (id=1813): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0xe8, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x30, 0x2, {{0x0, 0x0, 0x0, 0xfffffff8}, [@TCA_NETEM_RATE={0x14, 0xd, {0x0, 0x1, 0x0, 0x60}}]}}}, @TCA_STAB={0x88, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, 0x3}}, {0x17, 0x2, [0x0, 0x0, 0x7]}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, {0x14, 0x2, [0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}}, {0xe, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0]}}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x10}, 0x0) 3.449488154s ago: executing program 3 (id=1814): socket$kcm(0x2, 0x5, 0x84) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80002, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo/4\x00') preadv(r0, &(0x7f0000001600)=[{&(0x7f0000000040)=""/35, 0x2b}], 0x1, 0x0, 0x0) 3.377073035s ago: executing program 3 (id=1815): socket$inet6_udplite(0xa, 0x2, 0x88) r0 = syz_usb_connect(0x0, 0x3d7, &(0x7f00000007c0)=ANY=[@ANYBLOB="120100004cefc008e10593085bfd010203010902c50301000000000904"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000180)={0x40, 0xd, 0x1, "ff"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ftruncate(0xffffffffffffffff, 0xffff) 2.855313322s ago: executing program 2 (id=1819): syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x88, &(0x7f0000000080)={[{@nogrpid}, {@min_batch_time={'min_batch_time', 0x3d, 0x5}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@nobarrier}, {@errors_remount}, {@quota}]}, 0x3, 0x438, &(0x7f0000000d80)="$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") rename(&(0x7f0000000000)='./file2\x00', &(0x7f0000000040)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x42, 0x0) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000200)="df", 0x1}], 0x1, 0x800001, 0x0, 0x0) 2.28022591s ago: executing program 2 (id=1821): syz_read_part_table(0x4063, &(0x7f0000004100)="$eJzsz0EuxAAUBuB/RkuJBYmdRDQSSxkXEJfoBeYKrGXoGVzAciKxdSRHsKsgRmpGZNgQ37d4bf/3XvIafoW1peLkfny7nWS/TjuaJFWSYsHY6DjlRjXMZpLz+XYz/cnNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAX3L6SV5+tTjeTXtRvH9frdwVySA7SX3Um7ze6rr+7jBppt+7FwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4l9afy+pcfPZSH7vF3dwcpD3ZG6ZK6sO3sOxmK30PH4Om609dzt4Gr4/Jcj8BAPDEDhwIAAAAAAD5vzZCVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVFXbgQAAAAAAAyP+1EaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwAwckAAAAAIL+v25HoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPwUAAP//JREYEg==") syz_usb_connect(0x2, 0x24, &(0x7f0000000d00)={{0x12, 0x1, 0x201, 0x98, 0x16, 0x26, 0x8, 0x499, 0x1020, 0xa8e4, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xc6, 0x81, 0x0, 0x80, [{{0x9, 0x4, 0xe7, 0x3, 0x0, 0x97, 0x78, 0x7c, 0xb3}}]}}]}}, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183341, 0x0) ioctl$BLKPG(r0, 0x1269, &(0x7f00000001c0)={0x3, 0x0, 0x98, &(0x7f0000000040)={0x7, 0xdb, 0x8}}) 1.853858486s ago: executing program 1 (id=1825): openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, &(0x7f0000000240)={0x1f}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) 1.724804997s ago: executing program 1 (id=1827): syz_mount_image$nilfs2(&(0x7f0000000040), &(0x7f0000000f00)='./file0\x00', 0x0, &(0x7f0000000f40)=ANY=[], 0x1, 0xec6, &(0x7f0000003d40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000002600)='./file1\x00', 0x105042, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x1000)=nil, 0x1000, 0xa, 0x11, r0, 0x0) truncate(&(0x7f0000000080)='./file1\x00', 0xf000) 1.345767082s ago: executing program 6 (id=1831): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cgroup.max.descendants\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[@ANYBLOB='-7'], 0x9) 1.257779813s ago: executing program 1 (id=1832): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, 0x0) 1.137830655s ago: executing program 6 (id=1833): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000180)={0x50, r0, 0x801, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY={0x28, 0x50, 0x0, 0x1, [@NL80211_KEY_TYPE={0x8}, @NL80211_KEY_IDX={0x5}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "01959e56da"}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac0a}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x4091}, 0x0) 1.094821565s ago: executing program 3 (id=1834): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000240)=ANY=[@ANYBLOB="05000000000000e623000040"]) 953.841447ms ago: executing program 6 (id=1836): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000000)={0x2000, 0x747, 0xffff, 0x4, 0x0, 0x0, 0x9}, 0xc) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xc5a}, 0xe) connect$bt_l2cap(r0, &(0x7f00000001c0)={0x1f, 0x0, @any, 0x4}, 0xe) 953.330278ms ago: executing program 7 (id=1837): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=@setlink={0x40, 0x10, 0x401, 0x0, 0xfffffffc, {}, [@IFLA_IFNAME={0x14, 0x3, 'veth0_to_bond\x00'}, @IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r1}]}]}, 0x40}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], 0xb8}}, 0x0) 872.340229ms ago: executing program 1 (id=1838): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000000)=0x205, 0x4) setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f00000000c0)=0x4d, 0x4) getsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f0000001500)=""/19, &(0x7f0000000240)=0x13) 854.080149ms ago: executing program 3 (id=1839): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcaba4f19e4738617, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @value}, 0x94) r0 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01000000000000000000020000001400020062756e643000000000000000000000000900010073"], 0x40}}, 0x0) 818.480549ms ago: executing program 6 (id=1840): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000240)={0xaa, 0x50}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000140)={{&(0x7f0000ffd000/0x1000)=nil, 0x1000}}) 723.473701ms ago: executing program 7 (id=1841): r0 = socket(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="d5"], 0x24}}, 0x0) recvmmsg$unix(r0, &(0x7f0000005480)=[{{0x0, 0x0, &(0x7f0000002a00)=[{&(0x7f00000000c0)=""/38, 0x26}, {&(0x7f0000000480)=""/181, 0xb5}, {&(0x7f0000002a40)=""/4098, 0x1002}], 0x3}}], 0x1, 0x0, 0x0) write(r0, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14) 702.134601ms ago: executing program 1 (id=1842): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, 0x0, 0x0) 659.212061ms ago: executing program 6 (id=1843): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kfree\x00', r0}, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000780)=@newsa={0x184, 0x10, 0x713, 0x0, 0x0, {{@in=@broadcast, @in6=@remote}, {@in6=@remote, 0x0, 0x32}, @in6=@mcast1, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}}}]}, 0x184}, 0x1, 0x0, 0x0, 0x20000015}, 0x0) 554.937783ms ago: executing program 3 (id=1844): rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) syz_clone3(&(0x7f0000000900)={0x8020000, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, &(0x7f00000008c0)=[0x0], 0x1}, 0x58) 541.149893ms ago: executing program 7 (id=1845): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r1 = epoll_create1(0x0) r2 = fcntl$dupfd(r1, 0x2, 0xffffffffffffffff) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000580)=ANY=[@ANYRES32=r2, @ANYRES32=r0, @ANYBLOB="11"], 0x14) 540.360663ms ago: executing program 1 (id=1846): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="180000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fc00101}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000001c0)) 345.757876ms ago: executing program 7 (id=1847): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) rseq(&(0x7f00000006c0)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) syz_clone3(&(0x7f0000001240)={0x2d000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) move_pages(0x0, 0x1, &(0x7f0000000100)=[&(0x7f0000064000/0x1000)=nil], &(0x7f00000000c0)=[0x1], 0x0, 0x0) 177.997328ms ago: executing program 3 (id=1848): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x7b5, 0x312, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x6}}}}}]}}]}}, 0x0) symlink(&(0x7f0000000000)='./file1/file4/file6\x00', 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x59}, 0x0}, 0x0) 156.090258ms ago: executing program 7 (id=1849): syz_open_dev$sndctrl(&(0x7f00000000c0), 0x0, 0x0) unshare(0x22020400) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {0x7, 0x4, 0x6, 0xfffa}, 0x1d, [0x5, 0xc95a, 0xfffffff3, 0x6, 0x9, 0x2, 0x1, 0x7f, 0x6, 0x7, 0xfffffff2, 0x5f, 0xa, 0x7, 0xffff2d33, 0x8, 0x6, 0xa, 0x0, 0x80000001, 0xca, 0x7, 0x5, 0x3c5b, 0x6, 0x22, 0x2, 0xfffffffe, 0x1f461e2c, 0x2, 0xe661, 0x4, 0x3, 0x3, 0x107fff, 0x4c74, 0x9, 0x0, 0xb, 0xa, 0x0, 0x71, 0x7, 0x2000007, 0x103, 0x0, 0x3, 0x39, 0x2, 0x6, 0x6, 0x3, 0x5, 0x0, 0x8, 0x10000000, 0x7f, 0x0, 0x5, 0x5, 0xa, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x12f, 0x8000, 0x10, 0x8, 0x129432e6, 0xcb, 0x2, 0xd, 0x22d8, 0x1, 0x9, 0xfffffffe, 0x8, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x8, 0x78, 0xea4, 0x80000000, 0x4, 0x0, 0x8000, 0x9, 0x400, 0x1, 0x6, 0xfffffffd, 0xff, 0x1005, 0x801, 0x7, 0x4, 0x2009, 0x106, 0x2, 0x1ff, 0x7, 0x9, 0x8, 0x9, 0xfffffffe, 0x5, 0x0, 0x2, 0x8000, 0xffff, 0x2, 0x83, 0x9, 0x5, 0x10003, 0x4, 0x1, 0x7, 0xd, 0x9, 0x48c93690, 0x2, 0xff], [0x7, 0x4, 0x0, 0x652, 0xfffffdfe, 0x0, 0x8ce, 0x9, 0x387d, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x7, 0x86, 0x3, 0x10000009, 0x3e7, 0xb, 0x1, 0x2, 0x2, 0xf, 0x8, 0x4, 0x6d01, 0x5, 0x1b1, 0x3, 0x200, 0x80000000, 0x3, 0x4, 0x2, 0x0, 0xa2, 0x7, 0x53cf697b, 0x5, 0x6, 0x54fe12d5, 0xbf, 0x200, 0x3, 0x400002, 0xfffffff9, 0x0, 0x5, 0x5, 0x5, 0x6, 0xffbffffb, 0x4, 0x3, 0x8, 0x9, 0x8, 0x3], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x938, 0x6, 0x6, 0xfffffffc, 0x5, 0xce5, 0x1fd, 0x6, 0x5, 0x5, 0x40000003, 0x101, 0x10000, 0x6, 0x7fff, 0x8ffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x8, 0x60a7, 0x6, 0x6, 0xffffffff, 0x7ffffffb, 0x5, 0x8, 0xc8, 0x3, 0x4, 0x82ffff, 0x200003, 0x5, 0x7ffffffd, 0x9602, 0xa, 0x8, 0x4, 0xffffffff, 0x1, 0x10002, 0x5, 0x8, 0x2b95, 0x7, 0x7, 0x9, 0x1, 0x6c1b, 0x3, 0x4, 0x5, 0xb1c, 0x1, 0x99f5, 0xffff3441, 0xfff]}, 0x45c) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) 54.4308ms ago: executing program 2 (id=1850): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f00000002c0)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000080)={r2, 0x9, 0x10}, 0xc) 485.39µs ago: executing program 7 (id=1851): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448ca, 0x0) ioctl$sock_bt_hci(r0, 0x400448c9, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) 0s ago: executing program 6 (id=1852): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000200)={0x1f, 0x1, @any, 0x0, 0x2}, 0xe) listen(r0, 0x0) connect$bt_l2cap(r0, &(0x7f0000000140)={0x1f, 0xf6, @any, 0x0, 0x2}, 0xe) kernel console output (not intermixed with test programs): bridge_slave_0) entered disabled state [ 168.396602][ T7503] device bridge_slave_0 entered promiscuous mode [ 168.422929][ T7503] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.426306][ T7499] BTRFS info (device loop1): clearing free space tree [ 168.439167][ T7499] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 168.454885][ T7503] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.460349][ T7499] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 168.545351][ T7503] device bridge_slave_1 entered promiscuous mode [ 168.743921][ T7503] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 168.802850][ T7503] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 169.197882][ T7533] loop3: detected capacity change from 0 to 32768 [ 169.217672][ T5303] Bluetooth: hci3: command 0x0409 tx timeout [ 169.275499][ T7576] xt_HMARK: spi-set and port-set can't be combined [ 169.387474][ T7582] loop5: detected capacity change from 0 to 764 [ 169.408962][ T7562] loop0: detected capacity change from 0 to 32768 [ 169.449352][ T7533] XFS (loop3): Mounting V5 Filesystem [ 169.474830][ T7562] XFS: ikeep mount option is deprecated. [ 169.500058][ T7503] team0: Port device team_slave_0 added [ 169.554785][ T7562] XFS (loop0): Mounting V5 Filesystem [ 169.709593][ T7604] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1198'. [ 169.712092][ T7562] XFS (loop0): Ending clean mount [ 169.776595][ T7503] team0: Port device team_slave_1 added [ 169.785817][ T7602] loop5: detected capacity change from 0 to 512 [ 169.793980][ T7562] XFS (loop0): Quotacheck needed: Please wait. [ 169.802361][ T7533] XFS (loop3): Ending clean mount [ 169.870430][ T7602] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 169.949945][ T7562] XFS (loop0): Quotacheck: Done. [ 170.013788][ T7602] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #11: comm syz.5.1197: invalid indirect mapped block 4294967295 (level 1) [ 170.062701][ T7602] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #11: comm syz.5.1197: invalid indirect mapped block 4294967295 (level 1) [ 170.085160][ T7503] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 170.092174][ T7503] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 170.127759][ T7602] EXT4-fs (loop5): 2 truncates cleaned up [ 170.134335][ T7602] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpjquota=,init_itable=0x0000000000000007,dioread_nolock,,errors=continue. Quota mode: writeback. [ 170.150889][ T4182] XFS (loop0): Unmounting Filesystem [ 170.152102][ T7503] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 170.170498][ T4169] XFS (loop3): Unmounting Filesystem [ 170.180421][ T4242] device hsr_slave_0 left promiscuous mode [ 170.229302][ T4242] device hsr_slave_1 left promiscuous mode [ 170.282975][ T4242] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 170.299669][ T4242] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 170.308437][ T7602] EXT4-fs error (device loop5): ext4_validate_block_bitmap:429: comm syz.5.1197: bg 0: block 5: invalid block bitmap [ 170.340417][ T4242] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 170.379127][ T4242] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 170.395745][ T4242] device bridge_slave_1 left promiscuous mode [ 170.415070][ T4242] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.460124][ T4242] device bridge_slave_0 left promiscuous mode [ 170.466358][ T4242] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.484498][ T4242] device veth1_macvtap left promiscuous mode [ 170.513600][ T4242] device veth0_macvtap left promiscuous mode [ 170.519702][ T4242] device veth1_vlan left promiscuous mode [ 170.595209][ T4242] device veth0_vlan left promiscuous mode [ 170.721796][ T7615] loop5: detected capacity change from 0 to 1024 [ 170.801838][ T7615] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 171.056275][ T4242] team0 (unregistering): Port device team_slave_1 removed [ 171.073154][ T4242] team0 (unregistering): Port device team_slave_0 removed [ 171.085165][ T4242] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 171.094520][ T6293] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 171.108176][ T4242] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 171.181710][ T4242] bond0 (unregistering): Released all slaves [ 171.238373][ T7503] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 171.246075][ T7503] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 171.274658][ T7503] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 171.286796][ T7610] IPv6: Can't replace route, no match found [ 171.355904][ T6293] usb 4-1: Using ep0 maxpacket: 8 [ 171.437580][ T7503] device hsr_slave_0 entered promiscuous mode [ 171.452276][ T5298] Bluetooth: hci3: command 0x041b tx timeout [ 171.460274][ T7503] device hsr_slave_1 entered promiscuous mode [ 171.476525][ T7503] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 171.493756][ T6293] usb 4-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 171.510718][ T7503] Cannot create hsr debugfs directory [ 171.524310][ T6293] usb 4-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 171.554400][ T6293] usb 4-1: config 0 interface 0 has no altsetting 0 [ 171.575288][ T6293] usb 4-1: New USB device found, idVendor=06a3, idProduct=0621, bcdDevice= 0.00 [ 171.605607][ T6293] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.643295][ T6293] usb 4-1: config 0 descriptor?? [ 171.735653][ T7641] loop1: detected capacity change from 0 to 128 [ 172.153242][ T26] audit: type=1326 audit(1747883676.637:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7655 comm="syz.0.1214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe76c1a9969 code=0x7ffc0000 [ 172.191718][ T6293] saitek 0003:06A3:0621.000C: unknown main item tag 0x2 [ 172.218195][ T6293] saitek 0003:06A3:0621.000C: unbalanced collection at end of report description [ 172.243505][ T6293] saitek 0003:06A3:0621.000C: parse failed [ 172.260240][ T26] audit: type=1326 audit(1747883676.693:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7655 comm="syz.0.1214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fe76c1a9969 code=0x7ffc0000 [ 172.295490][ T6293] saitek: probe of 0003:06A3:0621.000C failed with error -22 [ 172.388741][ T26] audit: type=1326 audit(1747883676.693:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7655 comm="syz.0.1214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe76c1a9969 code=0x7ffc0000 [ 172.495426][ T5303] usb 4-1: USB disconnect, device number 11 [ 172.518022][ T26] audit: type=1326 audit(1747883676.693:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7655 comm="syz.0.1214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe76c1a82d0 code=0x7ffc0000 [ 172.558616][ T7664] loop1: detected capacity change from 0 to 2048 [ 172.585406][ T26] audit: type=1326 audit(1747883676.693:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7655 comm="syz.0.1214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe76c1a9969 code=0x7ffc0000 [ 172.632446][ T7638] loop5: detected capacity change from 0 to 32768 [ 172.639561][ T26] audit: type=1326 audit(1747883676.693:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7655 comm="syz.0.1214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe76c1a9969 code=0x7ffc0000 [ 172.666205][ T26] audit: type=1326 audit(1747883676.693:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7655 comm="syz.0.1214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe76c1a9969 code=0x7ffc0000 [ 172.737393][ T7664] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 172.764831][ T7638] XFS (loop5): Mounting V5 Filesystem [ 172.786058][ T7676] loop0: detected capacity change from 0 to 1024 [ 172.809404][ T7664] ext4 filesystem being mounted at /224/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 172.941248][ T7503] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 172.945483][ T7638] XFS (loop5): Ending clean mount [ 173.001840][ T7503] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 173.009630][ T7638] XFS (loop5): Quotacheck needed: Please wait. [ 173.036106][ T7676] EXT4-fs (loop0): Ignoring removed orlov option [ 173.063722][ T7503] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 173.137976][ T7676] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsv1,resgid=0x0000000000000000,nodioread_nolock,norecovery,debug_want_extra_isize=0x0000000000000080,resgid=0x0000000000000000,errors=remount-ro,grpid,orlov,. Quota mode: none. [ 173.251115][ T7503] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 173.276907][ T7638] XFS (loop5): Quotacheck: Done. [ 173.405073][ T4955] XFS (loop5): Unmounting Filesystem [ 173.493290][ T7503] 8021q: adding VLAN 0 to HW filter on device bond0 [ 173.565386][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 173.601706][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 173.614485][ T7503] 8021q: adding VLAN 0 to HW filter on device team0 [ 173.684850][ T4211] Bluetooth: hci3: command 0x040f tx timeout [ 173.691497][ T5056] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 173.711630][ T5056] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 173.783926][ T5056] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.791031][ T5056] bridge0: port 1(bridge_slave_0) entered forwarding state [ 173.866916][ T5056] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 173.917916][ T5056] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 173.933320][ T5056] bridge0: port 2(bridge_slave_1) entered blocking state [ 173.940417][ T5056] bridge0: port 2(bridge_slave_1) entered forwarding state [ 174.018592][ T5056] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 174.047987][ T5056] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 174.135535][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 174.144376][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 174.240179][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 174.275013][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 174.307330][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 174.315820][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 174.350217][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 174.373021][ T7503] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 174.400393][ T7503] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 174.432772][ T7726] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1234'. [ 174.456811][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 174.459772][ T7730] loop5: detected capacity change from 0 to 512 [ 174.465005][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 174.483628][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 174.572599][ T7730] EXT4-fs error (device loop5): ext4_orphan_get:1401: inode #15: comm syz.5.1223: casefold flag without casefold feature [ 174.595097][ T4211] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 174.636386][ T7738] loop0: detected capacity change from 0 to 64 [ 174.745709][ T7730] EXT4-fs error (device loop5): ext4_orphan_get:1406: comm syz.5.1223: couldn't read orphan inode 15 (err -117) [ 174.809482][ T7730] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 174.832533][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 174.840009][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 174.873148][ T4211] usb 4-1: Using ep0 maxpacket: 32 [ 174.886738][ T7503] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 175.012164][ T4211] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 175.021349][ T5056] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 175.044356][ T4211] usb 4-1: config 0 has no interface number 0 [ 175.055483][ T5056] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 175.067903][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 175.076281][ T5296] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 175.133380][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 175.177628][ T7503] device veth0_vlan entered promiscuous mode [ 175.208073][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 175.233967][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 175.247677][ T4211] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 175.264471][ T7503] device veth1_vlan entered promiscuous mode [ 175.274133][ T4211] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.278806][ T7764] loop0: detected capacity change from 0 to 512 [ 175.306780][ T4211] usb 4-1: Product: syz [ 175.325466][ T4211] usb 4-1: Manufacturer: syz [ 175.340742][ T4211] usb 4-1: SerialNumber: syz [ 175.366500][ T5296] usb 2-1: Using ep0 maxpacket: 16 [ 175.374527][ T4211] usb 4-1: config 0 descriptor?? [ 175.402070][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 175.441394][ T4211] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 175.448783][ T7764] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,grpquota,. Quota mode: writeback. [ 175.463694][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 175.500190][ T7764] ext4 filesystem being mounted at /269/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 175.512998][ T7503] device veth0_macvtap entered promiscuous mode [ 175.525333][ T5296] usb 2-1: config 4 has an invalid interface number: 52 but max is 1 [ 175.538853][ T5296] usb 2-1: config 4 has an invalid interface number: 52 but max is 1 [ 175.557149][ T5296] usb 2-1: config 4 has 1 interface, different from the descriptor's value: 2 [ 175.576944][ T5296] usb 2-1: config 4 has no interface number 0 [ 175.584350][ T7503] device veth1_macvtap entered promiscuous mode [ 175.587789][ T5296] usb 2-1: config 4 interface 52 altsetting 62 endpoint 0xA has invalid maxpacket 1023, setting to 64 [ 175.634064][ T5296] usb 2-1: config 4 interface 52 has no altsetting 0 [ 175.640791][ T5296] usb 2-1: config 4 interface 52 has no altsetting 1 [ 175.666837][ T4211] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 175.670011][ T7503] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 175.703790][ T4211] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 175.731180][ T7503] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.792655][ T7503] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 175.804104][ T7764] EXT4-fs error (device loop0): ext4_add_entry:2486: inode #12: comm syz.0.1242: Directory hole found for htree leaf block 0 [ 175.804673][ T7764] EXT4-fs (loop0): Remounting filesystem read-only [ 175.872813][ T7503] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.888048][ T7764] overlayfs: failed to create directory ./file0/work (errno: 117); mounting read-only [ 175.902665][ T5302] Bluetooth: hci3: command 0x0419 tx timeout [ 175.920926][ T5296] usb 2-1: New USB device found, idVendor=0b95, idProduct=7720, bcdDevice=18.78 [ 175.930411][ T7503] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 175.933833][ T5296] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.949025][ T7503] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.949057][ T7503] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 175.949072][ T7503] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.950273][ T7503] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 175.956525][ T7503] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 175.964016][ T7728] udc-core: couldn't find an available UDC or it's busy [ 175.993754][ T7503] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.016469][ T5296] usb 2-1: Product: syz [ 176.021446][ T5296] usb 2-1: Manufacturer: syz [ 176.026230][ T5296] usb 2-1: SerialNumber: syz [ 176.039741][ T7728] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 176.073683][ T7503] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 176.102399][ T7503] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.145316][ T7503] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 176.166790][ T7503] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.193254][ T7503] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 176.219978][ T7503] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.232745][ T4182] EXT4-fs error (device loop0): ext4_empty_dir:3139: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 176.268109][ T7503] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 176.285167][ T4182] EXT4-fs (loop0): Remounting filesystem read-only [ 176.296849][ T4182] EXT4-fs error (device loop0): ext4_empty_dir:3139: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 176.299849][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 176.310129][ C0] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 176.318133][ T4370] usb 4-1: USB disconnect, device number 12 [ 176.334583][ T5296] asix 2-1:4.52 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 176.356706][ T5296] asix: probe of 2-1:4.52 failed with error -71 [ 176.359964][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 176.371013][ T4370] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 176.388733][ T4182] EXT4-fs (loop0): Remounting filesystem read-only [ 176.396675][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 176.411396][ T5296] usb 2-1: USB disconnect, device number 14 [ 176.432157][ T4182] EXT4-fs error (device loop0): ext4_empty_dir:3139: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 176.434371][ T4370] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 176.466550][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 176.488244][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 176.507764][ T4182] EXT4-fs (loop0): Remounting filesystem read-only [ 176.514625][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 176.525339][ T4370] quatech2 4-1:0.51: device disconnected [ 176.538480][ T4182] EXT4-fs error (device loop0): ext4_empty_dir:3139: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 176.544174][ T7503] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.605300][ T4182] EXT4-fs (loop0): Remounting filesystem read-only [ 176.612164][ T7503] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.612345][ T4182] EXT4-fs error (device loop0): ext4_empty_dir:3139: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 176.642254][ T7503] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.651119][ T7503] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.662039][ T4182] EXT4-fs (loop0): Remounting filesystem read-only [ 176.683220][ T4182] EXT4-fs error (device loop0): ext4_empty_dir:3139: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 176.758013][ T4182] EXT4-fs (loop0): Remounting filesystem read-only [ 176.765084][ T4182] EXT4-fs error (device loop0): ext4_empty_dir:3139: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 176.796203][ T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 176.808366][ T4182] EXT4-fs (loop0): Remounting filesystem read-only [ 176.815445][ T4182] EXT4-fs error (device loop0): ext4_empty_dir:3139: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 176.850900][ T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 176.880090][ T5056] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 176.889129][ T4182] EXT4-fs (loop0): Remounting filesystem read-only [ 176.899522][ T5056] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 176.913321][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 176.921273][ T4182] EXT4-fs error (device loop0): ext4_empty_dir:3139: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 176.945397][ T4182] EXT4-fs (loop0): Remounting filesystem read-only [ 176.947741][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 177.176306][ T7799] loop1: detected capacity change from 0 to 256 [ 177.385376][ T7806] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1250'. [ 177.501466][ T7812] loop5: detected capacity change from 0 to 64 [ 177.508206][ T5302] usb 3-1: new full-speed USB device number 14 using dummy_hcd [ 177.799620][ T7822] loop5: detected capacity change from 0 to 1024 [ 177.820950][ T7821] loop1: detected capacity change from 0 to 512 [ 177.822810][ T7822] EXT4-fs (loop5): Ignoring removed orlov option [ 177.864842][ T7822] EXT4-fs (loop5): Ignoring removed nomblk_io_submit option [ 177.893252][ T7821] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,sysvgroups,minixdf,. Quota mode: writeback. [ 177.949421][ T7821] ext4 filesystem being mounted at /235/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 177.961921][ T5302] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 177.978901][ T7822] EXT4-fs (loop5): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 178.012253][ T5302] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.037200][ T26] audit: type=1800 audit(1747883682.137:30): pid=7821 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1260" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 178.071165][ T5302] usb 3-1: config 0 descriptor?? [ 178.152402][ T26] audit: type=1800 audit(1747883682.146:31): pid=7821 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1260" name="file2" dev="loop1" ino=16 res=0 errno=0 [ 178.369331][ T7836] device veth0_to_team entered promiscuous mode [ 178.465380][ T5302] [drm] vendor descriptor length:c3 data:02 0f 00 00 00 00 00 00 00 00 00 [ 178.481527][ T5302] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 178.523306][ T7828] chnl_net:caif_netlink_parms(): no params data found [ 178.560264][ T7844] loop1: detected capacity change from 0 to 512 [ 