last executing test programs: 3m39.778419086s ago: executing program 3 (id=38): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1000000, &(0x7f00000022c0)=ANY=[], 0x1, 0x6dc, &(0x7f0000001180)="$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") openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101042, 0x45) 3m39.514055127s ago: executing program 3 (id=43): syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x0, &(0x7f00000000c0), 0x2, 0xbd1, &(0x7f0000001340)="$eJzs3M1rHOcZAPBnRquVbKtduZRS91KVUmwoXUsuMrUp1C4uvfRQaK8Fq/LKCK0/kFRcyTqskn8gX+dALoEkJiGH+OxLQnLNJbGvCTkETFCsBEJIFGY/pI2lleR4V6PIvx+8mvedd7TP8+ywO/PC7gbwxBrJ/qQRxyLiYhJRau5PI6JY7w1G1BrHra4sTX65sjSZxNravz5LIomIBytLk63HSprbI83BYES8/9ckfvb05rhzC4szE9VqZbY5Pjl/5frJuYXFP0xfmbhcuVy5Onb6T+Onxk+PnhnvWq1ffXTu9he/+fsnta9f/ebW58+/nMS5GGrOtdfRLSMxsv6ctCtExES3g+Wkr1lPe51JYYd/SnucFAAAHaVt93C/iFL0xcbNWyne/iDX5AAAAICuWOuLWAMAAAAOuMT6HwAAAA641ucAHqwsTbZavp9I2Fv3z0fEcKP+1WZrzBSiVt8ORn9EHH6QRPvXWpPGvz22kYj4+N6ZN7IWPfoe8nZqyxHxy63Of1Kvf7j+Le7N9acRMdqF+CMPjX9M9Z/rQvy86wfgyXTnfONCtvn6l67f/8QW17/CFteuHyLv61/r/m910/3fRv19He7//rnLGDdfefFGp7ms/j/f/tvrrZbFz7aPVdQjuL8c8avCVvUn6/UnHeq/uMsYpW9vVDrN5V3/2ksRx2Pr+luS7X+f6OTUdLUy2vi7ZYzl98Zf6xQ/7/qz83+4Q/2t33/qdP6v7zLGfy5ceHPTznsb3e3rTz8tJv+u94rNPf+fmJ+fHYsoJv/YvP/U9rm0jmk9Rlb/id9u//rfqv7sPaHWfB6ytcByc5uNn3oo5l9u3XyrUz6t9V+e5/9Sh/PfXv+7hc3n/5ldxvjdO8+d6DTXvv7NWha/tRYGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgJY0IoYiScvr/TQtlyOORMTP43BavTY3//upa/+7eimbixiO/nRquloZjYhSY5xk47F6f2N86qHxHyPiaES8UDpUH5cnr1Uv5V08AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA645ExFAkaTki0ohYLaVpuZx3VgAAAEDXDeedAAAAANBz1v8AAABw8Fn/AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0GNHf33nbhIRtbOH6i1TbM7155oZ0Gtp3gkAuenLOwEgN4W8EwBy84hrfLcLcAAlO8wPdpwZ6HouAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOxfx4/duZtERO3soXrLFJtz/blmBvRa2tZPcswD2Ht9200W9i4PYO95icOTyxof2GntP7hxTO37MwM9ywkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/Weo3pK0HBHF5r5yOeInETEc/cnUdLUyGhE/jYgPS/0D2Xgs55wBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADovrmFxZmJarUym3XSaHbW9/Sg09eM3MMQvekkjbxr+yWfg90ZeHanY/4bjxmiGPui0n3ayfNdCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAvMwtLM5MVKuV2bm8MwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADyNrewODNRrVZme9jJu0YAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPLzXQAAAP//jAsGRw==") openat(0xffffffffffffff9c, &(0x7f0000000100)='./file3\x00', 0x240, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f00000006c0)={0x8, 0x2, 0x5, 0x0, 0x1, 0x0, [{0x2, 0xcd, 0x0, '\x00', 0x800}]}) 3m39.226081959s ago: executing program 3 (id=49): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) sendmmsg$sock(r0, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0) 3m38.331951304s ago: executing program 3 (id=67): syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0) mount$bind(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc11, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x887008, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r0, &(0x7f00000020c0)={0x2020}, 0x2020) 3m38.005491586s ago: executing program 3 (id=74): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000580)={'bond_slave_0\x00'}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001180)={0x1a, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r1 = syz_open_dev$loop(&(0x7f0000000140), 0x5, 0xa6a82) r2 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="280000001200050200", @ANYRES32=0x0, @ANYBLOB], 0x28}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) sendto$inet6(r4, 0x0, 0x0, 0x80, 0x0, 0x0) r5 = syz_init_net_socket$ax25(0x3, 0x5, 0xcb) setsockopt$ax25_SO_BINDTODEVICE(r5, 0x101, 0x19, &(0x7f0000000040)=@bpq0, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NET_SET(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000100)={0x20, 0x0, 0x1, 0x0, 0xfffffffd, {}, [@TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x44}, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) 1m37.228501339s ago: executing program 4 (id=837): r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) mlock(&(0x7f0000ffa000/0x4000)=nil, 0x4000) readv(r0, &(0x7f0000000500)=[{&(0x7f00000004c0)=""/38, 0x26}], 0x1) mlock(&(0x7f0000ffb000/0x2000)=nil, 0x2000) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000100)={&(0x7f0000ffe000/0x1000)=nil, 0x1000}) 1m37.08991215s ago: executing program 4 (id=839): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2008002, &(0x7f00000002c0)={[{@inlinecrypt}, {@usrjquota}, {@delalloc}, {@nobh}]}, 0x1, 0x55a, &(0x7f0000000540)="$eJzs3c9vHFcdAPDvjH82Teuk9AAVkACFgKLsxps2qnppuYBQVQlRcUAcUmNvLJPdbMiuS20i4fIvgAQSJ/gTOCBxQOqJAzeOSBwQohyQCligGInDoBmv7a29G2+z693a+/lIk5k3b2a+760z896+tfcFMLEuR8RWRMxGxJsRsdDen7SXeHV3yY97uP1geWf7wXISWfbGP5MiP98XHefkniyumWVZFvGNr0Z8Jzkat7mxeWepVqveb6fLrfq9cnNj89pafWm1ulq9W6ncXLx5/aUbL1aGVtdL9V+9/5W1177529986r0/bH3pB3mxzrfzOusxNMneazKzHyc3HRGvDT3YeEy117NjLgePJ42IZyLis8X9vxBTxf9OAOAsy7KFyBY60wDAWZcWY2BJWoqING13Akq7Y3jPxrm01mi2rt5urN9d2R0ruxAz6e21WvX6xbk/fa84eCbJ04tFXpFfpCuH0jci4mJE/GTuiSJdWm7UVsbT5QGAifdkZ/sfEf+ZS9NS6bizio5Cl0/1AIBTY37cBQAARk77DwCTR/sPAJOnaP9/9MhD2h/2b42kPADAyfP+HwAmj/YfACaP9h8AJsrXX389X7Kd9vdfr7y1sX6n8da1lWrzTqm+vlxabty/V1ptNFaL7+ypH3e9WqNxb/GFWH+73Ko2W+XmxuatemP9butW8b3et6ozI6kVAPAoFy+9+8ckIrZefqJYomMuB201nG3pEI8CTpepQU7WQYBTzWxfMLn6asKLTsLvT7wswHh0/TLv+a6bH/SzDxHE7xnBR8qVT/Q//m+OZzhbjOzD5Hq88f9Xhl4OYPSM/8PkyrLk8Jz/s/tZAMCZNMCv8GU/HFYnBBir4ybzHsrn/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHDGnI+I70aSloq5wNP837RUingqIi7ETHJ7rVa9HhFPx6WImJnL04vjLjQAMKD070l7/q8rC8+fP5w7m/x3rlhHxPd//sZP315qte4v5vv/tb9/bm/6sMrBeQPMKwgA9O+v/RxUtN+V9rrjjfzD7QfLe8sJlvGI97+8P/no8s72g2LZzZmOLMuyiPmiL3Hu30lMt8+Zj4jnImJqCPG33omIj3erf1KMjVxoz3zaGT/asZ8aafz0A/HTIm93nb98H/vQkdMhlB5Ot3fz58+r3e6/NC4X6+73/3zxhBpc8fybj9h79u10xJ9uR5rqEj+/5y8fJJ95ZIwXfve1Izuzhd28dyKem+4WP9mPn/SI/3yfdfzzJz/941d65GW/iLgS3eN3xiq36vfKzY3Na2v1pdXqavVupXJz8eb1l268WCkXY9TlvZHqo/7x8tWne5Utr/+5HvHnu9Z/dv/cz/dZ/1/+781vf+YgOXc4/hc/1/3n/2zX+LvyNvELfcZfOvfrntN35/FXetT/uJ//1T7jv/e3zZU+DwUARqC5sXlnqVar3h9oI38vOYzrHNnIi9jfwXvdxcGC/iWKjSG9LD028s5YPwfPnNSreuIb0/t9xeFe+Vv5FUdcnXTotRho4+GoYo3vmQSMxsFNP+6SAAAAAAAAAAAAAAAAvYziT5fGXUcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADOrv8HAAD//5qGyFk=") 1m35.437988462s ago: executing program 4 (id=850): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000580)={[{@nolazytime}]}, 0xfe, 0x507, &(0x7f0000000f40)="$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") syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000540)={[{@journal_checksum}, {@noload}, {@nomblk_io_submit}, {@block_validity}, {@noquota}, {@usrquota}, {@nodiscard}, {@sysvgroups}]}, 0x5, 0x263, &(0x7f0000000600)="$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") mount$bind(&(0x7f0000000040)='./file1\x00', &(0x7f00000000c0)='./file1\x00', 0x0, 0x3002, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000002080)='./file1\x00', 0x80b0, &(0x7f0000000540)=ANY=[], 0x0, 0x0, 0x0) 1m34.987166255s ago: executing program 4 (id=854): mlockall(0x2) shmat(0x0, &(0x7f0000136000/0x4000)=nil, 0x4000) shmctl$SHM_LOCK(0x0, 0xb) openat$sndseq(0xffffffffffffff9c, &(0x7f0000002180), 0x100) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) shmctl$SHM_UNLOCK(0x0, 0xc) 1m34.464137828s ago: executing program 4 (id=857): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) unshare(0x4040600) readahead(r0, 0xcd, 0x0) 1m34.19343639s ago: executing program 33 (id=857): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) unshare(0x4040600) readahead(r0, 0xcd, 0x0) 1m5.493869538s ago: executing program 6 (id=1052): ioctl$TIOCMIWAIT(0xffffffffffffffff, 0x545c, 0x7cb7562f2d67) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000) r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x802c550a, &(0x7f0000000180)=@urb_type_iso={0x0, {0x1, 0x1}, 0x2, 0x40, 0x0, 0x0, 0xa, 0x800, 0x1, 0x20c877, 0xfffffffe, 0x0, [{0x2, 0xd, 0x7}]}) 1m5.32614378s ago: executing program 6 (id=1054): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x0) sendfile(r0, r0, 0x0, 0x7a680000) 1m5.179957721s ago: executing program 6 (id=1056): bind$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="b8000000150001"], 0xb8}}, 0x0) 1m4.985968982s ago: executing program 6 (id=1058): syz_mount_image$exfat(&(0x7f0000000080), &(0x7f0000000000)='./file1\x00', 0x800, &(0x7f00000024c0)=ANY=[@ANYBLOB='iocharset=maceceland,umask=00000000000000000000005,gid=', @ANYRESHEX=0x0, @ANYBLOB=',errors=continue,iocharset=maccroatian,errors=continue,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c696f636861727365743d63703433372c6572726f72733d636f6e74696e75652c666d61736b3d30303030303030303030303030303030303030303030302c005cfb6cadb737c3b7524172"], 0x1, 0x1527, &(0x7f00000006c0)="$eJzs3AuYTlXbOPD7XmvtMSbpaZLDsNa6N09yWCZJckiSQ5IkSZJTQtIkryQkhpyShiQkhyE5DCE5TEwa5/P5kJAkTZKE5JSs/yV83t56/+/7fm/f67u+uX/XtS/rfva+1773cz+HvbeZ+a7zkBqNalZtQETwb8GL/yQDQCwADACA6wAgAICy8WXjL6zPKTH539sJ+3M9kna1K2BXE/c/e+P+Z2/c/+yN+5+9cf+zN+5/9sb9z964/4xlZ5umFbiel+y78P3/7Iy///8PySo15qs1pW7sAhDzz6Zw/7M37v//WcE/sxH3P3vj/mdXsVe7APa/AL//s4Mcf3cN9z974/4zlp1d7fvPV3uBSPZ+Dq72648xxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGWPZw2l+hAODy+GrXxRhjjDHGGGOMsT+Pz3G1K2CMMcYYY4wxxtj/PAQBEhQEEAM5IBZyQhwIALgWcsN1EIHrIR5ugDxwI+SFfJAfCkACFIRCoMGABYIQCkMRiMJNUBRuhmJQHEpASXBQChLhFigNt0IZuA3Kwu1QDu6A8lABKkIluBMqw11QBe6GqnAPVIPqUANqwr1QC+6D2nA/1IEHoC48CPXgIagPD0MDeAQawqPQCB6DxvA4NIGm0AyaQ4v/Vv5L0B1ehh7QE5KhF/SGV6AP9IV+0B8GwKswEF6DQfA6pMBgGAJvwFB4E4bBWzAcRsBIeBtGwTswGsbAWBgHqTAeJsC7MBHeg0kwGabAVEiDaTAd3ocZMBNmwQcwGz6EOTAX5sF8SIePYAEshAz4GBbBJ5AJi2EJLIVlsBxWwEpYBathDayFdbAeNsBG2ASbYQtshW2wHXbAp7ATPoNdsBv2wOewF774F/NP/U1+FwQEFChQocIYjMFYjMU4jMNcmAtzY26MYATjMR7zYB7Mi3kxP+bHBEzAQlgIDRokJCyMhTGKUSyKRbEYFsMSWAIdOkzERCyNt2IZLINlsSyWw3JYHitgBayElbAyVsYqWAWrYlWshtWwBtbAe/Fe7IW1sTbWwTpYF+tevj2FDbABNsSG2AgbYWNsjE2wCTbDZtgCW2BLbImtsBW2wTbYFttiO2yHSZiE7bE9dsAO2BE7YifshJ2xM3bBrtg166UcgC/jy9gTq4le2Bt7Yx9MydEP+2N/fBUH4mv4Gr6OKTgYh+Ab+Aa+icPwJA7HETgSR2Jl8Q6OxjFIYhymYipOwAk4ESfiJJyMk3EqpuE0nI7TcQbOxJn4Ac7GD/FDnItzcT6mYzouwIWYgRm4CE9hJi7GJbgUl+FyXIYrcRWuxDW4FtfgelyPG3EjbsbNuBW34nbcjp+iAsDPcDfuxhTci3txH+7D/bgfD+ABzMIsPIgH8RAewsN4GI/gETyKx/A4HsMTeAJP4ik8jafxLJ7Fc/hCwjcNPy2+OgXEBUooESNiRKyIFXEiTuQSuURukVtERETEi3iRR+QReUVekV/kFwkiQRQShYQRRpAIYwBAREVUFBVFRTFRTJQQJYQTTiSKRFFalBZlRBlRVuQEgDtEeVFBtHaVRCVRWbRxVcTdoqqoKqqJ6qKGqClqilqilqgtaos6oo6oK+qKeuIhUV/0wn74iLjQmUZiMDYWQ7CJaCrkpU+wlmIYthKtRRvxlBiBw7GdaOmSxLOivRiNHcRfxBh8XnQS47CzeFF0EV1FN/GS6C5auR6ip5iEvURvMRX7iL6in+gvZmB18QHOzllDvC5SxGAxRLwh5uObYph4SwwXI8RI8bYYJd4Ro8UYMVaME6livJgg3hUTxXtikpgspoipIk1ME9PF+2KGmClmiQ/EbPGhmCPminlivkgXH4kFYqHIEB+LReITkSkWiyViqVgmlosVYqVYJVaLNWKtWCfWiw1io9gkNostYqvYJraLHeJTsVN8JnaJ3WKP+FzsFV+IfeJLsV98JQ6Ir0WW+EYcFN+KQ+I7cVh8L46IH8RRcUwcFz+KE+IncVKcEqfFGXFW/CzOiV/EeeEFSJRCSqlkIGNkDhkrc8o4eY3MJYNLz+71Ml7eIPPIG2VemU/mlwVkgiwoC0ktjbSSZCgLyyIyKm+SReXNspgsLkvIktLJUjJR3iJLy1tlGXmbLCtvl+XkHbK8rCArykryTllZ3iUhcnEf1WR1WUPWlPfKZLhP1pb3yzryAVlXPijryYdkffmwbCAfkQ3lo7KRfEw2lo/LJrKpbCabyxbyCdlSPilbydayjXxKtpVPy3byGZkkn5Xtpb/0EnledpIvyM7yRdlFdpXd5C/yvPSyh+wpoRfI3vIV2Uf2lf1kfzlAvioHytfkIPm6TJGD5RD5hhwq35TD5FtyuBwhR8q35Sj5jhwtx8ixcpxMlePlBPmunCjfk5PkZDlFTpVpcprsd2mmWVL+V35O+OP8d/8gf9Cve98oN8nNcovcKrfJ7XKH/FTulDvlLrlL7pF75F65V+6T++R+uV8ekAdklsySB+VBeUgekoflYXlEHpFH5TF5Rv4oT8if5El5Sp6SZ+RZeVaeu/QcgEIllFRKBSpG5VCxKqeKU9eoXOpalVtdpyLqehWvblB51I0qr8qn8qsCKkEVVIWUVkZZRSpUhVURFVU34aUXjCqhSiqnSqlEdcu/kq+KqptVMVX8N/mX60v+O/W1UC1US9VStVKtVBvVRrVVbVU71U4lqSTVXrVXHVQH1VF1VJ1UJ9VZdVZdVBfVTXVT3VV31UP1UMkqWfVWr6g+qq/qp/qrAepVNVANVIPUIJWiUtQQNUQNVUPVMDVMDVfD1Ug1Uo1So9RoNVqNVWNVqkpVE9QENVFNVJPUJDVFTVFpKk1NV9PVDDVDzVKz1Gw1W81Rc9Q8NU+lq3S1QC1QGSpDLVKLVKZarBarpWqpWq6Wq5VqpVqtVqu1aq1ar9arTLVJbVJb1Ba1TW1TO9QOtVPtVLvULrVH7VF71V61T+1T+9V+dUAdUFkqSx1UB9UhdUgdVofVEXVEHVVH1XF1XJ1QJ9RJdVKdVqfVWXVWnVPn1Hl1/sJpXyACEahABTFBTBAbxAZxQVyQK8gV5A5yB5EgEsQH8UGe4MYgb5AvyB8UCBKCgkGhQAcmsIG41PRocFNQNLg5KBYUD0oEJQMXlAoSg1uC0sGtQZngtqBscHtQLrgjKB9UCCoGlYI7g8rBXUGV4O6ganBPUC2oHtQIagb3BrWC+4Lawf1BneCBoG7wYFAveCioHzwcNAgeCRoGjwaNgseCxsHjQZOgadAsaB60+FPn9/5kviddD91TJ+teurd+RffRfXU/3V8P0K/qgfo1PUi/rlP0YD1Ev6GH6jf1MP2WHq5H6JH6bT1Kv6NH6zHJY/U4narH6wn6XT1Rv6cn6cl6ip6q0/Q0PV2/r2fomXqW/kDP1h/qOXqunqfn63T9kV6gF+oM/bFepD/RmXqxXqKX6mV6uV6hV+pVerVeo9fqdXq93qA36k16s96it+pterveoT/VO/Vnepferffoz/Ve/YXep7/U+/VX+oD+Wmfpb/RB/a0+pL/Th/X3+oj+QR/Vx/Rx/aM+oX/SJ/UpfVqf0Wf1z/qc/kWf1/7Cyf2Fr3ejjDIxJsbEmlgTZ+JMLpPL5Da5TcRETLyJN3lMHpPX5DX5TX6TYBJMIVPIXECGTGFT2ERN1BQ1RU0xU8yUMCWMM84kmkRT2pQ2ZUwZU9aUNeVMOVPelDcVTUVzp7nT3GXuMnebu8095h5T3VQ3NU1NU8vUMrVNbVPH1DF1TV1Tz9Qz9U1908A0MA1NQ9PINDKNTWPTxDQxzUwz08K0MC1NS9PKtDJtTBvT1rQ17Uw7k2SSTHvT3nQwHUxH09F0Mp1MZ9PZdDFdTDfTzXQ33U0P08Mkm2TT2/Q2fUwf08/0MwPMADPQDDSDzCCTYlLMEDPEDDVDzTAzzAw3I8zICyeq5h0z2owxY804k2pSzQQzwUw0E80kM8lMMVNMmkkz0810M8PMMLPMLDPbzDZzzBwzz8wz6SbdLDALTIbJMIvMIpNpMs0Ss8QsM8vMCrPCrDKrzBqzxqyDdWaD2WA2mU1mi9litpltZofZYXaanWaX2WX2mD1mr9lr9pl9Zr/Zbw6YAybLZJmD5qA5ZA6Zw+awOWKOmKPmqDlujpsT5oQ5aU6a0+a0OWvyXfq+9CbW5rRx9hqby15rc9vr7N/G+W0Bm2AL2kJW27w2329iY60tZovbErakdbaUTbS3/C4ubyvYiraSvdNWtnfZKr+La9n7bG17v61jH7A17b2/ievaB209+5itjwhgm9qGtrltZB+zje3jtoltapvZ5ratfdq2s8/YJPusbW+f+128wC60q+xqu8autbvsbnvanrGH7Hf2rP3Z9rA97QD7qh1oX7OD7Os2xQ7+XTzSvm1H2XfsaDvGjrXjfhdPsVNtmp1mp9v37Qw783dxuv3IzrYZdo6da+fZ+b/GF2rKsB/bRfYTm2kDWGKX2mV2uV1hV/5XrUvtervBbrQ77Wd2i91qt9ntdsflE2G72+6xn9u99gt70H5r99uv7AF72GbZb36NLxzfYfu9PWJ/sEftMXvc/mhP2J/U5ewLx/6j/cWet94CIQFJUhRQDOWgWMpJcXQN5aJrKTddRxG6nuLpBspDN1Jeykf5qQAlUEEqRJoMWSIKqTAVoSjdRJfLK0ElyVEpSqRbqDTdSmXoNipLt1M5uoPKUwWqSJXoTqpMd1EVupuq0j1UjapTDapJ91Ituo9q0/1Uhx6guvQg1aOHqD49TA3oEWpIj1Ijeowa0+PUhJpSM2pOLegJaklPUitqTW3oKWpLT1M7eoaS6FlqT89RB/oLdaTnqRO9QJ3pRepCXakbvUTd6WXqQT0pmXpRb3qF+lBf6kf9aQC9SgPpNRpEr1MKDaYh9AYNpTdpGL1Fw2kEjaS3aRS9Q6NpDI2lcZRK42kCvUsT6T2aRJNpCk2lNJpG0+l9mkEzaRZ9QLPpQ5pDc2kezad0+ogW0ELKoI9pEX1CmbSYltBSWkbLaQWtpFW0mtbQWlpH62kDbaRNtJm20FbaRttpB31KO+kz2kW7aQ99TnvpC9pHX9J++ooO0NeURd/QQfqWDtF3dJi+9z3pBzpKx+g4/Ugn6Cc6SafoNJ2hs/QznaNf6Dx5ghBDEcpQhUEYE+YIY8OcYVx4TZgrvDbMHV4XRsLrw/jwhjBPeGOYN8wX5g8LhAlhwbBQqEMT2pDCMCwcFgmj4U1h0fDmsFhYPCwRlgxdWCpMDG8JS4e3hmXC28Ky4e1hufCOsHxYIXzsgUrhnWHl8K6wSnh3WDW8J6wWVg9rhDXDe8Na4X1h7fD+sE74QFgmfDCsFz4U1g8fDhuEj4QNw0fDRuFjYePw8bBJ2DRsFjYPW4RPhC3DJ8NWYeuwTfhU2DZ8OmwXPhMmhc+G7cPnfl3/4MK/vz457BX2Dl8JXwm9v1/Oi86Ppkc/ii6ILoxmRD+OLop+Es2MLo4uiS6NLosuj66Iroyuiq6Oromuja6Lro9uiG6Mel8zBzh0wkmnXOBiXA4X63K6OHeNy+WudbnddS7irnfx7gaXx93o8rp8Lr8r4BJcQVfIaWecdeRCV9gVcVF3kyvqbnbFXHFXwpV0zpVyia65a+FauJbuSdfKtXZt3FPuKfe0e9o9455xz7r27jnXwf3FdXTPu07uBfeCe9F1cV1dN/eS6+7G5774nkx2vV1v18f1cf1cPzfADXAD3UA3yA1yKS7FDXFD3FA31A1zw9xwN9yNdCPdKDfKjXaj3Vg31qW6VDfBTXAT3UQ3yU1yU9wUl+bS3HQ33c1wM1zlmRf3MsfNcfPcPJfu0t0Cd+GcMcMtcotcpst0S9wSt8wtcyvcCrfKrXJr3Bq3zq1zG9wGt8ltclvcFrfNbXM73A630+10u/x1Fyd1e90+t8/td/vdAfe1y3LfuIPuW3fIfecOu+/dEfeDO+qOuePuR3fC/eROulPutDvjzrqf3Tn3izvvvEuNjI9MiLwbmRh5LzIpMjkyJTI1khaZFpkeeT8yIzIzMivyQWR25MPInMjcyLzI/Eh65KPIgsjCSEbk48iiyCeRzMjiyJLI0siyyPKI9wW3hL6wL+Kj/iZf1N/si/nivoQv6Z0v5RP9Lb60v9WX8bf5sv52X87f4cv7Cr6if9w38U19M9/ct/BP+Jb+Sd/Kt/Zt/FO+rX/at/PP+CT/rG/vn/Md/F98R/+87+Rf8J39i76L7+q7+Zd8d/+y7+F7+mTfy/f2r/g+vq/v5/v7Af5VP9C/5gf5132KH+yH+Df8UP+mH+bf8sP9CD8y5m0/6vIlMozzqX68n+Df9RP9e36Sn+yn+Kk+zU/z0/37foaf6Wf5D/xs/6Gf4+f6eX6+T/cf+QV+oc/wH/tF/hOf6RdfvqnsV/iVfpVf7df4tX6dX+83+I1+k9/st/itfpvf7nf4T/1O/5nf5Xf7Pf5zv9d/4ff5L/1+/5U/4L/2Wf4bf9B/6w/57/xh/70/4n/wR/0xf9z/6E/4n/xJf8qf9mf8Wf+zP+d/8ef5d9YYY4wxxv4p468MxW/XXLyd3+sPcsRfbdwbAK7dWiDrr9dfOKNcl/fiuK9IaBsBgGd7dn7k8lKtWnJy8qVtMyUEReYCXP6foAti4Eq8GNrA05AEraH0H9bfV3Q9S/9g/ujtAHF/lRMLV+Ir838JgMl/MP8TT41cUC48Hf//mX8uQLEiV3JywpV4MbT59f5Kayjzd+rP1/If1J/zq1SAVn+VkwuuxFfqT4Qn4TlI+s2WjDHGGGOMMcbYRX1FxY6Xrz8v/8TnH12fJ6grOTngSvyPrs8ZY4wxxhhjjDF29T3ftdszTyQlte74rw+q/Ley/ulBY/ifmpkHfzjwHuDyIwoA/s0JAS4M5H/yKDb/R/aVcumt87erlp3xAfzvaOWfMbjKH0yMMcYYY4yxP92Vk/7fPq6uVkGMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxlg29J/4c2JX+xgZY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4yxq+3/BQAA//8vPgKm") mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2901090, 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') mount(0x0, &(0x7f0000000d40)='./file0/../file0/../file0\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, 0x0) 1m4.874746403s ago: executing program 6 (id=1060): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1801000000000000000000000000000085000000050000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008008000b703000000009c8c850000006d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) epoll_create1(0x0) read$FUSE(r1, 0x0, 0x0) socket(0x2, 0x80802, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='blkio.throttle.io_service_bytes_recursive\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) kcmp(0x0, 0x0, 0x2, 0xffffffffffffffff, 0xffffffffffffffff) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r5, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) sendmmsg$sock(r5, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0) 1m4.165959808s ago: executing program 6 (id=1069): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket(0x200000000000011, 0x2, 0x0) getsockname$packet(r0, &(0x7f00000015c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) 1m4.099246358s ago: executing program 34 (id=1069): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket(0x200000000000011, 0x2, 0x0) getsockname$packet(r0, &(0x7f00000015c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) 56.67533741s ago: executing program 5 (id=1114): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x24, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}}, 0x24}}, 0x4000800) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@delchain={0x24, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, r3}}, 0x24}}, 0x0) 50.432089802s ago: executing program 5 (id=1122): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0xc0041}, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendto$packet(r0, &(0x7f0000000080)="a99c383d33c9c607b1b9d49688a8834a88a8", 0x1000e, 0x0, &(0x7f0000000000)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) 50.423049492s ago: executing program 5 (id=1123): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000880), 0x800, 0x0) ioctl$PTP_ENABLE_PPS(r0, 0x40043d04, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="280000001200050200", @ANYRES32=0x0, @ANYBLOB], 0x28}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) sendto$inet6(r3, 0x0, 0x0, 0x80, 0x0, 0x0) r4 = syz_init_net_socket$ax25(0x3, 0x5, 0xcb) setsockopt$ax25_SO_BINDTODEVICE(r4, 0x101, 0x19, &(0x7f0000000040)=@bpq0, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NET_SET(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000100)={0x20, 0x0, 0x1, 0x0, 0xfffffffd, {}, [@TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x44}, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) 50.137484614s ago: executing program 5 (id=1128): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x0, 0x274, &(0x7f0000000280)="$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") r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mounts\x00') mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1333404, 0x0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x11080, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) read$FUSE(r0, &(0x7f0000002140)={0x2020}, 0x2100) 49.918032476s ago: executing program 5 (id=1129): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x0) ioctl$EVIOCGEFFECTS(r0, 0x80044584, &(0x7f0000000580)=""/254) 48.909931602s ago: executing program 5 (id=1132): r0 = getpid() r1 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(r2, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000d00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)=[@cred={{0x1c, 0x1, 0x2, {r0}}}], 0x20, 0x40044}}], 0x1, 0x0) 48.762904423s ago: executing program 35 (id=1132): r0 = getpid() r1 