last executing test programs: 3.412443698s ago: executing program 1 (id=7123): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000840)={r0, 0x27, 0x36, 0x0, &(0x7f0000000180)="f8ad48cc02cb29dcc8007f5b86dd57ca54956254bd94b88f0c4fa794557841b04f3b01b3d4483618caea730fc4a1e1ca87b084098f5b", 0x0, 0x4000, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.167661662s ago: executing program 1 (id=7127): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7ffffcb9}]}) setreuid(0x0, 0xee00) 2.978512804s ago: executing program 1 (id=7132): r0 = syz_open_dev$radio(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_S_TUNER(r0, 0x4054561e, &(0x7f0000000500)={0x2, "8e2cf64fbde8614aec578a581c856c1202b3ec9ca222e0a2ad4341dd133c28af", 0x4, 0x1000, 0x4, 0xc8a9, 0x10, 0x2, 0x4, 0x800}) 2.751124198s ago: executing program 3 (id=7135): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'syz_tun\x00', &(0x7f0000000080)=@ethtool_cmd={0x8, 0x3, 0x3, 0x2, 0x5, 0x3, 0xd7, 0x6, 0xfe, 0x2, 0x8, 0x1000, 0x0, 0x17, 0xff, 0x7, [0x3, 0xffffce76]}}) 2.750904198s ago: executing program 1 (id=7136): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@ipv4_newroute={0x34, 0x18, 0x35f32a6dfa748ddd, 0x70bd29, 0x0, {0x2, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x6}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x5}, @RTA_ENCAP={0x10, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0xc, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_GENEVE={0x8, 0x1, 0x0, 0x1, @LWTUNNEL_IP_OPT_GENEVE_DATA={0x4}}}}]}, 0x34}}, 0x0) 2.560870711s ago: executing program 3 (id=7138): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={0x64, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x64}}, 0x0) 2.499466802s ago: executing program 1 (id=7139): syz_mount_image$ocfs2(&(0x7f00000026c0), &(0x7f0000004780)='./file0\x00', 0x200000, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x1, 0x4703, &(0x7f0000004800)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.stat\x00', 0x275a, 0x0) 2.420667903s ago: executing program 3 (id=7140): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, 0x0) 2.223549906s ago: executing program 3 (id=7142): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001a00)={0x2, 0x7, 0x1, 0x2, 0x5, 0x0, 0x70bd27, 0x25dfdbfe, [@sadb_address={0x3, 0x17, 0xff, 0xa0, 0x0, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x3e}}}]}, 0x28}}, 0x0) 1.991678109s ago: executing program 3 (id=7145): r0 = syz_usb_connect(0x0, 0x62, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000fb5d7d086d04c308166b0102030109025000010000000009041f0000ff0100000a24010400050201020724070500000508240805040004960d240601010302000100060006092403050503060581092403060101040505"], 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000000200)={0x14, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) 1.28007401s ago: executing program 2 (id=7151): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) set_mempolicy(0x8006, 0x0, 0x5) 1.126076393s ago: executing program 1 (id=7152): syz_mount_image$ocfs2(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x1000000, &(0x7f0000004680)=ANY=[@ANYBLOB="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"], 0x5, 0x4430, &(0x7f0000004840)="$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") setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f00000001c0)='system.posix_acl_default\x00', 0x0, 0x0, 0x1) 1.024183134s ago: executing program 2 (id=7153): r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TCGETS(r0, 0x5401, &(0x7f0000000040)) 1.023184654s ago: executing program 0 (id=7154): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x1, 0x8, 0x2, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, r0}, 0x38) 833.806857ms ago: executing program 0 (id=7155): r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_rfc1337\x00', 0x2, 0x0) sendfile(r0, r0, 0x0, 0x1) 763.511299ms ago: executing program 2 (id=7156): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000001c0)={0x7, 0x8, 0x0, "b75c89e7a20c8eac82ad0416bb1844038d2cd97c945462f31638b5394c00", 0x32315258}) 665.73983ms ago: executing program 0 (id=7157): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) 625.287431ms ago: executing program 2 (id=7158): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x3, 0x3}, 0x6) 435.657173ms ago: executing program 2 (id=7159): r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0x0, @local}}, 0x1e) 339.004805ms ago: executing program 0 (id=7160): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x401, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x103, 0x2c922}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge_slave={{0x11, 0x118}, {0x4}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x44801}, 0x48000) 325.443975ms ago: executing program 2 (id=7161): syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000000)='./file1\x00', 0x810, &(0x7f0000000040)={[{@nossd_spread}, {@compress_algo={'compress', 0x3d, 'no'}}, {@enospc_debug}, {@nossd}, {@nodatasum}, {@autodefrag}, {@nossd}, {@max_inline={'max_inline', 0x3d, [0x6d, 0x33, 0x36, 0x39, 0x65, 0x70]}}]}, 0x1, 0x50f3, &(0x7f0000005140)="$eJzs3U+IVWUfB/Dnzp1x5lVw7isEtsoikGrh4CYioqtMUFF0y8VgBE4tgnThJEi0EMQW/Vt4S4paSK6kFsksjKA2LqQwArehYS7cKAaSi3Yac8957pz7HO+5d0ZtTD8fmTnnOb/zPOe5l7O43+uccwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACEEF74/bNDVfVT16bPnJtp7jywZebyvul1p0OodbbX8vqOrc++8ua2HS9OxA6zL2fLRqPfkFnX81ljVc/GhX69P6+HEMaSAer58pk1pVGLq3vKA1a6fnH30U17mxuPH27Xr146e7L80lkwsdITWCn5eXVh8Vxqdn6PJHt024VTr9Zzimb90xPuX3kRAMCSTLU6i+7H0fwjbre9P60n7WbSbift+AmhXWwsRzbuqn7z3JDWV2iezSwqjPedZ1LP3/9uu5X2T9pJ1FjCPHt3zSPNRL95ziX1lZonAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwJ3kkbdHH6qqn7o2febcTHPngS0zl/dNrzsdQqOzvZaVa6vfP9z869utxw78uPmr4xeef6ye94vL0cLO4be48sRkCG8UKhfisBfXhtDqLXSa4cty4a3OynOxAAAAwN3k/s7vkW47i4NjPe1aJ03WOv+iLCxev7j76Ka9zY3HD7frVy+dPbn88Vp9xmvecLxuu7H4UysE4xh/0/EW63HXPaVxqqUjpnn+8fNTf1f1L+X/RnX+j++c/A8AAMDNkP/TcaoNyv/fvfbHJ1X9S/l/Q88hS/k/zjjm/5GwvPwPAAAAd7Lbnf+bpXGqDcr/4y+NfV3Vv5T/p4bL/6PFaceNv8YJ75oMYWrQ1AEAAIA+4v+7L361EPN69s1BmtefevTguarxSvm/OVz+H7ulrwoAAAC4GUe+2P5wVb2U/1vD5f/x2zprAAAAYCne+XDig6p6Kf/PDpf/V+fL/MqHrNNP8a8QDk2GMLGwMpcVfg7tp7sFAAAA4BaJOf3PT3f+ULVfKf/PVd//P97pIF7/33P/v9L1/4VCdte/J90YAAAAgHtR+Xr+eHv87MkF/Z6/P+z1/w/87+CrVccv5f/9w+X/enF5K5//BwAAAMvwX3v+3/bSONUG3f//vo/e/aWqfyn/t4fL/3G5pvjyTtRq2fvz3mQI6xdW8rsJfhMPtyspzI8VCh2tpMe22CMvzI8XCh1zSY/NkyE8uLCyPyn8PxbaSeHK2rxwJCmcjoX8fOgWjiWFE/FM+3xtPt208H0s5BdYzMcrKNZ0L4lIelzt12OhcMMeZ7sHBwAAuKfE8Jxn2bHeZkij7Hxt0A6rB+0wMmiH+qAdRpMd0h37bQ+zvYW4vX1m49Ke/39kuPwf34pV2aLf9f8hXv+fP9ewe/3/bCw0ksJ8LLTSOwa04jGysPtxPEajlfe4sr5bAAAAgLta/F6gvsLzAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP5h715j5KruA4CffY734fVCUoXQKNkkNY6beL22gUQtVdaUqhEpzbqhoCqi2NhrsnjBjm1KjEJkbCIaIShtkJIPRRhFUc0HqBWISAoIFymOUHlEVEUBBAqtIQoipSQRaYIUqtl7z+ydc3cefqzx0t9P8s6Z+Z/nnYfn3HvnXAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+P/h4Feu+dtm8Ud/e96zL1w8fsWetRe/et15pz4ZwsTM4x1ZuKP/xtvHf373uffseWD1HfcdPv+jvXm5PB4Gqn868zs3xFoPLw7h/o4QutPAisEs0JPfH4z1vW8whFPCbKBWYrI/K5E2HL7fF8K+MBuoVfW9vhAGC4ELn3rk4Zuridv6QlgaQqikbTxfydroSwNn9GaB/jSwtTsL/OqtTC3w3c4sAMcsvhlqL/oDE/UZhucu1+D113PcOvb2SofXFRPDjfP9bO08d6qgN31g4pietlJ1zIvS2+Ogd9sCeLeVtvOtnrbiF6n8G8pbs6FK6Nw0uXnD1dM74yOdYXS0q1FN8/Q8P/P6lzYeSXrBvA5jB4aPy+vwlieW3t21/ILH71ux9OX9H9v7yrF280eFTVpMz7dKyF9zC+Z5jMZ9niyAt1/pW9KIL10hhM2f/73PNIuX5v/Dzef/8eUcbzvrcsda3xzK5ubxkcGYeG0om5sDAADAgrEQ9ppuHX3oE83qK83/R9o7/h8P+eeT+Wy0B0MYn0nsXRLCaTOPZ4G7YnOXLQnhgzOpifrA2iRwMIT3ziSW16pKSiyKJUaSwE+G8sB4EjgUAxNJ4FsxcGsSuCEGDiSBjTFwMAmcGwNhqn4cvz+Uj6PtQF8MrM824oF4FsIvhmJrybZ6rlYVAADAcZLPDnvq7xbOdTjWDHF6eaCvVYZ4BnbDDJWkhnQGW5tWNayhu1UNna1qqI17d/Phl2ruaFVz6TSMjvoMt//ybz4bmijN/8eaz/8rc3Sko3T8P4R1M39j7s48Ml2Lr5+oywAAAAAcg4H/ffGbzeKl+f94e+f/x30iXYXM4bG4G2LLkhDG6gNZtX9YDmRHvQfyAAAAACwEtePxtWPhU/ltdop2Op8u5584wvzxwP/4nPl7Dz64vll/S/P/ifbO/++vv806cSj24mtLQlhUCPwg9rIamDESAz/+ZH0gH/+huAFuilXlJybUqropllgfA2NJYF+jEj+slTitPpA/WbXG99bGMZWXKAQAAADghIu7A+Jx+Xj+/4d+s/qaZuVK8//1R3b+/8w8uHR6//RACCu7Q+hKfxjwWH+2MGAMDHbkiYf6s7q60qqu7w/hnOrA0qpezNf/707XGHyqL6sqBk770P7Xz6gmvtkXwspi4OnP3XlWNbEzCdQa/8u+ED5QHW3a+HcWZY33pI1/fVEI7y8EalVdtiiEamO9aVWPVPLrGKRV/XMlhHcVArWqzq6EsCsAsEDF/0o3FR/csevaLRumpye3z2Mi7sPvC5unpidHN26d3lRp0KdNSZ/rljG6vjymdq9881y+RNFF964bbCdd+53gWLGtfD9+6cTB/H78LtQzM87VPXV316RD/siHy02EwjepRkPunOch9xcrmX0SS/XH/L1hICy6esfk9tEvbti5c/uq7G+72Vdnf+NhpmxbrUq3Vf9cfWvj5dFwtazE0W6rZcVKVu68ctvKHbuuXTF15YbLJy+fvGrV2avHzhxbM/bxM1dWRzWW/W0x1GVzVZ0M9a072xzXcRzq6d2FSk7Ep4aEhMRCS2wdWNb0/+TS/H9b8/l//NSJn/z5+gyNjv8Px8P82eOzh/nXx8C+do//Dzc6ml87MWAkCeyOgd0O8wMAAPDOECf5cW9m3Cv90+XfeblZudL8f3d7v/8/Tuv/15auP7/RMv/LY4mxRuv/p8v819b/391o/f90mf/a+v/73ob1/6+uBZJN8gvr/wMAAO8EJ279/5bL+6cXCChlaLm8f3qBgFKGlsv4t3uBgCNe///5//yr/w5NlOb/t7Y3/7dwPwAAAJw8vvxn1/xOs3hp/r+vvfn/iV//LzQ6/3+kUWCi0cKA1v8DAABggWq0/t/wjf2XNitXmv8faG/+H0+76KzLHWt9cyhb0y6ka9q9NlT7yQAAAAAsDJ1hdLSnzbx1K6OuPfo2n8mXAm2WLnrxTw4f2fn/B9ub/9f9LuOWJ5be3bX8gsffvG/F0pf3f2zvK7PH/wEAAID50+5+CQAAAAAAAAAAAAAA4O334n/sWdMsXvr9f1g383ij3//H6/7F3xe8uy53rLX1+n/5/Qs/fc+umSULHxsK4cPFwJY9W04J+bX5lxUDD1+y/D3VxJ60xIMvnPtSNXFpGvjUilPfqCbOSQLr4yKJ700D8aqKbyxOAnF5xX9PA3F7HEgDvXngq4uzcXSk2+qng9m26ki31bODISwpBGrb6v7BrI2OdIC3JYHaAL+QBuIA/zwPdKa9umcg61UMDMaidwxkvQIA4KQVvwX2hM1T05Nj8St8vD29u/42qluy7PpytR1tNv9cvjTZRfeuG2wn3ZV+F5291nhPqFSHsKr0dbWYpWNmlMenlhab7t0NhtxqtbfOBuVSR7rpehuPqC8b0ejGrdObeloOfE3rLKu7W2ZZVZrsFLN0zmzSNmppoy9tjKjNbdNGl+P9zjA62pXk+oMYHA51Wr0i2v29fnGdv0avgmKeqw7v/VWz+krz/+H25v+V4rjeyC8GsDteWe/vlljmHwAAAObXV9f++hvx32dvfPTpZnlL8/+R9ub/cQ9Wfig429txMF7/f++SEGYurT+cBe6KzV22JIQPzqQmYonsgvrnxxJjWeCuuMNkeSyxfqK+qkUxcCAJ/GQoDxxMAodiIN9LsT/ku3L+fiiEs2ZS6+pLbIslhpPAZ2JgJAmMxsBYElgcA+NJ4NXFeWAiCfxbDISp+m117+J8WwEAAByJfJ7VU383pPO8A92tMnS0ytDfKkNnqwyVVhkajSLe/3bM0JOcvNJRyNST1tqX1FLKEC+Gf8T9KmUIP6zPmRYsNR3PP6idb9BRn+GBT3RXQhOl+f9Ye/P//vrbrPVDcf4/e/2/LPCD2L2vxVPHR2Lgx5+sD+Q7Bg7Fye5Ntaom8hL5pP2mWGI8BkaSwLYYGE8C69flgX3vqQ/kM+1a43trjU/lJQoBAAAAOOHiDoK4mybO/+/Y8ZWBZuVK8//x9ub/sb2BYmM3xFoPLw7h/o7Z3tQCKwazQNyPMRh/Hv++wRBOKezgqJWY7M9K9CYNh+/3Zb9Q702r+l5f9uODeP/Cpx55+OZq4ra+EJYW9r7U2ni+krXRlwbO6M0C/Wlga3cWiHt+aoHvdmYBOGa1vYLxBZWf6lIzPHe5Bq+/d8o1QdPhlfaBzpFvrt9czZfSDtd8n2rNkT1tTfffctyU3h4HvdsW4rtt2Lut+EUq/4by1myoEjo3TW7ecPX0zvhI8ZesJfP0PBd/pdpO+ji8DncffW9bq6QdGEs+PsbmLjf367AjVnfLE0vv7lp+weP3rVj68v6P7X2l7W40EH8o/Mh1/zr4o8LmnW+VkL/mFtznyYTPk4X438CIpy2EsO7Vr9/ULF6a/0+0N//vTm5n/DpuzB1LQvhIYeM+Fjf/Hy/JPgcLgexT8l3lQHbI/b+GGn5yAgAAwPFW291R218wld9mJ4Sn8+Ry/okjzB/3V4zPmb/dfvf/9SVLm8VL8//1zef/i5JuOv7v+D/zxPH/OZ3su6IXpQ/sPqZd0aXqmBeO/8/pZH+3Of4/J8f/Hf+fi+P/LTj+P6eT/WkrfUva5ktXCOHlP3ro2Wbx0vx/W3vzf+v/zb1oX239v/WN1v/b1mj9v93W/wMAAOZVg4Xm0nleafW+UoZ09b5ShpYLBLZcYtD6f0e8/t9Lpz//m9BEaf6/u735f3w5DBRbXyjr/42sa1DVrTGwzcKAAAAAnIwa7SAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg7fXAP/zPpmbxR3973rMvXDx+xZ61F7963XmnPhnC1MzjHVm4o//G28d/fve59+x5YPUd9x0+/6OVvFxPfvu7dbljrW8OhbCv8MhgTLw2VL0zG7jw0/fs6q4mHhsK4cPFwJY9W06pJr41FMKyYuDhS5a/p5rYk5Z48IVzX6omLk0Dn1px6hvVxDl5oCPt7j8uzrrbkXb35sUhLCkEat29YnF9VbU2/jQPdKZt/NNg1kYMDMai3xjM2oiB6VhialEIK7tD6EqrerSSVdWVVvUvlayqrrSqL1dCOCeE0J1W9UJvVlV3OvIne7OqYuC0D+1//YxqYl9vCCuLgac/d+dZ1cQXkkCt8b/oDeED1ZdM2vi3e7LGe9LGb+sJ4f0hhN60xC+7sxK9aYkXu0N4VyFQa/zz3SHsCrwjxA+fuk+0Hbuu3bJhenpy+zwmevO2+sLmqenJ0Y1bpzdVkj410lFIv3X90Y/9ude/tLF6e9G96wbbSXfn5Xpmury6p+7umpO997Ff/cVKZp+PUv0xf28YCIuu3jG5ffSLG3bu3L4q+9tu9tXZ3648mm2rVQtlWy0rVrJy55XbVu7Yde2KqSs3XD55+eRVq85ePXbm2Jqxj5+5sjqqsezv8RjqnSd+qKd3Fyo5ER8AEhISCy3RWffpNnayf5CXvujPdrQnVGY+oEvTimKWjplRHo9Brz3KER/N95SWI1pVmjiUsqyeI8v19VnWlCYTs7X0ZVlmvteVJofFxjpnNmm83xlGR7sabYfh+rvFzfuzY9i8z+Sbrt00AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP/HDhwIAAAAAAD5vzZCVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVFXbgQAAAAAAAyP+1EaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwA8cCAAAAAML8rcPo2QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgEsBAAD//+erI4o=") mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', 0x0, 0x3376039, 0x0) 255.956506ms ago: executing program 0 (id=7162): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f00000007c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELTABLE={0x20, 0x2, 0xa, 0x201, 0x0, 0x0, {0x3}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x48}, 0x1, 0x0, 0x0, 0x40800}, 0x4) 55.421419ms ago: executing program 0 (id=7163): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_read_part_table(0x4086, &(0x7f000000c440)="$eJzszzFK9GAQBuB3k/3/BBFBWwuxs5LY2dhYeYG9wHZ2FvauepvFA3giQfAENp9kExFx7RRRnqeZN/lmBib8uMd1P6+T/E8ePpm5n99tZ9qn265L2iTTi63VUxlc7SXpjvJvo62ymeTy45bZ8ivvAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfoWnt9gOpZRSkvpdV51MkkWS+W5pkhxXSV9zUz+fj037h0nOdsavRT/xqt+4Mlt+4y0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwB9U5eR0jJMcpBliu7a3eWF3Dm0AhKEggN4XEBQjkBD2YDm2YcqmrrJJ7XvmxIm7bNXzyfdeVUdyn2O/z03+S4cBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgMYOHAgAAAAAAPm/NkJVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVUVduBABgAAAECYv3Ue7QcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGCgAAAA//9DVh8q") 0s ago: executing program 3 (id=7164): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x2000}) kernel console output (not intermixed with test programs): 36 comm="syz.1.5461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa525f8e929 code=0x7ffc0000 [ 591.297946][ T27] audit: type=1326 audit(1750346808.406:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18536 comm="syz.1.5461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7fa525f8e929 code=0x7ffc0000 [ 591.352051][ T785] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 591.361167][ T785] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 591.383666][ T785] usb 4-1: Product: syz [ 591.387891][ T785] usb 4-1: Manufacturer: syz [ 591.392507][ T785] usb 4-1: SerialNumber: syz [ 591.393188][T18541] loop1: detected capacity change from 0 to 4096 [ 591.397322][ T27] audit: type=1326 audit(1750346808.406:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18536 comm="syz.1.5461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa525f8e929 code=0x7ffc0000 [ 591.397364][ T27] audit: type=1326 audit(1750346808.406:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18536 comm="syz.1.5461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa525f8e929 code=0x7ffc0000 [ 591.406736][ T785] r8152-cfgselector 4-1: config 0 descriptor?? [ 591.437697][T18543] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5464'. [ 591.459474][T18541] EXT4-fs: inline encryption not supported [ 591.490806][T18541] EXT4-fs: Ignoring removed oldalloc option [ 591.511204][T18541] EXT4-fs (loop1): Test dummy encryption mode enabled [ 591.621954][T18541] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 591.743286][ T6087] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 591.758183][T18550] loop0: detected capacity change from 0 to 2048 [ 591.796486][T18550] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 591.853766][T18550] NILFS (loop0): mounting unchecked fs [ 591.930768][ T6106] udevd[6106]: incorrect nilfs2 checksum on /dev/loop0 [ 591.967879][T18550] NILFS (loop0): recovery complete [ 591.978870][T18555] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 592.013678][ T785] r8152-cfgselector 4-1: Unknown version 0x0000 [ 592.023891][ T785] r8152-cfgselector 4-1: USB disconnect, device number 59 [ 592.390056][ T6280] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 592.613386][ T6280] usb 2-1: Using ep0 maxpacket: 32 [ 592.624977][ T6280] usb 2-1: config 0 has an invalid descriptor of length 49, skipping remainder of the config [ 592.649073][ T6280] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 592.707395][ T6280] usb 2-1: New USB device found, idVendor=0421, idProduct=00a0, bcdDevice=c8.e1 [ 592.731869][ T6280] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 592.751795][ T6280] usb 2-1: config 0 descriptor?? [ 592.784904][ T6280] usb 2-1: bad CDC descriptors [ 592.785543][T18586] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5482'. [ 592.787983][ T6280] usb 2-1: bad CDC descriptors [ 593.004050][T18596] xt_TCPMSS: Only works on TCP SYN packets [ 593.010919][ T6280] usb 2-1: USB disconnect, device number 65 [ 594.274710][T18645] loop3: detected capacity change from 0 to 256 [ 594.391663][T18645] FAT-fs (loop3): Directory bread(block 64) failed [ 594.398273][T18645] FAT-fs (loop3): Directory bread(block 65) failed [ 594.407622][T18620] loop2: detected capacity change from 0 to 32768 [ 594.418194][T18645] FAT-fs (loop3): Directory bread(block 66) failed [ 594.441865][T18645] FAT-fs (loop3): Directory bread(block 67) failed [ 594.470812][T18645] FAT-fs (loop3): Directory bread(block 68) failed [ 594.505609][T18645] FAT-fs (loop3): Directory bread(block 69) failed [ 594.528021][T18645] FAT-fs (loop3): Directory bread(block 70) failed [ 594.551137][T18645] FAT-fs (loop3): Directory bread(block 71) failed [ 594.575410][T18645] FAT-fs (loop3): Directory bread(block 72) failed [ 594.583590][T18620] ERROR: (device loop2): duplicateIXtree: [ 594.583590][T18620] [ 594.594860][T18645] FAT-fs (loop3): Directory bread(block 73) failed [ 594.609454][T18620] ERROR: (device loop2): remounting filesystem as read-only [ 595.197705][T18670] loop0: detected capacity change from 0 to 1024 [ 595.237577][T18673] loop1: detected capacity change from 0 to 256 [ 595.719281][T18686] loop2: detected capacity change from 0 to 512 [ 595.772092][T18686] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 595.822967][T18686] EXT4-fs (loop2): 1 truncate cleaned up [ 595.832984][T18686] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 595.893602][T18686] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 596.180451][T18709] loop3: detected capacity change from 0 to 64 [ 596.188044][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 596.194855][ T1274] ieee802154 phy1 wpan1: encryption failed: -22 [ 596.407067][T18715] loop1: detected capacity change from 0 to 1024 [ 596.473616][T18717] netlink: 5 bytes leftover after parsing attributes in process `syz.3.5541'. [ 596.520941][T18719] QAT: Invalid ioctl -805268418 [ 596.529276][T18717] 0ªX¹¦D: renamed from gretap0 [ 596.564862][T18717] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 597.045335][T18738] xt_cgroup: invalid path, errno=-2 [ 597.209820][T18749] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5556'. [ 597.240660][T18750] usb usb8: usbfs: process 18750 (syz.1.5557) did not claim interface 0 before use [ 597.296127][ T27] audit: type=1326 audit(1750346814.129:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18751 comm="syz.3.5558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d0458e929 code=0x7ffc0000 [ 597.393375][ T27] audit: type=1326 audit(1750346814.129:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18751 comm="syz.3.5558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d0458e929 code=0x7ffc0000 [ 597.478980][ T27] audit: type=1326 audit(1750346814.138:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18751 comm="syz.3.5558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f6d0458e929 code=0x7ffc0000 [ 597.537524][T18760] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5562'. [ 597.575116][ T27] audit: type=1326 audit(1750346814.166:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18751 comm="syz.3.5558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d0458e929 code=0x7ffc0000 [ 597.630049][T18763] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.5564'. [ 597.657928][ T27] audit: type=1326 audit(1750346814.176:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18751 comm="syz.3.5558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d0458e929 code=0x7ffc0000 [ 597.849002][T18771] No such timeout policy "syz1" [ 598.569376][T18805] loop2: detected capacity change from 0 to 256 [ 598.599989][T18805] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 598.636150][T18805] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 598.669882][T18805] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 598.827075][ T27] audit: type=1800 audit(1750346815.560:134): pid=18806 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.3.5584" name="/newroot/1323/bus" dev="tmpfs" ino=6925 res=0 errno=0 [ 598.880393][T18812] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5587'. [ 598.895338][T18812] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5587'. [ 598.905974][T18812] netlink: 'syz.2.5587': attribute type 3 has an invalid length. [ 599.007734][T18815] loop3: detected capacity change from 0 to 2048 [ 599.082696][T18818] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 599.105886][T18822] loop2: detected capacity change from 0 to 64 [ 599.134529][T18815] NILFS (loop3): bad btree root (ino=16): level = 164, flags = 0x1, nchildren = 1 [ 599.147605][T18822] BFS-fs: bfs_fill_super(): loop2 is unclean, continuing [ 600.323099][T18871] loop1: detected capacity change from 0 to 512 [ 600.378847][T18871] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 600.925807][T18896] loop2: detected capacity change from 0 to 128 [ 600.984495][T18896] EXT4-fs (loop2): Test dummy encryption mode enabled [ 601.046573][T18896] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 601.108384][T18896] ext4 filesystem being mounted at /1351/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 601.298776][ T6091] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 601.469171][T18920] loop1: detected capacity change from 0 to 64 [ 601.783797][T18930] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5645'. [ 602.190048][T18944] loop3: detected capacity change from 0 to 164 [ 602.318299][T18949] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5653'. [ 602.452257][T18953] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5654'. [ 602.518971][T18955] Illegal XDP return value 4294967262 on prog (id 325) dev N/A, expect packet loss! [ 602.686984][ T6093] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 602.695938][ T6093] Bluetooth: hci1: Injecting HCI hardware error event [ 602.705831][ T6093] Bluetooth: hci1: hardware error 0x00 [ 603.444619][T18992] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 603.452667][T18992] IPv6: NLM_F_CREATE should be set when creating new route [ 603.460001][T18992] IPv6: NLM_F_CREATE should be set when creating new route [ 603.538915][T18994] loop0: detected capacity change from 0 to 2048 [ 603.640552][T18994] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 603.740734][T19003] netlink: 'syz.1.5677': attribute type 4 has an invalid length. [ 603.757994][ T6096] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 603.768581][T19003] netlink: 152 bytes leftover after parsing attributes in process `syz.1.5677'. [ 603.818868][T19003] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 604.109796][T19013] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 604.125088][T18991] loop3: detected capacity change from 0 to 32768 [ 604.138180][T19013] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 604.150354][T19013] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 604.174379][T18991] find_entry called with index >= next_index [ 604.180708][T18991] find_entry called with index >= next_index [ 604.191354][T18991] find_entry called with index >= next_index [ 604.452260][T19023] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5689'. [ 604.526298][ T6052] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 604.730341][ T6052] usb 2-1: Using ep0 maxpacket: 32 [ 604.748006][ T6052] usb 2-1: config 2 has an invalid interface number: 1 but max is 0 [ 604.761597][ T6052] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 604.790878][ T6052] usb 2-1: config 2 has no interface number 0 [ 604.817744][ T6052] usb 2-1: New USB device found, idVendor=22b8, idProduct=2d97, bcdDevice=51.64 [ 604.836517][ T6052] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 604.857557][ T6052] usb 2-1: Product: syz [ 604.872548][ T6052] usb 2-1: Manufacturer: syz [ 604.888591][ T6052] usb 2-1: SerialNumber: syz [ 604.997015][ T6093] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 605.141063][ T6052] usb 2-1: USB disconnect, device number 66 [ 605.356461][T19055] loop3: detected capacity change from 0 to 128 [ 605.385130][T19055] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 605.423899][ T6093] Bluetooth: hci2: unexpected event for opcode 0x2006 [ 605.436342][T19055] ext4 filesystem being mounted at /1346/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 605.644250][ T6100] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 605.753377][T19066] loop2: detected capacity change from 0 to 512 [ 605.800864][T19066] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 605.828781][T19066] EXT4-fs (loop2): 1 truncate cleaned up [ 605.837226][T19071] loop1: detected capacity change from 0 to 256 [ 605.873931][T19066] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 605.877200][T19073] ÿÿÿÿÿÿ: renamed from vlan1 (while UP) [ 605.900863][T19071] FAT-fs (loop1): Directory bread(block 64) failed [ 605.954844][T19071] FAT-fs (loop1): Directory bread(block 65) failed [ 605.963905][T19075] loop3: detected capacity change from 0 to 512 [ 605.988061][T19075] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 606.002668][T19071] FAT-fs (loop1): Directory bread(block 66) failed [ 606.014057][T19075] EXT4-fs (loop3): failed to initialize system zone (-117) [ 606.031470][T19071] FAT-fs (loop1): Directory bread(block 67) failed [ 606.039496][ T6091] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 606.044843][T19071] FAT-fs (loop1): Directory bread(block 68) failed [ 606.049300][T19075] EXT4-fs (loop3): mount failed [ 606.060670][T19071] FAT-fs (loop1): Directory bread(block 69) failed [ 606.067957][T19071] FAT-fs (loop1): Directory bread(block 70) failed [ 606.113301][T19071] FAT-fs (loop1): Directory bread(block 71) failed [ 606.130454][T19071] FAT-fs (loop1): Directory bread(block 72) failed [ 606.137151][T19071] FAT-fs (loop1): Directory bread(block 73) failed [ 606.167247][ T6106] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 606.607863][ T27] audit: type=1326 audit(1750346822.835:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19095 comm="syz.0.5722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd56938e929 code=0x7ffc0000 [ 606.662406][ T27] audit: type=1326 audit(1750346822.863:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19095 comm="syz.0.5722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd56938e929 code=0x7ffc0000 [ 606.673389][T19091] loop2: detected capacity change from 0 to 4096 [ 606.751810][ T27] audit: type=1326 audit(1750346822.872:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19095 comm="syz.0.5722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=311 compat=0 ip=0x7fd56938e929 code=0x7ffc0000 [ 606.760127][T19098] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 606.781488][T19098] IPv6: NLM_F_CREATE should be set when creating new route [ 606.788808][T19098] IPv6: NLM_F_CREATE should be set when creating new route [ 606.812230][ T27] audit: type=1326 audit(1750346822.872:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19095 comm="syz.0.5722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd56938e929 code=0x7ffc0000 [ 606.909138][ T27] audit: type=1326 audit(1750346822.872:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19095 comm="syz.0.5722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd56938e929 code=0x7ffc0000 [ 607.055932][T19102] loop3: detected capacity change from 0 to 4096 [ 607.075267][T19106] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5726'. [ 607.110052][T19106] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5726'. [ 607.251326][T19108] loop1: detected capacity change from 0 to 256 [ 607.390479][T19113] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 607.536801][T19117] loop2: detected capacity change from 0 to 128 [ 607.600768][T19117] EXT4-fs (loop2): Test dummy encryption mode enabled [ 607.687181][T19117] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 607.794400][T19117] ext4 filesystem being mounted at /1384/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 607.799549][ T27] audit: type=1326 audit(1750346823.948:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19129 comm="syz.0.5739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd56938e929 code=0x7ffc0000 [ 607.886232][ T27] audit: type=1326 audit(1750346823.976:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19129 comm="syz.0.5739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd56938e929 code=0x7ffc0000 [ 607.986967][ T27] audit: type=1326 audit(1750346823.976:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19129 comm="syz.0.5739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=87 compat=0 ip=0x7fd56938e929 code=0x7ffc0000 [ 608.064946][ T27] audit: type=1326 audit(1750346823.985:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19129 comm="syz.0.5739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd56938e929 code=0x7ffc0000 [ 608.125697][ T27] audit: type=1326 audit(1750346823.985:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19129 comm="syz.0.5739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd56938e929 code=0x7ffc0000 [ 608.215235][T19117] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 608.342025][ T6091] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 608.868246][T19167] wireguard0: entered promiscuous mode [ 608.873792][T19167] wireguard0: entered allmulticast mode [ 609.326745][T19170] loop3: detected capacity change from 0 to 32768 [ 609.414450][T19187] x_tables: duplicate underflow at hook 2 [ 609.550297][T19189] netlink: 416 bytes leftover after parsing attributes in process `syz.0.5765'. [ 609.613651][T19189] vxcan3: entered promiscuous mode [ 609.632101][T19189] vxcan3: entered allmulticast mode [ 609.911722][T19203] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 610.439170][T19224] loop2: detected capacity change from 0 to 2048 [ 610.495839][T19224] NILFS (loop2): invalid segment: Magic number mismatch [ 610.502873][T19224] NILFS (loop2): trying rollback from an earlier position [ 610.604615][T19229] loop1: detected capacity change from 0 to 256 [ 610.649282][T19224] NILFS (loop2): recovery complete [ 610.667985][T19233] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 610.694444][T19229] FAT-fs (loop1): Directory bread(block 64) failed [ 610.726107][T19229] FAT-fs (loop1): Directory bread(block 65) failed [ 610.754281][T19229] FAT-fs (loop1): Directory bread(block 66) failed [ 610.761197][T19229] FAT-fs (loop1): Directory bread(block 67) failed [ 610.801906][T19229] FAT-fs (loop1): Directory bread(block 68) failed [ 610.826486][T19229] FAT-fs (loop1): Directory bread(block 69) failed [ 610.836170][T19229] FAT-fs (loop1): Directory bread(block 70) failed [ 610.860340][T19229] FAT-fs (loop1): Directory bread(block 71) failed [ 610.885911][T19229] FAT-fs (loop1): Directory bread(block 72) failed [ 610.896133][T19229] FAT-fs (loop1): Directory bread(block 73) failed [ 611.359357][T19254] loop0: detected capacity change from 0 to 256 [ 611.396088][T19256] loop3: detected capacity change from 0 to 1024 [ 611.412420][T19254] exFAT-fs (loop0): failed to load upcase table (idx : 0x000106cd, chksum : 0x3aeaf2c0, utbl_chksum : 0xe619d30d) [ 611.516069][T19254] exFAT-fs (loop0): error, found bogus dentry(11) beyond unused empty group(10) (start_clu : 5, cur_clu : 5) [ 611.539850][T19254] exFAT-fs (loop0): Filesystem has been set read-only [ 611.619445][ T58] hfsplus: b-tree write err: -5, ino 4 [ 611.631769][T19263] loop2: detected capacity change from 0 to 512 [ 611.686794][T19263] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 611.703859][T19263] EXT4-fs (loop2): orphan cleanup on readonly fs [ 611.740947][T19263] EXT4-fs error (device loop2): ext4_acquire_dquot:6938: comm syz.2.5799: Failed to acquire dquot type 1 [ 611.777050][T19263] EXT4-fs error (device loop2): ext4_validate_block_bitmap:439: comm syz.2.5799: bg 0: block 40: padding at end of block bitmap is not set [ 611.801223][T19263] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6642: Corrupt filesystem [ 611.811197][T19263] EXT4-fs (loop2): 1 truncate cleaned up [ 611.818339][T19263] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 611.913185][ T6091] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 612.465225][T19295] loop1: detected capacity change from 0 to 64 [ 612.904042][T19309] program syz.3.5821 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 612.914367][T19311] loop0: detected capacity change from 0 to 64 [ 613.188666][T19317] xt_CT: You must specify a L4 protocol and not use inversions on it [ 613.202380][ T6100] cgroup: fork rejected by pids controller in /syz3 [ 613.285943][T19299] loop2: detected capacity change from 0 to 32768 [ 613.416010][T19299] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 613.491439][ T6093] Bluetooth: hci0: unexpected event for opcode 0x2006 [ 613.578631][T19299] XFS (loop2): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 613.713176][T19299] XFS (loop2): Starting recovery (logdev: internal) [ 613.803455][T19299] XFS (loop2): Ending recovery (logdev: internal) [ 614.050103][ T6091] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 614.373555][ T48] bond0: (slave netdevsim0): Releasing backup interface [ 614.440209][ T48] netdevsim netdevsim3 netdevsim0 (unregistering): left allmulticast mode [ 614.574981][T19342] loop1: detected capacity change from 0 to 2048 [ 614.607695][T19342] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 614.865177][T19350] netlink: 188 bytes leftover after parsing attributes in process `syz.2.5838'. [ 615.006963][T19355] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5839'. [ 615.038742][T18962] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 615.063251][T18962] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 615.082017][T18962] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 615.096066][T18962] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 615.128627][T18962] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 615.136427][T18962] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 615.243862][T19357] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5840'. [ 615.381040][T19369] netlink: 76 bytes leftover after parsing attributes in process `syz.2.5844'. [ 