178.618950][ T7844] EXT4-fs (loop1): inline encryption not supported [ 178.637734][ T7844] EXT4-fs (loop1): error: could not find journal device path: error -2 [ 178.689655][ T5302] [drm:udl_init] *ERROR* Selecting channel failed [ 178.704735][ T5302] [drm] Initialized udl 0.0.1 20120220 for 3-1:0.0 on minor 2 [ 178.712902][ T5302] [drm] Initialized udl on minor 2 [ 178.732640][ T5302] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 178.746457][ T5302] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 178.757876][ T7851] loop5: detected capacity change from 0 to 4096 [ 178.758779][ T5302] usb 3-1: USB disconnect, device number 14 [ 178.812601][ T7828] bridge0: port 1(bridge_slave_0) entered blocking state [ 178.819985][ T7828] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.827828][ T7828] device bridge_slave_0 entered promiscuous mode [ 178.862427][ T7828] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.895341][ T7851] ntfs3: loop5: Different NTFS' sector size (4096) and media sector size (512) [ 178.904532][ T7828] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.912708][ T7828] device bridge_slave_1 entered promiscuous mode [ 179.024459][ T7828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 179.034079][ T7851] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 179.065496][ T7828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 179.074507][ T7859] ntfs3: loop5: ino=1d, "file1" Internal error [ 179.103316][ T7859] ntfs3: loop5: ntfs_sync_inode r=1d failed, -22. [ 179.165343][ T4955] ntfs3: loop5: ntfs_sync_fs r=1a failed, -22. [ 179.166952][ T7828] team0: Port device team_slave_0 added [ 179.182532][ T4955] ntfs3: loop5: ntfs_evict_inode r=1a failed, -22. [ 179.203917][ T7828] team0: Port device team_slave_1 added [ 179.269088][ T7828] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 179.308584][ T7828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 179.395549][ T7828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 179.416979][ T7828] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 179.426167][ T7828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 179.512913][ T7828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 179.531376][ T7866] loop5: detected capacity change from 0 to 128 [ 179.618163][ T7828] device hsr_slave_0 entered promiscuous mode [ 179.665960][ T7828] device hsr_slave_1 entered promiscuous mode [ 179.705423][ T26] audit: type=1326 audit(1747883683.708:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7874 comm="syz.5.1280" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2db98b5969 code=0x0 [ 179.727287][ T7828] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 179.747046][ T7828] Cannot create hsr debugfs directory [ 179.797849][ T7880] loop3: detected capacity change from 0 to 256 [ 180.068687][ T6293] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 180.101600][ T7828] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 180.112387][ T7828] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 180.117303][ T7869] loop2: detected capacity change from 0 to 32768 [ 180.135351][ T7828] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 180.152000][ T7869] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop2 scanned by syz.2.1275 (7869) [ 180.178494][ T7828] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 180.224413][ T7869] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 180.250720][ T5298] Bluetooth: hci4: command 0x0409 tx timeout [ 180.252162][ T7869] BTRFS info (device loop2): using free space tree [ 180.287182][ T7869] BTRFS info (device loop2): has skinny extents [ 180.301647][ T7828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 180.335030][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 180.355641][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 180.378549][ T7828] 8021q: adding VLAN 0 to HW filter on device team0 [ 180.420375][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 180.435814][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 180.460904][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 180.468169][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 180.486802][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 180.495628][ T7869] BTRFS info (device loop2): enabling ssd optimizations [ 180.505721][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 180.518422][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 180.527287][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 180.534419][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 180.575089][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 180.614887][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 180.638347][ T7903] loop5: detected capacity change from 0 to 16 [ 180.646132][ T6293] usb 2-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 180.655208][ T6293] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.696515][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 180.722427][ T7903] erofs: (device loop5): mounted with root inode @ nid 36. [ 180.724090][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 180.738139][ T6293] usb 2-1: Product: syz [ 180.752891][ T6293] usb 2-1: Manufacturer: syz [ 180.757582][ T6293] usb 2-1: SerialNumber: syz [ 180.777278][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 180.786770][ T6293] usb 2-1: config 0 descriptor?? [ 180.795805][ T4185] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 10 /dev/loop2 scanned by udevd (4185) [ 180.807809][ T26] audit: type=1800 audit(1747883684.728:33): pid=7903 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1283" name="file1" dev="loop5" ino=86 res=0 errno=0 [ 180.857930][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 180.878149][ T7882] loop3: detected capacity change from 0 to 32768 [ 180.903459][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 180.945585][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 180.953962][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 180.995258][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 181.051340][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 181.062693][ T7828] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 181.084771][ T6293] usb-storage 2-1:0.0: USB Mass Storage device detected [ 181.176458][ T7882] XFS (loop3): Mounting V5 Filesystem [ 181.340626][ T4214] usb 2-1: USB disconnect, device number 15 [ 181.378062][ T7882] XFS (loop3): Ending clean mount [ 181.395392][ T7882] XFS (loop3): Quotacheck needed: Please wait. [ 181.457111][ T7882] XFS (loop3): Quotacheck: Done. [ 181.489705][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 181.497629][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 181.515796][ T7828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 181.544171][ T5298] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 181.637792][ T7929] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1287'. [ 181.828023][ T4169] XFS (loop3): Unmounting Filesystem [ 181.830960][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 181.833566][ T5298] usb 6-1: Using ep0 maxpacket: 16 [ 181.844468][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 181.861694][ T7936] loop2: detected capacity change from 0 to 2048 [ 181.890182][ T7828] device veth0_vlan entered promiscuous mode [ 181.905451][ T7936] UDF-fs: bad mount option "18446744073709551615ÿÿ" or missing value [ 181.915660][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 181.926083][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 181.963650][ T7828] device veth1_vlan entered promiscuous mode [ 181.972901][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 181.982454][ T5298] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 181.982876][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 181.994921][ T5298] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 182.002544][ T7938] loop1: detected capacity change from 0 to 64 [ 182.020100][ T5298] usb 6-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 182.032093][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 182.062235][ T5298] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.077206][ T7828] device veth0_macvtap entered promiscuous mode [ 182.093867][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 182.099241][ T5298] usb 6-1: config 0 descriptor?? [ 182.108455][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 182.131362][ T7828] device veth1_macvtap entered promiscuous mode [ 182.149118][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 182.160568][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 182.192041][ T7828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 182.211487][ T7828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.224221][ T7828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 182.242187][ T7828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.257012][ T7828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 182.272205][ T7828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.282256][ T7828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 182.292794][ T7828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.302637][ T7828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 182.313708][ T7828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.326793][ T7828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 182.340797][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 182.350060][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 182.404581][ T7828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 182.434255][ T7828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.451491][ T7948] mmap: syz.2.1295 (7948) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 182.451986][ T7828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 182.475243][ T4211] Bluetooth: hci4: command 0x041b tx timeout [ 182.481740][ T7828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.500969][ T7828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 182.520547][ T7828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.533748][ T7828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 182.547656][ T7828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.562447][ T7828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 182.578724][ T7828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.594239][ T5298] hid-picolcd 0003:04D8:F002.000D: unknown main item tag 0x0 [ 182.602409][ T5298] hid-picolcd 0003:04D8:F002.000D: unknown main item tag 0x0 [ 182.609832][ T5298] hid-picolcd 0003:04D8:F002.000D: unknown main item tag 0x0 [ 182.618183][ T7828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 182.628103][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 182.637539][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 182.645763][ T5298] hid-picolcd 0003:04D8:F002.000D: unknown main item tag 0x0 [ 182.653179][ T5298] hid-picolcd 0003:04D8:F002.000D: unknown main item tag 0x0 [ 182.662804][ T7828] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.672006][ T7828] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.681191][ T5298] hid-picolcd 0003:04D8:F002.000D: unknown main item tag 0x0 [ 182.689269][ T7828] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.712262][ T7828] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.751049][ T7953] loop2: detected capacity change from 0 to 512 [ 182.776477][ T5298] hid-picolcd 0003:04D8:F002.000D: No report with id 0xf3 found [ 182.795274][ T5298] hid-picolcd 0003:04D8:F002.000D: No report with id 0xf4 found [ 182.811730][ T5298] usb 6-1: USB disconnect, device number 10 [ 182.873493][ T4375] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 182.873496][ T7953] EXT4-fs (loop2): bad s_want_extra_isize: 11962 [ 182.902916][ T4375] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 182.914508][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 182.932457][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 182.934542][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 182.988702][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 183.330760][ T7969] loop6: detected capacity change from 0 to 256 [ 183.372785][ T7969] exfat: Deprecated parameter 'namecase' [ 183.378548][ T7969] exfat: Deprecated parameter 'utf8' [ 183.385373][ T7971] loop2: detected capacity change from 0 to 128 [ 183.455294][ T7969] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xdc42f586, utbl_chksum : 0xe619d30d) [ 183.500656][ T4364] Bluetooth: hci1: command 0x0406 tx timeout [ 183.501044][ T5298] Bluetooth: hci2: command 0x0406 tx timeout [ 183.583922][ T7971] VFS: Found a Xenix FS (block size = 512) on device loop2 [ 183.806770][ T7503] sysv_free_block: trying to free block not in datazone [ 183.843631][ T7503] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 184.276025][ T8011] loop1: detected capacity change from 0 to 1024 [ 184.308905][ T8013] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1321'. [ 184.376287][ T8013] netlink: 13 bytes leftover after parsing attributes in process `syz.5.1321'. [ 184.397013][ T8008] loop6: detected capacity change from 0 to 32768 [ 184.429083][ T8015] loop2: detected capacity change from 0 to 256 [ 184.484835][ T8008] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 184.523783][ T8008] OCFS2: ERROR (device loop6): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #2304 has bad signature [ 184.540201][ T8008] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 184.551392][ T8008] OCFS2: File system is now read-only. [ 184.556880][ T8008] (syz.6.1318,8008,1):ocfs2_search_chain:1785 ERROR: status = -30 [ 184.565470][ T8008] (syz.6.1318,8008,1):ocfs2_search_chain:1871 ERROR: status = -30 [ 184.573352][ T8008] (syz.6.1318,8008,1):ocfs2_claim_suballoc_bits:1940 ERROR: status = -30 [ 184.581870][ T8008] (syz.6.1318,8008,1):ocfs2_claim_suballoc_bits:1983 ERROR: status = -30 [ 184.590316][ T8008] (syz.6.1318,8008,1):__ocfs2_claim_clusters:2355 ERROR: status = -30 [ 184.598557][ T8008] (syz.6.1318,8008,1):__ocfs2_claim_clusters:2363 ERROR: status = -30 [ 184.606851][ T8008] (syz.6.1318,8008,1):ocfs2_local_alloc_new_window:1203 ERROR: status = -30 [ 184.615877][ T8008] (syz.6.1318,8008,1):ocfs2_local_alloc_new_window:1228 ERROR: status = -30 [ 184.624660][ T8008] (syz.6.1318,8008,1):ocfs2_local_alloc_slide_window:1302 ERROR: status = -30 [ 184.633818][ T8008] (syz.6.1318,8008,1):ocfs2_local_alloc_slide_window:1321 ERROR: status = -30 [ 184.643537][ T8008] (syz.6.1318,8008,1):ocfs2_reserve_local_alloc_bits:671 ERROR: status = -30 [ 184.654092][ T8008] (syz.6.1318,8008,1):ocfs2_reserve_local_alloc_bits:709 ERROR: status = -30 [ 184.664202][ T8008] (syz.6.1318,8008,1):ocfs2_reserve_clusters_with_limit:1166 ERROR: status = -30 [ 184.673450][ T8008] (syz.6.1318,8008,1):ocfs2_reserve_clusters_with_limit:1215 ERROR: status = -30 [ 184.682635][ T8008] (syz.6.1318,8008,1):ocfs2_symlink:1911 ERROR: status = -30 [ 184.690182][ T8008] (syz.6.1318,8008,1):ocfs2_symlink:2065 ERROR: status = -30 [ 184.708983][ T4213] Bluetooth: hci4: command 0x040f tx timeout [ 184.779654][ T144] hfsplus: b-tree write err: -5, ino 4 [ 184.821377][ T7828] (syz-executor,7828,0):ocfs2_inode_is_valid_to_delete:872 ERROR: Skipping delete of system file 72 [ 184.842043][ T7828] ocfs2: Unmounting device (7,6) on (node local) [ 185.135010][ T8039] loop2: detected capacity change from 0 to 128 [ 185.149576][ T8040] loop3: detected capacity change from 0 to 512 [ 185.225803][ T8040] EXT4-fs (loop3): Ignoring removed orlov option [ 185.234205][ T8039] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 185.272122][ T8044] loop5: detected capacity change from 0 to 1024 [ 185.323121][ T8040] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.1332: bg 0: block 411: padding at end of block bitmap is not set [ 185.371733][ T8040] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: comm syz.3.1332: inode #1: comm syz.3.1332: iget: illegal inode # [ 185.379236][ T8039] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 185.410412][ T8039] ext2 