last executing test programs: 1m3.936328022s ago: executing program 1 (id=50): syz_mount_image$jfs(&(0x7f0000000400), &(0x7f0000000380)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x1c802, &(0x7f0000002740)=ANY=[], 0x3, 0x5f74, &(0x7f0000002040)="$eJzs3V1vHFf9B/DfPnj90H/TqPqrChEXbgqlpTTPCZSnplxwAUggoVyTyHWrQFpQEhCtLOLKF4gLHl4C3PSGi76RIvEKEC+ASDZXlaAMGvucZLxeex1i76x9Ph/JmfntmfGeydfj2fXM7AkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIL7z7R9e6ETEjV+kB05G/F/0IroR83W9GPXMtbx8PyJOxWZzPBcRvdmIev3Nf56JuBwRH5+IWN9YWaofvrjPflw5f+/Op9/91t9+/fu1Uz9+80cfDrf/4P8vffSb+xEnv//aR5/eP5htBwAAgFJUVVV10tv80+n9fbftTgEAE5GP/1WSH1er1Wr1gda/605Xf9SF1k3VaPebRUSsNtepXzM4HQ8AR8xqfNJ2F2iR/IvWj4in2u4EMNU6bXeAQ7G+sbLUSfl2mseDxa32/HfKbfmvdh7e37HbdJzha0wm9fO1Fr14dpf+zE+oD9Mk598dzv/GVvsgLXfY+U/KbvkPtm59Kk7Ovzec/5Bt+f8hIo5s/t2R+Zcq599/nPxXe0d4/5c/AAAAAADHX/77/8mWz//OPvmm7Mte538XJ9QHAAAAAAAAADhoTzr+30PG/wMAAICpVb9Xr/3xxKPHdvsstvrx652Ip4eWBwqTbpZZaLsfAAAAAAAAAAAAAFCS/tY1vNc7ETMR8fTCQlVV9VfTcP24nnT9o6707YeStf1LHgAAtnx8It3Lnwfg60TMRcT19Fl/MwsLC1U1N79QLVTzs/n17GB2rppvvK/N0/qx2cE+XhD3B1X9zeYa6zWNe788rn34+9XPNah6++jYZLQcOgDF2zoarTsiHTNV9Uy0/SqHo8H+f/zY/9mPtn9OAQAAgMNXVVXVSR/nfTqd8++23SkAYBLm8vF/+LyAWq1Wq9Xq41c3VaPdbxYRsdpcp37NYDh+ADhiVuOTtrtAi+RftH5EnGq7E8BU67TdAQ7F+sbKUifl22keD9L47vlakG35r3Y218vrj5qOM3yNyaR+vtaiF8/u0p/nJtSHaZLz7w7nf2OrfZCWO+z8J2W3/OvtPNlCf9qW8+8N5z/k+OTfHZl/qXL+/cfKvyd/AAAAAACYYvnv/yfLPf/by/1ZnFAfAAAAAAAAAOCgrW+sLOX7XvP5/8+OWK7TnHP/57GR8+/sO3/3/x4nOf/ucP5DF+T0GvMP3niU/z83VpY+vPePz+Tp1Oc/0xvUzz3T6fb66ZqfauatuBW3YznO71i+v639wo72mW3tF8e0X9rRPqjb53P72ViKn8btePNh++yYC6PmxrRXY9pz/j37f5Fy/v3GV53/QmrvDE1rDz7o7tjvm9NRz3Ptz/9+cefeNXlr0Xu4bU319p1poT+b/ydPDeLnd5fvnP3lzXv37lyINNn26MVIkwOW859JXzn/l17Yas+/95v764MPBo+d/7RYi/6u+b/QmK+39+UJ960NOf9B+sr55yPQ6P3/KOe/+/7/Sgv9AQAAAAAAAAAAAAAAgL1UVbV5i+i1iLia7v9p695MAGCifvu9NFMloVar1Wq1+tjWTdVorzeLmNu+ztWI+NWobwYATLP/RMTf2+4ErZF/wfLn/dXTz7XdGWCi7r73/k9u3r69fOdu2z0BAAAAAAAAAP5XefzPxcb4z5vXAQ2NG71t/Nc3YvHIjv/ZHfQ2xzpPG/R87D3+95nYe/zv/pjnmxnTPhjTPjumfW5M+8gbPRpy/s+njHP+p9OGlTT+60st9KdtOf8zaaznnP8XhpZr5l/96Sjn392W/7l77/zs3N333n/11js3315+e/ndC+evXr505fKlK1fOvXXr9vL5rX9b7PHhyvnnsa9dB1qWnH/OXP5lyfl/PtXyL0vO/8VUy78sOf/8ek/+Zcn55/c+8i9Lzv/lVMu/LDn/L6Za/mXJ+b+SavmXJef/pVTLvyw5/1dTLf+y5PzPplr+Zcn5n0u1/MuS889nuORflpx/vrJB/mXJ+V9MtfzLkvO/lGr5lyXnfznV8i9Lzv9KquVflpz/1VTLvyw5/y+nWv5lyfl/JdXyL0vO/7VUy78sOf+vplr+Zcn5fy3V8i9Lzv/rqZZ/WXL+30i1/MuS8/9mquVflpz/66mWf1keff6/mQnP/OsvEVPQDTOlzrz7172Wafs3EwAAAAAAAAAAAAAwbBJXGre9jQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/2UHDgQAAAAAgPxfG6GqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqoKO3AgAAAAAADk/9oIVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVdi7uxi5zvoM4Ge/7LUTiEtCCMGQteMEQzbeXX8lJhgcIDQNLU0DoaUNdYy9/gB/1buGJIqaTZO2QURqpPYivSgFRBFSWyVCSKVSiiIVqb1rrkC5Qa2UC0tNKhNBJaokW5057/vuzOzszPpj7Tnn/H5R/PfOnJl558yZ2X3WemYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmm34+PSfD2RZlv/f+GNdll2Z/31Ntif/cm7n5V4hAAAAcKHebPz5D1elE/Ys40JN2/zb+/7jB/Pz8/PZF18/89Zfzs+nM8aybGh1ljXOi/79V7+cb94meCIbHRhs+nqwx80P9Th/uMf5Iz3OX9Xj/NU9zh/tcf6iHbDImuL3MY0r29T467pil2bXZCON8zZ1uNQTA6sHB+PvchoGGpeZHzmYHcmOZtPZ5KLLDDT+y7IXNuS3dXcWb2uw6bbWZ1l29ueP7o9rGAj7eFPWcmMNzY/da3dmY6///NH935199d2dZs/dsGilWbZ5Y77OJ7Ns4ddV2UC2Ou2TuM7BpnWu77DOoZZ1DjQul/+9fZ1nl7nOeL9Hwzpf6rLO9eG0h27MsmwuW3Kbdk9kg9natltN+3u0OCLy68gfyndkw+d0nGxYxnGSX+aVG1uPk/ZjMu7/DWGfDC+xhuaH47XHVy3a7+d7nOT3uh+O1fy6781vdHS0+VerLcdqvs2jNy19DHR87DocA+lYbjoGNvY6BgZXDTWOgcGFNW9sOQamFl1mMBto3NaZm7ofAxOzx05OzDz8yK1Hju07NH1o+vjU5M7t23Zs37Zjx8TBI0enJ4s/z22XlsjabDAdgxvDa008Bt/ftm3zITn/rYv3PBjtk+dBft8/e3O+oCsHsyWO8XybJzdf+PMgfd9veh4MNz0POr6mdngeDC/jeZBvc3bz8r5nDjf932kNK/VauK7pGLic3w/z23zgA0u/Fq4P63rqg+f6/XBo0TEQ79ZAeO7lp6Sf90ZvD/tl8XFxfX7GFauy0zPTp7Y8tG929tRUFsYlcXXTY9V+vKxtuk/ZouNl8JyPlz1//8bN13c4fV3YV6O3dH+s8m22j3d/rBqv7q37c1VW7M+WU7dmYVxkl3p/dvpulu/PlCW67M98mydvvfCfBVMuaXr9G+n1+jc0Mly8/g2lvTHS8vq3+KEZaqwsy87eurzXv5Hw/6V+/bumT17/8n31wJbux0C+zVMT53oMDHd9/bsxzIGwng+ExDDalPvfapw/VxymTY9lz+NmeHgkHDfD8RZbj5ttiy6TX1t+25snz++42Xxj62PV8nNLBY+bfF/91WT34ybf5sWpC3/tWBP/2vTasarXMTAytCpf70g6CIrXu/k18RjYku3PTmRHswPpMvmjnN/W+NblHQOrwv+X+rXjuj45BvJ99ezW7sdAvs2Pt13cn502h1PSNk0/O7X/fmGpzH/98ML1te+2i53583V+4iefTqd1yhD5Nq9uP9ec0X0/3RJOuaLDfmp//ix1TB/ILs1+ui6s8+iO7r+byre5Zucyj6c9WZa9PPVy4/dd4fe73z/9kx+0/N630++UX556+Z6J+356LusHAOD8vdX4c25V8bNm079YL+ff/wEAAIBSiLl/MMxE/gcAAIDKiLl/KMxE/gcAAIDKiLl/OMykJvn/8O27nnvzsSy9G+B8EM+Pu+HejxTbxY73XPh6bH5BfvrHvjPy3NceW95tD2ZZ9sY97+m4/eGPxHUVTsZ1fqj19EWuu2FZt//g/QvbNb9/wtldxfXH+7PcwyB2lV+Y2Nq43rGHpxrzxXuyxrxv7qkniusvvo7bn9lWbP834U1L9hwcaLn85rCeTWGOhfeUuXfPwn7IZ7zcc+vf969Xf27h9uLlBja+vXE3n/3j4nrje0Q9c3WxfbzfS63/X77+vefy7R+6qfP6HxvsvP4z4XpfCfNXu4vtm/f515rW/6dh/fH24uW2fPtHHdf//LuK7Z8Px8U3w2xf/51/8d43Oz1e8Xb23FFcLt7+5P9ub1wuXl+8/vb1jz421bI/2q//xdeL69n9lV8MNW8fT4+3Ez14R+vxPRAe35YeeZZl3/uzrGU/Zx8uLvfPbeuP13fyjs7rv6VtnScHbmhcfuH+rGu5X9/4u60d729cz55/XNdyf565K+y/1yd+nF/vmfvC8RjO/7+Xiutrfy/T5+9qfb2J239zXfG8jdc30bb+Z9rWP3dDvu96r//u14v1P//R1S3r3/PJcDzdXcxe6z/0t1e1XP5b3y0ej1NfHT9+Yub0kQNNe7X5ebx6dM3aK65829uvCq+l7V/vPTF7ePrU2OTYZJaNlfAtA1d6/d8O83+KMXfxb6Hw018Ux93Tnyq+b73/l8XXz4TTHwyPZ/z++I2/Hmk5Xtsf97mPFvNC1//BsI7letfX/+uGZW145gsvnP6nP3m1/eeCeH9OvnO0cf+e3XBt47yBF4vz21+vevnPd7Y+r382PNmYPwz7dT68M/PGa4vba7/++N4kT3+meP7Gn+Ti5bO29xNZN9R6Py50/T8LP8f86LrW1794fPzwsbZ3c16XDeRLmAuvD9lccX7cKu7vp89e2/H24vvwZHPvPpdlLmnm4ZmJo0eOn35oYnZ6ZnZi5uFH9h47cfr47N7Ge5fu/VKvyy88v9c2nt8HpnduzxrP9hPFWGGXe/0n799/4LbJmw9MH9x3+uDs/SenTx3aPzOzf/rAzM37Dh6c/mqvyx85sHtq665tt20dP3TkwO7bd+3atmv8yPET+TKKRfWwc/LL48dP7W1cZGb39l1TO3Zsnxw/duLA9O7bJifHT/e6fON703h+6a+Mn5o+um/2yLHp8Zkjj0zvntq1c+fWnu/+eOzkwZmxiVOnj0+cnpk+NVHcl7HZxsn5975el6ceZk6E17s2A+Gn88/fsjO9P27uO48veVXFJq0/nmavhfeCit/fen0dc/9ImElN8j8AAADUQcz94Y3/F86Q/wEAAKAyYu5fHWYi/wMAAEBlxNxfJP/R9PHvdcn/F6v//7j+f4P+v/5/pv+f6P/r/2f6//r/Pej/6/+Xef36//r/9NZv/f+Q+7M1Webf/wEAAKCiYu5fG2Yi/wMAAEBlxNx/RZiJ/A8AAACVEXP/lWEmNcn/Pv9f/1//v1v/P26r/5/p//dD/3/Tf+v/L6L/r/+f6f+ft8vdny/7+vuw/79G/59+02/9/5j73xZmUpP8DwAAAHUQc//bw0zkfwAAAKiMmPuvCjOR/wEAAKAyYu5fF2ZSk/yv/6//r//v8//1/0vT//f5/x3o/+v/Z/r/5+1y9+fLvv4+7P/7/H/6Tr/1/2Pu/7Uwk5rkfwAAAKiDmPvfEWYi/wMAAEBlxNx/dZiJ/A8AAACVEXP/NWEmNcn/9ez/v5Jlmf5/pv+v/9+2Tv1//f+VoP+v/9+N/r/+f5nXr/+v/09v/db/j7n/nWEmNcn/AAAAUAcx918bZiL/AwAAQGXE3P+uMBP5HwAAACoj5v7rwkxqkv/r2f/3+f/6/wX9/9Z16v/r/6+EWvf/3zis/9+D/r/+f5nXr/+v/09v/db/j7n/3WEmNcn/AAAAUAcx918fZiL/AwAAQGXE3P+eMBP5HwAAACoj5v71YSY1yf/6//r/+v/6//r/+v8rqVz9/8Elz/H5/wX9/1YXr/8/t7AA/f/SrF//X/+f3vqt/x9z/3vDTGqS/wEAAKAOYu5/X5iJ/A8AAACVEXP/DWEm8j8AAABURsz9Y2EmNcn/+v/6//r/+v/6//r/K6lc/f+l6f8X9P9b+fx//X/9f/1/uuu3/n/M/RvCTGqS/wEAAKAOYu7fGGYi/wMAAEBlxNx/Y5iJ/A8AAACVEXP/pjCTyuT/t3U9V/9f/1//X/9f/1//fyXp/+v/d6P/r/9f5vXr/+v/01u/9f9j7r8pzKQy+R8AAACIuf/mMBP5HwAAACoj5v73h5nI/wAAAFAZMfdvDjOpSf7X/9f/1/8vcf9/SP8/0//ve/r/+v/d6P/r/5d5/fr/+v/01m/9/5j7PxBmUpP8DwAAAHUQc/8Hw0zkfwAAAKiMmPtvCTOR/wEAAKAyYu4fDzOpSf7X/9f/1/8vcf/f5/+3rF//vz/p/5el/z/S+qX+/7Lo/+v/6//r/9Ndv/X/Y+6/NcykJvkfAAAA6iDm/i1hJvI/AAAAVEbM/RNhJvI/AAAAVEbM/ZNhJjXJ//r/+v/6//r/+v/6/ytJ/78s/f82+v/Lov+v/6//r/9Pd/3W/4+5fyrMpCb5HwAAAOog5v6tYSbyPwAAAFRGzP3bwkzkfwAAAKiMmPu3h5nUJP+XpP+/JRWg9P/1//X/9f/1/0tF/1//vxv9f/3/Mq9f/1//n1aDHU7rt/5/zP07wkxqkv8BAACgDmLu3xlmspD/1136VQEAAAAXU8z9t4WZ+Pd/AAAAqIyY+28PM6lJ/i9J/9/n/+v/6/830f/X/y8T/X/9/270//X/y7x+/X/9f3rrt/5/zP27wkxqkv8BAACgDmLu/1CYifwPAAAAlRFz/x1hJvI/AAAAlEqnzyGMYu7/cJhJTfK//n/V+//zq/X/9f/1/7uvX/9/Zen/6/93o/+v/1/m9ev/6//TW7/1/2Pu3x1mUpP8DwAAAHUQc/9HwkzkfwAAAKiMmPs/GmYi/wMAAEBlxNy/J8ykJvlf/7/q/X+f/6//r//fa/36/ytL/1//vxv9/3L2/8OPLfr/fdT/z48h/X/6Ub/1/2PuvzPMpCb5HwAAAOog5v6PhZnI/wAAAFAZMfd/PMxE/gcAAIDKiLn/E2EmNcn/+v/6//r/+v/l7P+P6P+XhP7/ivX/Gy+F+v8F/f/zc7n782Vffz/1/33+P/2q3/r/MfffFWZSk/wPAAAAdRBz/yfDTOR/AAAAqIyY+389zET+BwAAgMqIuf/uMJOa5H/9f/1//X/9/3L2/33+f1no//v8/270//X/y7x+/X/9f3rrt/5/zP2/EWZSk/wPAAAAdRBz/z1hJvI/AAAAVEbM/Z8KM5H/AQAAoGRWLXlOzP2/GWZSk/xfvv7/WCn7/4Pp+vX/9f/1//X/9f8vJv1//f9M//+8Xe7+fNnXr/+v/09v/db/j7n/t8JMapL/AQAAoA5i7v90mIn8DwAAAJURc/9vh5nI/wAAAFAZMfffG2ZSk/x/sfv/7Zfvxuf/6/9n+v/6//r/+v8XSP9f/z/T/z9vl7s/X+L1xx9F9P/1/+mh3/r/Mff/TphJTfI/AAAA1EHM/feFmcj/AAAA0KcOn/MlYu7/TJiJ/A8AAACVEXP/Z8NMapL/y/f5//r/+v/6//r/+v9lov+v/9+N/r/+f5nX7/P/9f/prd/6/zH33x9mUpP8DwAAAHUQc//nwkzkfwAAAKiMmPt/N8xE/gcAAIDKiLn/98JMapL/9f/1//X/9f/1//X/V5L+/+L+f/4apv9f0P/X/y/z+vX/9f/prd/6/zH3fz7MpCb5HwAAAOog5v7fDzOR/wEAAKAyYu7/gzAT+R8AAAAqI+b+B8JMapL/9f/1//X/9f/1//X/V5L+v8//70b/X/+/zOvX/9f/p7d+6//H3P+FMJOa5H8AAACog5j7/zDMRP4HAACAyoi5f2+YifwPAAAAlRFz/4NhJjXJ//r/+v/6//r/+v/6/ytJ/1//vxv9f/3/Mq9f/1//n976rf8fc/++MJM9rTcDAAAAlFfM/V8MM6nJv/8DAABAHcTcvz/MRP4HAACAyoi5/0CYSU3yv/6//r/+v/6//r/+/0rS/9f/70b/X/+/zOvX/9f/p7d+6//H3D8dZlKT/A8AAAB1EHP/wTAT+R8AAAAqI+b+Q2Em8j8AAABURsz9h8NMapL/9f/1//X/a9v/f+n7bevU/9f/Xwn6//r/3ej/6/+Xef36//r/9NZv/f+Y+4+EmdQk/wMAAEAdxNz/pTAT+R8AAAAqI+b+L4eZyP8AAABQGTH3Hw0zqUn+1//X/9f/r23/f3mf/79m4Xb1//X/z4f+v/5/N/r/+v9lXr/+v/4/vfVb/z/m/mNhJjXJ/wAAAFAHMfcfDzOR/wEAAKAyYu4/EWYi/wMAAEBlxNx/MsykJvlf///c+v8DS3QD9f87r1//vwL9/yb6//r/50P/X/+/G/1//f8yr1//X/+f3vqt/x9z/x+FmdQk/wMAAEAdxNx/KsxE/gcAAIDKiLl/JsxE/gcAAIDKiLl/NsykJvlf/9/n/+v/6//r/+v/ryT9f/3/bvT/9f/LvH79f/1/euu3/n/M/afDTGqS//+fvfte8qys9jjcNGcOQ1HeA+UdeAVegtdgleUlmAOYMSvmnDAnzIo555wxZ1EUc6zSonuthQw9e/cw/et597ue5w8Wp+EULwVW+a3xUxsAAAA6yN3/gLjF/gcAAIBp5O5/YNxi/wMAAMA0cvc/KG5psv/1//p//b/+X/+v/98l/b/+f4n+X/+/5ffr//X/rBut/8/d/+C4pcn+BwAAgA5y9z8kbrH/AQAAYBq5+x8at9j/AAAAMI3c/Q+LW5rsf/2//l//r//X/+v/d0n/r/9fov/X/2/5/fp//T/rRuv/c/c/PG5psv8BAACgg9z9j4hb7H8AAACYRu7+R8Yt9j8AAABMI3f/NXFLk/2v/9f/6/832P//n/5f/78d+n/9/xL9v/5/y+/X/+v/WTda/5+7/9q4pcn+BwAAgA5y9z8qbrH/AQAAYHPuef+jf567/9Fxi/0PAAAA08jd/5i4pcn+1//r//X/G+z/ff9f/78h+n/9/xL9v/5/y+/X/+v/WTda/5+7/7FxS5P9DwAAAB3k7n9c3GL/AwAAwDRy9z8+brH/AQAAYOvO5O/k7n9C3NJk/+v/T6//v0z/r//X/+v/9f8nTv+v/9/T/99tl7qf3/r79f/6f9btvP+/z3UH97j9f+7+6+KWJvsfAAAAOsjd/8S4xf4HAACAaeTuf1LcYv8DAADANHL3PzluabL/9f++/39H//+fy/T/+n/9/x0/1/+fDP2//n+J/l//v+X36//1/6zbef+/0vuf+3/n7n9K3NJk/wMAAEAHufufGrfY/wAAADCN3P1Pi1vsfwAAAJhG7v6nxy1N9r/+X//v+//6f/2//n+X9P/D9v/n/kfvzvT/x6L/1/+fr/+/9zHer/+ng9H6/9z9z4hbmux/AAAA6CB3/zPjFvsfAAAAppG7//q4xf4HAACAaeTuf1bc0mT/6//1//p//f+d+//9lv3/7T/T/++G/n/Y/n+Z/v9Y9P/6f9//1/+zbLT+P3f/s+OWJvsfAAAAOsjd/5y4xf4HAACAaeTuf27cYv8DAADANHL3Py9u2b9ULzpd+n/9v/5f/39R3/+/fI7+3/f/d0f/r/9fov/X/2/5/fp//T/rRuv/c/c/P27x6/8AAAAwh/292v0viFvsfwAAAJhG7v4Xxi32PwAAAEwjd/+L4pYm+1//r//X/+v/L6r/n+T7//r/3dH/6/+XHLf/39P/19+L/n+c9+v/9f+sG63/z93/4rilyf4HAACADnL3vyRusf8BAABgGrn7Xxq32P8AAAAwjdz9L4tbmux//b/+X/+v/9f/6/93Sf+v/1/i+//6/y2/X/+v/2fdaP1/7v6Xxy1N9j8AAAB0kLv/FXGL/Q8AAADTyN3/yrjF/gcAAIBp5O5/Vdxy7v7fP81XnR79v/5f/6//1//r/3dJ/6//X6L/P7r/P3uev57+f6z36//1/6wbrf/P3X9D3OLX/wEAAGAauftfHbfY/wAAADCN3P2viVvsfwAAAJhG7v7Xxi1N9v/5+v/brjr84/r/49H/H/1+/b/+X/+v/9f/6/+X6P99/3/L79f/6/9ZN1r/n7v/dXFLk/0PAAAAHeTuf33cYv8DAADANHL3vyFusf8BAABgGrn73xi3NNn/J//9/6v1//p//X9c/b/+X/+v/9f/L9P/6/+3/H79v/6fdaP1/7n73xS3NNn/AAAA0EHu/jfHLfY/AAAATCN3/1viFvsfAAAAppG7/61xS5P9f/L9v+//6/8vsP/f1/8n/X/8c9X/6/8vwFb7/339/wH9v/5/y+/X/+v/WTda/5+7/8aDqddv/wMAAEAHNx789uze2+IW+x8AAACmkbv/7XGL/Q8AAADTyN3/jrilyf7X/+v/L3n/7/v/Rf8f/1z1//r/C7DV/t/3/w/p//X/W36//l//z7rR+v/c/e+MW5rsfwAAAOggd/+74hb7HwAAAKYRu//wf/xu/wMAAMCU3n3w27N774lbmuz/xv3/1Rfb/1/5P7+v/z/6/fr/E+n/bzz33z39v/5/S/T/+v8l+n/9/5bfP07/Hz+4Rv/PeEbr/3P3vzduabL/AQAAoIPc/e+LW+x/AAAAmEbu/pviFvsfAAAAppG7//1xS5P937j/n+T7//e9NV6g/5+3//f9/7j6f/3/UfT/E/T/t//XL/1//fX1/9t5/zj9v+//M67R+v/c/R+IW5rsfwAAAOggd/8H4xb7HwAAAKaRu/9DcYv9DwAAANPI3f/huKXJ/tf/b73/9/1//b/+X/8/Nv2//n+J7//r/7f8fv2//p91o/X/ufs/Erc02f8AAADQQe7+j8Yt9j8AAABMI3f/x+IW+x8AAACmkbv/43FLk/2v/9f/76r/v/0vov9v0v9fe0X++fp//f9d6P/1/0v0//r/Lb9f/6//Z91o/X/u/k/ELU32PwAAAHSQu/+TcYv9DwAAANPI3f+puMX+BwAAgGnk7v903HCve1y6J52sM+f5eeS6+n/9v+//6/99/1//v0v6f/3/Ev2//n/L79f/6/9ZN1r/n7v/M3GLX/8HAACAaeTu/2zcYv8DAADANHL3fy5usf8BAABgGrn7Px+3NNn/+n/9v/5/s/3/lfr/O79f/z8m/b/+f4n+X/+/5fcfu/+/+ej/f/0/HYzW/+fu/0Lc0mT/AwAAQAe5+78Yt9j/AAAAMI3c/V+KW+x/AAAAmEbu/i/HLU32v/5f/6//32z/7/v/57xf/z8m/b/+/9AtR/5U/6//3/L7ff9f/8+60fr/3P1fiVua7H8AAADoIHf/V+MW+x8AAACmkbv/a3GL/Q8AAADTyN3/9bilyf7X/+v/9f/6f/2//n+X9P/6/yX6f/3/lt+v/9f/s260/j93/zfilib7HwAAADrI3f/NuMX+BwAAgGnk7v9W3GL/AwAAwDRy9387bmmy/2fu/5f+NP3/If2//n9P/6//3zH9v/5/if5f/7/l9+v/9f+sG63/z93/nbilyf4HAACADnL3fzdusf8BAABgGrn7b45b7H8AAACYRu7+78UtTfb/zP3/Ev3/If2//n9P/6//3zH9v/5/if5f/7/l9+v/9f+su0T9/5m98/T/ufu/H7c02f8AAADQQe7+H8Qt9j8AAABMI3f/D+MW+x8AAACmkbv/R3HLPPv/fjct/EH9/4n3/wf/Eun/9f97+n/9v/7/gP5f/79E/6//3/L79f/6f9aN9v3/3P0/jlvm2f8AAADQXu7+n8Qt9j8AAABMI3f/T+MW+x8AAACmkbv/Z3FLk/2v//f9f/1/q/7/8j39v/7/lOn/9f9L9P/6/y2/X/+v/2fdaP1/7v6fxy05/K66O3+XAAAAwEhy9/8ibmny6/8AAADQQe7+X8Yt9j8AAABMI3f/r+KWJvtf/6//1/+36v99/1//f+r0//r/Jfp//f+W35/9f/57p//X/3NXo/X/uft/Hbc02f8AAADQQe7+W+IW+x8AAACmkbv/N3GL/Q8AAADTyN3/27ilyf7X/+v/9f/6f/2//n+X9P/6/yX6f/3/lt/v+//6f9aN1v/n7r81bmmy/wEAAKCD3P2/i1vsfwAAAJhG7v7fxy32PwAAAEwjd/9tcUuT/a//1/9P2f9fof/X/+v/R6H/1/8v0f/r/7f8fv2//p91o/X/ufv/ELc02f8AAADQQe7+P8Yt9j8AAABMI3f/n+IW+x8AAACmkbv/z3FLk/2v/9f/X3j/f6b+voft/33/X/+v/x/GvP3//+v/j+r/z17Y+7v3/9ffcPhj/f8236//1/+zbrT+P3f/X+KWJvsfAAAAOsjd/9e4xf4HAACAaeTu/1vcYv8DAADANHL3/z1uabL/9f/6/ym//6//1//r/4cxb//v+/++/+/7//p//b/+nzWj9f+5+/8RtzTZ/wAAANBB7v5/xi32PwAAAEwjd/+/4hb7HwAAAKaRu//fcUuT/a//1//r//X/+n/9/y7p//X/S/T/+v8tv1//r/9n3Wj9f+7+/wYAAP//lgIt2A==") openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x28541, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81000) symlinkat(&(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', r0, &(0x7f00000007c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 1m1.818673526s ago: executing program 1 (id=60): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100000}, 0x94) r0 = syz_open_dev$dmmidi(&(0x7f0000000300), 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r0, 0x40045702, &(0x7f0000000000)) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0305710, &(0x7f0000000100)={0x1, 0x81, 0x7, 0x1, 0x7fff}) 1m1.325199095s ago: executing program 1 (id=66): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0xc000, &(0x7f0000000380), 0x2, 0x24d, &(0x7f0000000440)="$eJzs3T9oJFUcB/DvzO4ac7fIqY0g/gER0UA4O8HmbBQO5DhEBBVORGyUixAT7LJWNhZaq6SyCWJntJQ0wUYRrKKmiI2gwcJgocXK7iQSNytqNtk5Mp8PTGYm89783rDzfbvN7AZorAtJLiVpJZlL0klSHG5wb7Vc2N9dnd28lvT7T/1SDNtV+5WDfueT9JI8kmSjLPJKO1lef27nt60nHnh7qXP/h+vPzk71Ivft7mw/uffBlbc+ufzw8lff/HSlyKV0/3ZdJ68Y8792kdx2GsVuEEW77hHwX1x94+NvB7m/Pcl9w/x3UqZ68d5ZvGmjk4fe/6e+7/789Z3THCtw8vr9zuA9sNcHGqdM0k1Rzieptstyfr76DP9d61z56sLi63MvLyxdf6numQo4Kd1k+/HPZj49P5L/H1tV/oGza5D/p6+ufT/Y3muNHOzP1DMo4HTdVa0G+Z97YeXBjMs/cKbJPzSX/ENzyT80l/xDc8k/NJf8wxnWOdjojT0s/9Bc8g/NJf/QXIfzDwA0S3+m7ieQgbrUPf8AAAAAAAAAAAAAAAAAAABHrc5uXjtYplXzi/eS3ceStMfVbw1/jzi5efj33K/FoNlfiqrbRJ6/Z8ITTOijmp++vuWHeut/eXe99VeuJ703k1xst4/ef8X+/Xd8t/7L8c6LExb4n4qR/UefmW79UX+s1Vv/8lby+WD+uThu/ilzx3A9fv7pHv6K5WN67fcJTwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDU/BkAAP//d4lu0g==") mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) r0 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000140)=@v1={0x0, @aes128, 0x4, @desc3}) 1m0.960258076s ago: executing program 1 (id=67): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x1400c, &(0x7f0000000840)={[{@stripe={'stripe', 0x3d, 0x3d}}, {@init_itable}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x3, 0x457, &(0x7f0000000bc0)="$eJzs281vFOUfAPDvTLvl11/BVsQ38KWKRuJLSwGVgwc1mnjAxEQPevDQtAtBFjC0JkJIBGPwZIyJd+PRf8GTXozxZOJV74aEGC6CpzWzO9PuLrtLt+x2kf18koHnmZc+3+/OPLvPzLMbwMiazf5JIrZHxO8RMV2vNu8wW//v2tXzS9evnl9Kolp9+6+ktt/fV88vFbsWx03llX1pRPpZEnvatLty9tyJxUqlfCavz6+e/HB+5ey5546fXDxWPlY+deDw4UMHF1584cDzfclzKtK89MZ7X7155Ium/Fvy6JPZbhufrFb73Nxw7WgoJ+NDDISejEVEdrpKtf4/HWOxfvKm4/VPhxocMFDVarU61XnzhSpwB0uiua7Lw6goPuiz+99iaR0EvDy44cfQXXmlfgOU5X0tX+pbxteeGJRa7m/7aTYi3r3wzzfZEoN5DgEA0OSHbPzzbDbaaR3/pXFfw3535XNDMxFxd0TsjIh74lTsioh7I2r73h8RD/TYfuskyY3jn/TyphLboGz891I+t9U8/itGfzEzltd21PIvJUePV8r766/J+/kwurzQpY0fX/vty07bGsd/2ZK1X4wF8zguj29rPmZ5cXXxVnJudOVixO7xdvknazMBSUQ8GBG7N9nG8ae/e6jTtpvn30Uf5pmq30Y8VT//F6Il/0LSfX5y/n9RKe+fL66KG/3y66W3OrV/S/n3QXb+/9/2+l/LfyZpnK9d6b2NS3983vGeZrPX/0TyTq08ka/7eHF19cxCxERypB504/oD68cW9WL/LP99e9v3/52x/krsiYjsIn44Ih6JiEfz2B+LiMcjYm+X/H9+9YkPWtdNbjj/wcryX+7p/K8XJqJ1TfvC2Imfvm9qdGa9mOd/vfv5P1Qr7cvXbOT9byNxbe5qBgAAgP+eNCK2R5LOrZXTdG6u/h3+XRFp5fTK6jNHT390arn+G4GZKKXFk67phuehC/ltfb1+MSLqXy0oth/Mnxt/PTZZq88tna4sDzt5GHFTHfp/VvlzbNjRAQPn91owunrq/8ng4gC2ns9/GF299f9tA4sD2Gqldv1/chiRAFuv3ef/J0OIA9h6Lf3ftB+MEM//YHTp/zC69H8YSSuTcfMfyXctFH9pk4ffsYUo3RZhDKwQ6W0RhsKACsN9XwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOiXfwMAAP//EBbjLA==") syz_mount_image$fuse(0x0, &(0x7f0000000300)='./bus\x00', 0x3000001, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) setxattr$security_capability(&(0x7f0000000240)='./file0/file1\x00', &(0x7f0000000280), 0x0, 0x0, 0x0) 1m0.073776288s ago: executing program 1 (id=73): r0 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) ioctl$USBDEVFS_DISCSIGNAL(r0, 0x8010550e, 0x0) 59.495189151s ago: executing program 1 (id=76): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}}, 0x0, 0x0, 0x34, 0x0, "f1f7882eade7f9ed59dd754ed3fa9513bc8d9662eaae6a87ea17d19cced73fca9d00b370eaefb2ecab4c20fb0d62c726cc3cb83d211da63fb4007c81ad7a2edac7859b8988028702e2027b84c554f86f"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x4c, 0x0, "01deaba05ccc4fa00711be66bd584ecd190428efc9e569f4b222158b227692cebc00924f2deea371bafa061b8f2959b4b696b22e4881f40a0d8f4c2fdea78893bc2c160df3e41db4153cfd9221d01c79"}, 0xd8) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) 59.390426088s ago: executing program 32 (id=76): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}}, 0x0, 0x0, 0x34, 0x0, "f1f7882eade7f9ed59dd754ed3fa9513bc8d9662eaae6a87ea17d19cced73fca9d00b370eaefb2ecab4c20fb0d62c726cc3cb83d211da63fb4007c81ad7a2edac7859b8988028702e2027b84c554f86f"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x4c, 0x0, "01deaba05ccc4fa00711be66bd584ecd190428efc9e569f4b222158b227692cebc00924f2deea371bafa061b8f2959b4b696b22e4881f40a0d8f4c2fdea78893bc2c160df3e41db4153cfd9221d01c79"}, 0xd8) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) 38.792566782s ago: executing program 3 (id=208): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000100)={0x4, r0}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, 0x0) 38.545635626s ago: executing program 3 (id=209): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000240)={0x2, 0x0, [{0x40000093}, {0xa24, 0x0, 0x6}]}) 38.319198649s ago: executing program 3 (id=211): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) syz_emit_ethernet(0x3a, &(0x7f00000063c0)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x2, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0x7407, 0xfffffffffffffffd}}}}}}, 0x0) 38.129623011s ago: executing program 3 (id=213): syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f00000003c0)) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x2000, 0x0) 37.994111688s ago: executing program 3 (id=214): r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r2, @ANYBLOB="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"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) 37.467469149s ago: executing program 3 (id=217): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000100)={0x1}, 0x8) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000040)=[{{0x0, 0x0, &(0x7f0000003840)=[{&(0x7f00000006c0)="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", 0xfe7c}, {&(0x7f0000000000)="87", 0x1}, {&(0x7f0000003300)="9a", 0x1}], 0x3}}], 0x4000000000002e4, 0x4000000) 37.263132951s ago: executing program 33 (id=217): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000100)={0x1}, 0x8) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000040)=[{{0x0, 