last executing test programs: 5.127380011s ago: executing program 0 (id=377): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000340)={'adq12b\x00', [0x8005, 0x5, 0x0, 0x100, 0x27, 0xcc7, 0x8, 0x7, 0x3, 0xff, 0x0, 0x0, 0xa, 0x2, 0x7, 0x2009, 0xfffffffe, 0x40ed, 0x43, 0x40000003, 0x89, 0x6beab93e, 0xf27, 0x6, 0x800b, 0x4, 0x2, 0x0, 0x4fa7f95b, 0x5, 0x5149]}) ioctl$COMEDI_DEVINFO(r0, 0x80b06401, &(0x7f00000000c0)) 5.062826318s ago: executing program 0 (id=379): syz_mount_image$xfs(&(0x7f00000001c0), &(0x7f0000009640)='./file1\x00', 0x18040, &(0x7f0000000100)={[{@nolazytime}, {@dax_never}, {@inode32}, {@sysvgroups}, {@grpquota}, {@bsdgroups}, {@largeio}]}, 0x4, 0x9736, &(0x7f0000012d80)="$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") mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) quotactl$Q_GETQUOTA(0xffffffff80000701, &(0x7f0000000040)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000001800)) 4.363061436s ago: executing program 1 (id=387): r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, 0x0, 0x0) 4.21778744s ago: executing program 1 (id=391): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@ipv6_newaddr={0x40, 0x14, 0x119, 0x70bd26, 0x25dfdbf5, {0xa, 0x8, 0x19, 0xfe, r1}, [@IFA_ADDRESS={0x14, 0x1, @loopback}, @IFA_CACHEINFO={0x14, 0x6, {0x40000000, 0xffffffff, 0x100, 0x7}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4c051}, 0x8004) 3.83061779s ago: executing program 2 (id=396): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000002580)={0x1040, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x1014, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x1004, 0x4, "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"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7ffd}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}]}, 0x1040}}, 0x0) 3.830090096s ago: executing program 1 (id=397): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r0) sendmsg$TIPC_NL_PUBL_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001480)={&(0x7f0000000380)={0x14, r1, 0x341, 0x70bd28, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x34040814}, 0x8844) 3.56223706s ago: executing program 3 (id=398): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000740)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000010000000003000000280001800e0001006574683a766c616e1b0000001400028008000100030009"], 0x3c}}, 0x0) 3.436197017s ago: executing program 1 (id=400): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000140)={@fallback=r0, 0xffffffffffffffff, 0x2c}, 0x20) 3.433106859s ago: executing program 2 (id=401): sigaltstack(&(0x7f0000000040)={0x0, 0x80000001, 0xfffffffffffffda6}, 0x0) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r0, 0x0, 0x8, 0x0) 3.26223466s ago: executing program 0 (id=402): unshare(0x2020600) syz_emit_ethernet(0x0, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0}, 0x20) 3.138328207s ago: executing program 3 (id=403): r0 = add_key$keyring(&(0x7f0000000080), &(0x7f0000000340)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000240)='asymmetric\x00', &(0x7f00000000c0)=@chain) add_key$keyring(&(0x7f00000003c0), &(0x7f0000000480)={'syz', 0x1}, 0x0, 0x0, r0) 3.136223443s ago: executing program 1 (id=404): r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000001300)=ANY=[@ANYBLOB="0015f700000004"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000280)={0x40, 0x16, 0xd, "f283c1490483e3eae0a122ddc3"}, &(0x7f0000000480)={0x0, 0xa, 0x1, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.946251011s ago: executing program 2 (id=405): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmmsg$inet(r0, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffee3, 0x0}}], 0x40001b6, 0x0) setsockopt$TIPC_IMPORTANCE(r0, 0x10f, 0x8a, &(0x7f0000000140)=0x7f, 0x4) 2.899939337s ago: executing program 3 (id=406): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(ecb-aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="11da3cf44bf9170ccf071b8954b2842ed2b66821508c2484b7ef1800322de53ae3", 0x21) 2.667670528s ago: executing program 0 (id=407): syz_mount_image$exfat(&(0x7f0000000280), &(0x7f00000000c0)='./file2\x00', 0x810, &(0x7f00000018c0)=ANY=[], 0xfd, 0x1501, &(0x7f00000002c0)="$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") truncate(&(0x7f0000000140)='./file2\x00', 0x63fc) open(&(0x7f0000000240)='./file2\x00', 0x101402, 0x142) 2.356455133s ago: executing program 3 (id=408): mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuseblk(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', &(0x7f0000000000), 0x200000, &(0x7f0000000100)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1400}}, {@blksize={'blksize', 0x3d, 0x1200}}, {@blksize={'blksize', 0x3d, 0x1400}}, {@allow_other}, {@allow_other}, {@max_read={'max_read', 0x3d, 