filesystem being mounted at /20/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 185.449402][ T8040] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.1332: error while reading EA inode 1 err=-117 [ 185.532264][ T8040] EXT4-fs (loop3): 1 orphan inode deleted [ 185.538608][ T8040] EXT4-fs (loop3): mounted filesystem without journal. Opts: orlov,nombcache,debug_want_extra_isize=0x000000000000005c,grpquota,barrier,usrjquota=,jqfmt=vfsold,minixdf,,errors=continue. Quota mode: writeback. [ 185.605449][ T144] hfsplus: bad catalog file entry [ 185.776680][ T8040] EXT4-fs (loop3): shut down requested (2) [ 185.872766][ T8059] batman_adv: batadv0: Adding interface: gretap1 [ 185.885397][ T8059] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 185.960979][ T8059] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 186.168044][ T8063] loop2: detected capacity change from 0 to 8192 [ 186.219812][ T8049] loop1: detected capacity change from 0 to 32768 [ 186.233029][ T8063] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 186.241804][ T8073] loop3: detected capacity change from 0 to 1024 [ 186.356262][ T8049] XFS (loop1): Mounting V5 Filesystem [ 186.365379][ T6293] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 186.414389][ T4370] usb 6-1: new full-speed USB device number 11 using dummy_hcd [ 186.539176][ T8083] loop3: detected capacity change from 0 to 64 [ 186.563299][ T4213] kernel write not supported for file 50/task/51/clear_refs (pid: 4213 comm: kworker/0:5) [ 186.590931][ T8049] XFS (loop1): Ending clean mount [ 186.608544][ T8087] loop2: detected capacity change from 0 to 256 [ 186.643395][ T6293] usb 7-1: Using ep0 maxpacket: 8 [ 186.759557][ T4174] XFS (loop1): Unmounting Filesystem [ 186.771921][ T6293] usb 7-1: New USB device found, idVendor=05ac, idProduct=0247, bcdDevice=b0.23 [ 186.781002][ T6293] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.822669][ T6293] usb 7-1: config 0 descriptor?? [ 186.875411][ T4370] usb 6-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 186.887819][ T6293] input: bcm5974 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input25 [ 186.916853][ T4370] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.930276][ T5302] Bluetooth: hci4: command 0x0419 tx timeout [ 186.945067][ T4370] usb 6-1: config 0 descriptor?? [ 187.115592][ T3531] bcm5974 7-1:0.0: could not read from device [ 187.178505][ T3531] bcm5974 7-1:0.0: could not read from device [ 187.197352][ T6293] usb 7-1: USB disconnect, device number 2 [ 187.210095][ T3531] bcm5974 7-1:0.0: could not read from device [ 187.229459][ T3531] bcm5974 7-1:0.0: could not read from device [ 187.309717][ T4370] [drm] vendor descriptor length:c3 data:02 0f 00 00 00 00 00 00 00 00 00 [ 187.331006][ T4370] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 187.530834][ T4370] [drm:udl_init] *ERROR* Selecting channel failed [ 187.538795][ T4370] [drm] Initialized udl 0.0.1 20120220 for 6-1:0.0 on minor 2 [ 187.538824][ T4370] [drm] Initialized udl on minor 2 [ 187.552156][ T4370] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 187.581446][ T4370] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 187.601549][ T4370] usb 6-1: USB disconnect, device number 11 [ 187.620443][ T6293] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffed [ 187.643197][ T6293] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffed [ 187.659662][ T6293] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 187.814883][ T8105] loop3: detected capacity change from 0 to 4096 [ 187.852420][ T8105] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512) [ 188.132142][ T8113] loop2: detected capacity change from 0 to 4096 [ 188.201667][ T8113] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 188.233897][ T8118] device veth0_to_team entered promiscuous mode [ 188.263770][ T8122] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1366'. [ 188.899193][ T5298] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 188.992825][ T8154] device veth0_to_team entered promiscuous mode [ 189.059613][ T4364] usb 2-1: new full-speed USB device number 16 using dummy_hcd [ 189.235947][ T8161] loop3: detected capacity change from 0 to 4096 [ 189.356773][ T8169] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 189.408400][ T8161] NILFS error (device loop3): nilfs_readdir: zero-length directory entry [ 189.446844][ T4364] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 189.461552][ T8161] Remounting filesystem read-only [ 189.472412][ T4364] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.504104][ T4364] usb 2-1: config 0 descriptor?? [ 189.505281][ T8173] loop2: detected capacity change from 0 to 1024 [ 189.515870][ T5298] usb 6-1: New USB device found, idVendor=1943, idProduct=2250, bcdDevice= 0.01 [ 189.540476][ T5298] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.548633][ T5298] usb 6-1: Product: syz [ 189.568256][ T5298] usb 6-1: Manufacturer: syz [ 189.578332][ T5298] usb 6-1: SerialNumber: syz [ 189.591713][ T5298] usb 6-1: config 0 descriptor?? [ 189.618198][ T8173] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 189.649849][ T5298] go7007 6-1:0.0: Sensoray 2250 found [ 189.655377][ T5298] go7007: probe of 6-1:0.0 failed with error -12 [ 189.676233][ T8173] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 189.732771][ T8173] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 189.747983][ T8173] EXT4-fs (loop2): This should not happen!! Data will be lost [ 189.747983][ T8173] [ 189.757869][ T8173] EXT4-fs (loop2): Total free blocks count 0 [ 189.763968][ T8173] EXT4-fs (loop2): Free/Dirty block details [ 189.770691][ T8173] EXT4-fs (loop2): free_blocks=68451041280 [ 189.776729][ T8173] EXT4-fs (loop2): dirty_blocks=80 [ 189.781934][ T8173] EXT4-fs (loop2): Block reservation details [ 189.788269][ T8173] EXT4-fs (loop2): i_reserved_data_blocks=5 [ 189.827453][ T4375] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 60 with error 28 [ 189.853152][ T4375] EXT4-fs (loop2): This should not happen!! Data will be lost [ 189.853152][ T4375] [ 189.861504][ T4364] [drm] vendor descriptor length:c3 data:02 0f 00 00 00 00 00 00 00 00 00 [ 189.874372][ T5298] usb 6-1: USB disconnect, device number 12 [ 189.899515][ T4364] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 190.103677][ T4364] [drm:udl_init] *ERROR* Selecting channel failed [ 190.129654][ T4364] [drm] Initialized udl 0.0.1 20120220 for 2-1:0.0 on minor 2 [ 190.148889][ T4364] [drm] Initialized udl on minor 2 [ 190.172905][ T4364] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 190.187550][ T4364] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 190.202333][ T4364] usb 2-1: USB disconnect, device number 16 [ 190.803524][ T8225] loop1: detected capacity change from 0 to 64 [ 190.856109][ T8225] hfs: request for non-existent node 1061 in B*Tree [ 190.863391][ T8225] hfs: request for non-existent node 1061 in B*Tree [ 190.870747][ T8225] hfs: get root inode failed [ 191.066247][ T144] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.133662][ T8234] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.153970][ T8234] device bridge_slave_0 left promiscuous mode [ 191.160423][ T8234] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.177890][ T8234] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 191.227486][ T144] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.229629][ T4364] usb 3-1: new full-speed USB device number 15 using dummy_hcd [ 191.326673][ T144] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.466867][ T8247] loop1: detected capacity change from 0 to 256 [ 191.475402][ T144] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.489349][ T8249] loop3: detected capacity change from 0 to 256 [ 191.542359][ T8249] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 191.609185][ T8251] loop6: detected capacity change from 0 to 512 [ 191.646852][ T4364] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 191.673021][ T4364] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 191.695126][ T4364] usb 3-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 191.704752][ T4364] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.718761][ T8251] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 191.730065][ T4364] usb 3-1: config 0 descriptor?? [ 191.772732][ T8251] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802e12c, mo2=0002] [ 191.792315][ T8251] System zones: 1-12 [ 191.858073][ T8251] EXT4-fs (loop6): orphan cleanup on readonly fs [ 191.880374][ T8251] EXT4-fs error (device loop6): ext4_validate_block_bitmap:438: comm syz.6.1425: bg 0: block 361: padding at end of block bitmap is not set [ 191.942870][ T8251] EXT4-fs (loop6): Remounting filesystem read-only [ 192.020316][ T8251] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6183: Corrupt filesystem [ 192.098664][ T8251] EXT4-fs (loop6): Remounting filesystem read-only [ 192.109696][ T8244] chnl_net:caif_netlink_parms(): no params data found [ 192.113190][ T8251] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #11: comm syz.6.1425: invalid indirect mapped block 12 (level 1) [ 192.145758][ T8268] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1429'. [ 192.162658][ T8251] EXT4-fs (loop6): Remounting filesystem read-only [ 192.169209][ T8251] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #11: comm syz.6.1425: invalid indirect mapped block 2 (level 2) [ 192.184750][ T8268] device bridge0 entered promiscuous mode [ 192.191186][ T8251] EXT4-fs (loop6): Remounting filesystem read-only [ 192.197266][ T8268] device macsec2 entered promiscuous mode [ 192.203184][ T8251] EXT4-fs (loop6): 1 truncate cleaned up [ 192.209332][ T8251] EXT4-fs (loop6): mounted filesystem without journal. Opts: noload,max_batch_time=0x0000000000000007,inode_readahead_blks=0x0000000000000040,errors=remount-ro,debug_want_extra_isize=0x0000000000000008. Quota mode: none. [ 192.268515][ T4364] elan 0003:04F3:0755.000E: unknown main item tag 0x0 [ 192.275355][ T4364] elan 0003:04F3:0755.000E: unknown main item tag 0x0 [ 192.289109][ T4364] elan 0003:04F3:0755.000E: unknown main item tag 0x0 [ 192.295936][ T4364] elan 0003:04F3:0755.000E: unknown main item tag 0x0 [ 192.308285][ T4364] elan 0003:04F3:0755.000E: unknown main item tag 0x0 [ 192.316961][ T4364] elan 0003:04F3:0755.000E: failed to start in urb: -90 [ 192.327322][ T4364] elan 0003:04F3:0755.000E: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.2-1/input0 [ 192.500031][ T8278] loop6: detected capacity change from 0 to 512 [ 192.531644][ T4211] usb 3-1: USB disconnect, device number 15 [ 192.587692][ T8278] EXT4-fs (loop6): Ignoring removed oldalloc option [ 192.610796][ T8276] loop1: detected capacity change from 0 to 4096 [ 192.628859][ T8280] loop3: detected capacity change from 0 to 2048 [ 192.643380][ T8278] EXT4-fs (loop6): 1 truncate cleaned up [ 192.662289][ T8278] EXT4-fs (loop6): mounted filesystem without journal. Opts: quota,bsdgroups,nouid32,errors=remount-ro,jqfmt=vfsv1,oldalloc,stripe=0x0000000000000005,. Quota mode: writeback. [ 192.700254][ T8276] ntfs3: loop1: Different NTFS' sector size (1024) and media sector size (512) [ 192.743552][ T8244] bridge0: port 1(bridge_slave_0) entered blocking state [ 192.780706][ T8280] EXT4-fs (loop3): mounted filesystem without journal. Opts: min_batch_time=0x000000000000000d,mb_optimize_scan=0x0000000000000001,norecovery,,errors=continue. Quota mode: none. [ 192.866066][ T8244] bridge0: port 1(bridge_slave_0) entered disabled state [ 192.923353][ T8244] device bridge_slave_0 entered promiscuous mode [ 192.932414][ T8244] bridge0: port 2(bridge_slave_1) entered blocking state [ 192.939679][ T8244] bridge0: port 2(bridge_slave_1) entered disabled state [ 192.958819][ T8244] device bridge_slave_1 entered promiscuous mode [ 193.165611][ T8244] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 193.233865][ T8244] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 193.257660][ T8298] delete_channel: no stack [ 193.399614][ T8302] tipc: Started in network mode [ 193.422963][ T8302] tipc: Node identity ac14140f, cluster identity 4711 [ 193.430620][ T8302] tipc: New replicast peer: 255.255.255.255 [ 193.439440][ T8302] tipc: Enabled bearer , priority 10 [ 193.462191][ T144] batman_adv: batadv0: Removing interface: gretap1 [ 193.485623][ T8311] loop6: detected capacity change from 0 to 512 [ 193.502255][ T8244] team0: Port device team_slave_0 added [ 193.512002][ T8244] team0: Port device team_slave_1 added [ 193.553284][ T8311] EXT4-fs (loop6): Ignoring removed bh option [ 193.579801][ T8311] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 193.600398][ T4213] Bluetooth: hci0: command 0x0409 tx timeout [ 193.668692][ T8244] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 193.675723][ T8244] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 193.715418][ T8244] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 193.732216][ T8244] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 193.739306][ T8244] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 193.764775][ T8311] EXT4-fs (loop6): 1 truncate cleaned up [ 193.766065][ T8244] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 193.781282][ T8311] EXT4-fs (loop6): mounted filesystem without journal. Opts: quota,resgid=0x000000000000ee00,bh,noload,data_err=ignore,noload,,errors=continue. Quota mode: writeback. [ 193.826143][ T8324] loop2: detected capacity change from 0 to 1024 [ 193.914548][ T8244] device hsr_slave_0 entered promiscuous mode [ 193.977442][ T8244] device hsr_slave_1 entered promiscuous mode [ 194.020425][ T8244] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 194.028028][ T8244] Cannot create hsr debugfs directory [ 194.066585][ T154] hfsplus: b-tree write err: -5, ino 4 [ 194.080534][ T8328] loop3: detected capacity change from 0 to 2048 [ 194.173533][ T8334] loop1: detected capacity change from 0 to 256 [ 194.635419][ T4370] tipc: Node number set to 2886997007 [ 194.926826][ T144] device hsr_slave_0 left promiscuous mode [ 194.937421][ T144] device hsr_slave_1 left promiscuous mode [ 194.944868][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 194.955829][ T144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 194.970310][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 194.978209][ T144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 194.989924][ T144] device bridge_slave_1 left promiscuous mode [ 194.996964][ T144] bridge0: port 2(bridge_slave_1) entered disabled state [ 195.006113][ T144] device bridge_slave_0 left promiscuous mode [ 195.012509][ T144] bridge0: port 1(bridge_slave_0) entered disabled state [ 195.034677][ T144] device veth1_macvtap left promiscuous mode [ 195.040983][ T144] device veth0_macvtap left promiscuous mode [ 195.050251][ T144] device veth1_vlan left promiscuous mode [ 195.056082][ T144] device veth0_vlan left promiscuous mode [ 195.446965][ T144] team0 (unregistering): Port device team_slave_1 removed [ 195.458244][ T8352] loop1: detected capacity change from 0 to 40427 [ 195.481709][ T144] team0 (unregistering): Port device team_slave_0 removed [ 195.516216][ T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 195.528918][ T8352] F2FS-fs (loop1): invalid crc value [ 195.558488][ T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 195.571662][ T8352] F2FS-fs (loop1): Found nat_bits in checkpoint [ 195.654831][ T8374] loop2: detected capacity change from 0 to 32768 [ 195.687831][ T8352] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 195.695548][ T144] bond0 (unregistering): Released all slaves [ 195.763432][ T26] audit: type=1804 audit(1747883698.712:34): pid=8352 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1452" name="/newroot/278/bus/file0" dev="loop1" ino=10 res=1 errno=0 [ 195.804740][ T8244] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 195.814650][ T4174] attempt to access beyond end of device [ 195.814650][ T4174] loop1: rw=2049, want=45104, limit=40427 [ 195.821143][ T8244] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 195.829826][ T5302] Bluetooth: hci0: command 0x041b tx