615.460147][T19369] netlink: 76 bytes leftover after parsing attributes in process `syz.2.5844'. [ 615.481602][T19372] netlink: 'syz.0.5845': attribute type 21 has an invalid length. [ 615.500321][T19372] netlink: 'syz.0.5845': attribute type 1 has an invalid length. [ 615.755401][T19383] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5849'. [ 615.966304][ T27] kauditd_printk_skb: 11 callbacks suppressed [ 615.966320][ T27] audit: type=1326 audit(1750346831.587:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19391 comm="syz.0.5852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd56938e929 code=0x7ffc0000 [ 616.018197][ T27] audit: type=1326 audit(1750346831.587:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19391 comm="syz.0.5852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd56938e929 code=0x7ffc0000 [ 616.054191][ T27] audit: type=1326 audit(1750346831.606:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19391 comm="syz.0.5852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=220 compat=0 ip=0x7fd56938e929 code=0x7ffc0000 [ 616.143963][ T27] audit: type=1326 audit(1750346831.606:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19391 comm="syz.0.5852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd56938e929 code=0x7ffc0000 [ 616.228476][ T27] audit: type=1326 audit(1750346831.606:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19391 comm="syz.0.5852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd56938e929 code=0x7ffc0000 [ 616.298554][T19401] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5855'. [ 616.463648][T19411] loop2: detected capacity change from 0 to 16 [ 616.510604][T19411] erofs: (device loop2): mounted with root inode @ nid 36. [ 616.645616][ T6091] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 46 [ 616.646051][T19416] loop0: detected capacity change from 0 to 2048 [ 616.690738][T19416] NILFS (loop0): invalid segment: Magic number mismatch [ 616.699638][ T6091] erofs: (device loop2): erofs_readdir: invalid de[0].nameoff 0 @ nid 89 [ 616.736971][T19416] NILFS (loop0): trying rollback from an earlier position [ 616.744693][ T6091] erofs: (device loop2): erofs_readdir: invalid de[0].nameoff 0 @ nid 89 [ 616.764135][T19418] loop1: detected capacity change from 0 to 256 [ 616.812274][T19416] NILFS (loop0): recovery complete [ 616.862202][T19419] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 617.212462][T19354] chnl_net:caif_netlink_parms(): no params data found [ 617.316544][ T6093] Bluetooth: hci3: command tx timeout [ 617.467484][T19433] netlink: 'syz.1.5869': attribute type 21 has an invalid length. [ 617.487265][T19433] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5869'. [ 617.520489][T19435] bridge3: the hash_elasticity option has been deprecated and is always 16 [ 617.677771][T19445] loop1: detected capacity change from 0 to 1024 [ 618.209513][T19467] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5878'. [ 618.237647][T19467] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5878'. [ 618.267571][T19354] bridge0: port 1(bridge_slave_0) entered blocking state [ 618.295139][T19354] bridge0: port 1(bridge_slave_0) entered disabled state [ 618.321809][T19354] bridge_slave_0: entered allmulticast mode [ 618.329100][T19354] bridge_slave_0: entered promiscuous mode [ 618.459895][ T48] hsr_slave_0: left promiscuous mode [ 618.479304][ T48] hsr_slave_1: left promiscuous mode [ 618.489359][ T48] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 618.500795][ T48] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 618.530256][ T48] team0: left promiscuous mode [ 618.535164][ T48] team_slave_0: left promiscuous mode [ 618.544180][ T48] team_slave_1: left promiscuous mode [ 618.564948][ T48] bridge0: port 4(team0) entered disabled state [ 618.576159][ T48] batadv0: left promiscuous mode [ 618.583963][ T48] bridge0: port 3(batadv0) entered disabled state [ 618.596284][ T48] bridge_slave_1: left promiscuous mode [ 618.607899][ T48] bridge0: port 2(bridge_slave_1) entered disabled state [ 618.618861][ T48] bridge_slave_0: left promiscuous mode [ 618.626507][ T48] bridge0: port 1(bridge_slave_0) entered disabled state [ 618.733151][ T48] bond1 (unregistering): Released all slaves [ 618.930475][T19492] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5890'. [ 619.551542][ T6093] Bluetooth: hci3: command tx timeout [ 619.732661][ T48] team0 (unregistering): Port device team_slave_1 removed [ 619.796099][ T48] team0 (unregistering): Port device team_slave_0 removed [ 619.853731][ T48] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 619.919483][ T48] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 620.579528][ T48] bond0 (unregistering): Released all slaves [ 620.660883][T19354] bridge0: port 2(bridge_slave_1) entered blocking state [ 620.668195][T19354] bridge0: port 2(bridge_slave_1) entered disabled state [ 620.675969][T19354] bridge_slave_1: entered allmulticast mode [ 620.682871][T19354] bridge_slave_1: entered promiscuous mode [ 620.899191][T19354] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 620.971720][T19354] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 621.095155][T19518] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5903'. [ 621.159856][T19354] team0: Port device team_slave_0 added [ 621.200782][T19354] team0: Port device team_slave_1 added [ 621.330049][T19523] bridge0: port 2(netdevsim0) entered blocking state [ 621.357042][T19523] bridge0: port 2(netdevsim0) entered disabled state [ 621.376337][T19523] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 621.411730][T19523] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 621.445212][T19354] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 621.452205][T19354] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 621.526819][T19354] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 621.545383][T19533] tipc: Can't bind to reserved service type 0 [ 621.573513][T19354] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 621.580494][T19354] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 621.644183][T19354] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 621.765256][ T6093] Bluetooth: hci3: command tx timeout [ 621.871447][T19538] netlink: 'syz.0.5911': attribute type 11 has an invalid length. [ 621.930817][T19354] hsr_slave_0: entered promiscuous mode [ 621.966088][T19354] hsr_slave_1: entered promiscuous mode [ 622.006512][T19354] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 622.018717][T19354] Cannot create hsr debugfs directory [ 622.321770][ T27] audit: type=1326 audit(1750346837.525:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19558 comm="syz.1.5919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa525f8e929 code=0x7ffc0000 [ 622.365628][T19563] loop0: detected capacity change from 0 to 128 [ 622.396883][ T27] audit: type=1326 audit(1750346837.525:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19558 comm="syz.1.5919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa525f8e929 code=0x7ffc0000 [ 622.407087][T19563] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 622.506363][ T27] audit: type=1326 audit(1750346837.572:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19558 comm="syz.1.5919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fa525f8e929 code=0x7ffc0000 [ 622.604737][ T27] audit: type=1326 audit(1750346837.572:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19558 comm="syz.1.5919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa525f8e929 code=0x7ffc0000 [ 622.727717][ T965] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 622.922463][ T965] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 622.937704][ T965] usb 3-1: config 0 interface 0 has no altsetting 0 [ 622.965840][ T965] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 622.994977][ T965] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 623.013615][ T965] usb 3-1: Product: syz [ 623.023121][ T965] usb 3-1: Manufacturer: syz [ 623.037732][ T965] usb 3-1: SerialNumber: syz [ 623.071112][ T965] usb 3-1: config 0 descriptor?? [ 623.093884][ T965] usb 3-1: selecting invalid altsetting 0 [ 623.168582][T19584] netlink: 56 bytes leftover after parsing attributes in process `syz.1.5929'. [ 623.420636][ T6280] usb 3-1: USB disconnect, device number 63 [ 623.834208][T19602] loop1: detected capacity change from 0 to 2048 [ 623.916741][T19602] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 623.922536][T19354] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 623.949661][T19612] loop0: detected capacity change from 0 to 1024 [ 623.986335][T19354] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 624.000309][ T6093] Bluetooth: hci3: command tx timeout [ 624.040682][T19354] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 624.061255][ T6087] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 624.147131][T19612] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 624.217184][T19354] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 624.253611][T19612] ext4 filesystem being mounted at /1458/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 624.334226][T19612] EXT4-fs error (device loop0): ext4_free_blocks:6681: comm syz.0.5936: Freeing blocks not in datazone - block = 0, count = 16 [ 624.410814][T19612] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 624.514739][T19354] 8021q: adding VLAN 0 to HW filter on device bond0 [ 624.586214][T19354] 8021q: adding VLAN 0 to HW filter on device team0 [ 624.612595][ T6096] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 624.634124][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 624.641323][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 624.679190][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 624.686400][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 624.857008][T19354] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 624.886444][T19354] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 625.253259][T19650] loop0: detected capacity change from 0 to 1764 [ 625.573386][T19354] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 625.711770][T19354] veth0_vlan: entered promiscuous mode [ 625.758204][T19354] veth1_vlan: entered promiscuous mode [ 625.818821][ T785] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 625.838608][T19354] veth0_macvtap: entered promiscuous mode [ 625.855846][T19354] veth1_macvtap: entered promiscuous mode [ 625.917459][T19354] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 625.946372][T19354] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 625.956230][T19354] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 625.976275][T19354] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 625.988210][T19354] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 626.004518][T19354] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 626.015416][T19354] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 626.029021][T19679] loop1: detected capacity change from 0 to 2048 [ 626.033563][T19354] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 626.062419][ T785] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 626.064130][T19679] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 626.090512][ T785] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 626.105900][T19354] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 626.120650][ T785] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 626.122121][T19354] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 626.141654][ T785] usb 3-1: Product: syz [ 626.150076][ T785] usb 3-1: Manufacturer: syz [ 626.154721][ T785] usb 3-1: SerialNumber: syz [ 626.157219][T19354] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 626.168449][T19681] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 626.180278][T19679] syz.1.5954: attempt to access beyond end of device [ 626.180278][T19679] loop1: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 [ 626.192549][T19354] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 626.224413][T19354] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 626.233505][T19354] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 626.256635][T19679] syz.1.5954: attempt to access beyond end of device [ 626.256635][T19679] loop1: rw=0, sector=33554430, nr_sectors = 2 limit=2048 [ 626.301911][T19679] NILFS (loop1): I/O error reading meta-data file (ino=6, block-offset=3) [ 626.324933][T19679] NILFS (loop1): error -5 reading inode: ino=15 [ 626.442655][ T785] cdc_ncm 3-1:1.0: bind() failure [ 626.483110][ T785] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 626.489982][ T785] cdc_ncm 3-1:1.1: bind() failure [ 626.537221][ T3498] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 626.552610][ T785] usb 3-1: USB disconnect, device number 64 [ 626.595910][ T3498] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 626.668565][ T1088] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 626.706369][ T1088] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 627.114176][T19705] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 627.243350][T19711] loop2: detected capacity change from 0 to 256 [ 627.295144][T19711] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 627.911648][T19737] loop1: detected capacity change from 0 to 64 [ 627.957532][T19737] Bad inode number on dev loop1: 6 is out of range [ 628.424581][T19756] netlink: 763 bytes leftover after parsing attributes in process `syz.3.5977'. [ 628.727147][ T6280] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 628.899555][T19753] loop2: detected capacity change from 0 to 32768 [ 628.940859][ T6280] usb 2-1: Using ep0 maxpacket: 8 [ 628.952269][ T6280] usb 2-1: config 0 has an invalid interface number: 12 but max is 0 [ 628.974793][ T6280] usb 2-1: config 0 has no interface number 0 [ 629.004352][ T6280] usb 2-1: New USB device found, idVendor=1c04, idProduct=0015, bcdDevice=f7.bd [ 629.020552][ T6280] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 629.048129][ T6280] usb 2-1: Product: syz [ 629.052956][ T6280] usb 2-1: Manufacturer: syz [ 629.061089][ T6280] usb 2-1: SerialNumber: syz [ 629.073537][ T111] blkno = 5002c, nblocks = 1 [ 629.078559][ T111] ERROR: (device loop2): dbUpdatePMap: blocks are outside the map [ 629.078559][ T111] [ 629.099937][ T111] ERROR: (device loop2): remounting filesystem as read-only [ 629.113677][ T6280] usb 2-1: config 0 descriptor?? [ 629.370099][ T6280] usb 2-1: USB disconnect, device number 67 [ 629.390247][ T6091] JFS: metapage_get_blocks failed [ 629.657591][T19796] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5991'. [ 629.874309][T19803] netlink: 76 bytes leftover after parsing attributes in process `syz.3.5993'. [ 631.224400][T19866] xt_hashlimit: invalid interval [ 632.040229][T19901] loop2: detected capacity change from 0 to 256 [ 632.178082][T19901] FAT-fs (loop2): Directory bread(block 64) failed [ 632.200467][T19901] FAT-fs (loop2): Directory bread(block 65) failed [ 632.231915][T19901] FAT-fs (loop2): Directory bread(block 66) failed [ 632.244371][T19901] FAT-fs (loop2): Directory bread(block 67) failed [ 632.279751][T19901] FAT-fs (loop2): Directory bread(block 68) failed [ 632.298725][T19901] FAT-fs (loop2): Directory bread(block 69) failed [ 632.305617][T19901] FAT-fs (loop2): Directory bread(block 70) failed [ 632.320088][T19901] FAT-fs (loop2): Directory bread(block 71) failed [ 632.344233][T19901] FAT-fs (loop2): Directory bread(block 72) failed [ 632.350821][T19901] FAT-fs (loop2): Directory bread(block 73) failed [ 632.953193][T19939] xt_CT: You must specify a L4 protocol and not use inversions on it [ 633.045615][ T27] audit: type=1326 audit(1750346847.559:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19940 comm="syz.3.6054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4702b8e929 code=0x7ffc0000 [ 633.134436][ T27] audit: type=1326 audit(1750346847.596:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19940 comm="syz.3.6054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4702b8e929 code=0x7ffc0000 [ 633.241762][ T27] audit: type=1326 audit(1750346847.596:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19940 comm="syz.3.6054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=64 compat=0 ip=0x7f4702b8e929 code=0x7ffc0000 [ 633.297864][ T27] audit: type=1326 audit(1750346847.596:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19940 comm="syz.3.6054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4702b8e929 code=0x7ffc0000 [ 633.332286][ T27] audit: type=1326 audit(1750346847.596:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19940 comm="syz.3.6054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4702b8e929 code=0x7ffc0000 [ 633.338931][T19952] loop3: detected capacity change from 0 to 256 [ 633.363181][ T27] audit: type=1326 audit(1750346847.830:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19950 comm="syz.2.6059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ed9d8e929 code=0x7ffc0000 [ 633.419987][ T27] audit: type=1326 audit(1750346847.830:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19950 