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(r2, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000d00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)=[@cred={{0x1c, 0x1, 0x2, {r0}}}], 0x20, 0x40044}}], 0x1, 0x0) 6.028077268s ago: executing program 1 (id=1360): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x18) bpf$ENABLE_STATS(0x20, 0x0, 0x0) acct(0x0) 5.948910359s ago: executing program 7 (id=1362): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x8483d6665fcd0f3c, 0x4, [{{0x9, 0x4, 0x0, 0xbe, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x7, {[@global=@item_012={0x0, 0x1, 0x2}, @global=@item_4={0x3, 0x1, 0xa, "b49537ed"}, @global=@item_012={0x0, 0x1, 0xa}]}}, 0x0}, 0x0) setregid(0x0, 0x0) 5.889078109s ago: executing program 1 (id=1364): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r0 = syz_mount_image$btrfs(&(0x7f00000051c0), &(0x7f0000005200)='./file0\x00', 0x1204c08, &(0x7f0000000200)={[{@acl}, {@clear_cache}, {@nodiscard}, {@skip_balance}, {@noautodefrag}, {@ssd_spread}]}, 0x0, 0x51ab, &(0x7f000000a440)="$eJzs3V9oVFceB/Az+aPxDyY+xV32wX1YWcUFWRF2UdggGF2Whdn1YVnYrFlZxT+7JUgDwb5YS2lBxGCgthSKD33pS0mlUFqqBAsthYogVloUW0teWiiESsGXlpK590xmzvVmxlQbq5+PJHfO/d1z7pnhPsx3zLkTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIIRwcM3Kv+xaPb2urD7dP3bq6LLt507vP3ljaGjLlRAqtf2VvL5n+66/79+95689scPw37JtX1/ZkFnXz7PGkqads/2af/4TQuhOBujMtzs6G/pW0hOEI8UB53XgZv/o5u7BaxN3zmy8eP3QhuJTZ1bPYk9gseTX1fTctTRQ+92RHFFvN1x6laZLNOufXnA/yZMAAO7JpmptU387mr/FrbePpfWkPZC0x5N2fIcw3thYiGzcJWXzXJvWF2meA1lUWFo6z6Sev/71djXtn7STqHEP82w+NI80PWXzHEnqizVPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIfJqx9euvTcy+u3ldWn+8dOHV22/dzp/SdvDA1tuRJCX21/JStXlv+q8w+fLtt57fiRN36zr+ftk515v7jtajg4fBIf/LE3hL0Nlek47JerQqg2F2rN8FKxcLD24M+xAAAAwKPkF7XfHfV2Fge7m9qVWpqs1P5FWVg8cLN/dHP34LWJO2c2Xrx+aMPCx6uWjDdw1/Hq7b65n0pDMI7xNx1vrh4PPVIYZ37piGme/2zmyVsXJn7777L+hfzfN3/+j6+c/A8AAMCPIf+n48yvVf6/+s7zT3UN7n2vrH8h/69tOmUh/8cZx/zfERaW/wEAAOBh9qDz/0BhnPm1yv/fnZ86f/nb46+U9S/k/03t5f+uxmnHnR/FCR/uDWFTq6kDAAAAJeL/u899tBDzevbJQZrXO2ZGe6d6blwtG6+Q/wfay//d9/2ZAQAAAAv1v7F/Hb8wNn6zrF7I/9X28v/SBz5zAAAAoF37Tvz/3PoNIyvL6oX8P9xe/l+eb/OVD1mn9+NfIUz0htAz+2AkK3wQxv9ULwAAAAD3SczpX41u/f7jwel3y44r5P+R+e//H+90ENf/N93/r7D+v6GQ3fVvqxsDAAAA8DgqruePt8fPvrmg7Pv3213/f+uXO3b9d+c/vig7fyH/H2sv/3c2bu/n9/8BAADAAvzcvv/vn4Vx5tfq/v/fDN36et3hZwfL+hfy/3h7+T9uVzQ+van4+jzTG8Ka2Qf53QRfi6c7nBQmuxsK2Quf9Ngde+SFyaUNhZqRpMfve0P49eyDY0lhdSyMJ4WZVXnhbFK4HAv59VAvvJ4UpuKV9sKqfLpp4a1YyBdYTMYVFCvqSyKSHrfLeswW7trjev3kAAAAj5UYnvMs293cDGmUnay0OmB5qwM6Wh3Q2eqAruSA9MCy/WG4uRD3v7jtd7evPPHm06FEIf+fbS//x5diSbYpW/8f4vr//HsN6+v/h2OhLylMxkI1vWNANZ4jC7sn4jn6qnmPmTX1AgAAADzS4ucCnYs8DwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAH5g7/6D7KrqA4Cf/f0jm91FHAFJNYqA6ZDNJjFKK1MC1UFxpi4OdZw60UR2g9ssJCZhICnthEA7U5hUVKa1o0NDHUdpkUY6jlK1pEyBcaRTm7ZMxWhl/EFtaxnGSodSm87be8/d+87dm/dCdiFLP58/9p33vufnfT/2nXvvOxcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOD/h38ZWPMb+1f89Py6+PfPuOHDewcuve+jWw8c3bRpw5EQJmYf78jCHYMrui785sBlj+3f+flzp/rvP9Cbl8vjYVnjT2d+55ai1uUhfLEjhO40sHooC/Tk94difSuGQjgtzAWKElODWYm04fDQQAgHw1ygqOr+gRCGSoErjzz4wIFG4o6BEM4NIfSlbXy7L2tjIA2c15sFBtPA9u4s8F/HMkXgS51ZAE5afDMUL/pDE80ZRucvV/P661mwjr240uF1xcRofb4fX7LInSrpTR+YOKmnrVIdi6Ly9jjs3bYE3m2V7Xy7p638RSr/hnJsLtQXOientm65bmZ3fKQzjI111dW0SM/z40/feNWJpJfM6zB2YHRBXofP3vme68+afMuNt24/54m177vg6Ml2s27zLra+kL/mlszzGG30ebIE3n6Vb0krfekKIfzcB7tv6vrtI5+qi1fm/6PHn//Hl3O87WzKHWt9bjibm8dHhmLiqeFsbg4AAABLxlLYa/qjs1/xe6s61zxeV19l/r+yveP/8ZB/PpnPRns4hI2ziZtHQjhz9vEscHds7gMjIbxmNjXRHLgkCRwO4azZxKqiqqREfyyxMgk8OZwHNiaBh2NgIgl8OgZuTwK3xMChJHBVDBxOApfGQJhuHsfPD+fjaDswEAObs414KJ6F8JPh2Fqyrb5VVAUAALBA8tlhT/Pd0rkOJ5shTi8PDbTKEM/Ars3Ql9SQzmCLaVVtDd2tauhsVUMx7n3HH36l5o5WNVdOw+hoznDpK/7w/BVfu+ELoUZl/j9+/Pl/3zwd6agc/w/hitm/MXdnHpkp4psnmjIAAAAAJ2HtG2a+9idnv+nNdfHK/H9je+f/x30iXaXM4dG4G2LbSAjjzYGs2jdXA9lR72V5AAAAAJaC4nh8cSx8Or/NTtFO59PV/BMnmD8e+N84b/5fCpOnb/vBUxvq+luZ/0+0d/7/YPNt1omHYy8+NhJCfynwSOxlIzBrZQx89+LmQD7+h+MGuC1WlZ+YUFR1WyyxOQbGk8DBuhLfKEqc2RzIn6yi8ZuLcUznJUoBAAAAeMHF3QHxuHw8///Ctd/70KaP7/1cXbnK/H/ziZ3/PzsPrpzeP7MshDXdIXSlPwx4dDBbGDAGhjryxFcHs7q60qpuGgzhosbA0qqeyNf/707XGDwykFUVA2e+9rNPn9dIfGoghDXlwGPvvWt2x8juJFA0/qsDIby6Mdq08S/0Z433pI3/QX8IryoFiqo+0B9Co7HetKoH+/LrGKRV/VlfCKeXAkVVb+wLYU8AYImK/0onyw/u2rN325aZmamdi5iI+/AHwtbpmamxq7bPTPbV9Gky6XPTMkY3VcfU2ebYj+ZLFN1z+dhIO+nid4Lj5b7k+/ErJw7m9+N3oZ7Zca7rabq7Ph3y68+pNpEO6cUY8mC5krknsVJ/zN8bloX+63ZN7Ry7Ycvu3TvXZn/bzb4u+xsPM2Xbam26rQbn61sbL492F0N/vtuq6TJXa3Zfs2PNrj17V09fs+Xqqaunrn3D+LrxdevHN7zpwjWNUY1nf1sM9fz5qk6Geuyu6hDavQbU8x3qK7tLlbwQnxoSEhJLLbHl4q/+5b1nfWJZ3cdPZf6/4/jz//ipEz/58/UZ6o7/j8bD/Nnjc4f5N8fAwXaP/4/WHc0vTgxYmQT2xcA+h/kBAAB4aYi7G+PezLhXuuem1WN//MlHnqwrV5n/72vv9/8LtP5/sXT95XXL/K+KJcbr1v9Pl/kv1v/fV7f+f7rMf7H+/8EXYf3/64pAskl+Yv1/AADgpeCFW/+/5fL+6QUCKhlaLu+fXiCgkqHlMv7tXiDghNf/f/tzr+u55iOvviXUqMz/b29v/m/hfgAAADh13HVkQ8eD//o/D9XFK/P/g+3N/1/49f9C3fn/K+sCE3ULA1r/DwAAgCWqbv2/9a/78ebP/WzFD+vKVeb/h9qb/8fTLjqbcsdanxvO1rQL6Zp2Tw0XPxkAAACApaEzjI21u6Jp08qolzz/Nh/PlwI9Xrrsr758zT8+8tb39tfVV5n/H25v/t/0u4xn73zP9WdNvuXG527dfs4Ta993wdG54/8AAADA4ml3vwQAAAAAAAAAAAAAAPDie3rv5Lv++ew7P1MXr/z+P1wx+3jd7//jdf/i7wte3pQ71tp6/b/8/pXvuHfP7JKFjw6HcE45sG3/ttNCfm3+88uBBzatOqOR2J+W+Mp3Lv1BI/H+NPC21S97ppG4KAlsjosknpUG4lUVn1meBOLyin+fBuL2OJQGevPA7y7PxtGRbqsfDWXbqiPdVo8PhTBSChTb6otDWRsd6QDvSALFAD+UBuIAfyUPdKa9undZ1qsYGIpF/2hZ1isAAE5Z8VtgT9g6PTM1Hr/Cx9tXdjffRk1Llt1UrbajzeaP5kuT3XP52Eg76a70u+jctcZ7Ql9jCGsrX1fLWTpmR7kwtbTYdC+vGXKr1d7a/XX2iW663voRDWQjGrtq+8xkT8uBr2+dZV13yyxrK5OdcpbO2U3aRi1t9KWNEbW5bdrocrzfGcbGupJcvxiDo6HJQr0iyuv81b0Kynn2Tb7xb75x7Nihuvoq8//R9ub/feVxPZNfDGBfvLLezSMhnNnmiAAAAIB2fevL/7Ru+yd+55709ort1956weCPLq4rV5n/r2xv/h93jOWHgrO9HYfj9f+L+f9oFrg7NveBkRBeM5uaiCWyC+pfHkuMZ4G74w6TVbHE5onmqvpj4FASeHI4DxxOAg/HQL6X4rMh35XzkeEQNsymrmgusSOWGE0C74yBlUlgLAbGk8DyGNiYBP59eR6YSAJfj4Ew3byt/ny5vSsAAMDzkM+zeprvhnSed6i7VYaOVhkGW2XobJWhr1WGulHE+/fFDD3JySsdpUw9aa0DSS2VDPFi+Cfcr0qG8I3mnGnBStPx/IPifIOO5gz/dtnrv33erlXtX/9/vL35/2Dzbdb6w3H+P3f9vyzwSOzex+Kp4ytj4LsXNwfyHQMPx8nubUVVE3mJfNJ+WyyxMQZWJoEdMbAxCWy+Ig8cPKM5kM+0i8ZvLhqfzkuUAgAAAPCCizsI4m6aOP//0/+++3MH/uHav64rV5n/b2xv/h/bW1Zu7Jai1uUhfLFjrjdFYPVQFoj7MYbiz+NXDIVwWmkHR1FiajAr0Zs0HB4ayH6h3ptWdf9AtsZAvH/lkQcfONBI3DEQwrmlvS9FG9/uy9oYSAPn9WaBwTSwvTsLxD0/ReBLnVkATlqxVzC+oPJTXQqj85eref29VK4Jmg6vsg90nnzz/eZqsfSlD+T7VAsn9rRVqmNRVN4eh73bluK7bdS7rfxFKv+Gcmwu1Bc6J6e2brluZnd8pPxL1opFep7Lv1JtJ70Ar8N9z7+3rfWlHRhPPj7G5y83/+uwI1b37J3vuf6sybfceOv2c55Y+74LjrbdjRrxh8Lv/uTLRsubd7H1hfw1t+Q+TyZ8nizFfwMrPW2NGexTv//V//jp4z+ri1fm/xPtzf+7k9tZz8aNuWskhNeXNu6jcfP/8kj2OVgKZJ+Sp1cD2SH37w3XfnICAADAQit2dxT7C6bz2+yE8HSeXM0/cYL54/6KjfPmb7ffW29+aP8P/+6Or9TFK/P/zcef//cn3XT83/F/Fonj//M61XdF96cP7DupXdGV6lgUjv/P61R/tzn+Py/H/x3/n4/j/y04/j+vU/1pq3xL2uFLVwjh6++/8+33bP+18+rilfn/jvbm/9b/m3/RvmL9v8116//tqFv/b5/1/wAAgEVVs9BcOs+rrN5XyZCu3lfJ0HKBwJZLDFr/74TX/3vrO//3+mOvuGRnqFGZ/+9rb/4fXw7Lyq0vlfX/Vl5RU9XtMbDDwoAAAACciup2EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPDievcvPLl8029eOF0X//4ZN3x478Cl931064GjmzZtOBJClrUjC3cMrui68JsDlz22f+fnz53qv/9AX16uJ789uyl3rPW54RAOlh4Ziomnhht35gJXvuPePd2NxKPDIZxTDmzbv+20RuLTwyGcXw48sGnVGY3E/rTEV75z6Q8aifengbetftkzjcRFeaAj7e4nl2fd7Ui7e2B5CCOlQNHdX1/eXFXRxmV5oDNt4zNDWRsxMBSLfnwoayMGZmKJ6f4Q1nSH0JVW9bW+rKqutKq/6Muq6kqr+q2+EC4KIXSnVX2nN6uqOx353/ZmVcXAma/97NPnNRIHe0NYUw489t67NjQSH0oCRePv6g3h1Y2XTNr4fT1Z4z1p43f0hPCqEEJvWuI/u7MSvWmJJ7pDOL0UKBr/YHcIewIvCfHDZ7L84K49e7dtmZmZ2rmIid68rYGwdXpmauyq7TOTfUmf6nSU0sduOn78eI4+feNVjdt7Lh8baSfdnZfrme3yup6mu+sXqvftOtHex34NliuZez4q9cf8vWFZ6L9u19TOsRu27N69c232t93s67K/XXk021ZrF2pbdbYoHz3fbXV+uZI1u6/ZsWbXnr2rp6/ZcvXU1VPXvmF83fi69eMb3nThmsaoxrO/CzHUu44fX4yhvrK7VMkL8QEgISGx1BKdTZ9u46f6P73KF/25jvaEvtkP6Mq0opylY3aUCzHoS6rxrkUadGVKUhnR2srEoZJlXess6yuTibksA1mW2e91lclhuabO2U0a73eGsbHazTLafLe8eX88z+Zt1+P5pms3DQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/B87cCAAAAAAAOT/2ghVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVV2IEDAQAAAAAg/9dGqKqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqsIOHAsAAAAACPO3DqNnAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOBSAAAA//+3Rsqd") ioctl$BTRFS_IOC_FS_INFO(r0, 0x8400941f, 0x0) 4.473994699s ago: executing program 1 (id=1370): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x5, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 4.36619662s ago: executing program 7 (id=1371): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000600)={{0x12, 0x1, 0x0, 0x35, 0xff, 0xaa, 0x20, 0xccd, 0x10af, 0x384e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x59, 0x2, 0x1, 0x9b, 0x1e, 0x2a, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000640)={0x3, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}) 4.086071792s ago: executing program 1 (id=1374): r0 = socket$kcm(0x2, 0x5, 0x84) sendmsg(r0, &(0x7f0000000a00)={&(0x7f0000000440)=@in={0x2, 0x4e22, @private=0xa010102}, 0x80, &(0x7f0000000800)=[{&(0x7f00000004c0)="997854", 0x3}], 0x1, &(0x7f0000000bc0)=ANY=[@ANYBLOB="680000000000000003010000f7ffffff89ff7cfa3b372ac13c4bf5bf286520406d311a8ae8626d95871fe6661db8dbabc7afa30398c2711a0bfb9062e881b5f1fc18b378f91d1147ef7f3d76e3157782248173a794a80c6240707e29e86d1f1bcdc3091811913d86c8000000000000000e010000040000002cc7db364915c84bb14d2cf78dcc7083ce27ffbff7cf1c08d307e930981613a3d207b940f3965001e20b0914c691e1d8f049a176e2355d562d9c9ed30ffdcd7f5f9736d4b482379d40bd0eabec7e0e47f1ba382e01408d47115c0294a2b756230e579c95860e2a0af19572af8a1f1624293f71e88523601914cc8830ebf067a9e175169fa82a263e278f4f7cde088e1e2d1bfa07ee798e4370e6d81550c27a49d275fe4a68dae34f190093e6bf08f245263a00000000000038000000000000003a00000005000000f82a4bc8d838eee56d4f4bc9fed48f6a2b706c315f66d244c9d9e27ac0d263ff0251180000000000480000"], 0x1b0}, 0x4) sendmsg$inet(r0, &(0x7f00000006c0)={&(0x7f0000000040)={0x2, 0x4e23, @private=0xa010101}, 0x10, &(0x7f0000000140)=[{&(0x7f00000000c0)="e0", 0x1}], 0x1}, 0xc000) setsockopt$sock_attach_bpf(r0, 0x84, 0xb, 0x0, 0x0) 3.203581648s ago: executing program 0 (id=1377): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='memory.swap.events\x00', 0x275a, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f00003fd000/0xc00000)=nil, 0xc00000, 0x2000005, 0x13, r0, 0x0) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x690}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000140)={{&(0x7f0000fee000/0x12000)=nil, 0x12000}, 0x1}) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f00000003c0)={&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000001000/0x2000)=nil, 0x4000, 0x1}) 3.065838939s ago: executing program 8 (id=1378): ioctl$SNDRV_PCM_IOCTL_HW_REFINE(0xffffffffffffffff, 0xc2604110, &(0x7f0000000280)={0x0, [[0x5], [0x0, 0x200], [0x2]], '\x00', [], '\x00', 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000040)='./file2\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYRES64=0x0], 0x2, 0x1fb, &(0x7f00000008c0)="$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") r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000480)=ANY=[]) 3.065651079s ago: executing program 7 (id=1379): openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000840), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000fddbdf251200000008000300", @ANYRES32=r1, @ANYBLOB="0a00060008021100000100000c004300", @ANYRES16=r0], 0x34}}, 0x20048054) 2.263216065s ago: executing program 1 (id=1380): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$RTC_UIE_OFF(r0, 0x7004) 2.213611724s ago: executing program 2 (id=1381): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000000)={[{@uuid_on}, {@default_permissions}, {@index_on}]}) 2.157907755s ago: executing program 8 (id=1382): syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000000)='./bus\x00', 0x101c08a, &(0x7f0000000440)=ANY=[@ANYBLOB='shortname=mixed,iocharset=iso8859-=winnt,uni_xlate=1,uni_xlate=1,nonumtail=0,utf8=0,errors=continue,utf8=1,check=strict,iocharset=cp855,utf8=0,iocharset=koi8-u,codepage=857,utf8=0,rodir,shortname=win95,\x00'], 0x6, 0x2dd, &(0x7f0000000680)="$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") syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 2.157631605s ago: executing program 0 (id=1383): syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[], 0x0) 2.094069745s ago: executing program 1 (id=1384): r0 = socket(0x200000000000011, 0x2, 0x2) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ip6_vti0\x00'}) io_setup(0x60a, &(0x7f0000000240)=0x0) io_pgetevents(r1, 0x5, 0x5, &(0x7f0000000380)=[{}, {}, {}, {}, {}], 0x0, &(0x7f0000000480)={&(0x7f0000000440)={[0x7]}, 0x8}) io_destroy(r1) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x8040) syz_usb_connect$hid(0x1, 0x36, 0x0, 0x0) 2.087484575s ago: executing program 7 (id=1385): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000a0db000000000000000000850000000e000000d50000002a00c50095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f00000000c0)='netlink_extack\x00', r0}, 0x11) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=ANY=[@ANYBLOB="f80000001600"], 0xf8}}, 0x0) 2.028317116s ago: executing program 8 (id=1386): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd637f4b22667f2f00db5b686158bbcfe8875a65969ff57b00000000000000000000000000ac1414aa35f086dd"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 2.028114956s ago: executing program 2 (id=1387): getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000000)={{{@in6=@mcast1, @in=@local}}, {{@in6=@remote}, 0x0, @in6=@initdev}}, &(0x7f0000000180)=0xe8) open(&(0x7f0000000480)='.\x00', 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6(0x10, 0x3, 0x0) clock_gettime(0xfffffffffffffffc, &(0x7f0000000300)) 2.027323596s ago: executing program 0 (id=1388): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f00000002c0)='./file0\x00', 0x3000840, &(0x7f0000000900)=ANY=[@ANYBLOB='shortname=win95,nonumtail=0,nonumtail=0,iocharset=cp737,shortname=mixed,uni_xlate=0,rodir,codepage=949,uni_xlate=1,rodir,shortname=winnt,utf8=0,\x00b'], 0x3, 0x36e, &(0x7f0000000580)="$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") syz_open_dev$loop(0x0, 0xd79, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) 1.902043597s ago: executing program 8 (id=1389): r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x200) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) 1.872795007s ago: executing program 0 (id=1390): r0 = socket$kcm(0x2, 0x5, 0x84) sendmsg(r0, &(0x7f0000000a00)={&(0x7f0000000440)=@in={0x2, 0x4e22, @private=0xa010102}, 0x80, &(0x7f0000000800)=[{&(0x7f00000004c0)="997854", 0x3}], 0x1, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], 0x1b0}, 0x4) sendmsg$inet(r0, &(0x7f00000006c0)={&(0x7f0000000040)={0x2, 0x4e23, @private=0xa010101}, 0x10, &(0x7f0000000140)=[{&(0x7f00000000c0)="e0", 0x1}], 0x1}, 0xc000) setsockopt$sock_attach_bpf(r0, 0x84, 0xb, 0x0, 0x0) 1.872582467s ago: executing program 7 (id=1391): read$FUSE(0xffffffffffffffff, 0x0, 0x0) socket(0x2, 0x80802, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='blkio.throttle.io_service_bytes_recursive\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) kcmp(0x0, 0x0, 0x2, 0xffffffffffffffff, 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r3, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) sendmmsg$sock(r3, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0) 1.771800848s ago: executing program 8 (id=1392): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x2008002, &(0x7f00000000c0)={[{@nojournal_checksum}, {@nodiscard}, {@quota}]}, 0x1, 0x558, &(0x7f0000000680)="$eJzs3c9vI1cdAPDvTH52d9vsQg9QAbtAYUGrtTfedlX10nIBoaoSouKAOGxD4o3C2nGIndKESKR/A0ggcYI/gQMSB6SeOHDjiMQBEOWAVCACbZA4GM14kriJw5rEsdn485Fm58ebme979s6852dnXgBj60ZE7ETEdES8GRFzxfakmOLVzpTt92h3e3Fvd3sxiXb7jb8leXq2LbqOyVwuzjkbEV/9UsQ3k+Nxm5tbDxdqtep6sV5u1dfKzc2t2yv1heXqcnW1Urk3f+/OS3dfrAysrNfrP3v/iyuvfe2Xv/j4e7/Z+fx3s2xdKdK6yzFInaJPHcTJTEbEa+cRbAQmivn0iPPB6aQR8aGI+FR+/c/FRP6/EwC4yNrtuWjPda8DABddmveBJWkpItK0aASUOn14z8altNZotm49aGysLnX6yq7GVPpgpVa9c23md9/Od55KsvX5PC1Pz9crR9bvRsS1iPjBzFP5emmxUVsaTZMHAMbe5e76PyL+OZOmpVJfh/b4Vg8AeGLMjjoDAMDQqf8BYPyo/wFg/PRR/xdf9u+ce14AgOHw+R8Axo/6HwDGj/ofAMbKV15/PZvae8Xzr5fe2tx42Hjr9lK1+bBU31gsLTbW10rLjcZy/sye+uPOV2s01uZfiI23y61qs1Vubm7drzc2Vlv38+d6369ODaVUAMB/c+36u79NImLn5afyKbrGclBXw8WWDnAv4MkycZaDNRDgiWa0LxhffVXheSPh1+eeF2A0ej7Me7bn4gf96H8I4ndG8H/l5kf77/83xjNcLHr2YXydrv//lYHnAxi+U/f//2Gw+QCGr91Ojo75P32QBABcSGf4CV/7e4NqhAAj9bjBvAfy/T8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABcMFci4luRpKV8LPA0+zctlSKejoirMZU8WKlV70TEM3E9IqZmsvX5UWcaADij9C9JMf7XzbnnrxxNnU7+NZPPI+I7P37jh28vtFrr89n2vx9sn9kfPqxyeNwZxhUEAPr3p352yuvvSjHv+iD/aHd7cX86xzwe8/4XDgYfXdzb3c6nTspktNvtdsRs3pa49I8kJotjZiPiuYiYGED8nXci4iO9yp/kfSNXi5FPu+NHEfvpocZPPxA/zdM68+zl+/AA8gLj5t3s/vNqr+svjRv5vPf1P5vfoc4uv//NRuzf+/a64k8WkSZ6xM+u+Rv9xnjhV18+trE910l7J+K5yV7xk4P4yQnxn+8z/u8/9onvv3JCWvsnETejd/zuWOVWfa3c3Ny6vVJfWK4uV1crlXvz9+68dPfFSjnvoy7v91Qf99eXbz1zUt6y8l86IX7nnb98pPzTB8d+ps/y//Tfb37jk4erM0fjf+7Tvd//Z/N579c/qxM/22f8hUs/P3H47iz+0gnlf9z7f6vP+O/9eWupz10BgCFobm49XKjVqutnWsg+hQ7iPMcWsiz2t/N+c/FsQf8Y+cLhy5JEEoMuV9YY62fnqfN6Vc99YfKgrTjYM389O+OQi5MOvBSnWYirxcKjYQUd3T0JGI7Di37UOQEAAAAAAAAAAAAAAE4yjL9hGnUZAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuLj+EwAA//8GP8IF") syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x2029c1b, 0x0, 0x1, 0x0, &(0x7f00000007c0)) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000140)='./bus\x00', 0x1a40cc4, &(0x7f0000000700)=ANY=[@ANYRES32, @ANYRESDEC, @ANYRESDEC, @ANYRES8, @ANYRESOCT=0x0, @ANYRES16, @ANYRESHEX, @ANYRESHEX, @ANYRES8], 0xdf, 0x0, &(0x7f0000000480)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000000)='./bus/file0\x00', 0x0) 474.066507ms ago: executing program 2 (id=1393): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x2000480, &(0x7f0000000100), 0x5, 0x757, &(0x7f0000000f80)="$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") r0 = open(&(0x7f0000000000)='./file1\x00', 0x14927e, 0x93) fallocate(r0, 0x11, 0x0, 0x8800000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0) pwritev2(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) 300.211128ms ago: executing program 0 (id=1394): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000040000000000080000100850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000280)='netlink_extack\x00', r1}, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)={0x64, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x38, 0x33, @beacon={{{}, {}, @broadcast, @device_a, @random="1e3d1ae5ecc2"}, 0x0, @default, 0x80, @void, @void, @val={0x3, 0x1, 0xae}, @val={0x4, 0x6, {0x6, 0x1, 0xe394, 0x4a}}, @void, @val={0x5, 0x3, {0x4, 0xdd, 0x5}}, @void, @void, @void, @void, @void, @void, @void}}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x300}]]}, 0x64}}, 0x0) 250.972778ms ago: executing program 7 (id=1395): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000140)='./file1\x00', 0x8c0, &(0x7f0000000540)=ANY=[@ANYBLOB="61636c2c6865617274626561743d6e6f6e652c6572726f72733d72656d6f756e742d726f2c636f686572656e63793d66756c6c2c636f686572656e63793d66756c6c2c6c6f63616c666c6f636b732c6572726f72733d72656d6f756e742d726f2c61636c2c00a9b504852143b698d2e379891a0dde7f9adfca8cbec85bf8e749e04ed9b818e3e01ff5f6d09df8ed61101939f013975404955193f4d5aefe553eca7e468ca6ff11b0c4c6560ef0762145677a5e4e3dd49cc3aa0381ef20611a828c788e39a3c8db978f8330d13689f12ff2f6dffcb11dfa24dbc5f587c3bfacdf87d298ed8252d4db49785acf23615eb62b290fb183e1286e5a1d4ca3"], 0xe, 