timeout [ 195.847055][ T8244] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 195.928174][ T8374] XFS (loop2): Mounting V5 Filesystem [ 195.929173][ T8244] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 196.198635][ T8374] XFS (loop2): Ending clean mount [ 196.218384][ T8374] XFS (loop2): Quotacheck needed: Please wait. [ 196.248305][ T8392] loop3: detected capacity change from 0 to 32768 [ 196.449528][ T8392] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 196.473889][ T8374] XFS (loop2): Quotacheck: Done. [ 196.535866][ T8392] OCFS2: ERROR (device loop3): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #2304 has bad signature [ 196.553765][ T8392] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 196.563603][ T8392] OCFS2: File system is now read-only. [ 196.569216][ T8392] (syz.3.1462,8392,1):ocfs2_search_chain:1785 ERROR: status = -30 [ 196.577080][ T8392] (syz.3.1462,8392,1):ocfs2_search_chain:1871 ERROR: status = -30 [ 196.584909][ T8392] (syz.3.1462,8392,1):ocfs2_claim_suballoc_bits:1940 ERROR: status = -30 [ 196.593426][ T8392] (syz.3.1462,8392,1):ocfs2_claim_suballoc_bits:1983 ERROR: status = -30 [ 196.601914][ T8392] (syz.3.1462,8392,1):__ocfs2_claim_clusters:2355 ERROR: status = -30 [ 196.610241][ T8392] (syz.3.1462,8392,1):__ocfs2_claim_clusters:2363 ERROR: status = -30 [ 196.618459][ T8392] (syz.3.1462,8392,1):ocfs2_local_alloc_new_window:1203 ERROR: status = -30 [ 196.627162][ T8392] (syz.3.1462,8392,1):ocfs2_local_alloc_new_window:1228 ERROR: status = -30 [ 196.635921][ T8392] (syz.3.1462,8392,1):ocfs2_local_alloc_slide_window:1302 ERROR: status = -30 [ 196.644887][ T8392] (syz.3.1462,8392,1):ocfs2_local_alloc_slide_window:1321 ERROR: status = -30 [ 196.653854][ T8392] (syz.3.1462,8392,1):ocfs2_reserve_local_alloc_bits:671 ERROR: status = -30 [ 196.662667][ T8392] (syz.3.1462,8392,1):ocfs2_reserve_local_alloc_bits:709 ERROR: status = -30 [ 196.673160][ T8392] (syz.3.1462,8392,1):ocfs2_reserve_clusters_with_limit:1166 ERROR: status = -30 [ 196.682372][ T8392] (syz.3.1462,8392,1):ocfs2_reserve_clusters_with_limit:1215 ERROR: status = -30 [ 196.691512][ T8392] (syz.3.1462,8392,1):ocfs2_symlink:1911 ERROR: status = -30 [ 196.699076][ T8392] (syz.3.1462,8392,1):ocfs2_symlink:2065 ERROR: status = -30 [ 196.705707][ T8244] 8021q: adding VLAN 0 to HW filter on device bond0 [ 196.833029][ T7503] XFS (loop2): Unmounting Filesystem [ 196.853711][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 196.865316][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 196.879088][ T4169] (syz-executor,4169,1):ocfs2_inode_is_valid_to_delete:872 ERROR: Skipping delete of system file 72 [ 196.889638][ T8244] 8021q: adding VLAN 0 to HW filter on device team0 [ 196.922339][ T4169] ocfs2: Unmounting device (7,3) on (node local) [ 196.998738][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 197.037618][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 197.086238][ T4375] bridge0: port 1(bridge_slave_0) entered blocking state [ 197.093381][ T4375] bridge0: port 1(bridge_slave_0) entered forwarding state [ 197.192716][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 197.247173][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 197.302471][ T4375] bridge0: port 2(bridge_slave_1) entered blocking state [ 197.309591][ T4375] bridge0: port 2(bridge_slave_1) entered forwarding state [ 197.398527][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 197.429274][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 197.514853][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 197.633905][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 197.636214][ T8394] loop6: detected capacity change from 0 to 40427 [ 197.702695][ T1428] ieee802154 phy0 wpan0: encryption failed: -22 [ 197.712957][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 197.751593][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 197.783053][ T8394] F2FS-fs (loop6): Wrong SSA boundary, start(3584) end(4096) blocks(0) [ 197.807315][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 197.813769][ T8394] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 197.847224][ T8394] F2FS-fs (loop6): build fault injection attr: rate: 0, type: 0x6 [ 197.891885][ T8394] F2FS-fs (loop6): invalid crc value [ 197.918625][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 197.958944][ T8394] F2FS-fs (loop6): Found nat_bits in checkpoint [ 197.974264][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 198.023319][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 198.039660][ T5302] Bluetooth: hci0: command 0x040f tx timeout [ 198.093354][ T8244] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 198.179352][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 198.200987][ T8394] F2FS-fs (loop6): Start checkpoint disabled! [ 198.208492][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 198.260629][ T8402] loop1: detected capacity change from 0 to 32768 [ 198.274015][ T8434] loop2: detected capacity change from 0 to 1024 [ 198.278728][ T8394] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 198.317547][ T8394] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6 [ 198.408846][ T8434] EXT4-fs (loop2): mounted filesystem without journal. Opts: noinit_itable,dax=inode,nolazytime,abort,dax=inode,lazytime,noload,bsddf,noauto_da_alloc,,errors=continue. Quota mode: none. [ 198.427974][ T26] audit: type=1800 audit(1747883701.191:35): pid=8394 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1463" name="bus" dev="loop6" ino=14 res=0 errno=0 [ 198.513468][ T8402] XFS (loop1): Mounting V5 Filesystem [ 198.542148][ T4215] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 198.712530][ T8434] EXT4-fs (loop2): shut down requested (0) [ 198.714461][ T8402] XFS (loop1): Ending clean mount [ 198.776739][ T155] attempt to access beyond end of device [ 198.776739][ T155] loop6: rw=2049, want=40984, limit=40427 [ 198.816517][ T4215] usb 4-1: Using ep0 maxpacket: 32 [ 198.868802][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 198.886997][ T4174] XFS (loop1): Unmounting Filesystem [ 198.888146][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 198.949452][ T4215] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 198.974088][ T8244] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 198.987358][ T4215] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 199.018993][ T4215] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 199.083422][ T4215] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.162221][ T4215] usb 4-1: config 0 descriptor?? [ 199.205968][ T4215] hub 4-1:0.0: USB hub found [ 199.410152][ T8471] loop2: detected capacity change from 0 to 64 [ 199.440137][ T4215] hub 4-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 199.777215][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 199.789472][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 199.879745][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 199.924469][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 199.942793][ T4215] hid-generic 0003:046D:C31C.000F: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.3-1/input0 [ 199.964936][ T8244] device veth0_vlan entered promiscuous mode [ 199.979243][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 199.997121][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 200.017478][ T5302] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 200.023753][ T8244] device veth1_vlan entered promiscuous mode [ 200.074580][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 200.114318][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 200.135952][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 200.179347][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 200.213226][ T8244] device veth0_macvtap entered promiscuous mode [ 200.249856][ T8244] device veth1_macvtap entered promiscuous mode [ 200.274300][ T4214] Bluetooth: hci0: command 0x0419 tx timeout [ 200.280433][ T5302] usb 7-1: Using ep0 maxpacket: 16 [ 200.306038][ T4215] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 200.325150][ T4369] usb 4-1: USB disconnect, device number 13 [ 200.337184][ T8244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 200.380898][ T8244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.402201][ T8244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 200.426054][ T8244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.445250][ T5302] usb 7-1: config 0 has an invalid interface number: 2 but max is 0 [ 200.455515][ T8244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 200.464742][ T5302] usb 7-1: config 0 has no interface number 0 [ 200.472837][ T5302] usb 7-1: config 0 interface 2 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 200.488305][ T8244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.494777][ T5302] usb 7-1: config 0 interface 2 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 200.527621][ T8244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 200.528451][ T5302] usb 7-1: config 0 interface 2 has no altsetting 0 [ 200.551675][ T8244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.562530][ T5302] usb 7-1: New USB device found, idVendor=046d, idProduct=c517, bcdDevice= 0.08 [ 200.573212][ T4215] usb 2-1: Using ep0 maxpacket: 32 [ 200.582499][ T5302] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.594347][ T8244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 200.616349][ T8244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.617890][ T5302] usb 7-1: config 0 descriptor?? [ 200.639421][ T8244] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 200.699977][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 200.701890][ T4215] usb 2-1: config index 0 descriptor too short (expected 156, got 27) [ 200.720108][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 200.740040][ T4215] usb 2-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 200.746497][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 200.773127][ T4215] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 200.783013][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 200.809955][ T4215] usb 2-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 200.838080][ T8244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 200.840278][ T8507] loop2: detected capacity change from 0 to 4096 [ 200.855394][ T8244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.867519][ T4215] usb 2-1: config 0 interface 0 has no altsetting 0 [ 200.898364][ T8507] ntfs3: loop2: Different NTFS' sector size (1024) and media sector size (512) [ 200.946393][ T8244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 200.983170][ T8244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.018654][ T8244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 201.051342][ T8244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.082497][ T8244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 201.115120][ T8244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.154484][ T8244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 201.186989][ T8244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.211011][ T8244] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 201.237342][ T5302] logitech-djreceiver 0003:046D:C517.0010: hidraw0: USB HID v0.05 Device [HID 046d:c517] on usb-dummy_hcd.6-1/input2 [ 201.261300][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 201.283134][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 201.330961][ T8244] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.383831][ T8244] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.399720][ T5298] usb 7-1: USB disconnect, device number 3 [ 201.439343][ T8244] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.491637][ T8244] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.507974][ T8511] fido_id[8511]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 201.845326][ C1] sched: RT throttling activated [ 202.132247][ T4375] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 202.218770][ T4375] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 202.305269][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 202.334455][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 202.355619][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 202.456159][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 202.717125][ T8510] loop3: detected capacity change from 0 to 262144 [ 202.767258][ T4215] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 202.790842][ T8510] F2FS-fs (loop3): invalid crc_offset: 135164 [ 202.803741][ T4215] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 202.813151][ T4215] usb 2-1: Product: syz [ 202.817462][ T4215] usb 2-1: Manufacturer: syz [ 202.866653][ T4215] usb 2-1: SerialNumber: syz [ 202.880240][ T8510] F2FS-fs (loop3): Found nat_bits in checkpoint [ 202.937572][ T4215] usb 2-1: config 0 descriptor?? [ 202.972129][ T8530] sctp: [Deprecated]: syz.2.1490 (pid 8530) Use of struct sctp_assoc_value in delayed_ack socket option. [ 202.972129][ T8530] Use struct sctp_sack_info instead [ 202.989596][ T8510] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 203.011231][ T4215] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 203.054937][ T8539] loop7: detected capacity change from 0 to 512 [ 203.076041][ T4215] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 203.188483][ T8539] EXT4-fs (loop7): inline encryption not supported [ 203.230401][ T4214] usb 2-1: USB disconnect, device number 17 [ 203.280229][ T4214] ldusb 2-1:0.0: LD USB Device #0 now disconnected [ 203.345172][ T8539] EXT4-fs (loop7): 1 orphan inode deleted [ 203.413318][ T8539] EXT4-fs (loop7): mounted filesystem without journal. Opts: inlinecrypt,dioread_nolock,,errors=continue. Quota mode: writeback. [ 203.430741][ T8539] ext4 filesystem being mounted at /1/file6 supports timestamps until 2038-01-19 (0x7fffffff) [ 203.563580][ T8539] EXT4-fs error (device loop7): ext4_lookup:1862: inode #2: comm syz.7.1492: deleted inode referenced: 16 [ 203.669280][ T5302] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 204.123037][ T5302] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 204.156575][ T5302] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 204.208562][ T5302] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 204.236962][ T5302] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 204.475607][ T5302] usb 3-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 204.491691][ T5302] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.516249][ T5302] usb 3-1: Product: syz [ 204.531210][ T5302] usb 3-1: Manufacturer: syz [ 204.543833][ T5302] usb 3-1: SerialNumber: syz [ 204.564984][ T5302] usb 3-1: config 0 descriptor?? [ 204.845750][ T8567] loop6: detected capacity change from 0 to 32768 [ 204.865673][ T5302] adutux 3-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 205.111852][ T5302] usb 3-1: USB disconnect, device number 16 [ 205.433425][ T5302] kernel write not supported for file /dsp (pid: 5302 comm: kworker/0:12) [ 205.645315][ T8601] loop7: detected capacity change from 0 to 32768 [ 205.699254][ T8620] loop6: detected capacity change from 0 to 4096 [ 205.742296][ T8620] ntfs3: loop6: Different NTFS' sector size (1024) and media sector size (512) [ 205.852805][ T8620] ntfs3: loop6: Mark volume as dirty due to NTFS errors [ 205.874259][ T8601] XFS (loop7): Mounting V5 Filesystem [ 206.051909][ T8601] XFS (loop7): Ending clean mount [ 206.078709][ T8601] XFS (loop7): Quotacheck needed: Please wait. [ 206.138161][ T8601] XFS (loop7): Quotacheck: Done. [ 206.299597][ T8244] XFS (loop7): Unmounting Filesystem [ 207.468975][ T8684] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1533'. [ 207.621055][ T8657] loop3: detected capacity change from 0 to 32768 [ 207.642408][ T8691] loop6: detected capacity change from 0 to 524287999 [ 207.660163][ T8689] loop1: detected capacity change from 0 to 736 [ 207.670289][ C1] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 207.681296][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 207.694541][ C1] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 207.705555][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 207.724469][ C1] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 207.736345][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 207.755666][ C1] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 207.766613][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 207.774276][ C1] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 207.786778][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 207.795380][ C1] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 207.806303][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 207.832279][ C0] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 207.843287][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 207.851422][ C1] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 207.862381][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 207.874855][ T8691] ldm_validate_partition_table(): Disk read failed. [ 207.910232][ C1] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 207.921194][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 207.935328][ C1] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 207.946433][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 207.996735][ T8691] Dev loop6: unable to read RDB block 0 [ 208.032623][ T8657] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 208.062100][ T8691] loop6: unable to read partition table [ 208.121030][ T8691] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 208.317458][ T4169] ocfs2: Unmounting device (7,3) on (node local) [ 208.374583][ T8705] loop6: detected capacity change from 0 to 512 [ 208.430552][ T8701] loop7: detected capacity change from 0 to 32768 [ 208.454827][ T8705] EXT4-fs (loop6): Ignoring removed mblk_io_submit option [ 208.528148][ T8705] EXT4-fs error (device loop6): ext4_get_branch:178: inode #13: block 2: comm syz.6.1541: invalid block [ 208.565025][ T8705] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #13: comm syz.6.1541: invalid indirect mapped block 10 (level 1) [ 208.692649][ T8705] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #13: comm syz.6.1541: invalid indirect mapped block 8 (level 1) [ 208.720177][ T8705] EXT4-fs (loop6): 1 truncate cleaned up [ 208.727122][ T8705] EXT4-fs (loop6): mounted filesystem without journal. Opts: mblk_io_submit,resuid=0x0000000000000000,,errors=continue. Quota mode: none. [ 208.928527][ T8722] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1547'. [ 209.055448][ T8726] loop3: detected capacity change from 0 to 512 [ 209.190744][ T8726] EXT4-fs (loop3): Ignoring removed bh option [ 209.240037][ T8726] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 209.278207][ T8732] bridge0: port 3(macsec0) entered blocking state [ 209.314323][ T8732] bridge0: port 3(macsec0) entered disabled state [ 209.327431][ T8726] EXT4-fs (loop3): 1 truncate cleaned up [ 209.385948][ T8726] EXT4-fs (loop3): mounted filesystem without journal. Opts: quota,resgid=0x000000000000ee00,bh,noload,data_err=ignore,noload,,errors=continue. Quota mode: writeback. [ 209.426358][ T8732] device macsec0 entered promiscuous mode [ 209.468120][ T8732] bridge0: port 3(macsec0) entered blocking state [ 209.475447][ T8732] bridge0: port 3(macsec0) entered forwarding state [ 209.630436][ T6293] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 209.845909][ T8713] loop1: detected capacity change from 0 to 40427 [ 209.884769][ T6293] usb 8-1: Using ep0 maxpacket: 32 [ 209.926082][ T8713] F2FS-fs (loop1): invalid crc value [ 209.982526][ T8713] F2FS-fs (loop1): Found nat_bits in checkpoint [ 209.993032][ T8741] loop6: detected capacity change from 0 to 32768 [ 210.015114][ T6293] usb 8-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 210.085420][ T6293] usb 8-1: config 0 interface 0 has no altsetting 0 [ 210.122656][ T6293] usb 8-1: New USB device found, idVendor=045e, idProduct=009d, bcdDevice= 0.00 [ 210.125090][ T8741] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop6 scanned by syz.6.1555 (8741) [ 210.181731][ T6293] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.261324][ T6293] usb 8-1: config 0 descriptor?? [ 210.269859][ T8713] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 210.319570][ T8741] BTRFS info (device loop6): using xxhash64 (xxhash64-generic) checksum algorithm [ 210.329437][ T8741] BTRFS info (device loop6): turning on flush-on-commit [ 210.336526][ T8741] BTRFS info (device loop6): enabling ssd optimizations [ 210.343485][ T8741] BTRFS info (device loop6): using spread ssd allocation scheme [ 210.351224][ T8741] BTRFS info (device loop6): using free space tree [ 210.357988][ T8741] BTRFS info (device loop6): has skinny extents [ 210.387310][ T4213] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 210.428727][ T4174] attempt to access beyond end of device [ 210.428727][ T4174] loop1: rw=2049, want=45104, limit=40427 [ 210.631071][ T8772] loop2: detected capacity change from 0 to 512 [ 210.675999][ T4213] usb 4-1: Using ep0 maxpacket: 8 [ 210.704628][ T8772] EXT4-fs (loop2): 1 orphan inode deleted [ 210.713304][ T8772] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 210.727269][ T8772] ext4 filesystem being mounted at /78/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 210.765867][ T8741] BTRFS error (device loop6): balance: invalid convert metadata profile single [ 210.786845][ T6293] microsoft 0003:045E:009D.0011: hidraw0: USB HID v0.80 Device [HID 045e:009d] on usb-dummy_hcd.7-1/input0 [ 210.814971][ T6293] microsoft 0003:045E:009D.0011: no inputs found [ 210.821450][ T6293] microsoft 0003:045E:009D.0011: could not initialize ff, continuing anyway [ 210.857799][ T4213] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 210.901552][ T4213] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 210.961150][ T4213] usb 4-1: New USB device found, idVendor=06cb, idProduct=81a7, bcdDevice= 0.00 [ 210.987128][ T4213] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.014260][ T4213] usb 4-1: config 0 descriptor?? [ 211.047710][ T5302] usb 8-1: USB disconnect, device number 2 [ 211.111172][ T8778] fido_id[8778]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/report_descriptor': No such file or directory [ 211.286963][ T8782] loop1: detected capacity change from 0 to 1024 [ 211.442627][ T9] hfsplus: b-tree write err: -5, ino 4 [ 211.465031][ T8784] loop6: detected capacity change from 0 to 64 [ 211.566312][ T4213] hid-rmi 0003:06CB:81A7.0012: unknown main item tag 0x0 [ 211.592132][ T4213] hid-rmi 0003:06CB:81A7.0012: unknown main item tag 0x0 [ 211.599989][ T26] audit: type=1804 audit(1747883713.529:36): pid=8784 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.1562" name="/newroot/68/file1/bus" dev="loop6" ino=8 res=1 errno=0 [ 211.621207][ C1] vkms_vblank_simulate: vblank timer overrun [ 211.628589][ T4213] hid-rmi 0003:06CB:81A7.0012: unknown main item tag 0x7 [ 211.664612][ T4213] hid-rmi 0003:06CB:81A7.0012: unknown main item tag 0x0 [ 211.692904][ T8789] bridge0: port 4(ip6gretap0) entered blocking state [ 211.699682][ T8789] bridge0: port 4(ip6gretap0) entered disabled state [ 211.727629][ T4213] hid-rmi 0003:06CB:81A7.0012: unknown main item tag 0x0 [ 211.746875][ T8789] device ip6gretap0 entered promiscuous mode [ 211.753558][ T4213] hid-rmi 0003:06CB:81A7.0012: unbalanced collection at end of report description [ 211.784207][ T4213] hid-rmi 0003:06CB:81A7.0012: parse failed [ 211.804612][ T8789] bridge0: port 4(ip6gretap0) entered blocking state [ 211.807537][ T4213] hid-rmi: probe of 0003:06CB:81A7.0012 failed with error -22 [ 211.811442][ T8789] bridge0: port 4(ip6gretap0) entered forwarding state [ 211.856915][ T4213] usb 4-1: USB disconnect, device number 14 [ 212.207000][ T4214] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 212.418637][ T4213] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 212.453819][ T8824] loop2: detected capacity change from 0 to 2048 [ 212.492566][ T8829] sp0: Synchronizing with TNC [ 212.533533][ T8824] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 212.621887][ T4214] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 212.644498][ T8837] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 212.654292][ T4214] usb 8-1: New USB device found, idVendor=0cf3, idProduct=1002, bcdDevice=4f.2c [ 212.664477][ T4214] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.696008][ T4214] usb 8-1: config 0 descriptor?? [ 212.878573][ T4213] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 212.893416][ T4213] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 212.911159][ T4214] usb 8-1: reset high-speed USB device number 3 using dummy_hcd [ 212.958489][ T4213] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 212.984299][ T4213] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 213.199143][ T4213] usb 7-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 213.210144][ T4213] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.218177][ T4213] usb 7-1: Product: syz [ 213.223255][ T4213] usb 7-1: Manufacturer: syz [ 213.227873][ T4213] usb 7-1: SerialNumber: syz [ 213.253056][ T4213] usb 7-1: config 0 descriptor?? [ 213.305402][ T8863] loop1: detected capacity change from 0 to 8192 [ 213.341555][ T8863] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 213.460663][ T8867] input: syz1 as /devices/virtual/input/input26 [ 213.562468][ T4213] adutux 7-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 213.740124][ T4214] usb 8-1: device descriptor read/64, error -71 [ 213.812303][ T4211] usb 7-1: USB disconnect, device number 4 [ 214.039696][ T8888] loop2: detected capacity change from 0 to 2048 [ 214.057487][ T4214] usb 8-1: reset high-speed USB device number 3 using dummy_hcd [ 214.180295][ T8888] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 214.323085][ T8884] loop3: detected capacity change from 0 to 40427 [ 214.367260][ T8884] F2FS-fs (loop3): Insane cp_payload (553648128 >= 504) [ 214.396661][ T8884] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 214.419840][ T8884] F2FS-fs (loop3): invalid crc value [ 214.446885][ T8884] F2FS-fs (loop3): Found nat_bits in checkpoint [ 214.581012][ T8884] F2FS-fs (loop3): Cannot turn on quotas: -2 on 2 [ 214.630651][ T8884] F2FS-fs (loop3): Start checkpoint disabled! [ 214.664019][ T8884] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 214.693171][ T8884] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 214.698442][ T4171] kernel read not supported for file /adsp1 (pid: 4171 comm: kworker/1:4) [ 214.774923][ T4211] usb 8-1: USB disconnect, device number 3 [ 214.908385][ T8912] loop2: detected capacity change from 0 to 1024 [ 215.008872][ T8914] loop1: detected capacity change from 0 to 2048 [ 215.023388][ T154] attempt to access beyond end of device [ 215.023388][ T154] loop3: rw=2049, want=40976, limit=40427 [ 215.082630][ T154] hfsplus: b-tree write err: -5, ino 4 [ 215.223332][ T8914] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 215.288649][ T8914] ext4 filesystem being mounted at /314/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 215.461632][ T8903] loop6: detected capacity change from 0 to 40427 [ 215.486497][ T8903] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12 [ 215.527372][ T8903] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 215.624200][ T8903] F2FS-fs (loop6): invalid crc value [ 215.679872][ T8928] serio: Serial port ptm0 [ 215.680012][ T8903] F2FS-fs (loop6): Found nat_bits in checkpoint [ 215.689840][ T4171] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 215.795722][ T8925] loop3: detected capacity change from 0 to 8192 [ 215.821389][ T8903] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 215.840876][ T8903] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 215.947543][ T8903] attempt to access beyond end of device [ 215.947543][ T8903] loop6: rw=2049, want=45104, limit=40427 [ 215.998368][ T8940] attempt to access beyond end of device [ 215.998368][ T8940] loop6: rw=2049, want=40968, limit=40427 [ 216.085867][ T4171] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 216.123395][ T4171] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 216.166753][ T4171] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 216.201296][ T8949] loop1: detected capacity change from 0 to 512 [ 216.203014][ T4171] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 216.247163][ T9] F2FS-fs (loop6): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 216.298580][ T9] F2FS-fs (loop6): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 216.304856][ T8921] loop2: detected capacity change from 0 to 32768 [ 216.309034][ T8949] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2228: inode #15: comm syz.1.1619: corrupted in-inode xattr [ 216.363621][ T8949] EXT4-fs error (device loop1): ext4_orphan_get:1406: comm syz.1.1619: couldn't read orphan inode 15 (err -117) [ 216.376187][ T8949] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 216.406237][ T4171] usb 8-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 216.426632][ T4171] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.434748][ T4171] usb 8-1: Product: syz [ 216.439161][ T4171] usb 8-1: Manufacturer: syz [ 216.443783][ T4171] usb 8-1: SerialNumber: syz [ 216.461273][ T4171] usb 8-1: config 0 descriptor?? [ 216.746344][ T4171] adutux 8-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 216.838094][ T8963] loop2: detected capacity change from 0 to 512 [ 216.921985][ T8963] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 216.944945][ T8963] EXT4-fs (loop2): Test dummy encryption mode enabled [ 216.985915][ T8963] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 217.022202][ T4214] usb 8-1: USB disconnect, device number 4 [ 217.061238][ T8963] EXT4-fs error (device loop2): ext4_orphan_get:1401: inode #15: comm syz.2.1623: iget: bogus i_mode (0) [ 217.109112][ T8963] EXT4-fs error (device loop2): ext4_orphan_get:1406: comm syz.2.1623: couldn't read orphan inode 15 (err -117) [ 217.161224][ T8954] loop3: detected capacity change from 0 to 32768 [ 217.168375][ T8963] EXT4-fs (loop2): mounted filesystem without journal. Opts: nomblk_io_submit,init_itable=0x0000000000000007,dioread_nolock,test_dummy_encryption,,errors=continue. Quota mode: writeback. [ 217.217041][ T8954] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop3 scanned by syz.3.1620 (8954) [ 217.229214][ T8967] netlink: 'syz.6.1618': attribute type 1 has an invalid length. [ 217.307363][ T8954] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 217.325596][ T8954] BTRFS info (device loop3): using free space tree [ 217.348180][ T8954] BTRFS info (device loop3): has skinny extents [ 217.497077][ T8963] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 217.604153][ T8954] BTRFS info (device loop3): enabling ssd optimizations [ 217.877208][ T9009] loop6: detected capacity change from 0 to 256 [ 217.967644][ T4185] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 10 /dev/loop3 scanned by udevd (4185) [ 218.065527][ T9008] loop2: detected capacity change from 0 to 4096 [ 218.126836][ T9008] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 218.126858][ T9009] exFAT-fs (loop6): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x46ae1815, utbl_chksum : 0xe619d30d) [ 218.234410][ T9009] exFAT-fs (loop6): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 218.465137][ T9008] ntfs3: loop2: failed to convert "c46c" to iso8859-13 [ 218.477897][ T9028] loop1: detected capacity change from 0 to 512 [ 218.579599][ T9028] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 218.672004][ T9028] EXT4-fs (loop1): 1 truncate cleaned up [ 218.768677][ T9028] EXT4-fs (loop1): mounted filesystem without journal. Opts: i_version,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,auto_da_alloc,errors=remount-ro,quota,. Quota mode: writeback. [ 218.784642][ T9037] loop6: detected capacity change from 0 to 2048 [ 218.934710][ T9037] NILFS (loop6): broken superblock, retrying with spare superblock (blocksize = 1024) [ 218.993028][ T9045] loop2: detected capacity