last executing test programs: 1m56.894907471s ago: executing program 5 (id=278): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) recvmmsg$unix(r0, &(0x7f0000006cc0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000980)=""/4096, 0x1000}], 0x1}}, {{0x0, 0x0, &(0x7f0000002780)=[{&(0x7f0000003100)=""/4096, 0x1000}], 0x1}}, {{0x0, 0x0, &(0x7f0000002b00)=[{&(0x7f00000028c0)=""/191, 0xfc29}], 0x1}}], 0x3, 0x400122a0, 0x0) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) 1m56.71289838s ago: executing program 5 (id=281): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x28, r1, 0x1, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x2335}]}]}, 0x28}}, 0x4040810) 1m56.644420934s ago: executing program 5 (id=282): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x1c, r1, 0x609, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x48050}, 0x20040000) 1m56.565555086s ago: executing program 5 (id=284): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000200)={[{@orlov}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@grpquota}, {@barrier}, {@usrjquota}, {@jqfmt_vfsold}, {@minixdf}]}, 0x3, 0x466, &(0x7f0000000340)="$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") mount$overlay(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f0000000000)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) fsync(r0) 1m56.342332894s ago: executing program 5 (id=285): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x64, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000080)={[{@commit}, {@heartbeat_none}, {@dir_resv_level={'dir_resv_level', 0x3d, 0x3}}, {@coherency_full}, {@coherency_full}, {@localalloc={'localalloc', 0x3d, 0x10000}}, {@coherency_full}, {@acl}, {@localflocks}]}, 0x2, 0x442c, &(0x7f00000088c0)="$eJzs3c9PHFUcAPA3A1qobYXaQ01M3MQmGjUEelJpIqW0FFqsqbYxXrYLbFt0YRtYjIce8NbEk4kH46HRxBunhoPX+id48VjPTfTgxcSkEbO7s8AMu7I2LNjm80nKMO/37nfn7Zsmw4sTlZtzS7m5pVxhIVeeub50MvdZubQ8XwzxHtnv/mlPJ+Ik9vvn0plzH1w9GcJPs788XF9fXw9V3aGpoS2///nH7Zmtx4Y4U6fabvPWdsvHIYRj28ZV1RVC+OjHEKIQwukkbTQ59oYQjoR63tXbX17L7dJo7j0onso/mrqzNnxicvXuWuvXHoXwbenFN2/M//ZK1/Cvr+9S9wAAAAAAAAAAAAAAAAAAPOHGL1+68v7gULgfhe7VaPvzuuPJsdXzseu75uXOv1gAAAAAAAAAAAAAAAAAAAD4n9p8/j8XHW3y/P9YchxpUX/93c6Pkc6ZeO/S2NnBoWT/92hb/ltJ0u+nu0J/k33fs/u/n87Ub77/+/Z+HldjfI1++0IUD6TO43hgIITvk43fj0cH41J5qfLG9fLywuyuDeOJlY5/fff+VHSSDf3bjf9opv3O7///wrZPU/X82u59xJ5q6fh3tSz3wxdRW/E/k6m3F/Gve6az3Tyl0vHvrqX1bi0wUp8AqvH/qnvn+I9l2u9U/I+EEHJRday51AxQXcNU0zfWKz4W/yod//qblZo6kzey1fX/Vyb+ZzPtN+LfuTA0n/9Xsl9ENJWO/7O1tJ5Uic3rvz/e+fo/l2l/P77/q+Nf8f3flnT8D9QTu1NFau9ku/P/eKb9TsX/SpyM80iU+gSsRvX0Vn+vjrR0/Hu25W/e/8Vtrf/OZ+rv1f1fo9/G/V9j+n8tqt//0Vw6/r0ty7V7/U9k6nV6/h+prf94XOn4H6ylpf+vr6/2s934T2ba71T8a6uSnkb8N+eTvw/U07+z/mtLOv7P1RPjrSVWaj9r679o5/X/hUz7+7H+q45/Je5sr0+LdPwPtSxXjf/PbXz/X8zU63z8Qxi01n9s6fgfblmudv337Bz/qUy9Tsf/1U42DgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPAEGE2OfSGKB1LncTwwEMKZ5Px4OBhNF2bz06XyzKdLIYwl6blwNLpRKk8XSvm5hfJsMV8olcozIZxN8o+FnmipVK7k5wu3zm201RvdLBYWK9PFQiWEMJ6kvxQON9qanqvMF26FEM5v5D0flxdv3Sws5GfnFt8ZHBwcDBMbY+iPip9XiguVeu/13BAmN+r2RVsGV8u+sDGWQ9En5eXFhUKpln5xS51SeaZQ2lJnKsn7OvRHlcXlhZlCpZgvlW80+ttPI8lxbOLyh5cvDm3LvxbVj6N7OywAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/qP7w29/E0Lorp/FIYRclPwSJf9S7j0onso/mrqzNnxicvXu2sNmZQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPiHHTgQAAAAAADyf22EqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqKuzSO27CQBAA0PVGUdocI5Vld2kdJYqSIo6QOAEcg8PAUbgEd6CgoKVCMmsk/JHcQPVeY8+MdmekHQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDpvmf1/L8ow3OKt8vdvvl5ucS/Kb/+GD7/9IAZuZ+fv/rzqyjTu2e9+ntKHarYVE/H1SIMfFubzp5c9+lGv0/X2L6Nzdf2fQ1ZzEMIVaq/ZTHm+bS7AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADO7MCBAAAAAACQ/2sjVFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVWEHjgUAAAAAhPlbR9G3AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8CsAAP//aQIeXw==") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x42, 0x10) 1m55.839798426s ago: executing program 5 (id=291): r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) 1m55.29539666s ago: executing program 32 (id=291): r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) 1m4.565934806s ago: executing program 2 (id=817): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, 0x0) 1m4.267761897s ago: executing program 2 (id=819): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a310000000084000000060a010400000000000000000100000008000b40000000005c0004802c000180090001007866726d000000001c0002800800024000000006050003000000000008000140000000092c00018008000100636d7000200002800c00038005000100ac000000080001400000000908000240000000050900010073797a300000000014000000110001"], 0xf8}, 0x1, 0x0, 0x0, 0x4}, 0x0) 1m4.038849104s ago: executing program 2 (id=823): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000980)=ANY=[@ANYBLOB="12010000b1bd2f087d0403508c2f010203010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f00000000c0)={0x14, &(0x7f0000000100)=ANY=[@ANYBLOB="0000f50000000341"], 0x0}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) 1m2.260604514s ago: executing program 2 (id=844): syz_mount_image$jfs(&(0x7f0000000080), &(0x7f0000000440)='./file0\x00', 0x0, &(0x7f0000000480)=ANY=[], 0x1, 0x6276, &(0x7f0000003680)="$eJzs3c1vHGcdB/Df7JtfStOoh6pECLlteCmleS0hUKDtAQ5cOKBcUSLXrSJSQElAaRURV75w4I8AIXFBQogjJ/6AHrhy4w8gUoIE6qmD1n4eZzxde+2k3ln7+XwkZ+Y3z4z3mXx3vLueGT8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMQPf/Dj81VEXP1VWnAy4nPRj+hFLI3rlYhYWjmZ1x9ExPOx2RzPRcRwIaLKjc9EvBYRH52IePDw7up40YV99uP7f/nnH37y1I/+8efh2f/99Xb/9d3Wu3Pnt//9273H318AAAAoUV3XdZU+5p9Kn+97XXcKAJiJ/PpfJ3m5eu7q9Tnrj1qtVquPYN1UT3avWUTEenOb8XsGp+MB4IhZj4+77gIdkn/RBhHxVNedAOZa1XUHOBQPHt5drVK+VfP1YGWrPV8LsiP/9Wr7/o7dptO0rzGZ1fNrI/rx7C79WZpRH+ZJzr/Xzv/qVvsorXfY+c/KbvmPtm59Kk7Ov9/Ov+X45N+bmH+pcv6DA+Xflz8AAAAAAMyx/Pv/kx2f/1148l3Zl73O/67MqA8AAAAAAAAA8Fl70vH/tlXG/wMAAIB5Nf6sPva7E4+WNa/1H8XO5VeqiKdb6wOFSTfLLHfdDwAAAAAAAAAAAAAoyWDrGt4rVcQwIp5eXq7revzV1K4P6km3P+pK338oWdc/5AEAYMtHJ1r38lcRixFxJf2tv+Hy8nJdLy4t18v10kJ+PztaWKyXGp9r83S8bGG0jzfEg1E9/maLje2apn1entbe/n7jxxrV/X10bDY6DBwAImLr1eiBV6Rjpq6fia7f5XA0OP6PH8c/+9H18xQAAAA4fHVd11X6c96n0jn/XtedAgBmIr/+t88LqNVqtVqtPn51Uz3ZvWYREevNbcbvGQzHDwBHzHp83HUX6JD8izaIiOe77gQw16quO8ChePDw7mqV8q2arwdpfPd8LciO/Nerze3y9pOm07SvMZnV82sj+vHsLv15bkZ9mCc5/147/6tb7aO03mHnPyu75T/ez5Md9KdrOf9+O/+W45N/b2L+pcr5Dw6Uf1/+AAAAAAAwx/Lv/0/O1fnf0ePuzlR7nf9dObRHBQAAAAAAAIDD9eDh3dV832s+//+FCeu5//N4yvlX8i9Szr/Xyv+rrfX6jfn7bz3K/z8P767+8fa/P5+n+81/Ic9U6ZlVpWdElR6pGqTpk+zdp20M+6PxIw2rXn+Qrvmph+/E9bgRa3Fux7q99P/xqP38jvZxT4eb7XV/q/3CjvbBdnve/uKO9mG60qleyu1nYjV+Hjfi7c32cdvClP1fnNJeT2nP+fcd/0XK+Q8aX+P8l1N71ZqO3f+w96njvjmd9DhvXv/ib84d/u5MtRH97X1rGu/fix30Z/P/5KlR/PLW2s0zd67dvn3zfKTJjqUXIk0+Yzn/Yfra/vn/0lZ7/rnfPF7vfzg6cP7zYiMGu+b/UmN+vL8vz7hvXcj5j9JXzv/t1D75+D9A/r0/zWxf9mOv4/+VDvoDAAAAAAAAAAAAAAAAe6nrevMW0Tcj4lK6/6erezMBgNnKr/91kpfPqu7P+PHU6iNeV3PWn5nWn9Tz1R+1+ijWTfVkbzSLiPh7c5vxe4ZfT/pmAMA8+yQi/tV1J+iM/AuW/97feHq6684AM3Xr/Q9+eu3GjbWbt7ruCQAAAAAAAADwuPL4nyuN8Z9P13V9r7XejvFf34qVJx3/dZBntgcY3WWg6v7B92kvG71Rv9cYbvyF2G387+H23F7jfw+mPN5wSvtoSvvClPbFKe0Tb/RoyPm/0Bjv/HREnGoNv/7Y47/Omb3Gf22PeV+CnP+LjefzOP+vtNZr5l///ijn39uR/9nb7/3i7K33P3j1+nvX3l17d+1nF8+fP3fx0qXLly+ffef6jbVzW/922OPDlfPPY1+7DrQsOf+cufzLkvP/UqrlX5ac/5dTLf+y5Pzz+z35lyXnnz/7yL8sOf+XUy3/suT8v5Zq+Zcl5/9KquVflpz/11Mt/7Lk/F9NtfzLkvM/k2r5lyXnfzbV+8x/6bD7xWzk/PMZLsd/WXL++coG+Zcl538h1fIvS87/YqrlX5ac/2upln9Zcv7fSLX8y5Lzv5Rq+Zcl5//NVMu/LDn/y6mWf1ly/t9KtfzLkvP/dqrlX5ac/+upln9Zcv7fSbX8y5Lz/26q5V+WnP/3Ui3/suT830i1/Mvy6O//mzFjxkye6fonEwAAAAAAAAAAAADQNovLibveRwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg/+zAgQAAAAAAkP9rI1RVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVhBw4EAAAAAID8XxuhqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqCnt3FyPXWd4B/Mx+eeNAYiCkTmrCxjHGOJvs+iP+oHUx4bPhqySEQj+wXe/aLPgLr10CjWpHgRIJo6KKtuGiLSDU5qbCqrigFaBcoFaVKkF7QW8QFSoXURVQQKrUVsBWM+d9352ZnZ3Z9Y7XZ875/ST78c6cmfedM++c2WfX/zkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANLv7DbOfqmVZVqvV8gs2ZdmL6vWmiU2NS157Y+cHAAAArN3PG3+/cGu64PAKbtS0zT/d9e2vLiwsLGTvG/7T0c8tLKQrJrJsdEOWNa6Lrv7g/bXmbYIns/HaUNPXQz2GH+5x/UiP60d7XD/W4/oNPa4f73H9kh2wxE1ZLd3ZtsY/N+W7NLstG21ct63DrZ6sbRiq77t026zWuM3C6IlsLjuVzWbTLdvn29Ya23/97vpYb83iWENNY22pr5CfPH48zqEW9vG2lrEW7zP60euziZ/+5PHjf33h+Ts61Z67oeX+8nnu2Fqf5yfCJflca9mGtE/iPIea5rmlw3My3DLPWuN29X+3z/OFFc5zeHGa66r9OR/Phhr//k5jP43Usg77aUu47H/uybLs8uK027dZMlY2lG1suWRo8fkZz1dk/T7qS+ml2Uj3dbpQa1mnd69gndbrzLbWddr+mojP/93hdiPLzKH5afrRE2NNz/vPFq5lnUb1R73ca6V9Dfb7tVKUNRjXxXcaD/qpjmtwW3j8j29ffg12XDsd1mB63E1rcGuvNTg0NtyYc3oSao3bLK7BXS3bDzdGqjXqc9u7r8GpC6fPTc1/7OP3zZ0+dnL25OyZPbt2Te/Zt+/AgQNTJ+ZOzU7nf1/j3i6+jdlQeg1sDfsuvgZe3bZt81Jd+OLYkuPvtb4Ox7u8Dje1bdvv1+FI+4Orrc8Lcumazl8b76nv9PErQ9kyr7HG87Nz7a/D9LibXocjTa/Dju8pHV6HIyt4Hda3ObdzZd+zjDT96TSH5d8L1rYGNzWtwfbvR9rXYL+/HynKGhwP6+J7O5d/L9gS5vvU5Gq/HxlesgbTww3Hnvol6fv98QON0mld3lm/4uax7OL87Pn7Hzt24cL5XVko6+JlTWulfb1ubHpM2ZL1OrTq9Xp47q6n7uxw+aawr8bvq/81vuxzVd9m7/3dn6vGu1vn/dly6e4slD4L+3Nhwzrtz07v5vX9OZZln//WEw9/4/HPv2HZ/VnvNz8xtfbvxVNf2nT8HV3m+Bv7/l/k46W7enJ4dCR//Q6nvTPacjxufapGGseuWmPsF6ZWdjweDX/W+3h8W5fj8ea2bft9PB5tf3DxeFzr9dOOtWl/PsfDOjk13f14XN9m8+7VrsmRrsfje0Kthf3/mtAppL6oae0st27TWCMjo+FxjcQRWtfpnpbtR0NvVh/rmd3Xtk533JPf13B6dIvWa51OtG3b73Wafva13Dqt9frp27Vpfz7Hw7q4bU/3dVrf5tm9az923hT/2XTsHOu1BkeHx+pzHk2LsHG8zxZuimvw/ux4djY7lc00rh1rrKdaY6zJB1a2BsfCn/U+Vm7usgZ3tG3b7zWY3seWW3u1kaUPvg/an8/xsC6efqD7Gqxv88b9/f3edUe4JG3T9L1r+8/XlvuZ151tu+l6rZWRMM9v7e/+s9n6NqcOrLbP7L6f7g2X3NxhP7W/fpd7Tc1k67OfNod5Pn9g+f1Un099m88dXOF6Opxl2aWPPNj4eW/4/crfXfzuV1t+79LpdzqXPvLgj1984h9XM38ABt8v8rIxf69r+s3USn7/DwAAAAyE2PcPhZro/wEAAKA0Yt8f/1d4ov8HAACA0oh9/0ioSUX6/81vfH7uF5eylMxfCOL1aTc8lG8XM67T4euJhUX1yx/88ux//8OllY09lGXZzx76g47bb34ozis3EeZ59U2tly/x1ftWNPbRRy+lcZvz618I9x8fz0qXQacI7nSWZV+/9TONcSbef6VRn33oaKM+fPmpJ+vbvHAw/zre/rmX5dv/RQj/Hj5xrOX2z4X98MNQp9/WeX/E233lymu27H/v4njxdrWttzQe9tMfyO83fk7OZ5/Mt4/7ebn5f+PTz3ylvv1jr+o8/0tDnef/TLjfL4f6v6/It29+Dupfx9t9Msw/jhdvd/+Xvtlx/lc/lW9/7s35dkdDjePvCF9ve/Pzc83767HasZbHlb0l3y6OP/3dP25cH+8v3n/7/MePXGnZH+3r49l/y+9nqm37eHkcJ/r7tvHr99O8PuP4z/zR0Zb93Gv8qw8/94r6/baPf2/bduc+srMx/uL9tX5i019+8jMdx4vzOfy351oez+F3h9dxGP/pD4T1GK7/v6v5/bV/usLRd7cef+L2X9h0qeXxRG/9aT7+1dedbNQN4zdtvPlFL77l8ivr+y7LvrMhv79e45/8q7Mt8//i7fn+iNfHjH77+MuJ45//6OSZs/MX52bSXn381sZn57w9n0+c763h2Nr+9ZGzFz44e35iemI6yybK+xF61+xLof44L5e7b72w5Ai689HwfN7551/fuP1fPx0v//f35JdfeVv+vvXqsN1nw+WbwvO3uvGXevru2xuv79qzYYYLSz8veC22bPuvAyvaMDz+9u8L4no/9/IPNvZD/brG+0Z8Xa9x/t+fye/na2G/LoRPZt56++J4zdvHz0a48kj+el/z/guHufi8/k14vt/xw/z+47zi4/1++D7mm5tbj3dxfXzt0lD7/Tc+xeNyOJ5kl/Pr41Zxf1954faO04ufQ5JdvqPx9Z+k+7ljVQ9zOfMfm586NXfm4mNTF2bnL0zNf+zjR06fvXjmwpHGZ3ke+VCv2y8enzY2jk8zs/v2Zo2j1dm8XGc3ev7nHj0+s396+8zsiWMXT1x49Nzs+ZPH5+ePz87Mbz924sTsR3vdfm7m0K7dB/fs3z15cm7m0IGDB/ccnJw7c7Y+jXxSPeyb/vDkmfNHGjeZP7T34K4HHtg7PXn67Mzsof3T05MXe92+8d40Wb/170+enz117MLc6dnJ+bmPzx7adXDfvt09Pw3w9LkT8xNT5y+embo4P3t+Kn8sExcaF9ff+3rdnnKa/4/8+9l2tfyD+LJ33bsvfT5r3ZefWPau8k3aPkD0+fBZNP/8knMHVvJ17PtHQ00q0v8DAABAFcS+fyzURP8PAAAApRH7/g2hJvp/AAAAKI3Y94+HmlSk/y9d/n/zpRWNL/8v/9+8v+T/K5b/f6Ro+f/8eCH/3x9rzd/L/wfy//L/8v8Dk/9fCG9I8v8UUdHy/7HvvynLKtn/AwAAQBXEvn9jqIn+HwAAAEoj9v03h5ro/wEAAKA0Yt//olCTivT/8v/y//L/8v/y/53Hl/8fTPL/3cn/9yD/P5VVK/9/uZ/zd/5/+X+WKlr+P/b9Lw41qUj/DwAAAFUQ+/5bQk30/wAAAFAase+/NdRE/w8AAAClEfv+TaEmFen/5f/l/+X/5f/l/zuPL/8/mOT/u5P/70H+3/n/5f/l/+mrouX/Y9//klCTivT/AAAAUAWx739pqIn+HwAAAIpn5NpuFvv+l4WaLOn/r3EAAAAA4IaLff9tWVsQvCK//5f/l/8vfv5/Q7pO/l/+Pytk/n84k/8vDvn/7uT/e5D/l/+X/5f/p6+Klv9v9P3ZePbyUJOK9P8AAABQBbHvvz3URP8PAAAApRH7/l8KNdH/AwAAQGnEvn9zqElF+n/5f/n/G53/H22bu/P/L95O/j9X/Py/8/8Xifx/d/L/Pcj/y//L/8v/01dFy//Hvv+OUJOK9P8AAABQBbHvvzPURP8PAAAApRH7/l8ONdH/AwAAQGnEvn9LqElF+n/5/4Ln/2NytMT5/97n/5f/l/+X/5f/Xzn5/+7k/3uQ/5f/l/+X/6evipb/j33/K0JNKtL/AwAAQBXEvv+uUBP9PwAAAJRG7PtfGWqi/wcAAIDSiH3/RKhJRfp/+f+C5//zHPxYmc//L/8v/y//L//fT/L/3cn/9xAOcz/Kskz+X/5f/l/+n7UrWv4/9v13h5pUpP8HAACAKoh9/9ZQE/0/AAAAlEbs++8JNdH/AwAAQGnEvn9bqElF+n/5/4HI/2fy//L/8v/y//L/KyP/3538fw/O/y//L/8v/09fFS3/H/v+V4WaVKT/BwAAgCqIff/2UBP9PwAAAJRG7PtfHWqi/wcAAIDSiH3/jlCTivT/8v/y//L/8v/y/53Hl/8fTPL/3cn/9yD/L/8v/y//T18VLf8f+/7XhJpUpP8HAACAKoh9/85QE/0/AAAAlEbs++8NNdH/AwAAQGnEvn8y1KQi/b/8v/y//L/8v/x/5/Hl/weT/H938v89yP/L/8v/y//TV0XL/8e+/75Qk4r0/wAAAFAFse+/P9RE/w8AAAClEfv+qVAT/T8AAACURuz7p0NNKtL/y//L/8v/y/+vKv//ysX7lf/Pyf8Xi/x/d/L/Pcj/y//f8Pz/qPw/pVK0/H/s+3eFmqTGb+waHiUAAABQJLHv3x1qUpHf/wMAAEAVxL5/T6iJ/h8AAABKI/b9e0NNKtL/y//L/8v/y/87/3/n8eX/B5P8f3f9z//Hhyj/L/8v/+/8//L/LFW0/H/s+x8INalI/w8AAABVEPv+faEm+n8AAAAojdj37w810f8DAABAacS+/0CoSUX6f/l/+X/5f/l/+f/O48v/Dyb5/+6c/7+H4uX/X9d88/XM/9fHkv+X/5f/Z/Ue+cPmr4qW/499/8FQk4r0/wAAAFAFse9/baiJ/h8AAABKI/b9vxJq0r3/33B9ZwUAAAD0U+z7fzXUpCK//5f/l/+X/5f/l//vPL78/2CS/+9O/r+H4uX/Wzj/f7HnL/8v/89SRcv/x77/UKhJRfp/AAAAqILY9/9aqIn+HwAAAEoj9v2vCzXR/wMAAEBpxL7/cKhBpzh3Kcn/y/8PZv5/XP5f/r90+f+xeL/y/2si/9+d/H8P8v/y//L/8v/0VdHy/7Hvf32oid//AwAAQGnEvv/BUBP9PwAAAJRG7PvfEGqi/wcAAIDSiH3/G0NNKtL/y//L/w9m/t/5/zP5/9Ll/53/vz/k/7uT/+9B/l/+X/5f/p++Klr+P/b9bwo1qUj/DwAAAFUQ+/43h5ro/wEAAKA0Yt//llAT/T8AAACURuz73xpqUpH+X/5f/v9G5v9zl+X/5f8b5P/l//tB/r87+f8e5P/l/+X/5f/pq6Ll/2Pf/+uhJhXp/wEAAKAKYt//UKiJ/h8AAABKI/b9bws10f8DAABAacS+/+2hJhXp/+X/5f+d/1/+X/6/8/jy/4NJ/r+7Acv///yWcLn8f07+v9jzX23+f6Tt6+uS///Bcvn/hQ3tt5f/53ooWv4/9v3vCDWpSP8PAAAAVRD7/neGmuj/AQAAoDRi3/+uUJOm/r+v//EOAAAAWHex7/+NUJOK/P5f/r8+j8X0svy//H/jAvl/+X/5/4El/9/dgOX/nf+/jfx/sefv/P/y/yxVtPx/7PvfHWpSkf4fAAAAqiD2/Q+Hmuj/AQAAoDRi3/9IqIn+HwAAAEoj9v3vCTWpSP8v/+/8//L/8v/y/53Hl/8fTPL/3cn/9yD/L/9ftPz/f8r/M9iKlv+Pff+joSYV6f8BAACgCmLf/95QE/0/AAAAlEbs+38z1ET/DwAAAKUR+/73hZpUpP+X/x+U/P/EgOb/n5D/v475/7tuybeT/5f/Z5H8f3fy/z3I/8v/Fy3/7/z/DLii5f9j3//+UJOV9//jK94SAAAAuI5Glr0m9v2/FWpSkd//AwAAQBXEvv+3Q030/wAAAFAase//nVCTivT/8v+Dkv93/v9M/t/5/9sej/y//H8n65f/j0ce+X/5/2Ll/zet6gG3utH5+bW60fOvbv4/f2eU/6eTouX/Y9//u6EmFen/AQAAoApi3/+BUBP9PwAAAAyETv8nu13s+4+Emuj/AQAAoDRi33801KQi/b/8v/y//H9B8/9/tvVfvvftdx7dJf8v/y//vyrrev7/+ovf+f/l/wuW/1+LG52fX6/515Y5NZj8v/P/039Fy//Hvv9YqElF+n8AAACogtj3/16oif4fAAAASiP2/cdDTfT/AAAAUBqx758JNalI/y//L/8v/1/Q/P8An/8/7g/5/1Z9y//Hg678f0frmv9/72JOXP5/tfn/sY6Xyv/L/w/y/OX/5f9Zqmj5/9j3z4aaVKT/BwAAgCoIff/QibwuXqH/BwAAgNKIff/JUBP9PwAAAJRG7Ps/GGpSkf5f/l/+X/5f/t/5/zuP3y3/Xxtx/v+ikv/vrjj5/87k/+X/B3n+8v/y/yxVtPx/7PvnQk0q0v8DAABAFcS+/0OhJvp/AAAAKI3Y93841ET/DwAAAKUR+/5ToSYV6f/l/+X/5f/l/+X/O49f2PP/y/93Jf/fnfx/D/L/8v/y//L//8/enXxZWtd3HL8FDV19yCK7LLLJOVnmT2AR1sk+WWSTRXJOTs4JRFFxpnEeUVScFcVZwQEEERXnCZxQnEFFxXnECVFPe6j6fr9dw1P3VlXf6vs8v9/rteCbrlB9r31a6E9Xv31YqrH1/7n7/y9u6WT/AwAAQA9y918ct9j/AAAA0Izc/ZfELfY/AAAANCN3///HLZ3sf/2//r/Z/v+f9f97vb7+X//fMv3/fPr/BfT/+n/9v/6fpRpb/5+7/2FxSyf7HwAAAHqQu//hcYv9DwAAAM3I3X9p3GL/AwAAQDNy9z8ibulk/+/o/9dmffb/mfHq/1vq/z3/f8/X1/+fQf9/rv5/7M5u/3/FQ//k0//r//X/Qf+/r/7/+F6fr/+nRWPr/3P3PzJu6WT/AwAAQA9y9z8qbrH/AQAAoBm5+y+LW+x/AAAAaEbu/kfHLZ3s/+U9///Exscn2v8X/b/+f+MD+n/9/179/7HT39b/j5Pn/8/XU/9/6V0XXHz/zX9/y0FeX/+v//f8f/0/yzW2/j93/2Pilk72PwAAAPQgd/9j4xb7HwAAAJqRu/9xcYv9DwAAAM3I3f/4uKWT/b+8/n/Sz/8v+n/9/8YH9P/6/736/3/z/P+x0//P11P/f5jX1//r//X/+n+Wa9X9f37H+e3c/U+IWzrZ/wAAANCD3P1PjFvsfwAAAGhG7v7L4xb7HwAAAJqRu/9k3NLJ/tf/H33//xf9v/4/rv5f/6//P3r6//n0/wvo//X/+n/9P0u16v5/57dz918Rt3Sy/wEAAKAHufufFLfY/wAAANCM3P1PjlvsfwAAAGhG7v6nxC2d7H/9v+f/6//1//r/4dfX/0+T/n8+/f8C+v8z7efP0/9PsP+PX0jp/zkKB+z/H5zzj+2l9P+5+58at3Sy/wEAAKAHufufFrfY/wAAANCM3P1Pj1vsfwAAAGhG7v5nxC2d7H/9v/5f/6//P3T/v/un3gb9/zD9/9mh/59vNP3/2rHBD+v/J9//e/7/FPv/oP/nKIzt+f+5+58Zt3Sy/wEAAKAHufufFbfM2f8H/s18AAAAYKVy9z87bvH1fwAAAJi8rM5y9z8nbulk/+v/9f/6f/2/5/8Pv/68/v+WLe9P/z8u+v/5RtP/70H/r/+f8vvX/+v/2W1s/X/u/ufGLZ3sfwAAAOhB7v4r4xb7HwAAAJqRu/95cYv9DwAAAM3I3f/8uKWT/T/c/5/+/+v/90f/v/396/+Hf34sq//P71H/P7f/v8jz//uk/5/v7Pf/x/X/279//f8RWvX7b7z/P7Ho8/X/DBlb/5+7/6q4pZP9DwAAAD3I3f+CuMX+BwAAgGbk7n9h3GL/AwAAQDNy978obulk/6/4+f9XnL/X+9L/b9D/6/89/3+cz/+fnfX+/5j+f5/0//N5/v8C+n/9v/7f8/9ZqrH1/7n7r45bOtn/AAAA0IOrH5ht7P4Xz2b2PwAAAEzR1j87sPMPlIbc/S+JW+x/AAAAaEbu/pfGLZ3s/xX3/0f1/P/zFr22/l//v/XHS/+v/x96/XH1/57/v1/6//n0/wvo/4+inz/WWP9/zV6fP4b+/3L9PyOzrf+/7fTHV9X/5+5/WdzSyf4HAACAHuTuf3ncYv8DAABAM3L3vyJusf8BAACgGbn7Xxm3dLL/j7z/P7H3ax9h/7+Q/l//v/XHS/+v/x96ff3/NOn/59P/L6D/9/x/z//X/7NU2/r/LVbV/+fuf1Xc0sn+BwAAgB7k7n913GL/AwAAQDNy918Tt9j/AAAA0Izc/a+JWzrZ/40+/38h/b/+f+uPl/5f/z/0+vr/adL/z6f/X0D/r//X/y/u/3f+izro/xkytv4/d/9r45ZO9j8AAAD0IHf/tXGL/Q8AAADNyN3/urjF/gcAAIBm5O5/fdzSyf7X/x9t/58f1//r/2cH6f/jE/T/m/T/+v+DmFr/v/O/P4fu19eG/k202x79/x3/c/Jft39E/6//1//r/z3/nyUYRf9/6vSvLnP3vyFu6WT/AwAAQA9y978xbrH/AQAAoBm5+98Ut9j/AAAA0Izc/W+OWw64//92qe/q7NH/e/6//n+E/X/Q/2/S/+v/D2Jq/f9Onv+v/9f/T/f96//1/+w2iv5/y7dz978lbvH1fwAAAGhG7v63xi32PwAAADQjd//b4hb7HwAAAJqRu/+6uKWT/a//1//r//X/+v/h1z9s/78+G6b/Pzv0//Pp/xfQ/+v/9f/6f5ZqbP1/7v7r45ZO9j8AAAD0IHf/2+MW+x8AAACakbv/HXGL/Q8AAABTkunYoNz974xbOtn/+n/9v/5f/6//H359z/+fpon2//WPwan2/+dOqf+/Yc4bGOr/Tx3X/+v/9f/6fw5pbP1/7v53xS2d7H8AAADoQe7+G+IW+x8AAACakbv/xrjF/gcAAIBm5O5/d9zSyf7X/+v/9f/6f/3/8Ovr/6dpov1/mWr/7/n/+v+Z/l//r/9nwNj6/9z9N8Utnex/AAAA6EHu/pvjFvsfAAAAmpG7/z1xi/0PAAAAzcjdf0vc0sn+1//r//X/+n/9//Dr6/+n6ej6/9nq+v/7zjnod7Mn/f8C+n/9v/5f/89Sja3/z93/3rilk/0PAAAAPcjdf2vcYv8DAABAM3L3vy9usf8BAACgGbn73x+3dLL/9f/6/2n2/1etD71//b/+f6b/757n/8+n/19A/6//1//r/1mqsfX/ufs/ELd0sv8BAACgB7n7b4tb7H8AAABoRu7+D8Yt9j8AAAA0I3f/h+KWTva//l//v73/n82m0f97/v9M/99C/78+0/8vnf5/vv31/xfp//X/bfX/58wa6v9P7Pn5+n/GaGz9f+7+D8ctnex/AAAA6EHu/o/ELfY/AAAANGDzz87k7v9o3GL/AwAAwJgdO8jfnLv/Y3FLJ/t/+v3/8R2fqP+fzWZ3X9b88//1/zP9fwv9f/2o6v+XR/8/n+f/L6D/b7P/9/x//T8rM7b+P3f/x+OWTvY/AAAA9CB3/yfiFvsfAAAAmpG7/5Nxi/0PAAAAzcjd/6m4pZP9P/3+f+cn6v9nZ/T8f/3/xgf0//p//f9k6f/n0/8voP9f2M+v7fHrnpn+X/+v/2fA2Pr/3P2fjls62f8AAADQg9z9t8ct9j8AAAA0I3f/HXGL/Q8AAADNyN3/mbilk/2v/9f/6/+n2f+v6//1//r/QWPp/y+88F/u1P/r/1vs/+fR/+v/9f/sNLb+P3f/Z+OWTvY/AAAA9CB3/+fiFvsfAAAAmpG7//Nxi/0PAAAAzcjd/4W4pZP9v7v/P2+2WahuGur/o1HT/2+h/9/+/vX/wz8/PP9f/6//P3pj6f89//9w71//r/+f8vs/UP//D7s/X/9Pi8bW/+fuvzNu6WT/AwAAQA9y938xbrH/AQAAoBm5+78Ut9j/AAAA0Izc/XfFLZ3sf8//1//r//X/+v/h19f/T5P+fz79/wL6f/2/5/9f8l/n6v9ZnrH1/7n7vxy3bAy/f/ybQ/7HBAAAAEYkd/9X4pZOvv4PAAAAPcjd/9W4xf4HAACAZuTu/1rc0sn+1//r//X/+n/9//Dr6/+nSf8/n/5/gX76//WhD666nz9Tq37/zfT/nv/PEo2t/8/d//W4pZP9DwAAAD3I3f+NuMX+BwAAgGbk7v9m3GL/AwAAQDNy998dt3Sy//X/+v/2+///1P/veH39v/6/Zfr//Df6MP3/Av30/4NW3c9P/f3r//X/7Da2/j93/z1xSyf7HwAAAHqQu/9bcYv9DwAAAM3I3f/tuMX+BwAAgGbk7v9O3NLJ/tf/99X/r8167P89/1//r//vyXT6/2uPDX3U8//1//r/6b5//b/+n93G1v/n7r937ViX+x8AAACm6t//6X/v2e/fe+/GX9dn341b7H8AAABoRu7+78Ut9j8AAAA0I3f/9+OWTva//r+v/r/P5//r//X/+v+eTKf/H6b/1//r/6f7/vX/+n92G1v/n7v/vrhly/Ab/B/oAQAAACYjd/8P4pZOvv4PAAAAPcjd/8O4Zdf+P7XPP9UOAAAAjE3u/h/FLZ18/V//P/L+f3ZE/X/8ffr/Tfp//f/Q6+v/p6m1/v/4bFT9/6k1/b/+fw79v/5f/89OY+v/c/ffetOsy/0PAAAAjdr2Owo/3vjr+uwncYv9DwAAAM3I3f/TuMX+BwAAgGbk7v9Z3NLJ/tf/j7z/P9Tz/0/U/+X5/533/1euD76+/l//37LW+n/P/9/8uP5/k/5/3O9f/6//Z7cD9P8bg/So+//c/T+PWzrZ/wAAANCD3P2/iFvsfwAAAGhG7v5fxi32PwAAADQjd/+v4pZO9r/+fwX9/1XHZ7Mj7f/38fx//X8f/f8er99O//93F5y8/T/++8br9f+cdjb7//y5oP/X/6+g/78ufv7p/0f0/vX/+n92G9vz/3P3/zpu6WT/AwAAQA9y998ft9j/AAAA0Izc/b+JW+x/AAAAaEbu/t/GLZ3sf/1/i8//n2b/nz/WK+j/T06v/8+muPf+3/P/9f+7ef7/fPr/BabT/2982/P/x/X+9f/6f3YbW/+fu/93cUsn+x8AAAB6kLv/93FL7v+1A//WPQAAADAyufv/ELf4+j8AAAA0I3f/A3FLJ/tf/6//H0v/nzz///Tnef7/Jv2//v8g9P/z6f8X0P/r//X/+n+Wamz9f+7+P8Ytnex/AAAA6EHu/gfjFvsfAAAAmpG7/09xi/0PAAAAzcjd/+e4pZP9r//X/+v/9f/6/+HX1/9Pk/5/Pv3/Q87f+w3o//X/+n/9P0s1tv4/d/9fAwAA//+9M2Fu") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chdir(&(0x7f0000000200)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) 1m1.420558314s ago: executing program 2 (id=857): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000006c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@tclass={{0x14, 0x29, 0x43, 0xd66}}], 0x18}}], 0x1, 0x44080) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f0000000140)=' ', 0x2e) 1m0.82300198s ago: executing program 2 (id=868): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000140)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r0, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)={0x40, r1, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_DEVKEY={0x24, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x14, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000041}, 0x2000c0c0) 1m0.245952933s ago: executing program 33 (id=868): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000140)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r0, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)={0x40, r1, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_DEVKEY={0x24, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x14, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000041}, 