comm="syz.2.6059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ed9d8e929 code=0x7ffc0000 [ 633.431825][T19948] loop1: detected capacity change from 0 to 4096 [ 633.541312][T19948] ntfs: volume version 3.1. [ 633.549943][ T27] audit: type=1326 audit(1750346847.830:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19950 comm="syz.2.6059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f6ed9d8e929 code=0x7ffc0000 [ 633.624461][ T27] audit: type=1326 audit(1750346847.830:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19950 comm="syz.2.6059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ed9d8e929 code=0x7ffc0000 [ 633.741930][ T27] audit: type=1326 audit(1750346847.830:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19950 comm="syz.2.6059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ed9d8e929 code=0x7ffc0000 [ 634.049204][ T785] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0 [ 634.098687][ T785] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0 [ 634.117066][ T785] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0 [ 634.158367][ T785] hid-generic 0003:0004:0000.0001: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 634.379545][T19975] fido_id[19975]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 634.458030][T19983] loop0: detected capacity change from 0 to 16 [ 634.501116][T19983] erofs: (device loop0): mounted with root inode @ nid 36. [ 634.532208][T19985] loop3: detected capacity change from 0 to 512 [ 634.582626][T19983] syz.0.6074: attempt to access beyond end of device [ 634.582626][T19983] loop0: rw=0, sector=8, nr_sectors = 16 limit=16 [ 634.613475][T19985] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 634.669648][T19985] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #16: comm syz.3.6075: invalid indirect mapped block 4294967295 (level 0) [ 634.733765][T19985] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #16: comm syz.3.6075: invalid indirect mapped block 4294967295 (level 1) [ 634.784890][T19966] loop1: detected capacity change from 0 to 40427 [ 634.803701][T19966] F2FS-fs (loop1): Small segment_count (9 < 1 * 24) [ 634.817075][T19966] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 634.837747][T19985] EXT4-fs (loop3): 1 orphan inode deleted [ 634.843540][T19985] EXT4-fs (loop3): 1 truncate cleaned up [ 634.873012][T19985] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 634.912372][T19966] F2FS-fs (loop1): Found nat_bits in checkpoint [ 635.042623][T19966] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 635.079207][T19966] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 635.180483][T19999] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6080'. [ 635.181596][T19354] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 635.387880][ T6087] syz-executor: attempt to access beyond end of device [ 635.387880][ T6087] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 635.457208][ T6087] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 636.106199][T20031] netlink: 264 bytes leftover after parsing attributes in process `syz.0.6097'. [ 636.133185][T20031] netlink: 56 bytes leftover after parsing attributes in process `syz.0.6097'. [ 636.368097][T20035] netlink: 192 bytes leftover after parsing attributes in process `syz.0.6099'. [ 636.404745][T20039] netlink: 220 bytes leftover after parsing attributes in process `syz.1.6085'. [ 636.777396][T20029] loop3: detected capacity change from 0 to 32768 [ 636.930189][T20029] ocfs2: Mounting device (7,3) on (node local, slot 0) with writeback data mode. [ 637.320838][T20029] syz.3.6096 (20029) used greatest stack depth: 18704 bytes left [ 637.362904][T19354] ocfs2: Unmounting device (7,3) on (node local) [ 637.500404][T20073] loop2: detected capacity change from 0 to 512 [ 637.562000][T20073] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 637.580985][T20073] ext4 filesystem being mounted at /1480/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 637.688188][T20065] loop0: detected capacity change from 0 to 32768 [ 637.721974][T20065] ocfs2: Slot 0 on device (7,0) was already allocated to this node! [ 637.806562][T20065] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 637.847038][ T6091] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 638.052263][ T6096] ocfs2: Unmounting device (7,0) on (node local) [ 638.202308][T20093] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6124'. [ 638.509580][ T27] kauditd_printk_skb: 1 callbacks suppressed [ 638.509596][ T27] audit: type=1326 audit(1750346852.674:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20104 comm="syz.2.6130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ed9d8e929 code=0x7ffc0000 [ 638.585638][T20111] Unsupported ieee802154 address type: 0 [ 638.608152][ T27] audit: type=1326 audit(1750346852.674:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20104 comm="syz.2.6130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ed9d8e929 code=0x7ffc0000 [ 638.712019][ T27] audit: type=1326 audit(1750346852.711:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20104 comm="syz.2.6130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=249 compat=0 ip=0x7f6ed9d8e929 code=0x7ffc0000 [ 638.774023][ T27] audit: type=1326 audit(1750346852.711:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20104 comm="syz.2.6130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ed9d8e929 code=0x7ffc0000 [ 638.864559][ T27] audit: type=1326 audit(1750346852.711:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20104 comm="syz.2.6130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ed9d8e929 code=0x7ffc0000 [ 638.942070][T20125] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6137'. [ 638.951734][T20125] netlink: 'syz.0.6137': attribute type 2 has an invalid length. [ 639.214075][T20133] loop2: detected capacity change from 0 to 1024 [ 639.432720][ T58] hfsplus: b-tree write err: -5, ino 4 [ 639.786414][T20156] loop0: detected capacity change from 0 to 256 [ 639.881913][T20156] exFAT-fs (loop0): failed to load upcase table (idx : 0x00017f3e, chksum : 0x0b83170a, utbl_chksum : 0xe619d30d) [ 640.224664][T20174] netlink: 52 bytes leftover after parsing attributes in process `syz.3.6163'. [ 640.370059][T20180] Cannot find del_set index 17 as target [ 640.868140][T20198] loop2: detected capacity change from 0 to 512 [ 640.886873][T20198] EXT4-fs: Ignoring removed oldalloc option [ 640.892899][T20198] EXT4-fs: Ignoring removed orlov option [ 640.957561][T20198] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 641.040452][T20198] EXT4-fs (loop2): orphan cleanup on readonly fs [ 641.101682][T20198] EXT4-fs error (device loop2): ext4_validate_block_bitmap:439: comm syz.2.6175: bg 0: block 248: padding at end of block bitmap is not set [ 641.167950][T20198] Quota error (device loop2): write_blk: dquota write failed [ 641.191426][T20198] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 641.231914][T20198] EXT4-fs error (device loop2): ext4_acquire_dquot:6938: comm syz.2.6175: Failed to acquire dquot type 1 [ 641.266421][T20198] EXT4-fs (loop2): 1 truncate cleaned up [ 641.286874][T20198] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 641.327837][T20198] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 641.393381][T20184] loop1: detected capacity change from 0 to 32768 [ 641.475664][T20184] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 641.727087][T20184] XFS (loop1): Ending clean mount [ 641.909625][T20236] netlink: 'syz.3.6188': attribute type 11 has an invalid length. [ 641.932645][T20237] loop2: detected capacity change from 0 to 1024 [ 641.955238][T20237] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 641.965902][ T6087] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 641.984675][T20237] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 642.040159][T20237] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c800e02c, mo2=0000] [ 642.098270][T20237] EXT4-fs error (device loop2): ext4_map_blocks:608: inode #3: block 2: comm syz.2.6187: lblock 2 mapped to illegal pblock 2 (length 1) [ 642.160719][T20237] EXT4-fs (loop2): Remounting filesystem read-only [ 642.182227][T20237] Quota error (device loop2): qtree_write_dquot: dquota write failed [ 642.190424][T20237] Quota error (device loop2): v2_write_file_info: Can't write info structure [ 642.217480][T20237] EXT4-fs (loop2): 1 orphan inode deleted [ 642.237424][T20237] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 642.300019][T20237] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 642.418168][T20247] loop3: detected capacity change from 0 to 512 [ 642.508927][T20247] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 642.554815][T20247] ext4 filesystem being mounted at /68/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 642.799211][T19354] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 642.843233][ T27] audit: type=1326 audit(1750346856.713:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20266 comm="syz.2.6200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ed9d8e929 code=0x7ffc0000 [ 643.059484][T20275] loop0: detected capacity change from 0 to 512 [ 643.090270][T20275] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 643.117696][T20275] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 643.164299][T20275] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=884ee02c, mo2=0102] [ 643.172522][T20275] EXT4-fs (loop0): orphan cleanup on readonly fs [ 643.192876][T20275] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.6204: invalid indirect mapped block 2185560079 (level 1) [ 643.243194][T20275] EXT4-fs (loop0): Remounting filesystem read-only [ 643.250553][T20275] EXT4-fs (loop0): 1 truncate cleaned up [ 643.257877][T20275] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: writeback. [ 643.294111][T20275] EXT4-fs warning (device loop0): dx_probe:893: inode #2: comm syz.0.6204: dx entry: limit 0 != root limit 125 [ 643.307152][T20275] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.6204: Corrupt directory, running e2fsck is recommended [ 643.347804][ T6096] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 643.491588][T20290] loop0: detected capacity change from 0 to 256 [ 643.579863][T20290] FAT-fs (loop0): Directory bread(block 64) failed [ 643.590183][T20290] FAT-fs (loop0): Directory bread(block 65) failed [ 643.610766][T20290] FAT-fs (loop0): Directory bread(block 66) failed [ 643.632307][T20290] FAT-fs (loop0): Directory bread(block 67) failed [ 643.641706][T20290] FAT-fs (loop0): Directory bread(block 68) failed [ 643.656059][T20294] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6214'. [ 643.675895][T20290] FAT-fs (loop0): Directory bread(block 69) failed [ 643.686799][T20290] FAT-fs (loop0): Directory bread(block 70) failed [ 643.707525][T20290] FAT-fs (loop0): Directory bread(block 71) failed [ 643.724992][T20290] FAT-fs (loop0): Directory bread(block 72) failed [ 643.750364][T20290] FAT-fs (loop0): Directory bread(block 73) failed [ 644.218378][T20288] loop2: detected capacity change from 0 to 32768 [ 644.299184][T20288] ocfs2: Slot 0 on device (7,2) was already allocated to this node! [ 644.357755][T20288] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 644.489270][T20324] loop3: detected capacity change from 0 to 256 [ 644.650997][ T6091] ocfs2: Unmounting device (7,2) on (node local) [ 644.917620][ T27] kauditd_printk_skb: 4 callbacks suppressed [ 644.917635][ T27] audit: type=1326 audit(2000000000.617:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20334 comm="syz.3.6230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4702b8e929 code=0x7ffc0000 [ 645.035281][ T27] audit: type=1326 audit(2000000000.617:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20334 comm="syz.3.6230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4702b8e929 code=0x7ffc0000 [ 645.099551][ T6074] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 645.131516][ T27] audit: type=1326 audit(2000000000.617:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20334 comm="syz.3.6230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=447 compat=0 ip=0x7f4702b8e929 code=0x7ffc0000 [ 645.217139][ T27] audit: type=1326 audit(2000000000.617:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20334 comm="syz.3.6230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4702b8e929 code=0x7ffc0000 [ 645.290617][ T27] audit: type=1326 audit(2000000000.617:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20334 comm="syz.3.6230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4702b8e929 code=0x7ffc0000 [ 645.309730][ T6074] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 645.379360][ T6074] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 645.415140][ T6074] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 645.425952][ T6074] usb 2-1: Product: syz [ 645.430175][ T6074] usb 2-1: Manufacturer: syz [ 645.451650][ T6074] usb 2-1: SerialNumber: syz [ 645.699731][ T6074] cdc_ncm 2-1:1.0: bind() failure [ 645.722527][ T6074] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 645.749944][ T6074] cdc_ncm 2-1:1.1: bind() failure [ 645.773823][ T6074] usb 2-1: USB disconnect, device number 68 [ 645.876952][T20339] loop0: detected capacity change from 0 to 32768 [ 645.934036][T20343] loop3: detected capacity change from 0 to 32768 [ 645.973966][T20339] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 646.026632][T20343] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 646.172303][T20343] XFS (loop3): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 646.214747][T20339] XFS (loop0): Ending clean mount [ 646.233368][T20343] XFS (loop3): Starting recovery (logdev: internal) [ 646.285379][T20343] XFS (loop3): Ending recovery (logdev: internal) [ 646.416465][ T6096] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 646.435103][T19354] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 648.489305][T20438] loop0: detected capacity change from 0 to 1024 [ 648.549607][T20440] loop1: detected capacity change from 0 to 1024 [ 648.673915][T20423] loop3: detected capacity change from 0 to 32768 [ 648.739866][T20423] ocfs2: Slot 0 on device (7,3) was already allocated to this node! [ 648.818973][T20423] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 648.960232][T19354] ocfs2: Unmounting device (7,3) on (node local) [ 648.979653][T20448] loop0: detected capacity change from 0 to 256 [ 649.797743][T20472] afs: Unknown parameter 'd' [ 650.046728][T20452] loop3: detected capacity change from 0 to 32768 [ 650.091531][T20486] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6293'. [ 650.192185][T20452] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 650.430597][T20452] XFS (loop3): Ending clean mount [ 650.750623][T19354] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 650.960052][T20517] usb usb1: usbfs: process 20517 (syz.0.6305) did not claim interface 0 before use [ 651.582735][ T27] audit: type=1107 audit(2000000006.844:189): pid=20539 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 651.855606][T20548] loop0: detected capacity change from 0 to 128 [ 652.184152][T20558] loop3: detected capacity change from 0 to 256 [ 652.301292][T20537] loop2: detected capacity change from 0 to 32768 [ 652.305197][T20558] FAT-fs (loop3): Directory bread(block 64) failed [ 652.339139][T20558] FAT-fs (loop3): Directory bread(block 65) failed [ 652.382691][T20558] FAT-fs (loop3): Directory bread(block 66) failed [ 652.389289][T20558] FAT-fs (loop3): Directory bread(block 67) failed [ 652.417918][T20537] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 652.427380][T20558] FAT-fs (loop3): Directory bread(block 68) failed [ 652.433965][T20558] FAT-fs (loop3): Directory bread(block 69) failed [ 652.446656][T20558] FAT-fs (loop3): Directory bread(block 70) failed [ 652.461962][T20558] FAT-fs (loop3): Directory bread(block 71) failed [ 652.489537][T20558] FAT-fs (loop3): Directory bread(block 72) failed [ 652.496138][T20558] FAT-fs (loop3): Directory bread(block 73) failed [ 652.629713][T20537] XFS (loop2): Ending clean mount [ 652.715346][T20580] loop0: detected capacity change from 0 to 8 [ 652.989511][ T6091] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 653.065119][T20585] loop0: detected capacity change from 0 to 2048 [ 653.156624][T20585] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 653.286199][T20590] loop3: detected capacity change from 0 to 2048 [ 653.343298][T20590] UDF-fs: error (device loop3): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 653.365276][T20593] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6338'. [ 653.376447][T20590] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 653.397711][T20593] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6338'. [ 653.422454][T20590] UDF-fs: Scanning with blocksize 512 failed [ 653.448553][T20593] ip6gretap1: entered allmulticast mode [ 653.490737][T20590] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 653.635137][ T27] audit: type=1107 audit(2000000008.780:190): pid=20596 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 653.811972][T20605] loop0: detected capacity