change from 0 to 1024 [ 219.024717][ T9048] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 219.390303][ T9060] pimreg0: tun_chr_ioctl cmd 2147767521 [ 219.817327][ T9022] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 220.008790][ T4366] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 220.060667][ T9107] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1660'. [ 220.091780][ T9107] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1660'. [ 220.137036][ T9022] usb 7-1: Using ep0 maxpacket: 8 [ 220.308109][ T4366] usb 4-1: Using ep0 maxpacket: 32 [ 220.436691][ T4366] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 102, changing to 10 [ 220.476023][ T4366] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24624, setting to 1024 [ 220.508022][ T4366] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 220.522148][ T9022] usb 7-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 220.549357][ T9022] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.579364][ T9022] usb 7-1: Product: syz [ 220.583612][ T9022] usb 7-1: Manufacturer: syz [ 220.615053][ T9022] usb 7-1: SerialNumber: syz [ 220.655174][ T9022] usb 7-1: config 0 descriptor?? [ 220.738072][ T4366] usb 4-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 220.755144][ T4366] usb 4-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 220.764462][ T4366] usb 4-1: Product: syz [ 220.776245][ T4366] usb 4-1: Manufacturer: syz [ 220.785757][ T4366] usb 4-1: SerialNumber: syz [ 220.845223][ T9097] loop2: detected capacity change from 0 to 40427 [ 220.845684][ T4366] input: appletouch as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input27 [ 220.911500][ T9097] F2FS-fs (loop2): build fault injection attr: rate: 771, type: 0x1ffff [ 220.938943][ T9022] usb 7-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 220.949573][ T4171] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 220.985443][ T9097] F2FS-fs (loop2): invalid crc value [ 221.067377][ T9097] F2FS-fs (loop2): Found nat_bits in checkpoint [ 221.184542][ T4366] usb 4-1: USB disconnect, device number 15 [ 221.227308][ T4366] appletouch 4-1:1.0: input: appletouch disconnected [ 221.234345][ T4171] usb 2-1: Using ep0 maxpacket: 8 [ 221.246941][ T9097] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 221.344790][ T7503] attempt to access beyond end of device [ 221.344790][ T7503] loop2: rw=2049, want=45104, limit=40427 [ 221.384341][ T4171] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 221.416264][ T4171] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 221.437132][ T4171] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 221.466151][ T4171] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 221.513934][ T4171] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 221.545452][ T4171] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.601673][ T4212] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 221.655481][ T9022] usb write operation failed. (-71) [ 221.666977][ T9022] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 221.683254][ T9022] dvbdev: DVB: registering new adapter (Terratec H7) [ 221.698098][ T9022] usb 7-1: media controller created [ 221.740707][ T9022] usb read operation failed. (-71) [ 221.762084][ T9022] usb write operation failed. (-71) [ 221.769738][ T9022] dvb_usb_az6007: probe of 7-1:0.0 failed with error -5 [ 221.806593][ T9022] usb 7-1: USB disconnect, device number 5 [ 221.847731][ T4171] usb 2-1: GET_CAPABILITIES returned 0 [ 221.853449][ T4171] usbtmc 2-1:16.0: can't read capabilities [ 221.879670][ T4212] usb 8-1: Using ep0 maxpacket: 32 [ 222.057958][ T4212] usb 8-1: config 15 has 0 interfaces, different from the descriptor's value: 10 [ 222.077279][ T9022] usb 2-1: USB disconnect, device number 18 [ 222.286178][ T4212] usb 8-1: New USB device found, idVendor=0421, idProduct=00a0, bcdDevice=f9.23 [ 222.317033][ T4212] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.349583][ T4212] usb 8-1: Product: syz [ 222.364879][ T4212] usb 8-1: Manufacturer: syz [ 222.369557][ T4212] usb 8-1: SerialNumber: syz [ 222.388401][ T9022] kernel write not supported for file /snd/seq (pid: 9022 comm: kworker/0:20) [ 222.664387][ T4212] usb 8-1: USB disconnect, device number 5 [ 222.826618][ T9190] loop3: detected capacity change from 0 to 32768 [ 223.327266][ T9230] loop7: detected capacity change from 0 to 512 [ 223.461498][ T9230] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 223.533447][ T9230] ext4 filesystem being mounted at /34/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 223.552829][ T9208] loop2: detected capacity change from 0 to 40427 [ 223.689638][ T9208] F2FS-fs (loop2): build fault injection attr: rate: 690, type: 0x1ffff [ 223.705849][ T9208] F2FS-fs (loop2): build fault injection attr: rate: 0, type: 0x4 [ 223.729806][ T8244] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 223.758204][ T9208] F2FS-fs (loop2): invalid crc value [ 223.783144][ T9208] F2FS-fs (loop2): Found nat_bits in checkpoint [ 223.847037][ T9223] loop1: detected capacity change from 0 to 32768 [ 223.874387][ T9208] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 224.034083][ T7503] attempt to access beyond end of device [ 224.034083][ T7503] loop2: rw=2049, want=45112, limit=40427 [ 224.086165][ T9248] netlink: 72 bytes leftover after parsing attributes in process `syz.7.1694'. [ 224.097382][ T9223] XFS (loop1): Mounting V5 Filesystem [ 224.135100][ T9251] loop7: detected capacity change from 0 to 256 [ 224.211071][ T9251] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 224.276836][ T9237] loop6: detected capacity change from 0 to 32768 [ 224.286550][ T9223] XFS (loop1): Ending clean mount [ 224.307745][ T9223] XFS (loop1): Quotacheck needed: Please wait. [ 224.464067][ T9223] XFS (loop1): Quotacheck: Done. [ 224.525642][ T9258] loop7: detected capacity change from 0 to 256 [ 224.840532][ T4174] XFS (loop1): Unmounting Filesystem [ 225.101202][ T9274] netlink: 110 bytes leftover after parsing attributes in process `syz.7.1705'. [ 225.414691][ T9287] loop1: detected capacity change from 0 to 1024 [ 225.460050][ T9289] loop6: detected capacity change from 0 to 1024 [ 225.502941][ T9289] EXT4-fs (loop6): Quota format mount options ignored when QUOTA feature is enabled [ 225.526601][ T9289] EXT4-fs (loop6): inline encryption not supported [ 225.543780][ T9289] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c802e018, mo2=0000] [ 225.557725][ T9289] EXT4-fs error (device loop6): ext4_map_blocks:629: inode #3: block 2: comm syz.6.1711: lblock 2 mapped to illegal pblock 2 (length 1) [ 225.576060][ T9289] Quota error (device loop6): qtree_write_dquot: dquota write failed [ 225.584552][ T9289] EXT4-fs error (device loop6): ext4_map_blocks:629: inode #3: block 48: comm syz.6.1711: lblock 0 mapped to illegal pblock 48 (length 1) [ 225.600608][ T9289] Quota error (device loop6): v2_write_file_info: Can't write info structure [ 225.621848][ T9289] EXT4-fs error (device loop6): ext4_acquire_dquot:6204: comm syz.6.1711: Failed to acquire dquot type 0 [ 225.650965][ T9289] EXT4-fs error (device loop6) in ext4_reserve_inode_write:5835: Corrupt filesystem [ 225.696397][ T9289] EXT4-fs error (device loop6): ext4_evict_inode:282: inode #11: comm syz.6.1711: mark_inode_dirty error [ 225.715772][ T9289] EXT4-fs warning (device loop6): ext4_evict_inode:285: couldn't mark inode dirty (err -117) [ 225.728357][ T9289] EXT4-fs (loop6): 1 orphan inode deleted [ 225.734134][ T9289] EXT4-fs (loop6): mounted filesystem without journal. Opts: nouid32,noblock_validity,barrier=0x0000000000000004,jqfmt=vfsv0,debug,inlinecrypt,,errors=continue. Quota mode: none. [ 225.753067][ T4375] EXT4-fs error (device loop6): ext4_map_blocks:629: inode #3: block 1: comm kworker/u4:6: lblock 1 mapped to illegal pblock 1 (length 1) [ 225.784297][ T4375] Quota error (device loop6): remove_tree: Can't read quota data block 1 [ 225.793454][ T4375] EXT4-fs error (device loop6): ext4_release_dquot:6240: comm kworker/u4:6: Failed to release dquot type 0 [ 225.830690][ T9289] EXT4-fs error (device loop6): __ext4_get_inode_loc:4321: comm syz.6.1711: Invalid inode table block 1 in block_group 0 [ 225.877266][ T9301] netlink: 'syz.3.1716': attribute type 10 has an invalid length. [ 225.887889][ T9297] loop1: detected capacity change from 0 to 512 [ 225.897551][ T9289] EXT4-fs error (device loop6) in ext4_reserve_inode_write:5835: Corrupt filesystem [ 225.926827][ T9297] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 225.943950][ T9289] EXT4-fs error (device loop6): ext4_quota_off:6510: inode #3: comm syz.6.1711: mark_inode_dirty error [ 225.973763][ T9297] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 226.042449][ T9297] EXT4-fs (loop1): 1 truncate cleaned up [ 226.048450][ T9297] EXT4-fs (loop1): mounted filesystem without journal. Opts: noload,resuid=0x000000000000ee01,debug_want_extra_isize=0x000000000000002e,lazytime,quota,quota,,errors=continue. Quota mode: writeback. [ 226.176384][ T9310] tap0: tun_chr_ioctl cmd 1074025677 [ 226.203113][ T9310] tap0: linktype set to 773 [ 226.342026][ T9312] loop7: detected capacity change from 0 to 256 [ 226.491037][ T9315] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 226.553347][ T9312] exFAT-fs (loop7): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 226.864050][ T9334] loop7: detected capacity change from 0 to 1024 [ 226.998009][ T9340] loop6: detected capacity change from 0 to 64 [ 227.030910][ T9334] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 227.090996][ T9334] EXT4-fs (loop7): shut down requested (2) [ 227.128748][ T4171] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 227.171244][ T9316] loop1: detected capacity change from 0 to 32768 [ 227.289255][ T9316] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.1722 (9316) [ 227.384526][ T9316] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 227.385573][ T4171] usb 4-1: Using ep0 maxpacket: 32 [ 227.407203][ T9316] BTRFS info (device loop1): force clearing of disk cache [ 227.421775][ T9316] BTRFS info (device loop1): enabling auto defrag [ 227.435915][ T9351] loop7: detected capacity change from 0 to 4096 [ 227.456911][ T9316] BTRFS info (device loop1): max_inline at 0 [ 227.471759][ T9316] BTRFS info (device loop1): enabling disk space caching [ 227.508874][ T9316] BTRFS info (device loop1): disk space caching is enabled [ 227.542506][ T9316] BTRFS info (device loop1): has skinny extents [ 227.545953][ T4171] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 227.601569][ T4171] usb 4-1: config 0 has no interface number 0 [ 227.729239][ T8244] ntfs3: loop7: ntfs_evict_inode r=5 failed, -22. [ 227.735718][ T8244] ntfs3: loop7: Mark volume as dirty due to NTFS errors [ 227.812976][ T4171] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 227.833080][ T4171] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.843766][ T4171] usb 4-1: Product: syz [ 227.848548][ T4171] usb 4-1: Manufacturer: syz [ 227.853160][ T4171] usb 4-1: SerialNumber: syz [ 227.863847][ T4171] usb 4-1: config 0 descriptor?? [ 227.910246][ T4171] smsc95xx v2.0.0 [ 227.950350][ T9316] BTRFS info (device loop1): enabling ssd optimizations [ 227.963690][ T9316] BTRFS info (device loop1): clearing free space tree [ 227.970534][ T9316] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 228.005420][ T9316] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 228.288593][ T9355] loop6: detected capacity change from 0 to 32768 [ 228.304216][ T9] BTRFS info (device loop1): qgroup scan completed (inconsistency flag cleared) [ 228.367518][ T9392] loop7: detected capacity change from 0 to 512 [ 228.463220][ T9392] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 228.634596][ T9392] EXT4-fs (loop7): 1 truncate cleaned up [ 228.654677][ T9396] loop2: detected capacity change from 0 to 2048 [ 228.678992][ T9392] EXT4-fs (loop7): mounted filesystem without journal. Opts: nogrpid,min_batch_time=0x0000000000000005,debug_want_extra_isize=0x0000000000000068,nobarrier,errors=remount-ro,quota,. Quota mode: writeback. [ 228.736513][ T26] audit: type=1800 audit(1747883729.562:37): pid=9392 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.1748" name="file1" dev="loop7" ino=16 res=0 errno=0 [ 228.849937][ T4171] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 228.871288][ T4171] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 228.924806][ T4171] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 228.962906][ T4171] smsc95xx: probe of 4-1:0.67 failed with error -71 [ 229.059071][ T4171] usb 4-1: USB disconnect, device number 16 [ 229.110731][ T9396] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 229.165334][ T9396] ext4 filesystem being mounted at /122/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 229.882967][ T9400] loop1: detected capacity change from 0 to 32768 [ 229.956334][ T26] audit: type=1326 audit(1747883730.703:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9432 comm="syz.6.1766" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9874c27969 code=0x0 [ 230.042605][ T9400] XFS (loop1): Mounting V5 Filesystem [ 230.166554][ T9400] XFS (loop1): Ending clean mount [ 230.242939][ T4174] XFS (loop1): Unmounting Filesystem [ 230.496237][ T4171] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 230.570011][ T4242] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.667058][ T4242] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.735956][ T9457] loop7: detected capacity change from 0 to 32768 [ 230.752802][ T4171] usb 3-1: Using ep0 maxpacket: 32 [ 230.794318][ T4242] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.801609][ T9452] loop3: detected capacity change from 0 to 40427 [ 230.830393][ T9457] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop7 scanned by syz.7.1772 (9457) [ 230.912017][ T9457] BTRFS info (device loop7): using sha256 (sha256-avx2) checksum algorithm [ 230.924195][ T4171] usb 3-1: unable to get BOS descriptor or descriptor too short [ 230.944759][ T9457] BTRFS info (device loop7): enabling auto defrag [ 230.961941][ T9457] BTRFS info (device loop7): doing ref verification [ 230.974380][ T9452] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 230.983739][ T4242] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.005352][ T9452] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 231.022440][ T9464] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1775'. [ 231.032368][ T4171] usb 3-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 231.047506][ T9452] F2FS-fs (loop3): invalid crc value [ 231.050228][ T9457] BTRFS info (device loop7): max_inline at 0 [ 231.075642][ T9457] BTRFS info (device loop7): force clearing of disk cache [ 231.083841][ T9457] BTRFS info (device loop7): disabling free space tree [ 231.171323][ T9452] F2FS-fs (loop3): Found nat_bits in checkpoint [ 231.196456][ T9457] BTRFS info (device loop7): has skinny extents [ 231.222020][ T9473] netlink: 'syz.6.1778': attribute type 1 has an invalid length. [ 231.309121][ T4171] usb 3-1: language id specifier not provided by device, defaulting to English [ 231.389058][ T9452] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 231.406035][ T9452] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 231.447960][ T4171] usb 3-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 231.479451][ T4171] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.511832][ T4171] usb 3-1: Product: syz [ 231.531711][ T4171] usb 3-1: Manufacturer: syz [ 231.558246][ T4171] usb 3-1: SerialNumber: syz [ 231.566846][ T9452] attempt to access beyond end of device [ 231.566846][ T9452] loop3: rw=2049, want=45104, limit=40427 [ 231.629779][ T9457] BTRFS info (device loop7): enabling ssd optimizations [ 231.674025][ T9457] BTRFS info (device loop7): clearing free space tree [ 231.688247][ T9452] attempt to access beyond end of device [ 231.688247][ T9452] loop3: rw=2049, want=40968, limit=40427 [ 231.696083][ T9457] BTRFS info (device loop7): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 231.776527][ T9457] BTRFS info (device