0x0, &(0x7f0000003840)=[{&(0x7f00000006c0)="4f657f07da674c79be900dd4b36b03ca3513a320ebab75751d7d7e40d6ede2dcec43dc605632fa0df345f1fe1fd7e8e5d0da647d921b0f102b0b2fa24e5cef12d89e0db21f0cb28f5588c4b231abad294f049cbfa56b7402fa06d644b298a4922e5a0b0f2de53fca098c15a02df417cf592b8bf00ac06d56a3a286048ba59dc0fd69debc9d0f024476d9345c2b008df031d796e5581b0318fe281599f8b39d447257422eb55f1c87406e20b2f16d946f0ab156903d46d6ab54d6656307a0de7b83d35e818d8d048f784a9c87076fa4c6e9cfe38f88a77e789c9d4bea96f7b072d754fd17da475552965113151882c6dd91d1394342b8b3e4e74a82c2412507b0793cdb9656150e8b1e134ab1dd7888f6039f8de7056990800d9b9eab54171ad9879ee00fd157b3e54527f2a2356008cf524e72cf74fe0c307a920dd67d12a0846e921a88aead6edd3a5bd3da023856de8338adfa26345f5403319d336dd45efe3e407cc35b0e022f3e81de786ea6a3917a07e2f6fbe73adfd975c2236b937fda47b6c89cd0f4f64f8b93d73ce3d32b5162c7a318ee6e9bc08b32743c7b9e66fe6a1014830826ed55cca4d679ec24321ea888e61de0bea104b0a8edfcb5d18df2190b8a9113118acda5bdfadf7f404df0fbd39dd3fec06c4449fbde4ea7ccde27c44c63633c06e4559857637d037cad122a9fda4509805092ca0350d9f73b061eb153026730bda9ecc461473230438f135091a521240b6b4273b230af2057bb27f56b7851e13fb4d9c27d757bff9d8281fc9990afc8861356998c77560850828d7c6537faf470ca94889c14e28e1e8c6c73b6756ae380f8c15dded00616cc66a5440240876173ae1ee41005519e709f9412e260686ed18320acbdc2b465508390d456683928f5f42e25cb73e1fb53794fb4ab345bb8df04225bba362598d3e603f06f7ac324a0fef1494fe4a5e829c8b50207cfbaef7d29e85ca3e9891291b66179b39713032089ab90c6481bf0cca0e61da5fc955280682e702bc186851d014a59d9903be30104e31d7d57094e34bd10fe5b31bb7f3f1fe37eaef05b31a1c1206a6cce8fa425089001eab642478caa11cf08e43fad0668fdc22ac54ed30fbf13e6af1232af289ae48c0f3a371ec41ea5f7d9fb01f860b751760d680c72af1059d5fab16bf61dd8aaa7ada290d8cf2d135eb5a879b3a754b1de0a5e550895ce05a84f4dcc80f10b16d5a78fad7f9ec36945d1e946f1f1f3bbb983bc5a68b94a2633f3f232bf22b6c9479f60f7146e20d5df4726dc3835266fc132a1f0f49bd8e8e1cf34e20826bc3e7e2e95385eeeb2693b9d69a0f884f50122e783517a462707f67fca2ac8f2ac68693a1b5730b52231685caa92fb3e00622052eab3af70a6e89de641cc8949cff3c14767a55ab06f6312fdf27eaa7ec28f1591bad3a7b433272013de3ae26c95eb885528dd7f64bf69a8508aaf4d4629b838efe76c13d47ec31c5a9af75138d40ebabd09448e20ffbae7848211f31b6ce4df6b5ee103fdece3f15a3c3708ddb550a8d98b6b8920c23af9af40baeb47b0a2adf78699cbdfeddf67611dd9365c941913263d8f9998a81f964d7071d7eb347ec90556af053ac6b9d5be23cb85a5cab6392fffbbf8ea3a47c0c3a2bab8d3785055bff6694897fb9d3a16421a4d02caae0bd5152f0e80074b9f573a176200e81a1c4e35ab05c493f66b7c25ca13a6a3da12283821c119db39e957e739fb4c1259252cef81a8b346f787d195d388f06d252e9433e50728bf5b94d141f9ac8e6b2aaef86d007940b45fd28cc0171fa8700bdff936a2fc706a352ff0ceceb70c54f18f71de3a6e36c5391d3f648dd0d6f1b97f810ad838b4bb9c6919f0ec78b96644397c448f628f6b589477bf6512f7fe8a623674ac16c00deb3e2316bb7727c034fe9935bc0d4a402ca7c83fe4dff3d7b18d6439cd2576f0bde84ba1cbdf9f5a5743d874119e59ab8fcfa9801f9972cfc18e033c757423dfbd92d1bf1b2b3cf741c4a13b726b08441041712f98d8917d20fef74fcf3876ab5953e38ff6c2a2b3a8b96a2b1ec4dd86b09aec23ba096d16bdc1acfcb44ac82ed8c855c217bc07625c5dce82a0db0b400e2cdb89a75bb2155af9862304efc989253eadadcd08ae5f2e58cf842880df11a12ac8b3492069ccea594430ccee2baaf0fc3b2db99c14aa93f2624ab0e9237760b5fa1a96c16474be2cabc90ff091672e95c8d25fccd039110c6934b948de9c5983aae57a3547ad288ca1219e3fd1f27d5687f66ae4d487141b1d091c6049e72eff1d5df8280c1248892677b520cdb4e97c31778c2b09ac10a174d04da2a43a0d178242f203b3ae14154d1d03319d14921352ba733b0656ae2cece53f736006d117cf08c7f9e18d9f1b500dc5922d423dbf822c1ae089332b1884901aae255612bb70bcc65257bbc6cef6f9c5b76dfd1dfd0b5dfba63eece0c2185c01ef11810497eb2047bc87be9b8b5c897b8a155200d2ce96427bd4036b19f0ef6c9cea67c43b80c8fbd0d25d6b046efe93a9872bb0f964e016490883e9388ef035908221166c2206415f3feebdbc2a830ccac55d61b79d3316e2d3be9aea1c2c72c23688efff2b9b5a4f39f667a5404e3ce2083a302bc4a49208a0725c20f9a19adff430c50a169f151355df660d52c0068cca7f171ecdec15047dfea2ba6861e5ece606d228e0bf47631cc32b91ab4c09015d40a326086ebaac6af8e79059dc7f929cf6a80ad3b8cd6b3a91b8e5a199fb00814b45f42e8b7feeb9158c39510c1a10d35aea06fe660b0eb73bc0905252b6919fe23e5d5c3c9c66adaefe9e4307981e63fdcdc67e2bf76d75ff7be4fe8dd025cece14d556074c84b3c8833dc7cff583ce25947101676fd3f8f4016368bf27e24744bba7cb768b9d837b16d5308dc3712f37c69d1d1ee98360c6449634433afebe5bea6b2e39c249c29c4c8c3fca5f180ad4893c41458fc9f82db8200e201b3c4b5cc69dadf9a409af684f372a68cf1cf3aa64f9de0ec5fcd58acca051c590c689e42d0037cf3b2abee9d2c85803a929032b35113963ad79793b2a4d8377517654149b9afb408b189d2ecf95c66594e79db6c34e0c82a30259938589b2f81c50851a4d30013d9da1f24eacd5efbdf945e8af4a625126b38c01029fb2b0062de8c4bcd61c7d8b9215bac8dc35609ff45acbadfac0a04e3f5014c1c34cbb46393633f6102080f266fec4242c67c93e01312ba0e6e3dd1e002d1253e4d34a8d6122c60ce5169d1c47f807230d86f4836e4c385aff2c6492c9e2584a4a0dcff544316f4c35d1fb19c4277041885df236324b80c3f2d58c76f64a075d27a916ba55746b0aa758d383c063cd6447a80f7abd06a310974765a8c977671a6dbe35be115747a4a3c9d9f558ce7fbfc35b91875612e89f505007792f7b197ba5fc4c65cd6f8765e2d2454f4681381325477af63a88fe4313c7365690c50f05d40fe302479d21cee188f29f8b4475b6b37e2a4dd710814a2463cf1650f281595cff95f549c4c4ffcd184e672b308aa4bc071395f214ee97e5b7dbc5efaed8e65a878169a0529b6ed4022e5bfaaa49fc521c283bd9d62ddc00e4d84d5da18f7c0acd00c53e827c7194146e5d0cb9439e8c35e0659d347cb012e47da92aff33c8b45fd9aa140d2f76b75c6800f8769057e88d156714a82e3d12b4fdf2863a27eb2587ebc25b011a949849dcd9faaa128b9bef780b3d239a007ca9c04256b858cfc7b068365c044a5eb863bdf0454cf37df09d4cf930408f0d41c1e8c278b994c455f89ecb85156ed20b7f89c9c2f1176508e4c7ab7ed74311a12317d4193eaef0333368963286e4c5e0c0c0db5f3f2d5e3cff77b21e3b4786c8c096b89b60cf41560544ba1361f4af4b5b330b410edc5421b5023f1f4df0f910067bfbe0a46cb5f1407f650c47288a31e0f767de8ddca77b20ed16513e095fbce085d25d543dce850515458c5ef07a0c012175ef50ef3c52f98afa0b2631c7d3e63b22e90ebce2513d3b0d4d62f153cc90700fbee5c80ffd14fece05e0ba293758aaa7510d3853a4a4d44e9e479e3f5d92a663f14b5f5452efc6ecf387a100787667dd060cfdf75ee57dda2e042f7f171ac5083a5ddc6656bb34d683955f4a8a1cf687d29e963d8abf93912aa08dc4df3cdaaceae9fa1d21472ed01705d861a798f57f14ca4f3f0e1e9f1c20e9e2eb6974a7d838e7a2f69943ad259cd6967c0c46698952c65a9a1d72be890a66dfea4fa1b5ee861b1f929ce78c9bcdfb0145ff52d462865a8a81506e1bd0afa6b2d3cc5556c17c19b891fc6c36b9ed0b8b3c516836872ced92b1b65e2334b3730deae7af801016d30af14daf53ec550da914dedc18726871a94c3ce8efd4bfcf25ffdf224d665374b279ea65d32e213bfad60aa8555fbe97cb22977f7e9f20a04e8e2c65b3a5519a098b70cce0ad25cb239e2335e0040481c86a2153b5056e70f83515e7d3739749ab8a2c3e4a1b0faab4426495c4f0076d2590c52f6548e3b20b17a6f21deefe63f67fcba027a83959dd9f79dc2f61e712d41fa50c0a89d1329a70aa8471f02a2755ea2f872adc3fbaea5e942ab7fd9191b669a6017a0a2ae7344ee0ca36afd646444a38696ceeca997321ab37642ea71be0758b3bb311b13cce0cc5881c97549ebf9366171a99a8f3b754f6e42970002b09ebc56402693fd2d06bfc114396c75a4bcfb02e114170fafad5ab7e671b70e51461f6916a674d4abcf47011e8598144c5cb013f280e21afc936055b1d2e0bbf29a4b969cadf754ac62bb6020f33ed9b3e46428496d0de29ff0b6fb13710f98f688e9185126c0b154530a045abcf54f4be1a63ac4ec02ba038cb1b510abd82532cfcc7684c977e00fe81d2d4a483d5cf7d23a5c4fd6a299edb436f519a6efc37b79b249feec6f0d7983a321f4021ac4766270f6bf9fe10733313e6116178fd271eb4d0ac6158e16f3a01795932f15b6df70c25dad7fd9f8932bf6bd651094d6c83cf0accfa978f575e535e86e44f17a23802bdba0bcb17899d76a5bb083061a4ddceb105333a828ade21c99dbc6257a322a22f73899f3fd64eddb1669b965d21f468416eb81ca750e54976616ced379078b149822d38634f90bb4644746eb40cc6153a1c0fd7b4d482958c5c1d9a47c3512510f022b8eb00861794ed8a3c207f4cf5a565b94a44eb14e6baefc24ee30380b53ee4726779b429240cb8b71340fd41fa0352810d90519f18ee69b85d3134cc16619a966ed378d608292834631aa1f215a324641d0b772d08a822f6ec0905c22768044c13911476bc70122345a274b1887ac471676f09a849faba85f9c2a8b24af21ac7700395b29f963d493a5f81febc3b8a23bbafaba0d9b288c5506c44ec4f6f327433f06cf6d72f8de7cc61ecc1de0fc743ddfeb2fa47fa17ab3257b68e0c56dce273f56de9724b809b4df30d0dc8a4a97db38674242ea7e81571dda16c2dd2ae5d82b51b719181db901409170504ecfd94de74315c554462dbc90d749f2d2d54b6b7ca6c287979b5cc1ec651af17891359628abc6c8329d88351966c4ffd23b7a729453ec0c064210b3234f8657747a84bc0b236a89a35f412395805c942392b61a2bd5a88a5740b97c31d5bd8857f2b7a0cb999a48d0b395c21ff58e7349939f542470a829db9e033ef7b719453ad7a705829d74416011ce17839618f1534c9859c08a8d5c49a0478074ceea47ab23fb24570011684733bc01f0adca5a48139f54c598bee0f2a", 0xfe7c}, {&(0x7f0000000000)="87", 0x1}, {&(0x7f0000003300)="9a", 0x1}], 0x3}}], 0x4000000000002e4, 0x4000000) 4.015452225s ago: executing program 6 (id=480): r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x80000001, 0x82002) io_setup(0x8, &(0x7f0000004200)=0x0) io_submit(r1, 0x2000000000000108, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0xfffc, r0, 0x0}]) r2 = syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x1501) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0xffffffff, 0x41, &(0x7f00000004c0)={0x4b5a9da54893e123, 0xf, 0x4, 0x4000, 0x3}, 0x26, 0x200, 0x8, 0x0, 0x0, 0x6, 0x0}) 3.717048462s ago: executing program 6 (id=482): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000001540)='./file0\x00', 0x2000004c, &(0x7f00000003c0)=ANY=[@ANYBLOB='iocharset=ascii,discard,dmask=00000000000000000000007,uid=', @ANYRESHEX=0x0, @ANYRES64=0x0, @ANYRESHEX=0x0, @ANYBLOB="2c616c6c6f775f7574696d653d30303030303030303030303030303030303030303030372c646973636172642c00214b3cf244ea5fb7437f2c69f67a093e240a6e978fa4cd2d"], 0x1, 0x14f5, &(0x7f0000001580)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000240), 0x208e24b) rmdir(&(0x7f0000000280)='./file2\x00') ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0xc0185879, &(0x7f0000000200)={@id={0x2, 0x0, @c}}) 3.552433372s ago: executing program 6 (id=485): mkdirat(0xffffffffffffff9c, 0x0, 0x8b) socket(0x1e, 0x4, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000101c1b021b00000000000109022400010000400009040000010300400009210000000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x6, {[@main=@item_012={0x2, 0x0, 0x8, "f810"}, @local=@item_012={0x2, 0x2, 0x9, '\x00y'}]}}, 0x0}, 0x0) 1.968266675s ago: executing program 4 (id=498): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000140)={@in6={{0xa, 0x4e23, 0x10000, @local, 0x7ff}}, 0x0, 0x0, 0x49, 0x0, "ec35492d39efb71c424b2a8a0f3029a26660f9f279fe406e93916f7c10035ae92b388c323f79635fd736790eef5656638864b80f6b1fcd68699949ed7d77c3a646ad3e6f16a71985261c293550903812"}, 0xd8) syz_emit_ethernet(0x5e, &(0x7f0000000080)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "560400", 0x28, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0xc2, 0x0, 0x0, 0x4, {[@timestamp={0x8, 0xfffffcf1, 0x3, 0x9}, @timestamp={0x8, 0xa, 0x5}]}}}}}}}}, 0x0) 1.87171161s ago: executing program 4 (id=501): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f00000058c0)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f0000000dc0)={&(0x7f0000000240)=[0x0], &(0x7f0000000200), 0x1, r1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f00000003c0)={0x0, 0x1, &(0x7f0000000180)=[r2], 0x0, 0x0, 0x0, 0x0, 0x2000}) 1.775223686s ago: executing program 4 (id=502): openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x40000) openat$mice(0xffffffffffffff9c, &(0x7f0000000100), 0x41) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x6, 0xfffa}, 0x3d, [0x6, 0xc95a, 0xfffffff3, 0x8, 0x80, 0x2, 0x1, 0x7f, 0x6, 0x4d, 0xfffffff2, 0x5f, 0xa, 0x0, 0xffff2d37, 0x1dd2, 0x6, 0x7, 0x0, 0x80000001, 0x7, 0x7, 0x3, 0x3c5b, 0x1, 0x24, 0xffffffff, 0xfffffffe, 0x1f461e2c, 0x3, 0xe661, 0x4, 0x1000007, 0x3, 0x8001, 0x4c74, 0x8f00, 0x642, 0x3, 0xa, 0x0, 0x71, 0x7, 0x7, 0x103, 0x0, 0x5, 0x3d, 0x8f, 0x6, 0x1, 0x4, 0x5, 0x4, 0x5, 0x0, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x10012, 0x12b, 0x8000, 0x10, 0xfffffff3, 0x129432e6, 0x3, 0xf9, 0xd, 0x2bf, 0x6c9, 0x1ff, 0xfffffffe, 0x3, 0x0, 0x7, 0x10000005, 0x2f, 0xe, 0x313, 0x78, 0xea4, 0xa, 0x4, 0x4, 0x80, 0x5, 0x400, 0x1, 0x6, 0x400001, 0xff, 0x1005, 0x7ff, 0x5f31, 0x4, 0xffffffff, 0x6, 0x1000004, 0x9, 0x4, 0x9, 0x8, 0x9, 0x7, 0x5, 0x0, 0x3, 0x8000, 0xffff, 0x2, 0x7f, 0x9, 0x8, 0x3, 0x4, 0x1, 0x7, 0x6, 0x9, 0x48c93690, 0x2, 0xff], [0x7, 0x1, 0x0, 0x64e, 0xfffffdfe, 0x7fffffff, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x10000009, 0x3e7, 0xb, 0x5, 0x2, 0x40002, 0xf, 0x8, 0x84, 0x6d01, 0x5, 0x3b, 0x3, 0x200, 0x80, 0x3, 0x4, 0x2, 0x0, 0xa2, 0x7, 0x53cf697b, 0x5, 0x4, 0x54fe12da, 0xbf, 0x5, 0x3, 0x400000, 0xfffffff9, 0x0, 0x1, 0x5, 0x0, 0x6, 0xfffffffb, 0x120000, 0x3, 0x6, 0x9, 0x4, 0x3], [0x9, 0xbb31, 0x3, 0xfffffffc, 0x5, 0x938, 0x6, 0x6, 0x51bf, 0x5, 0xce7, 0x1ff, 0x6, 0x7, 0x5, 0x3, 0x104, 0x80000000, 0x6, 0x7fff, 0x8ffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x8000014c, 0x60a7, 0x6, 0x2, 0xffffffff, 0x80000003, 0x5, 0x8, 0xff, 0x3, 0x3, 0xffff, 0x3, 0x8, 0x100, 0x9602, 0xa, 0x2, 0x4, 0x6, 0x1, 0x10000, 0x5, 0x8, 0x2b91, 0xa1f, 0x8, 0x9, 0x1, 0x6c0b, 0x0, 0x2, 0x5, 0xb1c, 0x1, 0x200, 0xfff, 0xfff]}, 0x45c) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x918) 1.630999234s ago: executing program 4 (id=506): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f00000000c0)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000080)={{@local, 0x2}, @local, 0x0, 0x0, 0x5e, 0x200000000000, 0x100000000000006}) 1.569934338s ago: executing program 2 (id=507): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_USE_MFP={0x8, 0x42, 0x2}]}, 0x30}}, 0x0) 1.408209457s ago: executing program 6 (id=509): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0xff) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)=0x7e) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0xf7) 1.407136577s ago: executing program 2 (id=510): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="05000000080000000200000004"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xe, 0x4, 0x8, 0x7}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c3a00000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000080000850000007200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.278636535s ago: executing program 6 (id=512): r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000640)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@rights={{0x18, 0x1, 0x1, [r0, r1]}}], 0x18, 0x50}}], 0x1, 0x404c040) sendmmsg$inet(r2, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}], 0x43, 0x4000) close_range(r0, 0xffffffffffffffff, 0x0) 1.215871709s ago: executing program 2 (id=513): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r1 = socket(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2={0xff, 0x5}, 0x8000000}, 0x1c) syz_emit_ethernet(0x32, &(0x7f0000000480)={@multicast, @random="fad1e0480100", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty=0xe0000001}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x1, 0x3, 0x8f, 0x100}}}}}}}, 0x0) 1.047344918s ago: executing program 6 (id=515): socket(0x1e, 0x4, 0x0) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0) ioctl$EVIOCSKEYCODE(r1, 0x40084504, &(0x7f00000000c0)=[0x2a, 0xf0]) 977.376803ms ago: executing program 2 (id=516): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) mremap(&(0x7f00003ef000/0x3000)=nil, 0x3000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) 859.9482ms ago: executing program 2 (id=517): syz_mount_image$hfs(&(0x7f0000000080), &(0x7f00000008c0)='./bus\x00', 0x808808, &(0x7f0000000380)=ANY=[@ANYBLOB="636f6465706167653d757466382c66696c655f756d61736b3d30303030303030303030303030303030303030303030332c696f636861727365743d63703737352c71756965742c008f7881d185c35a6a28ef06c5b85628f12a02248de249c2a338d049166371583781680d171f47"], 0x1, 0x2e2, &(0x7f0000000900)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000580)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0xa0, 0x0, 0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file7\x00', 0x1c0) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file7\x00', 0xffffffffffffff9c, &(0x7f0000000680)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) 795.395343ms ago: executing program 0 (id=518): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) add_key(&(0x7f0000000000)='dns_resolver\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000080)=@urb_type_control={0x2, {}, 0x20000009, 0x0, &(0x7f0000000240)={0x4, 0x17, 0xfffc, 0x360}, 0x8, 0x7, 0x80, 0x0, 0x4, 0x101, 0x0}) setfsgid(0xee00) ioctl$USBDEVFS_REAPURBNDELAY(r0, 0x4008550d, 0x0) 751.330056ms ago: executing program 5 (id=519): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000002180), 0xa0002, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000240)={0x1, 0x0, [{0x4000009b}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 674.26689ms ago: executing program 0 (id=520): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x9e3a, 0x10100, 0x80000, 0x1bd}, &(0x7f0000002000), 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00') writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) 575.166856ms ago: executing program 2 (id=521): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0xf, {[@main=@item_4={0x3, 0x0, 0x8, '\t\x00'}, @local=@item_4={0x3, 0x2, 0x0, "112000"}, @main=@item_4={0x3, 0x0, 0xb, "7488dffc"}]}}, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCSFLAG(r1, 0x4004480f, &(0x7f0000001180)=0x2) 524.837939ms ago: executing program 5 (id=522): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f0000000080)=0xe5a5, 0x4) setsockopt$inet6_int(r0, 0x29, 0x2, &(0x7f0000000c40)=0x2, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) getsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f0000000140)=""/30, &(0x7f0000000240)=0x1e) 458.529723ms ago: executing program 4 (id=523): syz_mount_image$vfat(&(0x7f0000000540), &(0x7f0000000000)='./file1\x00', 0xa18c14, &(0x7f0000000840)={[{@uni_xlate}, {@iocharset={'iocharset', 0x3d, 'maccenteuro'}}, {@shortname_winnt}, {@fat=@codepage={'codepage', 0x3d, '869'}}, {@shortname_win95}, {@uni_xlateno}, {@shortname_mixed}, {@numtail}, {@shortname_lower}, {@fat=@codepage={'codepage', 0x3d, '850'}}, {@shortname_mixed}, {@rodir}, {@utf8no}]}, 0x81, 0x29b, &(0x7f0000000580)="$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") landlock_create_ruleset(&(0x7f0000000040)={0xf0ffc94e915cdaa7, 0x0, 0x2}, 0x18, 0x0) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x2436423bc3e16464, &(0x7f0000000000)={[{@dax_inode}, {@dioread_nolock}, {@jqfmt_vfsv0}, {@orlov}, {@init_itable}, {@usrjquota, 0x2e}], [], 0x2c}, 0x0, 0x465, &(0x7f00000009c0)="$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") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) 402.790386ms ago: executing program 0 (id=524): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b4560a117fffffff81000e220e227f000001925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) 397.698847ms ago: executing program 5 (id=525): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000280)="db", 0x1}], 0x1}, 0x41) recvmsg(r0, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x10001) sendmsg$inet(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000001c0)="04", 0x1}], 0x1}, 0x41) recvmsg$unix(r0, &(0x7f0000000100)={0x0, 0x700, 0x0}, 0x61) 359.082919ms ago: executing program 5 (id=526): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000200)={0x0, 0xf, 0x0, 0x9, 0x0, 0x0, 0x0, 0x5, 0x0, 0xfd, 0x0, 0x0, 0xfc}, 0xe) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000700)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4, @local}]}, &(0x7f00000006c0)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x7d, &(0x7f0000000480)={r1, @in={{0x2, 0x4e20, @empty}}, 0xaf1a, 0x9, 0x3ff, 0x8, 0x88, 0x7, 0x3}, 0x9c) 279.317874ms ago: executing program 0 (id=527): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) syz_emit_ethernet(0x3a, &(0x7f0000000100)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x3, 0x2c, 0x64, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x4, 0x6071, 0x0, 0xe7, {[@mptcp=@mp_join={0x1e, 0x3, 0x3}]}}}}}}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000180)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x3, 0x28, 0x64, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2, 0x6071, 0x0, 0xe7}}}}}}, 0x0) 243.276405ms ago: executing program 4 (id=528): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000080)={'syz0\x00', {}, 0x0, [0x80000000, 0x3, 0x3ff, 0x8, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0xf5b1, 0xffffffff, 0x10000000, 0x99, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffe, 0x0, 0x0, 0x1, 0x0, 0x40000], [0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xedc0, 0x0, 0x5ee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0000000, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffff8, 0x2, 0x0, 0x2000079, 0x400, 0x0, 0x0, 0x10000, 0x40000, 0x0, 0xc0800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x4771], [0x0, 0x7f, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffc, 0x4], [0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, 0x0, 0x0, 0x0, 0x3, 0xfffffffc, 0x6ac, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, 0xfffffffd, 0x0, 0x0, 0x0, 0x8001, 0x80, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x4, 0x0, 0x0, 0x0, 0xffffe]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) 214.628607ms ago: executing program 0 (id=529): syz_mount_image$hfs(&(0x7f0000002c80), &(0x7f0000000080)='./file0\x00', 0x4490, &(0x7f0000002cc0)=ANY=[], 0xfd, 0x28f, &(0x7f0000002940)="$eJzs3U1rE0Ecx/HfbJImtqVuH0QQT9WCJ+nDRbwUJO/AiydRmwjFUEErqCf1LL4A730LvgCPnsSz4K0nX0BukZmdNZtkN5uGppuk3w8kbLrzn4fsbGf+KSUCcGk9qP852Tu1DyOVVJJ0Xwok1aSypGu6XntzdHx43Go2hlVUchH2YRRFmoEyB0fNtFAb5yK80L4qazn5M0xG7bc+FN0HFM/d/SkCqervTne+duE9m4zLPulNW2291UrR/QAAFMuv/4Ff55f9/j0IpC2/7Peu/zO+gLaL7sCEfc85n1j/XZbVMfb6XnWnuvmeS+HKqvigk73TtLoWc9paUDSzejaYJi+rdH0Jrjw/bDXvHrxsNQJ90r5X6RbbcM+NaOrG4pzWHn8crHrT56Yj5pfJ2s5myY2hYsewm+x/osj6ObboM+7ht6b5YX6axybUVzX+7//KHWMvk7tSYd+Vivq/nV2jG+WCXKmMUa66Rm74FkYZZUkZGYniGbXadwHDvH66qLW+qGh0OzlR66lRuzlRG/1R3dmcHTlp5ot5ZDb1V99UT+z/A/tub2mUO9OWcSX9zBg6nrIrGbrZGc/Pm6klg3FHhDF81jPd08rrd+9fPG21mq/m9sDeiYOn7AoyLT28+IN4EkxLf+b2wL7JhbQerzvj15P9q4OP5edH96KfMZBJMC/svstE+V8iX9l2mzX7FPbu06vJ2E5e5YkadzJygzX3vJidwfUwLr9ZSvnr4mCLQ3OuW3ek26O0GAl9P6fP/jhBpq5fesLn/wAAAAAAAAAAAAAAAAAAALPm/P7loKasU0WPEQAAAAAAAAAAAAAAAAAAAACAWZfy/b/VQr//96GiV3z/LzBx/wIAAP//nY5x9w==") syz_mount_image$fuse(0x0, &(0x7f0000000100)='./file0\x00', 0x1, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) syz_mount_image$fuse(&(0x7f00000001c0), &(0x7f00000002c0)='.