0x444b, &(0x7f0000008900)="$eJzs3c9rFO0dAPBnJrEm1h+J9WCh0IUKLW0Jiae2ERpjNCaaWmyV0su6SVZNu8lKsik9CE1vQk+FHooHaaG3nCT/gP0TeunRnoW+h/fywgvy5mVnZ5OdyS5ZdTe+efl8kJ3s8/O7+52ZfeYwTpyqPV7ZKKxsFEprherSw43LhT9UK5ur5RAfgZFO8584mvnp3jvuJ2Gr92PSQ3eu3fjV/csh/Hv5v292d3d3Q91gaGui5e/PPn261LptinN96uO2H61XfhtCuHAgrrqBEMJv0oCupmXT6Xa4/hIl/8L9p395UOhRNC9fl68U3y4825m8NL/9YqfzZ49CeF759o8frf7/ewOT//thj6YHAAAAAAAAAAAAAAAAAOCYm717594vxyfCqygMbkcH79edTbed7o/d7Znv9v/DAgAAAAAAAAAAAAAAAAAAwFfU/v3/heh8m/v/Z9LtVIf+uz/vUHGyt3HSH3O/uDNzfXwiff57dKD+J2nRJ1cHwmib577nn/9+Nde//fPf00EHPjz+ZnzNeUdCFI/t/mmvfiTE8dhYCP9MH/x+MToVV6obtR89rG6uLX/4/MddNv+Nh+Vn9oL0+fnd5n86N37/n///rZDfa+vvHxzclWkjm//OB+S//hx1lf9ruX5HkX/eXzb/g0nZcGuDqcYJoJ7/vw4env+Z3Pj9yv/ZEEIhqsdayJwB6muYenmn9QpZ2fyfSMoyp870i+x0/H+ey//13Pid8n+uZ5+g/fl/K/9DRFvZ/H8jKRvKtNg//kfjw4//G7nxP8bvfz3+Lb//XcnmP71oG8w0Sb7Jbs//s7nx+5X/e3Ea59koswdsR43yTv9fHVnZ/A8dqN+//ou7Wv/dzPVP8n/gWOzdwdmMrzlvcv3Xch3yg6hx/ddB6XnPIjmesvkf7tiu2+N/Ltev3+f/qWT9x/vK5v9UUpZdO48kr93mfz43fr/yn6xKhpr53z+ffHGyUf4P67+uZPP/zUZh3NpiK3lN1n/R4ev/W7nxP8b6rx7/VtzfWb8usvk/3bFdPf//6eL3/3auX//zH8K4tf57y+b/TMd2yfE/dHj+F3L9+p3/7/dzcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBjYDrdjoQoHsu8j+OxsRCupe8vhlPRYmm5uFipLv1+I4SZtLwQzkePKtXFUqW4slZdLhdLlUp1KYTraf2FMBRtVKq14mrpyY29sYajx+XSem2xXKqFEGbT8u+EM82xFldqq6UnIYSbe3Xn4ur6k8elteLyyvrPxsfHx8PcXgyjUfmPtfJarTF7ozaE+b2+I1FLcEn1rb1YTke/q26ur5UqSfntlj6V6lKp0tJnIa37WxiNauuba0ulWrlYqT5qzvcxTaXbmbm7v757e+JA/YOosZ0+2rAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeEevJn/69xDCYONdHEKYav4RtWv/8nX5SvHtwrOdyUvz2y923nRqBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPAlO3AgAAAAAADk/9oIVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVdilY5SIgSgMwG/GQu08hlVIOtsERbQwIngCPYaHiUfxEt7BwsLWQgQzAxp3Ic1u9X3Ng/y8vB8SAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA1rm8G+9v2y4ixdHXYcTL4+vb7/y6zGmYZ17sH+ypJ7txdTOeX7Rd+e7pX35WHr33+Sf9/Hh6iA2zeh7+7i//p1m9c7y11zSs61/71bsnkXITEX3JT1POTbPuXQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHyzAwcCAAAAAED+r41QVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVhR04FgAAAAAQ5m8dRd8GAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPArAAD//6QHISw=") 190.082599ms ago: executing program 0 (id=1396): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000000)='inet_sock_set_state\x00', r0}, 0x1a) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) 189.841679ms ago: executing program 2 (id=1397): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x22, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000002c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000004800)=0x5) 151.626129ms ago: executing program 2 (id=1398): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000100)={[{@mb_optimize_scan}, {@resuid}, {@errors_remount}, {@dioread_nolock}, {@nombcache}, {@quota}]}, 0x0, 0x44e, &(0x7f0000000680)="$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") 121.298249ms ago: executing program 8 (id=1399): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd637f4b22667f2f00db5b686158bbcfe8875a65969ff57b00000000000000000000000000ac1414aa35f086dd"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 0s ago: executing program 2 (id=1400): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x240007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000180)=0x30a, 0x4) sendto$inet(r0, &(0x7f00000012c0)="09268a92", 0x4, 0x1f, 0x0, 0x0) r1 = syz_io_uring_setup(0x10f, &(0x7f0000000140)={0x0, 0xe122, 0x0, 0x2, 0xffffffff}, &(0x7f0000000240)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x2201}, 0x1}) io_uring_enter(r1, 0x47f6, 0x0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): lesystem. [ 60.532932][ T4774] loop0: detected capacity change from 0 to 128 [ 60.564275][ T4774] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 60.735291][ T47] Bluetooth: hci1: command 0x0419 tx timeout [ 60.778562][ T4294] EXT4-fs (loop0): unmounting filesystem. [ 61.764458][ T4610] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.808808][ T4618] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 61.811425][ T4618] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 61.861890][ T4610] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.935399][ T4685] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 61.938154][ T4685] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 61.940782][ T4685] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.942519][ T4685] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.001401][ T4809] loop0: detected capacity change from 0 to 164 [ 62.004581][ T4685] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 62.016058][ T4685] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 62.018602][ T4685] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 62.058443][ T4685] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.060229][ T4685] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.062395][ T4685] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 62.107471][ T4685] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 62.159383][ T4685] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 62.162614][ T4685] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 62.180133][ T4685] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 62.223890][ T4685] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 62.241923][ T4685] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 62.271685][ T4685] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 62.295935][ T4610] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 62.298981][ T4610] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 62.304525][ T4685] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 62.340420][ T4685] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 62.375612][ T4685] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 62.847403][ T4836] netlink: 8 bytes leftover after parsing attributes in process `syz.0.149'. [ 63.014202][ T4581] device hsr_slave_0 left promiscuous mode [ 63.046154][ T4581] device hsr_slave_1 left promiscuous mode [ 63.119891][ T4581] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 63.122005][ T4581] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 63.183197][ T4581] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 63.191802][ T4581] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 63.202602][ T4581] device bridge_slave_1 left promiscuous mode [ 63.214075][ T4581] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.287330][ T4581] device bridge_slave_0 left promiscuous mode [ 63.290303][ T4581] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.205531][ T4581] device veth1_macvtap left promiscuous mode [ 64.207373][ T4581] device veth0_macvtap left promiscuous mode [ 64.208932][ T4581] device veth1_vlan left promiscuous mode [ 64.210913][ T4581] device veth0_vlan left promiscuous mode [ 64.497607][ T2059] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.499328][ T2059] ieee802154 phy1 wpan1: encryption failed: -22 [ 65.772138][ T4870] netlink: 16 bytes leftover after parsing attributes in process `syz.2.161'. [ 66.120467][ T4581] team0 (unregistering): Port device team_slave_1 removed [ 66.307737][ T4581] team0 (unregistering): Port device team_slave_0 removed [ 66.497781][ T4581] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 66.711771][ T4581] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 69.117924][ T4581] bond0 (unregistering): Released all slaves [ 69.383222][ T4610] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.396246][ T4475] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 69.398178][ T4475] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 69.400128][ T4864] netlink: 372 bytes leftover after parsing attributes in process `syz.0.158'. [ 69.525924][ T4882] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 69.528161][ T4882] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 69.580396][ T4884] netlink: 20 bytes leftover after parsing attributes in process `syz.2.165'. [ 69.617011][ T3764] cfg80211: failed to load regulatory.db [ 69.712240][ T4891] loop1: detected capacity change from 0 to 1024 [ 69.980393][ T4891] EXT4-fs (loop1): Test dummy encryption mode enabled [ 70.782772][ T4891] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 70.880585][ T4618] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 70.883248][ T4618] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 70.910430][ T4305] EXT4-fs (loop1): unmounting filesystem. [ 70.945617][ T4582] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 70.955966][ T4582] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 70.966862][ T4610] device veth0_vlan entered promiscuous mode [ 70.976027][ T4582] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 70.978479][ T4582] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 70.989464][ T4610] device veth1_vlan entered promiscuous mode [ 71.065767][ T4475] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 71.076620][ T4475] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 71.079153][ T4475] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 71.081802][ T4475] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 71.093981][ T4610] device veth0_macvtap entered promiscuous mode [ 71.098474][ T4610] device veth1_macvtap entered promiscuous mode [ 71.105168][ T4343] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 71.111100][ T4610] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.113991][ T4610] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.118162][ T4610] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.120838][ T4610] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.123213][ T4610] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.126370][ T4610] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.128708][ T4610] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.131375][ T4610] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.135805][ T4610] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.137903][ T4475] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 71.144223][ T4475] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 71.156334][ T4475] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 71.166811][ T4475] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 71.172177][ T4610] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.174641][ T4610] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.185175][ T4610] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.187878][ T4610] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.190257][ T4610] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.208672][ T4610] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.211097][ T4610] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.237448][ T4610] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.255835][ T4610] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.265831][ T4582] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 71.268480][ T4582] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 71.277910][ T4610] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.282102][ T4610] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.285213][ T4343] usb 1-1: Using ep0 maxpacket: 16 [ 71.290821][ T4610] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.291737][ T4343] usb 1-1: config 0 has an invalid interface number: 29 but max is 0 [ 71.295924][ T4343] usb 1-1: config 0 has no interface number 0 [ 71.297656][ T4343] usb 1-1: config 0 interface 29 altsetting 0 bulk endpoint 0xA has invalid maxpacket 16 [ 71.299578][ T4610] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.299968][ T4343] usb 1-1: config 0 interface 29 altsetting 0 endpoint 0x82 has invalid maxpacket 1104, setting to 1024 [ 71.304786][ T4343] usb 1-1: config 0 interface 29 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 71.340095][ T4343] usb 1-1: New USB device found, idVendor=050d, idProduct=2102, bcdDevice=70.d0 [ 71.342433][ T4343] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 71.355137][ T4343] usb 1-1: Product: syz [ 71.356311][ T4343] usb 1-1: Manufacturer: syz [ 71.357459][ T4343] usb 1-1: SerialNumber: syz [ 71.371495][ T4343] usb 1-1: config 0 descriptor?? [ 71.380136][ T4916] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 71.382133][ T4916] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 71.463386][ T4475] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.469868][ T4475] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.504161][ T4582] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 71.541014][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.543024][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.549795][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 71.783959][ T4948] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 71.811653][ T4948] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 72.950029][ T4972] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 72.967224][ T4972] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 73.102477][ T4969] loop4: detected capacity change from 0 to 8192 [ 73.150935][ T4907] I/O error, dev loop4, sector 8064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 73.279175][ T4986] loop5: detected capacity change from 0 to 512 [ 73.293244][ T4986] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (3832!=33349) [ 73.319483][ T4986] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802e01c, mo2=0002] [ 73.324908][ T4986] System zones: 1-12 [ 73.341854][ T4986] EXT4-fs (loop5): orphan cleanup on readonly fs [ 73.341951][ T4990] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 73.348268][ T4990] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 73.368791][ T4986] EXT4-fs error (device loop5): ext4_read_inode_bitmap:168: comm syz.5.189: Inode bitmap for bg 0 marked uninitialized [ 73.372520][ T4986] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 73.380763][ T4986] EXT4-fs (loop5): re-mounted. Quota mode: none. [ 73.490327][ T4610] EXT4-fs (loop5): unmounting filesystem. [ 73.653876][ T4998] loop5: detected capacity change from 0 to 1024 [ 73.660372][ T4998] EXT4-fs: Ignoring removed nomblk_io_submit option [ 73.668814][ T4998] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 73.718944][ T4998] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 73.764237][ T4998] EXT4-fs error (device loop5): ext4_xattr_ibody_list:748: inode #2: comm syz.5.191: corrupted in-inode xattr [ 73.805011][ T4998] EXT4-fs (loop5): Remounting filesystem read-only [ 73.914583][ T3764] usb 1-1: USB disconnect, device number 3 [ 74.240484][ T4610] EXT4-fs (loop5): unmounting filesystem. [ 74.802388][ T5014] loop0: detected capacity change from 0 to 1024 [ 74.925905][ T5024] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 74.928121][ T5024] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 75.087200][ T5031] loop0: detected capacity change from 0 to 1024 [ 75.305327][ T5037] process 'syz.2.204' launched './file1' with NULL argv: empty string added [ 75.343012][ T5039] loop1: detected capacity change from 0 to 1024 [ 75.358837][ T5039] hfsplus: write access to a journaled filesystem is not supported, use the force option at your own risk, mounting read-only. [ 75.775327][ T5061] netlink: 24 bytes leftover after parsing attributes in process `syz.2.212'. [ 76.817152][ T5086] loop1: detected capacity change from 0 to 128 [ 76.868706][ T5091] netlink: 4 bytes leftover after parsing attributes in process `syz.5.222'. [ 76.914882][ T27] audit: type=1326 audit(76.881:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5092 comm="syz.2.224" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb4d5ad28 code=0x7ffc0000 [ 76.929852][ T27] audit: type=1326 audit(76.891:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5092 comm="syz.2.224" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffffb4d5ad28 code=0x7ffc0000 [ 76.948602][ T5097] syz.1.220: attempt to access beyond end of device [ 76.948602][ T5097] loop1: rw=2049, sector=145, nr_sectors = 696 limit=128 [ 76.952501][ T5094] netlink: 20 bytes leftover after parsing attributes in process `syz.2.224'. [ 76.954915][ T27] audit: type=1326 audit(76.901:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5092 comm="syz.2.224" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb4d5ad28 code=0x7ffc0000 [ 76.974912][ T27] audit: type=1326 audit(76.901:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5092 comm="syz.2.224" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffffb4d5ad28 code=0x7ffc0000 [ 76.997020][ T27] audit: type=1326 audit(76.911:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5092 comm="syz.2.224" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb4d5ad28 code=0x7ffc0000 [ 77.022549][ T27] audit: type=1326 audit(76.911:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5092 comm="syz.2.224" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=431 compat=0 ip=0xffffb4d5ad28 code=0x7ffc0000 [ 77.042833][ T27] audit: type=1326 audit(76.911:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5092 comm="syz.2.224" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb4d5ad28 code=0x7ffc0000 [ 77.053549][ T5085] syz.1.220: attempt to access beyond end of device [ 77.053549][ T5085] loop1: rw=524288, sector=145, nr_sectors = 224 limit=128 [ 77.066333][ T112] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 77.077048][ T27] audit: type=1326 audit(76.911:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5092 comm="syz.2.224" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=211 compat=0 ip=0xffffb4d5ad28 code=0x7ffc0000 [ 77.082071][ T27] audit: type=1326 audit(76.911:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5092 comm="syz.2.224" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb4d5ad28 code=0x7ffc0000 [ 77.095808][ T5085] syz.1.220: attempt to access beyond end of device [ 77.095808][ T5085] loop1: rw=0, sector=225, nr_sectors = 8 limit=128 [ 77.099630][ T5085] syz.1.220: attempt to access beyond end of device [ 77.099630][ T5085] loop1: rw=0, sector=225, nr_sectors = 8 limit=128 [ 77.103128][ T5085] syz.1.220: attempt to access beyond end of device [ 77.103128][ T5085] loop1: rw=0, sector=225, nr_sectors = 8 limit=128 [ 77.145252][ T5085] syz.1.220: attempt to access beyond end of device [ 77.145252][ T5085] loop1: rw=0, sector=225, nr_sectors = 8 limit=128 [ 77.148754][ T5085] syz.1.220: attempt to access beyond end of device [ 77.148754][ T5085] loop1: rw=0, sector=225, nr_sectors = 8 limit=128 [ 77.151914][ T5085] syz.1.220: attempt to access beyond end of device [ 77.151914][ T5085] loop1: rw=0, sector=225, nr_sectors = 8 limit=128 [ 77.172897][ T27] audit: type=1326 audit(76.931:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5092 comm="syz.2.224" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=178 compat=0 ip=0xffffb4d5ad28 code=0x7ffc0000 [ 77.202552][ T5085] syz.1.220: attempt to access beyond end of device [ 77.202552][ T5085] loop1: rw=0, sector=225, nr_sectors = 8 limit=128 [ 77.220974][ T5085] syz.1.220: attempt to access beyond end of device [ 77.220974][ T5085] loop1: rw=0, sector=225, nr_sectors = 8 limit=128 [ 77.444454][ T112] usb 1-1: Using ep0 maxpacket: 32 [ 78.033270][ T112] usb 1-1: config 0 has an invalid interface number: 85 but max is 0 [ 78.035276][ T112] usb 1-1: config 0 has no interface number 0 [ 78.036770][ T112] usb 1-1: config 0 interface 85 has no altsetting 0 [ 78.040057][ T112] usb 1-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 78.042291][ T112] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.044069][ T112] usb 1-1: Product: syz [ 78.045012][ T112] usb 1-1: Manufacturer: syz [ 78.046267][ T112] usb 1-1: SerialNumber: syz [ 78.056311][ T112] usb 1-1: config 0 descriptor?? [ 78.060059][ T112] appletouch 1-1:0.85: Could not find int-in endpoint [ 78.061939][ T112] appletouch: probe of 1-1:0.85 failed with error -5 [ 78.064126][ T112] usbhid 1-1:0.85: couldn't find an input interrupt endpoint [ 78.288765][ T5134] netlink: 4 bytes leftover after parsing attributes in process `syz.4.235'. [ 78.362796][ T5140] loop1: detected capacity change from 0 to 1024 [ 78.438301][ T5140] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 78.495147][ T5147] capability: warning: `syz.4.239' uses 32-bit capabilities (legacy support in use) [ 78.540140][ T4305] EXT4-fs (loop1): unmounting filesystem. [ 78.706477][ T5159] netlink: 8 bytes leftover after parsing attributes in process `syz.4.244'. [ 78.708807][ T5159] netlink: 8 bytes leftover after parsing attributes in process `syz.4.244'. [ 78.726328][ T5159] netlink: 8 bytes leftover after parsing attributes in process `syz.4.244'. [ 78.746973][ T5162] loop1: detected capacity change from 0 to 256 [ 78.761813][ T5159] netlink: 8 bytes leftover after parsing attributes in process `syz.4.244'. [ 78.764072][ T5159] netlink: 8 bytes leftover after parsing attributes in process `syz.4.244'. [ 78.775293][ T5159] netlink: 8 bytes leftover after parsing attributes in process `syz.4.244'. [ 79.531795][ T5162] FAT-fs (loop1): Directory bread(block 64) failed [ 79.539177][ T5162] FAT-fs (loop1): Directory bread(block 65) failed [ 79.540938][ T5162] FAT-fs (loop1): Directory bread(block 66) failed [ 79.548879][ T5162] FAT-fs (loop1): Directory bread(block 67) failed [ 79.550585][ T5162] FAT-fs (loop1): Directory bread(block 68) failed [ 79.552250][ T5162] FAT-fs (loop1): Directory bread(block 69) failed [ 79.556013][ T5113] usb 1-1: USB disconnect, device number 4 [ 79.605347][ T5162] FAT-fs (loop1): Directory bread(block 70) failed [ 79.607032][ T5162] FAT-fs (loop1): Directory bread(block 71) failed [ 79.608592][ T5162] FAT-fs (loop1): Directory bread(block 72) failed [ 79.610178][ T5162] FAT-fs (loop1): Directory bread(block 73) failed [ 79.762030][ T5172] device syzkaller0 entered promiscuous mode [ 81.165910][ T5212] binder: 5211:5212 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 81.169389][ T5212] binder: 5212 RLIMIT_NICE not set [ 81.429637][ T5217] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 81.431979][ T5217] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 81.983872][ T5219] netlink: 'syz.2.263': attribute type 1 has an invalid length. [ 83.106335][ T5230] loop1: detected capacity change from 0 to 1024 [ 83.129453][ T5230] EXT4-fs: Ignoring removed nomblk_io_submit option [ 83.148128][ T5230] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 83.186008][ T4305] EXT4-fs (loop1): unmounting filesystem. [ 85.155859][ T5247] Invalid option length (995421) for dns_resolver key [ 85.333076][ T5252] loop1: detected capacity change from 0 to 128 [ 85.341824][ T5252] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 85.368435][ T4305] EXT4-fs (loop1): unmounting filesystem. [ 85.673922][ T5267] loop1: detected capacity change from 0 to 256 [ 92.919788][ T5281] loop1: detected capacity change from 0 to 512 [ 92.984031][ T5286] binder: BINDER_SET_CONTEXT_MGR already set [ 92.995765][ T5286] binder: 5276:5286 ioctl 4018620d 4000000002c0 returned -16 [ 93.003130][ T5278] binder: 5276:5278 got transaction to invalid handle, 1 [ 93.021719][ T5278] binder: 5278:5276 cannot find target node [ 93.033437][ T5278] binder: 5276:5278 transaction call to 0:0 failed 2/29201/-22, size 88-24 line 3054 [ 93.044029][ T5208] binder: undelivered TRANSACTION_ERROR: 29201 [ 93.061714][ T5281] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 93.119522][ T5281] EXT4-fs warning (device loop1): ext4_group_add:1723: Can't resize non-sparse filesystem further [ 93.178352][ T4305] EXT4-fs (loop1): unmounting filesystem. [ 93.328209][ T5208] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 93.400036][ T27] kauditd_printk_skb: 6 callbacks suppressed [ 93.400050][ T27] audit: type=1326 audit(93.361:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5308 comm="syz.1.291" exe="/root/syz-executor" sig=9 arch=c00000b7 syscall=98 compat=0 ip=0xffffa055ad28 code=0x0 [ 93.438591][ T5313] loop4: detected capacity change from 0 to 1024 [ 93.448207][ T5313] EXT4-fs: Ignoring removed orlov option [ 93.449643][ T5313] EXT4-fs: Ignoring removed i_version option [ 93.461393][ T5313] EXT4-fs (loop4): Invalid log cluster size: 33028 [ 93.507877][ T5319] loop5: detected capacity change from 0 to 512 [ 93.516293][ T5208] usb 1-1: Using ep0 maxpacket: 8 [ 93.526413][ T5208] usb 1-1: config 1 has an invalid interface number: 126 but max is 0 [ 93.528407][ T5208] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 93.530873][ T5208] usb 1-1: config 1 has no interface number 0 [ 93.532351][ T5208] usb 1-1: config 1 interface 126 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 93.534316][ T5307] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 93.555259][ T5208] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 93.557708][ T5208] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 93.559591][ T5208] usb 1-1: SerialNumber: syz [ 93.570972][ T5319] EXT4-fs error (device loop5): ext4_do_update_inode:5224: inode #16: comm syz.5.296: corrupted inode contents [ 93.580307][ T5319] EXT4-fs error (device loop5): ext4_dirty_inode:6089: inode #16: comm syz.5.296: mark_inode_dirty error [ 93.586523][ T5319] EXT4-fs error (device loop5): ext4_do_update_inode:5224: inode #16: comm syz.5.296: corrupted inode contents [ 93.592787][ T5319] EXT4-fs error (device loop5): __ext4_ext_dirty:202: inode #16: comm syz.5.296: mark_inode_dirty error [ 93.603329][ T5319] EXT4-fs error (device loop5): ext4_do_update_inode:5224: inode #16: comm syz.5.296: corrupted inode contents [ 93.608543][ T5319] EXT4-fs error (device loop5) in ext4_orphan_del:305: Corrupt filesystem [ 93.611173][ T5319] EXT4-fs error (device loop5): ext4_do_update_inode:5224: inode #16: comm syz.5.296: corrupted inode contents [ 93.625486][ T5319] EXT4-fs error (device loop5): ext4_truncate:4311: inode #16: comm syz.5.296: mark_inode_dirty error [ 93.628545][ T5319] EXT4-fs error (device loop5) in ext4_process_orphan:347: Corrupt filesystem [ 93.633381][ T5319] EXT4-fs (loop5): 1 truncate cleaned up [ 93.634878][ T5319] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 93.669809][ T5325] loop4: detected capacity change from 0 to 2048 [ 93.674519][ T1707] Quota error (device loop5): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 93.677360][ T5325] EXT4-fs: Ignoring removed nomblk_io_submit option [ 93.690880][ T1707] EXT4-fs error (device loop5): ext4_release_dquot:6818: comm kworker/u4:5: Failed to release dquot type 1 [ 93.705548][ T5319] Quota error (device loop5): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 93.708185][ T5319] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 93.710808][ T5319] EXT4-fs error (device loop5): ext4_acquire_dquot:6795: comm syz.5.296: Failed to acquire dquot type 1 [ 93.735429][ T5319] Quota error (device loop5): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 93.735630][ T5325] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 93.738045][ T5319] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 93.743002][ T5319] EXT4-fs error (device loop5): ext4_acquire_dquot:6795: comm syz.5.296: Failed to acquire dquot type 1 [ 93.774981][ T5208] usb-storage 1-1:1.126: USB Mass Storage device detected [ 93.786195][ T4306] EXT4-fs (loop4): unmounting filesystem. [ 93.809633][ T5208] usb-storage 1-1:1.126: Quirks match for vid 0525 pid a4a5: 10000 [ 93.831885][ T4610] EXT4-fs (loop5): unmounting filesystem. [ 93.867905][ T5208] usb 1-1: USB disconnect, device number 5 [ 94.131703][ T5350] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 94.136339][ T5350] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 95.175630][ T5382] loop5: detected capacity change from 0 to 512 [ 95.188993][ T5382] EXT4-fs (loop5): Encoding requested by superblock is unknown [ 95.247142][ T5316] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 95.264789][ T5382] loop5: detected capacity change from 0 to 1024 [ 95.272175][ T5382] EXT4-fs: Invalid want_extra_isize 1 [ 95.707246][ T5400] loop4: detected capacity change from 0 to 128 [ 95.709566][ T5400] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 95.717913][ T5400] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 95.765858][ T5404] loop5: detected capacity change from 0 to 256 [ 95.782705][ T5404] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 95.791653][ T5404] exFAT-fs (loop5): Medium has reported failures. Some data may be lost. [ 95.807012][ T1707] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 95.826896][ T5404] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 95.869754][ T5408] loop4: detected capacity change from 0 to 512 [ 95.883305][ T5408] EXT4-fs: quotafile must be on filesystem root [ 95.935137][ T5316] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 96.134234][ T5421] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 96.143120][ T5421] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 96.452388][ T5431] netlink: 'syz.4.339': attribute type 12 has an invalid length. [ 96.549930][ T5437] loop4: detected capacity change from 0 to 2048 [ 96.567724][ T5437] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 97.590690][ T5453] loop1: detected capacity change from 0 to 256 [ 97.634838][ T5453] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 97.649465][ T5454] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 97.703954][ T5453] exFAT-fs (loop1): hint_cluster is invalid (1) [ 97.729533][ T5453] bio_check_eod: 48 callbacks suppressed [ 97.729548][ T5453] syz.1.346: attempt to access beyond end of device [ 97.729548][ T5453] loop1: rw=2049, sector=34359738488, nr_sectors = 8 limit=256 [ 98.881048][ T5488] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 98.883268][ T5488] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 98.885473][ T5487] __nla_validate_parse: 31 callbacks suppressed [ 98.885485][ T5487] netlink: 68 bytes leftover after parsing attributes in process `syz.0.358'. [ 98.895203][ T5487] netlink: 12 bytes leftover after parsing attributes in process `syz.0.358'. [ 98.903760][ T5487] netlink: 20 bytes leftover after parsing attributes in process `syz.0.358'. [ 98.906101][ T5487] netlink: 20 bytes leftover after parsing attributes in process `syz.0.358'. [ 98.995000][ T5489] loop4: detected capacity change from 0 to 4096 [ 99.139032][ T5307] I/O error, dev loop4, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 99.166574][ T47] Bluetooth: hci1: link tx timeout [ 99.168003][ T47] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 99.170381][ T47] Bluetooth: hci1: link tx timeout [ 99.171650][ T47] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 99.173701][ T47] Bluetooth: hci1: link tx timeout [ 99.173789][ T5504] netlink: 48 bytes leftover after parsing attributes in process `syz.5.361'. [ 99.174999][ T47] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 99.298213][ T5511] loop4: detected capacity change from 0 to 512 [ 99.348311][ T5511] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 99.447419][ T4306] EXT4-fs (loop4): unmounting filesystem. [ 99.599470][ T5529] loop4: detected capacity change from 0 to 512 [ 99.609917][ T5529] EXT4-fs: Ignoring removed nomblk_io_submit option [ 99.620739][ T5529] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 99.662631][ T5529] EXT4-fs error (device loop4): ext4_orphan_get:1400: inode #15: comm syz.4.365: iget: bogus i_mode (0) [ 99.678645][ T5534] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.681313][ T5529] EXT4-fs (loop4): Remounting filesystem read-only [ 99.682277][ T5534] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.690483][ T5529] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.365: couldn't read orphan inode 15 (err -117) [ 99.721778][ T5529] EXT4-fs (loop4): Remounting filesystem read-only [ 99.731547][ T5529] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 99.841685][ T5529] EXT4-fs (loop4): shut down requested (0) [ 100.101784][ T4306] EXT4-fs (loop4): unmounting filesystem. [ 100.106499][ T5564] loop1: detected capacity change from 0 to 128 [ 100.292281][ T5208] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 100.428781][ T5574] loop5: detected capacity change from 0 to 512 [ 100.708176][ T5574] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 101.220256][ T47] Bluetooth: hci1: command 0x0406 tx timeout [ 101.330830][ T5584] netlink: 'syz.4.381': attribute type 16 has an invalid length. [ 101.344632][ T5584] netlink: 'syz.4.381': attribute type 17 has an invalid length. [ 102.185271][ T4296] Bluetooth: hci1: link tx timeout [ 102.190882][ T4296] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 102.269773][ T5208] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 102.273559][ T5208] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 102.283941][ T5208] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 102.298497][ T5208] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.331185][ T5208] usb 1-1: Product: syz [ 102.332477][ T5208] usb 1-1: Manufacturer: syz [ 102.446815][ T5208] usb 1-1: SerialNumber: syz [ 102.455649][ T4610] EXT4-fs (loop5): unmounting filesystem. [ 102.702834][ T5617] loop5: detected capacity change from 0 to 512 [ 102.723289][ T5617] EXT4-fs: Ignoring removed mblk_io_submit option [ 102.780456][ T5617] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 102.899195][ T5208] usb 1-1: MIDIStreaming interface descriptor not found [ 102.944301][ T5208] usb 1-1: USB disconnect, device number 6 [ 103.062388][ T4610] EXT4-fs (loop5): unmounting filesystem. [ 103.295822][ T5649] loop1: detected capacity change from 0 to 512 [ 103.304461][ T5316] udevd[5316]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 104.031001][ T5654] netlink: 8 bytes leftover after parsing attributes in process `syz.5.395'. [ 104.174263][ T5654] netlink: 8 bytes leftover after parsing attributes in process `syz.5.395'. [ 104.284512][ T5649] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 104.485275][ T4305] EXT4-fs (loop1): unmounting filesystem. [ 104.654795][ T5677] loop0: detected capacity change from 0 to 256 [ 104.696469][ T5677] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 104.699134][ T5677] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 104.732569][ T5677] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 105.021904][ T5692] loop0: detected capacity change from 0 to 256 [ 105.034262][ T5692] exfat: Deprecated parameter 'utf8' [ 105.055491][ T5692] exfat: Deprecated parameter 'namecase' [ 105.057269][ T5692] exfat: Deprecated parameter 'utf8' [ 105.102437][ T4296] Bluetooth: hci1: link tx timeout [ 105.103759][ T4296] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 105.345616][ T5692] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 105.486713][ T5706] netlink: 8 bytes leftover after parsing attributes in process `syz.1.409'. [ 106.536189][ T5706] netlink: 8 bytes leftover after parsing attributes in process `syz.1.409'. [ 107.630805][ T5729] input: syz1 as /devices/virtual/input/input6 [ 107.758692][ T5736] loop4: detected capacity change from 0 to 512 [ 107.836240][ T5736] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 107.954347][ T5736] EXT4-fs (loop4): shut down requested (2) [ 108.072881][ T5758] netlink: 8 bytes leftover after parsing attributes in process `syz.0.422'. [ 108.075388][ T5758] netlink: 8 bytes leftover after parsing attributes in process `syz.0.422'. [ 108.812433][ T4306] EXT4-fs (loop4): unmounting filesystem. [ 108.955257][ T4296] Bluetooth: hci1: link tx timeout [ 108.956434][ T4296] Bluetooth: hci1: killing stalled connection 10:aa:aa:aa:aa:aa [ 108.960617][ T4296] Bluetooth: hci1: link tx timeout [ 108.961917][ T4296] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 109.337765][ T5775] loop0: detected capacity change from 0 to 512 [ 109.506590][ T5775] Quota error (device loop0): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 109.509394][ T5775] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 [ 109.511628][ T5775] EXT4-fs error (device loop0): ext4_acquire_dquot:6795: comm syz.0.427: Failed to acquire dquot type 0 [ 109.677786][ T5775] EXT4-fs (loop0): Remounting filesystem read-only [ 109.777283][ T5775] Quota error (device loop0): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 109.893017][ T5775] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 [ 109.994631][ T5775] EXT4-fs error (device loop0): ext4_acquire_dquot:6795: comm syz.0.427: Failed to acquire dquot type 0 [ 110.104443][ T5775] EXT4-fs (loop0): Remounting filesystem read-only [ 110.186132][ T5775] Quota error (device loop0): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 110.189047][ T5775] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 [ 110.191206][ T5775] EXT4-fs error (device loop0): ext4_acquire_dquot:6795: comm syz.0.427: Failed to acquire dquot type 0 [ 110.228338][ T5775] EXT4-fs (loop0): Remounting filesystem read-only [ 110.230289][ T5775] EXT4-fs (loop0): 1 orphan inode deleted [ 110.231674][ T5775] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 110.290101][ T5792] loop4: detected capacity change from 0 to 1024 [ 110.333040][ T5775] Quota error (device loop0): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 110.370312][ T5775] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 [ 110.372749][ T5775] EXT4-fs error (device loop0): ext4_acquire_dquot:6795: comm syz.0.427: Failed to acquire dquot type 0 [ 110.419082][ T5775] EXT4-fs (loop0): Remounting filesystem read-only [ 110.490886][ T5800] loop1: detected capacity change from 0 to 128 [ 110.502125][ T5800] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 110.514678][ T4294] EXT4-fs (loop0): unmounting filesystem. [ 110.569637][ T4305] EXT4-fs (loop1): unmounting filesystem. [ 110.879926][ T5814] netlink: 8 bytes leftover after parsing attributes in process `syz.0.435'. [ 110.882435][ T5814] netlink: 8 bytes leftover after parsing attributes in process `syz.0.435'. [ 111.586052][ T4296] Bluetooth: hci1: command 0x0406 tx timeout [ 112.027226][ T5816] loop1: detected capacity change from 0 to 1024 [ 112.206252][ T5816] hfsplus: failed to load root directory [ 112.740436][ T5826] 9pnet: Could not find request transport: n [ 112.807551][ T5307] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 112.871580][ T5833] netlink: 20 bytes leftover after parsing attributes in process `syz.1.447'. [ 112.874161][ T5833] netlink: 20 bytes leftover after parsing attributes in process `syz.1.447'. [ 112.884873][ T5834] loop0: detected capacity change from 0 to 1024 [ 113.014044][ T5840] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 113.030709][ T5840] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 113.071180][ T5846] loop5: detected capacity change from 0 to 512 [ 113.091694][ T5846] EXT4-fs: Ignoring removed i_version option [ 113.119167][ T5846] EXT4-fs (loop5): failed to initialize system zone (-117) [ 113.121061][ T5846] EXT4-fs (loop5): mount failed [ 113.336581][ T5307] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 113.456191][ T5854] netlink: 8 bytes leftover after parsing attributes in process `syz.0.451'. [ 113.459087][ T5854] netlink: 8 bytes leftover after parsing attributes in process `syz.0.451'. [ 115.728711][ T5880] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 115.731109][ T5880] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 115.779441][ T5880] Invalid option length (995421) for dns_resolver key [ 115.977838][ T5887] loop5: detected capacity change from 0 to 256 [ 115.988887][ T5888] netlink: 8 bytes leftover after parsing attributes in process `syz.2.465'. [ 116.131892][ T5892] netlink: 8 bytes leftover after parsing attributes in process `syz.0.464'. [ 116.143328][ T5892] netlink: 8 bytes leftover after parsing attributes in process `syz.0.464'. [ 116.879972][ T5900] binder: 5898:5900 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 