change from 0 to 256 [ 653.871378][T20604] loop2: detected capacity change from 0 to 1024 [ 654.088471][T20605] FAT-fs (loop0): Directory bread(block 64) failed [ 654.104063][T20605] FAT-fs (loop0): Directory bread(block 65) failed [ 654.111190][ T1082] hfsplus: b-tree write err: -5, ino 4 [ 654.112383][T20605] FAT-fs (loop0): Directory bread(block 66) failed [ 654.159296][T20605] FAT-fs (loop0): Directory bread(block 67) failed [ 654.176945][T20605] FAT-fs (loop0): Directory bread(block 68) failed [ 654.199476][T20605] FAT-fs (loop0): Directory bread(block 69) failed [ 654.207160][T20605] FAT-fs (loop0): Directory bread(block 70) failed [ 654.235219][T20605] FAT-fs (loop0): Directory bread(block 71) failed [ 654.263427][T20605] FAT-fs (loop0): Directory bread(block 72) failed [ 654.285898][T20605] FAT-fs (loop0): Directory bread(block 73) failed [ 654.458411][T20619] netlink: 11 bytes leftover after parsing attributes in process `syz.1.6350'. [ 654.819164][T20610] loop3: detected capacity change from 0 to 32768 [ 655.064974][T20638] loop2: detected capacity change from 0 to 512 [ 655.110507][T20638] EXT4-fs error (device loop2): ext4_get_journal_inode:5805: comm syz.2.6358: inode #1792: comm syz.2.6358: iget: illegal inode # [ 655.147467][T20638] EXT4-fs (loop2): Remounting filesystem read-only [ 655.189907][T20638] EXT4-fs (loop2): no journal found [ 655.205601][T20638] EXT4-fs (loop2): can't get journal size [ 655.206365][T20645] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6362'. [ 655.236652][T20638] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 655.282992][T20638] EXT4-fs (loop2): Errors on filesystem, clearing orphan list. [ 655.339545][T20638] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 655.519610][T20653] loop1: detected capacity change from 0 to 1024 [ 655.545486][ T6091] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 655.606089][T20653] hfsplus: xattr searching failed [ 655.855394][T20662] loop0: detected capacity change from 0 to 1024 [ 655.990688][T20668] lo speed is unknown, defaulting to 1000 [ 656.039594][T20668] lo speed is unknown, defaulting to 1000 [ 656.076154][T20668] lo speed is unknown, defaulting to 1000 [ 656.112433][T20668] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 656.119083][T20672] loop3: detected capacity change from 0 to 256 [ 656.185981][T20668] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 656.187929][T20672] exFAT-fs (loop3): failed to load upcase table (idx : 0x000104d0, chksum : 0xda218cab, utbl_chksum : 0xe619d30d) [ 656.361855][T20668] lo speed is unknown, defaulting to 1000 [ 656.371272][T20672] exFAT-fs (loop3): error, invalid access to FAT free cluster (entry 0x00000008) [ 656.373009][T20668] lo speed is unknown, defaulting to 1000 [ 656.381100][T20672] exFAT-fs (loop3): Filesystem has been set read-only [ 656.458210][T20668] lo speed is unknown, defaulting to 1000 [ 656.479566][T20668] lo speed is unknown, defaulting to 1000 [ 656.694446][ T27] audit: type=1326 audit(2000000011.632:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20687 comm="syz.3.6381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4702b8e929 code=0x7ffc0000 [ 656.765234][ T27] audit: type=1326 audit(2000000011.632:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20687 comm="syz.3.6381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4702b8e929 code=0x7ffc0000 [ 656.823076][ T27] audit: type=1326 audit(2000000011.632:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20687 comm="syz.3.6381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=282 compat=0 ip=0x7f4702b8e929 code=0x7ffc0000 [ 656.880190][ T27] audit: type=1326 audit(2000000011.632:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20687 comm="syz.3.6381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4702b8e929 code=0x7ffc0000 [ 656.880572][T20691] xt_CT: No such helper "snmp" [ 656.903388][ T27] audit: type=1326 audit(2000000011.632:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20687 comm="syz.3.6381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4702b8e929 code=0x7ffc0000 [ 656.974743][T20699] binder: 20697:20699 ioctl 40046205 0 returned -22 [ 657.159454][T20705] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6389'. [ 657.761646][T20725] qrtr: Invalid version 195 [ 658.019936][T20711] loop2: detected capacity change from 0 to 32768 [ 658.100085][T20711] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 658.264926][T20751] binfmt_misc: register: failed to install interpreter file ./file0 [ 658.304935][T20711] XFS (loop2): Ending clean mount [ 658.320228][T20711] XFS (loop2): Quotacheck needed: Please wait. [ 658.446778][T20711] XFS (loop2): Quotacheck: Done. [ 658.531310][T20754] loop3: detected capacity change from 0 to 4096 [ 658.579146][T20754] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512). [ 658.654774][ T6091] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 659.053767][T20767] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6418'. [ 659.065290][T20771] loop0: detected capacity change from 0 to 1764 [ 659.086681][T20770] usb usb8: usbfs: process 20770 (syz.3.6419) did not claim interface 0 before use [ 659.335202][T20775] loop2: detected capacity change from 0 to 2048 [ 659.398571][T20781] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 659.520947][T20775] NILFS (loop2): error -2 truncating bmap (ino=16) [ 659.537502][T20782] loop0: detected capacity change from 0 to 4096 [ 659.586162][T20786] xt_CT: You must specify a L4 protocol and not use inversions on it [ 659.610345][T20787] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 659.618387][T20781] NILFS (loop2): vblocknr = 15 has abnormal lifetime: start cno (= 4128770) > current cno (= 3) [ 659.651640][T20781] NILFS error (device loop2): nilfs_bmap_propagate: broken bmap (inode number=16) [ 659.716902][T20781] Remounting filesystem read-only [ 659.725922][ T48] NILFS (loop2): discard dirty page: offset=0, ino=3 [ 659.739501][ T48] NILFS (loop2): discard dirty block: blocknr=42, size=1024 [ 659.750064][ T48] NILFS (loop2): discard dirty block: blocknr=43, size=1024 [ 659.762992][ T48] NILFS (loop2): discard dirty block: blocknr=44, size=1024 [ 659.767765][T20789] netlink: 372 bytes leftover after parsing attributes in process `syz.1.6428'. [ 659.781788][ T48] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 659.792355][ T48] NILFS (loop2): discard dirty page: offset=4096, ino=6 [ 659.806026][ T48] NILFS (loop2): discard dirty block: blocknr=39, size=1024 [ 659.813436][ T48] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 659.826329][ T6052] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 659.829089][ T48] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 659.854182][ T48] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 659.875423][ T48] NILFS (loop2): discard dirty page: offset=0, ino=5 [ 659.900405][ T48] NILFS (loop2): discard dirty block: blocknr=41, size=1024 [ 659.907755][ T48] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 659.939141][ T48] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 659.949724][ T48] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 659.961051][ T6091] NILFS (loop2): disposed unprocessed dirty file(s) when stopping log writer [ 659.971691][ T6091] NILFS (loop2): discard dirty page: offset=0, ino=16 [ 659.994261][ T6091] NILFS (loop2): discard dirty block: blocknr=23, size=1024 [ 660.005539][ T6091] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 660.021557][ T6091] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 660.021586][ T6091] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 660.034128][ T6052] usb 4-1: Using ep0 maxpacket: 32 [ 660.040553][ T6052] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 64 [ 660.040586][ T6052] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 660.040605][ T6052] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 660.056803][ T6052] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 660.056833][ T6052] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 660.056852][ T6052] usb 4-1: Product: syz [ 660.056865][ T6052] usb 4-1: Manufacturer: syz [ 660.056878][ T6052] usb 4-1: SerialNumber: syz [ 660.298173][ T6052] cdc_ncm 4-1:1.0: bind() failure [ 660.309439][ T6052] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 660.338709][ T6052] cdc_ncm 4-1:1.1: bind() failure [ 660.364343][ T6052] usb 4-1: USB disconnect, device number 60 [ 660.428338][T20791] loop0: detected capacity change from 0 to 32768 [ 660.464561][T20791] JBD2: Ignoring recovery information on journal [ 660.554499][T20791] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 660.644585][T20808] loop2: detected capacity change from 0 to 256 [ 660.725936][T20808] exFAT-fs (loop2): failed to load upcase table (idx : 0x000104d0, chksum : 0xda218cab, utbl_chksum : 0xe619d30d) [ 660.769073][T20808] exFAT-fs (loop2): error, invalid access to FAT free cluster (entry 0x00000008) [ 660.778743][T20808] exFAT-fs (loop2): Filesystem has been set read-only [ 660.828361][ T6096] ocfs2: Unmounting device (7,0) on (node local) [ 661.273028][T20824] siw: device registration error -23 [ 661.669744][T20821] loop2: detected capacity change from 0 to 32768 [ 661.693115][T20821] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 661.742939][T20821] XFS (loop2): Ending clean mount [ 661.877886][T20832] loop1: detected capacity change from 0 to 32768 [ 661.892827][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 661.899344][ T1274] ieee802154 phy1 wpan1: encryption failed: -22 [ 661.943325][ T6091] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 661.959677][T20832] JBD2: Ignoring recovery information on journal [ 662.022634][T20832] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 662.276062][ T6087] ocfs2: Unmounting device (7,1) on (node local) [ 662.328425][T20829] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 662.717020][T20861] loop1: detected capacity change from 0 to 256 [ 662.776453][T20860] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 662.817136][T20861] exFAT-fs (loop1): failed to load upcase table (idx : 0x000104d0, chksum : 0xda218cab, utbl_chksum : 0xe619d30d) [ 662.990687][T20861] exFAT-fs (loop1): error, invalid access to FAT free cluster (entry 0x00000008) [ 663.015067][T20861] exFAT-fs (loop1): Filesystem has been set read-only [ 663.600366][ T6093] Bluetooth: hci0: command 0x0406 tx timeout [ 663.634567][T20896] loop2: detected capacity change from 0 to 4096 [ 663.740071][T20900] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 663.754481][T20901] loop0: detected capacity change from 0 to 256 [ 664.501411][T20925] loop2: detected capacity change from 0 to 64 [ 664.554070][T20892] loop3: detected capacity change from 0 to 40427 [ 664.598552][T20892] F2FS-fs (loop3): Insane cp_payload (553648128 >= 504) [ 664.643591][T20892] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 664.685379][T20892] F2FS-fs (loop3): invalid crc value [ 664.712054][T20892] F2FS-fs (loop3): Found nat_bits in checkpoint [ 664.905663][T20892] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 664.912759][T20892] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 664.952515][T20940] loop2: detected capacity change from 0 to 164 [ 665.051139][T20942] netlink: 'syz.1.6495': attribute type 21 has an invalid length. [ 665.065361][T20942] netlink: 164 bytes leftover after parsing attributes in process `syz.1.6495'. [ 665.300283][T20946] loop2: detected capacity change from 0 to 4096 [ 665.321118][T20946] ntfs3: loop2: Different NTFS sector size (1024) and media sector size (512). [ 665.803345][T20960] netlink: 'syz.0.6503': attribute type 10 has an invalid length. [ 665.827238][T20960] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 666.115174][T20969] lo speed is unknown, defaulting to 1000 [ 666.683523][T20987] netlink: 'syz.1.6516': attribute type 21 has an invalid length. [ 667.328124][T21008] gre1: entered promiscuous mode [ 667.606165][ T27] audit: type=1326 audit(2000000021.815:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21016 comm="syz.0.6532" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd56938e929 code=0x7ffc0000 [ 667.680551][ T27] audit: type=1326 audit(2000000021.843:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21016 comm="syz.0.6532" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd56938e929 code=0x7ffc0000 [ 667.770835][ T27] audit: type=1326 audit(2000000021.843:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21016 comm="syz.0.6532" exe="/root/syz-executor" sig=0 arch=c000003e syscall=97 compat=0 ip=0x7fd56938e929 code=0x7ffc0000 [ 667.855669][ T27] audit: type=1326 audit(2000000021.843:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21016 comm="syz.0.6532" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd56938e929 code=0x7ffc0000 [ 667.938551][ T27] audit: type=1326 audit(2000000021.843:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21016 comm="syz.0.6532" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd56938e929 code=0x7ffc0000 [ 668.027489][ T27] audit: type=1326 audit(2000000021.890:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21018 comm="syz.1.6531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa525f8e929 code=0x7ffc0000 [ 668.123578][ T27] audit: type=1326 audit(2000000021.890:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21018 comm="syz.1.6531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa525f8e929 code=0x7ffc0000 [ 668.220371][ T27] audit: type=1326 audit(2000000021.890:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21018 comm="syz.1.6531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=442 compat=0 ip=0x7fa525f8e929 code=0x7ffc0000 [ 668.348449][ T27] audit: type=1326 audit(2000000021.890:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21018 comm="syz.1.6531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa525f8e929 code=0x7ffc0000 [ 668.714728][T21012] loop2: detected capacity change from 0 to 40427 [ 668.795972][T21012] F2FS-fs (loop2): invalid crc value [ 668.846285][T21012] F2FS-fs (loop2): Found nat_bits in checkpoint [ 669.029319][T21012] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 669.097536][T21059] loop3: detected capacity change from 0 to 4096 [ 669.114372][T21059] ntfs3: loop3: Different NTFS sector size (1024) and media sector size (512). [ 669.747557][T21071] netlink: 'syz.3.6556': attribute type 29 has an invalid length. [ 669.768890][T21071] netlink: 'syz.3.6556': attribute type 29 has an invalid length. [ 669.857054][T21075] loop1: detected capacity change from 0 to 2048 [ 669.908380][T21080] loop0: detected capacity change from 0 to 256 [ 669.916947][T21082] netlink: 'syz.3.6561': attribute type 1 has an invalid length. [ 669.926627][T21082] netlink: 'syz.3.6561': attribute type 2 has an invalid length. [ 669.937172][T21080] exfat: Deprecated parameter 'utf8' [ 669.945209][T21080] exfat: Deprecated parameter 'utf8' [ 669.955324][T21075] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 669.982194][T21080] exfat: Deprecated parameter 'utf8' [ 670.035124][T21080] exFAT-fs (loop0): failed to load upcase table (idx : 0x00011f41, chksum : 0xf6d3f72e, utbl_chksum : 0xe619d30d) [ 670.278507][ T27] audit: type=1326 audit(2000000024.340:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21089 comm="syz.3.6565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4702b8e929 code=0x7ffc0000 [ 670.415163][T21097] netlink: 224 bytes leftover after parsing attributes in process `syz.0.6566'. [ 671.048012][T21122] loop1: detected capacity change from 0 to 4096 [ 671.092751][T21122] ntfs3: loop1: Different NTFS sector size (1024) and media sector size (512). [ 672.055886][T21155] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 672.121528][T21161] loop0: detected capacity change from 0 to 256 [ 672.816978][T21185] loop0: detected capacity change from 0 to 2048 [ 672.856861][T21185] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 672.905731][T21191] loop3: detected capacity change from 0 to 16 [ 672.941424][T21191] erofs: (device loop3): mounted with root inode @ nid 36. [ 673.069927][T21195] xt_nfacct: accounting object `syz1' does not exists [ 673.115046][T21197] loop0: detected capacity change from 0 to 512 [ 673.251908][T21197] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 673.322159][T21197] ext4 filesystem being mounted at /1638/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 673.516541][ T6096] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 673.799522][T21216] loop0: detected capacity change from 0 to 8192 [ 674.173285][T21229] loop1: detected capacity change from 0 to 2048 [ 674.246046][T21232] loop2: detected capacity change from 0 to 128 [ 674.252617][T21229] UDF-fs: error (device loop1): udf_process_sequence: Primary Volume Descriptor not found! [ 674.272096][T21229] UDF-fs: unknown compression code (0) [ 674.306901][ C1] sd 0:0:1:0: [sda] tag#1888 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 674.317406][ C1] sd 0:0:1:0: [sda] tag#1888 CDB: Read(6) 08 00 9f d1 fe de [ 674.329789][T21232] EXT4-fs (loop2): Test dummy encryption mode enabled [ 674.346105][T21199] loop3: detected capacity change from 0 to 40427 [ 674.379136][T21232] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 674.379249][T21199] F2FS-fs (loop3): invalid crc value [ 674.432466][T21232] ext4 filesystem being mounted at /1586/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 674.470363][T21199] F2FS-fs (loop3): Found nat_bits in checkpoint [ 674.528693][T21241] loop0: detected capacity change from 0 to 736 [ 674.555852][ T6091] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 674.718742][T21199] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 675.234103][ T27] kauditd_printk_skb: 13 callbacks suppressed [ 675.234119][ T27] audit: type=1326 audit(2000000028.969:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21258 comm="syz.3.6639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4702b8e929 code=0x7ffc0000 [ 675.307737][ T27] audit: type=1326 audit(2000000029.025:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21258 comm="syz.3.6639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4702b8e929 code=0x7ffc0000 [ 675.415149][ T27] audit: type=1326 audit(2000000029.025:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21258 comm="syz.3.6639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7f4702b8e929 code=0x7ffc0000 [ 675.488328][ T27] audit: type=1326 audit(2000000029.025:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21258 comm="syz.3.6639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4702b8e929 code=0x7ffc0000 [ 675.511301][T21266] loop0: detected capacity change from 0 to 2048 [ 675.518920][T21265] Mount JFS Failure: -22 [ 675.542875][T21265] jfs_mount failed w/return code = -22 [ 675.549636][ T27] audit: type=1326 audit(2000000029.025:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21258 comm="syz.3.6639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4702b8e929 code=0x7ffc0000 [ 675.554497][T21269] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6647'. [ 675.588391][T21266] UDF-fs: error (device loop0): udf_process_sequence: Primary Volume Descriptor not found! [ 675.660307][T21266] UDF-fs: unknown compression code (0) [ 675.677969][T21269] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 675.896724][T21278] netlink: 176 bytes leftover after parsing attributes in process `syz.3.6653'. [ 676.247063][T21294] loop2: detected capacity change from 0 to 256 [ 676.470162][T21301] loop0: detected capacity change from 0 to 1024 [ 676.839161][ T12] hfsplus: b-tree write err: -5, ino 4 [ 677.013395][ T27] audit: type=1326 audit(2000000030.624:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21322 comm="syz.0.6670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd56938e929 code=0x7ffc0000 [ 677.055464][T21324] loop1: detected capacity change from 0 to 512 [ 677.064383][ T27] audit: type=1326 audit(2000000030.624:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21322 comm="syz.0.6670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd56938e929 code=0x7ffc0000 [ 677.086833][T21324] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 677.152857][T21324] EXT4-fs (loop1): 1 truncate cleaned up [ 677.215101][T21324] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 677.231592][ T27] audit: type=1326 audit(2000000030.624:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21322 comm="syz.0.6670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=119 compat=0 ip=0x7fd56938e929 code=0x7ffc0000 [ 677.257469][ T27] audit: type=1326 audit(2000000030.624:227): auid=4294967295 uid=0 gid=60928 ses=4294967295 subj=unconfined pid=21322 comm="syz.0.6670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd56938e929 code=0x7ffc0000 [ 677.281372][ T27] audit: type=1326 audit(2000000030.624:228): auid=4294967295 uid=0 gid=60928 ses=4294967295 subj=unconfined pid=21322 comm="syz.0.6670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd56938e929 code=0x7ffc0000 [ 677.456229][ T6087] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 678.296359][T21372] loop3: detected capacity change from 0 to 512 [ 678.344179][T21372] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 678.399469][T21352] loop1: detected capacity change from 0 to 32768 [ 678.409837][T21372] ext4 filesystem being mounted at /172/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 678.426736][T21372] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 678.473900][T21352] ialloc: diAlloc returned -17! [ 679.024532][T21389] loop2: detected capacity change from 0 to 4096 [ 679.033018][T21389] ntfs3: loop2: Different NTFS sector size (2048) and media sector size (512). [ 679.490074][T21408] netdevsim netdevsim3: Direct firmware load for ..€ failed with error -2 [ 679.513059][T21408] netdevsim netdevsim3: Falling back to sysfs fallback for: ..€ [ 680.107440][T21430] netlink: del zone limit has 4 unknown bytes [ 680.131769][T21422] loop1: detected capacity change from 0 to 32768 [ 680.144284][T21422] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop1 scanned by syz.1.6717 (21422) [ 680.179721][T21422] BTRFS info (device loop1): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 680.208649][T21422] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 680.232262][T21422] BTRFS info (device loop1): turning off barriers [ 680.238810][T21422] BTRFS info (device loop1): max_inline at 0 [ 680.255389][T21422] BTRFS info (device loop1): enabling all of the rescue options [ 680.264913][T21422] BTRFS info (device loop1): ignoring data csums [ 680.271365][T21422] BTRFS info (device loop1): ignoring bad roots [ 680.283273][T21422] BTRFS info (device loop1): disabling log replay at mount time [ 680.296430][T21422] BTRFS info (device loop1): force zlib compression, level 3 [ 680.304539][T21422] BTRFS info (device loop1): allowing degraded mounts [ 680.317313][T21422] BTRFS info (device loop1): enabling ssd optimizations [ 680.324312][T21422] BTRFS info (device loop1): using spread ssd allocation scheme [ 680.335311][T21422] BTRFS info (device loop1): using free space tree [ 680.342672][T21422] workqueue: max_active 2097158 requested for btrfs-worker is out of range, clamping between 1 and 512 [ 680.355985][T21422] workqueue: max_active 2097158 requested for btrfs-delalloc is out of range, clamping between 1 and 512 [ 680.412242][T21422] workqueue: max_active 2097158 requested for btrfs-endio is out of range, clamping between 1 and 512 [ 680.474859][T21422] workqueue: max_active 2097158 requested for btrfs-endio-meta is out of range, clamping between 1 and 512 [ 680.507631][T21422] workqueue: max_active 2097158 requested for btrfs-rmw is out of range, clamping between 1 and 512 [ 680.538899][T21422] workqueue: max_active 2097158 requested for btrfs-endio-write is out of range, clamping between 1 and 512 [ 680.585470][T21422] workqueue: max_active 2097158 requested for btrfs-compressed-write is out of range, clamping between 1 and 512 [ 680.641106][ T1082] BTRFS warning (device loop1): checksum verify failed on logical 5337088 mirror 1 wanted 0x324c5e2d0cac2dc8f61cbfdfc8cd69d9816061b1498b9e1bff7d10a59610160b found 0x3fff8ff18ac4f264f26c9b61444b99be3a51e4b9014c9227426415668fcd4ed9 level 0 [ 680.740282][ T48] BTRFS warning (device loop1: state C): checksum verify failed on logical 5328896 mirror 1 wanted 0xe27e479340067083b74b333c1de55c530774f48d9bb4dbb5f2229db663324412 found 0x95f62be744ba79d2c7edda0b7f35c3ed250500c283e6cfbf6ba5d84a2ae65a3d level 1 [ 680.849853][T21422] BTRFS info (device loop1: state C): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 680.985844][ T6500] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop1 scanned by udevd (6500) [ 681.055851][ T6213] kworker/dying (6213) used greatest stack depth: 15824 bytes left [ 681.616204][T21480] xt_CT: No such helper "netbios-ns" [ 681.932598][T21501] loop0: detected capacity change from 0 to 256 [ 681.976741][ T27] kauditd_printk_skb: 5 callbacks suppressed [ 681.976755][ T27] audit: type=1800 audit(2000000035.281:234): pid=21501 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.6746" name="file1" dev="loop0" ino=1048684 res=0 errno=0 [ 682.238700][T21509] loop1: detected capacity change from 0 to 1024 [ 682.250400][T21514] loop2: detected capacity change from 0 to 128 [ 682.263513][T21511] netlink: 88 bytes leftover after parsing attributes in process `syz.3.6752'. [ 682.326516][T21514] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 682.376310][T21514] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 682.599639][ T12] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 682.646924][ T58] hfsplus: b-tree write err: -5, ino 4 [ 682.768429][T21527] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6758'. [ 683.086193][T21535] loop3: detected capacity change from 0 to 4096 [ 683.113826][T21535] ntfs3: loop3: Different NTFS sector size (2048) and media sector size (512). [ 683.367870][T21550] loop0: detected capacity change from 0 to 256 [ 683.465528][T21552] binder: 21551:21552 unknown command 1074553619 [ 683.504008][T21552] binder: 21551:21552 ioctl c0306201 200000000540 returned -22 [ 683.593371][ T6074] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 683.768478][T21561] lo speed is unknown, defaulting to 1000 [ 683.819445][ T6074] usb 3-1: config 0 has an invalid interface number: 69 but max is 0 [ 683.827925][ T6074] usb 3-1: config 0 has no interface number 0 [ 683.844044][ T6074] usb 3-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 683.854119][ T6074] usb 3-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 683.906870][ T6074] usb 3-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 683.916670][ T6074] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 683.923801][T21568] loop1: detected capacity change from 0 to 256 [ 683.934068][ T6074] usb 3-1: Product: syz [ 683.954962][ T6074] usb 3-1: Manufacturer: syz [ 683.959622][ T6074] usb 3-1: SerialNumber: syz [ 683.973545][ T6074] usb 3-1: config 0 descriptor?? [ 683.979809][T21568] FAT-fs (loop1): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 683.982837][T21546] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 684.062511][ T3498] FAT-fs (loop1): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 684.103363][ T6074] cyberjack 3-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 684.173494][ T6074] usb 3-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 684.251554][T21575] netlink: 88 bytes leftover after parsing attributes in process `syz.1.6782'. [ 684.676473][ T6074] usb 3-1: USB disconnect, device number 65 [ 684.697854][ T6074] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 684.698511][ T6074] cyberjack 3-1:0.69: device disconnected [ 685.245178][T21606] loop0: detected capacity change from 0 to 4096 [ 685.270484][T21606] ntfs3: loop0: Different NTFS sector size (4096) and media sector size (512). [ 685.349083][T21606] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 685.450147][ T27] audit: type=1326 audit(2000000038.516:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21609 comm="syz.2.6798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ed9d8e929 code=0x7ffc0000 [ 685.520049][ T27] audit: type=1326 audit(2000000038.516:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21609 comm="syz.2.6798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ed9d8e929 code=0x7ffc0000 [ 685.542404][ C0] vkms_vblank_simulate: vblank timer overrun [ 685.622687][ T27] audit: type=1326 audit(2000000038.554:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21609 comm="syz.2.6798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=263 compat=0 ip=0x7f6ed9d8e929 code=0x7ffc0000 [ 685.705153][ T27] audit: type=1326 audit(2000000038.554:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21609 comm="syz.2.6798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ed9d8e929 code=0x7ffc0000 [ 685.768989][ T27] audit: type=1326 audit(2000000038.554:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21609 comm="syz.2.6798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ed9d8e929 code=0x7ffc0000 [ 685.791342][ C0] vkms_vblank_simulate: vblank timer overrun [ 685.935292][T21602] loop1: detected capacity change from 0 to 40427 [ 685.960543][T21602] F2FS-fs (loop1): build fault injection attr: rate: 690, type: 0x7ffff [ 685.990677][T21602] F2FS-fs (loop1): invalid crc value [ 686.034662][T21602] F2FS-fs (loop1): Found nat_bits in checkpoint [ 686.110296][T21624] loop2: detected capacity change from 0 to 4096 [ 686.154346][T21624] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512). [ 686.241905][T21602] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 686.367880][ T5759] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 686.592243][ T5759] usb 4-1: Using ep0 maxpacket: 32 [ 686.607808][ T5759] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 686.636151][ T5759] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 686.675400][ T5759] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 686.693204][ T5759] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 686.720270][ T5759] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 686.738916][ T5759] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 686.783774][ T5759] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 686.820645][ T5759] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 686.849440][ T5759] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 686.876897][ T5759] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 686.897542][ T5759] usb 4-1: config 0 descriptor?? [ 686.941767][T21650] loop0: detected capacity change from 0 to 64 [ 687.171142][ T5759] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 61 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 687.217014][ T5759] usb 4-1: USB disconnect, device number 61 [ 687.238251][ T5759] usblp0: removed [ 687.315684][T21663] loop1: detected capacity change from 0 to 512 [ 687.368482][T21663] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters [ 687.385307][T21663] EXT4-fs (loop1): Remounting filesystem read-only [ 687.394762][T21663] EXT4-fs (loop1): 1 truncate cleaned up [ 687.401772][T21663] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 687.558291][T21674] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6828'. [ 687.573511][T21674] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6828'. [ 687.586935][ T6087] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 688.010188][T21690] loop0: detected capacity change from 0 to 16 [ 688.049137][T21690] erofs: (device loop0): mounted with root inode @ nid 36. [ 688.581985][T21682] loop2: detected capacity change from 0 to 32768 [ 688.606204][T21682] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.6831 (21682) [ 688.658316][T21682] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 688.695653][T21682] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 688.730089][T21682] BTRFS info (device loop2): enabling auto defrag [ 688.737008][T21712] lo speed is unknown, defaulting to 1000 [ 688.772481][T21682] BTRFS info (device loop2): doing ref verification [ 688.786443][T21682] BTRFS info (device loop2): use no compression [ 688.799626][T21682] BTRFS info (device loop2): force clearing of disk cache [ 688.817870][T21682] BTRFS info (device loop2): setting nodatacow, compression disabled [ 688.826027][T21682] BTRFS info (device loop2): disabling free space tree [ 688.942439][T21682] BTRFS info (device loop2): enabling ssd optimizations [ 688.964043][T21682] BTRFS info (device loop2): auto enabling async discard [ 688.977876][ T965] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 688.986281][T21682] BTRFS info (device loop2): rebuilding free space tree [ 689.066181][T21682] BTRFS info (device loop2): disabling free space tree [ 689.073194][T21682] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 689.104494][T21682] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 689.191279][ T965] usb 4-1: Using ep0 maxpacket: 32 [ 689.212484][ T965] usb 4-1: config index 0 descriptor too short (expected 156, got 27) [ 689.232372][T21710] loop1: detected capacity change from 0 to 32768 [ 689.239048][ T965] usb 4-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 689.262400][T21710] BTRFS warning: duplicate device /dev/loop1 devid 1 generation 8 scanned by syz.1.6845 (21710) [ 689.281497][ T965] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 689.293947][ T965] usb 4-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 689.319924][ T965] usb 4-1: config 0 interface 0 has no altsetting 0 [ 689.329352][ T965] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 689.372174][ T965] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 689.405076][ T965] usb 4-1: Product: syz [ 689.409862][ T965] usb 4-1: Manufacturer: syz [ 689.443501][ T965] usb 4-1: SerialNumber: syz [ 689.484023][ T6091] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 689.490987][ T965] usb 4-1: config 0 descriptor?? [ 689.505455][ T6094] BTRFS warning: duplicate device /dev/loop1 devid 1 generation 8 scanned by udevd (6094) [ 689.513068][ T965] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 