0x2000c0c0) 4.469457313s ago: executing program 4 (id=1539): r0 = socket$kcm(0x2, 0x922000000001, 0x106) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@cgroup, 0xffffffffffffffff, 0x2f, 0x0, 0x4}, 0x20) setsockopt$sock_attach_bpf(r0, 0x1, 0x43, &(0x7f0000000000), 0xff7b) sendmsg$inet(r0, &(0x7f0000000800)={&(0x7f0000000040)={0x2, 0x4e22, @remote}, 0x10, 0x0}, 0x20009090) 3.171276661s ago: executing program 4 (id=1554): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='pagemap\x00') pread64(r0, &(0x7f0000000200)=""/102400, 0x19000, 0x1000000000) 1.880353358s ago: executing program 1 (id=1568): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x5, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000001000000850000000e000000850000000500000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='sys_exit\x00', r0}, 0x18) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r1, 0x0) 1.705010252s ago: executing program 4 (id=1570): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='freezer.self_freezing\x00', 0x275a, 0x0) r1 = creat(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc341b83e8fc58ba8) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0xc, r1, 0x8, 0x0, 0x2}) 1.6925101s ago: executing program 7 (id=1571): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="54000000020603000000000000000000000000000d000300686173683a6e65740000000005000400000000000900020073797a31000000000c000780080008400000007005000500020300000500010006"], 0x54}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4) 1.674914751s ago: executing program 3 (id=1572): syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000001080)='./bus\x00', 0x80, &(0x7f00000010c0)=ANY=[@ANYBLOB="666c7573682c6e6f646f74732c646973636172642c646d61736b3d30303030303030303030303030303030303030303030322c646d61736b3d30303030303030303030303030303030303030303137372c646f74732c6e6f646f74732c71756965742c646f74732c0023c3cb4d2e3cbf18508098fe0de2af38db67d42d1bc4ab714d52f019082433fc9ca2d7174b2c4ece31c9f4c7a4d53914e100"/167], 0x1, 0x140, &(0x7f0000000000)="$eJzs27Fq21AUBuDj2m3ddvFcOgi6dDJtn6CluFAqaEnwkEwJOFnsYIgXJZMfJS8YCJ683ZAo2Imxhwy2IPq+RT/8CO4dpMMV6OjT2XAwnpyO/8+i3WhE60dkMW9EJ15FM0rTAABeknlKcZNSSm+n8e4qUkpVrwgA2DbzHwDqx/wHgPox/wGgfvYPDv/+zPPeXpa1I66nRb/ol9ey//0n733N7nWWd82Kot9c9N/KPnvav473D/33tf2b+PK57O+6X//ylf5DDLa/fQAAAKiFbraw9nzf7W7qy/To+8DK+b0VH1s72wYA8AyTi8vh8Wh0ci4IgrAIVb+ZgG1bPvRVrwQAAAAAAAAAAAAAANhkF78TVb1HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAWHUbAAD//0DvUik=") unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x200) 1.634502971s ago: executing program 1 (id=1573): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r1, &(0x7f00000010c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x34, r0, 0x1, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY={0x18, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x200000cc}, 0x22000040) 1.448162266s ago: executing program 7 (id=1576): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x201, 0x0, 0x0, {0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x801, 0x0, 0x0, {0x0, 0x0, 0x1}}], {0x14}}, 0xa4}}, 0x0) 1.437361766s ago: executing program 6 (id=1577): r0 = io_uring_setup(0x2e32, &(0x7f00000004c0)={0x0, 0xeabc, 0x40}) r1 = syz_open_dev$usbmon(&(0x7f00000000c0), 0x6, 0x2100) ioctl$MON_IOCX_GETX(r1, 0x4018920a, &(0x7f00000005c0)={0x0, 0x0}) close_range(r0, 0xffffffffffffffff, 0x0) 1.379520068s ago: executing program 1 (id=1578): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r0}, 0x10) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SET_FEATURE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x3fa, 0x100, 0x70bd25, 0x25dfdbfd, {0x1, 0x1}}, 0x20}, 0x1, 0x0, 0x0, 0x4000054}, 0x4800) 1.293154087s ago: executing program 1 (id=1579): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'8255\x00', [0x4f27, 0x9, 0x2, 0x401, 0x1, 0xcc7, 0xfff, 0x5c952399, 0x5, 0x3ff, 0x802, 0x1600, 0xfffffffe, 0x1, 0x9, 0xe1cb, 0x6, 0x4, 0x3, 0x396, 0x80000089, 0xfffffffd, 0x0, 0xfffffff5, 0xffffeadb, 0x3, 0x3c, 0x8, 0x4, 0x8000000, 0xdffffffa]}) ioctl$COMEDI_BUFINFO(r0, 0xc02c640e, &(0x7f0000000180)={0xc, 0x5, 0x7, 0x5, 0x200, 0xfffffffd, 0x592f}) 1.229516478s ago: executing program 3 (id=1580): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8) listen(r0, 0x80) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, 0x0, 0x0) 1.207440848s ago: executing program 0 (id=1581): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0xfff2, 0xf}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x4, '\x00', 0x5, 0x3, 0x17ce3944, 0x5}}}}]}, 0xaa}, 0x1, 0x0, 0x0, 0x8094}, 0x0) 1.128839169s ago: executing program 4 (id=1582): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x80800, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000300)=0x3ff) r1 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r1, r0, 0x0) 1.081788572s ago: executing program 7 (id=1583): r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = syz_open_dev$media(&(0x7f0000000040), 0x7ffffffe, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r1, 0x80047c05, &(0x7f0000000080)=0xffffffffffffffff) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000000)={0xf010000, 0x0, 0x0, r2, 0x0, 0x0}) 966.088538ms ago: executing program 0 (id=1584): syz_mount_image$ext4(&(0x7f0000000300)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x1010059, &(0x7f00000004c0), 0x1, 0x54f, &(0x7f0000000e80)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x8004587d, &(0x7f0000000140)={0x2, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x3) 965.276811ms ago: executing program 6 (id=1585): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001803000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000001f0000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 928.013697ms ago: executing program 3 (id=1586): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r1, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYBLOB="358742"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) 917.149942ms ago: executing program 7 (id=1587): r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r0, &(0x7f0000002100)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000a80)={0x5a8, 0x0, r1, [{{0x2, 0x3, 0x4, 0xfffffffffffffff7, 0x5, 0x8, {0x2, 0xbeb2, 0x2, 0x0, 0x8000000000000001, 0x1, 0x4, 0x200, 0x6, 0xa000, 0x1, r2, r3, 0x0, 0x9}}, {0x3, 0x5, 0x10, 0x2, ' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}, {{0x1, 0x3, 0x8001, 0x8000000000000000, 0x7, 0x9, {0x3, 0xd6f4, 0xfffffffffffffff8, 0x3, 0x8000000000000000, 0xbe, 0x5, 0x7ff, 0x100, 0x1000, 0x8, 0x0, 0x0, 0xe, 0x40}}, {0x6, 0x7, 0x9, 0x7, '/dev/kvm\x00'}}, {{0x0, 0x2, 0x6, 0x8000000000000001, 0x80000001, 0x1, {0x3, 0x4, 0xb, 0x8, 0x4, 0x1, 0x6f9, 0xfffffffc, 0x7, 0x1000, 0x5, 0x0, 0x0, 0x8000, 0x3}}, {0x3, 0x2, 0xa, 0x6, '/dev/cuse\x00'}}, {{0x5, 0x1, 0x8000000000000001, 0x85, 0x2, 0x795, {0x0, 0x7, 0x7fff, 0x7, 0x1000, 0x4aa, 0x1, 0x0, 0x8, 0x8000, 0x4, 0x0, 0x0, 0x7, 0x6}}, {0x1, 0x7, 0x99, 0x10001, '\x04ootmode\x8e\x12\x05\xf3\x81}\xa0\xeb`\xbf\xb2T\xf1\xad\xa1\a y\x8b,+\xa2w\xad\xb8&.\xe5>\xd7\x88\xcd\xd8p\xc4F\xa9\x1e{\xf4\x8c\x94\x89\xa3\xa4\xaf\xf0Ng]\x9c\xdc*\xe2G\xa6yV\xd6\xa5\x80O\xa9]`U\xd9\x9b\x95\x8a\xa7Z\xb4\xf1xQ(\x9cy\x9a\xeb\xe7\x1a\x9b\x0e\xf7M\xa0\x0eP\x9aS\x0e7\x90z)o\xceV\x80)^\xef@\xb6\x8c\x17IK\xa1\xb0\x0e:R\x01\x03_\x87\bJj\xd3\x9f\x80\x13\xfadj\x053\x1e\x91r\xaa\b_\x04\xd7\xc1!\xb4\xc5\xe5h'}}, {{0x0, 0x2, 0x8, 0x1, 0x4, 0x5, {0x1, 0x7, 0x5, 0xf46b, 0x6, 0x5, 0xc4, 0x5, 0xc9a7, 0xc000, 0x51, 0xee01, 0x0, 0xa32, 0x101}}, {0x0, 0x9, 0x4, 0xf6, ')+@)'}}, {{0x5, 0x1, 0x6, 0x93, 0xe, 0x9, {0x0, 0x4, 0x0, 0x2, 0x3, 0xffffffffffffffff, 0x1, 0x7f, 0x5, 0xa000, 0x4, r2, 0x0, 0x3ff, 0x9}}, {0x4, 0x1, 0x0, 0x6}}, {{0x0, 0x1, 0xfffffffffffffffd, 0x0, 0x9, 0x2, {0x6, 0xb, 0x8, 0x8000000000000001, 0x100000000, 0xffffffffffffffff, 0x7f, 0x6, 0x5, 0xa000, 0x0, 0x0, r3, 0x400, 0x7fffffff}}, {0x5, 0x2}}, {{0x5, 0x0, 0x8, 0x3, 0x825, 0x7, {0x3, 0xe1c, 0xff, 0x3, 0x0, 0x6, 0x40, 0x8, 0xfffffff8, 0xa000, 0x9, 0x0, 0x0, 0x10001, 0x7}}, {0x6, 0xc, 0x0, 0xb4}}]}, 0x5a8) 822.511024ms ago: executing program 4 (id=1588): prctl$PR_SET_SECUREBITS(0x1c, 0x1d) setuid(0xee01) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000400)='./file3\x00', 0x210048, &(0x7f00000003c0)=ANY=[], 0xfd, 0x1d8, &(0x7f0000000640)="$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") syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') 744.470042ms ago: executing program 6 (id=1589): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_CONTINUE(r0, 0x8010aa01, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) 733.298396ms ago: executing program 0 (id=1590): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[], 0x28}}, 0x0) syz_mount_image$nilfs2(&(0x7f0000000a40), &(0x7f0000000a80)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00a717cf64394a00dc299b573660f498c4d99aac48af10923f703f53e58070c2bf4575228d0e471df7101ac03b8d48a1b0fc276e395f25b63e9a27cd2ab98888989eec154d97b4dbcf"], 0x1, 0xa09, &(0x7f0000001540)="$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") r0 = open(&(0x7f0000000080)='.\x00', 0x0, 0x1b5) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40086e81, &(0x7f0000000040)={0x0, 0x42c0000000003f, 0x400, 0x200000003, 0x6, 0x3, 0x2401}) 697.13599ms ago: executing program 7 (id=1591): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f0000000c00), 0x1, 0xb7e, &(0x7f0000000c40)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xc2000, 0x1e1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000d, 0x12, r0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) 696.610829ms ago: executing program 3 (id=1592): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000040)) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x60000002}) 551.693547ms ago: executing program 1 (id=1593): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e20, @local}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000180)={0x0, @in6={{0xa, 0x4e20, 0xffff8d0c, @empty, 0xfffffff7}}, 0x80000, 0x9, 0x300, 0x0, 0x55}, 0x9c) 549.400716ms ago: executing program 4 (id=1594): r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000580)={0x14, 0x0, &(0x7f0000000300)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_connect(0x4, 0x2d, &(0x7f00000005c0)={{0x12, 0x1, 0x110, 0x3d, 0xcf, 0x82, 0x40, 0x67b, 0x2507, 0x3, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x2, 0xf3, 0xe, 0xe0, 0x2, [{{0x9, 0x4, 0x24, 0x3, 0x0, 0xac, 0xee, 0x38, 0x4}}, {{0x9, 0x4, 0x9f, 0xc, 0x0, 0x7, 0xf1, 0x69}}]}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xc38, &(0x7f0000000140)=ANY=[]) 549.213525ms ago: executing program 6 (id=1595): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x815, 0x81, 0xffffffff}) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x2000000) 467.473551ms ago: executing program 0 (id=1596): r0 = timerfd_create(0x8, 0x80800) timerfd_settime(r0, 0x3, &(0x7f0000000280), 0x0) r1 = dup(r0) read$FUSE(r1, &(0x7f0000000580)={0x2020}, 0x2020) 310.683516ms ago: executing program 0 (id=1597): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuset.memory_pressure\x00', 0x275a, 0x0) write$6lowpan_control(r0, &(0x7f0000000040)='disconnect aa:aa:aa:aa:aa:10 2', 0x1e) ftruncate(r0, 0xc17a) lseek(r0, 0x8, 0x4) 309.969026ms ago: executing program 3 (id=1598): r0 = epoll_create(0x3ff) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000240)={0xa0000000}) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000000)={0x20000001}) 283.478814ms ago: executing program 6 (id=1599): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001240), r1) sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f0000001300)={0x0, 0x0, &(0x7f00000012c0)={&(0x7f0000001280)={0x14, r2, 0x1, 0x70bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4010}, 0x8004) 155.856308ms ago: executing program 0 (id=1600): r0 = timerfd_create(0x0, 0x800) timerfd_settime(r0, 0x3, &(0x7f000000b000)={{}, {0x0, 0x989680}}, 0x0) clock_settime(0x0, &(0x7f0000000040)={0x77359400}) readv(r0, &(0x7f0000003200)=[{&(0x7f0000001180)=""/4096, 0x1000}], 0x1) 114.702634ms ago: executing program 7 (id=1601): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="38000000180005042cbd7000fbdbdf2502001480fe02fd07003200001c00090018000000", @ANYRES32=0x0, @ANYBLOB="040016"], 0x38}, 0x1, 0x0, 0x0, 0x41}, 0x4048864) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x20040040) 112.939469ms ago: executing program 1 (id=1602): syz_mount_image$ntfs3(&(0x7f0000000000), &(0x7f00000000c0)='./file2\x00', 0x0, &(0x7f0000000080)=ANY=[], 0xff, 0x1f294, &(0x7f000001f3c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x1ff) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x2000, 0x0) sendfile(r0, r1, 0x0, 0x20fffe82) 10.257298ms ago: executing program 3 (id=1603): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'gre0\x00', 0x0}) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f00000000c0)=0x8, 0x4) sendto$packet(r0, &(0x7f0000000340)="05030006e8fe091c6202a0ffffffff006003000000007f141434e3177f43055762cb80948864113b022543424aa608", 0xfef2, 0x0, &(0x7f0000000a80)={0x11, 0x88a8, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) 0s ago: executing program 6 (id=1604): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x204, 0xa, 0x4, 0x0, 0x1}) r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r1, 0xc0585609, &(0x7f0000000040)={0x800, 0xa, 0x4}) kernel console output (not intermixed with test programs): device number 8 [ 192.788744][ T8394] loop1: detected capacity change from 0 to 1024 [ 192.796173][ T8392] netlink: 8 bytes leftover after parsing attributes in process `syz.3.837'. [ 192.853406][ T8394] hfsplus: xattr searching failed [ 192.856394][ T8392] vlan2: entered allmulticast mode [ 192.864089][ T10] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 192.921777][ T3536] hfsplus: b-tree write err: -5, ino 3 [ 193.021779][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 193.029992][ T10] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 193.041393][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.076008][ T10] usb 5-1: config 0 descriptor?? [ 193.084503][ T8400] loop6: detected capacity change from 0 to 4096 [ 193.108035][ T8400] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 193.147641][ T8400] fs-verity (loop6, inode 16): Unsupported log_blocksize: 13 [ 193.239386][ T6968] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.547894][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.557492][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 193.850473][ T8408] loop2: detected capacity change from 0 to 32768 [ 193.877206][ T8408] [ 193.877206][ T8408] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 193.877206][ T8408] [ 193.905345][ T10] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 193.946244][ T10] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write GPIO value 0x00b0: ffffffb9 [ 194.001456][ T10] asix 5-1:0.0: probe with driver asix failed with error -71 [ 194.029973][ T10] usb 5-1: USB disconnect, device number 10 [ 194.059362][ T5869] non-latin1 character 0x3ff found in JFS file name [ 194.092571][ T5869] mount with iocharset=utf8 to access [ 194.142814][ T5869] [ 194.142814][ T5869] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 194.142814][ T5869] [ 194.189237][ T5869] [ 194.189237][ T5869] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 194.189237][ T5869] [ 194.226040][ T5869] [ 194.226040][ T5869] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 194.226040][ T5869] [ 194.252454][ T5869] [ 194.252454][ T5869] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 194.252454][ T5869] [ 194.287893][ T109] [ 194.287893][ T109] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 194.287893][ T109] [ 194.312416][ T5869] read_mapping_page failed! [ 194.321842][ T5869] ERROR: (device loop2): txCommit: [ 194.321842][ T5869] [ 194.349023][ T5869] ERROR: (device loop2): remounting filesystem as read-only [ 194.590568][ T5972] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 194.686821][ T36] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.763503][ T5972] usb 4-1: New USB device found, idVendor=0733, idProduct=0430, bcdDevice=35.fb [ 194.799948][ T5972] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.847907][ T5972] usb 4-1: config 0 descriptor?? [ 194.878440][ T5972] gspca_main: spca505-2.14.0 probing 0733:0430 [ 194.909835][ T36] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.106546][ T36] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.207828][ T36] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.284060][ T5972] gspca_spca505: reg write: error -71 [ 195.311236][ T5972] spca505 4-1:0.0: probe with driver spca505 failed with error -5 [ 195.346569][ T5972] usb 4-1: USB disconnect, device number 11 [ 195.502833][ T8455] loop4: detected capacity change from 0 to 40427 [ 195.565445][ T8455] F2FS-fs (loop4): build fault injection rate: 25 [ 195.612975][ T8455] F2FS-fs (loop4): invalid crc value [ 195.644249][ T36] bridge_slave_1: left allmulticast mode [ 195.649936][ T36] bridge_slave_1: left promiscuous mode [ 195.681410][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 195.771241][ T36] bridge_slave_0: left allmulticast mode [ 195.776931][ T36] bridge_slave_0: left promiscuous mode [ 195.823797][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 195.925087][ T8455] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 195.980845][ T8455] F2FS-fs (loop4): Start checkpoint disabled! [ 196.027576][ T8479] input: syz0 as /devices/virtual/input/input16 [ 196.037134][ T8455] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 196.240219][ T5856] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 196.253948][ T5856] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 196.264800][ T5856] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 196.281833][ T5856] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 196.298248][ T5856] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 196.309975][ T5929] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 196.324382][ T8464] loop1: detected capacity change from 0 to 32768 [ 196.358991][ T8464] JBD2: Ignoring recovery information on journal [ 196.396913][ T8464] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 196.466647][ T5971] kworker/u8:8: attempt to access beyond end of device [ 196.466647][ T5971] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 196.490304][ T5929] usb 1-1: Using ep0 maxpacket: 16 [ 196.520957][ T5929] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 196.531645][ T5971] CPU: 1 UID: 0 PID: 5971 Comm: kworker/u8:8 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT(full) [ 196.531677][ T5971] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 196.531695][ T5971] Workqueue: writeback wb_workfn (flush-7:4) [ 196.531732][ T5971] Call Trace: [ 196.531741][ T5971] [ 196.531751][ T5971] dump_stack_lvl+0x189/0x250 [ 196.531789][ T5971] ? __pfx_dump_stack_lvl+0x10/0x10 [ 196.531819][ T5971] ? __pfx_queue_work_on+0x10/0x10 [ 196.531844][ T5971] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 196.531876][ T5971] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 196.531921][ T5971] f2fs_handle_critical_error+0x37c/0x540 [ 196.531965][ T5971] f2fs_write_end_io+0x886/0xb60 [ 196.532011][ T5971] __submit_merged_bio+0x27a/0x6a0 [ 196.532054][ T5971] __submit_merged_write_cond+0x255/0x530 [ 196.532103][ T5971] f2fs_write_data_pages+0x261d/0x3000 [ 196.532140][ T5971] ? rcu_is_watching+0x15/0xb0 [ 196.532204][ T5971] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 196.532292][ T5971] ? __lock_acquire+0xab9/0xd20 [ 196.532354][ T5971] ? finish_task_switch+0x266/0x950 [ 196.532387][ T5971] ? srso_alias_return_thunk+0x5/0xfbef5 [ 196.532415][ T5971] ? lockdep_hardirqs_on+0x9c/0x150 [ 196.532454][ T5971] ? srso_alias_return_thunk+0x5/0xfbef5 [ 196.532482][ T5971] ? rcu_is_watching+0x15/0xb0 [ 196.532507][ T5971] ? srso_alias_return_thunk+0x5/0xfbef5 [ 196.532555][ T5971] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 196.532597][ T5971] do_writepages+0x32e/0x550 [ 196.532637][ T5971] ? srso_alias_return_thunk+0x5/0xfbef5 [ 196.532665][ T5971] ? reacquire_held_locks+0x127/0x1d0 [ 196.532690][ T5971] ? writeback_sb_inodes+0x384/0x1010 [ 196.532734][ T5971] __writeback_single_inode+0x145/0xff0 [ 196.532767][ T5971] ? srso_alias_return_thunk+0x5/0xfbef5 [ 196.532795][ T5971] ? do_raw_spin_unlock+0x122/0x240 [ 196.532837][ T5971] writeback_sb_inodes+0x6c7/0x1010 [ 196.532869][ T5971] ? preempt_schedule+0xae/0xc0 [ 196.532908][ T5971] ? preempt_schedule+0xae/0xc0 [ 196.532959][ T5971] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 196.533040][ T5971] ? srso_alias_return_thunk+0x5/0xfbef5 [ 196.533068][ T5971] ? rcu_is_watching+0x15/0xb0 [ 196.533101][ T5971] ? srso_alias_return_thunk+0x5/0xfbef5 [ 196.533140][ T5971] wb_writeback+0x43b/0xaf0 [ 196.533182][ T5971] ? queue_io+0x2f1/0x590 [ 196.533218][ T5971] ? __pfx_wb_writeback+0x10/0x10 [ 196.533261][ T5971] ? _raw_spin_unlock_irq+0x23/0x50 [ 196.533299][ T5971] wb_workfn+0x409/0xef0 [ 196.533350][ T5971] ? __pfx_wb_workfn+0x10/0x10 [ 196.533382][ T5971] ? srso_alias_return_thunk+0x5/0xfbef5 [ 196.533413][ T5971] ? __lock_acquire+0xab9/0xd20 [ 196.533464][ T5971] ? srso_alias_return_thunk+0x5/0xfbef5 [ 196.533495][ T5971] ? srso_alias_return_thunk+0x5/0xfbef5 [ 196.533534][ T5971] ? _raw_spin_unlock_irq+0x23/0x50 [ 196.533564][ T5971] ? process_scheduled_works+0x9ef/0x17b0 [ 196.533588][ T5971] ? process_scheduled_works+0x9ef/0x17b0 [ 196.533619][ T5971] process_scheduled_works+0xae1/0x17b0 [ 196.533679][ T5971] ? __pfx_process_scheduled_works+0x10/0x10 [ 196.533719][ T5971] ? srso_alias_return_thunk+0x5/0xfbef5 [ 196.533758][ T5971] worker_thread+0x8a0/0xda0 [ 196.533787][ T5971] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 196.533831][ T5971] ? __kthread_parkme+0x7b/0x200 [ 196.533871][ T5971] kthread+0x711/0x8a0 [ 196.533907][ T5971] ? __pfx_worker_thread+0x10/0x10 [ 196.533932][ T5971] ? __pfx_kthread+0x10/0x10 [ 196.533960][ T5971] ? srso_alias_return_thunk+0x5/0xfbef5 [ 196.533994][ T5971] ? _raw_spin_unlock_irq+0x23/0x50 [ 196.534023][ T5971] ? srso_alias_return_thunk+0x5/0xfbef5 [ 196.534051][ T5971] ? lockdep_hardirqs_on+0x9c/0x150 [ 196.534089][ T5971] ? __pfx_kthread+0x10/0x10 [ 196.534122][ T5971] ret_from_fork+0x3fc/0x770 [ 196.534152][ T5971] ? __pfx_ret_from_fork+0x10/0x10 [ 196.534190][ T5971] ? __switch_to_asm+0x39/0x70 [ 196.534222][ T5971] ? __switch_to_asm+0x33/0x70 [ 196.534254][ T5971] ? __pfx_kthread+0x10/0x10 [ 196.534285][ T5971] ret_from_fork_asm+0x1a/0x30 [ 196.534338][ T5971] [ 196.534348][ T5971] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 196.549753][ T5929] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 196.803886][ T5858] ocfs2: Unmounting device (7,1) on (node local) [ 197.004685][ T5929] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 197.034258][ T5929] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.050719][ T5929] usb 1-1: Product: syz [ 197.069360][ T5929] usb 1-1: Manufacturer: syz [ 197.073978][ T5929] usb 1-1: SerialNumber: syz [ 197.106949][ T5929] usb 1-1: config 0 descriptor?? [ 197.136486][ T5929] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 197.182591][ T5929] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 197.188731][ T8494] binder: 8493:8494 ioctl 541b 0 returned -22 [ 197.592491][ T8506] loop6: detected capacity change from 0 to 128 [ 197.640501][ T8506] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 197.744220][ T5929] em28xx 1-1:0.0: chip ID is em2870 [ 197.876943][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 197.911715][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 197.922932][ T8519] loop3: detected capacity change from 0 to 512 [ 197.923423][ T36] bond0 (unregistering): Released all slaves [ 197.981747][ T5922] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 197.998412][ T8518] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.007453][ T8518] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.022137][ T43] usb 1-1: USB disconnect, device number 7 [ 198.041507][ T43] em28xx 1-1:0.0: Disconnecting em28xx [ 198.052302][ T43] em28xx 1-1:0.0: Freeing device [ 198.141229][ T5922] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 198.163308][ T5922] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.202207][ T5922] usb 5-1: config 0 descriptor?? [ 198.351565][ T5863] Bluetooth: hci5: command tx timeout [ 198.496055][ T8528] netlink: 'syz.6.898': attribute type 9 has an invalid length. [ 198.541618][ T8528] bond_slave_0: entered promiscuous mode [ 198.547878][ T8528] bond_slave_1: entered promiscuous mode [ 198.556871][ T8528] macvlan2: entered promiscuous mode [ 198.562571][ T8528] bond0: entered promiscuous mode [ 198.573687][ T8528] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 198.632766][ T5922] ath6kl: Unsupported hardware version: 0x0 [ 198.741944][ T5922] ath6kl: Failed to init ath6kl core: -22 [ 198.758904][ T5922] ath6kl_usb 5-1:0.0: probe with driver ath6kl_usb failed with error -22 [ 198.849259][ T5922] usb 5-1: USB disconnect, device number 11 [ 198.871370][ T36] hsr_slave_0: left promiscuous mode [ 198.889241][ T36] hsr_slave_1: left promiscuous mode [ 198.905694][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 198.928700][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 198.952164][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 198.969451][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 199.021895][ T36] veth1_macvtap: left promiscuous mode [ 199.039896][ T36] veth0_macvtap: left promiscuous mode [ 199.056728][ T36] veth1_vlan: left promiscuous mode [ 199.074840][ T36] veth0_vlan: left promiscuous mode [ 199.535637][ T8554] loop7: detected capacity change from 0 to 7 [ 199.557931][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 199.567189][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 199.585117][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 199.594325][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 199.613465][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 199.622668][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 199.640473][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 199.649621][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 199.658909][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 199.668169][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 199.729019][ T8557] Invalid logical block size (6) [ 199.751104][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 199.760287][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 199.769514][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 199.778777][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 199.781390][ T8561] loop4: detected capacity change from 0 to 1024 [ 199.798273][ T8554] ldm_validate_partition_table(): Disk read failed. [ 199.813991][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 199.823231][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 199.832448][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 199.841633][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 199.849958][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 199.859179][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 199.867323][ T8554] Dev loop7: unable to read RDB block 0 [ 199.874089][ T8554] loop7: unable to read partition table [ 199.887428][ T8554] loop7: partition table beyond EOD, truncated [ 199.895942][ T8561] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 199.916057][ T8554] loop_reread_partitions: partition scan of loop7 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö˜Èµ4FLQkÝŠ) failed (rc=-5) [ 200.324858][ T8567] loop4: detected capacity change from 0 to 4096 [ 200.420661][ T5863] Bluetooth: hci5: command tx timeout [ 200.454426][ T8567] ntfs3(loop4): failed to convert "0080" to cp775 [ 200.630795][ T36] team0 (unregistering): Port device team_slave_1 removed [ 200.692543][ T36] team0 (unregistering): Port device team_slave_0 removed [ 200.703369][ T8573] loop4: detected capacity change from 0 to 16 [ 200.726107][ T8573] erofs (device loop4): mounted with root inode @ nid 36. [ 201.219887][ T8574] loop1: detected capacity change from 0 to 32768 [ 201.584884][ T8587] loop4: detected capacity change from 0 to 1024 [ 201.635291][ T8587] hfsplus: xattr searching failed [ 201.644716][ T8587] hfsplus: xattr searching failed [ 201.689914][ T61] hfsplus: b-tree write err: -5, ino 3 [ 201.724481][ T8546] bridge0: entered promiscuous mode [ 201.734435][ T8546] macvlan2: entered promiscuous mode [ 201.742724][ T8553] netlink: 52 bytes leftover after parsing attributes in process `syz.6.909'. [ 201.867479][ T5952] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 202.055202][ T5952] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 202.076848][ T5952] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.120371][ T5952] usb 2-1: config 0 descriptor?? [ 202.179106][ T8483] chnl_net:caif_netlink_parms(): no params data found [ 202.467472][ T8613] netlink: 'syz.3.935': attribute type 4 has an invalid length. [ 202.507046][ T5863] Bluetooth: hci5: command tx timeout [ 202.548491][ T8611] loop6: detected capacity change from 0 to 2048 [ 202.556219][ T5952] ath6kl: Unsupported hardware version: 0x0 [ 202.575193][ T5952] ath6kl: Failed to init ath6kl core: -22 [ 202.584855][ T5952] ath6kl_usb 2-1:0.0: probe with driver ath6kl_usb failed with error -22 [ 202.599936][ T8610] binder: 8609:8610 ioctl 4018620d 0 returned -22 [ 202.636677][ T8611] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 202.642861][ T8596] loop4: detected capacity change from 0 to 32768 [ 202.702772][ T8483] bridge0: port 1(bridge_slave_0) entered blocking state [ 202.726377][ T8483] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.745834][ T8483] bridge_slave_0: entered allmulticast mode [ 202.753987][ T8483] bridge_slave_0: entered promiscuous mode [ 202.765252][ T8483] bridge0: port 2(bridge_slave_1) entered blocking state [ 202.772699][ T8483] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.786794][ T8483] bridge_slave_1: entered allmulticast mode [ 202.802575][ T8483] bridge_slave_1: entered promiscuous mode [ 202.809069][ T5952] usb 2-1: USB disconnect, device number 5 [ 203.010728][ T8483] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 203.030153][ T8483] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 203.106100][ T8618] loop3: detected capacity change from 0 to 4096 [ 203.171630][ T8618] ntfs3(loop3): Failed to initialize $Extend/$ObjId. [ 203.207336][ T8483] team0: Port device team_slave_0 added [ 203.230119][ T8626] netlink: 4 bytes leftover after parsing attributes in process `syz.0.941'. [ 203.231710][ T8483] team0: Port device team_slave_1 added [ 203.342026][ T8629] netlink: 'syz.4.937': attribute type 1 has an invalid length. [ 203.396242][ T8629] netlink: 24 bytes leftover after parsing attributes in process `syz.4.937'. [ 203.415131][ T8483] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 203.426785][ T8483] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 203.485207][ T8483] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 203.526228][ T8483] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 203.543456][ T8483] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 203.610727][ T8483] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 203.725812][ T8483] hsr_slave_0: entered promiscuous mode [ 203.745196][ T8483] hsr_slave_1: entered promiscuous mode [ 203.762552][ T8483] debugfs: 'hsr0' already exists in 'hsr' [ 203.782003][ T8483] Cannot create hsr debugfs directory [ 203.980465][ T8652] loop4: detected capacity change from 0 to 256 [ 204.002959][ T8652] exfat: Deprecated parameter 'namecase' [ 204.009894][ T8652] exfat: Deprecated parameter 'utf8' [ 204.063551][ T8652] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x22785e93, utbl_chksum : 0xe619d30d) [ 204.208275][ T8630] loop6: detected capacity change from 0 to 32768 [ 204.218781][ T8630] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.942 (8630) [ 204.230447][ T5955] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 204.245029][ T8630] BTRFS info (device loop6): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 204.271783][ T8630] BTRFS info (device loop6): using sha256 (sha256-lib) checksum algorithm [ 204.283700][ T8630] BTRFS info (device loop6): using free-space-tree [ 204.354835][ T8483] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 204.368201][ T8483] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 204.388680][ T5955] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 204.410056][ T8483] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 204.419931][ T5955] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 204.432484][ T5955] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 204.444160][ T5955] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 204.465230][ T8483] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 204.473127][ T5955] usb 4-1: SerialNumber: syz [ 204.486491][ T6968] BTRFS info (device loop6): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 204.586313][ T5863] Bluetooth: hci5: command tx timeout [ 204.599006][ T8684] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.958'. [ 204.726828][ T5952] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 204.732539][ T5955] usb 4-1: 0:2 : does not exist [ 204.794459][ T5955] usb 4-1: USB disconnect, device number 12 [ 204.867578][ T8483] 8021q: adding VLAN 0 to HW filter on device bond0 [ 204.930262][ T5952] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 204.959902][ T5952] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.983814][ T8483] 8021q: adding VLAN 0 to HW filter on device team0 [ 205.006361][ T5952] usb 1-1: config 0 descriptor?? [ 205.054635][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.061877][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 205.115836][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.122986][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 205.165477][ T43] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 205.361589][ T43] usb 5-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 205.381873][ T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.405520][ T43] usb 5-1: Product: syz [ 205.413528][ T43] usb 5-1: Manufacturer: syz [ 205.424522][ T8703] netlink: 212376 bytes leftover after parsing attributes in process `syz.6.966'. [ 205.440865][ T5952] ath6kl: Unsupported hardware version: 0x0 [ 205.442810][ T43] usb 5-1: SerialNumber: syz [ 205.454550][ T43] usb 5-1: config 0 descriptor?? [ 205.485109][ T5952] ath6kl: Failed to init ath6kl core: -22 [ 205.505661][ T5952] ath6kl_usb 1-1:0.0: probe with driver ath6kl_usb failed with error -22 [ 205.649177][ T5952] usb 1-1: USB disconnect, device number 8 [ 205.744074][ T5929] usb 5-1: USB disconnect, device number 12 [ 205.929728][ T8483] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 206.360717][ T8710] loop6: detected capacity change from 0 to 32768 [ 206.398646][ T8710] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.968 (8710) [ 206.439739][ T8710] BTRFS info (device loop6): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 206.492146][ T8710] BTRFS info (device loop6): using sha256 (sha256-lib) checksum algorithm [ 206.509962][ T8710] BTRFS info (device loop6): using free-space-tree [ 206.659296][ T8753] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 206.686117][ T30] audit: type=1800 audit(1754872143.041:56): pid=8710 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.968" name="file1" dev="loop6" ino=260 res=0 errno=0 [ 206.796949][ T8483] veth0_vlan: entered promiscuous mode [ 206.819130][ T6968] BTRFS info (device loop6): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 206.849977][ T8483] veth1_vlan: entered promiscuous mode [ 206.962133][ T8483] veth0_macvtap: entered promiscuous mode [ 207.008059][ T8483] veth1_macvtap: entered promiscuous mode [ 207.131719][ T8763] netlink: 92 bytes leftover after parsing attributes in process `syz.1.984'. [ 207.172556][ T8763] netlink: 16 bytes leftover after parsing attributes in process `syz.1.984'. [ 207.180130][ T8761] loop3: detected capacity change from 0 to 4096 [ 207.222620][ T8483] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 207.246187][ T8765] team0: No ports can be present during mode change [ 207.273998][ T8483] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 207.351043][ T61] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.417379][ T61] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.441624][ T8769] loop1: detected capacity change from 0 to 512 [ 207.450147][ T61] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.488857][ T8769] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 207.522426][ T61] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.614810][ T5952] usb 5-1: new full-speed USB device number 13 using dummy_hcd [ 207.661492][ T8769] EXT4-fs (loop1): 1 orphan inode deleted [ 207.681083][ T8769] EXT4-fs (loop1): 1 truncate cleaned up [ 207.723785][ T8769] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 207.765851][ T8769] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 207.766152][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 207.786653][ T5952] usb 5-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 207.806969][ T5952] usb 5-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 207.817795][ T8769] EXT4-fs (loop1): Remounting filesystem read-only [ 207.826376][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 207.838525][ T8769] EXT4-fs (loop1): error restoring inline_data for inode -- potential data loss! (inode 18, error -30) [ 207.854728][ T5952] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.889126][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 207.893291][ T5952] usb 5-1: Product: syz [ 207.899536][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 207.901759][ T5929] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 207.921957][ T5952] usb 5-1: Manufacturer: syz [ 207.937151][ T5952] usb 5-1: SerialNumber: syz [ 207.963493][ T5952] usb 5-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 207.998898][ T8783] syz.3.992: attempt to access beyond end of device [ 207.998898][ T8783] loop3: rw=6144, sector=8, nr_sectors = 2 limit=0 [ 208.017460][ T8783] bcachefs (/dev/loop3): error reading default superblock: IO error: -5 [ 208.026628][ T8783] syz.3.992: attempt to access beyond end of device [ 208.026628][ T8783] loop3: rw=6144, sector=7, nr_sectors = 1 limit=0 [ 208.040639][ T8783] bcachefs (/dev/loop3): error reading superblock: IO error: -5 [ 208.053171][ T8783] bcachefs: bch2_fs_get_tree() error: EIO [ 208.078652][ T5858] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 208.124260][ T5929] usb 7-1: Using ep0 maxpacket: 16 [ 208.133180][ T5929] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 208.155383][ T5929] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 208.200718][ T5929] usb 7-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 208.224413][ T5929] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.265732][ T5929] usb 7-1: config 0 descriptor?? [ 208.376765][ T5952] usb 5-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter) [ 208.420384][ T5952] usb 5-1: USB disconnect, device number 13 [ 208.689100][ T8798] loop1: detected capacity change from 0 to 4096 [ 208.718412][ T5929] corsair 0003:1B1C:1B02.0003: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.6-1/input0 [ 208.755990][ T8798] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512). [ 208.819922][ T8798] ntfs3(loop1): ino=19, mi_enum_attr [ 208.848407][ T8798] ntfs3(loop1): Mark volume as dirty due to NTFS errors [ 208.913253][ T5929] corsair 0003:1B1C:1B02.0003: Read invalid