118.145053][ C0] sched: RT throttling activated [ 118.181200][ T5914] loop0: detected capacity change from 0 to 512 [ 118.263212][ T5914] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 118.293704][ T5917] loop1: detected capacity change from 0 to 512 [ 118.330290][ T5917] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 118.357145][ T5917] EXT4-fs (loop1): 1 truncate cleaned up [ 118.358595][ T5917] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 118.390610][ T5914] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2186: inode #15: comm syz.0.475: corrupted in-inode xattr [ 118.403032][ T5920] loop4: detected capacity change from 0 to 512 [ 118.411568][ T5914] EXT4-fs (loop0): Remounting filesystem read-only [ 118.413245][ T5914] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.475: couldn't read orphan inode 15 (err -117) [ 118.444153][ T5920] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 118.447640][ T5914] EXT4-fs (loop0): Remounting filesystem read-only [ 118.449333][ T5914] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 118.687803][ T4305] EXT4-fs (loop1): unmounting filesystem. [ 118.690288][ T4294] EXT4-fs (loop0): unmounting filesystem. [ 119.580542][ T4306] EXT4-fs (loop4): unmounting filesystem. [ 119.624606][ T5940] netlink: 12 bytes leftover after parsing attributes in process `syz.1.485'. [ 119.714942][ T5942] netlink: 8 bytes leftover after parsing attributes in process `syz.0.481'. [ 119.717558][ T5942] netlink: 8 bytes leftover after parsing attributes in process `syz.0.481'. [ 121.370421][ T5952] loop5: detected capacity change from 0 to 2048 [ 121.383430][ T5952] ext4: Unknown parameter 'noacl' [ 121.441186][ T5316] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 121.561882][ T5969] input: syz1 as /devices/virtual/input/input7 [ 121.623662][ T5972] loop4: detected capacity change from 0 to 512 [ 121.632955][ T5972] EXT2-fs (loop4): warning: feature flags set on rev 0 fs, running e2fsck is recommended [ 121.684398][ T5972] EXT2-fs (loop4): warning: maximal mount count reached, running e2fsck is recommended [ 121.686839][ T5972] EXT2-fs (loop4): 0.5b, 95/08/09, bs=4096, gc=1, bpg=32768, ipg=32, mo=8001c] [ 122.747594][ T27] audit: type=1326 audit(122.711:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5992 comm="syz.4.498" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff9ff5ad28 code=0x0 [ 122.813553][ T5997] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 122.815887][ T5997] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 122.907339][ T5998] netlink: 8 bytes leftover after parsing attributes in process `syz.2.497'. [ 123.495800][ T5998] netlink: 8 bytes leftover after parsing attributes in process `syz.2.497'. [ 125.007476][ T6041] loop5: detected capacity change from 0 to 1024 [ 125.018174][ T6041] hfsplus: unable to parse mount options [ 125.125956][ T5316] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 125.330102][ T6053] netlink: 8 bytes leftover after parsing attributes in process `syz.2.510'. [ 125.958563][ T2059] ieee802154 phy0 wpan0: encryption failed: -22 [ 125.960206][ T2059] ieee802154 phy1 wpan1: encryption failed: -22 [ 126.016308][ T6053] netlink: 8 bytes leftover after parsing attributes in process `syz.2.510'. [ 126.298921][ T24] libceph: connect (1)[c::]:6789 error -101 [ 126.300772][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 126.318194][ T24] libceph: connect (1)[c::]:6789 error -101 [ 126.319756][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 126.337582][ T6060] ceph: No mds server is up or the cluster is laggy [ 127.303433][ T6095] loop1: detected capacity change from 0 to 512 [ 127.368049][ T6095] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.520: invalid indirect mapped block 4294967295 (level 1) [ 127.381960][ T6095] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.520: invalid indirect mapped block 4294967295 (level 1) [ 127.401577][ T6095] EXT4-fs (loop1): 2 truncates cleaned up [ 127.410916][ T6095] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 127.452665][ T6102] input: syz1 as /devices/virtual/input/input8 [ 127.465699][ T6095] EXT4-fs error (device loop1): ext4_get_parent:1906: inode #11: comm syz.1.520: bad parent inode number: 3 [ 127.743145][ T4305] EXT4-fs (loop1): unmounting filesystem. [ 127.910872][ T6115] loop5: detected capacity change from 0 to 1024 [ 127.927487][ T6115] EXT4-fs: Ignoring removed nobh option [ 127.940477][ T6115] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 128.016258][ T6120] netlink: 8 bytes leftover after parsing attributes in process `syz.2.523'. [ 128.018918][ T6120] netlink: 8 bytes leftover after parsing attributes in process `syz.2.523'. [ 128.745251][ T6122] device lo entered promiscuous mode [ 128.767949][ T6115] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 128.801257][ T6115] netlink: 277 bytes leftover after parsing attributes in process `syz.5.526'. [ 128.934199][ T4610] EXT4-fs (loop5): unmounting filesystem. [ 130.688013][ T6169] loop4: detected capacity change from 0 to 128 [ 130.702092][ T6167] netlink: 36 bytes leftover after parsing attributes in process `syz.5.535'. [ 130.795441][ T6174] netlink: 8 bytes leftover after parsing attributes in process `syz.2.537'. [ 130.798024][ T6174] netlink: 8 bytes leftover after parsing attributes in process `syz.2.537'. [ 131.481780][ T14] libceph: connect (1)[c::]:6789 error -101 [ 131.483443][ T14] libceph: mon0 (1)[c::]:6789 connect error [ 131.505397][ T14] libceph: connect (1)[c::]:6789 error -101 [ 131.507465][ T14] libceph: mon0 (1)[c::]:6789 connect error [ 131.558316][ T6165] ceph: No mds server is up or the cluster is laggy [ 131.727445][ T6187] netlink: 8 bytes leftover after parsing attributes in process `syz.4.541'. [ 131.776182][ T3764] libceph: connect (1)[c::]:6789 error -101 [ 131.777846][ T3764] libceph: mon0 (1)[c::]:6789 connect error [ 131.970676][ T6200] netlink: 28 bytes leftover after parsing attributes in process `syz.5.546'. [ 132.236344][ T6208] netlink: 12 bytes leftover after parsing attributes in process `syz.4.548'. [ 132.247817][ T6208] netlink: 40 bytes leftover after parsing attributes in process `syz.4.548'. [ 132.379418][ T6215] loop4: detected capacity change from 0 to 1024 [ 132.397800][ T6215] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 132.412439][ T6215] EXT4-fs error (device loop4): ext4_xattr_ibody_get:603: inode #2: comm syz.4.553: corrupted in-inode xattr [ 132.530928][ T4306] EXT4-fs (loop4): unmounting filesystem. [ 133.426470][ T6223] __nla_validate_parse: 2 callbacks suppressed [ 133.426485][ T6223] netlink: 8 bytes leftover after parsing attributes in process `syz.5.554'. [ 133.485926][ T6227] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 133.488306][ T6227] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 133.524077][ T6230] loop4: detected capacity change from 0 to 512 [ 133.550025][ T6230] EXT4-fs (loop4): Test dummy encryption mode enabled [ 133.551762][ T6230] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 133.581862][ T6233] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 133.584149][ T6233] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 133.610653][ T6230] EXT4-fs (loop4): 1 truncate cleaned up [ 133.612125][ T6230] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 133.643097][ T6230] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-ce" [ 133.756145][ T4306] EXT4-fs (loop4): unmounting filesystem. [ 133.964060][ T14] libceph: connect (1)[c::]:6789 error -101 [ 133.966379][ T14] libceph: mon0 (1)[c::]:6789 connect error [ 133.978371][ T14] libceph: connect (1)[c::]:6789 error -101 [ 133.980067][ T14] libceph: mon0 (1)[c::]:6789 connect error [ 134.235443][ T3764] libceph: connect (1)[c::]:6789 error -101 [ 134.237037][ T3764] libceph: mon0 (1)[c::]:6789 connect error [ 134.715306][ T6269] netlink: 8 bytes leftover after parsing attributes in process `syz.1.570'. [ 134.717895][ T6269] netlink: 8 bytes leftover after parsing attributes in process `syz.1.570'. [ 135.522876][ T3764] libceph: connect (1)[c::]:6789 error -101 [ 135.524631][ T3764] libceph: mon0 (1)[c::]:6789 connect error [ 135.687506][ T6245] ceph: No mds server is up or the cluster is laggy [ 135.766008][ T6280] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 135.779369][ T6280] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 136.657961][ T6307] netlink: 8 bytes leftover after parsing attributes in process `syz.1.586'. [ 136.660691][ T6307] netlink: 8 bytes leftover after parsing attributes in process `syz.1.586'. [ 137.426502][ T6311] loop5: detected capacity change from 0 to 16 [ 137.484251][ T6311] erofs: (device loop5): mounted with root inode @ nid 36. [ 137.676264][ T6322] loop4: detected capacity change from 0 to 512 [ 137.686445][ T6322] EXT4-fs: Ignoring removed i_version option [ 137.702308][ T6322] EXT4-fs (loop4): failed to initialize system zone (-117) [ 137.704342][ T6322] EXT4-fs (loop4): mount failed [ 137.713906][ T6327] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 137.737846][ T6327] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 137.791714][ T5316] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 137.796889][ T6322] binder: Bad value for 'max' [ 137.812273][ T6322] loop4: detected capacity change from 0 to 164 [ 137.858424][ T5316] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 138.346901][ T27] audit: type=1326 audit(138.311:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6334 comm="syz.5.600" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffab95ad28 code=0x0 [ 138.406260][ T27] audit: type=1326 audit(138.371:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6334 comm="syz.5.600" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=436 compat=0 ip=0xffffab95ad28 code=0x0 [ 138.615121][ T6343] netlink: 8 bytes leftover after parsing attributes in process `syz.0.601'. [ 138.653016][ T6343] netlink: 8 bytes leftover after parsing attributes in process `syz.0.601'. [ 139.464846][ T6354] loop1: detected capacity change from 0 to 512 [ 139.498131][ T6356] loop4: detected capacity change from 0 to 1024 [ 139.522006][ T6356] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 139.557044][ T6354] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 139.564398][ T6356] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 139.572359][ T6356] EXT4-fs (loop4): orphan cleanup on readonly fs [ 139.575825][ T6356] EXT4-fs error (device loop4): ext4_read_inode_bitmap:168: comm syz.4.608: Inode bitmap for bg 0 marked uninitialized [ 139.591831][ T6356] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 139.605019][ T4305] EXT4-fs (loop1): unmounting filesystem. [ 139.750921][ T6372] netlink: 888 bytes leftover after parsing attributes in process `syz.1.614'. [ 139.753223][ T6372] netlink: 888 bytes leftover after parsing attributes in process `syz.1.614'. [ 139.757077][ T6372] netlink: 888 bytes leftover after parsing attributes in process `syz.1.614'. [ 139.831913][ T4306] EXT4-fs (loop4): unmounting filesystem. [ 140.191400][ T6382] netlink: 8 bytes leftover after parsing attributes in process `syz.4.616'. [ 140.887416][ T6382] netlink: 8 bytes leftover after parsing attributes in process `syz.4.616'. [ 141.178537][ T6394] loop4: detected capacity change from 0 to 4096 [ 141.202266][ T6394] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 141.228141][ T6394] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 141.368688][ T4306] EXT4-fs (loop4): unmounting filesystem. [ 141.376521][ T6400] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 141.393567][ T6400] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 142.042789][ T6423] netlink: 8 bytes leftover after parsing attributes in process `syz.4.631'. [ 142.045399][ T6423] netlink: 8 bytes leftover after parsing attributes in process `syz.4.631'. [ 143.034248][ T6431] loop4: detected capacity change from 0 to 8192 [ 143.883336][ T6464] netlink: 8 bytes leftover after parsing attributes in process `syz.1.646'. [ 143.886550][ T6464] netlink: 8 bytes leftover after parsing attributes in process `syz.1.646'. [ 144.979956][ T6468] loop1: detected capacity change from 0 to 128 [ 145.016235][ T6468] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 145.180440][ T4305] EXT4-fs (loop1): unmounting filesystem. [ 145.613883][ T6490] loop1: detected capacity change from 0 to 512 [ 145.623896][ T6490] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 145.670960][ T6490] EXT4-fs error (device loop1): ext4_orphan_get:1426: comm syz.1.655: bad orphan inode 16 [ 145.695241][ T6490] ext4_test_bit(bit=15, block=4) = 0 [ 145.696654][ T6490] EXT4-fs (loop1): 1 orphan inode deleted [ 145.698089][ T6490] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 145.895920][ T4305] EXT4-fs (loop1): unmounting filesystem. [ 146.649068][ T6503] netlink: 8 bytes leftover after parsing attributes in process `syz.4.659'. [ 146.651329][ T6503] netlink: 8 bytes leftover after parsing attributes in process `syz.4.659'. [ 147.395544][ T6505] loop1: detected capacity change from 0 to 256 [ 147.398598][ T6505] FAT-fs (loop1): Unrecognized mount option "ÿÿÿÿÿp AM-áÿ´&.xŸ¸ÌJŽh¤µF áZÖ18*a±Qžiñ+†Éƒs›Ksº!Ó9!KfÆ2FæʃµÁoKœ.U" or missing value [ 147.444089][ T6507] loop1: detected capacity change from 0 to 256 [ 147.560692][ T6507] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe3f33698, utbl_chksum : 0xe619d30d) [ 147.721800][ T6518] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 147.724019][ T6518] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 147.941749][ T6515] loop4: detected capacity change from 0 to 8192 [ 148.726273][ T6539] netlink: 8 bytes leftover after parsing attributes in process `syz.1.676'. [ 148.728829][ T6539] netlink: 8 bytes leftover after parsing attributes in process `syz.1.676'. [ 149.440262][ T6541] loop4: detected capacity change from 0 to 512 [ 149.442404][ T6541] EXT4-fs: Ignoring removed bh option [ 149.444034][ T6541] EXT4-fs (loop4): unable to read superblock [ 149.646549][ T6547] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 149.648780][ T6547] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 149.925315][ T6564] netlink: 32 bytes leftover after parsing attributes in process `syz.4.686'. [ 149.930264][ T6564] netlink: 32 bytes leftover after parsing attributes in process `syz.4.686'. [ 150.248893][ T6574] loop5: detected capacity change from 0 to 256 [ 150.282130][ T6574] exFAT-fs (loop5): failed to load upcase table (idx : 0x00011a39, chksum : 0xd54015fb, utbl_chksum : 0xe619d30d) [ 150.560161][ T6584] netlink: 8 bytes leftover after parsing attributes in process `syz.0.690'. [ 150.562821][ T6584] netlink: 8 bytes leftover after parsing attributes in process `syz.0.690'. [ 151.371673][ T6588] loop5: detected capacity change from 0 to 2048 [ 151.412860][ T6588] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 151.716822][ T6603] mac80211_hwsim hwsim13 wlan1: refused to change device tx_queue_len [ 152.449026][ T6628] netlink: 8 bytes leftover after parsing attributes in process `syz.5.706'. [ 152.451595][ T6628] netlink: 8 bytes leftover after parsing attributes in process `syz.5.706'. [ 153.359496][ T27] audit: type=1326 audit(153.321:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6635 comm="syz.5.712" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffab95ad28 code=0x7ffc0000 [ 153.396640][ T27] audit: type=1326 audit(153.361:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6635 comm="syz.5.712" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=220 compat=0 ip=0xffffab95ad28 code=0x7ffc0000 [ 153.410770][ T27] audit: type=1326 audit(153.371:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6635 comm="syz.5.712" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffab95ad28 code=0x7ffc0000 [ 153.416092][ T27] audit: type=1326 audit(153.371:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6639 comm="syz.5.712" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=115 compat=0 ip=0xffffab985448 code=0x7ffc0000 [ 153.455582][ T27] audit: type=1326 audit(153.421:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6635 comm="syz.5.712" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=117 compat=0 ip=0xffffab95ad28 code=0x7ffc0000 [ 153.465259][ T27] audit: type=1326 audit(153.421:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6635 comm="syz.5.712" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffab95ad28 code=0x7ffc0000 [ 153.483946][ T27] audit: type=1326 audit(153.431:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6635 comm="syz.5.712" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffab95ad28 code=0x7ffc0000 [ 153.499495][ T27] audit: type=1326 audit(153.431:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6635 comm="syz.5.712" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffab95ad28 code=0x7ffc0000 [ 153.526340][ T27] audit: type=1326 audit(153.431:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6635 comm="syz.5.712" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffab95ad28 code=0x7ffc0000 [ 153.537408][ T27] audit: type=1326 audit(153.431:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6635 comm="syz.5.712" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffab95ad28 code=0x7ffc0000 [ 153.781082][ T6647] netlink: 'syz.1.718': attribute type 4 has an invalid length. [ 154.132121][ T6662] loop4: detected capacity change from 0 to 1024 [ 154.227202][ T6663] netlink: 8 bytes leftover after parsing attributes in process `syz.5.721'. [ 154.229625][ T6663] netlink: 8 bytes leftover after parsing attributes in process `syz.5.721'. [ 155.261044][ T6675] loop1: detected capacity change from 0 to 1024 [ 155.285652][ T6675] EXT4-fs: Ignoring removed orlov option [ 155.287082][ T6675] EXT4-fs: Ignoring removed nomblk_io_submit option [ 155.367374][ T6675] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 155.523995][ T4305] EXT4-fs (loop1): unmounting filesystem. [ 155.826817][ T6700] usb usb8: usbfs: process 6700 (syz.1.735) did not claim interface 0 before use [ 155.835935][ T6702] netlink: 8 bytes leftover after parsing attributes in process `syz.4.736'. [ 155.956048][ T6704] netlink: 8 bytes leftover after parsing attributes in process `syz.0.733'. [ 155.958683][ T6704] netlink: 8 bytes leftover after parsing attributes in process `syz.0.733'. [ 156.854176][ T6716] loop1: detected capacity change from 0 to 2048 [ 156.883634][ T6716] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 157.459115][ T6742] netlink: 8 bytes leftover after parsing attributes in process `syz.5.750'. [ 157.461659][ T6742] netlink: 8 bytes leftover after parsing attributes in process `syz.5.750'. [ 158.504491][ T6760] loop1: detected capacity change from 0 to 256 [ 158.534609][ T6760] exFAT-fs (loop1): failed to load upcase table (idx : 0x000104d0, chksum : 0xda218cab, utbl_chksum : 0xe619d30d) [ 158.622932][ T6760] binfmt_misc: register: failed to install interpreter file ./file0 [ 159.924318][ T6782] netlink: 8 bytes leftover after parsing attributes in process `syz.0.765'. [ 159.927055][ T6782] netlink: 8 bytes leftover after parsing attributes in process `syz.0.765'. [ 161.341967][ T6816] loop5: detected capacity change from 0 to 8 [ 161.367105][ T6816] SQUASHFS error: lzo decompression failed, data probably corrupt [ 161.369355][ T6816] SQUASHFS error: Failed to read block 0x91: -5 [ 161.385450][ T6816] SQUASHFS error: Unable to read metadata cache entry [8f] [ 161.388251][ T6816] SQUASHFS error: Unable to read inode 0x11f [ 161.484587][ T6819] netlink: 8 bytes leftover after parsing attributes in process `syz.2.782'. [ 162.201847][ T6819] netlink: 8 bytes