689.590473][ T965] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 689.876505][ T5759] usb 4-1: USB disconnect, device number 62 [ 689.968034][ T5759] ldusb 4-1:0.0: LD USB Device #0 now disconnected [ 690.201807][T21752] loop1: detected capacity change from 0 to 2048 [ 690.293311][T21752] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 690.566741][T21756] loop2: detected capacity change from 0 to 1024 [ 690.642163][T21760] loop1: detected capacity change from 0 to 128 [ 690.677004][T21760] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 690.729900][T21760] FAT-fs (loop1): FAT read failed (blocknr 234) [ 690.847561][T21759] loop3: detected capacity change from 0 to 4096 [ 690.870143][T21759] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512). [ 690.872942][T21759] ntfs3: loop3: It is recommened to use chkdsk. [ 690.994892][T21747] loop0: detected capacity change from 0 to 32768 [ 691.037284][T21747] BTRFS info (device loop0): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 691.069848][T21747] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 691.116303][T21747] BTRFS info (device loop0): turning off barriers [ 691.133722][T21747] BTRFS info (device loop0): max_inline at 0 [ 691.155301][T21747] BTRFS info (device loop0): enabling all of the rescue options [ 691.184380][T21747] BTRFS info (device loop0): ignoring data csums [ 691.206378][T21747] BTRFS info (device loop0): ignoring bad roots [ 691.227674][T21747] BTRFS info (device loop0): disabling log replay at mount time [ 691.281882][T21747] BTRFS info (device loop0): force zlib compression, level 3 [ 691.317045][T21747] BTRFS info (device loop0): allowing degraded mounts [ 691.372676][T21747] BTRFS info (device loop0): enabling ssd optimizations [ 691.379988][T21747] BTRFS info (device loop0): using spread ssd allocation scheme [ 691.404885][T21747] BTRFS info (device loop0): using free space tree [ 691.423568][T21747] workqueue: max_active 2097158 requested for btrfs-worker is out of range, clamping between 1 and 512 [ 691.480190][T21747] workqueue: max_active 2097158 requested for btrfs-delalloc is out of range, clamping between 1 and 512 [ 691.515683][T21782] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6869'. [ 691.525927][T21747] workqueue: max_active 2097158 requested for btrfs-endio is out of range, clamping between 1 and 512 [ 691.537348][T21782] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6869'. [ 691.563028][T21747] workqueue: max_active 2097158 requested for btrfs-endio-meta is out of range, clamping between 1 and 512 [ 691.652774][T21747] workqueue: max_active 2097158 requested for btrfs-rmw is out of range, clamping between 1 and 512 [ 691.725269][T21747] workqueue: max_active 2097158 requested for btrfs-endio-write is out of range, clamping between 1 and 512 [ 691.777974][T21747] workqueue: max_active 2097158 requested for btrfs-compressed-write is out of range, clamping between 1 and 512 [ 691.855181][ T42] BTRFS warning (device loop0): checksum verify failed on logical 5337088 mirror 1 wanted 0x324c5e2d0cac2dc8f61cbfdfc8cd69d9816061b1498b9e1bff7d10a59610160b found 0x3fff8ff18ac4f264f26c9b61444b99be3a51e4b9014c9227426415668fcd4ed9 level 0 [ 691.879782][ T58] BTRFS warning (device loop0: state C): checksum verify failed on logical 5328896 mirror 1 wanted 0xe27e479340067083b74b333c1de55c530774f48d9bb4dbb5f2229db663324412 found 0x95f62be744ba79d2c7edda0b7f35c3ed250500c283e6cfbf6ba5d84a2ae65a3d level 1 [ 691.880235][T21802] loop3: detected capacity change from 0 to 512 [ 691.940643][T21802] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters [ 691.987798][T21802] EXT4-fs (loop3): Remounting filesystem read-only [ 692.011438][T21802] EXT4-fs (loop3): 1 truncate cleaned up [ 692.019692][T21747] BTRFS info (device loop0: state C): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 692.045052][T21802] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 692.326236][T19354] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 692.432465][ T6280] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 692.618189][T21819] Cannot find del_set index 2 as target [ 692.668344][ T6280] usb 2-1: config 0 has an invalid interface number: 69 but max is 0 [ 692.676745][ T6280] usb 2-1: config 0 has no interface number 0 [ 692.698728][ T6280] usb 2-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 692.741782][ T6280] usb 2-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 692.806053][ T6280] usb 2-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 692.823426][ T6280] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 692.839590][ T6280] usb 2-1: Product: syz [ 692.853536][ T6280] usb 2-1: Manufacturer: syz [ 692.891232][ T6280] usb 2-1: SerialNumber: syz [ 692.904585][ T6280] usb 2-1: config 0 descriptor?? [ 692.927330][T21808] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 692.947052][ T6280] cyberjack 2-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 692.999098][ T6280] usb 2-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 693.295423][T21833] loop0: detected capacity change from 0 to 512 [ 693.331448][T21833] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters [ 693.375985][T21817] loop3: detected capacity change from 0 to 32768 [ 693.397103][T21833] EXT4-fs (loop0): Remounting filesystem read-only [ 693.403907][T21833] EXT4-fs (loop0): 1 truncate cleaned up [ 693.430363][ T5759] usb 2-1: USB disconnect, device number 69 [ 693.441795][ T5759] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 693.444461][T21833] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 693.464326][ T5759] cyberjack 2-1:0.69: device disconnected [ 693.624238][ T6096] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 693.980804][T21849] xt_hashlimit: max too large, truncated to 1048576 [ 694.002561][T21849] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 694.845818][T21884] loop2: detected capacity change from 0 to 4096 [ 694.867789][T21884] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512). [ 694.901550][T21884] ntfs3: loop2: It is recommened to use chkdsk. [ 695.354319][T21882] loop1: detected capacity change from 0 to 32768 [ 695.393924][T21882] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.6909 (21882) [ 695.422525][T21882] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 695.449243][T21882] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 695.460745][T21882] BTRFS info (device loop1): enabling auto defrag [ 695.478565][T21882] BTRFS info (device loop1): doing ref verification [ 695.485851][T21882] BTRFS info (device loop1): use no compression [ 695.499815][T21882] BTRFS info (device loop1): force clearing of disk cache [ 695.522309][ T5759] usb 3-1: new full-speed USB device number 66 using dummy_hcd [ 695.540620][T21882] BTRFS info (device loop1): setting nodatacow, compression disabled [ 695.564935][T21882] BTRFS info (device loop1): disabling free space tree [ 695.684805][T21882] BTRFS info (device loop1): enabling ssd optimizations [ 695.691859][T21882] BTRFS info (device loop1): auto enabling async discard [ 695.723648][T21919] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6921'. [ 695.752180][ T5759] usb 3-1: config 0 has an invalid interface number: 31 but max is 0 [ 695.756688][T21882] BTRFS info (device loop1): rebuilding free space tree [ 695.768181][ T5759] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 695.789802][ T5759] usb 3-1: config 0 has no interface number 0 [ 695.823099][ T5759] usb 3-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 695.829146][T21882] BTRFS info (device loop1): disabling free space tree [ 695.840902][T21882] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 695.849951][ T5759] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 695.871693][T21882] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 695.883369][ T5759] usb 3-1: Product: syz [ 695.888630][ T5759] usb 3-1: Manufacturer: syz [ 695.893261][ T5759] usb 3-1: SerialNumber: syz [ 695.942154][ T5759] usb 3-1: config 0 descriptor?? [ 695.961077][ T5759] hub 3-1:0.31: bad descriptor, ignoring hub [ 695.969216][ T5759] hub: probe of 3-1:0.31 failed with error -5 [ 695.981419][ T5759] usb 3-1: Found UVC 0.04 device syz (046d:08c3) [ 695.999990][ T5759] uvcvideo 3-1:0.31: Entity type for entity Output 6 was not initialized! [ 696.030367][ T5759] usb 3-1: Failed to create links for entity 6 [ 696.045484][ T5759] usb 3-1: Failed to register entities (-22). [ 696.051563][T21923] loop0: detected capacity change from 0 to 4096 [ 696.070949][T21923] ntfs3: loop0: Different NTFS sector size (4096) and media sector size (512). [ 696.120825][T21923] ntfs3: loop0: It is recommened to use chkdsk. [ 696.179948][ T6087] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 696.205149][T21927] netlink: 'syz.3.6925': attribute type 10 has an invalid length. [ 696.292686][T21927] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 696.444512][ T6280] usb 3-1: USB disconnect, device number 66 [ 696.811887][T21933] loop0: detected capacity change from 0 to 8192 [ 696.887191][T21933] syz.0.6927: attempt to access beyond end of device [ 696.887191][T21933] loop0: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 696.887311][T21933] Buffer I/O error on dev loop0, logical block 57847, async page read [ 696.906844][T21933] syz.0.6927: attempt to access beyond end of device [ 696.906844][T21933] loop0: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 696.906881][T21933] Buffer I/O error on dev loop0, logical block 57847, async page read [ 696.907083][ T27] audit: type=1800 audit(2000000049.232:240): pid=21933 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.6927" name="file2" dev="loop0" ino=1048687 res=0 errno=0 [ 697.531893][T21959] libceph: resolve '+ælc' (ret=-3): failed [ 698.046755][ T965] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 698.057531][ T27] audit: type=1326 audit(2000000050.317:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21978 comm="syz.2.6950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ed9d8e929 code=0x7ffc0000 [ 698.094191][T21957] loop1: detected capacity change from 0 to 32768 [ 698.094313][ T27] audit: type=1326 audit(2000000050.317:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21978 comm="syz.2.6950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ed9d8e929 code=0x7ffc0000 [ 698.142137][T21957] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.6939 (21957) [ 698.158348][ T27] audit: type=1326 audit(2000000050.317:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21978 comm="syz.2.6950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f6ed9d8e929 code=0x7ffc0000 [ 698.197706][ T27] audit: type=1326 audit(2000000050.317:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21978 comm="syz.2.6950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ed9d8e929 code=0x7ffc0000 [ 698.221077][T21957] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 698.231518][T21957] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 698.241012][T21957] BTRFS info (device loop1): enabling ssd optimizations [ 698.248084][T21957] BTRFS info (device loop1): using free space tree [ 698.282753][ T965] usb 4-1: config 0 has an invalid interface number: 69 but max is 0 [ 698.292845][ T965] usb 4-1: config 0 has no interface number 0 [ 698.298985][ T965] usb 4-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 698.319955][ T965] usb 4-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 698.334127][ T965] usb 4-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 698.345362][ T965] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 698.353412][ T965] usb 4-1: Product: syz [ 698.358160][ T965] usb 4-1: Manufacturer: syz [ 698.362799][ T965] usb 4-1: SerialNumber: syz [ 698.370820][ T965] usb 4-1: config 0 descriptor?? [ 698.376204][T21957] BTRFS info (device loop1): auto enabling async discard [ 698.376689][T21968] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 698.400492][ T965] cyberjack 4-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 698.413486][ T965] usb 4-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 698.457247][T21985] loop2: detected capacity change from 0 to 4096 [ 698.495492][T21985] EXT4-fs (loop2): Test dummy encryption mode enabled [ 698.615945][T21985] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 698.655782][ T6087] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 698.758319][T22005] bond0: (slave veth0_to_hsr): Error: Device can not be enslaved while up [ 698.958345][ T6500] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by udevd (6500) [ 698.971140][ T6074] usb 4-1: USB disconnect, device number 63 [ 698.988382][ T6091] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 699.015574][ T6074] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 699.082411][ T6074] cyberjack 4-1:0.69: device disconnected [ 699.830477][T22028] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6964'. [ 700.433568][T22020] loop1: detected capacity change from 0 to 32768 [ 700.457473][T22020] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.6960 (22020) [ 700.510018][T22020] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 700.544193][T22020] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 700.568040][T22020] BTRFS info (device loop1): use no compression [ 700.597233][T22020] BTRFS info (device loop1): setting nodatasum [ 700.621208][T22020] BTRFS info (device loop1): enabling auto defrag [ 700.636325][T22020] BTRFS info (device loop1): max_inline at 0 [ 700.665909][T22020] BTRFS info (device loop1): using free space tree [ 700.742899][ T27] audit: type=1326 audit(2000000052.814:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22068 comm="syz.0.6981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd56938e929 code=0x7ffc0000 [ 700.886076][ T27] audit: type=1326 audit(2000000052.814:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22068 comm="syz.0.6981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd56938e929 code=0x7ffc0000 [ 700.951739][ T27] audit: type=1326 audit(2000000052.861:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22068 comm="syz.0.6981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=201 compat=0 ip=0x7fd56938e929 code=0x7ffc0000 [ 700.974579][ T27] audit: type=1326 audit(2000000052.861:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22068 comm="syz.0.6981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd56938e929 code=0x7ffc0000 [ 701.005804][T22020] BTRFS info (device loop1): auto enabling async discard [ 701.300571][T22094] loop0: detected capacity change from 0 to 2048 [ 701.317265][T22094] EXT4-fs: Ignoring removed mblk_io_submit option [ 701.326305][ T6087] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 701.428225][T22098] loop3: detected capacity change from 0 to 4096 [ 701.437515][T22098] EXT4-fs (loop3): Test dummy encryption mode enabled [ 701.447142][T22094] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 701.488912][T22098] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 701.689303][ T6500] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 9 /dev/loop1 scanned by udevd (6500) [ 701.700634][ T6096] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 701.807643][T19354] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 702.045666][T22116] xt_policy: too many policy elements [ 702.562140][T22126] loop3: detected capacity change from 0 to 4096 [ 702.635103][ T27] audit: type=1326 audit(2000000054.572:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22133 comm="syz.2.7008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ed9d8e929 code=0x7ffc0000 [ 702.683879][ T27] audit: type=1326 audit(2000000054.572:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22133 comm="syz.2.7008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ed9d8e929 code=0x7ffc0000 [ 702.779692][ T27] audit: type=1326 audit(2000000054.600:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22133 comm="syz.2.7008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f6ed9d8e929 code=0x7ffc0000 [ 702.796805][T22140] loop0: detected capacity change from 0 to 128 [ 702.835807][T22140] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 702.898038][ T27] audit: type=1326 audit(2000000054.600:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22133 comm="syz.2.7008" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6ed9d8e929 code=0x0 [ 702.934365][T22140] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 703.541920][T22161] 9pnet: Could not find request transport: f [ 703.797183][ T27] audit: type=1326 audit(2000000055.675:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22178 comm="syz.2.7029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ed9d8e929 code=0x7ffc0000 [ 703.881421][ T27] audit: type=1326 audit(2000000055.703:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22178 comm="syz.2.7029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ed9d8e929 code=0x7ffc0000 [ 703.954069][ T27] audit: type=1326 audit(2000000055.713:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22178 