\x00', 0x322020, &(0x7f0000000140)=ANY=[], 0x1, 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000380)='./file1/file3\x00', 0x0) 206.277478ms ago: executing program 5 (id=530): r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r2, 0x1, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x80) 91.289644ms ago: executing program 5 (id=531): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="002281"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) ioctl$HIDIOCSREPORT(r1, 0x81044804, &(0x7f0000000400)={0x201, 0x2}) 0s ago: executing program 0 (id=532): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000500)={0x0, 0x200, 0x0, 'queue0\x00', 0xf}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x0, 0x1, 0xaf, 0x2, 0x2}, 0x802}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) write$sndseq(r1, &(0x7f0000000140)=[{0x1e, 0x0, 0x8, 0xfd, @time={0x9, 0x8}, {}, {}, @result}], 0x1c) kernel console output (not intermixed with test programs): 246] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 68.939994][ T4249] Bluetooth: hci2: command 0x040f tx timeout [ 68.947738][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.968915][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 68.977977][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 68.989370][ T4246] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.999727][ T4246] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.019882][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 69.039955][ T1171] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.049146][ T1171] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.076663][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 69.095051][ T4190] device veth0_vlan entered promiscuous mode [ 69.113652][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 69.123529][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 69.132584][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 69.140511][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 69.158042][ T1171] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.160343][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.172975][ T1171] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.192701][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.205802][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.216336][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.226321][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.237002][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.248528][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.265523][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 69.277707][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 69.287683][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 69.310128][ T4190] device veth1_vlan entered promiscuous mode [ 69.330675][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.341658][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.351838][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.362358][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.372657][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.383971][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.396942][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.430145][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.441168][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 69.450665][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 69.464825][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.476455][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 69.489780][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 69.500027][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 69.513017][ T4189] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.523627][ T4189] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.532553][ T4189] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.541642][ T4189] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.577326][ T4190] device veth0_macvtap entered promiscuous mode [ 69.621143][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 69.629793][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 69.667951][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 69.705140][ T4264] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.717551][ T4190] device veth1_macvtap entered promiscuous mode [ 69.750574][ T4264] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.795235][ T4296] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 69.827675][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.838471][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.856472][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.869386][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.918239][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.929137][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.945431][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.957598][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.983339][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.000079][ T4302] loop1: detected capacity change from 0 to 2048 [ 70.012027][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 70.036895][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 70.045720][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 70.054682][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 70.066312][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.081018][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.115478][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.127555][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.139864][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.151063][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.160995][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.172132][ T4302] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 70.190362][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.205814][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.269795][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 70.293238][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 70.325462][ T4190] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.337501][ T4190] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.346758][ T4190] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.358398][ T4190] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.486363][ T1171] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.533640][ T1171] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.580076][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 70.608356][ T1171] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.640241][ T1171] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.654033][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 70.710831][ T4264] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.742080][ T4264] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.753957][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 70.845165][ T1171] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.855281][ T4232] Bluetooth: hci0: command 0x0419 tx timeout [ 70.875253][ T4319] loop1: detected capacity change from 0 to 256 [ 70.888083][ T1171] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.898930][ T4320] loop0: Can't mount, would change RO state [ 70.904361][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 70.921392][ T4222] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 70.932185][ T4248] Bluetooth: hci4: command 0x0419 tx timeout [ 70.939352][ T4248] Bluetooth: hci3: command 0x0419 tx timeout [ 71.002823][ T4232] Bluetooth: hci2: command 0x0419 tx timeout [ 71.015984][ T4232] Bluetooth: hci1: command 0x0419 tx timeout [ 71.024781][ T4319] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d) [ 71.301307][ T4222] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 71.326808][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.333543][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.341997][ T4248] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 71.354717][ T4222] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 71.482258][ T4222] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 71.531205][ T4222] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 71.539263][ T4222] usb 3-1: SerialNumber: syz [ 71.611292][ T4248] usb 1-1: Using ep0 maxpacket: 16 [ 71.751598][ T4248] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 71.771187][ T4248] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 71.800177][ T4248] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 71.835504][ T4346] loop4: detected capacity change from 0 to 8192 [ 71.896026][ T4222] usb 3-1: 0:2 : does not exist [ 71.917127][ T4248] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 71.931813][ T4248] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 71.955513][ T4248] usb 1-1: SerialNumber: syz [ 72.013358][ T4248] hub 1-1:1.0: bad descriptor, ignoring hub [ 72.022629][ T4248] hub: probe of 1-1:1.0 failed with error -5 [ 72.038039][ T4222] usb 3-1: USB disconnect, device number 2 [ 72.061122][ T4248] cdc_ether: probe of 1-1:1.0 failed with error -22 [ 72.332787][ T4364] loop4: detected capacity change from 0 to 128 [ 72.351385][ T7] usb 1-1: USB disconnect, device number 2 [ 72.371876][ T4364] ======================================================= [ 72.371876][ T4364] WARNING: The mand mount option has been deprecated and [ 72.371876][ T4364] and is ignored by this kernel. Remove the mand [ 72.371876][ T4364] option from the mount to silence this warning. [ 72.371876][ T4364] ======================================================= [ 72.406834][ C0] vkms_vblank_simulate: vblank timer overrun [ 72.509409][ T4364] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 72.574842][ T4364] hpfs: filesystem error: improperly stopped [ 72.580919][ T4364] hpfs: You really don't want any checks? You are crazy... [ 72.607210][ T4357] loop3: detected capacity change from 0 to 40427 [ 72.618480][ T4371] loop2: detected capacity change from 0 to 256 [ 72.625269][ T4364] hpfs: hpfs_map_sector(): read error [ 72.633102][ T4364] hpfs: code page support is disabled [ 72.639173][ T4364] hpfs: hpfs_map_4sectors(): unaligned read [ 72.646541][ T4364] hpfs: hpfs_map_4sectors(): unaligned read [ 72.654868][ T4364] hpfs: filesystem error: unable to find root dir [ 72.673278][ T4364] hpfs: hpfs_map_4sectors(): unaligned read [ 72.680311][ T4364] hpfs: hpfs_map_sector(): read error [ 72.702018][ T4357] F2FS-fs (loop3): invalid crc value [ 72.724867][ T4357] F2FS-fs (loop3): Found nat_bits in checkpoint [ 72.779705][ T4371] FAT-fs (loop2): Directory bread(block 64) failed [ 72.825346][ T4371] FAT-fs (loop2): Directory bread(block 65) failed [ 72.878438][ T4371] FAT-fs (loop2): Directory bread(block 66) failed [ 72.893707][ T4382] loop0: detected capacity change from 0 to 128 [ 72.901204][ T4371] FAT-fs (loop2): Directory bread(block 67) failed [ 72.907882][ T4371] FAT-fs (loop2): Directory bread(block 68) failed [ 72.935563][ T4357] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 72.947023][ T4371] FAT-fs (loop2): Directory bread(block 69) failed [ 72.954262][ T4371] FAT-fs (loop2): Directory bread(block 70) failed [ 72.963100][ T4371] FAT-fs (loop2): Directory bread(block 71) failed [ 72.969867][ T4371] FAT-fs (loop2): Directory bread(block 72) failed [ 72.979640][ T4371] FAT-fs (loop2): Directory bread(block 73) failed [ 73.002497][ T4382] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; going on - but anything won't be destroyed because it's read-only [ 73.111133][ T4382] hpfs: filesystem error: improperly stopped [ 73.132557][ T4382] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 73.221498][ T4382] hpfs: Proceeding, but your filesystem could be corrupted if you delete files or directories [ 73.281801][ T4382] hpfs: You really don't want any checks? You are crazy... [ 73.293969][ T26] audit: type=1800 audit(1769780779.538:2): pid=4371 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.32" name=3830322E31352E34204D4143 dev="loop2" ino=1048595 res=0 errno=0 [ 73.335908][ T4189] attempt to access beyond end of device [ 73.335908][ T4189] loop3: rw=2049, want=45104, limit=40427 [ 73.344830][ T4382] hpfs: hpfs_map_sector(): read error [ 73.389616][ T4382] hpfs: code page support is disabled [ 73.411285][ T4382] hpfs: hpfs_map_4sectors(): unaligned read [ 73.417355][ T4382] hpfs: hpfs_map_4sectors(): unaligned read [ 73.457094][ T4382] hpfs: filesystem error: unable to find root dir [ 73.596125][ T4387] loop2: detected capacity change from 0 to 1024 [ 73.671239][ T4387] EXT4-fs (loop2): Ignoring removed orlov option [ 73.735819][ T4387] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 73.871420][ T4387] EXT4-fs (loop2): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,noblock_validity,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 73.938276][ T4385] loop4: detected capacity change from 0 to 32768 [ 73.954945][ T4378] loop1: detected capacity change from 0 to 32768 [ 74.018794][ T4385] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.36 (4385) [ 74.041495][ T4387] EXT4-fs (loop2): can't change dax mount option while remounting [ 74.096977][ T4385] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 74.111639][ T4394] ntfs3: loop0: Different NTFS' sector size (1024) and media sector size (512) [ 74.128101][ T4378] find_entry called with index >= next_index [ 74.150810][ T4385] BTRFS info (device loop4): using free space tree [ 74.165788][ T4385] BTRFS info (device loop4): has skinny extents [ 74.541798][ T4385] BTRFS info (device loop4): enabling ssd optimizations [ 74.561584][ T4416] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 74.616297][ T4416] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 74.641067][ T4416] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xb94faefa, utbl_chksum : 0xe619d30d) [ 74.670383][ T4422] erofs: (device loop0): mounted with root inode @ nid 36. [ 74.761198][ T4421] ntfs: volume version 3.1. [ 75.203201][ T4429] set_capacity_and_notify: 4 callbacks suppressed [ 75.203218][ T4429] loop2: detected capacity change from 0 to 2048 [ 75.414167][ T4441] loop3: detected capacity change from 0 to 64 [ 75.456160][ T4429] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 75.505649][ T4429] ext4 filesystem being mounted at /6/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 75.805357][ T1171] attempt to access beyond end of device [ 75.805357][ T1171] loop3: rw=1, want=66, limit=64 [ 75.855756][ T1171] Buffer I/O error on dev loop3, logical block 65, lost async page write [ 75.917417][ T4453] loop2: detected capacity change from 0 to 1024 [ 76.060372][ T4453] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,bsddf,nombcache,norecovery,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,noblock_validity,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 76.088811][ T1171] attempt to access beyond end of device [ 76.088811][ T1171] loop3: rw=1, want=67, limit=64 [ 76.166857][ T1171] Buffer I/O error on dev loop3, logical block 66, lost async page write [ 76.211246][ T1171] attempt to access beyond end of device [ 76.211246][ T1171] loop3: rw=1, want=68, limit=64 [ 76.287388][ T1171] Buffer I/O error on dev loop3, logical block 67, lost async page write [ 76.340095][ T1171] attempt to access beyond end of device [ 76.340095][ T1171] loop3: rw=1, want=69, limit=64 [ 76.397022][ T1171] Buffer I/O error on dev loop3, logical block 68, lost async page write [ 76.451017][ T1171] attempt to access beyond end of device [ 76.451017][ T1171] loop3: rw=1, want=73, limit=64 [ 76.501085][ T1171] Buffer I/O error on dev loop3, logical block 72, lost async page write [ 76.570468][ T1171] attempt to access beyond end of device [ 76.570468][ T1171] loop3: rw=1, want=74, limit=64 [ 76.622288][ T1171] Buffer I/O error on dev loop3, logical block 73, lost async page write [ 76.658924][ T1171] attempt to access beyond end of device [ 76.658924][ T1171] loop3: rw=1, want=77, limit=64 [ 76.700477][ T1171] Buffer I/O error on dev loop3, logical block 76, lost async page write [ 76.735777][ T1171] attempt to access beyond end of device [ 76.735777][ T1171] loop3: rw=1, want=78, limit=64 [ 76.775104][ T4443] loop1: detected capacity change from 0 to 32768 [ 76.792313][ T1171] Buffer I/O error on dev loop3, logical block 77, lost async page write [ 76.827319][ T1171] attempt to access beyond end of device [ 76.827319][ T1171] loop3: rw=1, want=150, limit=64 [ 76.861057][ C1] sched: RT throttling activated [ 76.892939][ T4451] loop4: detected capacity change from 0 to 131072 [ 76.948697][ T4447] loop0: detected capacity change from 0 to 40427 [ 76.990672][ T4443] ERROR: (device loop1): dtSearch: stack overrun! [ 76.990672][ T4443] [ 77.009036][ T4451] F2FS-fs (loop4): Wrong CP boundary, start(512) end(1536) blocks(0) [ 77.017543][ T4451] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 77.028881][ T4447] F2FS-fs (loop0): invalid crc value [ 77.034720][ T4451] F2FS-fs (loop4): invalid crc value [ 77.071183][ T4451] F2FS-fs (loop4): Found nat_bits in checkpoint [ 77.075182][ T4443] ERROR: (device loop1): remounting filesystem as read-only [ 77.127553][ T4443] btstack dump: [ 77.133376][ T4447] F2FS-fs (loop0): Found nat_bits in checkpoint [ 77.142683][ T4451] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 77.149858][ T4451] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 77.205947][ T4443] bn = 0, index = 0 [ 77.209841][ T4443] bn = 72c, index = 96 [ 77.291246][ T4443] bn = 0, index = 0 [ 77.295145][ T4443] bn = 72c, index = 96 [ 77.351951][ T4443] bn = 0, index = 0 [ 77.355834][ T4443] bn = 72c, index = 96 [ 77.359966][ T4443] bn = 0, index = 0 [ 77.397054][ T4447] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 77.404702][ T4443] bn = 0, index = 0 [ 77.956992][ T4481] loop3: detected capacity change from 0 to 4096 [ 78.019959][ T4489] loop1: detected capacity change from 0 to 128 [ 78.044890][ T4487] loop4: detected capacity change from 0 to 4096 [ 78.100802][ T4489] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 78.111706][ T4489] ext4 filesystem being mounted at /18/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 78.122196][ T4435] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 78.139239][ T4487] ntfs3: loop4: ino=3, Correct links count -> 2. [ 78.201817][ T4481] ntfs: volume version 3.1. [ 78.214244][ T4489] fscrypt (loop1, inode 12): Direct key flag not allowed with different contents and filenames modes [ 78.347165][ T4481] ntfs: (device loop3): ntfs_write_block(): Writing beyond initialized size is not supported yet. Sorry. [ 78.501456][ T4435] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 78.531293][ T4435] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 78.551948][ T4494] loop1: detected capacity change from 0 to 512 [ 78.565650][ T4435] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 78.644604][ T4494] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 78.675866][ T4494] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 78.770665][ T4494] EXT4-fs error (device loop1): ext4_orphan_get:1426: comm syz.1.67: bad orphan inode 131083 [ 78.801319][ T4435] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 78.820651][ T4435] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.867151][ T4494] EXT4-fs (loop1): mounted filesystem without journal. Opts: stripe=0x000000000000003d,init_itable,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none. [ 