loop7): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 231.834162][ T154] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 231.864803][ T4171] usb 3-1: Limiting number of CPorts to U8_MAX [ 231.874603][ T4171] usb 3-1: Not enough endpoints found in device, aborting! [ 231.886113][ T154] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 231.993730][ T9517] loop6: detected capacity change from 0 to 512 [ 232.103631][ T9517] EXT4-fs (loop6): Test dummy encryption mode enabled [ 232.171284][ T5307] usb 3-1: USB disconnect, device number 17 [ 232.179514][ T9517] EXT4-fs error (device loop6): __ext4_iget:4893: inode #11: block 1: comm syz.6.1785: invalid block [ 232.252664][ T9517] EXT4-fs error (device loop6): ext4_orphan_get:1406: comm syz.6.1785: couldn't read orphan inode 11 (err -117) [ 232.359815][ T9517] EXT4-fs (loop6): mounted filesystem without journal. Opts: noauto_da_alloc,dioread_lock,max_dir_size_kb=0x0000000000000004,bsddf,nodiscard,sysvgroups,jqfmt=vfsold,debug_want_extra_isize=0x0000000000000004,test_dummy_encryption,,errors=continue. Quota mode: none. [ 232.564141][ T9517] EXT4-fs error (device loop6): ext4_add_entry:2486: inode #2: comm syz.6.1785: Directory hole found for htree leaf block 0 [ 232.912520][ T4212] usb 2-1: new full-speed USB device number 19 using dummy_hcd [ 233.094876][ T9544] loop2: detected capacity change from 0 to 16 [ 233.127014][ T9548] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1784'. [ 233.166169][ T9548] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1784'. [ 233.197147][ T9544] erofs: (device loop2): mounted with root inode @ nid 36. [ 233.219097][ T9551] loop6: detected capacity change from 0 to 512 [ 233.265931][ T9544] erofs: (device loop2): z_erofs_readahead: readahead error at page 2 @ nid 89 [ 233.322319][ T4180] erofs: (device loop2): z_erofs_lz4_decompress: failed to decompress -5 in[4096, 0] out[8192] [ 233.351530][ T9544] erofs: (device loop2): z_erofs_lz4_decompress: failed to decompress -5 in[4096, 0] out[4096] [ 233.379251][ T26] audit: type=1800 audit(1747883733.902:39): pid=9544 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1793" name="file2" dev="loop2" ino=89 res=0 errno=0 [ 233.414863][ T4212] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 233.426764][ T4212] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 233.436588][ T4212] usb 2-1: New USB device found, idVendor=146b, idProduct=0902, bcdDevice= 0.00 [ 233.446114][ T4212] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.457289][ T4212] usb 2-1: config 0 descriptor?? [ 233.462917][ T9558] erofs: (device loop2): z_erofs_lz4_decompress: failed to decompress -5 in[4096, 0] out[4096] [ 233.464986][ T9551] EXT4-fs (loop6): mounted filesystem without journal. Opts: discard,nodioread_nolock,,errors=continue. Quota mode: writeback. [ 233.508375][ T26] audit: type=1800 audit(1747883734.033:40): pid=9558 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1793" name="file3" dev="loop2" ino=89 res=0 errno=0 [ 233.568771][ T9551] ext4 filesystem being mounted at /106/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 233.581038][ T9555] loop7: detected capacity change from 0 to 4096 [ 233.681368][ T9551] EXT4-fs warning (device loop6): ext4_empty_dir:3147: inode #12: comm syz.6.1795: directory missing '.' [ 233.752836][ T9570] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1799'. [ 233.815155][ T4242] device hsr_slave_0 left promiscuous mode [ 233.834280][ T4242] device hsr_slave_1 left promiscuous mode [ 233.890506][ T4242] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 233.930830][ T4242] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 233.973235][ T4212] bigben 0003:146B:0902.0013: unexpected rdesc, please submit for review [ 234.002399][ T4242] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 234.012666][ T4212] bigben 0003:146B:0902.0013: item fetching failed at offset 2/5 [ 234.028424][ T4242] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 234.029410][ T9578] loop3: detected capacity change from 0 to 256 [ 234.047551][ T4212] bigben 0003:146B:0902.0013: parse failed [ 234.069656][ T4242] device bridge_slave_1 left promiscuous mode [ 234.075901][ T4242] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.078871][ T4212] bigben: probe of 0003:146B:0902.0013 failed with error -22 [ 234.105750][ T9581] loop2: detected capacity change from 0 to 2048 [ 234.155208][ T4242] device bridge_slave_0 left promiscuous mode [ 234.201195][ T5303] usb 2-1: USB disconnect, device number 19 [ 234.202123][ T4242] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.227474][ T9581] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 234.395865][ T4242] device veth1_macvtap left promiscuous mode [ 234.427952][ T4242] device veth0_macvtap left promiscuous mode [ 234.437971][ T4242] device veth1_vlan left promiscuous mode [ 234.467003][ T4242] device veth0_vlan left promiscuous mode [ 234.474699][ T9587] loop6: detected capacity change from 0 to 2048 [ 234.622919][ T5307] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 234.650028][ T9587] EXT4-fs (loop6): Ignoring removed mblk_io_submit option [ 234.706286][ T9587] EXT4-fs (loop6): mounted filesystem without journal. Opts: lazytime,usrjquota=,errors=remount-ro,noauto_da_alloc,auto_da_alloc,mblk_io_submit,grpquota,barrier=0x0000000000000000,grpjquota=,bsddf,bsddf,usrjquota=,. Quota mode: writeback. [ 234.729324][ C0] vkms_vblank_simulate: vblank timer overrun [ 235.050784][ T5307] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 235.060996][ T5307] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 235.160534][ T4242] team0 (unregistering): Port device team_slave_1 removed [ 235.189651][ T5307] usb 8-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 235.198855][ T5307] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 235.212536][ T5307] usb 8-1: SerialNumber: syz [ 235.229384][ T4242] team0 (unregistering): Port device team_slave_0 removed [ 235.243743][ T4242] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 235.258119][ T4242] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 235.335552][ T4242] bond0 (unregistering): Released all slaves [ 235.360533][ T4171] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 235.429158][ T9604] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1813'. [ 235.478092][ T4374] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 235.533637][ T5307] usb 8-1: 0:2 : does not exist [ 235.598851][ T9623] loop2: detected capacity change from 0 to 512 [ 235.617188][ T4171] usb 4-1: Using ep0 maxpacket: 8 [ 235.618762][ T5307] usb 8-1: USB disconnect, device number 6 [ 235.741853][ T4374] usb 7-1: Using ep0 maxpacket: 32 [ 235.747459][ T4171] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 235.758291][ T9623] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 235.807762][ T9623] EXT4-fs (loop2): 1 truncate cleaned up [ 235.814117][ T9623] EXT4-fs (loop2): mounted filesystem without journal. Opts: nogrpid,min_batch_time=0x0000000000000005,debug_want_extra_isize=0x0000000000000068,nobarrier,errors=remount-ro,quota,. Quota mode: writeback. [ 235.895226][ T4374] usb 7-1: config index 0 descriptor too short (expected 35577, got 27) [ 235.911385][ T4374] usb 7-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 235.921587][ T4374] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 235.937975][ T4171] usb 4-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=fd.5b [ 235.966945][ T4374] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 235.976733][ T4171] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.990742][ T9629] loop1: detected capacity change from 0 to 8192 [ 235.991807][ T4374] usb 7-1: config 1 has no interface number 0 [ 235.999220][ T26] audit: type=1800 audit(1747883736.353:41): pid=9623 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1819" name="file1" dev="loop2" ino=16 res=0 errno=0 [ 236.005168][ T4171] usb 4-1: Product: syz [ 236.029196][ T4185] udevd[4185]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 236.041060][ T4374] usb 7-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 236.071376][ T4171] usb 4-1: Manufacturer: syz [ 236.080182][ T4374] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.091451][ T4171] usb 4-1: SerialNumber: syz [ 236.103792][ T4171] usb 4-1: config 0 descriptor?? [ 236.160996][ T4374] snd_usb_pod 7-1:1.1: Line 6 Pocket POD found [ 236.175347][ T4171] gspca_main: stk014-2.14.0 probing 05e1:0893 [ 236.185220][ T4171] usb 4-1: selecting invalid altsetting 1 [ 236.239196][ T9636] netlink: 72 bytes leftover after parsing attributes in process `syz.7.1822'. [ 236.397575][ T4374] snd_usb_pod 7-1:1.1: set_interface failed [ 236.412779][ T4374] snd_usb_pod 7-1:1.1: Line 6 Pocket POD now disconnected [ 236.466406][ T4374] snd_usb_pod: probe of 7-1:1.1 failed with error -71 [ 236.490606][ T4374] usb 7-1: USB disconnect, device number 6 [ 236.715240][ T4364] usb 4-1: USB disconnect, device number 17 [ 236.858948][ T9657] loop1: detected capacity change from 0 to 4096 [ 236.932174][ T4171] usb 3-1: new full-speed USB device number 18 using dummy_hcd [ 236.982627][ T9665] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 237.059909][ T26] audit: type=1800 audit(1747883737.344:42): pid=9657 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1827" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 237.455146][ T9640] loop2: detected capacity change from 0 to 32768 [ 237.534457][ T4160] loop2: p1 p3 < p5 p6 > [ 237.647032][ T9640] loop2: p1 p3 < p5 p6 > [ 237.647817][ T9696] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1839'. [ 237.813701][ T4171] usb 3-1: unable to get BOS descriptor or descriptor too short [ 237.958384][ T4171] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 237.966355][ T4171] usb 3-1: can't read configurations, error -71 [ 238.457672][ T4185] udevd[4185]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 238.457792][ T4183] udevd[4183]: inotify_add_watch(7, /dev/loop2p6, 10) failed: No such file or directory [ 238.470254][ T4160] udevd[4160]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 238.490473][ T4162] udevd[4162]: inotify_add_watch(7, /dev/loop2p5, 10) failed: No such file or directory [ 238.504076][ T5303] Bluetooth: hci0: command 0x0405 tx timeout [ 238.510187][ T5303] ------------[ cut here ]------------ [ 238.515749][ T5303] WARNING: CPU: 0 PID: 5303 at kernel/workqueue.c:1453 __queue_work+0xc04/0xd50 [ 238.524804][ T5303] Modules linked in: [ 238.528723][ T5303] CPU: 0 PID: 5303 Comm: kworker/0:13 Not tainted 5.15.183-syzkaller #0 [ 238.537060][ T5303] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 238.547129][ T5303] Workqueue: events hci_cmd_timeout [ 238.552372][ T5303] RIP: 0010:__queue_work+0xc04/0xd50 [ 238.557675][ T5303] Code: fc ff ff 48 8b 4c 24 08 80 e1 07 80 c1 03 38 c1 0f 8c 13 fd ff ff 48 8b 7c 24 08 e8 56 32 70 00 e9 04 fd ff ff e8 2c bf 2a 00 <0f> 0b 48 83 c4 50 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 16 bf 2a 00 [ 238.577306][ T5303] RSP: 0018:ffffc900031d7ad8 EFLAGS: 00010093 [ 238.583393][ T5303] RAX: ffffffff814d0214 RBX: 0000000000010000 RCX: ffff888020513b80 [ 238.589173][ T4367] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 238.591378][ T5303] RDX: 0000000000000000 RSI: 0000000000200000 RDI: 0000000000000000 [ 238.591397][ T5303] RBP: 0000000000000000 R08: dffffc0000000000 R09: ffffed100fdb4167 [ 238.591412][ T5303] R10: ffffed100fdb4167 R11: 1ffff1100fdb4166 R12: 0000000000000200 [ 238.591428][ T5303] R13: ffff88801ebcb9c0 R14: ffff88801ebcb800 R15: 0000000000000008 [ 238.630825][ T5303] FS: 0000000000000000(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 238.639778][ T5303] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 238.646381][ T5303] CR2: 00007ffebf3fa1a0 CR3: 000000007c06b000 CR4: 00000000003506f0 [ 238.654383][ T5303] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 238.662374][ T5303] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 238.664764][ T4162] udevd[4162]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 238.670353][ T5303] Call Trace: [ 238.670363][ T5303] [ 238.670375][ T5303] ? queue_work_on+0xc4/0x1d0 [ 238.690977][ T5303] ? lockdep_hardirqs_off+0x70/0x100 [ 238.691576][ T4183] udevd[4183]: inotify_add_watch(7, /dev/loop2p5, 10) failed: No such file or directory [ 238.696284][ T5303] queue_work_on+0x11d/0x1d0 [ 238.696312][ T5303] ? wq_worker_last_func+0x40/0x40 [ 238.696334][ T5303] ? __schedule+0x11c0/0x43b0 [ 238.696360][ T5303] ? hci_cmd_timeout+0x16f/0x220 [ 238.696386][ T5303] process_one_work+0x863/0x1000 [ 238.696421][ T5303] ? worker_detach_from_pool+0x240/0x240 [ 238.722037][ T4185] udevd[4185]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 238.725379][ T5303] ? lockdep_hardirqs_off+0x70/0x100 [ 238.725416][ T5303] ? _raw_spin_lock_irq+0xab/0xe0 [ 238.756003][ T5303] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 238.761503][ T5303] ? wq_worker_running+0x97/0x170 [ 238.766670][ T5303] worker_thread+0xaa8/0x12a0 [ 238.771409][ T5303] kthread+0x436/0x520 [ 238.775509][ T5303] ? rcu_lock_release+0x20/0x20 [ 238.780377][ T5303] ? kthread_blkcg+0xd0/0xd0 [ 238.784981][ T5303] ret_from_fork+0x1f/0x30 [ 238.789593][ T5303] [ 238.792630][ T5303] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 238.799901][ T5303] CPU: 0 PID: 5303 Comm: kworker/0:13 Not tainted 5.15.183-syzkaller #0 [ 238.808231][ T5303] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 238.818293][ T5303] Workqueue: events hci_cmd_timeout [ 238.823502][ T5303] Call Trace: [ 238.826776][ T5303] [ 238.829706][ T5303] dump_stack_lvl+0x168/0x230 [ 238.834402][ T5303] ? show_regs_print_info+0x20/0x20 [ 238.839596][ T5303] ? load_image+0x3b0/0x3b0 [ 238.844107][ T5303] panic+0x2c9/0x7f0 [ 238.848007][ T5303] ? bpf_jit_dump+0xd0/0xd0 [ 238.852513][ T5303] ? ret_from_fork+0x1f/0x30 [ 238.857112][ T5303] ? __queue_work+0xc04/0xd50 [ 238.861784][ T5303] __warn+0x248/0x2b0 [ 238.865763][ T5303] ? __queue_work+0xc04/0xd50 [ 238.870432][ T5303] report_bug+0x1b7/0x2e0 [ 238.874755][ T5303] handle_bug+0x3a/0x70 [ 238.878906][ T5303] exc_invalid_op+0x16/0x40 [ 238.883411][ T5303] asm_exc_invalid_op+0x16/0x20 [ 238.888258][ T5303] RIP: 0010:__queue_work+0xc04/0xd50 [ 238.893544][ T5303] Code: fc ff ff 48 8b 4c 24 08 80 e1 07 80 c1 03 38 c1 0f 8c 13 fd ff ff 48 8b 7c 24 08 e8 56 32 70 00 e9 04 fd ff ff e8 2c bf 2a 00 <0f> 0b 48 83 c4 50 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 16 bf 2a 00 [ 238.913304][ T5303] RSP: 0018:ffffc900031d7ad8 EFLAGS: 00010093 [ 238.919463][ T5303] RAX: ffffffff814d0214 RBX: 0000000000010000 RCX: ffff888020513b80 [ 238.927448][ T5303] RDX: 0000000000000000 RSI: 0000000000200000 RDI: 0000000000000000 [ 238.935416][ T5303] RBP: 0000000000000000 R08: dffffc0000000000 R09: ffffed100fdb4167 [ 238.943469][ T5303] R10: ffffed100fdb4167 R11: 1ffff1100fdb4166 R12: 0000000000000200 [ 238.951452][ T5303] R13: ffff88801ebcb9c0 R14: ffff88801ebcb800 R15: 0000000000000008 [ 238.959435][ T5303] ? __queue_work+0xc04/0xd50 [ 238.964116][ T5303] ? __queue_work+0xc04/0xd50 [ 238.968787][ T5303] ? queue_work_on+0xc4/0x1d0 [ 238.973506][ T5303] ? lockdep_hardirqs_off+0x70/0x100 [ 238.978790][ T5303] queue_work_on+0x11d/0x1d0 [ 238.983427][ T5303] ? wq_worker_last_func+0x40/0x40 [ 238.988533][ T5303] ? __schedule+0x11c0/0x43b0 [ 238.993214][ T5303] ? hci_cmd_timeout+0x16f/0x220 [ 238.998150][ T5303] process_one_work+0x863/0x1000 [ 239.003095][ T5303] ? worker_detach_from_pool+0x240/0x240 [ 239.008901][ T5303] ? lockdep_hardirqs_off+0x70/0x100 [ 239.014198][ T5303] ? _raw_spin_lock_irq+0xab/0xe0 [ 239.019215][ T5303] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 239.024585][ T5303] ? wq_worker_running+0x97/0x170 [ 239.029605][ T5303] worker_thread+0xaa8/0x12a0 [ 239.034304][ T5303] kthread+0x436/0x520 [ 239.038369][ T5303] ? rcu_lock_release+0x20/0x20 [ 239.043212][ T5303] ? kthread_blkcg+0xd0/0xd0 [ 239.047807][ T5303] ret_from_fork+0x1f/0x30 [ 239.052229][ T5303] [ 239.055500][ T5303] Kernel Offset: disabled [ 239.060225][ T5303] Rebooting in 86400 seconds..