0x7}}, {@default_permissions}]}}) 2.264318181s ago: executing program 2 (id=409): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x25dfdbfb, {0x0, 0x0, 0x2000, 0x0, 0x6398b, 0x3424f}, [@IFLA_MASTER={0x8, 0xa, r1}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d848}, 0x8080) 2.237270244s ago: executing program 0 (id=410): syz_mount_image$jfs(&(0x7f0000000100), &(0x7f0000000000)='./file1\x00', 0x1000400, &(0x7f0000000d40)={[{@quota}, {@discard_size={'discard', 0x3d, 0xaff9}}, {@errors_remount}, {@errors_continue}, {@iocharset={'iocharset', 0x3d, 'macturkish'}}, {@discard}, {@nodiscard}, {@uid}, {@uid={'uid', 0x3d, 0xee01}}, {@usrquota}]}, 0x21, 0x61e5, &(0x7f000000d780)="$eJzs3cuOHFcZB/Cv+jYXE8fKIgoWQpPEXEKIr8EYAiRZwIINC+QtsjWZRBYOINsgJ7LwRLNhwUOAkFgixJIVD5AFW3Y8AJZsJFAWKIVq5pxxTaV7esb2dHW7fj9pXPX1qZo+5X9XX6aq+gQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAED/8wY/PFRFx5VfphhMRn4t+RC9iparXImJl7UR9nRdiuzmej4jhUkS1/vY/z0a8HhEfH4+4/+DOenXz+QP24/t//scffnLsR3//0/DMf/9yq//GpOVu3/7tf/5699G3FwAAALqoLMuySB/zT0bEIH22BwCefvn1v0zy7eq5qzfnrD9qtVqtXsC6rhzvbr2IiM36OtV7BofjAWDBbMYnbXeBFsm/0wYRcaztTgBzrWi7AxyJ+w/urBcp36L+erC2057PBdmT/2axe33HpOk0zXNMZvX42op+PDehPysz6sM8yfn3mvlf2WkfpeWOOv9ZmZT/aOfSp87J+feb+Tc8Pfn3xubfVTn/waHy78sfAAAAAADmWP77/4mWj/8uPf6mHMh+x3/XZtQHAAAAAAAAAHjSDjv+36Ax/t8u4/8BAADA3Ko+q1d+d/zhbZO+i626/XIR8UxjeaBj0sUyq233AwAAAAAAAAAAAAC6ZLBzDu/lImIYEc+srpZlWf3UNevDetz1F13Xtx+6rO0neQAA2PHx8ca1/EXEckRcTt/1N1xdXS3L5ZXVcrVcWcrvZ0dLy+VK7XNtnla3LY0O8IZ4MCqrX7ZcW69u2uflae3N31fd16jsH6Bjs9Fi4AAQETuvRvcnvSL9z+vVYirLZ6PlNzksiH32fxaU/Z+DaPtxCgAAABy9sizLIn2d98l0zL/XdqcAgJnIr//N4wJqtVqtVqufvrquHO9uvYiIzfo61XsGw/EDwILZjE/a7gItkn+nDSLihbY7Acy1ou0OcCTuP7izXqR8i/rrQRrfPZ8Lsif/zWJ7vbz+uOk0zXNMZvX42op+PDehP8/PqA/zJOffa+Z/Zad9lJZ7/PzLPX8mbOsco0n5V9t5ooX+tC3n32/m33DU+/+sbEVvbP5dlfMfHCr/vvwBAAAAAGCO5b//n5ir47+jR92cqfY7/rs2do2j6wsAAAAAAAAAPCn3H9xZz9e95uP/XxiznOs/n045/0L+nZTz7zXy/2pjuX5t/t7bD/P/94M763+89a/P5+lB81/KM0V6ZBXpEVGkeyoGafo4W/dZW8P+qLqnYdHrD9I5P+Xw3bgW12Mjzu5Ztpf+Px62n9vTXvV0uN1e9nfaz+9pH+y25/Uv7GkfprOLypXcfjrW4+dxPd7Zbq/alqZs//KU9nJKe86/b//vpJz/oPZT5b+a2ovGtHLvo95n9vv6dNz9vHXti785e/SbM9VW9He3ra7avpda6M/2/8mxUfzy5saN07ev3rp141ykyZ5bz0eaPGE5/2H62X3+f3mnPT/v1/fXex+NDp3/vNiKwcT8X67NV9v7yoz71oac/yj95PzfSe3j9/9Fzn/y/v9qC/0BAAAAAAAAAAAAAACA/ZRluX2J6FsRcTFd/9PWtZkAwGzl1/8yybfPqu7P+P7U6gWviznrz0zrT8v56o9avYh1XTnem/UiIv5WX6d6z/Drcb8MAJhnn0bEP9vuBK2Rf4fl7/urpqfa7gwwUzc/+PCnV69f37hxs+2eAAAAAAAAAACPKo//uVYb//lUWZZ3G8vtGf/17Vh73PE/B3lmd4DRCQNV9w+/TfvZ6o36vdpw4y/GpPG/h7tz+43/PZhyf8Mp7aMp7UtT2pentI+90KMm5/9ibbzzUxFxsjH8ehfGf22Oed8FOf+Xao/nKv+vNJar51/+fpHz7+3J/8yt939x5uYHH7527f2r7228t/GzC+fOnb1w8eKlS5fOvHvt+sbZnX9b7PHRyvnnsa+dB9otOf+cufy7Jef/pVTLv1ty/l9Otfy7Jeef3+/Jv1ty/vmzj/y7Jef/Sqrl3y05/6+lWv7dkvN/NdXy75ac/9dTLf9uyfm/lmr5d0vO/3Sq5d8tOf8zqT5g/itH3S9mI+efj3DZ/7sl55/PbJB/t+T8z6da/t2S87+Qavl3S87/9VTLv1ty/t9Itfy7Jed/MdXy75ac/zdTLf9uyflfSrX8uyXn/61Uy79bcv7fTrX8uyXn/0aq5d8tOf/vpFr+3ZLz/26q5d8tOf/vpVr+3ZLzfzPV8u+Wh9//b8aMGTN5pu1nJgAAAAAAAAAAAACgaRanE7e9jQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA/9mBAwEAAAAAIP/XRqiqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqrCDhwIAAAAAAD5vzZCVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVFfbuLkaus74f+Jl989qBxEDI38nfwMYxITib7PolfqF1MeG14a0EQqEv2K53bRb8htcugUayaaBEwqioom24aAsItbmp8AUXtAKUC9QKqRK0F/QGUaFyEVUBBaRKtIJsNWee59mZ2dmZWXu8PnPO5yPZP+/MmXmeOfPM2fnt+jsHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgGZ3vn7+07Usy+p/8r82Z9kL6v/eOLU5v+w1N3qGAAAAwLX6Vf73c7ekCw71caOmbf755d/92tLS0lL2vtE/H//80lK6YirLxjdkWX5ddOVH7681bxM8nk3WRpq+Hukx/GiP68d6XD/e4/qJHtdv6HH9ZI/rV+yAFTY2fh6T39n2/J+bG7s0uzUbz6/b3uFWj9c2jIzEn+XkavltlsaPZwvZyWw+m23ZvrFtLd/+G3fWx3pLFscaaRpra32F/OyxY3EOtbCPt7eMtXyf0U9el039/GePHfvb88/e3qn23A0t99eY5z3b6vP8ZLikMddatiHtkzjPkaZ5bu3wnIy2zLOW367+7/Z5PtfnPEeXp7mu2p/zyWwk//f38v001vxjvbSftobLfnFXlmWXlqfdvs2KsbKRbFPLJSPLz89kY0XW76O+lF6cja1pnd7Zxzqt17ntreu0/TURn/87w+3GVplD89P0k09MND3vv1y6mnUa1R/1aq+V9jU46NdKUdZgXBffyx/0Ex3X4Pbw+B+7e/U12HHtdFiD6XE3rcFtvdbgyMRoPuf0JNTy2yyvwZ0t24/mI9Xy+szd3dfgzPlTZ2cWP/bx+xZOHT0xf2L+9O6dO2d37927f//+meMLJ+dnG39f5d4uvk3ZSHoNbAv7Lr4GXtW2bfNSXfrSxIrj79W+Die7vA43t2076NfhWPuDq63PC3Llmm68Nt5T3+mTl0eyVV5j+fOz49pfh+lxN70Ox5pehx2/p3R4HY718Tqsb3N2R3/vWcaa/nSaw+rfC65tDW5uWoPt70fa1+Cg348UZQ1OhnXxgx2rfy/YGub7xPRa34+MrliD6eGGY0/9kvR+f3J/XjqtyzvqV9w0kV1YnD93/6NHz58/tzMLZV28pGmttK/XTU2PKVuxXkfWvF4PLbz8iTs6XL457KvJ++p/Ta76XNW32XN/9+cq/+7WeX+2XLorC2XA1nt/dvpuXt+fE1n2hW9/4uFvPvaF16+6P+v95idnrv29eOpLm46/46scf2Pf/3xjvHRXj4+OjzVev6Np74y3HI9bn6qx/NhVy8d+bqa/4/F4+LPex+NbuxyPt7RtO+jj8Xj7g4vH41qvn3Zcm/bnczKsk5Oz3Y/H9W227Frrmhzrejy+K9Ra2P+vDp1C6oua1s5q6zaNNTY2Hh7XWByhdZ3ubtl+PPRm9bGe2hXeFKZZ9rdO77mrsf1o0+2i9VqnU23bDnqdpp99rbZOa71++nZ12p/PybAubt3dfZ3Wt3l6z7UfOzfGfzYdOyd6rcHx0Yn6nMfTIsyP99nSxrgG78+OZWeyk9lcfu1Evp5q+VjTD/R3rJwIf9b7WLmlyxq8p23bQa/B9H1stbVXG1v54Aeg/fmcDOviyQe6r8H6Nm/YN9j3rveES