backlight brightness: 50. [ 208.963717][ T8806] bond_slave_0: entered promiscuous mode [ 208.969459][ T8806] bond_slave_1: entered promiscuous mode [ 209.006308][ T8806] macvtap1: entered allmulticast mode [ 209.022159][ T8806] bond0: entered allmulticast mode [ 209.032341][ T8806] bond_slave_0: entered allmulticast mode [ 209.069463][ T8806] bond_slave_1: entered allmulticast mode [ 209.099121][ T8806] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 209.198255][ T8806] bond0: left allmulticast mode [ 209.205046][ T5972] usb 7-1: USB disconnect, device number 4 [ 209.224966][ T8806] bond_slave_0: left allmulticast mode [ 209.260943][ T8806] bond_slave_1: left allmulticast mode [ 209.305909][ T8806] bond_slave_0: left promiscuous mode [ 209.311397][ T8806] bond_slave_1: left promiscuous mode [ 209.480919][ T8814] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1006'. [ 209.944731][ T8836] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 8, id = 0 [ 209.954302][ T8833] IPVS: stopping backup sync thread 8836 ... [ 209.990089][ T8837] loop6: detected capacity change from 0 to 128 [ 210.034576][ T8837] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 210.177721][ T8837] ext4 filesystem being mounted at /104/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 210.198623][ T8846] veth0_to_bridge: entered promiscuous mode [ 210.221208][ T8845] veth0_to_bridge: left promiscuous mode [ 210.287631][ T8837] fscrypt (loop6, inode 12): Unsupported encryption flags (0x10) [ 210.308402][ T8850] loop1: detected capacity change from 0 to 256 [ 210.365948][ T8850] FAT-fs (loop1): Directory bread(block 1285) failed [ 210.424954][ T8850] FAT-fs (loop1): Directory bread(block 1285) failed [ 210.473712][ T8850] FAT-fs (loop1): FAT read failed (blocknr 1281) [ 210.483865][ T6968] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 210.588910][ T8855] loop3: detected capacity change from 0 to 512 [ 210.618796][ T8855] EXT4-fs: Ignoring removed nobh option [ 210.668693][ T8855] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #3: comm syz.3.1025: corrupted inode contents [ 210.720788][ T8855] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #3: comm syz.3.1025: mark_inode_dirty error [ 210.775821][ T8855] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #3: comm syz.3.1025: corrupted inode contents [ 210.847001][ T8867] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1028'. [ 210.863906][ T8855] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #3: comm syz.3.1025: mark_inode_dirty error [ 210.895581][ T8867] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1028'. [ 210.948490][ T8855] Quota error (device loop3): write_blk: dquota write failed [ 210.991797][ T8855] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 211.014195][ T8855] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.1025: Failed to acquire dquot type 0 [ 211.067669][ T8855] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.1025: corrupted inode contents [ 211.099096][ T8855] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #16: comm syz.3.1025: mark_inode_dirty error [ 211.155638][ T8855] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.1025: corrupted inode contents [ 211.206166][ T8855] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #16: comm syz.3.1025: mark_inode_dirty error [ 211.236776][ T8855] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.1025: corrupted inode contents [ 211.283319][ T8855] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 211.322997][ T8855] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.1025: corrupted inode contents [ 211.375736][ T8855] EXT4-fs error (device loop3): ext4_truncate:4666: inode #16: comm syz.3.1025: mark_inode_dirty error [ 211.433533][ T5922] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 211.459084][ T8855] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 211.462381][ T5955] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 211.498812][ T8855] EXT4-fs (loop3): 1 truncate cleaned up [ 211.516374][ T8855] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 211.559662][ T8855] ext4 filesystem being mounted at /178/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 211.604758][ T5922] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 211.626204][ T5922] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 211.640288][ T8885] loop6: detected capacity change from 0 to 256 [ 211.662055][ T5955] usb 2-1: Using ep0 maxpacket: 8 [ 211.665204][ T8855] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.1025: corrupted inode contents [ 211.686876][ T8885] exFAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 211.686873][ T5922] usb 8-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 211.686906][ T5922] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 211.717145][ T8885] exFAT-fs (loop6): Medium has reported failures. Some data may be lost. [ 211.718973][ T5955] usb 2-1: unable to get BOS descriptor or descriptor too short [ 211.728985][ T8855] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #16: comm syz.3.1025: mark_inode_dirty error [ 211.755846][ T5955] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 211.756323][ T8855] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.1025: corrupted inode contents [ 211.785168][ T8885] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 211.797772][ T5922] usb 8-1: SerialNumber: syz [ 211.803695][ T5955] usb 2-1: can't read configurations, error -71 [ 211.826102][ T8855] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #16: comm syz.3.1025: mark_inode_dirty error [ 211.840105][ T8855] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.1025: corrupted inode contents [ 211.872001][ T8855] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #16: comm syz.3.1025: mark_inode_dirty error [ 211.906590][ T8855] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.1025: corrupted inode contents [ 211.960982][ T8855] EXT4-fs error (device loop3): ext4_truncate:4666: inode #16: comm syz.3.1025: mark_inode_dirty error [ 211.976624][ T8855] EXT4-fs error (device loop3) in ext4_setattr:6071: Corrupt filesystem [ 212.033880][ T5922] usb 8-1: 0:2 : does not exist [ 212.090278][ T5922] usb 8-1: USB disconnect, device number 2 [ 212.145904][ T5867] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 212.158781][ T8896] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1043'. [ 212.181491][ T13] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 212.199948][ T13] EXT4-fs error (device loop3): ext4_release_dquot:6969: comm kworker/u8:1: Failed to release dquot type 1 [ 212.472356][ T5929] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 212.644244][ T5929] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 212.677754][ T5929] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 212.719892][ T5929] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 212.751494][ T5929] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.755476][ T8922] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1054'. [ 212.778417][ T5929] usb 1-1: config 0 descriptor?? [ 212.780176][ T8924] loop7: detected capacity change from 0 to 7 [ 212.805479][ C1] blk_print_req_error: 5 callbacks suppressed [ 212.805500][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 212.820862][ C1] buffer_io_error: 5 callbacks suppressed [ 212.820880][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 212.842521][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 212.851789][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 212.858035][ T8928] loop6: detected capacity change from 0 to 1024 [ 212.864415][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 212.875247][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 212.876733][ T8928] EXT4-fs: Ignoring removed oldalloc option [ 212.884574][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 212.898577][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 212.908450][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 212.917659][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 212.928022][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 212.937263][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 212.945722][ T8928] EXT4-fs: Ignoring removed bh option [ 212.955640][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 212.964885][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 212.974412][ T8924] ldm_validate_partition_table(): Disk read failed. [ 212.990466][ T8928] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 213.011817][ T8929] Invalid logical block size (6) [ 213.019489][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 213.029002][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 213.040424][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 213.049659][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 213.059713][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 213.069031][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 213.079080][ T8924] Dev loop7: unable to read RDB block 0 [ 213.088124][ T8924] loop7: unable to read partition table [ 213.095853][ T8924] loop7: partition table beyond EOD, truncated [ 213.115937][ T8924] loop_reread_partitions: partition scan of loop7 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö˜Èµ4FLQkÝŠ) failed (rc=-5) [ 213.230243][ T5929] cp2112 0003:10C4:EA90.0004: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.0-1/input0 [ 213.261976][ T6968] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 213.418192][ T5929] cp2112 0003:10C4:EA90.0004: Part Number: 0x00 Device Version: 0x00 [ 213.465604][ T8944] loop3: detected capacity change from 0 to 512 [ 213.493417][ T8944] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 213.536474][ T8944] EXT4-fs (loop3): 1 truncate cleaned up [ 213.554786][ T8944] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 213.591414][ T8947] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1064'. [ 213.600408][ T8947] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1064'. [ 213.619554][ T5929] cp2112 0003:10C4:EA90.0004: error requesting SMBus config [ 213.659118][ T5929] cp2112 0003:10C4:EA90.0004: probe with driver cp2112 failed with error -71 [ 213.717145][ T5867] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 213.741554][ T5929] usb 1-1: USB disconnect, device number 9 [ 213.908116][ T8956] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1068'. [ 213.937007][ T8960] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1070'. [ 214.369152][ T8976] loop6: detected capacity change from 0 to 512 [ 214.417247][ T8976] EXT4-fs error (device loop6): ext4_validate_block_bitmap:432: comm syz.6.1076: bg 0: block 5: invalid block bitmap [ 214.445656][ T8979] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1079'. [ 214.488839][ T8976] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 214.506382][ T8976] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.1076: invalid indirect mapped block 3 (level 2) [ 214.538430][ T8976] EXT4-fs (loop6): 1 orphan inode deleted [ 214.570268][ T8976] EXT4-fs (loop6): 1 truncate cleaned up [ 214.593789][ T8988] loop7: detected capacity change from 0 to 64 [ 214.609140][ T8976] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 214.874585][ T6968] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 214.930120][ T9000] loop1: detected capacity change from 0 to 2048 [ 214.965922][ T9000] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 214.982830][ T9004] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.1090'. [ 215.080747][ T5973] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 215.218935][ T9013] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1094'. [ 215.253521][ T5973] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 215.291705][ T5973] usb 1-1: New USB device found, idVendor=046d, idProduct=c262, bcdDevice= 0.00 [ 215.319168][ T5973] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.346284][ T5973] usb 1-1: config 0 descriptor?? [ 215.422763][ T9013] bridge_slave_1: left allmulticast mode [ 215.443584][ T9013] bridge_slave_1: left promiscuous mode [ 215.465191][ T9013] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.606609][ T9021] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 215.613497][ T9021] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 215.639221][ T9021] vhci_hcd vhci_hcd.0: Device attached [ 215.779798][ T5973] logitech-hidpp-device 0003:046D:C262.0005: unknown main item tag 0x7 [ 215.802690][ T5973] logitech-hidpp-device 0003:046D:C262.0005: item fetching failed at offset 6/7 [ 215.823788][ T5973] logitech-hidpp-device 0003:046D:C262.0005: hidpp_probe:parse failed [ 215.825152][ T9008] loop4: detected capacity change from 0 to 32768 [ 215.832838][ T5973] logitech-hidpp-device 0003:046D:C262.0005: probe with driver logitech-hidpp-device failed with error -22 [ 215.863856][ T9008] [ 215.863856][ T9008] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 215.863856][ T9008] [ 215.880447][ T5952] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 215.890816][ T5929] usb 35-1: new low-speed USB device number 2 using vhci_hcd [ 215.922043][ T9008] ERROR: (device loop4): diWrite: ixpxd invalid [ 215.922043][ T9008] [ 215.945823][ T9008] ERROR: (device loop4): txCommit: [ 215.945823][ T9008] [ 215.974235][ T9008] [ 215.974235][ T9008] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 215.974235][ T9008] [ 215.983761][ T5972] usb 1-1: USB disconnect, device number 10 [ 216.003077][ T9008] [ 216.003077][ T9008] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 216.003077][ T9008] [ 216.062176][ T9033] loop7: detected capacity change from 0 to 256 [ 216.070344][ T5952] usb 2-1: Using ep0 maxpacket: 16 [ 216.084461][ T5952] usb 2-1: config 0 has no interfaces? [ 216.095071][ T5952] usb 2-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 216.105094][ T9033] exFAT-fs (loop7): failed to load upcase table (idx : 0x00011f41, chksum : 0x2f9e4978, utbl_chksum : 0xe619d30d) [ 216.120249][ T5857] [ 216.120249][ T5857] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 216.120249][ T5857] [ 216.147993][ T5857] [ 216.147993][ T5857] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 216.147993][ T5857] [ 216.170247][ T5952] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.211013][ T5952] usb 2-1: config 0 descriptor?? [ 216.387878][ T30] audit: type=1326 audit(1754872152.746:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9038 comm="syz.3.1105" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8f1e18ebe9 code=0x0 [ 216.447740][ T5952] usb 2-1: USB disconnect, device number 8 [ 216.460147][ T9023] usb 35-1: recv xbuf, 0 [ 216.516671][ T12] vhci_hcd: stop threads [ 216.539855][ T12] vhci_hcd: release socket [ 216.553707][ T12] vhci_hcd: disconnect device [ 216.560053][ T5929] vhci_hcd: vhci_device speed not set [ 216.917959][ T9059] loop6: detected capacity change from 0 to 128 [ 216.994707][ T9059] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 217.053775][ T9059] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 217.125775][ T9066] netlink: 'syz.4.1116': attribute type 4 has an invalid length. [ 217.218518][ T9068] loop1: detected capacity change from 0 to 4096 [ 217.263960][ T9068] ntfs3(loop1): try to read out of volume at offset 0x3fffffc0c00 [ 217.299882][ T9068] ntfs3(loop1): try to read out of volume at offset 0x3fffffc0c00 [ 217.307908][ T13] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 217.347572][ T9068] ntfs3(loop1): try to read out of volume at offset 0x3fffffc0c00 [ 217.370103][ T9068] ntfs3(loop1): try to read out of volume at offset 0x3fffffc0c00 [ 217.392597][ T9068] ntfs3(loop1): try to read out of volume at offset 0x3fffffc1c00 [ 217.424786][ T9068] ntfs3(loop1): try to read out of volume at offset 0x3fffffc2c00 [ 217.444814][ T9068] ntfs3(loop1): try to read out of volume at offset 0x3fffffc4c00 [ 217.498398][ T5863] Bluetooth: hci0: unexpected event for opcode 0x2005 [ 217.510834][ T9068] ntfs3(loop1): try to read out of volume at offset 0x3fffffc8c00 [ 217.524155][ T9068] ntfs3(loop1): try to read out of volume at offset 0x3fffffd0c00 [ 217.562974][ T9068] ntfs3(loop1): try to read out of volume at offset 0x3fffffe0c00 [ 217.628284][ T9087] erspan0: entered promiscuous mode [ 217.741152][ T5929] usb 7-1: new full-speed USB device number 5 using dummy_hcd [ 217.923439][ T5929] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 217.966948][ T5929] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 218.031518][ T5929] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 121, setting to 64 [ 218.088043][ T5929] usb 7-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 218.114750][ T9102] loop3: detected capacity change from 0 to 256 [ 218.122109][ T5929] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.146690][ T5929] usb 7-1: Product: syz [ 218.158786][ T9102] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 218.170335][ T5929] usb 7-1: Manufacturer: syz [ 218.174945][ T5929] usb 7-1: SerialNumber: syz [ 218.196911][ T9102] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 218.209703][ T5929] usb 7-1: config 0 descriptor?? [ 218.219486][ T9079] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 218.248943][ T9079] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 218.270138][ T5929] usb 7-1: ucan: probing device on interface #0 [ 218.307424][ T9108] process 'syz.4.1136' launched '/dev/fd/3' with NULL argv: empty string added [ 218.363234][ T9102] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 218.447424][ T30] audit: type=1800 audit(1754872154.797:58): pid=9102 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1133" name="file1" dev="loop3" ino=1048672 res=0 errno=0 [ 218.687622][ T5972] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 218.722482][ T5972] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 218.736486][ T5972] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 218.744214][ T9125] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1144'. [ 218.747837][ T5972] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 218.771056][ T5972] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 218.774588][ T9125] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1144'. [ 218.796970][ T5972] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 218.805245][ T5972] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 218.820774][ T5972] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 218.828248][ T5972] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 218.847019][ T5972] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.03 Device [syz1] on syz1 [ 218.858605][ T5952] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 218.901367][ T9127] loop3: detected capacity change from 0 to 64 [ 219.018845][ T5929] ucan 7-1:0.0 can0: registered device [ 219.026717][ T9131] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 219.050311][ T9131] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 219.070189][ T5952] usb 5-1: Using ep0 maxpacket: 32 [ 219.084844][ T9131] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 219.093646][ T5952] usb 5-1: config 0 has an invalid interface number: 126 but max is 0 [ 219.111657][ T5952] usb 5-1: config 0 has no interface number 0 [ 219.146496][ T5952] usb 5-1: config 0 interface 126 altsetting 16 bulk endpoint 0x6 has invalid maxpacket 1023 [ 219.174200][ T5929] ucan 7-1:0.0 can0: firmware string: unknown [ 219.185900][ T5952] usb 5-1: config 0 interface 126 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 8 [ 219.204097][ T9135] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 219.218496][ T5929] usb 7-1: USB disconnect, device number 5 [ 219.226651][ T5952] usb 5-1: config 0 interface 126 has no altsetting 0 [ 219.253665][ T5952] usb 5-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice=b0.1c [ 219.263845][ T5952] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.291261][ T5952] usb 5-1: Product: syz [ 219.298672][ T5952] usb 5-1: Manufacturer: syz [ 219.303395][ T5952] usb 5-1: SerialNumber: syz [ 219.311500][ T5952] usb 5-1: config 0 descriptor?? [ 219.317302][ T9117] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 219.325159][ T9117] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 219.458710][ T5955] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 219.618833][ T5955] usb 4-1: Using ep0 maxpacket: 16 [ 219.626435][ T5955] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 219.637819][ T5955] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 219.651212][ T5955] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 219.661283][ T5955] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 219.671569][ T5955] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 219.694774][ T5955] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 219.704084][ T5955] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 219.721080][ T5955] usb 4-1: Manufacturer: syz [ 219.731279][ T5955] usb 4-1: config 0 descriptor?? [ 219.754810][ T5952] ir_usb 5-1:0.126: IR Dongle converter detected [ 219.953917][ T9137] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 219.956568][ T5952] usb 5-1: IR Dongle converter now attached to ttyUSB0 [ 220.003072][ T9137] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 220.103592][ T9161] bond_slave_0: entered promiscuous mode [ 220.109370][ T9161] bond_slave_1: entered promiscuous mode [ 220.137086][ T9161] macvtap1: entered allmulticast mode [ 220.143243][ T9161] bond0: entered allmulticast mode [ 220.150850][ T9161] bond_slave_0: entered allmulticast mode [ 220.152690][ T9157] loop6: detected capacity change from 0 to 4096 [ 220.156731][ T9161] bond_slave_1: entered allmulticast mode [ 220.169771][ T5955] rc_core: IR keymap rc-hauppauge not found [ 220.175742][ T5955] Registered IR keymap rc-empty [ 220.184225][ T9158] netlink: 'syz.1.1159': attribute type 1 has an invalid length. [ 220.196985][ T5955] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 220.202239][ T9157] ntfs3(loop6): Different NTFS sector size (1024) and media sector size (512). [ 220.207045][ T9158] nbd: error processing sock list [ 220.219804][ T9157] ntfs3(loop6): ino=3, mi_enum_attr [ 220.221026][ T5972] usb 5-1: USB disconnect, device number 14 [ 220.234315][ T9161] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 220.241581][ T9158] block nbd1: shutting down sockets [ 220.248532][ T5955] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 220.256487][ T5972] ir-usb ttyUSB0: IR Dongle converter now disconnected from ttyUSB0 [ 220.265932][ T5972] ir_usb 5-1:0.126: device disconnected [ 220.273579][ T9161] bond0: left allmulticast mode [ 220.279780][ T5955] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 220.294993][ T5955] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input17 [ 220.309046][ T9161] bond_slave_0: left allmulticast mode [ 220.327818][ T30] audit: type=1800 audit(1754872156.688:59): pid=9157 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1158" name="file1" dev="loop6" ino=30 res=0 errno=0 [ 220.342184][ T9161] bond_slave_1: left allmulticast mode [ 220.367883][ T5955] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 220.402362][ T9161] bond_slave_0: left promiscuous mode [ 220.402585][ T5955] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 220.407842][ T9161] bond_slave_1: left promiscuous mode [ 220.479182][ T5955] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 220.527809][ T5955] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 220.587693][ T5955] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 220.629219][ T5955] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 220.677673][ T5955] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 220.697652][ T5955] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 220.739894][ T5955] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 220.767901][ T5955] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 220.811878][ T5955] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 220.824659][ T9175] syz.0.1166 uses obsolete (PF_INET,SOCK_PACKET) [ 220.836736][ T5955] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 220.898637][ T5955] usb 4-1: USB disconnect, device number 13 [ 221.073747][ T9186] loop4: detected capacity change from 0 to 256 [ 221.459773][ T9203] netlink: 60 bytes leftover after parsing attributes in process `syz.6.1178'. [ 221.527881][ T9198] netlink: 60 bytes leftover after parsing attributes in process `syz.6.1178'. [ 221.577322][ T9204] netlink: 60 bytes leftover after parsing attributes in process `syz.6.1178'. [ 222.012774][ T9223] loop7: detected capacity change from 0 to 1024 [ 222.128584][ T9223] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 222.302125][ T9223] EXT4-fs warning (device loop7): empty_inline_dir:1749: bad inline directory (dir #12) - no `..' [ 222.539986][ T8483] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 223.657441][ T9245] loop1: detected capacity change from 0 to 131072 [ 223.670466][ T9245] F2FS-fs (loop1): invalid crc value [ 223.717402][ T9275] loop6: detected capacity change from 0 to 512 [ 223.726033][ T9275] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 223.726089][ T5952] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 223.801607][ T9245] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 223.819836][ T9277] netlink: 11 bytes leftover after parsing attributes in process `syz.7.1200'. [ 223.829663][ T9245] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 223.829834][ T9277] netlink: 7 bytes leftover after parsing attributes in process `syz.7.1200'. [ 223.847532][ T9282] loop3: detected capacity change from 0 to 64 [ 223.871588][ T9275] EXT4-fs (loop6): 1 truncate cleaned up [ 223.892545][ T9275] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 223.972504][ T5952] usb 1-1: Using ep0 maxpacket: 32 [ 223.988496][ T5952] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 224.028072][ T5952] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 224.034608][ T9275] EXT4-fs warning (device loop6): ext4_group_add:1736: No reserved GDT blocks, can't resize [ 224.070272][ T5952] usb 1-1: config 0 interface 0 has no altsetting 0 [ 224.090227][ T9286] loop3: detected capacity change from 0 to 512 [ 224.100674][ T5952] usb 1-1: New USB device found, idVendor=056a, idProduct=032c, bcdDevice= 0.00 [ 224.133628][ T5952] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.151891][ T9286] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 224.163145][ T9289] bond0: Removing last ns target with arp_interval on [ 224.168673][ T5952] usb 1-1: config 0 descriptor?? [ 224.173839][ T49] bond0: (slave bond_slave_0): interface is now down [ 224.200024][ T49] bond0: (slave bond_slave_1): interface is now down [ 224.230079][ T9286] EXT4-fs (loop3): 1 truncate cleaned up [ 224.268809][ T49] bond0: now running without any active interface! [ 224.285134][ T6968] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 224.290313][ T9286] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 224.439193][ T9286] EXT4-fs error (device loop3): ext4_generic_delete_entry:2668: inode #2: block 13: comm syz.3.1214: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 224.530811][ T9286] EXT4-fs (loop3): Remounting filesystem read-only [ 224.556226][ T9286] EXT4-fs warning (device loop3): ext4_rename_delete:3735: inode #2: comm syz.3.1214: Deleting old file: nlink 5, error=-117 [ 224.688534][ T5867] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 224.856700][ T9304] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 224.925963][ T5955] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 224.951158][ T5952] usb 1-1: USB disconnect, device number 11 [ 225.318815][ T9310] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1227'. [ 225.329492][ T9308] loop3: detected capacity change from 0 to 32768 [ 225.356982][ T5955] usb 8-1: config 0 interface 0 has no altsetting 0 [ 225.363674][ T5955] usb 8-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 225.376189][ T5955] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.406158][ T5955] usb 8-1: config 0 descriptor?? [ 225.439891][ T9294] loop4: detected capacity change from 0 to 40427 [ 225.456788][ T9294] F2FS-fs (loop4): Invalid SB checksum offset: 0 [ 225.510526][ T9308] bcachefs (loop3): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,journal_flush_disabled,fsck,recovery_pass_last=set_may_go_rw,reconstruct_alloc,no_data_io [ 225.510560][ T9308] allowing incompatible features above 0.0: (unknown version) [ 225.510576][ T9308] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 225.554906][ T9308] bcachefs (loop3): Using encoding defined by superblock: utf8-12.1.0 [ 225.563850][ T9308] bcachefs (loop3): recovering from clean shutdown, journal seq 10 [ 225.565251][ T9294] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 225.572984][ T9308] bcachefs (loop3): Version upgrade required: [ 225.572984][ T9308] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 225.572984][ T9308] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.28: inode_has_case_insensitive [ 225.572984][ T9308] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,check_rebalance_work,set_fs_needs_rebalance [ 225.653900][ C1] vkms_vblank_simulate: vblank timer overrun [ 225.673447][ T9294] F2FS-fs (loop4): invalid crc value [ 225.673638][ T9308] bcachefs (loop3): dropping and reconstructing all alloc info [ 225.723558][ T9308] bcachefs (loop3): accounting_read... done [ 225.753307][ T9308] bcachefs (loop3): alloc_read... done [ 225.765506][ T9308] bcachefs (loop3): snapshots_read... done [ 225.774345][ T9308] bcachefs (loop3): check_allocations... [ 225.835175][ T5929] usb 7-1: new full-speed USB device number 6 using dummy_hcd [ 225.874571][ T9308] done [ 225.880460][ T9308] bcachefs (loop3): going read-write [ 225.885981][ T9308] bcachefs (loop3): insufficient writeable journal devices available: have 0, need 1 [ 225.885981][ T9308] rw journal devs: [ 225.913589][ T9294] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 225.947840][ T9294] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0 [ 225.956645][ T9308] bcachefs (loop3): done starting filesystem [ 225.985560][ T9294] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 226.021195][ T5929] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 226.041997][ T5929] usb 7-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 226.062899][ T5929] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.089216][ T5867] bcachefs (loop3): shutting down [ 226.100549][ T5929] usb 7-1: config 0 descriptor?? [ 226.115545][ T5867] bcachefs (loop3): going read-only [ 226.125423][ T9321] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 226.140939][ T5867] bcachefs (loop3): finished waiting for writes to stop [ 226.153749][ T5867] bcachefs (loop3): flushing journal and stopping allocators, journal seq 10 [ 226.164274][ T5867] bcachefs (loop3): flushing journal and stopping allocators complete, journal seq 10 [ 226.181185][ T5867] bcachefs (loop3): unclean shutdown complete, journal seq 10 [ 226.198902][ T5867] bcachefs (loop3): done going read-only, filesystem not clean [ 226.209984][ T5857] syz-executor: attempt to access beyond end of device [ 226.209984][ T5857] loop4: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 226.225515][ T5857] CPU: 0 UID: 0 PID: 5857 Comm: syz-executor Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT(full) [ 226.225555][ T5857] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 226.225571][ T5857] Call Trace: [ 226.225581][ T5857] [ 226.225591][ T5857] dump_stack_lvl+0x189/0x250 [ 226.225634][ T5857] ? __pfx_dump_stack_lvl+0x10/0x10 [ 226.225667][ T5857] ? __pfx_queue_work_on+0x10/0x10 [ 226.225692][ T5857] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 226.225726][ T5857] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 226.225776][ T5857] f2fs_handle_critical_error+0x37c/0x540 [ 226.225825][ T5857] f2fs_write_end_io+0x886/0xb60 [ 226.225876][ T5857] __submit_merged_bio+0x27a/0x6a0 [ 226.225922][ T5857] __submit_merged_write_cond+0x255/0x530 [ 226.225969][ T5857] f2fs_write_data_pages+0x261d/0x3000 [ 226.226059][ T5857] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 226.226097][ T5857] ? srso_alias_return_thunk+0x5/0xfbef5 [ 226.226150][ T5857] ? srso_alias_return_thunk+0x5/0xfbef5 [ 226.226232][ T5857] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 226.226264][ T5857] ? srso_alias_return_thunk+0x5/0xfbef5 [ 226.226292][ T5857] ? lockdep_hardirqs_on+0x9c/0x150 [ 226.226351][ T5857] ? srso_alias_return_thunk+0x5/0xfbef5 [ 226.226395][ T5857] ? srso_alias_return_thunk+0x5/0xfbef5 [ 226.226423][ T5857] ? __lock_acquire+0xab9/0xd20 [ 226.226486][ T5857] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 226.226529][ T5857] do_writepages+0x32e/0x550 [ 226.226572][ T5857] ? srso_alias_return_thunk+0x5/0xfbef5 [ 226.226607][ T5857] ? srso_alias_return_thunk+0x5/0xfbef5 [ 226.226636][ T5857] ? do_raw_spin_unlock+0x122/0x240 [ 226.226675][ T5857] filemap_fdatawrite+0x199/0x240 [ 226.226713][ T5857] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 226.226810][ T5857] ? srso_alias_return_thunk+0x5/0xfbef5 [ 226.226846][ T5857] ? do_raw_spin_unlock+0x122/0x240 [ 226.226885][ T5857] f2fs_sync_dirty_inodes+0x31f/0x830 [ 226.226933][ T5857] f2fs_write_checkpoint+0x95a/0x1df0 [ 226.226995][ T5857] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 226.227092][ T5857] ? kill_f2fs_super+0x298/0x6c0 [ 226.227127][ T5857] kill_f2fs_super+0x2c3/0x6c0 [ 226.227162][ T5857] ? __pfx_kill_f2fs_super+0x10/0x10 [ 226.227185][ T5857] ? radix_tree_delete_item+0x2b6/0x400 [ 226.227229][ T5857] ? srso_alias_return_thunk+0x5/0xfbef5 [ 226.227257][ T5857] ? shrinker_free+0x2ce/0x3e0 [ 226.227291][ T5857] deactivate_locked_super+0xbc/0x130 [ 226.227326][ T5857] cleanup_mnt+0x425/0x4c0 [ 226.227361][ T5857] ? srso_alias_return_thunk+0x5/0xfbef5 [ 226.227389][ T5857] ? lockdep_hardirqs_on+0x9c/0x150 [ 226.227429][ T5857] task_work_run+0x1d4/0x260 [ 226.227470][ T5857] ? __pfx_task_work_run+0x10/0x10 [ 226.227503][ T5857] ? __x64_sys_umount+0x122/0x160 [ 226.227546][ T5857] ? exit_to_user_mode_loop+0x40/0x110 [ 226.227590][ T5857] exit_to_user_mode_loop+0xec/0x110 [ 226.227629][ T5857] do_syscall_64+0x2bd/0x3b0 [ 226.227665][ T5857] ? lockdep_hardirqs_on+0x9c/0x150 [ 226.227698][ T5857] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.227722][ T5857] ? srso_alias_return_thunk+0x5/0xfbef5 [ 226.227751][ T5857] ? exc_page_fault+0x9f/0xf0 [ 226.227788][ T5857] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.227812][ T5857] RIP: 0033:0x7f15a358ff17 [ 226.227835][ T5857] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 226.227856][ T5857] RSP: 002b:00007ffcbe12e878 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 226.227882][ T5857] RAX: 0000000000000000 RBX: 00007f15a3611c05 RCX: 00007f15a358ff17 [ 226.227900][ T5857] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffcbe12e930 [ 226.227916][ T5857] RBP: 00007ffcbe12e930 R08: 0000000000000000 R09: 0000000000000000 [ 226.227932][ T5857] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffcbe12f9c0 [ 226.227950][ T5857] R13: 00007f15a3611c05 R14: 0000000000037377 R15: 00007ffcbe12fa00 [ 226.227994][ T5857] [ 226.231640][ T5857] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 226.341717][ T5955] video4linux radio48: keene_cmd_main failed (-71) [ 226.356717][ T5857] CPU: 0 UID: 0 PID: 5857 Comm: syz-executor Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT(full) [ 226.356756][ T5857] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 226.356773][ T5857] Call Trace: [ 226.356783][ T5857] [ 226.356794][ T5857] dump_stack_lvl+0x189/0x250 [ 226.356834][ T5857] ? __pfx_dump_stack_lvl+0x10/0x10 [ 226.356867][ T5857] ? __pfx_queue_work_on+0x10/0x10 [ 226.356893][ T5857] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 226.356925][ T5857] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 226.356975][ T5857] f2fs_handle_critical_error+0x37c/0x540 [ 226.357022][ T5857] f2fs_write_end_io+0x886/0xb60 [ 226.357073][ T5857] __submit_merged_bio+0x27a/0x6a0 [ 226.357128][ T5857] __submit_merged_write_cond+0x255/0x530 [ 226.357174][ T5857] f2fs_write_data_pages+0x261d/0x3000 [ 226.357264][ T5857] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 226.357300][ T5857] ? srso_alias_return_thunk+0x5/0xfbef5 [ 226.357352][ T5857] ? srso_alias_return_thunk+0x5/0xfbef5 [ 226.357434][ T5857] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 226.357465][ T5857] ? srso_alias_return_thunk+0x5/0xfbef5 [ 226.357492][ T5857] ? lockdep_hardirqs_on+0x9c/0x150 [ 226.357543][ T5857] ? srso_alias_return_thunk+0x5/0xfbef5 [ 226.357588][ T5857] ? srso_alias_return_thunk+0x5/0xfbef5 [ 226.357615][ T5857] ? __lock_acquire+0xab9/0xd20 [ 226.357677][ T5857] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 226.357718][ T5857] do_writepages+0x32e/0x550 [ 226.357762][ T5857] ? srso_alias_return_thunk+0x5/0xfbef5 [ 226.357795][ T5857] ? srso_alias_return_thunk+0x5/0xfbef5 [ 226.357823][ T5857] ? do_raw_spin_unlock+0x122/0x240 [ 226.357861][ T5857] filemap_fdatawrite+0x199/0x240 [ 226.357899][ T5857] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 226.357995][ T5857] ? srso_alias_return_thunk+0x5/0xfbef5 [ 226.358031][ T5857] ? do_raw_spin_unlock+0x122/0x240 [ 226.358070][ T5857] f2fs_sync_dirty_inodes+0x31f/0x830 [ 226.358125][ T5857] f2fs_write_checkpoint+0x95a/0x1df0 [ 226.358188][ T5857] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 226.358284][ T5857] ? kill_f2fs_super+0x298/0x6c0 [ 226.358317][ T5857] kill_f2fs_super+0x2c3/0x6c0 [ 226.358353][ T5857] ? __pfx_kill_f2fs_super+0x10/0x10 [ 226.358374][ T5857] ? radix_tree_delete_item+0x2b6/0x400 [ 226.358418][ T5857] ? srso_alias_return_thunk+0x5/0xfbef5 [ 226.358445][ T5857] ? shrinker_free+0x2ce/0x3e0 [ 226.358478][ T5857] deactivate_locked_super+0xbc/0x130 [ 226.358513][ T5857] cleanup_mnt+0x425/0x4c0 [ 226.358541][ T5857] ? srso_alias_return_thunk+0x5/0xfbef5 [ 226.358569][ T5857] ? lockdep_hardirqs_on+0x9c/0x150 [ 226.358607][ T5857] task_work_run+0x1d4/0x260 [ 226.358648][ T5857] ? __pfx_task_work_run+0x10/0x10 [ 226.358679][ T5857] ? __x64_sys_umount+0x122/0x160 [ 226.358722][ T5857] ? exit_to_user_mode_loop+0x40/0x110 [ 226.358765][ T5857] exit_to_user_mode_loop+0xec/0x110 [ 226.358803][ T5857] do_syscall_64+0x2bd/0x3b0 [ 226.358837][ T5857] ? lockdep_hardirqs_on+0x9c/0x150 [ 226.358871][ T5857] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.358894][ T5857] ? srso_alias_return_thunk+0x5/0xfbef5 [ 226.358921][ T5857] ? exc_page_fault+0x9f/0xf0 [ 226.358958][ T5857] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.358982][ T5857] RIP: 0033:0x7f15a358ff17 [ 226.359004][ T5857] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 226.359025][ T5857] RSP: 002b:00007ffcbe12e878 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 226.359057][ T5857] RAX: 0000000000000000 RBX: 00007f15a3611c05 RCX: 00007f15a358ff17 [ 226.359075][ T5857] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffcbe12e930 [ 226.359091][ T5857] RBP: 00007ffcbe12e930 R08: 0000000000000000 R09: 0000000000000000 [ 226.359113][ T5857] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffcbe12f9c0 [ 226.359130][ T5857] R13: 00007f15a3611c05 R14: 0000000000037377 R15: 00007ffcbe12fa00 [ 226.359174][ T5857] [ 226.359513][ T5857] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 226.376287][ T5867] bcachefs (loop3): shutdown complete [ 226.625229][ T5929] elan 0003:04F3:0755.0008: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.6-1/input0 [ 226.630479][ T5955] radio-keene 8-1:0.0: V4L2 device registered as radio48 [ 226.848808][ T5922] usb 7-1: USB disconnect, device number 6 [ 226.897915][ T5955] usb 8-1: USB disconnect, device number 3 [ 226.990500][ C1] vkms_vblank_simulate: vblank timer overrun [ 227.365839][ T9348] pim6reg0: tun_chr_ioctl cmd 1074025677 [ 227.371715][ T9348] pim6reg0: linktype set to 805 [ 227.636513][ T9358] loop4: detected capacity change from 0 to 16 [ 227.674963][ T9358] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 228.357319][ T9354] loop1: detected capacity change from 0 to 32768 [ 228.412416][ T9354] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 228.514462][ T9399] netlink: 'syz.0.1257': attribute type 10 has an invalid length. [ 228.559699][ T9354] XFS (loop1): Ending clean mount [ 228.564657][ T9399] syz_tun: entered promiscuous mode [ 228.636846][ T9399] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 228.662879][ T5858] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 229.182124][ T9386] loop7: detected capacity change from 0 to 32768 [ 229.233813][ T9412] program syz.6.1266 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 229.267013][ T9386] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.1255 (9386) [ 229.551322][ T9386] BTRFS info (device loop7): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 229.583189][ T9386] BTRFS info (device loop7): using sha256 (sha256-lib) checksum algorithm [ 229.613388][ T9417] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1261'. [ 229.633213][ T9386] BTRFS info (device loop7): using free-space-tree [ 230.156231][ T9410] loop4: detected capacity change from 0 to 40427 [ 230.190989][ T9410] F2FS-fs (loop4): invalid crc value [ 230.193665][ T8483] BTRFS info (device loop7): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 230.284501][ T9444] loop1: detected capacity change from 0 to 4096 [ 230.478667][ T9410] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 230.515848][ T9410] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 230.965208][ T9464] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1280'. [ 231.022418][ T9464] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1280'. [ 231.730151][ T9493] loop4: detected capacity change from 0 to 1024 [ 231.798219][ T9493] hfsplus: request for non-existent node 262144 in B*Tree [ 231.821580][ T9493] hfsplus: request for non-existent node 262144 in B*Tree [ 232.047449][ T9507] loop3: detected capacity change from 0 to 512 [ 232.060567][ T9507] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 232.078120][ T9507] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2842e12c, mo2=0002] [ 232.092148][ T5955] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 232.102362][ T9507] System zones: 1-12 [ 232.118341][ T9507] EXT4-fs (loop3): orphan cleanup on readonly fs [ 232.128276][ T9507] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.1297: invalid indirect mapped block 12 (level 1) [ 232.147559][ T9507] EXT4-fs (loop3): Remounting filesystem read-only [ 232.162572][ T9507] EXT4-fs (loop3): 1 truncate cleaned up [ 232.173523][ T9507] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 232.218351][ T9507] EXT4-fs warning (device loop3): dx_probe:791: inode #2: lblock 0: comm syz.3.1297: error -117 reading directory block [ 232.242089][ T5972] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 232.251733][ T5955] usb 2-1: Using ep0 maxpacket: 32 [ 232.262903][ T5955] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 232.278446][ T5955] usb 2-1: config 0 has no interface number 0 [ 232.283753][ T9517] EXT4-fs warning (device loop3): dx_probe:791: inode #2: lblock 0: comm syz.3.1297: error -117 reading directory block [ 232.303589][ T5955] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 232.322425][ T5955] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.364082][ T5955] usb 2-1: Product: syz [ 232.368376][ T5955] usb 2-1: Manufacturer: syz [ 232.373218][ T5955] usb 2-1: SerialNumber: syz [ 232.400993][ T5955] usb 2-1: config 0 descriptor?? [ 232.406506][ T5972] usb 5-1: Using ep0 maxpacket: 16 [ 232.415501][ T5972] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 232.425520][ T5955] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 232.436691][ T5867] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 232.440671][ T5972] usb 5-1: config 0 has no interface number 0 [ 232.454303][ T5972] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 232.465415][ T5972] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 232.501762][ T5972] usb 5-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 232.513464][ T9521] loop6: detected capacity change from 0 to 1024 [ 232.522262][ T5972] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.541997][ T5972] usb 5-1: config 0 descriptor?? [ 232.578306][ T9521] hfsplus: request for non-existent node 211 in B*Tree [ 232.596040][ T9521] hfsplus: request for non-existent node 211 in B*Tree [ 232.634497][ T5955] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 232.693654][ T5955] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 232.730707][ T1033] hfsplus: b-tree write err: -5, ino 8 [ 232.788589][ T9528] loop3: detected capacity change from 0 to 16 [ 232.836738][ T9528] erofs (device loop3): mounted with root inode @ nid 36. [ 232.910227][ T9532] loop7: detected capacity change from 0 to 1024 [ 233.022029][ C1] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 233.023177][ T5929] usb 2-1: USB disconnect, device number 9 [ 233.061098][ T5929] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 233.107162][ T5929] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 233.145312][ T5929] quatech2 2-1:0.51: device disconnected [ 233.159513][ T13] hfsplus: b-tree write err: -5, ino 4 [ 233.189915][ T5972] uclogic 0003:28BD:0071.0009: pen parameters not found [ 233.231226][ T5972] uclogic 0003:28BD:0071.0009: interface is invalid, ignoring [ 233.261589][ T5972] usb 5-1: USB disconnect, device number 15 [ 233.395430][ T9544] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1313'. [ 233.594394][ T9546] loop3: detected capacity change from 0 to 1024 [ 233.758934][ T9554] binder: BINDER_SET_CONTEXT_MGR already set [ 233.781366][ T1033] hfsplus: b-tree write err: -5, ino 4 [ 233.788066][ T9554] binder: 9553:9554 ioctl 40046207 0 returned -16 [ 234.179733][ T9566] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1324'. [ 234.216067][ T9566] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1324'. [ 234.370675][ T5929] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 234.433712][ T9577] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1329'. [ 234.457312][ T9552] loop1: detected capacity change from 0 to 32768 [ 234.472204][ T974] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 234.479628][ T9552] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 234.532021][ T5929] usb 4-1: Using ep0 maxpacket: 32 [ 234.542450][ T5929] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 234.559594][ T9552] XFS (loop1): Ending clean mount [ 234.578306][ T5929] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.580216][ T9552] XFS (loop1): Quotacheck needed: Please wait. [ 234.619493][ T5929] usb 4-1: config 0 descriptor?? [ 234.624741][ T974] usb 7-1: Using ep0 maxpacket: 16 [ 234.644680][ T974] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 234.703339][ T974] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 234.706086][ T9552] XFS (loop1): Quotacheck: Done. [ 234.744021][ T5922] usb 5-1: new full-speed USB device number 16 using dummy_hcd [ 234.758558][ T974] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 234.800773][ T974] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 234.832731][ T974] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 234.854748][ T974] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 234.872630][ T974] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 234.892537][ T5929] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 234.899337][ T974] usb 7-1: Manufacturer: syz [ 234.926563][ T5929] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 234.942125][ T974] usb 7-1: config 0 descriptor?? [ 234.969340][ T5922] usb 5-1: config 0 has an invalid interface number: 251 but max is 0 [ 234.988713][ T5922] usb 5-1: config 0 has no interface number 0 [ 234.995935][ T5929] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 235.003954][ T5929] usb 4-1: media controller created [ 235.012242][ T5922] usb 5-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 235.030338][ T5922] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.060419][ T5922] usb 5-1: Product: syz [ 235.065990][ T5922] usb 5-1: Manufacturer: syz [ 235.084568][ T5922] usb 5-1: SerialNumber: syz [ 235.098003][ T5929] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 235.099448][ T5858] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 235.117826][ T5922] usb 5-1: config 0 descriptor?? [ 235.229853][ T5929] az6027: usb out operation failed. (-71) [ 235.239049][ T9608] loop7: detected capacity change from 0 to 512 [ 235.262118][ T5929] az6027: usb out operation failed. (-71) [ 235.278369][ T5929] stb0899_attach: Driver disabled by Kconfig [ 235.303764][ T5929] az6027: no front-end attached [ 235.303764][ T5929] [ 235.323426][ T5929] az6027: usb out operation failed. (-71) [ 235.351421][ T974] rc_core: IR keymap rc-hauppauge not found [ 235.357409][ T974] Registered IR keymap rc-empty [ 235.368218][ T5929] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 235.385995][ T5929] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input19 [ 235.397636][ T974] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 235.433795][ T974] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 235.448857][ T5929] dvb-usb: schedule remote query interval to 400 msecs. [ 235.458098][ T5929] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 235.468001][ T974] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 235.485162][ T974] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input18 [ 235.514172][ T5929] usb 4-1: USB disconnect, device number 14 [ 235.565264][ T974] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 235.643793][ T974] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 235.667288][ T5929] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 235.700869][ T974] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 235.730283][ T974] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 235.743978][ T9612] loop7: detected capacity change from 0 to 1024 [ 235.767384][ T974] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 235.782583][ T5922] asix 5-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 235.795238][ T974] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 235.829709][ T9612] Quota error (device loop7): do_check_range: Getting block 64 out of range 1-5 [ 235.855463][ T5922] asix 5-1:0.251 (unnamed net_device) (uninitialized): Failed to read software interface selection register: -71 [ 235.867912][ T974] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 235.888611][ T9612] Quota error (device loop7): qtree_read_dquot: Can't read quota structure for id 0 [ 235.909434][ T5922] asix 5-1:0.251: probe with driver asix failed with error -71 [ 235.917893][ T974] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 235.940449][ T9612] EXT4-fs error (device loop7): ext4_acquire_dquot:6933: comm syz.7.1341: Failed to acquire dquot type 0 [ 235.960007][ T974] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 235.988953][ T5922] usb 5-1: USB disconnect, device number 16 [ 235.997885][ T9612] EXT4-fs error (device loop7): mb_free_blocks:2017: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 236.026175][ T9612] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #13: comm syz.7.1341: corrupted inode contents [ 236.038503][ T974] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 236.078834][ T9612] EXT4-fs error (device loop7): ext4_dirty_inode:6538: inode #13: comm syz.7.1341: mark_inode_dirty error [ 236.100671][ T974] mceusb 7-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 236.118525][ T974] mceusb 7-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 236.127787][ T9612] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #13: comm syz.7.1341: corrupted inode contents [ 236.148239][ T974] usb 7-1: USB disconnect, device number 7 [ 236.156754][ T9612] EXT4-fs error (device loop7): __ext4_ext_dirty:206: inode #13: comm syz.7.1341: mark_inode_dirty error [ 236.186805][ T9612] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #13: comm syz.7.1341: corrupted inode contents [ 236.216153][ T9612] EXT4-fs error (device loop7) in ext4_orphan_del:305: Corrupt filesystem [ 236.256354][ T9612] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #13: comm syz.7.1341: corrupted inode contents [ 236.292351][ T9612] EXT4-fs error (device loop7): ext4_truncate:4666: inode #13: comm syz.7.1341: mark_inode_dirty error [ 236.313581][ T9612] EXT4-fs error (device loop7) in ext4_process_orphan:347: Corrupt filesystem [ 236.336198][ T9612] EXT4-fs (loop7): 1 truncate cleaned up [ 236.344633][ T9612] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 236.533559][ T9612] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 236.578602][ T9645] EXT4-fs: Ignoring removed orlov option [ 236.614492][ T9648] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.1354'. [ 236.643959][ T9645] EXT4-fs: Remounting file system with no journal so ignoring journalled data option [ 236.699656][ T9645] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 236.776886][ T9645] EXT4-fs (loop7): warning: mounting fs with errors, running e2fsck is recommended [ 236.840208][ T9645] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 237.018677][ T8483] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 237.075200][ T9667] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 237.120950][ T9662] netlink: 44 bytes leftover after parsing attributes in process `syz.6.1361'. [ 237.265932][ T9669] loop7: detected capacity change from 0 to 1024 [ 237.534996][ T9681] loop4: detected capacity change from 0 to 16 [ 237.555166][ T36] hfsplus: b-tree write err: -5, ino 8 [ 237.567876][ T9681] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 238.019223][ T974] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 238.067831][ T9703] befs: (nullb0): No write support. Marking filesystem read-only [ 238.088531][ T9703] befs: (nullb0): invalid magic header [ 238.174270][ T9709] loop4: detected capacity change from 0 to 512 [ 238.181585][ T9709] EXT4-fs: Ignoring removed oldalloc option [ 238.195560][ T9709] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 238.218610][ T974] usb 8-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 238.234747][ T974] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.253459][ T9709] EXT4-fs error (device loop4): ext4_orphan_get:1392: comm syz.4.1384: inode #11: comm syz.4.1384: iget: illegal inode # [ 238.269163][ T974] usb 8-1: config 0 descriptor?? [ 238.279474][ T9714] loop6: detected capacity change from 0 to 128 [ 238.290057][ T974] cp210x 8-1:0.0: cp210x converter detected [ 238.296311][ T9709] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.1384: couldn't read orphan inode 11 (err -117) [ 238.322454][ T9709] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 238.359201][ T9714] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 238.377421][ T9714] ext4 filesystem being mounted at /169/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 238.408556][ T9714] EXT4-fs warning (device loop6): ext4_dirblock_csum_verify:375: inode #2: comm syz.6.1385: No space for directory leaf checksum. Please run e2fsck -D. [ 238.427248][ T9709] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 213 vs 220 free clusters [ 238.463858][ T9721] EXT4-fs warning (device loop6): ext4_dirblock_csum_verify:375: inode #2: comm syz.6.1385: No space for directory leaf checksum. Please run e2fsck -D. [ 238.492504][ T9723] Context (ID=0x1) not attached to queue pair (handle=0x0:0x2) [ 238.517460][ T9714] EXT4-fs error (device loop6): htree_dirblock_to_tree:1051: inode #2: comm syz.6.1385: Directory block failed checksum [ 238.531737][ T9721] EXT4-fs error (device loop6): __ext4_find_entry:1626: inode #2: comm syz.6.1385: checksumming directory block 0 [ 238.672192][ T5857] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 238.715281][ T974] cp210x 8-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 238.729378][ T6968] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 238.770625][ T974] usb 8-1: cp210x converter now attached to ttyUSB0 [ 238.838911][ T9735] netlink: 140 bytes leftover after parsing attributes in process `syz.4.1395'. [ 238.959447][ T974] usb 8-1: USB disconnect, device number 4 [ 238.989616][ T974] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 238.997708][ T9743] loop1: detected capacity change from 0 to 512 [ 239.012037][ T974] cp210x 8-1:0.0: device disconnected [ 239.045713][ T9743] EXT4-fs (loop1): blocks per group (34) and clusters per group (32768) inconsistent [ 239.174883][ T9749] loop6: detected capacity change from 0 to 1024 [ 239.209452][ T9749] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 239.213781][ T9754] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1404'. [ 239.236479][ T9754] netlink: 34 bytes leftover after parsing attributes in process `syz.0.1404'. [ 239.256088][ T9749] ext4 filesystem being mounted at /172/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 239.333562][ T9749] EXT4-fs error (device loop6): ext4_map_blocks:814: inode #15: block 3: comm syz.6.1402: lblock 3 mapped to illegal pblock 3 (length 1) [ 239.381724][ T9749] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 117 [ 239.409497][ T9749] EXT4-fs (loop6): This should not happen!! Data will be lost [ 239.409497][ T9749] [ 239.436039][ T9762] loop1: detected capacity change from 0 to 256 [ 239.461239][ T9761] EXT4-fs error (device loop6): ext4_map_blocks:814: inode #15: comm syz.6.1402: lblock 0 mapped to illegal pblock 0 (length 3) [ 239.509333][ T9761] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 3 with error 117 [ 239.552406][ T9761] EXT4-fs (loop6): This should not happen!! Data will be lost [ 239.552406][ T9761] [ 239.636169][ T9766] block nbd0: Dead connection, failed to find a fallback [ 239.666079][ T9766] block nbd0: shutting down sockets [ 239.701502][ T9766] blk_print_req_error: 5 callbacks suppressed [ 239.701525][ T9766] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 239.729966][ T13] EXT4-fs error (device loop6): ext4_map_blocks:814: inode #15: block 4: comm kworker/u8:1: lblock 4 mapped to illegal pblock 4 (length 2) [ 239.738114][ T9766] buffer_io_error: 5 callbacks suppressed [ 239.738185][ T9766] Buffer I/O error on dev nbd0, logical block 0, async page read [ 239.777756][ T13] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 2 with error 117 [ 239.799135][ T13] EXT4-fs (loop6): This should not happen!! Data will be lost [ 239.799135][ T13] [ 239.826751][ T13] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 239.853065][ T13] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 28 [ 239.865673][ T13] EXT4-fs (loop6): This should not happen!! Data will be lost [ 239.865673][ T13] [ 239.875612][ T13] EXT4-fs (loop6): Total free blocks count 0 [ 239.882143][ T9766] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 239.898381][ T9766] Buffer I/O error on dev nbd0, logical block 1, async page read [ 239.907990][ T5955] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 239.926045][ T9766] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 239.936530][ T9766] Buffer I/O error on dev nbd0, logical block 2, async page read [ 239.954766][ T9766] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 239.965545][ T9766] Buffer I/O error on dev nbd0, logical block 3, async page read [ 239.976926][ T9766] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 239.988112][ T9766] Buffer I/O error on dev nbd0, logical block 0, async page read [ 239.996024][ T9766] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 240.005312][ T9766] Buffer I/O error on dev nbd0, logical block 1, async page read [ 240.024888][ T9766] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 240.039960][ T9766] Buffer I/O error on dev nbd0, logical block 2, async page read [ 240.054916][ T9766] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 240.057954][ T5955] usb 4-1: Using ep0 maxpacket: 32 [ 240.068766][ T9766] Buffer I/O error on dev nbd0, logical block 3, async page read [ 240.072326][ T5955] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 240.087860][ T9766] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 240.101353][ T5955] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 240.121206][ T9766] Buffer I/O error on dev nbd0, logical block 0, async page read [ 240.122758][ T5955] usb 4-1: config 0 interface 0 has no altsetting 0 [ 240.141583][ T9766] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 240.176357][ T5955] usb 4-1: New USB device found, idVendor=1044, idProduct=7a4d, bcdDevice= 0.00 [ 240.176461][ T9766] Buffer I/O error on dev nbd0, logical block 1, async page read [ 240.185822][ T5955] usb 4-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0 [ 240.204007][ T9766] ldm_validate_partition_table(): Disk read failed. [ 240.222930][ T9766] Dev nbd0: unable to read RDB block 0 [ 240.230992][ T5955] usb 4-1: Product: syz [ 240.236440][ T9766] nbd0: unable to read partition table [ 240.248568][ T5955] usb 4-1: config 0 descriptor?? [ 240.586312][ T9789] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 240.656503][ T9795] netlink: 108 bytes leftover after parsing attributes in process `syz.7.1420'. [ 240.677229][ T5955] hid (null): unknown global tag 0xe [ 240.699892][ T5955] waterforce 0003:1044:7A4D.000A: unknown global tag 0xe [ 240.714087][ T5955] waterforce 0003:1044:7A4D.000A: item 0 2 1 14 parsing failed [ 240.724356][ T5955] waterforce 0003:1044:7A4D.000A: hid parse failed with -22 [ 240.738780][ T5955] waterforce 0003:1044:7A4D.000A: probe with driver waterforce failed with error -22 [ 240.757911][ T9796] loop1: detected capacity change from 0 to 2048 [ 240.764540][ T9790] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 240.820674][ T9796] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 240.833628][ T9798] syzkaller1: tun_chr_ioctl cmd 1074025675 [ 240.843556][ T9798] syzkaller1: persist disabled [ 240.851719][ T9796] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 240.901854][ T5955] usb 4-1: USB disconnect, device number 15 [ 240.906987][ T9796] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 241.285256][ T9816] loop4: detected capacity change from 0 to 1024 [ 241.369358][ T9815] block nbd7: shutting down sockets [ 241.566277][ T9822] 9pnet: p9_errstr2errno: server reported unknown error 000 [ 241.621814][ T9826] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 241.940581][ T9835] vcan0: tx drop: invalid da for name 0x0000000000000002 [ 242.273136][ T9812] loop1: detected capacity change from 0 to 32768 [ 242.285874][ T9813] loop6: detected capacity change from 0 to 32768 [ 242.332498][ T9812] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1428 (9812) [ 242.417066][ T9812] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 242.451473][ T9812] BTRFS info (device loop1): using sha256 (sha256-lib) checksum algorithm [ 242.484865][ T9812] BTRFS info (device loop1): using free-space-tree [ 242.582662][ T9848] loop7: detected capacity change from 0 to 1024 [ 242.742687][ T9848] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 242.939146][ T9873] loop3: detected capacity change from 0 to 256 [ 242.972690][ T9873] exfat: Deprecated parameter 'namecase' [ 243.017774][ T8483] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 243.058720][ T9873] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 243.083519][ T5858] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 243.751884][ T9846] loop4: detected capacity change from 0 to 32768 [ 243.832285][ T9885] loop6: detected capacity change from 0 to 4096 [ 243.849790][ T9846] ocfs2: Slot 0 on device (7,4) was already allocated to this node! [ 243.920632][ T9846] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 244.026799][ T9846] ocfs2: Unmounting device (7,4) on (node local) [ 244.346291][ T12] ntfs3(loop6): ino=5, mi_enum_attr [ 244.968260][ T5955] kernel read not supported for file /dsp1 (pid: 5955 comm: kworker/1:4) [ 245.396056][ T9942] [U] [ 245.399503][ T9942] [U] [ 245.402208][ T9942] [U] [ 245.404908][ T9942] [U] [ 245.443616][ T9942] [U] [ 245.446378][ T9942] [U] [ 245.449084][ T9942] [U] [ 245.451793][ T9942] [U] [ 245.465742][ T9942] [U] [ 245.468493][ T9942] [U] [ 245.471196][ T9942] [U] [ 245.473897][ T9942] [U] [ 245.493761][ T9942] [U] [ 245.496513][ T9942] [U] [ 245.499216][ T9942] [U] [ 245.501922][ T9942] [U] [ 245.539503][ T9940] [U] [ 245.587610][ T9913] loop1: detected capacity change from 0 to 40427 [ 245.634802][ T9913] F2FS-fs (loop1): build fault injection rate: 771 [ 245.675077][ T9913] F2FS-fs (loop1): invalid crc value [ 245.739301][ T9953] loop4: detected capacity change from 0 to 128 [ 245.766266][ T9955] loop3: detected capacity change from 0 to 64 [ 245.915098][ T5972] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 245.943129][ T9913] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 245.965391][ T9913] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 246.074985][ T5972] usb 8-1: Using ep0 maxpacket: 32 [ 246.102362][ T5972] usb 8-1: config 0 has an invalid interface number: 51 but max is 0 [ 246.121142][ T5972] usb 8-1: config 0 has no interface number 0 [ 246.151271][ T5972] usb 8-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 246.180028][ T5972] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.196500][ T5858] syz-executor: attempt to access beyond end of device [ 246.196500][ T5858] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 246.198402][ T5972] usb 8-1: Product: syz [ 246.223669][ T9933] loop6: detected capacity change from 0 to 32768 [ 246.226471][ T5858] CPU: 1 UID: 0 PID: 5858 Comm: syz-executor Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT(full) [ 246.226504][ T5858] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 246.226519][ T5858] Call Trace: [ 246.226530][ T5858] [ 246.226540][ T5858] dump_stack_lvl+0x189/0x250 [ 246.226582][ T5858] ? __pfx_dump_stack_lvl+0x10/0x10 [ 246.226614][ T5858] ? __pfx_queue_work_on+0x10/0x10 [ 246.226639][ T5858] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 246.226672][ T5858] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 246.226722][ T5858] f2fs_handle_critical_error+0x37c/0x540 [ 246.226769][ T5858] f2fs_write_end_io+0x886/0xb60 [ 246.226821][ T5858] __submit_merged_bio+0x27a/0x6a0 [ 246.226866][ T5858] __submit_merged_write_cond+0x255/0x530 [ 246.226913][ T5858] f2fs_write_data_pages+0x261d/0x3000 [ 246.227003][ T5858] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 246.227061][ T5858] ? srso_alias_return_thunk+0x5/0xfbef5 [ 246.227089][ T5858] ? kernel_text_address+0xa5/0xe0 [ 246.227168][ T5858] ? srso_alias_return_thunk+0x5/0xfbef5 [ 246.227196][ T5858] ? stack_depot_save_flags+0x40/0x860 [ 246.227261][ T5858] ? srso_alias_return_thunk+0x5/0xfbef5 [ 246.227289][ T5858] ? __lock_acquire+0xab9/0xd20 [ 246.227339][ T5858] ? srso_alias_return_thunk+0x5/0xfbef5 [ 246.227373][ T5858] ? do_raw_spin_lock+0x121/0x290 [ 246.227412][ T5858] ? srso_alias_return_thunk+0x5/0xfbef5 [ 246.227446][ T5858] ? srso_alias_return_thunk+0x5/0xfbef5 [ 246.227473][ T5858] ? do_raw_spin_unlock+0x122/0x240 [ 246.227506][ T5858] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 246.227547][ T5858] do_writepages+0x32e/0x550 [ 246.227590][ T5858] ? srso_alias_return_thunk+0x5/0xfbef5 [ 246.227624][ T5858] ? srso_alias_return_thunk+0x5/0xfbef5 [ 246.227652][ T5858] ? do_raw_spin_unlock+0x122/0x240 [ 246.227690][ T5858] filemap_fdatawrite+0x199/0x240 [ 246.227727][ T5858] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 246.227824][ T5858] ? srso_alias_return_thunk+0x5/0xfbef5 [ 246.227859][ T5858] ? do_raw_spin_unlock+0x122/0x240 [ 246.227898][ T5858] f2fs_sync_dirty_inodes+0x31f/0x830 [ 246.227947][ T5858] f2fs_write_checkpoint+0x95a/0x1df0 [ 246.228008][ T5858] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 246.228095][ T5858] ? f2fs_stop_gc_thread+0x7f/0xb0 [ 246.228119][ T5858] ? srso_alias_return_thunk+0x5/0xfbef5 [ 246.228147][ T5858] ? kfree+0x18e/0x440 [ 246.228181][ T5858] ? kill_f2fs_super+0x298/0x6c0 [ 246.228214][ T5858] kill_f2fs_super+0x2c3/0x6c0 [ 246.228249][ T5858] ? __pfx_kill_f2fs_super+0x10/0x10 [ 246.228272][ T5858] ? radix_tree_delete_item+0x2b6/0x400 [ 246.228316][ T5858] ? srso_alias_return_thunk+0x5/0xfbef5 [ 246.228343][ T5858] ? shrinker_free+0x2ce/0x3e0 [ 246.228381][ T5858] deactivate_locked_super+0xbc/0x130 [ 246.228416][ T5858] cleanup_mnt+0x425/0x4c0 [ 246.228444][ T5858] ? srso_alias_return_thunk+0x5/0xfbef5 [ 246.228472][ T5858] ? lockdep_hardirqs_on+0x9c/0x150 [ 246.228511][ T5858] task_work_run+0x1d4/0x260 [ 246.228551][ T5858] ? __pfx_task_work_run+0x10/0x10 [ 246.228582][ T5858] ? __x64_sys_umount+0x122/0x160 [ 246.228625][ T5858] ? exit_to_user_mode_loop+0x40/0x110 [ 246.228668][ T5858] exit_to_user_mode_loop+0xec/0x110 [ 246.228706][ T5858] do_syscall_64+0x2bd/0x3b0 [ 246.228740][ T5858] ? lockdep_hardirqs_on+0x9c/0x150 [ 246.228774][ T5858] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 246.228797][ T5858] ? srso_alias_return_thunk+0x5/0xfbef5 [ 246.228825][ T5858] ? exc_page_fault+0x9f/0xf0 [ 246.228862][ T5858] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 246.228886][ T5858] RIP: 0033:0x7f9fe018ff17 [ 246.228908][ T5858] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 246.228929][ T5858] RSP: 002b:00007ffdcc28e3e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 246.228954][ T5858] RAX: 0000000000000000 RBX: 00007f9fe0211c05 RCX: 00007f9fe018ff17 [ 246.228972][ T5858] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffdcc28e4a0 [ 246.228987][ T5858] RBP: 00007ffdcc28e4a0 R08: 0000000000000000 R09: 0000000000000000 [ 246.229003][ T5858] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffdcc28f530 [ 246.229021][ T5858] R13: 00007f9fe0211c05 R14: 000000000003c167 R15: 00007ffdcc28f570 [ 246.229064][ T5858] [ 246.229074][ T5858] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 246.281556][ T9962] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 246.289400][ T5972] usb 8-1: Manufacturer: syz [ 246.588127][ T9933] XFS (loop6): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 246.657205][ T9972] input: syz0 as /devices/virtual/input/input20 [ 246.715612][ T5972] usb 8-1: SerialNumber: syz [ 246.723216][ T5972] usb 8-1: config 0 descriptor?? [ 246.735784][ T5972] quatech2 8-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 246.794913][ T9933] XFS (loop6): Ending clean mount [ 246.918182][ T9979] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1493'. [ 246.948437][ T6968] XFS (loop6): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 246.950473][ T5972] usb 8-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 247.032268][ T5972] usb 8-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 247.386612][ T9989] tipc: Started in network mode [ 247.391568][ T9989] tipc: Node identity ac14140f, cluster identity 4711 [ 247.449712][ T9989] tipc: New replicast peer: 255.255.255.255 [ 247.482949][ C1] usb 8-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 247.484552][ T974] usb 8-1: USB disconnect, device number 5 [ 247.491409][ T9989] tipc: Enabled bearer , priority 10 [ 247.518691][ T974] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 247.578365][ T9997] netlink: 'syz.6.1496': attribute type 3 has an invalid length. [ 247.599704][ T974] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 247.636209][ T974] quatech2 8-1:0.51: device disconnected [ 247.721975][T10003] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1503'. [ 247.779519][T10000] loop3: detected capacity change from 0 to 4096 [ 247.819473][T10009] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 247.923971][ T5952] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 248.124447][ T5952] usb 2-1: Using ep0 maxpacket: 32 [ 248.134167][T10022] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1511'. [ 248.141361][ T5952] usb 2-1: config 0 has an invalid interface number: 85 but max is 0 [ 248.182482][ T5952] usb 2-1: config 0 has no interface number 0 [ 248.196755][ T5952] usb 2-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 248.210232][ T5952] usb 2-1: config 0 interface 85 has no altsetting 0 [ 248.222293][ T5952] usb 2-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 248.237330][ T5952] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.257411][T10022] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1511'. [ 248.276788][ T5952] usb 2-1: Product: syz [ 248.280956][ T5952] usb 2-1: Manufacturer: syz [ 248.321138][ T5952] usb 2-1: SerialNumber: syz [ 248.353363][ T5952] usb 2-1: config 0 descriptor?? [ 248.612678][ T5972] tipc: Node number set to 2886997007 [ 248.716392][ T5922] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 248.773155][T10021] loop3: detected capacity change from 0 to 32768 [ 248.782610][T10021] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1509 (10021) [ 248.800479][T10021] BTRFS info (device loop3): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 248.813606][T10021] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 248.823105][T10021] BTRFS info (device loop3): using free-space-tree [ 248.885913][ T5922] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 248.896612][ T5929] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 248.904577][ T5922] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 248.918975][ T5922] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 248.933648][ T5922] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 248.941824][ T5922] usb 5-1: SerialNumber: syz [ 248.982955][ T5952] appletouch 2-1:0.85: Geyser mode initialized. [ 249.005394][ T5952] input: appletouch as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.85/input/input21 [ 249.067443][ T5929] usb 1-1: Using ep0 maxpacket: 16 [ 249.078589][ T5929] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 249.092517][ T5929] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 249.092546][ T5867] BTRFS info (device loop3): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 249.120789][ T5929] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 249.130634][ T5929] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 249.146516][ T5929] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 249.174314][ T5922] usb 5-1: 0:2 : does not exist [ 249.179293][ T5922] usb 5-1: unit 255 not found! [ 249.197624][ T5929] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 249.216865][ T5929] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 249.234654][ T5929] usb 1-1: Manufacturer: syz [ 249.239723][ T5922] usb 5-1: USB disconnect, device number 17 [ 249.249705][ T5929] usb 1-1: config 0 descriptor?? [ 249.251110][ T43] usb 2-1: USB disconnect, device number 10 [ 249.347949][ T43] appletouch 2-1:0.85: input: appletouch disconnected [ 249.411414][T10056] netlink: 'syz.7.1522': attribute type 1 has an invalid length. [ 249.422578][T10056] netlink: 224 bytes leftover after parsing attributes in process `syz.7.1522'. [ 249.645896][ T5929] rc_core: IR keymap rc-hauppauge not found [ 249.651909][ T5929] Registered IR keymap rc-empty [ 249.657153][ T5929] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 249.683232][ T5929] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 249.704037][ T5929] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 249.734967][ T5929] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input22 [ 249.758027][ T5929] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 249.788493][T10067] loop3: detected capacity change from 0 to 512 [ 249.813456][ T5929] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 249.825313][T10067] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 249.844496][ T5929] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 249.873413][ T5929] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 249.912276][T10067] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 249.933383][ T5929] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 249.940808][T10067] ext4 filesystem being mounted at /260/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 249.953045][ T5929] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 249.980310][ T5929] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 250.003380][ T5929] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 250.028100][ T30] audit: type=1800 audit(1754872186.393:60): pid=10067 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1524" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 250.053295][ T5929] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 250.076105][ T5929] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 250.124770][ T5929] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 250.153465][ T5929] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 250.182615][ T5929] usb 1-1: USB disconnect, device number 12 [ 250.235189][ T5863] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 250.242355][ T5856] Bluetooth: hci6: command 0x1003 tx timeout [ 250.257299][ T5867] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 250.375919][T10080] nbd1: detected capacity change from 0 to 127 [ 250.424388][ T5856] block nbd1: Receive control failed (result -32) [ 250.609269][T10072] loop4: detected capacity change from 0 to 40427 [ 250.658331][T10085] loop3: detected capacity change from 0 to 2048 [ 250.666162][T10087] tun0: tun_chr_ioctl cmd 1074025677 [ 250.676465][T10093] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1533'. [ 250.688233][T10093] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1533'. [ 250.691590][T10087] tun0: linktype set to 779 [ 250.734919][T10095] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 250.857613][T10072] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 250.883006][T10072] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 250.972937][T10099] loop1: detected capacity change from 0 to 512 [ 250.980387][T10099] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 251.033603][ T5857] syz-executor: attempt to access beyond end of device [ 251.033603][ T5857] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 251.097112][ T5857] CPU: 1 UID: 0 PID: 5857 Comm: syz-executor Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT(full) [ 251.097151][ T5857] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 251.097167][ T5857] Call Trace: [ 251.097176][ T5857] [ 251.097187][ T5857] dump_stack_lvl+0x189/0x250 [ 251.097229][ T5857] ? __pfx_dump_stack_lvl+0x10/0x10 [ 251.097260][ T5857] ? __pfx_queue_work_on+0x10/0x10 [ 251.097286][ T5857] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 251.097320][ T5857] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 251.097367][ T5857] f2fs_handle_critical_error+0x37c/0x540 [ 251.097419][ T5857] f2fs_write_end_io+0x886/0xb60 [ 251.097465][ T5857] __submit_merged_bio+0x27a/0x6a0 [ 251.097508][ T5857] __submit_merged_write_cond+0x255/0x530 [ 251.097551][ T5857] f2fs_write_data_pages+0x261d/0x3000 [ 251.097624][ T5857] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 251.097706][ T5857] ? __mod_zone_page_state+0xd7/0x140 [ 251.097751][ T5857] ? srso_alias_return_thunk+0x5/0xfbef5 [ 251.097777][ T5857] ? folios_put_refs+0x560/0x640 [ 251.097817][ T5857] ? srso_alias_return_thunk+0x5/0xfbef5 [ 251.097842][ T5857] ? __lock_acquire+0xab9/0xd20 [ 251.097886][ T5857] ? srso_alias_return_thunk+0x5/0xfbef5 [ 251.097912][ T5857] ? do_raw_spin_lock+0x121/0x290 [ 251.097947][ T5857] ? srso_alias_return_thunk+0x5/0xfbef5 [ 251.097978][ T5857] ? srso_alias_return_thunk+0x5/0xfbef5 [ 251.098005][ T5857] ? do_raw_spin_unlock+0x122/0x240 [ 251.098037][ T5857] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 251.098077][ T5857] do_writepages+0x32e/0x550 [ 251.098116][ T5857] ? srso_alias_return_thunk+0x5/0xfbef5 [ 251.098148][ T5857] ? srso_alias_return_thunk+0x5/0xfbef5 [ 251.098174][ T5857] ? do_raw_spin_unlock+0x122/0x240 [ 251.098208][ T5857] filemap_fdatawrite+0x199/0x240 [ 251.098243][ T5857] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 251.098327][ T5857] ? srso_alias_return_thunk+0x5/0xfbef5 [ 251.098360][ T5857] ? do_raw_spin_unlock+0x122/0x240 [ 251.098403][ T5857] f2fs_sync_dirty_inodes+0x31f/0x830 [ 251.098446][ T5857] f2fs_write_checkpoint+0x95a/0x1df0 [ 251.098499][ T5857] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 251.098580][ T5857] ? kill_f2fs_super+0x298/0x6c0 [ 251.098612][ T5857] kill_f2fs_super+0x2c3/0x6c0 [ 251.098644][ T5857] ? __pfx_kill_f2fs_super+0x10/0x10 [ 251.098667][ T5857] ? radix_tree_delete_item+0x2b6/0x400 [ 251.098708][ T5857] ? srso_alias_return_thunk+0x5/0xfbef5 [ 251.098736][ T5857] ? shrinker_free+0x2ce/0x3e0 [ 251.098768][ T5857] deactivate_locked_super+0xbc/0x130 [ 251.098801][ T5857] cleanup_mnt+0x425/0x4c0 [ 251.098828][ T5857] ? srso_alias_return_thunk+0x5/0xfbef5 [ 251.098856][ T5857] ? lockdep_hardirqs_on+0x9c/0x150 [ 251.098894][ T5857] task_work_run+0x1d4/0x260 [ 251.098932][ T5857] ? __pfx_task_work_run+0x10/0x10 [ 251.098964][ T5857] ? __x64_sys_umount+0x122/0x160 [ 251.099004][ T5857] ? exit_to_user_mode_loop+0x40/0x110 [ 251.099047][ T5857] exit_to_user_mode_loop+0xec/0x110 [ 251.099084][ T5857] do_syscall_64+0x2bd/0x3b0 [ 251.099117][ T5857] ? lockdep_hardirqs_on+0x9c/0x150 [ 251.099151][ T5857] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 251.099175][ T5857] ? srso_alias_return_thunk+0x5/0xfbef5 [ 251.099202][ T5857] ? exc_page_fault+0x9f/0xf0 [ 251.099238][ T5857] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 251.099262][ T5857] RIP: 0033:0x7f15a358ff17 [ 251.099283][ T5857] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 251.099305][ T5857] RSP: 002b:00007ffcbe12e878 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 251.099331][ T5857] RAX: 0000000000000000 RBX: 00007f15a3611c05 RCX: 00007f15a358ff17 [ 251.099348][ T5857] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffcbe12e930 [ 251.099364][ T5857] RBP: 00007ffcbe12e930 R08: 0000000000000000 R09: 0000000000000000 [ 251.099385][ T5857] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffcbe12f9c0 [ 251.099402][ T5857] R13: 00007f15a3611c05 R14: 000000000003d48d R15: 00007ffcbe12fa00 [ 251.099440][ T5857] [ 251.099449][ T5857] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 251.770038][T10120] Bluetooth: hci6: Frame reassembly failed (-84) [ 251.802342][ T5972] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 251.812383][ T49] Bluetooth: hci6: Frame reassembly failed (-84) [ 251.973194][ T5972] usb 4-1: Using ep0 maxpacket: 32 [ 251.986645][ T5972] usb 4-1: config 0 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 252.001143][ T5972] usb 4-1: config 0 interface 0 has no altsetting 0 [ 252.008181][ T5972] usb 4-1: New USB device found, idVendor=6666, idProduct=8801, bcdDevice= 0.00 [ 252.018404][ T5972] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.077912][ T5972] usb 4-1: config 0 descriptor?? [ 252.251890][T10134] sock: sock_set_timeout: `syz.4.1539' (pid 10134) tries to set negative timeout [ 252.499555][ T5972] hid_parser_main: 74 callbacks suppressed [ 252.499582][ T5972] smartjoyplus 0003:6666:8801.000B: unknown main item tag 0x2 [ 252.557604][ T5972] smartjoyplus 0003:6666:8801.000B: hidraw0: USB HID vf.fe Device [HID 6666:8801] on usb-dummy_hcd.3-1/input0 [ 252.579716][ T5972] smartjoyplus 0003:6666:8801.000B: no output reports found [ 252.739247][ T5922] usb 4-1: USB disconnect, device number 16 [ 253.080268][T10155] loop1: detected capacity change from 0 to 512 [ 253.108478][T10155] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 253.161682][T10155] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e02c, mo2=0002] [ 253.261054][T10155] EXT4-fs (loop1): orphan cleanup on readonly fs [ 253.312682][T10155] EXT4-fs error (device loop1): ext4_orphan_get:1418: comm syz.1.1561: bad orphan inode 267 [ 253.347561][T10155] EXT4-fs (loop1): Remounting filesystem read-only [ 253.413342][T10155] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 253.473122][T10155] EXT4-fs warning (device loop1): dx_probe:861: inode #2: comm syz.1.1561: dx entry: limit 0 != root limit 125 [ 253.503923][T10155] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.1561: Corrupt directory, running e2fsck is recommended [ 253.531348][T10165] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1566'. [ 253.542133][T10167] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1565'. [ 253.568292][T10168] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 253.605173][ T5858] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 253.615129][T10168] bridge0: port 2(bridge_slave_1) entered disabled state [ 253.622856][T10168] bridge0: port 1(bridge_slave_0) entered disabled state [ 253.651750][T10168] bridge0: entered allmulticast mode [ 253.833171][ T5856] Bluetooth: hci6: Entering manufacturer mode failed (-110) [ 253.843855][ T5863] Bluetooth: hci6: command 0xfc11 tx timeout [ 253.967099][T10181] loop4: detected capacity change from 0 to 128 [ 254.021775][T10181] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 254.065137][T10181] ext4 filesystem being mounted at /262/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 254.104288][T10186] loop3: detected capacity change from 0 to 128 [ 254.333693][T10197] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 254.340561][T10197] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 254.383944][ T5857] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 254.405951][T10197] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 254.447042][T10197] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 254.471532][T10197] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 254.478167][T10197] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 254.521153][T10197] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffe,4) [ 254.569528][T10197] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 254.588504][T10197] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 254.598620][T10197] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 254.627781][T10197] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 254.649938][T10197] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 254.669459][T10197] comedi comedi3: 8255: I/O port conflict (0xffffffff80000089,4) [ 254.694267][T10197] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffd,4) [ 254.756418][T10218] loop4: detected capacity change from 0 to 16 [ 254.805214][T10218] erofs (device loop4): mounted with root inode @ nid 36. [ 254.964056][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 254.980663][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.074813][T10226] loop7: detected capacity change from 0 to 4096 [ 255.120633][T10226] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 255.215449][T10226] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 255.290588][ T5922] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 255.411560][ T8483] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 255.463771][ T5922] usb 5-1: Using ep0 maxpacket: 16 [ 255.501816][ T5922] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 255.520113][ T5922] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 255.550058][ T5922] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 360.457577][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 360.464595][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P6968/1:b..l [ 360.473369][ C0] rcu: (detected by 0, t=10502 jiffies, g=34837, q=246 ncpus=2) [ 360.481085][ C0] task:syz-executor state:R running task stack:18856 pid:6968 tgid:6968 ppid:6944 task_flags:0x400140 flags:0x00004000 [ 360.495677][ C0] Call Trace: [ 360.498951][ C0] [ 360.501876][ C0] __schedule+0x1798/0x4cc0 [ 360.506410][ C0] ? __lock_acquire+0xab9/0xd20 [ 360.511277][ C0] ? __pfx___schedule+0x10/0x10 [ 360.516134][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 360.521769][ C0] ? do_raw_spin_lock+0x121/0x290 [ 360.526801][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 360.532437][ C0] ? preempt_schedule+0xae/0xc0 [ 360.537297][ C0] preempt_schedule_common+0x83/0xd0 [ 360.542586][ C0] preempt_schedule+0xae/0xc0 [ 360.547270][ C0] ? __pfx_preempt_schedule+0x10/0x10 [ 360.552674][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 360.558328][ C0] ? copy_pmd_range+0x6890/0x71d0 [ 360.563362][ C0] preempt_schedule_thunk+0x16/0x30 [ 360.568580][ C0] _raw_spin_unlock+0x3f/0x50 [ 360.573262][ C0] copy_pmd_range+0x68c6/0x71d0 [ 360.578119][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 360.583779][ C0] ? stack_depot_save_flags+0x40/0x860 [ 360.589346][ C0] ? __pfx_copy_pmd_range+0x10/0x10 [ 360.594555][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 360.600193][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 360.605845][ C0] copy_page_range+0xc14/0x1270 [ 360.610710][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 360.616478][ C0] ? __lock_acquire+0xab9/0xd20 [ 360.621374][ C0] ? __pfx_copy_page_range+0x10/0x10 [ 360.626666][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 360.632323][ C0] ? up_write+0x1c4/0x420 [ 360.636653][ C0] ? __pfx_vma_interval_tree_augment_rotate+0x10/0x10 [ 360.643415][ C0] dup_mmap+0xf57/0x1ac0 [ 360.647696][ C0] ? __pfx_dup_mmap+0x10/0x10 [ 360.652395][ C0] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 360.658282][ C0] ? mm_init+0xcc3/0xef0 [ 360.662524][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 360.668160][ C0] copy_mm+0x13c/0x4b0 [ 360.672253][ C0] copy_process+0x1706/0x3c00 [ 360.676923][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 360.682576][ C0] ? copy_process+0x97f/0x3c00 [ 360.687350][ C0] ? __pfx_copy_process+0x10/0x10 [ 360.692368][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 360.698015][ C0] kernel_clone+0x21e/0x840 [ 360.702517][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 360.708146][ C0] ? css_rstat_updated+0x23a/0x4f0 [ 360.713270][ C0] ? __pfx_kernel_clone+0x10/0x10 [ 360.718317][ C0] __x64_sys_clone+0x18b/0x1e0 [ 360.723080][ C0] ? count_memcg_event_mm+0x21/0x260 [ 360.728378][ C0] ? __pfx___x64_sys_clone+0x10/0x10 [ 360.733683][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 360.739408][ C0] ? do_user_addr_fault+0xc8a/0x1390 [ 360.744715][ C0] ? do_syscall_64+0xbe/0x3b0 [ 360.749407][ C0] do_syscall_64+0xfa/0x3b0 [ 360.753930][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 360.759137][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 360.765197][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 360.770827][ C0] ? exc_page_fault+0x9f/0xf0 [ 360.775510][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 360.781399][ C0] RIP: 0033:0x7f49b9f85453 [ 360.785821][ C0] RSP: 002b:00007ffdccd2ca08 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 360.794231][ C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f49b9f85453 [ 360.802205][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 360.810170][ C0] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000001 [ 360.818142][ C0] R10: 000055555e56e7d0 R11: 0000000000000246 R12: 0000000000000000 [ 360.826113][ C0] R13: 00000000000927c0 R14: 000000000003e5ee R15: 00007ffdccd2cba0 [ 360.834107][ C0] [ 360.837117][ C0] rcu: rcu_preempt kthread timer wakeup didn't happen for 10501 jiffies! g34837 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 [ 360.849436][ C0] rcu: Possible timer handling issue on cpu=1 timer-softirq=17561 [ 360.857324][ C0] rcu: rcu_preempt kthread starved for 10502 jiffies! g34837 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=1 [ 360.868694][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 360.878664][ C0] rcu: RCU grace-period kthread stack dump: [ 360.884548][ C0] task:rcu_preempt state:I stack:27160 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00004000 [ 360.896494][ C0] Call Trace: [ 360.899769][ C0] [ 360.902699][ C0] __schedule+0x1798/0x4cc0 [ 360.907234][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 360.912879][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 360.918516][ C0] ? __lock_acquire+0xab9/0xd20 [ 360.923384][ C0] ? __pfx___schedule+0x10/0x10 [ 360.928255][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 360.933896][ C0] ? schedule+0x91/0x360 [ 360.938150][ C0] schedule+0x165/0x360 [ 360.942318][ C0] schedule_timeout+0x12b/0x270 [ 360.947170][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 360.952547][ C0] ? __pfx_process_timeout+0x10/0x10 [ 360.957843][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 360.963477][ C0] ? prepare_to_swait_event+0x341/0x380 [ 360.969032][ C0] rcu_gp_fqs_loop+0x301/0x1540 [ 360.973913][ C0] ? __pfx_rcu_gp_init+0x10/0x10 [ 360.978948][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 360.984172][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 360.989512][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 360.994725][ C0] ? finish_swait+0xcd/0x1f0 [ 360.999328][ C0] rcu_gp_kthread+0x99/0x390 [ 361.003940][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 361.009146][ C0] ? __kthread_parkme+0x7b/0x200 [ 361.014085][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 361.019716][ C0] ? __kthread_parkme+0x1a1/0x200 [ 361.024743][ C0] kthread+0x711/0x8a0 [ 361.028823][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 361.034031][ C0] ? __pfx_kthread+0x10/0x10 [ 361.038707][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 361.044340][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 361.049537][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 361.055167][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 361.060374][ C0] ? __pfx_kthread+0x10/0x10 [ 361.064967][ C0] ret_from_fork+0x3fc/0x770 [ 361.069557][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 361.074758][ C0] ? __switch_to_asm+0x39/0x70 [ 361.079528][ C0] ? __switch_to_asm+0x33/0x70 [ 361.084296][ C0] ? __pfx_kthread+0x10/0x10 [ 361.088890][ C0] ret_from_fork_asm+0x1a/0x30 [ 361.093677][ C0] [ 361.096685][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 361.102990][ C0] Sending NMI from CPU 0 to CPUs 1: [ 361.108188][ C1] NMI backtrace for cpu 1 [ 361.108205][ C1] CPU: 1 UID: 0 PID: 10246 Comm: syz.0.1600 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT(full) [ 361.108235][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 361.108249][ C1] RIP: 0010:lock_is_held_type+0xaa/0x190 [ 361.108284][ C1] Code: 41 83 bd e8 0a 00 00 00 7e 48 4c 89 eb 48 81 c3 f0 0a 00 00 45 31 ff 49 83 ff 31 73 24 48 89 df 4c 89 f6 e8 78 02 00 00 85 c0 <75> 2a 49 ff c7 49 63 85 e8 0a 00 00 48 83 c3 28 49 39 c7 7c d8 eb [ 361.108302][ C1] RSP: 0018:ffffc90000a08c28 EFLAGS: 00000046 [ 361.108321][ C1] RAX: 0000000000000000 RBX: ffff88802ddae568 RCX: 1035520f3ac27500 [ 361.108337][ C1] RDX: ffff88802ddada00 RSI: ffff88802a2db300 RDI: ffff88802ddae568 [ 361.108354][ C1] RBP: 00000000ffffffff R08: 0000000000000003 R09: 0000000000000004 [ 361.108368][ C1] R10: dffffc0000000000 R11: fffff5200014117c R12: 0000000000000046 [ 361.108383][ C1] R13: ffff88802ddada00 R14: ffff88802a2db300 R15: 0000000000000003 [ 361.108401][ C1] FS: 0000000000000000(0000) GS:ffff888125d1c000(0000) knlGS:0000000000000000 [ 361.108419][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 361.108434][ C1] CR2: 0000001b32922ff8 CR3: 000000000df36000 CR4: 0000000000350ef0 [ 361.108450][ C1] Call Trace: [ 361.108461][ C1] [ 361.108473][ C1] advance_sched+0x160/0xc90 [ 361.108510][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 361.108537][ C1] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 361.108564][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 361.108597][ C1] ? __pfx_advance_sched+0x10/0x10 [ 361.108630][ C1] __hrtimer_run_queues+0x52c/0xc60 [ 361.108653][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 361.108688][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 361.108708][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 361.108734][ C1] ? rcu_is_watching+0x15/0xb0 [ 361.108759][ C1] hrtimer_interrupt+0x45b/0xaa0 [ 361.108796][ C1] __sysvec_apic_timer_interrupt+0x10b/0x410 [ 361.108825][ C1] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 361.108854][ C1] [ 361.108861][ C1] [ 361.108870][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 361.108893][ C1] RIP: 0010:page_table_check_clear+0x471/0x700 [ 361.108925][ C1] Code: 8c 05 ff ff ff 4c 89 f7 e8 4c d1 f4 ff e9 f8 fe ff ff e8 42 64 91 ff 4c 8b 74 24 08 eb 05 e8 36 64 91 ff e8 61 f7 4a 09 89 c3 <31> ff 89 c6 e8 66 68 91 ff 85 db 74 10 e8 ed 15 78 ff 84 c0 74 0e [ 361.108943][ C1] RSP: 0018:ffffc900051cf350 EFLAGS: 00000246 [ 361.108961][ C1] RAX: 0000000000000001 RBX: 0000000000000001 RCX: ffff88802ddada00 [ 361.108976][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000001 [ 361.108988][ C1] RBP: ffff88801d925160 R08: ffff88801d92515f R09: 1ffff11003b24a2b [ 361.109005][ C1] R10: dffffc0000000000 R11: ffffed1003b24a2c R12: 0000000000000000 [ 361.109020][ C1] R13: 0000000000000001 R14: ffffffff822e4497 R15: ffff88801d925158 [ 361.109037][ C1] ? page_table_check_clear+0x187/0x700 [ 361.109076][ C1] ? page_table_check_clear+0x187/0x700 [ 361.109108][ C1] unmap_page_range+0x3445/0x4370 [ 361.109131][ C1] ? ktime_get+0x3e/0x1f0 [ 361.109169][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 361.109205][ C1] ? __pfx_unmap_page_range+0x10/0x10 [ 361.109237][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 361.109261][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 361.109287][ C1] ? unmap_vmas+0x144/0x580 [ 361.109310][ C1] unmap_vmas+0x399/0x580 [ 361.109330][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 361.109360][ C1] ? __pfx_unmap_vmas+0x10/0x10 [ 361.109399][ C1] exit_mmap+0x248/0xb50 [ 361.109434][ C1] ? uprobe_clear_state+0x20f/0x290 [ 361.109461][ C1] ? __pfx_exit_mmap+0x10/0x10 [ 361.109490][ C1] ? __mutex_unlock_slowpath+0x1a1/0x760 [ 361.109529][ C1] ? __pfx_exit_aio+0x10/0x10 [ 361.109565][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 361.109592][ C1] ? uprobe_clear_state+0x274/0x290 [ 361.109616][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 361.109644][ C1] __mmput+0x118/0x420 [ 361.109667][ C1] exit_mm+0x1da/0x2c0 [ 361.109696][ C1] ? __pfx_exit_mm+0x10/0x10 [ 361.109726][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 361.109750][ C1] ? rcu_is_watching+0x15/0xb0 [ 361.109773][ C1] do_exit+0x648/0x2300 [ 361.109804][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 361.109829][ C1] ? do_raw_spin_lock+0x121/0x290 [ 361.109858][ C1] ? __pfx_do_exit+0x10/0x10 [ 361.109895][ C1] do_group_exit+0x21c/0x2d0 [ 361.109923][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 361.109952][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 361.109983][ C1] get_signal+0x1286/0x1340 [ 361.110034][ C1] arch_do_signal_or_restart+0x9a/0x750 [ 361.110073][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 361.110116][ C1] ? exit_to_user_mode_loop+0x40/0x110 [ 361.110151][ C1] exit_to_user_mode_loop+0x75/0x110 [ 361.110183][ C1] do_syscall_64+0x2bd/0x3b0 [ 361.110220][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 361.110249][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 361.110270][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 361.110295][ C1] ? exc_page_fault+0x9f/0xf0 [ 361.110324][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 361.110346][ C1] RIP: 0033:0x7f265a98ebe9 [ 361.110363][ C1] Code: Unable to access opcode bytes at 0x7f265a98ebbf. [ 361.110374][ C1] RSP: 002b:00007f265b7960e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 361.110395][ C1] RAX: 0000000000000001 RBX: 00007f265abb5fa8 RCX: 00007f265a98ebe9 [ 361.110410][ C1] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f265abb5fac [ 361.110425][ C1] RBP: 00007f265abb5fa0 R08: 7fffffffffffffff R09: 0000000000000000 [ 361.110441][ C1] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 361.110455][ C1] R13: 00007f265abb6038 R14: 00007ffda0dbaa40 R15: 00007ffda0dbab28 [ 361.110481][ C1]