leftover after parsing attributes in process `syz.2.782'. [ 162.501778][ T6833] netlink: 68 bytes leftover after parsing attributes in process `syz.2.788'. [ 162.503893][ T6833] netlink: 12 bytes leftover after parsing attributes in process `syz.2.788'. [ 162.674432][ T6838] loop5: detected capacity change from 0 to 1024 [ 162.679704][ T6838] EXT4-fs: Ignoring removed i_version option [ 162.681152][ T6838] EXT4-fs: inline encryption not supported [ 162.703906][ T6838] EXT4-fs (loop5): Test dummy encryption mode enabled [ 162.731235][ T6838] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 162.822456][ T4610] EXT4-fs (loop5): unmounting filesystem. [ 162.941163][ T6848] netlink: 40 bytes leftover after parsing attributes in process `syz.5.794'. [ 163.970873][ T6853] ipt_CLUSTERIP: Please specify destination IP [ 165.696250][ T6888] loop4: detected capacity change from 0 to 1024 [ 165.776973][ T6888] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 165.878331][ T4306] EXT4-fs (loop4): unmounting filesystem. [ 171.030582][ T6967] loop4: detected capacity change from 0 to 512 [ 171.044435][ T6967] EXT4-fs: inline encryption not supported [ 171.052654][ T6967] EXT4-fs: Ignoring removed nobh option [ 171.060565][ T6967] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 171.243828][ T6967] EXT4-fs (loop4): failed to open journal device unknown-block(0,0) -6 [ 172.724252][ T6997] loop4: detected capacity change from 0 to 512 [ 172.736068][ T6995] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 172.738265][ T6995] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 172.765874][ T6997] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 172.768398][ T6997] EXT4-fs (loop4): orphan cleanup on readonly fs [ 172.771402][ T6997] __quota_error: 7 callbacks suppressed [ 172.771413][ T6997] Quota error (device loop4): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 172.792319][ T6997] EXT4-fs warning (device loop4): ext4_enable_quotas:7030: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 172.796450][ T6997] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 172.803055][ T6997] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.850: bg 0: block 40: padding at end of block bitmap is not set [ 172.943491][ T6997] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6170: Corrupt filesystem [ 172.948289][ T6997] EXT4-fs (loop4): 1 truncate cleaned up [ 172.949795][ T6997] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 172.971681][ T6997] EXT4-fs: Ignoring removed nomblk_io_submit option [ 172.979324][ T6997] EXT4-fs (loop4): changing journal_checksum during remount not supported; ignoring [ 172.981838][ T6997] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 173.066372][ T4306] EXT4-fs error (device loop4): ext4_readdir:260: inode #2: block 3: comm syz-executor: path /167/file0: bad entry in directory: rec_len is too small for name_len - offset=0, inode=2, rec_len=12, size=4096 fake=0 [ 173.235392][ T6778] EXT4-fs (loop4): unmounting filesystem. [ 173.418849][ T7007] loop1: detected capacity change from 0 to 16 [ 173.434035][ T7007] erofs: Unknown parameter 'ÿÿÿÿ' [ 174.105233][ T4296] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 174.109858][ T4296] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 174.112280][ T4296] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 174.114870][ T4296] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 174.118819][ T4296] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 174.120845][ T4296] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 174.142764][ T47] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 174.144639][ T47] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 174.155246][ T47] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 174.158478][ T47] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 174.160649][ T47] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 174.162617][ T47] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 174.819312][ T4618] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.938265][ T4618] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.122469][ T4618] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.149396][ T7017] chnl_net:caif_netlink_parms(): no params data found [ 175.228128][ T4618] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.306843][ T7017] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.308591][ T7017] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.311038][ T7017] device bridge_slave_0 entered promiscuous mode [ 175.319533][ T7017] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.321331][ T7017] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.346000][ T7017] device bridge_slave_1 entered promiscuous mode [ 175.437300][ T7017] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 175.441830][ T7017] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 175.534593][ T7017] team0: Port device team_slave_0 added [ 175.557844][ T7017] team0: Port device team_slave_1 added [ 175.613341][ T7017] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 175.615030][ T7017] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 175.635241][ T7017] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 175.639454][ T7017] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 175.640992][ T7017] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 175.665572][ T7017] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 175.787005][ T7017] device hsr_slave_0 entered promiscuous mode [ 175.805490][ T7017] device hsr_slave_1 entered promiscuous mode [ 175.965431][ T7017] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 175.967339][ T7017] Cannot create hsr debugfs directory [ 176.186086][ T47] Bluetooth: hci4: command 0x0409 tx timeout [ 176.997324][ T7055] loop1: detected capacity change from 0 to 1024 [ 177.585881][ T7017] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 177.630287][ T7017] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 177.681095][ T7017] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 177.800981][ T7017] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 177.824567][ T7089] netlink: 'syz.2.880': attribute type 1 has an invalid length. [ 178.129610][ T7017] 8021q: adding VLAN 0 to HW filter on device bond0 [ 178.246313][ T7095] device sit0 entered promiscuous mode [ 178.266613][ T47] Bluetooth: hci4: command 0x041b tx timeout [ 178.268716][ T4616] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 178.271970][ T4616] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 178.294473][ T7017] 8021q: adding VLAN 0 to HW filter on device team0 [ 178.336300][ T4616] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 178.339176][ T4616] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 178.341802][ T4616] bridge0: port 1(bridge_slave_0) entered blocking state [ 178.343671][ T4616] bridge0: port 1(bridge_slave_0) entered forwarding state [ 178.380814][ T4616] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 178.387916][ T4616] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 178.404758][ T4616] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 178.424665][ T4616] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.426511][ T4616] bridge0: port 2(bridge_slave_1) entered forwarding state [ 178.465658][ T4616] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 178.814066][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 178.827430][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 178.830473][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 178.845821][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 178.864581][ T7017] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 178.896311][ T7017] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 178.947882][ T1707] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 178.951714][ T1707] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 178.954208][ T1707] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 178.973932][ T1707] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 178.986552][ T1707] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 178.991449][ T1707] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 179.109820][ T7119] kernel profiling enabled (shift: 17) [ 179.232603][ T1707] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 179.273934][ T7127] netlink: 220 bytes leftover after parsing attributes in process `syz.0.888'. [ 179.353964][ T4618] device hsr_slave_0 left promiscuous mode [ 179.441613][ T7134] netlink: 'syz.0.890': attribute type 2 has an invalid length. [ 179.463890][ T4618] device hsr_slave_1 left promiscuous mode [ 179.605214][ T4618] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 179.614787][ T4618] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 179.622674][ T4618] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 179.624618][ T4618] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 179.670233][ T4618] device bridge_slave_1 left promiscuous mode [ 179.671905][ T4618] bridge0: port 2(bridge_slave_1) entered disabled state [ 179.694716][ T7145] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 179.696518][ T7145] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 179.701224][ T7145] vhci_hcd vhci_hcd.0: Device attached [ 179.704469][ T7147] vhci_hcd: connection closed [ 179.880823][ T4616] vhci_hcd: stop threads [ 179.884937][ T4616] vhci_hcd: release socket [ 180.016006][ T4616] vhci_hcd: disconnect device [ 180.136293][ T4618] device bridge_slave_0 left promiscuous mode [ 180.148346][ T4618] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.390027][ T4296] Bluetooth: hci4: command 0x040f tx timeout [ 180.605898][ T4618] device veth1_macvtap left promiscuous mode [ 180.607624][ T4618] device veth0_macvtap left promiscuous mode [ 180.609195][ T4618] device veth1_vlan left promiscuous mode [ 180.610565][ T4618] device veth0_vlan left promiscuous mode [ 181.143876][ T7164] loop5: detected capacity change from 0 to 8192 [ 181.157078][ T7164] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 182.415199][ T47] Bluetooth: hci4: command 0x0419 tx timeout [ 183.298659][ T4618] team0 (unregistering): Port device team_slave_1 removed [ 183.539161][ T4618] team0 (unregistering): Port device team_slave_0 removed [ 183.736641][ T4618] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 183.971555][ T4618] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 186.300292][ T4618] bond0 (unregistering): Released all slaves [ 186.545677][ T4616] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 186.547621][ T4616] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 186.628274][ T7017] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 186.741876][ T7206] IPv6: NLM_F_CREATE should be specified when creating new route [ 186.743840][ T7206] IPv6: Can't replace route, no match found [ 187.062330][ T1707] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 187.064956][ T1707] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 187.164447][ T7231] loop5: detected capacity change from 0 to 2048 [ 187.172873][ T7231] UDF-fs: error (device loop5): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 187.191467][ T1707] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 187.194161][ T1707] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 187.207325][ T7017] device veth0_vlan entered promiscuous mode [ 187.207540][ T7231] UDF-fs: error (device loop5): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 187.211625][ T7231] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found [ 187.213010][ T7017] device veth1_vlan entered promiscuous mode [ 187.213617][ T7231] UDF-fs: Scanning with blocksize 512 failed [ 187.216813][ T1707] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 187.219828][ T1707] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 187.222214][ T1707] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 187.239674][ T1707] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 187.242367][ T1707] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 187.244922][ T1707] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 187.249589][ T7231] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 187.293669][ T7017] device veth0_macvtap entered promiscuous mode [ 187.300188][ T7017] device veth1_macvtap entered promiscuous mode [ 187.311438][ T7017] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 187.314088][ T7017] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.317251][ T7017] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 187.319822][ T7017] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.333236][ T7017] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 187.335813][ T7017] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.339530][ T7017] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 187.342533][ T7017] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.346972][ T7017] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 187.349081][ T4403] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 187.351658][ T4403] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 187.354322][ T4403] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 187.440422][ T2059] ieee802154 phy0 wpan0: encryption failed: -22 [ 187.442054][ T2059] ieee802154 phy1 wpan1: encryption failed: -22 [ 187.487604][ T4403] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 187.503051][ T7017] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 187.506744][ T7017] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.526610][ T7017] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 187.529107][ T7017] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.531538][ T7017] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 187.534141][ T7017] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.555898][ T7017] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 187.567540][ T7017] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.583687][ T7017] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 187.598338][ T4403] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 187.604411][ T4403] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 187.619853][ T7017] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.622559][ T7240] loop5: detected capacity change from 0 to 256 [ 187.639163][ T7017] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.651095][ T7240] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 187.652623][ T7017] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.672323][ T7017] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.876117][ T4582] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 187.878409][ T4582] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 187.882934][ T4403] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 187.944038][ T4616] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 187.946532][ T4616] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 187.957830][ T4582] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 188.100496][ T7248] loop5: detected capacity change from 0 to 128 [ 188.102564][ T7248] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 188.297343][ T7256] loop1: detected capacity change from 0 to 128 [ 188.312545][ T7256] FAT-fs (loop1): bogus number of reserved sectors [ 188.314256][ T7256] FAT-fs (loop1): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 188.316698][ T7256] FAT-fs (loop1): Can't find a valid FAT filesystem [ 190.354499][ T7287] usb usb8: usbfs: process 7287 (syz.1.928) did not claim interface 0 before use [ 190.706715][ T7304] loop5: detected capacity change from 0 to 128 [ 190.853086][ T7304] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 190.877488][ T7306] netlink: 8 bytes leftover after parsing attributes in process `syz.1.934'. [ 190.879849][ T7306] netlink: 8 bytes leftover after parsing attributes in process `syz.1.934'. [ 190.987152][ T4610] EXT4-fs (loop5): unmounting filesystem. [ 191.075397][ T7322] fuse: blksize only supported for fuseblk [ 192.207319][ T7368] loop6: detected capacity change from 0 to 512 [ 192.392325][ T7368] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 192.432468][ T7377] netlink: 8 bytes leftover after parsing attributes in process `syz.0.951'. [ 192.434838][ T7377] netlink: 8 bytes leftover after parsing attributes in process `syz.0.951'. [ 192.516378][ T7017] EXT4-fs (loop6): unmounting filesystem. [ 193.205831][ T7405] input: syz1 as /devices/virtual/input/input12 [ 193.258389][ T7410] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 193.281273][ T7410] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 194.377024][ T7449] netlink: 8 bytes leftover after parsing attributes in process `syz.0.968'. [ 194.379228][ T7449] netlink: 8 bytes leftover after parsing attributes in process `syz.0.968'. [ 194.455313][ T7452] loop5: detected capacity change from 0 to 128 [ 194.479297][ T7452] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 194.483670][ T7452] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 194.956759][ T7467] loop1: detected capacity change from 0 to 512 [ 194.958921][ T7467] EXT4-fs: Ignoring removed nobh option [ 194.960412][ T7467] EXT4-fs: Ignoring removed nobh option [ 195.002638][ T7467] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 195.011439][ T7467] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.979: invalid indirect mapped block 4294967295 (level 2) [ 195.040862][ T7467] EXT4-fs (loop1): 1 truncate cleaned up [ 195.042375][ T7467] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 195.152691][ T7476] Bluetooth: MGMT ver 1.22 [ 195.169022][ T7479] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 195.170905][ T7479] IPv6: NLM_F_CREATE should be set when creating new route [ 195.227035][ T4305] EXT4-fs (loop1): unmounting filesystem. [ 195.358053][ T7492] netlink: 24 bytes leftover after parsing attributes in process `syz.0.990'. [ 195.710270][ T7502] netlink: 4 bytes leftover after parsing attributes in process `syz.0.995'. [ 195.752537][ T7507] netlink: 8 bytes leftover after parsing attributes in process `syz.1.994'. [ 195.796408][ T7507] netlink: 8 bytes leftover after parsing attributes in process `syz.1.994'. [ 196.518965][ T7521] af_packet: tpacket_rcv: packet too big, clamped from 78 to 4294967286. macoff=82 [ 196.710860][ T7527] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1003'. [ 196.743124][ T7529] loop1: detected capacity change from 0 to 1024 [ 196.858639][ T7529] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 197.820792][ T4305] EXT4-fs (loop1): unmounting filesystem. [ 198.086486][ T7553] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1011'. [ 198.088664][ T7553] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1011'. [ 198.185823][ T7560] cgroup: No subsys list or none specified [ 198.301622][ T7566] input: syz0 as /devices/virtual/input/input13 [ 198.624121][ T7580] loop5: detected capacity change from 0 to 16 [ 198.644234][ T7580] erofs: (device loop5): mounted with root inode @ nid 36. [ 200.614685][ T7606] loop5: detected capacity change from 0 to 512 [ 200.667890][ T7613] loop6: detected capacity change from 0 to 256 [ 200.674714][ T7606] EXT4-fs error (device loop5): ext4_do_update_inode:5224: inode #3: comm syz.5.1034: corrupted inode contents [ 200.708792][ T7606] EXT4-fs error (device loop5): ext4_dirty_inode:6089: inode #3: comm syz.5.1034: mark_inode_dirty error [ 200.726771][ T7606] EXT4-fs error (device loop5): ext4_do_update_inode:5224: inode #3: comm syz.5.1034: corrupted inode contents [ 200.757185][ T7606] EXT4-fs error (device loop5): __ext4_ext_dirty:202: inode #3: comm syz.5.1034: mark_inode_dirty error [ 200.764485][ T7613] exFAT-fs (loop6): failed to load upcase table (idx : 0x00011a39, chksum : 0xd54015fb, utbl_chksum : 0xe619d30d) [ 200.772904][ T7618] 9pnet: p9_errstr2errno: server reported unknown error ÿÿÿÿ [ 200.785224][ T7606] Quota error (device loop5): write_blk: dquota write failed [ 200.787410][ T7606] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 200.789759][ T7606] EXT4-fs error (device loop5): ext4_acquire_dquot:6795: comm syz.5.1034: Failed to acquire dquot type 0 [ 200.839880][ T7606] EXT4-fs (loop5): 1 orphan inode deleted [ 200.841204][ T7606] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 200.852579][ T4662] Quota error (device loop5): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 200.854966][ T4662] EXT4-fs error (device loop5): ext4_release_dquot:6818: comm kworker/u4:15: Failed to release dquot type 1 [ 200.937486][ T4610] EXT4-fs (loop5): unmounting filesystem. [ 201.153533][ T7635] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1038'. [ 201.156232][ T7635] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1038'. [ 201.162172][ T7638] loop6: detected capacity change from 0 to 128 [ 201.298752][ T7643] netlink: 104 bytes leftover after parsing attributes in process `syz.5.1042'. [ 201.441175][ T7650] loop5: detected capacity change from 0 to 256 [ 201.451569][ T7650] exfat: Unknown parameter 'þÿÿÿ' [ 201.620883][ T7654] loop6: detected capacity change from 0 to 512 [ 201.634125][ T7654] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 202.393547][ T7654] EXT4-fs (loop6): 1 truncate cleaned up [ 202.395180][ T7654] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 202.532821][ T7017] EXT4-fs (loop6): unmounting filesystem. [ 202.624136][ T7666] loop5: detected capacity change from 0 to 2048 [ 202.653247][ T7666] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found [ 202.654512][ T7668] usb usb8: usbfs: process 7668 (syz.6.1052) did not claim interface 0 before use [ 202.656011][ T7666] UDF-fs: Scanning with blocksize 512 failed [ 202.692012][ T7666] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 203.082651][ T7682] loop6: detected capacity change from 0 to 256 [ 203.095455][ T7682] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x36e06c6e, utbl_chksum : 0xe619d30d) [ 203.462754][ T7692] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1059'. [ 203.464989][ T7692] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1059'. [ 203.991629][ T7707] binder: 7705:7707 ioctl c018620c 400000000080 returned -1 [ 204.218005][ T4296] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 204.222989][ T4296] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 204.226187][ T4296] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 204.229317][ T4296] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 204.231685][ T4296] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 204.235789][ T4296] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 204.246116][ T9] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.309773][ T7716] loop5: detected capacity change from 0 to 256 [ 204.410752][ T9] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.932779][ T9] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.421611][ T7739] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 205.434679][ T7739] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 205.633544][ T9] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.764572][ T7755] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1083'. [ 205.775791][ T27] audit: type=1326 audit(205.691:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7744 comm="syz.0.1082" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff8195ad28 code=0x0 [ 205.859959][ T7755] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1083'. [ 206.150684][ T7712] chnl_net:caif_netlink_parms(): no params data found [ 206.335256][ T47] Bluetooth: hci4: command 0x0409 tx timeout [ 206.640485][ T7712] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.642430][ T7712] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.645330][ T7712] device bridge_slave_0 entered promiscuous mode [ 206.654337][ T7712] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.656933][ T7712] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.659382][ T7712] device bridge_slave_1 entered promiscuous mode [ 206.776941][ T7712] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 206.781116][ T7712] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 207.629544][ T7712] team0: Port device team_slave_0 added [ 207.643929][ T7712] team0: Port device team_slave_1 added [ 207.825214][ T7712] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 207.827058][ T7712] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 207.842586][ T7712] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 207.847441][ T7712] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 207.849205][ T7712] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 207.864643][ T7712] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 207.958405][ T7813] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1096'. [ 208.046691][ T7817] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1095'. [ 208.127561][ T7712] device hsr_slave_0 entered promiscuous mode [ 208.415132][ T4296] Bluetooth: hci4: command 0x041b tx timeout [ 208.425827][ T7712] device hsr_slave_1 entered promiscuous mode [ 208.475538][ T7712] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 208.481752][ T7712] Cannot create hsr debugfs directory [ 208.545434][ T7817] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1095'. [ 208.933132][ T7712] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 209.897470][ T7712] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 209.939459][ T7712] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 209.955475][ T7852] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 209.980184][ T7852] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 210.088798][ T7712] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 210.209907][ T7861] loop5: detected capacity change from 0 to 512 [ 210.292851][ T7861] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 210.378379][ T4610] EXT4-fs (loop5): unmounting filesystem. [ 210.511263][ T47] Bluetooth: hci4: command 0x040f tx timeout [ 210.673966][ T7712] 8021q: adding VLAN 0 to HW filter on device bond0 [ 210.712128][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 210.714450][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 210.720463][ T7712] 8021q: adding VLAN 0 to HW filter on device team0 [ 211.055564][ T7886] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1111'. [ 211.222676][ T7886] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1111'. [ 211.288784][ T7712] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 211.351681][ T7712] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 211.391236][ T1614] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 211.394220][ T1614] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 211.399320][ T1614] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.400975][ T1614] bridge0: port 1(bridge_slave_0) entered forwarding state [ 211.408768][ T1614] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 211.852263][ T1614] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 211.935214][ T1614] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.937142][ T1614] bridge0: port 2(bridge_slave_1) entered forwarding state [ 212.144271][ T1614] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 212.156424][ T1614] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 212.194080][ T1614] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 212.207839][ T1614] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 212.210266][ T1614] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 212.213886][ T1614] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 212.217048][ T1614] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 212.219350][ T1614] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 212.221854][ T1614] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 212.224266][ T1614] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 212.299666][ T9] device hsr_slave_0 left promiscuous mode [ 212.354022][ T9] device hsr_slave_1 left promiscuous mode [ 212.425301][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 212.427286][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 212.429657][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 212.431551][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 212.433723][ T9] device bridge_slave_1 left promiscuous mode [ 212.435439][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 212.477797][ T9] device bridge_slave_0 left promiscuous mode [ 212.479570][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 212.575158][ T4296] Bluetooth: hci4: command 0x0419 tx timeout [ 212.615378][ T9] device veth1_macvtap left promiscuous mode [ 212.616957][ T9] device veth0_macvtap left promiscuous mode [ 212.618325][ T9] device veth1_vlan left promiscuous mode [ 212.619916][ T9] device veth0_vlan left promiscuous mode [ 214.368258][ T9] team0 (unregistering): Port device team_slave_1 removed [ 214.538170][ T9] team0 (unregistering): Port device team_slave_0 removed [ 214.716541][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 214.915934][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 217.292392][ T9] bond0 (unregistering): Released all slaves [ 217.528216][ T7904] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1114'. [ 217.534891][ T7906] device sit0 left promiscuous mode [ 217.571736][ T7906] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 217.615746][ T7906] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 217.619757][ T1614] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 217.623481][ T1614] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 217.640241][ T1614] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 217.804670][ T7925] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1123'. [ 217.807214][ T7925] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1123'. [ 217.952909][ T7712] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 217.976076][ T1614] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 217.977815][ T1614] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 218.002469][ T7943] loop5: detected capacity change from 0 to 128 [ 219.371936][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 219.388041][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 219.645129][ T7980] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1137'. [ 219.719874][ T7980] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1137'. [ 219.722260][ T1614] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 219.777084][ T1614] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 219.784288][ T47] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 219.797594][ T47] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 219.810342][ T47] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 219.821567][ T1614] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 219.830058][ T47] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 219.832490][ T47] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 219.832793][ T1614] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 219.839112][ T47] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 219.873406][ T7712] device veth0_vlan entered promiscuous mode [ 219.914122][ T7712] device veth1_vlan entered promiscuous mode [ 220.033275][ T7992] loop1: detected capacity change from 0 to 1024 [ 220.063749][ T4662] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 220.066829][ T4662] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 220.068941][ T4662] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 220.071339][ T4662] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 220.109391][ T7992] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 220.484991][ T7992] hfsplus: failed to load extents file [ 220.897107][ T7712] device veth0_macvtap entered promiscuous mode [ 220.902047][ T7712] device veth1_macvtap entered promiscuous mode [ 220.979580][ T7712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 220.982211][ T7712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.984867][ T7712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 221.005306][ T7712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.007810][ T7712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 221.010253][ T7712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.012608][ T7712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 221.035167][ T7712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.038980][ T7712] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 221.136219][ T8017] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 221.138516][ T8017] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 221.368972][ T9] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.374455][ T1614] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 221.380632][ T1614] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 221.383797][ T1614] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 221.390967][ T7712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 221.393751][ T7712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.398622][ T7712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 221.401829][ T7712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.404429][ T7712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 221.410143][ T7712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.412814][ T7712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 221.418959][ T7712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.423768][ T7712] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 221.433237][ T7712] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.439406][ T7712] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.441716][ T7712] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.444004][ T7712] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.456639][ T8032] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1147'. [ 221.617581][ T9] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.857472][ T47] Bluetooth: hci1: command 0x0409 tx timeout [ 221.955626][ T1614] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 221.961977][ T1614] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 221.964805][ T8032] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1147'. [ 222.433936][ T9] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.828267][ T4401] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 222.830443][ T4401] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 222.876221][ T9] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.882383][ T4685] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 222.887530][ T7984] chnl_net:caif_netlink_parms(): no params data found [ 222.933033][ T4582] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 222.935473][ T4582] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 222.940553][ T1614] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 223.037592][ T7984] bridge0: port 1(bridge_slave_0) entered blocking state [ 223.039404][ T7984] bridge0: port 1(bridge_slave_0) entered disabled state [ 223.041797][ T7984] device bridge_slave_0 entered promiscuous mode [ 223.045489][ T7984] bridge0: port 2(bridge_slave_1) entered blocking state [ 223.047367][ T7984] bridge0: port 2(bridge_slave_1) entered disabled state [ 223.049680][ T7984] device bridge_slave_1 entered promiscuous mode [ 223.063885][ T7984] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 223.068131][ T7984] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 223.083213][ T7984] team0: Port device team_slave_0 added [ 223.086389][ T7984] team0: Port device team_slave_1 added [ 223.098597][ T7984] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 223.100279][ T7984] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 223.106543][ T7984] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 223.110442][ T7984] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 223.112094][ T7984] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 223.118495][ T7984] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 223.202904][ T7984] device hsr_slave_0 entered promiscuous mode [ 223.943823][ T4296] Bluetooth: hci1: command 0x041b tx timeout [ 224.567817][ T8070] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1157'. [ 224.643564][ T7984] device hsr_slave_1 entered promiscuous mode [ 224.748248][ T7984] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 224.750247][ T7984] Cannot create hsr debugfs directory [ 225.018736][ T8070] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1157'. [ 225.227723][ T7984] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 225.247235][ T8089] loop7: detected capacity change from 0 to 1024 [ 225.282212][ T8089] EXT4-fs (loop7): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 225.284981][ T8089] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (53380!