9I2Te9d23++ttrPvO5o203Xa62MhXl+e1/3n83Wtzm5f619Zvf9dG+45KYO+6n99bvaa2ouW5/9tCXM89n9q++n+nzq23z+QJ/r6VCWZRc/8mD+897w+5WLF77/tZbfu3T6nc7Fjzz40xce/6e1zB+A4fd8o2xqfK9r+s1UP7//BwAAAIZC7PtHQk30/wAAAFAase+P/ys80f8DAABAacS+fyzUpAz9/x/33mTLG55deP5ilpL5S0G8Pu2GhxrbxYzrbPh6amlZ/fIHvzL/3/94sb/pjWRZ9suH/qjj9lseivNqmArzvPLG1stX+Np9fY195JGLadzm/PoXw/3Hx9PvMugUwZ3Nsuwbt3w2H2fq/Zfz+vRDR/L68KUnHq9v89yBxtfx9s+8pLH9X4Xw76HjR1tu/0zYDz8OdfatnfdHvN1XL7966773Lo8Xb1fbdnP+sJ/8QON+4+fkfO7xxvZxP682/29+5qmv1rd/9JWd539xpPP8nwr3+5VQ/+dlje2bn4P61/F2nwrzj+PF293/5W91nP+VTze2P/umxnZHQo3j3xO+3v6mZxea99ejtaMtjyt7c2O7OP7s9/80vz7eX7z/9vlPHr7csj/a18fT/9a4n5m27ePlcZzoH9rGr99P8/qM4z/1J0da9nOv8a88/MzL6vfbPv69bdud/ciOfPzl+2v9xKa//tRnO44X53Po78+2PJ5D7wqv4zD+kx8I6zFc/79XGvfX/ukKR97VevyJ239x88WWxxO95eeN8a+89kReN0xu3HTTC15486VX1Pddln1vQ+P+eo1/4m/OtMz/S7c19ke8Pmb028dfTRz/3EenT59ZvLAwl/bqY7fkn53ztsZ84nxvCcfW9q8Pnzn/wflzU7NTs1k2Vd6P0LtqXw71p41yqfvWSyuOoDseCc/nHX/5jU13/+tn4uX//p7G5Zff2vi+9aqw3efC5ZvD87e28Vd68s7b8td37ekww6WVnxd8LbZu/6/9fW0YHn/7+4K43s++9IP5fqhfl3/fiK/ra5z/D+ca9/P1sF+Xwiczb7ttebzm7eNnI1x+d+P1fs37Lxzm4vP6d+H5fvuPG/cf5xUf7w/D+5hvbWk93sX18fWLI+33n3+Kx6VwPMkuNa6PW8X9ffm52zpOL34OSXbp9vzrP0v3c/uaHuZqFj+2OHNy4fSFR2fOzy+en1n82McPnzpz4fT5w/lneR7+UK/bLx+fNuXHp7n5vXuy/Gh1plGusxs9/7OPHJvbN3v33PzxoxeOn3/k7Py5E8cWF4/Nzy3effT48fmP9rr9wtzBnbsO7N63a/rEwtzB/QcO7D4wvXD6TH0ajUn1sHf2w9Onzx3Ob7J4cM+BnQ88sGd2+tSZufmD+2Znpy/0un3+vWm6fus/nD43f/Lo+YVT89OLCx+fP7jzwN69u3p+GuCps8cXp2bOXTg9c2Fx/txM47FMnc8vrn/v63V7ymnxPxrvZ9vVGh/El73z3r3p81nrvvKJVe+qsUnbB4g+Gz6L5jsvOru/n69j3z8ealKG/h8AAADIxb5/ItRE/w8AAAClEfv+DaEm+n8AAAAojdj3T4aa/ktARfr/0uX/t1zsa3z5f/n/5v0l/1+x/P+7i5b/bxwv5P8H41rz9/L/gfy//L/8v/y//D8DULT8f+z7N2aZ3/8DAABAScW+f1Ooif4fAAAASiP2/TeFmuj/AQAAoDRi3/+CUJOK9P/y//L/8v/y//L/nceX/x9O8v/dyf/3IP8/k1Ur/39pkPO/Afn/jc1fyP9TREXL/8e+/4WhJhXp/wEAAKAKYt9/c6iJ/h8AAABKI/b9t4Sa9N//D/T/5QEAAACDF/v+zaEmFfn9v/z/NeX/U+ZK/r91/vL/reT/w3qQ/5f/Xwfy/93J//cg/+/8/8OV/28h/08RFS3/H/v+F4WaVKT/BwAAgCqIff+LQ030/wAAAFA8Y1d3s9j3vyTUZEX/f5UDAAAAADdc7PtvzdqC4BX5/b/8v/P/y//L/8v/dx6///z/aCb/Xxzy/93J//cg/y//L/8v/89AFS3/n/f92WT20lCTivT/AAAAUAWx778t1ET/DwAAAKUR+/7/F2qi/wcAAIDSiH3/llCTivT/8v+lyf//ovmpk/+X/+82vvy/8/+Xmfx/d/L/Pcj/y//L/8v/M1BFy//Hvv/2UJOK9P8AAABQBbHvvyPURP8PAAAApRH7/v8faqL/BwAAgNKIff/WUJOK9P/y/wXP/8fkqPP/y//L/xcy/z8p/1848v/dyf/3IP8v/y//L//PQBUt/x/7/peFmlSk/wcAAIAqiH3/y0NN9P8AAABQGrHvf0Woif4fAAAASiP2/VOhJhXp/9eS/69dkv9fzXU+//9EH+f/byH/L//fbXz5f+f/LzP5/+7k/3uQ/5f/l/+X/2egipb/j33/naEmFen/AQAAoApi378t1ET/DwAAAKUR+/67Qk30/wAAAFAase/fHmpSkf7f+f+HIv+fyf/L/8v/y//L//dH/r87+f8e5P/l/+X/5f8ZqKLl/2Pf/8pQk4r0/wAAAFAFse+/O9RE/w8AAAClEfv+V4Wa6P8BAACgNGLff0+oSUX6f/l/+X/5f/l/+f/O48v/Dyf5/+7k/3uQ/5f/l/+X/2egipb/j33/q0NNKtL/AwAAQBXEvn9HqIn+HwAAAEoj9v33hpro/wEAAKA0Yt8/HWpSkf5f/l/+X/5f/l/+v/P48v/DSf6/O/n/HuT/5f/l/+X/Gaii5f9j339fqElF+n8AAACogtj33x9qov8HAACA0oh9/0yoif4fAAAASiP2/bOhJhXp/+X/5f/l/+X/15T/f8Xy/cr/N8j/F4v8f3fy/z3I/8v/3/D8/7j8P6VStPx/7Pt3hppUpP8HAACAKoh9/65QE/0/AAAAlEbs+3eHmuj/AQAAoDRi378n1KQi/b/8v/y//L/8v/P/dx5f/n84yf93N/j8f3yI8v/y//L/zv8v/89KRcv/x77/gVCTivT/AAAAUAWx798baqL/BwAAgNKIff++UBP9PwAAAJRG7Pv3h5pUpP+X/5f/l/+X/5f/7zy+/P9wkv/vzvn/e5D/l/8f4vx/fW3J/1M0Rcv/x77/QKhJRfp/AAAAqILY978m1ET/DwAAAKUR+/5fCzXR/wMAAEBpxL7/10NNKtL/y//L/8v/y/8XPf8/If8v/78G8v/dyf/3IP8v/z/E+X/n/6eIipb/j33/wVCTivT/AAAAUAWx7/+NUBP9PwAAAJRG7PtfG2qi/wcAAIDSiH3/oVCTivT/8v/rlP+PF8r/y//L/zv/v/z/dSX/3538fw/y//L/8v/y/wxU0fL/se9/XahJRfp/AAAAqILY9z8YaqL/BwAAgNKIff/rQ030/wAAAFAase9/Q6hJRfp/+X/n/7/x+f/xlrnL/y/frt/8/1gm/y//TyT/3538fw/y//L/8v/y/wxU0fL/se9/Y6hJRfp/AAAAqILY978p1ET/DwAAAKUR+/43h5ro/wEAAKA0Yt//llCTivT/8v/y/zc+/+/8/87/3yD/L/8/CPL/3cn/9yD/L/8v/y//z0AVLf8f+/7fDDWpSP8PAAAAVRD7/odCTfT/AAAAUBqx739rqIn+HwAAAEoj9v1vCzWpSP8v/y//L/8v/y//33l8+f/hJP/f3ZDl/391c7hc/r9B/r/Y819r/n+s7evrkv//0Wr5/6UN7beX/+d6KFr+P/b9bw81qUj/DwAAAFUQ+/53hJro/wEAAKA0Yt//zlAT/T8AAACURuz7fyvUpCL9v/x/fR7L6WX5f/n//AL5f/l/+f+hJf/f3ZDl/53/v438f7Hn7/z/8v+sVLT8f+z73xVqUpH+HwAAAKog9v0Ph5ro/wEAAKA0Yt//7lAT/T8AAACURuz73xNqUpH+X/7f+f/l/+X/5f87jy//P5zk/7uT/+9B/l/+v2j5//+U/2e4FS3/H/v+R0JNKtL/AwAAQBXEvv+9oSb6fwAAACiN2Pf/dqiJ/h8AAABKI/b97ws1qUj/L/8/LPn/Kfn/Neb/J8Jl8v/y//L/1SL/3538fw/y//L/Rcv/O/8/Q65o+f/Y978/1KT//n+y7y0BAACAGyL2/b8TalKR3/8DAABAFcS+/3dDTfT/AAAAUBqx7/+9UJOK9P/y/33n/5c2dLk/5/9vnX8R8v/O/7/6+PL/8v9ltn75/3jkkf+X/5f/j+T/5f/l/2lXtPx/7Pt/P9SkIv0/AAAAVEHs+z8QaqL/BwAAgKHQ6f9kt4t9/+FQE/0/AAAAlEbs+4+EmlSk/5f/H5bz/8v/Z1XL///Ftn/5wXffcWSn/L/8v/z/mqzr+f/rL37n/5f/l/9P5P/l/+X/aVe0/H/s+4+Gmiw3fm9zgn8AAAAYbrHv/4NQk4r8/h8AAACqIPb9x0JN9P8AAABQGrHvnws1qUj/L/8v/y//X9D8/xCf/z/uj2HK/09vGKL8fzzoyv93tK75//cu58Tl/9ea/5/oeGl7/r8m/99C/n/N8/9OlmXy//L/3EBFy//Hvn8+1KQi/T8AAABUQej7R4436vIV+n8AAAAojdj3nwg10f8DAABAacS+/4OhJhXp/+X/5f/l/+X/nf+/8/iFzf87/39X8v/dFSf/35nz/8v/D/P85f/l/1mpaPn/2PcvhJpUpP8HAACAKoh9/4dCTfT/AAAAUBqx7/9wqIn+HwAAAEoj9v0nQ00q0v/L/8v/y//L/8v/dx5f/n84yf93J//fg/y//L/8v/w/A1W0/H/s+0+FmlSk/wcAAP6Pvft4sqwu/zh+m18DPcXmt3PhQveWfwELWesf4IKNC62yXICKOTGYI+YcMIsBAyhiwpzAhGIWFXMOmFFrLKaf55kOp8/tnr7d99zv9/Va+Mz0zHgv1BTwmZ73HKAHufsviVvsfwAAAGhG7v5L4xb7HwAAAJqRu/+hcUsn+1//r/9vtv+/j/5/r9fX/+v/W6b/H6f/n0P/r//X/+v/Waip9f+5+x8Wt3Sy/wEAAKAHufsfHrfY/wAAANCM3P2XxS32PwAAADQjd/8j4pZO9v+O/n9t1mf/nxmv/r+l/t/z//d8ff2//r9lx9v/X3HXP/n0//p//X/Q/+v/9f/sNLX+P3f/I+OWTvY/AAAA9CB3/6PiFvsfAAAAmpG7/9Fxi/0PAAAAzcjd/5i4pZP97/n/nv+v/9f/L7X/v/e6/l//v1Ce/z+up/7/slsvuOSO6+9+w0FeX/+v/9f/6/9ZrKn1/7n7Hxu3dLL/AQAAoAe5+x8Xt9j/AAAA0Izc/Y+PW+x/AAAAWEEnBj+au/8JcUsn+1//r//X/0f/v6H/9/x//X8L9P/jeur/z+b19f/6f/2//p/Fmlr/n7v/iXFLJ/sfAAAAepC7/0lxi/0PAAAA0zX0G7FH5O6/PG6x/wEAAKAZuftPxi2d7H/9/9H3///V/69G/+/5//p//X8T9P/j9P9z6P/1//p//T8LNbX+P3f/FXFLJ/sfAAAAepC7/8lxi/0PAAAAzcjd/5S4xf4HAACAZuTuf2rc0sn+1/97/r/+X/+v/x9+ff3/atL/j9P/z6H/P2w/f67+X/+v/2erA/b/d478Y3sh/X/u/qfFLZ3sfwAAAOhB7v6nxy32PwAAADQjd/8z4hb7HwAAAJqRu/+ZcUsn+1//r//X/+v/z7r/3/1T7zT9/zD9//HQ/4+bTP+/tj74Yf3/yvf/nv+v/9f/s83Unv+fu/9ZcUsn+x8AAAB6kLv/2XHLyP4/8C/mAwAAAEuVu/85cYvP/wMAAMDKy+osd/9z45ZO9r/+X/+v/9f/e/7/8OuP9f83bHl/+v9p0f+Pm0z/vwf9v/5/ld+//l//z25T6/9z9z8vbulk/wMAAEAPcvdfGbfY/wAAANCM3P3Pj1vsfwAAAGhG7v4XxC2d7P/h/v/Mt+v/90f/v/396/+Hf34sqv/P/0f9/2j/f5Hn//dJ/z9O/z+H/l//r//fq/8/Me/H6/8ZMrX+P3f/C+OWTvY/AAAA9CB3/4viFvsfAAAAmpG7/8Vxi/0PAAAAzcjd/5K4pZP97/n/+n/9/+r1/57/v2mZz/+fHXv/v67/3yf9/zj9/xz6f/2//n/8+f8jfwqA/p8hU+v/c/e/NG7pZP8DAABAD3L3vyxusf8BAABgNWz9vQM7f0NpyN3/8rjF/gcAAIBm5O5/RdzSzv4ffVan/l//r//X/+v/h19/Wv2/5//vl/5/nP5/Dv3/UfTz6431/1ft9eOn0P9fftT9/wj9P0O29f83nvn4svr/3P2vjFva2f8AAADQvdz9r4pb7H8AAABYMRt7fkvu/lfv/H72PwAAADQjd/9r4pZO9v+R9/8jf/qA/l//r//X/+v/9f+Lpv8fp/+fQ//v+f+e/6//Z6G29f9bLKv/z93/2rilk/0PAAAAPcjd/7q4xf4HAACAZuTuvypusf8BAACgGbn7Xx+3dLL/Pf9f/6//1//r/4dfX/+/mg7V35+j/y/6f/2//l//r/9nAabW/+fuf0Pc0sn+BwAAgB7k7n9j3GL/AwAAQDNy978pbrH/AQAAoBm5+98ct3Sy//X/R9v/58f1//r/mf5f/6//PxbdPv9/bejfRLvt0f/f/OCT99v+Ef2//l//r//X/7NP/z/ybZPo/0+d+a/L3P1viVs62f8AAADQg9z9b41b7H8AAABoRu7+t8Ut9j8AAAA0I3f/1XHLAff/WPMwZfp/z//X/+v/9f/Dr6//X03d9v/75Pn/c+j/9f/6f/0/CzWJ/n/L13P3vz1u8fl/AAAAaEbu/nfELfY/AAAANCN3/zvjFvsfAAAAmpG7/11xSyf7X/+v/9f/6//1/8Ovr/9fTfr/cfr/OVap/7/6EP3/+vCHl93PH9ay37/+X//PblPr/3P3XxO3dLL/AQAAoAe5+98dt9j/AAAA0Izc/e+JW+x/AAAAaEbu/vfGLZ3sf/2//l//r//X/w+/vv5/Nen/x+n/Z7PZtSNvYKj/P3X+NPt/z/+f3PvX/+v/2W1q/X/u/vfFLZ3sfwAAAOhB7v5r4xb7HwAAAJqRu/+6uMX+BwAAgGbk7n9/3NLJ/tf/6//1//p//f/w6+v/V5P+f5z+f45Vev6//n9y71//r/9nt6n1/7n7PxC3dLL/AQAAoAe5+6+PW+x/AAAAaEbu/g/GLfY/AAAANCN3/w1xSyf7X/+v/9f/6//1/8Ovr/9fTUfX/8/0//p//f8c+n/9v/6fnabW/+fu/1Dc0sn+BwAAgB7k7v9w3GL/AwAAQDNy938kbrH/AQAAoBm5+z8at3Sy//X/+n/9v/5f/z/8+vr/1eT5/+P0/3Po//X/+n/9Pws13P9fvrT+P3f/x+KWTvY/AAAA9CB3/41xi/0PAAAAzcjd//G4xf4HAACAZuTu/0Tc0sn+1//r/7f3/7OZ/l//r//fdAz9/8ZM/79w+v9x+v859P9t9v/nzBrq/0/s+eP1/0zR1J7/n7v/k3FLJ/sfAAAAepC7/1Nxi/0PAAAAzcjd/+m4xf4HAACAZuTu/0zc0sn+1//r/z3/X/+v/x9+fc//X036/3H6/zn0/232/57/r/9naabW/+fu/2zc0sn+BwAAgB7k7v9c3GL/AwAAQDNy938+brH/AQAAoBm5+78Qt3Sy//X/+n/9v/5f/z/8+vr/1aT/H6f/n0P/r//X/+v/Waip9f+5+78Yt3Sy/wEAAKAHuftvilvsfwAAAGhG7v6b4xb7HwAAAJqRu/9LcUsn+1//r//X/69m/7+h/9f/6/8HTaX/v/DC+96i/9f/6//1//p//X/vptb/5+7/ctzSyf4HAACAHuTu/0rcYv8DAABAM3L3fzVusf8BAACgGbn7vxa3dLL/d/f/5842C9VNQ/1/NGr6/y30/9vfv/5/+OeH5//r//X/R28q/b/n/5/d+9f/6/9X+f0fqP+/5+4fr/+nRVPr/3P33xK3dLL/AQAAoAe5+78et9j/AAAA0Izc/d+IW+x/AAAAaEbu/lvjlk72v+f/6//1//r/qfT/s9lM/6//PzT9/zj9/xz6f/2/5/9f+sD/0/+zOFPr/3P3fzNu6WT/AwAAQA9y938rbrH/AQAAoBm5+78dt9j/AAAA0Izc/d+JWzrZ//30/+dt+5r+X/+/9e+X/n8a/b/n/+v/F0H/P07/X3b+pW3qp//fGPrgsvv5w1r2+2+m//f8fxZoav1/7v7vxi2d7H8AAADoQe7+78Ut9j8AAAA0I3f/9+MW+x8AAACakbv/B3FLJ/u/n/5/O/1/T/3/A/T/O15f/6//b5n+P/+NPkz/P0c//f+gZffzq/7+9f/6f3abWv+fu/+2uKWT/Q8AAAA9yN3/w7jF/gcAAIBm5O7/Udxi/wMAAEAzcvf/OG7pZP/r//vq/9dmPfb/nv+v/9f/90T/P07/P4f+X/+v/9f/s1BT6/9z99++tt7l/gcAAIBVdf97PeS2/X7f20//78bsJ3HLRbNT+/w0NgAAADBxd+3+tfXZ7Kenv+bz/wAAANCi3P0/i1s62f/6/776/z6f/6//1//r/3ui/x+n/59D/6//1//r/1moqfX/uft/HrdsGX7rB/6rBAAAAKYkd/8v4pZOPv8PAAAAPcjd/8u4Zdf+98cBAgAAwKrK3f+ruKWTz//r/yfe/8+OqP+P76f/36T/1/8Pvb7+fzXp/8cdsv8/tab/1/+P0P/r//X/7DS1/j93/6/jlk72PwAAADRq268o5O7/Tdxi/wMAAEAzcvf/Nm6x/wEAAKAZuft/F7d0sv/1/8fe/2eqfoTP/z9RX/L8/877/ys3Bl9f/6//b5n+f5zn/8+h/2+l/z9/9fv/EzP9Py2YWv+fu//3cUsn+x8AAAB6kLv/D3GL/Q8AAADNyN3/x7jF/gcAAIBm5O7/U9zSyf7X/0/8+f9n1f/v4/n/+v8++v89Xr+d/v9uF5y86eIHXXeN/p8zjrP/z58L+n/9v/5/04T6f8//1/8zEYvv/9e3ffCg/X/u/j/HLZ3sfwAAAOhB7v474hb7HwAAAJqRu/8vcYv9DwAAAM3I3f/XuKWT/a//1/9Ppf/Pv9dL6P9PnnX/f2I2my2l/8+muPf+3/P/9f+7ef7/OP3/HPp//b/+X//PQi2+/9/+wYP2/7n7/xa3dLL/AQAAoAe5+/8et+T+XzvwL90DAAAAE5O7/x9xi8//AwAAQDNy9/8zbulk/+v/9f9T6f+T5/+f+XFtPf//4opT++z/71Ff0v8fLf3/OP3/HPp//b/+X//PQk2t/8/d/6+4pZP9DwAAAO06r76Uu//OuMX+BwAAgGbk7v933GL/AwAAQDNy9/8nbulk/+v/W+3/s4jX/+v/p9L/e/6/5/8fD/3/OP3/HPp//b/+X//PQk2t/8/d/78AAAD//6sFcqo=") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000780)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 2.134048977s ago: executing program 3 (id=412): syz_mount_image$f2fs(&(0x7f0000000780), &(0x7f0000000000)='./file2\x00', 0x18000, &(0x7f0000000080)=ANY=[], 0x1, 0x556e, &(0x7f0000004000)="$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") mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x1d0) 1.714327539s ago: executing program 2 (id=414): r0 = syz_open_dev$dri(&(0x7f0000000280), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000000300)=[0x0]}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}) 1.506383361s ago: executing program 4 (id=415): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x16, 0x0, 0x4, 0x10001, 0x0, 0x1}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xd, 0x5a87, 0x4, 0x1, 0x0, r0}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x8000000}, 0x38) 1.483507245s ago: executing program 2 (id=416): r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009e173610ef171e7206de0102030109021200010000000009040000000206"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, 0x0, 0x0, &(0x7f0000000140)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, 0x0, 0x0}, &(0x7f0000000880)={0x84, &(0x7f0000000380)={0x0, 0x10, 0x81, "9b94205c07264580ae8d9a7c065e3db0c81130d0a4fac6b7d31bff51ed20dc540ad42f6d0fcbd3d34a9939ecd102f8a6201bbb631e7cf53cf0720940daabae630bc2a08dd8c9ccdbff3fdc6bf4137f78bc8ecd7c81fc7b80f342764cfb4d04f583a16fca89c91264971aeef6d82847f761e9b7d6c5623ea5a5fc8a2f068825b222"}, &(0x7f0000000480)={0x0, 0xa, 0x1, 0xa}, &(0x7f00000004c0)={0x0, 0x8, 0x1}, &(0x7f0000000500)={0x20, 0x0, 0x4, {0x1, 0x3}}, &(0x7f0000000540)={0x20, 0x0, 0x4, {0x20, 0x2}}, &(0x7f00000005c0)={0x40, 0x7, 0x2, 0x34e1}, &(0x7f0000000600)={0x40, 0x9, 0x1, 0xd1}, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)={0x40, 0x19, 0x2, "fc90"}, 0x0, 0x0, 0x0, 0x0}) 1.419334461s ago: executing program 1 (id=417): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x2db4, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x46, 0x1, {0x22, 0x3}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x0, 0x0, 0xfc}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f00000000c0)={0x14, &(0x7f0000000040)=ANY=[@ANYBLOB="200706"], 0x0}, 0x0) 1.341536792s ago: executing program 4 (id=418): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000003c0)='./file1\x00', 0x0, &(0x7f0000000280), 0x1, 0x78f, &(0x7f00000007c0)="$eJzs3c9rXNUeAPDvnSRNk/a95MGD9/pWgQcaKJ2YGlsFF3ElgoWCrm3DZBpqJpmSmZQmZNEightBxYWgm679UXdu/bFwo/+FC2mpmhYrLiRy50czTWbSSZqZCeTzgZs55/7IOd8595577sxlbgCH1lj6JxNxIiLeSyJGavOTiBiopPojpqvrPVhfy6VTEhsbr/2aVNa5v76Wi4ZtUsdqmf9GxLdvR5zMbC+3tLI6P1Mo5Jdq+YnywpWJ0srqqcsLM3P5ufzimcmpqdNnnzt7Zv9i/f3H1eN33n/56S+m/3zrP7fe/S6J6TheW9YYx34Zi7HaezKQvoWbRva7pN5Lel0B9iQ9NPuqR3mciJHoq6RaGOpmzQCATtkAAA6hxBgAAA6Z+ucA99fXcvWpt59IdNfdlyLiaDX++veb1SX9MR2DlYUDETF8P3nkm5EkIkb3ofyxiPjkqzc+S6eotYPv0oBuuH4jIi6Ojm3v/5NH71nYg2d2WrgxWHkZ2zL7sJ1/oJe+Tsc/zzcb/2Vqx//Ryt+t45/BJsfuXjz++M/c3rrN96/vQ8E16fjvxYZ72x40xF8z2lfL/aMy5htILl0u5NO+7Z8RMR4Dg2l+srJq85Hb+L2/7rUqv3H899sHb36alp++bq6Rud0/+Og2szPlmSeNu+7ujYj/9TeLP3nY/kmL8e/5Nst45YV3Pm61LI0/jbc+bY+/szZuRjzVtP032zLZ8f7EicruMFHfKZr48qePhluV39j+6ZSWX78W6Ia0/Yd3jn80abxfs7T7Mn64OfJNq2WPj7/5/n8kqXYCR2rzrs2Uy0uTEUeSV7fPP725bT1fXz+Nf/z/zY//arHN9//0mvBim/H33/nl873H31lp/LO7av/dJ249mO9rVX577T9VSY3X5rTT/7VbwSd57wAAAAAAAAAAAAAAAAAAAAAAAACgXZmIOB5JJvswnclks9VneP87hjOFYql88lJxeXE2Ks/KHo2BTP2nLkcafg91svZ7+PX86S35ZyPiXxHx4eBQJZ/NFQuzvQ4eAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGqOtXj+f+rnwV7XDgDomKO9rgAA0HXO/wBw+Ozu/D/UsXoAAN3j+h8ADp+2z/8XO1sPAKB7XP8DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQYefPnUunjT/W13JpfvbqyvJ88eqp2XxpPruwnMvmiktXsnPF4lwhn80VF1r+o+vVl0KxeGUqFpevTZTzpfJEaWX1wkJxebF84fLCzFz+Qn6ga5EBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQPtKK6vzM4VCfklix8TQwajGgUn0x4GohkTHEo29xFDvOigAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAA+7vAAAA//9oei8M") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, 0x0) 1.069775888s ago: executing program 4 (id=419): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x7, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="020100090a000000007fffffff0000000200100000e9000000e9000000000000030005000000000002000000ac1414000000000000000000030006000000000002"], 0x50}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x40000000000007b, 0x4004) 816.491175ms ago: executing program 4 (id=420): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000800)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x5, 0xe, 0x0, &(0x7f0000000080)="0000000000040000000002015370", 0x0, 0xff, 0x0, 0xfffffd0a, 0x0, 0x0, 0x0, 0x3, 0x0, 0x401}, 0x1a) 673.291985ms ago: executing program 0 (id=421): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2c, r1, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x880}, 0x20004040) 587.005779ms ago: executing program 4 (id=422): r0 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10, &(0x7f0000000640), 