78.886076][ T4504] netlink: 4 bytes leftover after parsing attributes in process `syz.0.70'. [ 78.915186][ T4435] usb 3-1: Product: syz [ 78.919644][ T4435] usb 3-1: Manufacturer: syz [ 78.945787][ T4435] usb 3-1: SerialNumber: syz [ 79.028170][ T4435] hub 3-1:1.0: bad descriptor, ignoring hub [ 79.044914][ T4435] hub: probe of 3-1:1.0 failed with error -5 [ 79.183092][ T4504] team0 (unregistering): Port device team_slave_0 removed [ 79.234187][ T4183] EXT4-fs error (device loop1): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 79.262632][ T4435] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 3 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 79.287070][ T4504] team0 (unregistering): Port device team_slave_1 removed [ 79.656846][ T4239] usb 3-1: USB disconnect, device number 3 [ 79.688884][ T4239] usblp0: removed [ 79.823010][ T4507] XFS (loop3): Mounting V5 Filesystem [ 79.841451][ T1171] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.967824][ T4507] XFS (loop3): Ending clean mount [ 80.000057][ T1171] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.035156][ T4507] XFS (loop3): Quotacheck needed: Please wait. [ 80.114403][ T4507] XFS (loop3): Quotacheck: Done. [ 80.165662][ T1171] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.294195][ T4531] set_capacity_and_notify: 1 callbacks suppressed [ 80.294212][ T4531] loop2: detected capacity change from 0 to 128 [ 80.411541][ T1171] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.513134][ T4528] loop4: detected capacity change from 0 to 32768 [ 80.514188][ T4531] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 80.551297][ T4531] ext4 filesystem being mounted at /13/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 80.604032][ T4528] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 80.612570][ T4528] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 80.635952][ T4535] netlink: 16 bytes leftover after parsing attributes in process `syz.0.82'. [ 80.658809][ T4189] XFS (loop3): Unmounting Filesystem [ 80.668736][ T4528] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms [ 80.680672][ T4435] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 80.690260][ T4435] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 80.739348][ T4435] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 49ms [ 80.748928][ T4435] gfs2: fsid=syz:syz.0: jid=0: Done [ 80.756366][ T4528] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 80.941779][ T4528] gfs2: fsid=syz:syz.0: found 1 quota changes [ 81.152648][ T4528] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error [ 81.152648][ T4528] inode = 11 2339 [ 81.152648][ T4528] function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 465 [ 81.171970][ T4528] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 81.189439][ T4528] gfs2: fsid=syz:syz.0: warning: assertion "!qd->qd_change" failed at function = gfs2_quota_cleanup, file = fs/gfs2/quota.c, line = 1485 [ 81.203735][ T4528] CPU: 0 PID: 4528 Comm: syz.4.80 Not tainted syzkaller #0 [ 81.210984][ T4528] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 81.221088][ T4528] Call Trace: [ 81.224397][ T4528] [ 81.227373][ T4528] dump_stack_lvl+0x188/0x250 [ 81.232110][ T4528] ? show_regs_print_info+0x20/0x20 [ 81.237364][ T4528] ? load_image+0x400/0x400 [ 81.241925][ T4528] ? do_raw_spin_unlock+0x11d/0x230 [ 81.247169][ T4528] gfs2_assert_warn_i+0x18f/0x2c0 [ 81.252250][ T4528] gfs2_quota_cleanup+0x4b4/0x6a0 [ 81.257328][ T4528] gfs2_make_fs_ro+0x440/0x620 [ 81.262122][ T4528] ? __might_sleep+0xf0/0xf0 [ 81.266752][ T4528] ? gfs2_dinode_out+0xb00/0xb00 [ 81.271729][ T4528] ? _raw_spin_unlock+0x24/0x40 [ 81.276616][ T4528] ? gfs2_glock_nq+0xcb0/0x1550 [ 81.281610][ T4528] gfs2_withdraw+0x610/0x1490 [ 81.286332][ T4528] ? gfs2_lm+0x240/0x240 [ 81.290619][ T4528] ? gfs2_freeze_lock+0x52/0xc0 [ 81.295513][ T4528] ? gfs2_consist_inode_i+0xc0/0xe0 [ 81.300751][ T4528] gfs2_inode_refresh+0xb64/0xff0 [ 81.305811][ T4528] ? do_promote+0x71a/0xab0 [ 81.310347][ T4528] ? gfs2_inode_metasync+0xf0/0xf0 [ 81.315496][ T4528] ? __lock_acquire+0x7d10/0x7d10 [ 81.320591][ T4528] inode_go_lock+0x127/0x470 [ 81.325224][ T4528] do_promote+0x741/0xab0 [ 81.329600][ T4528] finish_xmote+0x4df/0xb00 [ 81.334143][ T4528] do_xmote+0x7b6/0x1120 [ 81.338439][ T4528] gfs2_glock_nq+0xc7a/0x1550 [ 81.343185][ T4528] do_sync+0x4ab/0xc40 [ 81.347308][ T4528] ? slot_put+0x1e0/0x1e0 [ 81.351683][ T4528] ? __lock_acquire+0x7d10/0x7d10 [ 81.356749][ T4528] ? do_raw_spin_lock+0x128/0x2f0 [ 81.361811][ T4528] ? do_sync+0x4a3/0xc40 [ 81.366090][ T4528] ? do_raw_spin_unlock+0x11d/0x230 [ 81.371328][ T4528] gfs2_quota_sync+0x32c/0x700 [ 81.376148][ T4528] gfs2_sync_fs+0x48/0xb0 [ 81.380514][ T4528] sync_filesystem+0xe6/0x220 [ 81.385227][ T4528] gfs2_reconfigure+0x125/0xd30 [ 81.390120][ T4528] ? shrink_dcache_sb+0x38d/0x3e0 [ 81.395186][ T4528] ? gfs2_get_tree+0x1e0/0x1e0 [ 81.399994][ T4528] ? dentry_lru_isolate+0x2e0/0x2e0 [ 81.405238][ T4528] ? hook_sb_remount+0x19/0xc0 [ 81.410048][ T4528] reconfigure_super+0x219/0x8a0 [ 81.415040][ T4528] path_mount+0xd54/0x1030 [ 81.419512][ T4528] ? user_path_at_empty+0x13e/0x190 [ 81.424773][ T4528] __se_sys_mount+0x2e3/0x3d0 [ 81.429500][ T4528] ? __x64_sys_mount+0xc0/0xc0 [ 81.434308][ T4528] ? lockdep_hardirqs_on+0x94/0x140 [ 81.439553][ T4528] ? __x64_sys_mount+0x1c/0xc0 [ 81.444377][ T4528] do_syscall_64+0x4c/0xa0 [ 81.448843][ T4528] ? clear_bhb_loop+0x30/0x80 [ 81.453562][ T4528] ? clear_bhb_loop+0x30/0x80 [ 81.458291][ T4528] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 81.464248][ T4528] RIP: 0033:0x7f4bc2607eb9 [ 81.468695][ T4528] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 81.488339][ T4528] RSP: 002b:00007f4bc0863028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 81.496799][ T4528] RAX: ffffffffffffffda RBX: 00007f4bc2882fa0 RCX: 00007f4bc2607eb9 [ 81.504809][ T4528] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000000 [ 81.512822][ T4528] RBP: 00007f4bc2675c1f R08: 0000000000000000 R09: 0000000000000000 [ 81.520921][ T4528] R10: 0000000002390024 R11: 0000000000000246 R12: 0000000000000000 [ 81.528929][ T4528] R13: 00007f4bc2883038 R14: 00007f4bc2882fa0 R15: 00007ffe35ff0ac8 [ 81.536960][ T4528] [ 81.543502][ T4528] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 81.552729][ T4528] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 81.560188][ T4528] gfs2: fsid=syz:syz.0: File system withdrawn [ 81.566337][ T4528] CPU: 0 PID: 4528 Comm: syz.4.80 Not tainted syzkaller #0 [ 81.573572][ T4528] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 81.583657][ T4528] Call Trace: [ 81.586965][ T4528] [ 81.589922][ T4528] dump_stack_lvl+0x188/0x250 [ 81.594640][ T4528] ? kobject_uevent_env+0x371/0x890 [ 81.599875][ T4528] ? show_regs_print_info+0x20/0x20 [ 81.605121][ T4528] ? load_image+0x400/0x400 [ 81.609667][ T4528] ? kobject_uevent_env+0x371/0x890 [ 81.614906][ T4528] ? lockref_put_or_lock+0x6e/0xb0 [ 81.620060][ T4528] gfs2_withdraw+0x1149/0x1490 [ 81.624873][ T4528] ? gfs2_lm+0x240/0x240 [ 81.629167][ T4528] ? gfs2_consist_inode_i+0xc0/0xe0 [ 81.634406][ T4528] gfs2_inode_refresh+0xb64/0xff0 [ 81.639478][ T4528] ? do_promote+0x71a/0xab0 [ 81.644025][ T4528] ? gfs2_inode_metasync+0xf0/0xf0 [ 81.649185][ T4528] ? __lock_acquire+0x7d10/0x7d10 [ 81.654624][ T4528] inode_go_lock+0x127/0x470 [ 81.658068][ T4529] chnl_net:caif_netlink_parms(): no params data found [ 81.659269][ T4528] do_promote+0x741/0xab0 [ 81.670791][ T4528] finish_xmote+0x4df/0xb00 [ 81.675359][ T4528] do_xmote+0x7b6/0x1120 [ 81.679752][ T4528] gfs2_glock_nq+0xc7a/0x1550 [ 81.684489][ T4528] do_sync+0x4ab/0xc40 [ 81.688604][ T4528] ? slot_put+0x1e0/0x1e0 [ 81.692978][ T4528] ? __lock_acquire+0x7d10/0x7d10 [ 81.698043][ T4528] ? do_raw_spin_lock+0x128/0x2f0 [ 81.703115][ T4528] ? do_sync+0x4a3/0xc40 [ 81.707411][ T4528] ? do_raw_spin_unlock+0x11d/0x230 [ 81.712651][ T4528] gfs2_quota_sync+0x32c/0x700 [ 81.717551][ T4528] gfs2_sync_fs+0x48/0xb0 [ 81.721927][ T4528] sync_filesystem+0xe6/0x220 [ 81.726647][ T4528] gfs2_reconfigure+0x125/0xd30 [ 81.731538][ T4528] ? shrink_dcache_sb+0x38d/0x3e0 [ 81.736604][ T4528] ? gfs2_get_tree+0x1e0/0x1e0 [ 81.741404][ T4528] ? dentry_lru_isolate+0x2e0/0x2e0 [ 81.746638][ T4528] ? hook_sb_remount+0x19/0xc0 [ 81.751454][ T4528] reconfigure_super+0x219/0x8a0 [ 81.756437][ T4528] path_mount+0xd54/0x1030 [ 81.760904][ T4528] ? user_path_at_empty+0x13e/0x190 [ 81.766147][ T4528] __se_sys_mount+0x2e3/0x3d0 [ 81.770882][ T4528] ? __x64_sys_mount+0xc0/0xc0 [ 81.775689][ T4528] ? lockdep_hardirqs_on+0x94/0x140 [ 81.780931][ T4528] ? __x64_sys_mount+0x1c/0xc0 [ 81.785752][ T4528] do_syscall_64+0x4c/0xa0 [ 81.790211][ T4528] ? clear_bhb_loop+0x30/0x80 [ 81.794937][ T4528] ? clear_bhb_loop+0x30/0x80 [ 81.799656][ T4528] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 81.805580][ T4528] RIP: 0033:0x7f4bc2607eb9 [ 81.810033][ T4528] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 81.829670][ T4528] RSP: 002b:00007f4bc0863028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 81.838157][ T4528] RAX: ffffffffffffffda RBX: 00007f4bc2882fa0 RCX: 00007f4bc2607eb9 [ 81.846284][ T4528] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000000 [ 81.854301][ T4528] RBP: 00007f4bc2675c1f R08: 0000000000000000 R09: 0000000000000000 [ 81.862324][ T4528] R10: 0000000002390024 R11: 0000000000000246 R12: 0000000000000000 [ 81.870331][ T4528] R13: 00007f4bc2883038 R14: 00007f4bc2882fa0 R15: 00007ffe35ff0ac8 [ 81.878354][ T4528] [ 81.883675][ T4528] gfs2: unable to remount read-write [ 82.512761][ T4529] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.519882][ T4529] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.527670][ T4247] Bluetooth: hci0: command 0x0409 tx timeout [ 82.610774][ T4529] device bridge_slave_0 entered promiscuous mode [ 82.658072][ T4529] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.706439][ T4529] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.738724][ T4529] device bridge_slave_1 entered promiscuous mode [ 82.745335][ T4571] loop0: detected capacity change from 0 to 4096 [ 82.788791][ T4571] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 82.919406][ T4571] ntfs: (device loop0): read_ntfs_boot_sector(): Primary boot sector is invalid. [ 82.971745][ T4571] ntfs: (device loop0): read_ntfs_boot_sector(): Hot-fix: Recovering invalid primary boot sector from backup copy. [ 83.006758][ T4529] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.039680][ T4550] loop2: detected capacity change from 0 to 32768 [ 83.079057][ T4571] ntfs: (device loop0): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 83.105515][ T4571] ntfs: (device loop0): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 83.128958][ T4571] ntfs: (device loop0): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 83.140626][ T4571] ntfs: (device loop0): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x200 because its location on disk could not be determined even after retrying (error code -5). [ 83.169206][ T4585] loop3: detected capacity change from 0 to 512 [ 83.198944][ T4550] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop2 scanned by syz.2.85 (4550) [ 83.242490][ T4571] ntfs: (device loop0): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 83.255533][ T4529] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.282827][ T4550] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 83.326240][ T4550] BTRFS info (device loop2): using free space tree [ 83.339074][ T4571] ntfs: (device loop0): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x1, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 83.379279][ T4550] BTRFS info (device loop2): has skinny extents [ 83.414813][ T4585] EXT4-fs error (device loop3): ext4_ext_check_inode:501: inode #15: comm syz.3.94: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 83.434992][ T4529] team0: Port device team_slave_0 added [ 83.505884][ T4571] ntfs: (device loop0): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 83.516783][ T4585] EXT4-fs error (device loop3): ext4_quota_enable:6445: comm syz.3.94: Bad quota inode: 15, type: 2 [ 83.566872][ T4529] team0: Port device team_slave_1 added [ 83.591544][ T4571] ntfs: (device loop0): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x1, offset 0x200 because its location on disk could not be determined even after retrying (error code -5). [ 83.630350][ T4585] EXT4-fs warning (device loop3): ext4_enable_quotas:6486: Failed to enable quota tracking (type=2, err=-117, ino=15). Please run e2fsck to fix. [ 83.663008][ T4571] ntfs: (device loop0): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 83.675380][ T4585] EXT4-fs (loop3): mount failed [ 83.698630][ T4571] ntfs: (device loop0): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x2, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 83.720169][ T4571] ntfs: (device loop0): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 83.728972][ T4571] ntfs: (device loop0): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x2, offset 0x200 because its location on disk could not be determined even after retrying (error code -5). [ 83.749336][ T4571] ntfs: (device loop0): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 83.758126][ T4571] ntfs: (device loop0): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x3, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 83.840308][ T4571] ntfs: (device loop0): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 83.871302][ T4571] ntfs: (device loop0): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x3, offset 0x200 because its location on disk could not be determined even after retrying (error code -5). [ 83.872213][ T4529] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.915715][ T4529] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.915763][ T4550] BTRFS info (device loop2): enabling ssd optimizations [ 83.950767][ T4529] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.982247][ T4571] ntfs: volume version 3.1. [ 84.020187][ T4529] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.036770][ T4529] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.100489][ T4529] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.159024][ T4585] netlink: 8 bytes leftover after parsing attributes in process `syz.3.94'. [ 84.343199][ T4529] device hsr_slave_0 entered promiscuous mode [ 84.391766][ T4529] device hsr_slave_1 entered promiscuous mode [ 84.429552][ T4529] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 84.480865][ T4529] Cannot create hsr debugfs directory [ 84.570310][ T4632] loop3: detected capacity change from 0 to 16 [ 84.624657][ T4544] Bluetooth: hci0: command 0x041b tx timeout [ 84.665432][ T4632] erofs: (device loop3): check_layout_compatibility: unidentified incompatible feature 8, please upgrade kernel version [ 84.784813][ T4631] loop4: detected capacity change from 0 to 4096 [ 85.209068][ T4658] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 85.602415][ T4529] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 85.694540][ T4529] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 85.724240][ T4679] loop0: detected capacity change from 0 to 512 [ 85.754801][ T4529] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 85.782822][ T4679] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 85.801953][ T4674] netlink: 140 bytes leftover after parsing attributes in process `syz.3.113'. [ 85.888383][ T4679] EXT4-fs (loop0): 1 truncate cleaned up [ 85.907742][ T4679] EXT4-fs (loop0): mounted filesystem without journal. Opts: noload,stripe=0x00000000000000dc,journal_dev=0x0000000000000003,noload,data_err=ignore,nouid32,,errors=continue. Quota mode: none. [ 85.935069][ T4529] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 86.148855][ T4679] overlayfs: upper fs needs to support d_type. [ 86.151841][ T1171] device hsr_slave_0 left promiscuous mode [ 86.199828][ T1171] device hsr_slave_1 left promiscuous mode [ 86.218721][ T1171] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 86.231250][ T1171] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 86.250587][ T1171] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 86.268347][ T1171] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 86.282728][ T1171] device bridge_slave_1 left promiscuous mode [ 86.300705][ T1171] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.323653][ T4680] loop2: detected capacity change from 0 to 32768 [ 86.355745][ T4188] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz-executor: invalid indirect mapped block 4294901760 (level 0) [ 86.379905][ T1171] device bridge_slave_0 left promiscuous mode [ 86.394923][ T1171] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.404831][ T4698] netlink: 4 bytes leftover after parsing attributes in process `syz.3.120'. [ 86.418191][ T4188] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz-executor: invalid indirect mapped block 4294967295 (level 1) [ 86.461460][ T4188] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz-executor: invalid indirect mapped block 65535 (level 2) [ 86.532340][ T1171] device veth1_macvtap left promiscuous mode [ 86.547401][ T1171] device veth0_macvtap left promiscuous mode [ 86.564315][ T1171] device veth1_vlan left promiscuous mode [ 86.570464][ T1171] device veth0_vlan left promiscuous mode [ 86.584126][ T4680] JBD2: Ignoring recovery information on journal [ 86.684355][ T1107] cfg80211: failed to load regulatory.db [ 86.702259][ T4642] Bluetooth: hci0: command 0x040f tx timeout [ 86.749275][ T4680] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 86.794060][ T4706] loop0: detected capacity change from 0 to 64 [ 86.989689][ T4680] syz.2.114 (4680) used greatest stack depth: 21144 bytes left [ 86.997684][ T4642] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 87.122451][ T4187] ocfs2: Unmounting device (7,2) on (node local) [ 87.251379][ T4642] usb 4-1: Using ep0 maxpacket: 16 [ 87.273616][ T1171] team0 (unregistering): Port device team_slave_1 removed [ 87.290665][ T1171] team0 (unregistering): Port device team_slave_0 removed [ 87.359159][ T1171] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 87.378079][ T1171] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 87.384641][ T4642] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 87.431428][ T4640] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 87.517180][ T1171] bond0 (unregistering): Released all slaves [ 87.551300][ T4642] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 87.560423][ T4642] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.574555][ T4642] usb 4-1: Product: syz [ 87.578781][ T4642] usb 4-1: Manufacturer: syz [ 87.583793][ T4642] usb 4-1: SerialNumber: syz [ 87.590957][ T4642] usb 4-1: config 0 descriptor?? [ 87.663505][ T4642] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 87.681347][ T4640] usb 1-1: Using ep0 maxpacket: 32 [ 87.702430][ T4642] usb 4-1: Detected FT232RL [ 87.808138][ T4640] usb 1-1: config 0 has an invalid interface number: 126 but max is 0 [ 87.840275][ T4640] usb 1-1: config 0 has no interface number 0 [ 87.857566][ T4640] usb 1-1: config 0 interface 126 altsetting 16 bulk endpoint 0x6 has invalid maxpacket 1023 [ 87.884408][ T4529] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.891241][ T4642] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 87.898558][ T4640] usb 1-1: config 0 interface 126 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 8 [ 87.921221][ T4640] usb 1-1: config 0 interface 126 has no altsetting 0 [ 87.971346][ T4723] sp0: Synchronizing with TNC [ 87.992386][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 88.015099][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 88.059527][ T4529] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.101990][ T4640] usb 1-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice=b0.1c [ 88.116133][ T4640] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.135145][ T4640] usb 1-1: Product: syz [ 88.141300][ T4640] usb 1-1: Manufacturer: syz [ 88.149665][ T4640] usb 1-1: SerialNumber: syz [ 88.173196][ T4642] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 88.204556][ T4640] usb 1-1: config 0 descriptor?? [ 88.233004][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 88.241725][ T4711] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 88.268332][ T4711] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 88.272439][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 88.286189][ T4740] loop4: detected capacity change from 0 to 64 [ 88.306808][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.313972][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.338763][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 88.348275][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 88.388405][ T4740] BFS-fs: bfs_fill_super(): loop4 is unclean, continuing [ 88.399155][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 88.425025][ T4644] usb 4-1: USB disconnect, device number 2 [ 88.457051][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.464267][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.491600][ T4644] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 88.505999][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 88.515933][ T4644] ftdi_sio 4-1:0.0: device disconnected [ 88.531898][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 88.575466][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 88.596552][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 88.622661][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 88.641836][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 88.652467][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 88.699070][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 88.730725][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 88.750939][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 88.759934][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 88.767948][ T4222] Bluetooth: hci0: command 0x0419 tx timeout [ 88.788278][ T4529] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 88.796645][ T4640] ir_usb 1-1:0.126: IR Dongle converter detected [ 89.013509][ T4640] usb 1-1: IR Dongle converter now attached to ttyUSB0 [ 89.235338][ T4640] usb 1-1: USB disconnect, device number 3 [ 89.284222][ T4640] ir-usb ttyUSB0: IR Dongle converter now disconnected from ttyUSB0 [ 89.317965][ T4640] ir_usb 1-1:0.126: device disconnected [ 89.436832][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 89.449333][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 89.489770][ T4529] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.874561][ T4640] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 89.989818][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 90.010893][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 90.097278][ T4529] device veth0_vlan entered promiscuous mode [ 90.121445][ T4640] usb 4-1: Using ep0 maxpacket: 8 [ 90.133171][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 90.171811][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 90.180615][ T4799] loop0: detected capacity change from 0 to 2048 [ 90.200568][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 90.221669][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 90.505381][ T4803] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 90.724048][ T4799] NILFS error (device loop0): nilfs_dotdot: directory #12 missing '..' [ 90.769954][ T4799] Remounting filesystem read-only [ 90.864557][ T4188] NILFS (loop0): disposed unprocessed dirty file(s) when detaching log writer [ 91.062166][ T4801] loop4: detected capacity change from 0 to 131072 [ 91.084732][ T4529] device veth1_vlan entered promiscuous mode [ 91.111222][ T4640] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 91.132734][ T4640] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 91.149125][ T4640] usb 4-1: New USB device found, idVendor=2179, idProduct=0053, bcdDevice= 0.00 [ 91.159400][ T4801] F2FS-fs (loop4): invalid crc value [ 91.204322][ T4801] F2FS-fs (loop4): Found nat_bits in checkpoint [ 91.235801][ T4222] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 91.254567][ T4640] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.263494][ T4801] F2FS-fs (loop4): Cannot turn on quotas: -2 on 2 [ 91.282992][ T4801] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 91.303081][ T4640] usb 4-1: config 0 descriptor?? [ 91.377298][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 91.412315][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 91.434843][ T4529] device veth0_macvtap entered promiscuous mode [ 91.466836][ T4529] device veth1_macvtap entered promiscuous mode [ 91.562844][ T4529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.604103][ T4222] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 91.623198][ T4529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.641188][ T4222] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 91.651726][ T4821] loop0: detected capacity change from 0 to 4096 [ 91.664592][ T4529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.691147][ T4222] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 91.722322][ T4529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.748348][ T4222] usb 3-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 91.757727][ T4529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.784484][ T4529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.790899][ T4640] uclogic 0003:2179:0053.0001: unbalanced delimiter at end of report description [ 91.816022][ T4222] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.831824][ T4529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.853365][ T4640] uclogic 0003:2179:0053.0001: parse failed [ 91.859358][ T4640] uclogic: probe of 0003:2179:0053.0001 failed with error -22 [ 91.878026][ T4222] usb 3-1: config 0 descriptor?? [ 91.902538][ T4529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.943068][ T4529] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.967874][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 91.977517][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 92.019514][ T4640] usb 4-1: USB disconnect, device number 3 [ 92.045827][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 92.099841][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 92.153341][ T4529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.184933][ T4529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.233824][ T4529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.261185][ T4529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.282045][ T4529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.304327][ T4529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.326431][ T4529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.373179][ T4222] acrux 0003:1A34:0802.0002: unknown main item tag 0x0 [ 92.380129][ T4222] acrux 0003:1A34:0802.0002: unknown main item tag 0x0 [ 92.387688][ T4529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.411370][ T4222] acrux 0003:1A34:0802.0002: unknown main item tag 0x0 [ 92.438393][ T4529] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.474617][ T4541] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 92.483157][ T4222] acrux 0003:1A34:0802.0002: unknown main item tag 0x0 [ 92.490234][ T4222] acrux 0003:1A34:0802.0002: unknown main item tag 0x0 [ 92.500608][ T4541] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 92.524672][ T4529] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.549519][ T4529] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.565243][ T4222] acrux 0003:1A34:0802.0002: hidraw0: USB HID v0.00 Device [HID 1a34:0802] on usb-dummy_hcd.2-1/input0 [ 92.579496][ T4529] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.591083][ T4222] acrux 0003:1A34:0802.0002: no inputs found [ 92.597123][ T4222] acrux 0003:1A34:0802.0002: Failed to enable force feedback support, error: -19 [ 92.637498][ T4529] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.729706][ T4222] usb 3-1: USB disconnect, device number 4 [ 92.748293][ T4188] ntfs3: loop0: ntfs_evict_inode r=5 failed, -22. [ 92.773656][ T4188] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 92.935414][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.972695][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.020448][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 93.053056][ T4838] loop0: detected capacity change from 0 to 16 [ 93.068090][ T4832] fido_id[4832]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 93.127952][ T4541] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.140293][ T4838] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 93.206379][ T4175] udevd[4175]: incorrect cramfs checksum on /dev/loop0 [ 93.217545][ T4541] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.274794][ T4541] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 93.364305][ T4845] ALSA: mixer_oss: invalid OSS volume 'l80211' [ 93.841319][ T4435] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 94.101173][ T4435] usb 5-1: Using ep0 maxpacket: 8 [ 94.178678][ T4880] loop5: detected capacity change from 0 to 4096 [ 94.223182][ T4435] usb 5-1: config index 0 descriptor too short (expected 30, got 18) [ 94.254805][ T4880] __ntfs_warning: 10 callbacks suppressed [ 94.254822][ T4880] ntfs: (device loop5): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 94.307672][ T4880] ntfs: (device loop5): ntfs_is_extended_system_file(): Non-resident file name. You should run chkdsk. [ 94.337136][ T4880] ntfs: (device loop5): ntfs_read_locked_inode(): $DATA attribute is missing. [ 94.372561][ T4880] ntfs: (device loop5): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0x1 as bad. Run chkdsk. [ 94.396063][ T4880] ntfs: (device loop5): load_system_files(): Failed to load $MFTMirr. Mounting read-only. Run ntfsfix and/or chkdsk. [ 94.453908][ T4880] ntfs: volume version 3.1. [ 94.462386][ T4435] usb 5-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 94.477980][ T4880] ntfs: (device loop5): ntfs_lookup_inode_by_name(): Index buffer (VCN 0x0) of directory inode 0x5 has a size (24) differing from the directory specified size (4096). Directory inode is corrupt or driver bug. [ 94.491017][ T4435] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.502847][ T4880] ntfs: (device loop5): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 94.518439][ T4880] ntfs: (device loop5): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 94.536756][ T4435] usb 5-1: Product: syz [ 94.554255][ T4435] usb 5-1: Manufacturer: syz [ 94.559985][ T4435] usb 5-1: SerialNumber: syz [ 94.578187][ T4435] usb 5-1: config 0 descriptor?? [ 94.611172][ T4544] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 94.646947][ T4435] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 94.668651][ T4435] usb 5-1: setting power ON [ 94.686803][ T4435] dvb-usb: bulk message failed: -22 (2/0) [ 94.748902][ T4435] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 94.797332][ T4893] loop2: detected capacity change from 0 to 128 [ 94.804256][ T4435] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 94.821353][ T4435] usb 5-1: media controller created [ 94.859047][ T4856] dvb-usb: bulk message failed: -22 (3/0) [ 94.896710][ T4435] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 94.912875][ T4856] dvb-usb: bulk message failed: -22 (3/0) [ 94.924988][ T4893] netlink: 8 bytes leftover after parsing attributes in process `syz.2.168'. [ 94.974848][ T4895] cxusb: i2c rd: len=159 is too big! [ 94.974848][ T4895] [ 95.031483][ T4544] usb 1-1: unable to get BOS descriptor or descriptor too short [ 95.042790][ T4435] usb 5-1: selecting invalid altsetting 6 [ 95.054738][ T4435] usb 5-1: digital interface selection failed (-22) [ 95.082233][ T4435] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 95.109115][ T4899] loop5: detected capacity change from 0 to 64 [ 95.141466][ T4544] usb 1-1: config 129 has an invalid interface number: 135 but max is 0 [ 95.151878][ T4435] usb 5-1: setting power OFF [ 95.160125][ T4544] usb 1-1: config 129 has an invalid interface number: 5 but max is 0 [ 95.185116][ T4435] dvb-usb: bulk message failed: -22 (2/0) [ 95.185573][ T4544] usb 1-1: config 129 has 2 interfaces, different from the descriptor's value: 1 [ 95.215279][ T4899] hfs: hfs: Invalid key length: 94 [ 95.221261][ T4435] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 95.225512][ T4544] usb 1-1: config 129 has no interface number 0 [ 95.243586][ T4435] (NULL device *): no alternate interface [ 95.331991][ T4544] usb 1-1: config 129 has no interface number 1 [ 95.337470][ T4435] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 95.366717][ T4544] usb 1-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 95.406755][ T4435] usb 5-1: USB disconnect, device number 2 [ 95.448813][ T4544] usb 1-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30 [ 95.491215][ T4544] usb 1-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37 [ 95.521127][ T4544] usb 1-1: config 129 interface 135 has no altsetting 0 [ 95.530803][ T4544] usb 1-1: config 129 interface 5 has no altsetting 0 [ 95.775653][ T4544] usb 1-1: string descriptor 0 read error: -22 [ 95.805611][ T4544] usb 1-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.00 [ 95.833543][ T4544] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.891334][ T4642] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 95.906689][ T4544] usb 1-1: MIDIStreaming interface descriptor not found [ 96.024192][ T4924] netlink: 12 bytes leftover after parsing attributes in process `syz.4.175'. [ 96.128261][ T4924] device vlan2 entered promiscuous mode [ 96.145133][ T4903] loop3: detected capacity change from 0 to 32768 [ 96.159123][ T4924] device bond0 entered promiscuous mode [ 96.164105][ T4642] usb 3-1: Using ep0 maxpacket: 32 [ 96.173546][ T4924] device bond_slave_0 entered promiscuous mode [ 96.210027][ T4924] device bond_slave_1 entered promiscuous mode [ 96.240339][ T4903] JBD2: Ignoring recovery information on journal [ 96.270390][ T4544] usb 1-1: USB disconnect, device number 4 [ 96.282935][ T4642] usb 3-1: config 0 has an invalid interface number: 12 but max is 0 [ 96.312685][ T4642] usb 3-1: config 0 has no interface number 0 [ 96.377684][ T4642] usb 3-1: config 0 interface 12 has no altsetting 0 [ 96.416612][ T4903] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 96.602410][ T4642] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 96.643335][ T4642] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.662735][ T4642] usb 3-1: Product: syz [ 96.667207][ T4642] usb 3-1: Manufacturer: syz [ 96.687512][ T4642] usb 3-1: SerialNumber: syz [ 96.725402][ T4642] usb 3-1: config 0 descriptor?? [ 96.783210][ T4189] ocfs2: Unmounting device (7,3) on (node local) [ 96.797305][ T4947] loop5: detected capacity change from 0 to 8192 [ 96.904011][ T4947] REISERFS (device loop5): found reiserfs format "3.6" with non-standard journal [ 96.962322][ T4947] REISERFS (device loop5): using ordered data mode [ 96.969131][ T4947] reiserfs: using flush barriers [ 97.038986][ T4947] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 97.194369][ T4968] loop4: detected capacity change from 0 to 256 [ 97.247095][ T4947] REISERFS (device loop5): checking transaction log (loop5) [ 97.342981][ T4968] FAT-fs (loop4): Directory bread(block 64) failed [ 97.391276][ T4968] FAT-fs (loop4): Directory bread(block 65) failed [ 97.411960][ T4968] FAT-fs (loop4): Directory bread(block 66) failed [ 97.426747][ T4968] FAT-fs (loop4): Directory bread(block 67) failed [ 97.456318][ T4968] FAT-fs (loop4): Directory bread(block 68) failed [ 97.477241][ T4968] FAT-fs (loop4): Directory bread(block 69) failed [ 97.521340][ T4968] FAT-fs (loop4): Directory bread(block 70) failed [ 97.527939][ T4968] FAT-fs (loop4): Directory bread(block 71) failed [ 97.609992][ T4968] FAT-fs (loop4): Directory bread(block 72) failed [ 97.631149][ T4968] FAT-fs (loop4): Directory bread(block 73) failed [ 97.665953][ T4947] REISERFS (device loop5): Using tea hash to sort names [ 97.693500][ T4947] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage. [ 97.851344][ T4642] f81534 3-1:0.12: f81534_set_register: reg: 1002 data: 0 failed: -71 [ 97.873127][ T4642] f81534 3-1:0.12: f81534_find_config_idx: read failed: -71 [ 97.890089][ T4642] f81534 3-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 97.928096][ T4642] f81534: probe of 3-1:0.12 failed with error -71 [ 97.956004][ T4642] usb 3-1: USB disconnect, device number 5 [ 98.292376][ T4437] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 98.485953][ T4976] loop3: detected capacity change from 0 to 40427 [ 98.546980][ T4976] F2FS-fs (loop3): invalid crc value [ 98.567347][ T4976] F2FS-fs (loop3): Found nat_bits in checkpoint [ 98.641307][ T4434] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 98.699846][ T4976] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 98.711245][ T4437] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 98.742390][ T4437] usb 1-1: config 0 has no interfaces? [ 98.767432][ T4437] usb 1-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 98.806478][ T4437] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.834667][ T4437] usb 1-1: config 0 descriptor?? [ 98.911677][ T4189] handle_bad_sector: 1 callbacks suppressed [ 98.911694][ T4189] attempt to access beyond end of device [ 98.911694][ T4189] loop3: rw=2049, want=45104, limit=40427 [ 99.131412][ T4434] usb 5-1: unable to get BOS descriptor or descriptor too short [ 99.145780][ T4248] usb 1-1: USB disconnect, device number 5 [ 99.251380][ T4434] usb 5-1: config 129 has an invalid interface number: 135 but max is 0 [ 99.265142][ T4434] usb 5-1: config 129 has an invalid interface number: 5 but max is 0 [ 99.282490][ T4434] usb 5-1: config 129 has 2 interfaces, different from the descriptor's value: 1 [ 99.302557][ T4434] usb 5-1: config 129 has no interface number 0 [ 99.308867][ T4434] usb 5-1: config 129 has no interface number 1 [ 99.372027][ T4434] usb 5-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 99.409680][ T4434] usb 5-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30 [ 99.431787][ T4434] usb 5-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37 [ 99.478892][ T4434] usb 5-1: config 129 interface 135 has no altsetting 0 [ 99.498654][ T4434] usb 5-1: config 129 interface 5 has no altsetting 0 [ 99.588446][ T5008] loop5: detected capacity change from 0 to 40427 [ 99.653448][ T5019] loop3: detected capacity change from 0 to 512 [ 99.718935][ T5008] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 99.727524][ T5019] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 99.761312][ T4434] usb 5-1: string descriptor 0 read error: -22 [ 99.767654][ T4434] usb 5-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.00 [ 99.777084][ T5008] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 99.827741][ T4434] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.861604][ T5008] F2FS-fs (loop5): Found nat_bits in checkpoint [ 99.892206][ T5019] EXT4-fs error (device loop3): ext4_orphan_get:1426: comm syz.3.203: bad orphan inode 15 [ 99.914074][ T4434] usb 5-1: MIDIStreaming interface descriptor not found [ 100.019620][ T5019] ext4_test_bit(bit=14, block=18) = 1 [ 100.039911][ T5019] is_bad_inode(inode)=0 [ 100.050071][ T5019] NEXT_ORPHAN(inode)=1023 [ 100.122464][ T5019] max_ino=32 [ 100.125845][ T5019] i_nlink=0 [ 100.129717][ T5019] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 100.178277][ T5008] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 100.191295][ T5019] ext2 filesystem being mounted at /47/éq‰Y’3aK supports timestamps until 2038-01-19 (0x7fffffff) [ 100.208764][ T5008] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 100.230595][ T4192] usb 5-1: USB disconnect, device number 3 [ 100.288143][ T5019] EXT4-fs error (device loop3): ext4_search_dir:1549: inode #2: block 3: comm syz.3.203: bad entry in directory: rec_len is smaller than minimal - offset=60, inode=458767, rec_len=0, size=4096 fake=0 [ 100.364490][ T5028] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 449: padding at end of block bitmap is not set [ 100.558383][ T5023] loop0: detected capacity change from 0 to 40427 [ 100.672838][ T5023] F2FS-fs (loop0): Found nat_bits in checkpoint [ 100.857925][ T5023] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 101.018961][ T5031] loop2: detected capacity change from 0 to 40427 [ 101.055557][ T5049] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 101.059894][ T5050] loop5: detected capacity change from 0 to 512 [ 