comm="syz.2.7029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=284 compat=0 ip=0x7f6ed9d8e929 code=0x7ffc0000 [ 703.983202][T22184] netlink: 84 bytes leftover after parsing attributes in process `syz.1.7032'. [ 704.003123][ T27] audit: type=1326 audit(2000000055.713:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22178 comm="syz.2.7029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ed9d8e929 code=0x7ffc0000 [ 704.085057][ T27] audit: type=1326 audit(2000000055.713:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22178 comm="syz.2.7029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ed9d8e929 code=0x7ffc0000 [ 704.173726][ T27] audit: type=1326 audit(2000000056.031:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22192 comm="syz.3.7034" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4702b8e929 code=0x0 [ 705.518421][T22255] loop0: detected capacity change from 0 to 256 [ 705.596297][T22255] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xf6e00961, utbl_chksum : 0xe619d30d) [ 705.616909][T22258] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 706.241267][T22285] loop3: detected capacity change from 0 to 256 [ 706.353634][T22285] FAT-fs (loop3): Directory bread(block 64) failed [ 706.383838][T22285] FAT-fs (loop3): Directory bread(block 65) failed [ 706.410090][T22285] FAT-fs (loop3): Directory bread(block 66) failed [ 706.416682][T22285] FAT-fs (loop3): Directory bread(block 67) failed [ 706.458423][T22285] FAT-fs (loop3): Directory bread(block 68) failed [ 706.460094][T22290] netdevsim netdevsim2: Direct firmware load for  failed with error -2 [ 706.479920][T22285] FAT-fs (loop3): Directory bread(block 69) failed [ 706.505023][T22285] FAT-fs (loop3): Directory bread(block 70) failed [ 706.507478][T22290] netdevsim netdevsim2: Falling back to sysfs fallback for:  [ 706.526676][T22285] FAT-fs (loop3): Directory bread(block 71) failed [ 706.555143][T22285] FAT-fs (loop3): Directory bread(block 72) failed [ 706.580008][T22285] FAT-fs (loop3): Directory bread(block 73) failed [ 706.662797][T22298] loop1: detected capacity change from 0 to 2048 [ 706.702910][T22298] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 707.467893][T22325] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7100'. [ 707.831632][T22342] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 708.354239][T22361] loop2: detected capacity change from 0 to 256 [ 708.354950][T22359] netlink: 44 bytes leftover after parsing attributes in process `syz.1.7116'. [ 708.390450][T22361] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xf6e00961, utbl_chksum : 0xe619d30d) [ 708.398204][T22359] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7116'. [ 708.877707][T22351] loop0: detected capacity change from 0 to 32768 [ 709.019839][T22363] loop3: detected capacity change from 0 to 32768 [ 709.050272][T22363] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 9 [ 709.102459][T22371] vlan0: entered promiscuous mode [ 709.426372][T22383] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7125'. [ 709.448151][ T6094] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 9 [ 709.913496][T22400] netlink: 3 bytes leftover after parsing attributes in process `syz.2.7134'. [ 709.926527][T22400] 0ªX¹¦À: renamed from caif0 [ 709.939863][T22400] 0ªX¹¦À: entered allmulticast mode [ 709.945118][T22400] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 710.285867][T22412] ieee802154 phy0 wpan0: encryption failed: -22 [ 710.384974][T22395] loop0: detected capacity change from 0 to 32768 [ 710.411011][T22395] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.7131 (22395) [ 710.439334][T22395] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 710.480815][T22395] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 710.501424][T22395] BTRFS info (device loop0): enabling ssd optimizations [ 710.533509][T22395] BTRFS info (device loop0): using free space tree [ 710.748231][T22395] BTRFS info (device loop0): auto enabling async discard [ 710.830827][T22407] loop1: detected capacity change from 0 to 32768 [ 710.857618][T22407] (syz.1.7139,22407,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 710.890362][T22407] (syz.1.7139,22407,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 710.939411][T22407] JBD2: Ignoring recovery information on journal [ 710.966860][ T6096] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 710.974926][T22441] netlink: 300 bytes leftover after parsing attributes in process `syz.2.7147'. [ 710.977643][ T6280] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 711.058637][T22407] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 711.202421][ T6280] usb 4-1: Using ep0 maxpacket: 8 [ 711.231852][ T6280] usb 4-1: config 0 has an invalid interface number: 31 but max is 0 [ 711.250302][ T6280] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 711.278868][ T6280] usb 4-1: config 0 has no interface number 0 [ 711.330429][ T6280] usb 4-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 711.346883][ T6280] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 711.372322][ T6280] usb 4-1: Product: syz [ 711.376535][ T6280] usb 4-1: Manufacturer: syz [ 711.384452][ T6280] usb 4-1: SerialNumber: syz [ 711.455257][ T6280] usb 4-1: config 0 descriptor?? [ 711.529932][ T6087] ocfs2: Unmounting device (7,1) on (node local) [ 711.709364][ T6280] usb 4-1: Found UVC 0.04 device syz (046d:08c3) [ 711.736834][ T6280] usb 4-1: No valid video chain found. [ 711.945585][ T785] usb 4-1: USB disconnect, device number 64 [ 712.083681][T22464] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 712.509245][T22466] loop1: detected capacity change from 0 to 32768 [ 712.567497][T22466] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 712.667042][T22466] [ 712.669428][T22466] ====================================================== [ 712.676457][T22466] WARNING: possible circular locking dependency detected [ 712.683498][T22466] 6.6.94-syzkaller #0 Not tainted [ 712.688533][T22466] ------------------------------------------------------ [ 712.695560][T22466] syz.1.7152/22466 is trying to acquire lock: [ 712.701633][T22466] ffff888059d5bf60 (&ocfs2_file_ip_alloc_sem_key){++++}-{3:3}, at: ocfs2_try_remove_refcount_tree+0xb7/0x320 [ 712.713245][T22466] [ 712.713245][T22466] but task is already holding lock: [ 712.720626][T22466] ffff888059d5bff8 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_try_remove_refcount_tree+0xa5/0x320 [ 712.731289][T22466] [ 712.731289][T22466] which lock already depends on the new lock. [ 712.731289][T22466] [ 712.741231][T22474] loop2: detected capacity change from 0 to 32768 [ 712.741683][T22466] [ 712.741683][T22466] the existing dependency chain (in reverse order) is: [ 712.741692][T22466] [ 712.741692][T22466] -> #6 [ 712.751861][T22474] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 9 [ 712.757108][T22466] (&oi->ip_xattr_sem){++++}-{3:3}: [ 712.757152][T22466] down_read+0x46/0x2e0 [ 712.782294][T22466] ocfs2_init_acl+0x2fa/0x720 [ 712.787509][T22466] ocfs2_mknod+0x12e5/0x20f0 [ 712.792622][T22466] ocfs2_create+0x196/0x410 [ 712.797648][T22466] vfs_create+0x1f4/0x360 [ 712.802497][T22466] do_mknodat+0x3c8/0x4f0 [ 712.807345][T22466] __x64_sys_mknod+0x8e/0xa0 [ 712.812451][T22466] do_syscall_64+0x55/0xb0 [ 712.817387][T22466] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 712.823807][T22466] [ 712.823807][T22466] -> #5 (jbd2_handle){++++}-{0:0}: [ 712.831102][T22466] start_this_handle+0x1e9d/0x20c0 [ 712.836737][T22466] jbd2__journal_start+0x2bb/0x5b0 [ 712.842457][T22466] jbd2_journal_start+0x2a/0x40 [ 712.847844][T22466] ocfs2_start_trans+0x376/0x6c0 [ 712.853301][T22466] ocfs2_shutdown_local_alloc+0x201/0xa10 [ 712.859717][T22466] ocfs2_dismount_volume+0x1e2/0x890 [ 712.865521][T22466] generic_shutdown_super+0x134/0x2b0 [ 712.871408][T22466] kill_block_super+0x44/0x90 [ 712.876599][T22466] deactivate_locked_super+0x97/0x100 [ 712.882485][T22466] cleanup_mnt+0x429/0x4c0 [ 712.887421][T22466] task_work_run+0x1ce/0x250 [ 712.892530][T22466] exit_to_user_mode_loop+0xe6/0x110 [ 712.898336][T22466] exit_to_user_mode_prepare+0xb1/0x140 [ 712.904398][T22466] syscall_exit_to_user_mode+0x1a/0x50 [ 712.910381][T22466] do_syscall_64+0x61/0xb0 [ 712.915322][T22466] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 712.921738][T22466] [ 712.921738][T22466] -> #4 (&journal->j_trans_barrier){.+.+}-{3:3}: [ 712.930252][T22466] down_read+0x46/0x2e0 [ 712.934933][T22466] ocfs2_start_trans+0x36a/0x6c0 [ 712.940390][T22466] ocfs2_shutdown_local_alloc+0x201/0xa10 [ 712.946632][T22466] ocfs2_dismount_volume+0x1e2/0x890 [ 712.952445][T22466] generic_shutdown_super+0x134/0x2b0 [ 712.958333][T22466] kill_block_super+0x44/0x90 [ 712.963539][T22466] deactivate_locked_super+0x97/0x100 [ 712.969428][T22466] cleanup_mnt+0x429/0x4c0 [ 712.974365][T22466] task_work_run+0x1ce/0x250 [ 712.979514][T22466] exit_to_user_mode_loop+0xe6/0x110 [ 712.985316][T22466] exit_to_user_mode_prepare+0xb1/0x140 [ 712.991380][T22466] syscall_exit_to_user_mode+0x1a/0x50 [ 712.997353][T22466] do_syscall_64+0x61/0xb0 [ 713.002288][T22466] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 713.008702][T22466] [ 713.008702][T22466] -> #3 (sb_internal#4){.+.+}-{0:0}: [ 713.016174][T22466] ocfs2_start_trans+0x26b/0x6c0 [ 713.021626][T22466] ocfs2_mknod+0xe47/0x20f0 [ 713.026647][T22466] vfs_mknod+0x32b/0x360 [ 713.031404][T22466] do_mknodat+0x37e/0x4f0 [ 713.036256][T22466] __x64_sys_mknodat+0xa9/0xc0 [ 713.041532][T22466] do_syscall_64+0x55/0xb0 [ 713.046470][T22466] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 713.052886][T22466] [ 713.052886][T22466] -> #2 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#6){+.+.}-{3:3}: [ 713.063420][T22466] down_write+0x97/0x1f0 [ 713.068194][T22466] ocfs2_reserve_local_alloc_bits+0x126/0x24b0 [ 713.074880][T22466] ocfs2_reserve_clusters_with_limit+0x1bf/0xba0 [ 713.081731][T22466] ocfs2_mknod+0xdee/0x20f0 [ 713.086861][T22466] vfs_mknod+0x32b/0x360 [ 713.091621][T22466] do_mknodat+0x37e/0x4f0 [ 713.096469][T22466] __x64_sys_mknodat+0xa9/0xc0 [ 713.101751][T22466] do_syscall_64+0x55/0xb0 [ 713.106688][T22466] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 713.113105][T22466] [ 713.113105][T22466] -> #1 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#5){+.+.}-{3:3}: [ 713.123629][T22466] down_write+0x97/0x1f0 [ 713.128391][T22466] ocfs2_reserve_suballoc_bits+0x165/0x4360 [ 713.134805][T22466] ocfs2_reserve_new_metadata_blocks+0x404/0x940 [ 713.141651][T22466] ocfs2_extend_dir+0xc60/0x4760 [ 713.147105][T22466] ocfs2_prepare_dir_for_insert+0x2fc7/0x5480 [ 713.153685][T22466] ocfs2_mknod+0x818/0x20f0 [ 713.158706][T22466] ocfs2_create+0x196/0x410 [ 713.163727][T22466] vfs_create+0x1f4/0x360 [ 713.168574][T22466] do_mknodat+0x3c8/0x4f0 [ 713.173422][T22466] __x64_sys_mknod+0x8e/0xa0 [ 713.178534][T22466] do_syscall_64+0x55/0xb0 [ 713.183559][T22466] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 713.189996][T22466] [ 713.189996][T22466] -> #0 (&ocfs2_file_ip_alloc_sem_key){++++}-{3:3}: [ 713.198764][T22466] __lock_acquire+0x2ddb/0x7c80 [ 713.204132][T22466] lock_acquire+0x197/0x410 [ 713.209151][T22466] down_write+0x97/0x1f0 [ 713.213913][T22466] ocfs2_try_remove_refcount_tree+0xb7/0x320 [ 713.220411][T22466] ocfs2_xattr_set+0x596/0x11f0 [ 713.225782][T22466] ocfs2_set_acl+0x4e1/0x590 [ 713.230892][T22466] ocfs2_iop_set_acl+0x1ab/0x2a0 [ 713.236348][T22466] vfs_set_acl+0x803/0xa60 [ 713.241276][T22466] path_setxattr+0x39f/0x550 [ 713.246379][T22466] __x64_sys_setxattr+0xbb/0xd0 [ 713.251754][T22466] do_syscall_64+0x55/0xb0 [ 713.256689][T22466] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 713.263107][T22466] [ 713.263107][T22466] other info that might help us debug this: [ 713.263107][T22466] [ 713.273332][T22466] Chain exists of: [ 713.273332][T22466] &ocfs2_file_ip_alloc_sem_key --> jbd2_handle --> &oi->ip_xattr_sem [ 713.273332][T22466] [ 713.287320][T22466] Possible unsafe locking scenario: [ 713.287320][T22466] [ 713.294757][T22466] CPU0 CPU1 [ 713.300113][T22466] ---- ---- [ 713.305466][T22466] lock(&oi->ip_xattr_sem); [ 713.310048][T22466] lock(jbd2_handle); [ 713.316626][T22466] lock(&oi->ip_xattr_sem); [ 713.323736][T22466] lock(&ocfs2_file_ip_alloc_sem_key); [ 713.329277][T22466] [ 713.329277][T22466] *** DEADLOCK *** [ 713.329277][T22466] [ 713.337409][T22466] 3 locks held by syz.1.7152/22466: [ 713.342598][T22466] #0: ffff88806a71c418 (sb_writers#28){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 713.351827][T22466] #1: ffff888059d5c2d8 (&type->i_mutex_dir_key#29){+.+.}-{3:3}, at: vfs_set_acl+0x37a/0xa60 [ 713.362013][T22466] #2: ffff888059d5bff8 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_try_remove_refcount_tree+0xa5/0x320 [ 713.373073][T22466] [ 713.373073][T22466] stack backtrace: [ 713.378948][T22466] CPU: 0 PID: 22466 Comm: syz.1.7152 Not tainted 6.6.94-syzkaller #0 [ 713.387001][T22466] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 713.397058][T22466] Call Trace: [ 713.400328][T22466] [ 713.403249][T22466] dump_stack_lvl+0x16c/0x230 [ 713.408017][T22466] ? load_image+0x3b0/0x3b0 [ 713.412519][T22466] ? show_regs_print_info+0x20/0x20 [ 713.417719][T22466] ? print_circular_bug+0x12b/0x1a0 [ 713.422916][T22466] check_noncircular+0x2bd/0x3c0 [ 713.427862][T22466] ? arch_stack_walk+0x160/0x190 [ 713.432793][T22466] ? look_up_lock_class+0x75/0x140 [ 713.437903][T22466] ? print_deadlock_bug+0x5d0/0x5d0 [ 713.443098][T22466] ? lockdep_lock+0xe0/0x220 [ 713.447685][T22466] ? stack_trace_save+0x9c/0xe0 [ 713.452534][T22466] ? _find_first_zero_bit+0xd3/0x100 [ 713.457819][T22466] __lock_acquire+0x2ddb/0x7c80 [ 713.462707][T22466] ? verify_lock_unused+0x140/0x140 [ 713.467919][T22466] ? verify_lock_unused+0x140/0x140 [ 713.473116][T22466] lock_acquire+0x197/0x410 [ 713.477616][T22466] ? ocfs2_try_remove_refcount_tree+0xb7/0x320 [ 713.483784][T22466] ? __might_sleep+0xe0/0xe0 [ 713.488369][T22466] ? read_lock_is_recursive+0x20/0x20 [ 713.493741][T22466] down_write+0x97/0x1f0 [ 713.497984][T22466] ? ocfs2_try_remove_refcount_tree+0xb7/0x320 [ 713.504139][T22466] ? down_read_killable+0x340/0x340 [ 713.509336][T22466] ? ocfs2_xattr_set+0x56f/0x11f0 [ 713.514358][T22466] ? __lock_acquire+0x7c80/0x7c80 [ 713.519374][T22466] ? ocfs2_xattr_block_find+0x154/0x4c0 [ 713.524920][T22466] ocfs2_try_remove_refcount_tree+0xb7/0x320 [ 713.530902][T22466] ? ocfs2_remove_refcount_tree+0xd50/0xd50 [ 713.536797][T22466] ? up_write+0x1c3/0x410 [ 713.541121][T22466] ocfs2_xattr_set+0x596/0x11f0 [ 713.545979][T22466] ? __ocfs2_xattr_set_handle+0xf10/0xf10 [ 713.551696][T22466] ? mark_lock+0x94/0x320 [ 713.556018][T22466] ? __lock_acquire+0x1334/0x7c80 [ 713.561040][T22466] ? ocfs2_inode_lock_tracker+0x3ec/0x660 [ 713.566773][T22466] ? do_raw_spin_lock+0x121/0x2c0 [ 713.571792][T22466] ? __rwlock_init+0x150/0x150 [ 713.576551][T22466] ? do_raw_spin_unlock+0x121/0x230 [ 713.581748][T22466] ? _raw_spin_unlock+0x28/0x40 [ 713.586601][T22466] ? ocfs2_inode_lock_tracker+0x3ec/0x660 [ 713.592346][T22466] ? __x64_sys_setxattr+0xbb/0xd0 [ 713.597391][T22466] ? ocfs2_inode_lock_atime+0x4e0/0x4e0 [ 713.602938][T22466] ocfs2_set_acl+0x4e1/0x590 [ 713.607527][T22466] ocfs2_iop_set_acl+0x1ab/0x2a0 [ 713.612455][T22466] ? read_lock_is_recursive+0x20/0x20 [ 713.617822][T22466] ? ocfs2_xattr_get+0x220/0x220 [ 713.622752][T22466] ? evm_inode_set_acl+0xbb/0x410 [ 713.627769][T22466] ? down_write+0x162/0x1f0 [ 713.632267][T22466] ? evm_revalidate_status+0x4f/0xb0 [ 713.637543][T22466] ? ima_inode_set_acl+0x81/0x180 [ 713.642562][T22466] ? make_vfsuid+0x51/0xb0 [ 713.646975][T22466] ? inode_owner_or_capable+0xf0/0x1c0 [ 713.652431][T22466] vfs_set_acl+0x803/0xa60 [ 713.656842][T22466] ? path_setxattr+0x314/0x550 [ 713.661705][T22466] path_setxattr+0x39f/0x550 [ 713.666302][T22466] ? simple_xattrs_free+0x150/0x150 [ 713.671502][T22466] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 713.677477][T22466] ? lock_chain_count+0x20/0x20 [ 713.682322][T22466] __x64_sys_setxattr+0xbb/0xd0 [ 713.687172][T22466] do_syscall_64+0x55/0xb0 [ 713.691585][T22466] ? clear_bhb_loop+0x40/0x90 [ 713.696253][T22466] ? clear_bhb_loop+0x40/0x90 [ 713.700920][T22466] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 713.706811][T22466] RIP: 0033:0x7fa525f8e929 [ 713.711220][T22466] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 713.730820][T22466] RSP: 002b:00007fa526e3c038 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc [ 713.739226][T22466] RAX: ffffffffffffffda RBX: 00007fa5261b5fa0 RCX: 00007fa525f8e929 [ 713.747191][T22466] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000200000002a00 [ 713.755153][T22466] RBP: 00007fa526010b39 R08: 0000000000000001 R09: 0000000000000000 [ 713.763115][T22466] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 713.771076][T22466] R13: 0000000000000000 R14: 00007fa5261b5fa0 R15: 00007ffd2f0f0628 [ 713.779060][T22466] [ 713.873006][ T6094] I/O error, dev loop2, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 713.967218][ T6087] ocfs2: Unmounting device (7,1) on (node local) [ 714.161963][T22480] loop0: detected capacity change from 0 to 32768