0x0, 0x47c, &(0x7f00000001c0)="$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") ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000040)={0x8, 0xffffe1ac, 0x8, 0x6, 0x7}) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8, 0x4, 0x3a30, 0x1, 0x7f}) 15.551415ms ago: executing program 3 (id=423): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000007, 0x12, r0, 0x0) get_mempolicy(0x0, 0x0, 0x3ff, &(0x7f0000ffd000/0x2000)=nil, 0x3) 0s ago: executing program 4 (id=424): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1, 0x21, &(0x7f0000000a40)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffd}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.93' (ED25519) to the list of known hosts. [ 73.895021][ T5806] cgroup: Unknown subsys name 'net' [ 74.008483][ T5806] cgroup: Unknown subsys name 'cpuset' [ 74.017602][ T5806] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 75.547382][ T5806] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 77.701866][ T5823] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 77.709754][ T5823] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 77.721648][ T5823] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 77.725688][ T5826] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 77.730586][ T5823] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 77.737897][ T5826] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 77.751024][ T5826] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 77.758716][ T5823] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 77.758881][ T5826] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 77.767459][ T5823] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 77.786019][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 77.794645][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 77.798155][ T5140] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 77.803205][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 77.826023][ T5140] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 77.826289][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 77.841858][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 77.849437][ T51] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 77.857428][ T5825] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 77.865269][ T51] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 77.872448][ T5825] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 77.875399][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 77.882298][ T5825] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 77.898283][ T5823] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 77.906971][ T5823] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 78.627359][ T5818] chnl_net:caif_netlink_parms(): no params data found [ 78.691803][ T5829] chnl_net:caif_netlink_parms(): no params data found [ 78.717354][ T5820] chnl_net:caif_netlink_parms(): no params data found [ 78.742895][ T5819] chnl_net:caif_netlink_parms(): no params data found [ 78.850116][ T5827] chnl_net:caif_netlink_parms(): no params data found [ 78.991577][ T5818] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.999709][ T5818] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.007209][ T5818] bridge_slave_0: entered allmulticast mode [ 79.015239][ T5818] bridge_slave_0: entered promiscuous mode [ 79.075586][ T5818] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.082991][ T5818] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.090213][ T5818] bridge_slave_1: entered allmulticast mode [ 79.098063][ T5818] bridge_slave_1: entered promiscuous mode [ 79.173482][ T5829] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.180751][ T5829] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.189107][ T5829] bridge_slave_0: entered allmulticast mode [ 79.196731][ T5829] bridge_slave_0: entered promiscuous mode [ 79.211609][ T5829] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.219031][ T5829] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.226374][ T5829] bridge_slave_1: entered allmulticast mode [ 79.234308][ T5829] bridge_slave_1: entered promiscuous mode [ 79.254136][ T5820] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.261485][ T5820] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.268817][ T5820] bridge_slave_0: entered allmulticast mode [ 79.276578][ T5820] bridge_slave_0: entered promiscuous mode [ 79.284659][ T5819] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.291938][ T5819] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.299490][ T5819] bridge_slave_0: entered allmulticast mode [ 79.307193][ T5819] bridge_slave_0: entered promiscuous mode [ 79.359448][ T5820] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.366822][ T5820] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.374121][ T5820] bridge_slave_1: entered allmulticast mode [ 79.381919][ T5820] bridge_slave_1: entered promiscuous mode [ 79.389745][ T5819] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.397068][ T5819] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.404544][ T5819] bridge_slave_1: entered allmulticast mode [ 79.412175][ T5819] bridge_slave_1: entered promiscuous mode [ 79.424950][ T5818] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.438810][ T5818] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.466291][ T5829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.517003][ T5827] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.524536][ T5827] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.531756][ T5827] bridge_slave_0: entered allmulticast mode [ 79.539664][ T5827] bridge_slave_0: entered promiscuous mode [ 79.553235][ T5829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.603009][ T5827] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.610439][ T5827] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.618086][ T5827] bridge_slave_1: entered allmulticast mode [ 79.626158][ T5827] bridge_slave_1: entered promiscuous mode [ 79.663165][ T5820] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.677326][ T5819] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.690476][ T5818] team0: Port device team_slave_0 added [ 79.726363][ T5820] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.739707][ T5819] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.752443][ T5818] team0: Port device team_slave_1 added [ 79.763549][ T5827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.776005][ T5829] team0: Port device team_slave_0 added [ 79.785463][ T5827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.862200][ T5829] team0: Port device team_slave_1 added [ 79.877099][ T5823] Bluetooth: hci1: command tx timeout [ 79.877105][ T5140] Bluetooth: hci2: command tx timeout [ 79.898191][ T5820] team0: Port device team_slave_0 added [ 79.933852][ T5818] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.940818][ T5818] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.953569][ T5140] Bluetooth: hci0: command tx timeout [ 79.968046][ T51] Bluetooth: hci4: command tx timeout [ 79.972799][ T5823] Bluetooth: hci3: command tx timeout [ 79.979376][ T5818] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.011641][ T5819] team0: Port device team_slave_0 added [ 80.021138][ T5820] team0: Port device team_slave_1 added [ 80.030431][ T5827] team0: Port device team_slave_0 added [ 80.038347][ T5818] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.045363][ T5818] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.071331][ T5818] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.107552][ T5819] team0: Port device team_slave_1 added [ 80.129923][ T5827] team0: Port device team_slave_1 added [ 80.166204][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.173278][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.199778][ T5829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.240169][ T5820] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.247206][ T5820] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.273816][ T5820] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.286496][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.293779][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.319759][ T5827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.332727][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.339676][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.366403][ T5829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.404337][ T5820] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.411326][ T5820] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.437356][ T5820] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.450232][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.457239][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.483184][ T5827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.512065][ T5819] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.519100][ T5819] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.545021][ T5819] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.583473][ T5818] hsr_slave_0: entered promiscuous mode [ 80.590514][ T5818] hsr_slave_1: entered promiscuous mode [ 80.631751][ T5819] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.638943][ T5819] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.665110][ T5819] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.734677][ T5827] hsr_slave_0: entered promiscuous mode [ 80.741672][ T5827] hsr_slave_1: entered promiscuous mode [ 80.748939][ T5827] debugfs: 'hsr0' already