=20869) [ 225.289547][ T7984] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 225.305407][ T8089] EXT4-fs (loop7): external journal device major/minor numbers have changed [ 225.796012][ T8089] EXT4-fs (loop7): filesystem has both journal inode and journal device! [ 226.045292][ T47] Bluetooth: hci1: command 0x040f tx timeout [ 226.082060][ T7945] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 226.197151][ T8097] netlink: 'syz.0.1163': attribute type 29 has an invalid length. [ 226.199000][ T8097] netlink: 'syz.0.1163': attribute type 3 has an invalid length. [ 226.200919][ T8097] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1163'. [ 226.216633][ T7984] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 226.230786][ T8101] netlink: 'syz.1.1165': attribute type 29 has an invalid length. [ 226.338259][ T8100] netlink: 6 bytes leftover after parsing attributes in process `syz.2.1164'. [ 226.340601][ T8101] netlink: 'syz.1.1165': attribute type 29 has an invalid length. [ 226.347483][ T8104] netlink: 'syz.1.1165': attribute type 29 has an invalid length. [ 226.349944][ T7984] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 226.382733][ T8107] netlink: 'syz.0.1167': attribute type 10 has an invalid length. [ 226.385368][ T8107] bridge0: port 3(team0) entered blocking state [ 226.387139][ T8107] bridge0: port 3(team0) entered disabled state [ 226.389811][ T8107] device team0 entered promiscuous mode [ 226.391421][ T8107] device team_slave_0 entered promiscuous mode [ 226.393584][ T8107] device team_slave_1 entered promiscuous mode [ 226.425299][ T8109] netlink: 'syz.1.1165': attribute type 29 has an invalid length. [ 226.447749][ T8114] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1168'. [ 226.613002][ T8101] netlink: 'syz.1.1165': attribute type 29 has an invalid length. [ 226.934976][ T8126] netlink: 'syz.1.1173': attribute type 29 has an invalid length. [ 227.115407][ T8114] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1168'. [ 227.117989][ T8126] netlink: 'syz.1.1173': attribute type 29 has an invalid length. [ 227.209136][ T7984] 8021q: adding VLAN 0 to HW filter on device bond0 [ 227.217116][ T4662] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 227.219459][ T4662] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 227.227719][ T7984] 8021q: adding VLAN 0 to HW filter on device team0 [ 227.415337][ T8138] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 227.433353][ T8138] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 227.435797][ T8138] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 227.438070][ T8138] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 227.440190][ T8138] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 227.442697][ T8138] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 227.444754][ T8138] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 227.447090][ T8138] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 227.449222][ T8138] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 227.451373][ T8138] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 227.994696][ T4912] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 228.001401][ T4912] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 228.004048][ T4912] bridge0: port 1(bridge_slave_0) entered blocking state [ 228.005767][ T4912] bridge0: port 1(bridge_slave_0) entered forwarding state [ 228.019001][ T4912] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 228.050008][ T4912] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 228.053151][ T4912] bridge0: port 2(bridge_slave_1) entered blocking state [ 228.055017][ T4912] bridge0: port 2(bridge_slave_1) entered forwarding state [ 228.068651][ T8169] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1184'. [ 228.086644][ T4912] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 228.095346][ T4296] Bluetooth: hci1: command 0x0419 tx timeout [ 228.216539][ T8169] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1184'. [ 228.226937][ T1707] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 228.232406][ T1707] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 228.368341][ T1707] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 228.371816][ T1707] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 228.374259][ T1707] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 228.387851][ T1707] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 228.402622][ T8185] netlink: 60 bytes leftover after parsing attributes in process `syz.7.1190'. [ 228.415464][ T1707] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 228.417837][ T1707] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 228.423499][ T1707] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 228.429747][ T8185] netlink: 60 bytes leftover after parsing attributes in process `syz.7.1190'. [ 228.532609][ T7984] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 228.537813][ T7984] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 228.542607][ T4662] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 228.545509][ T4662] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 228.892907][ T8210] 8021q: adding VLAN 0 to HW filter on device team0 [ 229.360138][ T4685] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 229.362309][ T4685] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 229.395364][ T8229] tun0: tun_chr_ioctl cmd 1074025675 [ 229.396732][ T8229] tun0: persist enabled [ 229.407120][ T8229] tun0: tun_chr_ioctl cmd 1074025675 [ 229.408429][ T8229] tun0: persist disabled [ 229.430418][ T7984] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 229.838320][ T9] device hsr_slave_0 left promiscuous mode [ 229.888287][ T9] device hsr_slave_1 left promiscuous mode [ 229.955939][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 229.957820][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 229.960628][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 229.963860][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 229.973927][ T9] device bridge_slave_1 left promiscuous mode [ 229.979909][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.038558][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.225966][ T9] device veth1_macvtap left promiscuous mode [ 230.227533][ T9] device veth0_macvtap left promiscuous mode [ 230.230189][ T9] device veth1_vlan left promiscuous mode [ 230.231702][ T9] device veth0_vlan left promiscuous mode [ 230.567914][ T8298] __nla_validate_parse: 2 callbacks suppressed [ 230.567929][ T8298] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1223'. [ 232.278967][ T9] team0 (unregistering): Port device team_slave_1 removed [ 232.456671][ T9] team0 (unregistering): Port device team_slave_0 removed [ 232.645978][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 232.856128][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 235.314484][ T9] bond0 (unregistering): Released all slaves [ 235.572749][ T8256] validate_nla: 6 callbacks suppressed [ 235.572768][ T8256] netlink: 'syz.2.1212': attribute type 16 has an invalid length. [ 235.576680][ T8256] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1212'. [ 235.591969][ T8298] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1223'. [ 235.816356][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 235.819103][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 235.823839][ T8313] netlink: 'syz.2.1226': attribute type 29 has an invalid length. [ 235.859332][ T8313] netlink: 'syz.2.1226': attribute type 29 has an invalid length. [ 235.864584][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 235.870168][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 235.876732][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 235.880062][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 235.882508][ T8313] netlink: 'syz.2.1226': attribute type 29 has an invalid length. [ 235.885569][ T8313] netlink: 'syz.2.1226': attribute type 29 has an invalid length. [ 235.893038][ T8313] netlink: 'syz.2.1226': attribute type 29 has an invalid length. [ 235.897248][ T8317] netlink: 'syz.7.1227': attribute type 29 has an invalid length. [ 235.899070][ T8317] netlink: 'syz.7.1227': attribute type 29 has an invalid length. [ 235.917783][ T7984] device veth0_vlan entered promiscuous mode [ 235.963379][ T7984] device veth1_vlan entered promiscuous mode [ 236.024484][ T7984] device veth0_macvtap entered promiscuous mode [ 236.026899][ T4685] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 236.030676][ T4685] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 236.033121][ T4685] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 236.060481][ T4685] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 236.065453][ T4685] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 236.075733][ T7984] device veth1_macvtap entered promiscuous mode [ 236.114214][ T7984] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 236.119608][ T7984] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.122003][ T7984] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 236.124503][ T7984] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.134018][ T7984] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 236.150286][ T7984] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.152774][ T7984] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 236.156056][ T7984] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.196599][ T7984] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 236.256284][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 236.258871][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 236.261350][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 236.266593][ T7984] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 236.269215][ T7984] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.272748][ T7984] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 236.284694][ T7984] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.305110][ T7984] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 236.307920][ T7984] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.310239][ T7984] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 236.312798][ T7984] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.333693][ T7984] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 236.357546][ T7984] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.359779][ T7984] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.361852][ T7984] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.363727][ T7984] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.459689][ T1707] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 236.462240][ T1707] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 236.595660][ T8356] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1237'. [ 236.646717][ T8356] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1237'. [ 236.662210][ T4685] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 236.664342][ T4685] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 236.683706][ T1707] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 236.779479][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 236.781597][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 236.790435][ T4581] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 236.951035][ T8368] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1243'. [ 236.980582][ T8370] loop8: detected capacity change from 0 to 512 [ 236.982519][ T8370] EXT4-fs: Ignoring removed mblk_io_submit option [ 237.033893][ T8370] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 237.118868][ T7984] EXT4-fs (loop8): unmounting filesystem. [ 237.167822][ T8381] bridge0: port 1(bridge_slave_0) entered disabled state [ 238.766991][ T8416] net_ratelimit: 3256 callbacks suppressed [ 238.767008][ T8416] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 238.774508][ T8416] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 238.776940][ T8416] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 238.779091][ T8416] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 238.781386][ T8416] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 238.783639][ T8416] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 238.785865][ T8416] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 238.787972][ T8416] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 238.790185][ T8416] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 238.792367][ T8416] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 239.173485][ T8424] Illegal XDP return value 4294967294 on prog (id 42) dev N/A, expect packet loss! [ 248.832400][ T2059] ieee802154 phy0 wpan0: encryption failed: -22 [ 248.834076][ T2059] ieee802154 phy1 wpan1: encryption failed: -22 [ 250.381447][ T8446] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1267'. [ 250.383593][ T8446] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1267'. [ 251.173922][ T8455] netlink: 'syz.8.1271': attribute type 29 has an invalid length. [ 251.177675][ T8455] netlink: 'syz.8.1271': attribute type 29 has an invalid length. [ 251.181276][ T8455] netlink: 'syz.8.1271': attribute type 29 has an invalid length. [ 251.191672][ T8455] netlink: 'syz.8.1271': attribute type 29 has an invalid length. [ 251.193943][ T8455] netlink: 'syz.8.1271': attribute type 29 has an invalid length. [ 251.283356][ T8463] loop1: detected capacity change from 0 to 64 [ 251.329271][ T8464] loop8: detected capacity change from 0 to 2048 [ 251.346521][ T8464] UDF-fs: warning (device loop8): udf_load_vrs: No anchor found [ 251.352594][ T8464] UDF-fs: Scanning with blocksize 512 failed [ 251.366861][ T8463] hfs: inconsistency in B*Tree (1,0,2,2,3) [ 251.373866][ T8464] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 251.394411][ T8464] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 251.405374][ T8464] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 252.650709][ T8498] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 252.653070][ T8498] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 252.701764][ T8471] loop7: detected capacity change from 0 to 32768 [ 252.704570][ T8471] (syz.7.1277,8471,0):ocfs2_parse_options:1458 ERROR: Invalid heartbeat mount options [ 252.724557][ T8471] (syz.7.1277,8471,0):ocfs2_fill_super:1176 ERROR: status = -22 [ 253.020990][ T8429] I/O error, dev loop7, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 254.339406][ T8544] loop1: detected capacity change from 0 to 2048 [ 254.464736][ T8544] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 254.561270][ T4305] EXT4-fs (loop1): unmounting filesystem. [ 254.623254][ T8559] Bluetooth: MGMT ver 1.22 [ 256.711656][ T8581] loop8: detected capacity change from 0 to 32768 [ 256.818356][ T8637] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 256.820800][ T8637] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 256.961654][ T8581] XFS (loop8): Mounting V5 Filesystem [ 257.597585][ C0] vxcan0: j1939_tp_rxtimer: 0x0000000065272411: rx timeout, send abort [ 257.601811][ C0] vxcan0: j1939_xtp_rx_abort_one: 0x0000000065272411: 0x3ff01: (3) A timeout occurred and this is the connection abort to close the session. [ 257.752263][ T8581] XFS (loop8): Ending clean mount [ 257.815253][ T8581] XFS (loop8): Quotacheck needed: Please wait. [ 257.899430][ T8581] XFS (loop8): Quotacheck: Done. [ 257.983482][ T7984] XFS (loop8): Unmounting Filesystem [ 258.035682][ T8665] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1332'. [ 258.871208][ C0] vxcan0: j1939_tp_rxtimer: 0x00000000b1e27394: rx timeout, send abort [ 258.873392][ C0] vxcan0: j1939_xtp_rx_abort_one: 0x00000000b1e27394: 0x3ff01: (3) A timeout occurred and this is the connection abort to close the session. [ 259.511467][ T8691] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 259.513870][ T8691] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 259.631927][ T8698] netlink: 'syz.0.1341': attribute type 4 has an invalid length. [ 259.633964][ T8698] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1341'. [ 259.913023][ T8713] loop1: detected capacity change from 0 to 8 [ 260.376948][ T8729] loop1: detected capacity change from 0 to 4096 [ 261.651904][ T8729] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 261.706573][ T8729] EXT4-fs (loop1): shut down requested (1) [ 261.708935][ T8729] fs-verity: sha256 using implementation "sha256-ce" [ 261.793980][ T8737] loop8: detected capacity change from 0 to 32768 [ 261.881814][ T8737] ocfs2: Slot 0 on device (7,8) was already allocated to this node! [ 261.883056][ T4305] EXT4-fs (loop1): unmounting filesystem. [ 261.892644][ T8737] ocfs2: Mounting device (7,8) on (node local, slot 0) with ordered data mode. [ 262.005711][ T8756] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1356'. [ 262.116025][ T7984] ocfs2: Unmounting device (7,8) on (node local) [ 262.359401][ T8767] loop1: detected capacity change from 0 to 32768 [ 262.370091][ T8771] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 262.372558][ T8771] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 262.385772][ T8767] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop1 scanned by syz.1.1364 (8767) [ 263.211845][ T8767] BTRFS info (device loop1): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 263.214535][ T8767] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm [ 263.218078][ T8767] BTRFS info (device loop1): force clearing of disk cache [ 263.219864][ T8767] BTRFS info (device loop1): enabling ssd optimizations [ 263.221648][ T8767] BTRFS info (device loop1): using spread ssd allocation scheme [ 263.223473][ T8767] BTRFS info (device loop1): using free space tree [ 263.333354][ T8788] loop8: detected capacity change from 0 to 4096 [ 263.354676][ T8795] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 263.364349][ T8788] ntfs3: loop8: Different NTFS' sector size (4096) and media sector size (512) [ 263.370990][ T8795] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 263.395249][ T8788] ntfs3: loop8: Failed to load $MFTMirr. [ 263.438108][ T8767] BTRFS info (device loop1): rebuilding free space tree [ 263.543027][ T4305] BTRFS info (device loop1): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 263.760896][ T8819] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 263.764700][ T8819] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 265.028841][ T8846] loop8: detected capacity change from 0 to 16 [ 265.042689][ T8846] erofs: (device loop8): mounted with root inode @ nid 36. [ 265.213731][ T4296] Bluetooth: hci1: link tx timeout [ 265.215811][ T4296] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 265.891757][ T8857] loop8: detected capacity change from 0 to 256 [ 265.898570][ T8854] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 265.901111][ T8854] overlayfs: missing 'lowerdir' [ 267.277388][ T47] Bluetooth: hci1: link tx timeout [ 267.279409][ T47] Bluetooth: hci1: killing stalled connection 10:aa:aa:aa:aa:aa [ 267.518784][ T47] Bluetooth: hci1: link tx timeout [ 267.520003][ T47] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 267.525533][ T47] Bluetooth: hci1: command 0x0406 tx timeout [ 267.633554][ T8893] loop8: detected capacity change from 0 to 512 [ 267.700878][ T8893] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 267.739498][ T8893] EXT4-fs error (device loop8): ext4_do_update_inode:5224: inode #2: comm syz.8.1392: corrupted inode contents [ 267.745630][ T8893] EXT4-fs error (device loop8): ext4_dirty_inode:6089: inode #2: comm syz.8.1392: mark_inode_dirty error [ 267.749076][ T8893] EXT4-fs error (device loop8): ext4_do_update_inode:5224: inode #2: comm syz.8.1392: corrupted inode contents [ 267.757911][ T8893] EXT4-fs error (device loop8): __ext4_ext_dirty:202: inode #2: comm syz.8.1392: mark_inode_dirty error [ 267.826929][ T8893] EXT4-fs error (device loop8): ext4_lookup:1855: inode #19: comm syz.8.1392: 'bus' linked to parent dir [ 267.964952][ T7984] EXT4-fs (loop8): unmounting filesystem. [ 268.064334][ T8905] loop7: detected capacity change from 0 to 32768 [ 268.075347][ T8905] ================================================================================ [ 268.077632][ T8905] UBSAN: shift-out-of-bounds in fs/ocfs2/super.c:2365:4 [ 268.079311][ T8905] shift exponent 256 is too large for 32-bit type 'int' [ 268.081014][ T8905] CPU: 1 PID: 8905 Comm: syz.7.1395 Not tainted 6.1.130-syzkaller #0 [ 268.083017][ T8905] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 268.085550][ T8905] Call trace: [ 268.086422][ T8905] dump_backtrace+0x1c8/0x1f4 [ 268.087619][ T8905] show_stack+0x2c/0x3c [ 268.088664][ T8905] dump_stack_lvl+0x108/0x170 [ 268.089841][ T8905] dump_stack+0x1c/0x58 [ 268.090832][ T8905] __ubsan_handle_shift_out_of_bounds+0x2f4/0x36c [ 268.092448][ T8905] ocfs2_fill_super+0xee0/0x4a58 [ 268.093598][ T8905] mount_bdev+0x274/0x370 [ 268.094605][ T8905] ocfs2_mount+0x44/0x58 [ 268.095603][ T8905] legacy_get_tree+0xd4/0x16c [ 268.096704][ T8905] vfs_get_tree+0x90/0x274 [ 268.097624][ T8905] do_new_mount+0x278/0x8fc [ 268.098784][ T8905] path_mount+0x590/0xe5c [ 268.099803][ T8905] __arm64_sys_mount+0x498/0x588 [ 268.101047][ T8905] invoke_syscall+0x98/0x2bc [ 268.102260][ T8905] el0_svc_common+0x138/0x258 [ 268.103497][ T8905] do_el0_svc+0x58/0x13c [ 268.104594][ T8905] el0_svc+0x58/0x168 [ 268.105598][ T8905] el0t_64_sync_handler+0x84/0xf0 [ 268.106899][ T8905] el0t_64_sync+0x18c/0x190 [ 268.108096][ T8905] ================================================================================ [ 268.110419][ T8905] (syz.7.1395,8905,1):ocfs2_verify_volume:2366 ERROR: bad cluster size found: 1 [ 268.112549][ T8905] (syz.7.1395,8905,1):ocfs2_verify_volume:2385 ERROR: status = -22 [ 268.114441][ T8905] (syz.7.1395,8905,1):ocfs2_fill_super:990 ERROR: superblock probe failed! [ 268.116566][ T8905] (syz.7.1395,8905,1):ocfs2_fill_super:1176 ERROR: status = -22 [ 268.198091][ T8429] I/O error, dev loop7, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 269.545279][ T47] Bluetooth: hci1: command 0x0406 tx timeout