101.098496][ T4188] attempt to access beyond end of device [ 101.098496][ T4188] loop0: rw=2049, want=45104, limit=40427 [ 101.117232][ T5031] F2FS-fs (loop2): build fault injection attr: rate: 771, type: 0x1ffff [ 101.169042][ T5031] F2FS-fs (loop2): invalid crc value [ 101.186618][ T4222] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 101.198241][ T5031] F2FS-fs (loop2): Found nat_bits in checkpoint [ 101.271680][ T5050] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 101.360031][ T5050] EXT4-fs (loop5): 1 truncate cleaned up [ 101.376411][ T5050] EXT4-fs (loop5): mounted filesystem without journal. Opts: barrier=0x0000000000000101,errors=remount-ro,. Quota mode: none. [ 101.402556][ T5050] EXT4-fs error (device loop5): ext4_empty_dir:3177: inode #2: block 13: comm syz.5.207: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 101.473190][ T5050] EXT4-fs (loop5): Remounting filesystem read-only [ 101.481352][ T4222] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 101.518817][ T5031] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 101.561450][ T4222] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 101.570386][ T4222] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 101.656137][ T4222] usb 5-1: config 0 interface 0 has no altsetting 0 [ 101.719593][ T5051] attempt to access beyond end of device [ 101.719593][ T5051] loop2: rw=2049, want=40976, limit=40427 [ 101.762192][ T4222] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 101.802475][ T4222] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 101.818511][ T4264] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.851343][ T4222] usb 5-1: config 0 interface 0 has no altsetting 0 [ 101.919382][ T5063] loop0: detected capacity change from 0 to 1024 [ 101.941510][ T4222] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 101.960702][ T4222] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 101.981176][ T4222] usb 5-1: config 0 interface 0 has no altsetting 0 [ 101.996103][ T4264] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.093829][ T4222] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 102.115347][ T4222] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 102.120151][ T4264] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.182954][ T4222] usb 5-1: config 0 interface 0 has no altsetting 0 [ 102.263245][ T4222] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 102.281209][ T4222] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 102.303568][ T4264] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.320073][ T4222] usb 5-1: config 0 interface 0 has no altsetting 0 [ 102.401415][ T4222] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 102.467374][ T4222] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 102.542604][ T4222] usb 5-1: config 0 interface 0 has no altsetting 0 [ 102.641738][ T4222] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 102.711710][ T4222] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 102.775383][ T4222] usb 5-1: config 0 interface 0 has no altsetting 0 [ 102.881314][ T4222] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 102.896659][ T4222] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 102.941112][ T4222] usb 5-1: config 0 interface 0 has no altsetting 0 [ 103.101337][ T4222] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 103.110451][ T4222] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 103.138748][ T4222] usb 5-1: Product: syz [ 103.153323][ T4222] usb 5-1: Manufacturer: syz [ 103.157986][ T4222] usb 5-1: SerialNumber: syz [ 103.173960][ T4222] usb 5-1: config 0 descriptor?? [ 103.214700][ T4222] yurex 5-1:0.0: USB YUREX device now attached to Yurex #0 [ 103.337879][ T5077] chnl_net:caif_netlink_parms(): no params data found [ 103.349734][ T5079] loop2: detected capacity change from 0 to 32768 [ 103.381304][ T5079] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.220 (5079) [ 103.447061][ T5079] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 103.471211][ T4435] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 103.477942][ T5079] BTRFS info (device loop2): using free space tree [ 103.521833][ T4544] usb 5-1: USB disconnect, device number 4 [ 103.532364][ T5079] BTRFS info (device loop2): has skinny extents [ 103.560274][ T4544] yurex 5-1:0.0: USB YUREX #0 now disconnected [ 103.886798][ T5077] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.901141][ T5079] BTRFS info (device loop2): enabling ssd optimizations [ 103.904766][ T5077] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.942837][ T5136] IPVS: sh: SCTP 172.20.20.187:0 - no destination available [ 103.954289][ T5077] device bridge_slave_0 entered promiscuous mode [ 103.966615][ T5077] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.973994][ T5077] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.982209][ T5077] device bridge_slave_1 entered promiscuous mode [ 104.111605][ T4435] usb 6-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 104.121010][ T4435] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.152452][ T4435] usb 6-1: Product: syz [ 104.156712][ T4435] usb 6-1: Manufacturer: syz [ 104.168241][ T4435] usb 6-1: SerialNumber: syz [ 104.176667][ T4435] usb 6-1: config 0 descriptor?? [ 104.193777][ T5077] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 104.254184][ T5077] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 104.365911][ T5032] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 10 /dev/loop2 scanned by udevd (5032) [ 104.710125][ T5166] usb 6-1: USB disconnect, device number 2 [ 104.732997][ T5167] Bluetooth: hci4: command 0x0409 tx timeout [ 104.763151][ T5077] team0: Port device team_slave_0 added [ 104.772157][ T5077] team0: Port device team_slave_1 added [ 104.966755][ T4264] device hsr_slave_0 left promiscuous mode [ 105.050631][ T4264] device hsr_slave_1 left promiscuous mode [ 105.063385][ T4264] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 105.076586][ T4264] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 105.122993][ T4264] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 105.130601][ T4264] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 105.177767][ T4264] device bridge_slave_1 left promiscuous mode [ 105.205958][ T5185] loop5: detected capacity change from 0 to 128 [ 105.221212][ T4264] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.240078][ T4264] device bridge_slave_0 left promiscuous mode [ 105.261497][ T4264] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.302787][ T26] audit: type=1800 audit(1769780811.548:12): pid=5185 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.239" name="file1" dev="loop5" ino=1048601 res=0 errno=0 [ 105.341922][ T4264] device veth1_macvtap left promiscuous mode [ 105.361644][ T4264] device veth0_macvtap left promiscuous mode [ 105.375122][ T26] audit: type=1800 audit(1769780811.568:13): pid=5185 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.239" name="file1" dev="loop5" ino=1048601 res=0 errno=0 [ 105.402623][ T4264] device veth1_vlan left promiscuous mode [ 105.425113][ T5191] loop0: detected capacity change from 0 to 512 [ 105.435304][ T4264] device veth0_vlan left promiscuous mode [ 105.502483][ T5191] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 105.551538][ T5191] ext4 filesystem being mounted at /48/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 105.609972][ T5191] EXT4-fs warning (device loop0): ext4_dirblock_csum_verify:406: inode #2: comm syz.0.242: No space for directory leaf checksum. Please run e2fsck -D. [ 105.652665][ T5191] EXT4-fs error (device loop0): ext4_readdir:223: inode #2: comm syz.0.242: path /48/file0: directory fails checksum at offset 0 [ 105.788258][ T5198] loop5: detected capacity change from 0 to 4096 [ 106.045071][ T5203] loop0: detected capacity change from 0 to 4096 [ 106.084391][ T5203] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 106.140174][ T5203] ntfs3: loop0: Inode r=19 is not in use! [ 106.147580][ T5203] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 106.208382][ T5205] IPv6: addrconf: prefix option has invalid lifetime [ 106.231544][ T5203] ntfs3: loop0: ino=1d, "file1" failed to open parent directory r=400 to update [ 106.293627][ T5207] loop5: detected capacity change from 0 to 8 [ 106.300748][ T5203] ntfs3: loop0: ino=1d, "file1" failed to open parent directory r=400 to update [ 106.379403][ T4264] team0 (unregistering): Port device team_slave_1 removed [ 106.432916][ T4264] team0 (unregistering): Port device team_slave_0 removed [ 106.467597][ T4264] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 106.495446][ T5209] loop0: detected capacity change from 0 to 256 [ 106.542682][ T4264] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 106.647845][ T5209] FAT-fs (loop0): Directory bread(block 64) failed [ 106.666711][ T5211] xt_hashlimit: size too large, truncated to 1048576 [ 106.679859][ T5209] FAT-fs (loop0): Directory bread(block 65) failed [ 106.701761][ T5209] FAT-fs (loop0): Directory bread(block 66) failed [ 106.732192][ T5209] FAT-fs (loop0): Directory bread(block 67) failed [ 106.738930][ T5209] FAT-fs (loop0): Directory bread(block 68) failed [ 106.752227][ T5209] FAT-fs (loop0): Directory bread(block 69) failed [ 106.761744][ T4640] Bluetooth: hci4: command 0x041b tx timeout [ 106.788672][ T5209] FAT-fs (loop0): Directory bread(block 70) failed [ 106.797826][ T5209] FAT-fs (loop0): Directory bread(block 71) failed [ 106.814041][ T4264] bond0 (unregistering): Released all slaves [ 106.830760][ T5209] FAT-fs (loop0): Directory bread(block 72) failed [ 106.843998][ T5209] FAT-fs (loop0): Directory bread(block 73) failed [ 106.928514][ T5077] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 106.952384][ T5077] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 106.986245][ T5077] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 107.007889][ T5077] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 107.015180][ T5077] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 107.043818][ T5077] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 107.345099][ T5077] device hsr_slave_0 entered promiscuous mode [ 107.377675][ T5077] device hsr_slave_1 entered promiscuous mode [ 107.526007][ T5231] loop4: detected capacity change from 0 to 512 [ 107.650798][ T5231] EXT4-fs (loop4): mounted filesystem without journal. Opts: user_xattr,,errors=continue. Quota mode: writeback. [ 107.750035][ T5231] ext4 filesystem being mounted at /53/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 107.838036][ T5166] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 107.967208][ T5231] Quota error (device loop4): find_block_dqentry: Quota for id 62708 referenced but not present [ 108.010238][ T5077] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 108.023534][ T5231] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 62708 [ 108.059882][ T5077] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 108.069428][ T5231] EXT4-fs error (device loop4): ext4_acquire_dquot:6234: comm syz.4.256: Failed to acquire dquot type 0 [ 108.110181][ T5077] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 108.143597][ T5077] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 108.321916][ T5166] usb 1-1: unable to get BOS descriptor or descriptor too short [ 108.332937][ T5226] loop2: detected capacity change from 0 to 32768 [ 108.390234][ T5226] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.254 (5226) [ 108.451940][ T5166] usb 1-1: config 129 has an invalid interface number: 135 but max is 0 [ 108.460388][ T5166] usb 1-1: config 129 has an invalid interface number: 5 but max is 0 [ 108.520558][ T5166] usb 1-1: config 129 has 2 interfaces, different from the descriptor's value: 1 [ 108.534640][ T5077] 8021q: adding VLAN 0 to HW filter on device bond0 [ 108.562001][ T5166] usb 1-1: config 129 has no interface number 0 [ 108.568348][ T5166] usb 1-1: config 129 has no interface number 1 [ 108.599427][ T5077] 8021q: adding VLAN 0 to HW filter on device team0 [ 108.621448][ T5166] usb 1-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 108.645571][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 108.661770][ T5166] usb 1-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30 [ 108.690176][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 108.691412][ T5166] usb 1-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37 [ 108.743375][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 108.771880][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 108.781195][ T5166] usb 1-1: config 129 interface 135 has no altsetting 0 [ 108.798694][ T5166] usb 1-1: config 129 interface 5 has no altsetting 0 [ 108.807452][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.814644][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.825423][ T5226] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 108.841241][ T4640] Bluetooth: hci4: command 0x040f tx timeout [ 108.861705][ T5226] BTRFS info (device loop2): using free space tree [ 108.868333][ T5226] BTRFS info (device loop2): has skinny extents [ 108.898606][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 108.929370][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 108.951702][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.958844][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 109.029739][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 109.060788][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 109.111518][ T5166] usb 1-1: string descriptor 0 read error: -22 [ 109.121527][ T5166] usb 1-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.00 [ 109.155235][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 109.181265][ T5166] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.190099][ T5226] BTRFS info (device loop2): enabling ssd optimizations [ 109.245446][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 109.320465][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 109.347444][ T5166] usb 1-1: MIDIStreaming interface descriptor not found [ 109.363141][ T5226] BTRFS error (device loop2): balance: invalid convert data profile dup [ 109.430585][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 109.472617][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 109.537220][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 109.607991][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 109.653887][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 109.672468][ T4248] usb 1-1: USB disconnect, device number 6 [ 109.699893][ T5253] loop4: detected capacity change from 0 to 40427 [ 109.714261][ T5077] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 109.798241][ T5253] F2FS-fs (loop4): invalid crc value [ 109.810572][ T5077] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 109.855213][ T5253] F2FS-fs (loop4): Found nat_bits in checkpoint [ 109.863703][ T4553] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 109.892656][ T4553] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 110.128592][ T5253] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 110.583365][ T4553] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 110.597647][ T4190] attempt to access beyond end of device [ 110.597647][ T4190] loop4: rw=2049, want=45104, limit=40427 [ 110.621810][ T4553] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 110.668876][ T5077] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 110.770255][ T5310] loop2: detected capacity change from 0 to 2048 [ 110.923791][ T4642] Bluetooth: hci4: command 0x0419 tx timeout [ 110.938839][ T5310] EXT4-fs (loop2): mounted filesystem without journal. Opts: min_batch_time=0x000000000000000d,mb_optimize_scan=0x0000000000000001,noblock_validity,,errors=continue. Quota mode: none. [ 111.573974][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 111.606210][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 111.649511][ T5337] loop4: detected capacity change from 0 to 1024 [ 111.728075][ T5342] loop0: detected capacity change from 0 to 256 [ 111.755719][ T4553] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 111.800390][ T4553] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 111.836920][ T5342] FAT-fs (loop0): Directory bread(block 64) failed [ 111.866335][ T4553] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 111.902853][ T5342] FAT-fs (loop0): Directory bread(block 65) failed [ 111.909665][ T5342] FAT-fs (loop0): Directory bread(block 66) failed [ 111.925191][ T4553] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 111.933064][ T5342] FAT-fs (loop0): Directory bread(block 67) failed [ 111.945553][ T5342] FAT-fs (loop0): Directory bread(block 68) failed [ 111.961160][ T5342] FAT-fs (loop0): Directory bread(block 69) failed [ 111.972288][ T5342] FAT-fs (loop0): Directory bread(block 70) failed [ 111.992961][ T5077] device veth0_vlan entered promiscuous mode [ 112.030273][ T5342] FAT-fs (loop0): Directory bread(block 71) failed [ 112.043739][ T5077] device veth1_vlan entered promiscuous mode [ 112.081219][ T5342] FAT-fs (loop0): Directory bread(block 72) failed [ 112.087825][ T5342] FAT-fs (loop0): Directory bread(block 73) failed [ 112.165740][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 112.191748][ T5347] loop2: detected capacity change from 0 to 1024 [ 112.199688][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 112.249002][ T5347] EXT4-fs (loop2): Ignoring removed bh option [ 112.258482][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 112.308517][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 112.372676][ T5077] device veth0_macvtap entered promiscuous mode [ 112.393584][ T5077] device veth1_macvtap entered promiscuous mode [ 112.405760][ T5347] EXT4-fs (loop2): mounted filesystem without journal. Opts: nodelalloc,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,stripe=0x0000000000000010,bh,init_itable,. Quota mode: none. [ 112.434652][ T5077] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 112.491064][ T5077] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.547251][ T5077] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 112.585859][ T5077] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.616366][ T5347] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2806: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 112.635890][ T5077] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 112.646918][ T5077] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.683786][ T5077] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 112.705167][ T5077] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.748504][ T5360] loop5: detected capacity change from 0 to 1024 [ 112.748781][ T5077] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 112.824458][ T5360] EXT4-fs (loop5): Ignoring removed mblk_io_submit option [ 112.871280][ T5360] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 112.889889][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 112.909470][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 112.948361][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 112.987998][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 113.013004][ T5360] EXT4-fs (loop5): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,data_err=ignore,max_dir_size_kb=0x00000000004007b1,norecovery,acl,max_batch_time=0x0000000000000007,mblk_io_submit,delalloc,dioread_nolock,,errors=continue. Quota mode: none. [ 113.032204][ T5077] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 113.105660][ T5077] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.180119][ T5077] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 113.224605][ T5077] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.237999][ T5077] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 113.259099][ T5077] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.271654][ T5077] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 113.287646][ T5077] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.341275][ T5077] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 113.354455][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 113.374182][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 113.402357][ T5077] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.461207][ T5077] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.469988][ T5077] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.494232][ T5373] overlayfs: invalid origin (00000079000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 113.523585][ T5379] loop2: detected capacity change from 0 to 256 [ 113.548652][ T5077] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.901468][ T4553] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.921388][ T4553] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.941695][ T5362] loop4: detected capacity change from 0 to 32768 [ 113.977375][ T4553] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 114.051795][ T5362] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.270 (5362) [ 114.106280][ T1171] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.160532][ T1171] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.208929][ T5362] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 114.244706][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 114.261753][ T5362] BTRFS info (device loop4): using free space tree [ 114.287388][ T5362] BTRFS info (device loop4): has skinny extents [ 114.519142][ T5403] loop5: detected capacity change from 0 to 4096 [ 114.632759][ T5362] BTRFS info (device loop4): enabling ssd optimizations [ 114.671783][ T5403] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 114.691452][ T5300] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 114.961302][ T5300] usb 7-1: Using ep0 maxpacket: 16 [ 115.091531][ T5300] usb 7-1: unable to get BOS descriptor or descriptor too short [ 115.099282][ T5300] usb 7-1: no configurations [ 115.124399][ T5300] usb 7-1: can't read configurations, error -22 [ 115.202780][ T5395] loop2: detected capacity change from 0 to 40427 [ 115.223592][ T5440] loop5: detected capacity change from 0 to 64 [ 115.248337][ T5395] F2FS-fs (loop2): build fault injection attr: rate: 690, type: 0x1ffff [ 115.335228][ T5395] F2FS-fs (loop2): build fault injection attr: rate: 0, type: 0x35f7 [ 115.411132][ T5395] F2FS-fs (loop2): invalid crc value [ 115.483291][ T5395] F2FS-fs (loop2): Found nat_bits in checkpoint [ 115.653766][ T4529] hfs: node 4:3 still has 2 user(s)! [ 115.789807][ T5455] capability: warning: `syz.5.290' uses deprecated v2 capabilities in a way that may be insecure [ 115.852121][ T5395] F2FS-fs (loop2): Start checkpoint disabled! [ 115.942742][ T5459] syz.4.292[5459] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 115.942849][ T5459] syz.4.292[5459] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 116.009363][ T5395] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 116.233061][ T5475] loop4: detected capacity change from 0 to 256 [ 116.300021][ T5479] loop5: detected capacity change from 0 to 1024 [ 116.352683][ T4553] attempt to access beyond end of device [ 116.352683][ T4553] loop2: rw=2049, want=40976, limit=40427 [ 116.750788][ T5503] bridge0: port 1(bridge_slave_0) entered forwarding state [ 116.808204][ T5503] device bridge_slave_0 left promiscuous mode [ 116.839359][ T5503] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.291350][ T5301] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 117.371023][ T5524] input: syz1 as /devices/virtual/input/input5 [ 117.591151][ T5301] usb 7-1: Using ep0 maxpacket: 16 [ 117.741603][ T5301] usb 7-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 117.768842][ T5301] usb 7-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 117.783644][ T5301] usb 7-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 117.800953][ T5301] usb 7-1: config 0 interface 0 has no altsetting 0 [ 117.808999][ T5301] usb 7-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 117.840924][ T5301] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.884555][ T5301] usb 7-1: config 0 descriptor?? [ 118.053031][ T5564] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 118.126755][ T5566] loop5: detected capacity change from 0 to 2048 [ 118.198413][ T5566] UDF-fs: error (device loop5): udf_process_sequence: Primary Volume Descriptor not found! [ 118.235882][ T4434] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 118.247388][ T5566] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 118.398494][ T5301] hid (null): nested delimiters [ 118.407548][ T5301] hid (null): bogus close delimiter [ 118.419773][ T5301] hid (null): report_id 0 is invalid [ 118.502423][ T4434] usb 5-1: Using ep0 maxpacket: 8 [ 118.544504][ T5584] loop0: detected capacity change from 0 to 256 [ 118.621257][ T5301] usb 7-1: USB disconnect, device number 4 [ 118.643374][ T4434] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 118.651876][ T5584] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 118.687837][ T4434] usb 5-1: config 0 has no interface number 0 [ 118.715474][ T4434] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 118.741340][ T4434] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 118.750684][ T5584] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 118.769392][ T4434] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.806922][ T4434] usb 5-1: config 0 descriptor?? [ 118.816654][ T5584] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xb94faefa, utbl_chksum : 0xe619d30d) [ 118.881710][ T26] audit: type=1326 audit(1769780825.128:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5562 comm="syz.2.330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff76d6d7eb9 code=0x7fc00000 [ 118.909096][ T4434] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 118.982067][ T26] audit: type=1326 audit(1769780825.128:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5562 comm="syz.2.330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff76d6d7eb9 code=0x7fc00000 [ 119.047343][ T26] audit: type=1326 audit(1769780825.128:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5562 comm="syz.2.330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff76d6d7eb9 code=0x7fc00000 [ 119.076406][ T26] audit: type=1326 audit(1769780825.128:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5562 comm="syz.2.330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff76d6d7eb9 code=0x7fc00000 [ 119.104020][ T26] audit: type=1326 audit(1769780825.128:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5562 comm="syz.2.330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff76d6d7eb9 code=0x7fc00000 [ 119.188045][ T26] audit: type=1326 audit(1769780825.128:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5562 comm="syz.2.330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff76d6d7eb9 code=0x7fc00000 [ 119.203311][ T4434] usb 5-1: USB disconnect, device number 5 [ 119.257998][ T26] audit: type=1326 audit(1769780825.128:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5562 comm="syz.2.330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff76d6d7eb9 code=0x7fc00000 [ 119.283994][ T5602] ptrace attach of "./syz-executor exec"[5077] was attempted by "./syz-executor exec"[5602] [ 119.377886][ T26] audit: type=1326 audit(1769780825.128:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5562 comm="syz.2.330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff76d6d7eb9 code=0x7fc00000 [ 119.459889][ T26] audit: type=1326 audit(1769780825.128:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5562 comm="syz.2.330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff76d6d7eb9 code=0x7fc00000 [ 119.592778][ T26] audit: type=1326 audit(1769780825.128:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5562 comm="syz.2.330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff76d6d7eb9 code=0x7fc00000 [ 119.681470][ T5604] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 119.814909][ T5587] loop5: detected capacity change from 0 to 32768 [ 119.874757][ T5625] loop0: detected capacity change from 0 to 64 [ 119.983932][ T5587] XFS (loop5): Mounting V5 Filesystem [ 120.003581][ T5622] loop4: detected capacity change from 0 to 8192 [ 120.207437][ T5587] XFS (loop5): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 120.341885][ T5587] XFS (loop5): Starting recovery (logdev: internal) [ 120.454194][ T5587] XFS (loop5): Ending recovery (logdev: internal) [ 120.486666][ T5587] XFS (loop5): AG 0: Corrupt btree 5 pointer at level 1 index 0. [ 120.519931][ T5587] XFS (loop5): Failed to initialize disk quotas. [ 120.557818][ T5617] loop6: detected capacity change from 0 to 32768 [ 120.607635][ T5651] loop0: detected capacity change from 0 to 16 [ 120.706646][ T5651] erofs: (device loop0): mounted with root inode @ nid 36. [ 120.724504][ T5617] ERROR: (device loop6): dbAllocAG: unable to allocate blocks [ 120.724504][ T5617] [ 120.794046][ T5617] ERROR: (device loop6): remounting filesystem as read-only [ 120.842850][ T5653] ERROR: (device loop6): dbAllocAG: unable to allocate blocks [ 120.842850][ T5653] [ 120.858364][ T5656] loop2: detected capacity change from 0 to 128 [ 120.864941][ T5617] jfs_create: dtInsert returned -EIO [ 120.885209][ T4529] XFS (loop5): Unmounting Filesystem [ 120.899586][ T5617] ERROR: (device loop6): jfs_create: [ 120.899586][ T5617] [ 120.928250][ T5653] ERROR: (device loop6): dbDiscardAG: -EIO [ 120.928250][ T5653] [ 120.957713][ T5656] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 121.046856][ T5656] hpfs: filesystem error: improperly stopped [ 121.120295][ T5656] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 121.172322][ T5656] hpfs: You really don't want any checks? You are crazy... [ 121.179916][ T5656] hpfs: hpfs_map_sector(): read error [ 121.275258][ T5656] hpfs: code page support is disabled [ 121.280780][ T5656] hpfs: hpfs_map_4sectors(): unaligned read [ 121.329859][ T5656] hpfs: hpfs_map_4sectors(): unaligned read [ 121.346405][ T5656] hpfs: filesystem error: unable to find root dir [ 121.533044][ T5676] 9pnet: p9_errstr2errno: server reported unknown error [ 122.096572][ T5689] loop0: detected capacity change from 0 to 8192 [ 122.221157][ T5301] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 122.486734][ T5301] usb 6-1: Using ep0 maxpacket: 16 [ 122.638391][ T5301] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 122.695635][ T5301] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 122.727657][ T5301] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 122.747657][ T5301] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.791963][ T5301] usb 6-1: config 0 descriptor?? [ 123.292654][ T5716] loop4: detected capacity change from 0 to 32768 [ 123.387941][ T5716] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.371 (5716) [ 123.471700][ T5716] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 123.480493][ T5716] BTRFS info (device loop4): setting nodatacow, compression disabled [ 123.531381][ T5301] usbhid 6-1:0.0: can't add hid device: -71 [ 123.537537][ T5301] usbhid: probe of 6-1:0.0 failed with error -71 [ 123.571128][ T5716] BTRFS info (device loop4): force clearing of disk cache [ 123.578587][ T5301] usb 6-1: USB disconnect, device number 3 [ 123.622721][ T5716] BTRFS info (device loop4): enabling ssd optimizations [ 123.679071][ T5716] BTRFS info (device loop4): using spread ssd allocation scheme [ 123.704361][ T5716] BTRFS info (device loop4): turning off barriers [ 123.725871][ T5716] BTRFS info (device loop4): disabling free space tree [ 123.743442][ T5716] BTRFS info (device loop4): not using ssd optimizations [ 123.770131][ T5760] loop6: detected capacity change from 0 to 4096 [ 123.771284][ T5716] BTRFS info (device loop4): not using spread ssd allocation scheme [ 123.786560][ T5769] loop2: detected capacity change from 0 to 1024 [ 123.826824][ T5769] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 123.843440][ T5716] BTRFS info (device loop4): has skinny extents [ 123.877177][ T5769] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 123.948291][ T5769] EXT4-fs (loop2): orphan cleanup on readonly fs [ 123.967925][ T5760] ntfs: volume version 3.1. [ 124.028757][ T5769] EXT4-fs error (device loop2): ext4_read_inode_bitmap:168: comm syz.2.388: Inode bitmap for bg 0 marked uninitialized [ 124.099883][ T5760] __ntfs_error: 15 callbacks suppressed [ 124.099900][ T5760] ntfs: (device loop6): ntfs_cluster_alloc(): Failed to allocate clusters, aborting (error -28). [ 124.154765][ T5769] EXT4-fs (loop2): Remounting filesystem read-only [ 124.173140][ T5760] ntfs: (device loop6): ntfs_attr_extend_allocation(): Cannot extend allocation of inode 0x43, attribute type 0x80, because the allocation of clusters failed with error code -28. [ 124.209618][ T5769] EXT4-fs (loop2): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000000080,errors=remount-ro,inode_readahead_blks=0x0000000000800000,lazytime,. Quota mode: writeback. [ 124.327205][ T5769] EXT4-fs (loop2): shut down requested (1) [ 124.399190][ T5716] BTRFS info (device loop4): clearing free space tree [ 124.406968][ T5716] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 124.418933][ T5716] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 124.578488][ T5804] loop0: detected capacity change from 0 to 2048 [ 124.678661][ T5808] loop5: detected capacity change from 0 to 4096 [ 124.749716][ T5804] EXT4-fs (loop0): mounted filesystem without journal. Opts: discard,max_dir_size_kb=0x0000000000000004,norecovery,,errors=continue. Quota mode: none. [ 124.834754][ T4246] BTRFS info (device loop4): space_info 5 has 10600448 free, is not full [ 124.844178][ T4246] BTRFS info (device loop4): space_info total=11534336, used=49152, pinned=0, reserved=0, may_use=884736, readonly=0 zone_unusable=0 [ 124.857979][ T4246] BTRFS info (device loop4): global_block_rsv: size 851968 reserved 851968 [ 124.867316][ T4246] BTRFS info (device loop4): trans_block_rsv: size 0 reserved 0 [ 124.875284][ T4246] BTRFS info (device loop4): chunk_block_rsv: size 0 reserved 0 [ 124.882992][ T4246] BTRFS info (device loop4): delayed_block_rsv: size 32768 reserved 32768 [ 124.891572][ T4246] BTRFS info (device loop4): delayed_refs_rsv: size 196608 reserved 0 [ 124.925082][ T5804] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1163: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 125.096030][ T5804] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 23 with error 28 [ 125.153167][ T5804] EXT4-fs (loop0): This should not happen!! Data will be lost [ 125.153167][ T5804] [ 125.208195][ T5827] IPVS: sh: SCTP 127.0.0.1:0 - no destination available [ 125.229405][ T5804] EXT4-fs (loop0): Total free blocks count 0 [ 125.291271][ T5804] EXT4-fs (loop0): Free/Dirty block details [ 125.297409][ T5804] EXT4-fs (loop0): free_blocks=2415919104 [ 125.347793][ T5804] EXT4-fs (loop0): dirty_blocks=48 [ 125.370574][ T5804] EXT4-fs (loop0): Block reservation details [ 125.416704][ T5804] EXT4-fs (loop0): i_reserved_data_blocks=3 [ 125.450519][ T5824] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 12 with error 28 [ 125.534739][ T5824] EXT4-fs (loop0): This should not happen!! Data will be lost [ 125.534739][ T5824] [ 126.675088][ T5872] loop4: detected capacity change from 0 to 8192 [ 126.754259][ T5872] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 126.790365][ T5872] REISERFS (device loop4): using ordered data mode [ 126.825920][ T5872] reiserfs: using flush barriers [ 126.855609][ T5872] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 126.927329][ T5872] REISERFS (device loop4): checking transaction log (loop4) [ 126.958685][ T5880] loop6: detected capacity change from 0 to 8192 [ 127.082221][ T5866] loop0: detected capacity change from 0 to 131072 [ 127.158360][ T5866] F2FS-fs (loop0): Invalid log sectors per block(570425347) log sectorsize(9) [ 127.167487][ T5866] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 127.181848][ T5866] F2FS-fs (loop0): invalid crc value [ 127.204272][ T5866] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (15359802341028777995, 275811881701387) [ 127.258240][ T5866] F2FS-fs (loop0): recover fsync data on readonly fs [ 127.265662][ T5866] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=3000000, run fsck to fix. [ 127.275360][ T5866] F2FS-fs (loop0): Bad quota inode 2:50331648 [ 127.281518][ T5866] F2FS-fs (loop0): Failed to enable quota tracking (type=2, err=-22). Please run fsck to fix. [ 127.291913][ T5866] F2FS-fs (loop0): Cannot turn on quota_ino: -22 [ 127.299120][ T5866] F2FS-fs (loop0): Try to recover 2th superblock, ret: -30 [ 127.307118][ T5866] F2FS-fs (loop0): Mounted with checkpoint version = 753bd00b [ 127.553763][ T5872] REISERFS (device loop4): Using tea hash to sort names [ 127.592205][ T5872] REISERFS warning (device loop4): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2) [ 127.671357][ T5872] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 127.789292][ T5897] Bluetooth: hci0: load_link_keys: too big key_count value 9472 [ 127.999070][ T5909] netlink: 'syz.0.419': attribute type 12 has an invalid length. [ 128.036955][ T5910] mmap: syz.5.406 (5910) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 128.301389][ T4192] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 128.728868][ T5935] loop0: detected capacity change from 0 to 64 [ 128.741571][ T4192] usb 7-1: config index 0 descriptor too short (expected 30768, got 18) [ 128.749989][ T4192] usb 7-1: config 48 has too many interfaces: 48, using maximum allowed: 32 [ 128.809528][ T4192] usb 7-1: config 48 has an invalid descriptor of length 48, skipping remainder of the config [ 128.830449][ T4192] usb 7-1: config 48 has 0 interfaces, different from the descriptor's value: 48 [ 128.897447][ T4192] usb 7-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 128.941070][ T4192] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.187503][ T5949] loop5: detected capacity change from 0 to 512 [ 129.249896][ T5949] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 129.303364][ T5949] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c11c, mo2=0002] [ 129.361927][ T5949] System zones: 1-12 [ 129.371572][ T4192] usb 7-1: string descriptor 0 read error: -22 [ 129.388588][ T5949] [ 129.428938][ T5949] EXT4-fs (loop5): 1 truncate cleaned up [ 129.459789][ T5949] EXT4-fs (loop5): mounted filesystem without journal. Opts: nolazytime,lazytime,journal_path=./file0,bsdgroups,debug,noload,,errors=continue. Quota mode: none. [ 129.581734][ T4192] usb 7-1: USB disconnect, device number 5 [ 129.591215][ T4298] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 129.649340][ T26] audit: type=1800 audit(1769780835.888:39): pid=5949 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.432" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 129.851744][ T5946] loop2: detected capacity change from 0 to 40427 [ 129.881571][ T4298] usb 5-1: Using ep0 maxpacket: 32 [ 129.940421][ T5946] F2FS-fs (loop2): invalid crc value [ 129.979838][ T5946] F2FS-fs (loop2): Found nat_bits in checkpoint [ 130.056624][ T4298] usb 5-1: config 0 has an invalid interface number: 196 but max is 0 [ 130.071078][ T4298] usb 5-1: config 0 has no interface number 0 [ 130.116999][ T4298] usb 5-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 130.158192][ T4298] usb 5-1: config 0 interface 196 has no altsetting 0 [ 130.178436][ T5977] loop0: detected capacity change from 0 to 1024 [ 130.216936][ T5946] F2FS-fs (loop2): Start checkpoint disabled! [ 130.259582][ T5946] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 130.285059][ T5977] EXT4-fs (loop0): mounted filesystem without journal. Opts: nouid32,nodioread_nolock,noquota,delalloc,journal_dev=0x000000000000000f,nodioread_nolock,journal_ioprio=0x0000000000000007,,errors=continue. Quota mode: none. [ 130.376734][ T5977] ext4 filesystem being mounted at /106/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 130.401311][ T4298] usb 5-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 130.431527][ T4298] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.451759][ T4298] usb 5-1: Product: syz [ 130.475640][ T4298] usb 5-1: Manufacturer: syz [ 130.498920][ T4298] usb 5-1: SerialNumber: syz [ 130.528104][ T4298] usb 5-1: config 0 descriptor?? [ 130.601619][ T5952] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 130.715181][ T5992] TCP: request_sock_subflow_v6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 130.776947][ T144] attempt to access beyond end of device [ 130.776947][ T144] loop2: rw=2049, want=40984, limit=40427 [ 130.817799][ T5996] Illegal XDP return value 1927764721, expect packet loss! [ 131.015766][ T6002] netlink: 'syz.0.446': attribute type 1 has an invalid length. [ 131.160792][ T6002] device bond1 entered promiscuous mode [ 131.194097][ T6002] 8021q: adding VLAN 0 to HW filter on device bond1 [ 131.304686][ T6004] 8021q: adding VLAN 0 to HW filter on device bond1 [ 131.326726][ T6009] loop5: detected capacity change from 0 to 1024 [ 131.352194][ T6004] bond1: (slave gre1): The slave device specified does not support setting the MAC address [ 131.394337][ T6004] bond1: (slave gre1): Setting fail_over_mac to active for active-backup mode [ 131.449732][ T6004] bond1: (slave gre1): making interface the new active one [ 131.501134][ T6004] device gre1 entered promiscuous mode [ 131.543944][ T6009] hfsplus: xattr searching failed [ 131.578978][ T6004] bond1: (slave gre1): Enslaving as an active interface with an up link [ 131.617633][ T6009] process 'syz.5.448' launched './file0' with NULL argv: empty string added [ 131.644354][ T6009] hfsplus: xattr searching failed [ 131.682325][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 131.688265][ T6009] hfsplus: xattr searching failed [ 131.694248][ T4298] ipheth 5-1:0.196: Apple iPhone USB Ethernet device attached [ 131.984423][ T6022] loop6: detected capacity change from 0 to 512 [ 132.028200][ T6025] loop5: detected capacity change from 0 to 256 [ 132.046527][ T6022] EXT4-fs (loop6): Ignoring removed orlov option [ 132.098572][ T6022] EXT4-fs error (device loop6): ext4_iget_extra_inode:4566: inode #15: comm syz.6.452: corrupted in-inode xattr [ 132.108823][ T6025] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 132.131300][ T4640] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 132.151110][ T6022] EXT4-fs error (device loop6): ext4_orphan_get:1405: comm syz.6.452: couldn't read orphan inode 15 (err -117) [ 132.169363][ T6022] EXT4-fs (loop6): mounted filesystem without journal. Opts: jqfmt=vfsold,inode_readahead_blks=0x0000000000000400,abort,noload,noblock_validity,max_batch_time=0x0000000000000001,init_itable=0x0000000000000601,orlov,bsdgroups,init_itable=0x0000000000000fff,,errors=continue. Quota mode: none. [ 132.262108][ T6025] exFAT-fs (loop5): hint_cluster is invalid (17) [ 132.366950][ T4298] usb 5-1: USB disconnect, device number 6 [ 132.492874][ T4640] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 132.518818][ T4640] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 132.569158][ T4640] usb 1-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 132.602660][ T4640] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.644372][ T6040] netlink: 'syz.5.457': attribute type 1 has an invalid length. [ 132.664722][ T4640] usb 1-1: config 0 descriptor?? [ 132.732268][ T4298] ipheth 5-1:0.196: Apple iPhone USB Ethernet now disconnected [ 132.765275][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.772477][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.035857][ T6051] input: syz0 as /devices/virtual/input/input7 [ 133.184905][ T4640] playstation 0003:054C:0DF2.0004: unknown main item tag 0x0 [ 133.199982][ T4640] playstation 0003:054C:0DF2.0004: unknown main item tag 0x0 [ 133.234578][ T4640] playstation 0003:054C:0DF2.0004: unknown main item tag 0x0 [ 133.259036][ T4640] playstation 0003:054C:0DF2.0004: unknown main item tag 0x0 [ 133.302445][ T4640] playstation 0003:054C:0DF2.0004: unknown main item tag 0x0 [ 133.362413][ T4640] playstation 0003:054C:0DF2.0004: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.0-1/input0 [ 133.638223][ T6034] loop2: detected capacity change from 0 to 40427 [ 133.702099][ T6034] F2FS-fs (loop2): invalid crc value [ 133.741251][ T4640] playstation 0003:054C:0DF2.0004: Failed to retrieve feature with reportID 32: -71 [ 133.750716][ T4640] playstation 0003:054C:0DF2.0004: Failed to retrieve DualSense firmware info: -71 [ 133.788396][ T6034] F2FS-fs (loop2): Found nat_bits in checkpoint [ 133.802377][ T4640] playstation 0003:054C:0DF2.0004: Failed to get firmware info from DualSense [ 133.846340][ T4640] playstation 0003:054C:0DF2.0004: Failed to create dualsense. [ 133.878057][ T4640] playstation: probe of 0003:054C:0DF2.0004 failed with error -71 [ 133.886166][ T5851] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 133.926007][ T4640] usb 1-1: USB disconnect, device number 7 [ 133.982791][ T6034] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 134.101606][ T6082] fido_id[6082]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 134.266588][ T5851] usb 7-1: config 16 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 110 [ 134.299826][ T5851] usb 7-1: config 16 has an invalid descriptor of length 109, skipping remainder of the config [ 134.351252][ T5851] usb 7-1: config 16 has no interfaces? [ 134.366540][ T5851] usb 7-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 134.378938][ T4187] attempt to access beyond end of device [ 134.378938][ T4187] loop2: rw=2049, want=45104, limit=40427 [ 134.400712][ T5851] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.742269][ T4640] usb 7-1: USB disconnect, device number 6 [ 134.815721][ T26] audit: type=1326 audit(1769780841.058:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6106 comm="syz.0.474" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1ff9ce3eb9 code=0x0 [ 135.140696][ T6117] loop4: detected capacity change from 0 to 1024 [ 135.185899][ T6117] EXT4-fs (loop4): inline encryption not supported [ 135.199523][ T6117] EXT4-fs (loop4): Ignoring removed oldalloc option [ 135.211960][ T6117] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 135.285529][ T6117] EXT4-fs (loop4): mounted filesystem without journal. Opts: nobarrier,user_xattr,inlinecrypt,oldalloc,data_err=ignore,nojournal_checksum,errors=remount-ro,mblk_io_submit,noblock_validity,min_batch_time=0x0000000000000000,nombcache,norecovery,. Quota mode: none. [ 135.310601][ C1] vkms_vblank_simulate: vblank timer overrun [ 135.336428][ T6117] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1163: group 0, block bitmap and bg descriptor inconsistent: 25 vs 161808409 free clusters [ 135.367231][ T6117] EXT4-fs (loop4): Remounting filesystem read-only [ 135.440031][ T6130] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 135.448271][ T6130] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 135.599426][ T6139] loop6: detected capacity change from 0 to 256 [ 135.630166][ T6139] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 135.907468][ T6147] loop4: detected capacity change from 0 to 8192 [ 136.121261][ T4640] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 136.285759][ T6163] loop4: detected capacity change from 0 to 1024 [ 136.295139][ T6164] loop8: detected capacity change from 0 to 8 [ 136.314859][ T5032] Dev loop8: unable to read RDB block 8 [ 136.320992][ T5032] loop8: unable to read partition table [ 136.327622][ T5032] loop8: partition table beyond EOD, truncated [ 136.351341][ T6164] Dev loop8: unable to read RDB block 8 [ 136.369824][ T6164] loop8: unable to read partition table [ 136.371637][ T4640] usb 7-1: Using ep0 maxpacket: 16 [ 136.388963][ T6164] loop8: partition table beyond EOD, truncated [ 136.412211][ T6163] EXT4-fs (loop4): mounted filesystem without journal. Opts: minixdf,auto_da_alloc,,errors=continue. Quota mode: none. [ 136.413053][ T6164] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 136.458602][ T6160] loop2: detected capacity change from 0 to 8192 [ 136.494620][ T6160] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 136.541498][ T4640] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 136.553229][ T6160] REISERFS (device loop2): using ordered data mode [ 136.554218][ T4640] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 136.571222][ T4640] usb 7-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 136.580307][ T4640] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.591638][ T4640] usb 7-1: config 0 descriptor?? [ 136.616571][ T6160] reiserfs: using flush barriers [ 136.648408][ T6160] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 136.756727][ T6160] REISERFS (device loop2): checking transaction log (loop2) [ 136.874522][ T6177] loop4: detected capacity change from 0 to 256 [ 136.934031][ T6177] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 137.068057][ T6160] REISERFS (device loop2): Using tea hash to sort names [ 137.077329][ T4640] corsair 0003:1B1C:1B02.0005: item fetching failed at offset 3/5 [ 137.094754][ T6160] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 137.104979][ T4640] corsair 0003:1B1C:1B02.0005: parse failed [ 137.121104][ T4640] corsair: probe of 0003:1B1C:1B02.0005 failed with error -22 [ 137.184130][ T26] audit: type=1800 audit(1769780843.428:41): pid=6160 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.491" name="file1" dev="loop2" ino=4 res=0 errno=0 [ 137.204379][ C1] vkms_vblank_simulate: vblank timer overrun [ 137.279258][ T5851] usb 7-1: USB disconnect, device number 7 [ 137.564075][ T6190] Zero length message leads to an empty skb [ 137.706665][ T6198] loop5: detected capacity change from 0 to 1024 [ 137.828382][ T26] audit: type=1800 audit(1769780844.068:42): pid=6198 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.505" name="bus" dev="loop5" ino=26 res=0 errno=0 [ 138.059476][ T6211] netlink: 4 bytes leftover after parsing attributes in process `syz.0.511'. [ 138.076442][ T6211] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 138.175659][ T6215] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 138.262050][ T154] hfsplus: b-tree write err: -5, ino 4 [ 138.274071][ T6211] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 138.484158][ T6226] loop2: detected capacity change from 0 to 64 [ 138.518761][ T4544] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 138.890972][ T6247] loop4: detected capacity change from 0 to 256 [ 138.921317][ T4544] usb 7-1: config index 0 descriptor too short (expected 23569, got 27) [ 138.940581][ T4544] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 139.061301][ T4544] usb 7-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 139.073195][ T4544] usb 7-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 139.082385][ T4544] usb 7-1: Manufacturer: syz [ 139.094808][ T4192] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 139.117252][ T4544] usb 7-1: config 0 descriptor?? [ 139.179695][ T6257] input: syz0 as /devices/virtual/input/input8 [ 139.349173][ T4298] [ 139.351573][ T4298] ====================================================== [ 139.354895][ T4544] rc_core: IR keymap rc-hauppauge not found [ 139.358613][ T4298] WARNING: possible circular locking dependency detected [ 139.358654][ T4298] syzkaller #0 Not tainted [ 139.375991][ T4298] ------------------------------------------------------ [ 139.378974][ T4544] Registered IR keymap rc-empty [ 139.383063][ T4298] kworker/0:9/4298 is trying to acquire lock: [ 139.383075][ T4298] ffff88807a560c28 ((work_completion)(&hdev->bg_scan_update)){+.+.}-{0:0}, at: __flush_work+0xfa/0x210 [ 139.383126][ T4298] [ 139.383126][ T4298] but task is already holding lock: [ 139.383131][ T4298] ffffffff8d6c47c8 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_epo+0x43/0x170 [ 139.383172][ T4298] [ 139.383172][ T4298] which lock already depends on the new lock. [ 139.383172][ T4298] [ 139.383178][ T4298] [ 139.383178][ T4298] the existing dependency chain (in reverse order) is: [ 139.383184][ T4298] [ 139.383184][ T4298] -> #4 (rfkill_global_mutex){+.+.}-{3:3}: [ 139.383210][ T4298] __mutex_lock_common+0x1e3/0x2400 [ 139.383233][ T4298] mutex_lock_nested+0x17/0x20 [ 139.383249][ T4298] rfkill_register+0x33/0x8a0 [ 139.402650][ T4544] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 139.405225][ T4298] hci_register_dev+0x452/0x970 [ 139.405254][ T4298] vhci_create_device+0x32c/0x5c0 [ 139.431003][ T4544] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input9 [ 139.432139][ T4298] vhci_write+0x391/0x450 [ 139.501887][ T4298] vfs_write+0x745/0xd60 [ 139.506680][ T4298] ksys_write+0x152/0x260 [ 139.511215][ C1] igorplugusb 7-1:0.0: Error: urb status = -32 [ 139.511559][ T4298] do_syscall_64+0x4c/0xa0 [ 139.522676][ T4298] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 139.529126][ T4298] [ 139.529126][ T4298] -> #3 (&data->open_mutex){+.+.}-{3:3}: [ 139.536977][ T4298] __mutex_lock_common+0x1e3/0x2400 [ 139.542741][ T4298] mutex_lock_nested+0x17/0x20 [ 139.548066][ T4298] vhci_send_frame+0x88/0x100 [ 139.553295][ T4298] hci_send_frame+0x1a9/0x2e0 [ 139.558530][ T4298] hci_tx_work+0x9f9/0x1710 [ 139.563802][ T4298] process_one_work+0x85f/0x1010 [ 139.569307][ T4298] worker_thread+0xaa6/0x1290 [ 139.574532][ T4298] kthread+0x436/0x520 [ 139.579152][ T4298] ret_from_fork+0x1f/0x30 [ 139.584135][ T4298] [ 139.584135][ T4298] -> #2 ((work_completion)(&hdev->tx_work)){+.+.}-{0:0}: [ 139.593375][ T4298] __flush_work+0x116/0x210 [ 139.598433][ T4298] hci_dev_do_close+0x1e7/0x1030 [ 139.603931][ T4298] hci_unregister_dev+0x2d7/0x580 [ 139.609515][ T4298] vhci_release+0x73/0xc0 [ 139.614398][ T4298] __fput+0x234/0x930 [ 139.618941][ T4298] task_work_run+0x125/0x1a0 [ 139.624090][ T4298] do_exit+0x626/0x20c0 [ 139.628799][ T4298] do_group_exit+0x12e/0x300 [ 139.633940][ T4298] __x64_sys_exit_group+0x3b/0x40 [ 139.639513][ T4298] do_syscall_64+0x4c/0xa0 [ 139.644482][ T4298] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 139.650930][ T4298] [ 139.650930][ T4298] -> #1 (&hdev->req_lock){+.+.}-{3:3}: [ 139.658610][ T4298] __mutex_lock_common+0x1e3/0x2400 [ 139.664366][ T4298] mutex_lock_nested+0x17/0x20 [ 139.669711][ T4298] bg_scan_update+0x44/0x3b0 [ 139.674856][ T4298] process_one_work+0x85f/0x1010 [ 139.680345][ T4298] worker_thread+0xaa6/0x1290 [ 139.685569][ T4298] kthread+0x436/0x520 [ 139.690185][ T4298] ret_from_fork+0x1f/0x30 [ 139.695165][ T4298] [ 139.695165][ T4298] -> #0 ((work_completion)(&hdev->bg_scan_update)){+.+.}-{0:0}: [ 139.705016][ T4298] __lock_acquire+0x2c42/0x7d10 [ 139.710430][ T4298] lock_acquire+0x19e/0x400 [ 139.715545][ T4298] __flush_work+0x116/0x210 [ 139.720598][ T4298] __cancel_work_timer+0x3f4/0x560 [ 139.726301][ T4298] hci_request_cancel_all+0xcc/0x300 [ 139.732149][ T4298] hci_dev_do_close+0x4e/0x1030 [ 139.737556][ T4298] hci_rfkill_set_block+0x10a/0x190 [ 139.743307][ T4298] rfkill_set_block+0x1c6/0x420 [ 139.748712][ T4298] rfkill_epo+0x75/0x170 [ 139.753515][ T4298] rfkill_op_handler+0x76/0x220 [ 139.758922][ T4298] process_one_work+0x85f/0x1010 [ 139.764413][ T4298] worker_thread+0xaa6/0x1290 [ 139.769651][ T4298] kthread+0x436/0x520 [ 139.774266][ T4298] ret_from_fork+0x1f/0x30 [ 139.779247][ T4298] [ 139.779247][ T4298] other info that might help us debug this: [ 139.779247][ T4298] [ 139.789493][ T4298] Chain exists of: [ 139.789493][ T4298] (work_completion)(&hdev->bg_scan_update) --> &data->open_mutex --> rfkill_global_mutex [ 139.789493][ T4298] [ 139.805259][ T4298] Possible unsafe locking scenario: [ 139.805259][ T4298] [ 139.812730][ T4298] CPU0 CPU1 [ 139.818122][ T4298] ---- ---- [ 139.823512][ T4298] lock(rfkill_global_mutex); [ 139.828299][ T4298] lock(&data->open_mutex); [ 139.835429][ T4298] lock(rfkill_global_mutex); [ 139.842737][ T4298] lock((work_completion)(&hdev->bg_scan_update)); [ 139.849349][ T4298] [ 139.849349][ T4298] *** DEADLOCK *** [ 139.849349][ T4298] [ 139.857515][ T4298] 3 locks held by kworker/0:9/4298: [ 139.862732][ T4298] #0: ffff888016c70938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x761/0x1010 [ 139.873126][ T4298] #1: ffffc9000345fd00 ((rfkill_op_work).work){+.+.}-{0:0}, at: process_one_work+0x79f/0x1010 [ 139.883530][ T4298] #2: ffffffff8d6c47c8 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_epo+0x43/0x170 [ 139.893063][ T4298] [ 139.893063][ T4298] stack backtrace: [ 139.898966][ T4298] CPU: 0 PID: 4298 Comm: kworker/0:9 Not tainted syzkaller #0 [ 139.906447][ T4298] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 139.916539][ T4298] Workqueue: events rfkill_op_handler [ 139.921957][ T4298] Call Trace: [ 139.925272][ T4298] [ 139.928236][ T4298] dump_stack_lvl+0x188/0x250 [ 139.932950][ T4298] ? load_image+0x400/0x400 [ 139.937491][ T4298] ? show_regs_print_info+0x20/0x20 [ 139.942737][ T4298] ? print_circular_bug+0x12b/0x1a0 [ 139.947973][ T4298] check_noncircular+0x296/0x330 [ 139.952945][ T4298] ? look_up_lock_class+0x71/0x110 [ 139.958101][ T4298] ? add_chain_block+0x940/0x940 [ 139.963069][ T4298] ? lockdep_lock+0xf1/0x1f0 [ 139.967700][ T4298] ? __lock_acquire+0x12e8/0x7d10 [ 139.972767][ T4298] ? mark_lock+0x94/0x320 [ 139.977147][ T4298] __lock_acquire+0x2c42/0x7d10 [ 139.982085][ T4298] ? verify_lock_unused+0x140/0x140 [ 139.987334][ T4298] lock_acquire+0x19e/0x400 [ 139.991883][ T4298] ? __flush_work+0xfa/0x210 [ 139.996514][ T4298] ? __lock_acquire+0x7d10/0x7d10 [ 140.001572][ T4298] ? read_lock_is_recursive+0x10/0x10 [ 140.006978][ T4298] ? start_flush_work+0x776/0x820 [ 140.012039][ T4298] __flush_work+0x116/0x210 [ 140.016728][ T4298] ? __flush_work+0xfa/0x210 [ 140.021353][ T4298] ? flush_work+0x20/0x20 [ 140.025708][ T4298] ? try_to_grab_pending+0xfa/0x7f0 [ 140.030939][ T4298] ? mark_lock+0x94/0x320 [ 140.035305][ T4298] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 140.041325][ T4298] ? lock_chain_count+0x20/0x20 [ 140.046239][ T4298] ? mark_lock+0x94/0x320 [ 140.050604][ T4298] ? __cancel_work_timer+0x36a/0x560 [ 140.056011][ T4298] __cancel_work_timer+0x3f4/0x560 [ 140.061177][ T4298] ? cancel_work_sync+0x20/0x20 [ 140.066054][ T4298] ? __cancel_work+0x1f9/0x2e0 [ 140.070845][ T4298] ? lockdep_hardirqs_on+0x94/0x140 [ 140.076093][ T4298] ? __cancel_work+0x27b/0x2e0 [ 140.080888][ T4298] ? cancel_work+0x20/0x20 [ 140.085336][ T4298] hci_request_cancel_all+0xcc/0x300 [ 140.090658][ T4298] hci_dev_do_close+0x4e/0x1030 [ 140.095538][ T4298] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 140.101467][ T4298] ? _raw_spin_unlock+0x40/0x40 [ 140.106360][ T4298] ? kobject_uevent_env+0x371/0x890 [ 140.111589][ T4298] hci_rfkill_set_block+0x10a/0x190 [ 140.116817][ T4298] ? rcu_lock_release+0x20/0x20 [ 140.121696][ T4298] rfkill_set_block+0x1c6/0x420 [ 140.126584][ T4298] rfkill_epo+0x75/0x170 [ 140.130859][ T4298] rfkill_op_handler+0x76/0x220 [ 140.135743][ T4298] process_one_work+0x85f/0x1010 [ 140.140719][ T4298] ? worker_detach_from_pool+0x240/0x240 [ 140.146383][ T4298] ? lockdep_hardirqs_off+0x70/0x100 [ 140.151715][ T4298] ? _raw_spin_lock_irq+0xb7/0xf0 [ 140.156776][ T4298] ? _raw_spin_lock_irqsave+0x100/0x100 [ 140.162350][ T4298] ? wq_worker_running+0x97/0x170 [ 140.167408][ T4298] worker_thread+0xaa6/0x1290 [ 140.172135][ T4298] kthread+0x436/0x520 [ 140.176234][ T4298] ? rcu_lock_release+0x20/0x20 [ 140.181112][ T4298] ? kthread_blkcg+0xd0/0xd0 [ 140.185732][ T4298] ret_from_fork+0x1f/0x30 [ 140.190179][ T4298] [ 140.200906][ T4544] usb 7-1: USB disconnect, device number 8 [ 140.323289][ T4192] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 140.343070][ T4192] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 140.354348][ T4192] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 140.369356][ T4192] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 140.378666][ T4286] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 140.388214][ T4192] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.400980][ T4192] usb 3-1: config 0 descriptor?? [ 140.821178][ T4286] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 140.832170][ T4286] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 140.843486][ T4286] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 140.853579][ T4286] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 140.904564][ T4192] plantronics 0003:047F:FFFF.0006: No inputs registered, leaving [ 140.916626][ T4192] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 140.973365][ T4286] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 140.987441][ T4286] usb 6-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 141.007072][ T4286] usb 6-1: Manufacturer: syz [ 141.037576][ T4286] usb 6-1: config 0 descriptor?? [ 141.174049][ T4192] usb 3-1: USB disconnect, device number 6 [ 141.512613][ T4286] appleir 0003:05AC:8243.0007: unknown main item tag 0x0 [ 141.522742][ T4286] appleir 0003:05AC:8243.0007: No inputs registered, leaving [ 141.538497][ T4286] appleir 0003:05AC:8243.0007: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.5-1/input0 [ 141.791987][ T4640] usb 6-1: USB disconnect, device number 4