exists in 'hsr' [ 80.754925][ T5827] Cannot create hsr debugfs directory [ 80.809061][ T5829] hsr_slave_0: entered promiscuous mode [ 80.816603][ T5829] hsr_slave_1: entered promiscuous mode [ 80.823514][ T5829] debugfs: 'hsr0' already exists in 'hsr' [ 80.829272][ T5829] Cannot create hsr debugfs directory [ 80.943645][ T5819] hsr_slave_0: entered promiscuous mode [ 80.950547][ T5819] hsr_slave_1: entered promiscuous mode [ 80.958480][ T5819] debugfs: 'hsr0' already exists in 'hsr' [ 80.964311][ T5819] Cannot create hsr debugfs directory [ 80.976805][ T5820] hsr_slave_0: entered promiscuous mode [ 80.983837][ T5820] hsr_slave_1: entered promiscuous mode [ 80.990670][ T5820] debugfs: 'hsr0' already exists in 'hsr' [ 80.996641][ T5820] Cannot create hsr debugfs directory [ 81.697863][ T5818] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 81.742557][ T5818] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 81.769779][ T5818] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 81.795913][ T5818] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 81.854010][ T5827] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 81.888018][ T5827] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 81.917042][ T5827] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 81.928111][ T5827] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 81.958733][ T5823] Bluetooth: hci2: command tx timeout [ 81.964584][ T5140] Bluetooth: hci1: command tx timeout [ 82.009476][ T5829] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 82.021414][ T5829] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 82.032635][ T5823] Bluetooth: hci4: command tx timeout [ 82.033269][ T5140] Bluetooth: hci3: command tx timeout [ 82.038173][ T51] Bluetooth: hci0: command tx timeout [ 82.059156][ T5829] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 82.088143][ T5829] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 82.196533][ T5820] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 82.208139][ T5820] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 82.249886][ T5820] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 82.279161][ T5820] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 82.332636][ T5818] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.371325][ T5819] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 82.387335][ T5819] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 82.408877][ T5819] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 82.430778][ T5819] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 82.445819][ T5818] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.491912][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.499358][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.530976][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.538218][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.600124][ T5827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.704781][ T5827] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.754981][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.762248][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.799599][ T5829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.827573][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.834775][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.924599][ T5820] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.980624][ T5829] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.046157][ T5820] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.071655][ T137] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.078823][ T137] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.088888][ T137] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.096036][ T137] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.119581][ T5819] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.165626][ T137] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.172845][ T137] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.208669][ T5819] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.240116][ T137] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.247351][ T137] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.266751][ T5818] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.305980][ T137] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.313302][ T137] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.381932][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.389190][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.669878][ T5827] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.007996][ T5827] veth0_vlan: entered promiscuous mode [ 84.033412][ T51] Bluetooth: hci1: command tx timeout [ 84.038913][ T5823] Bluetooth: hci2: command tx timeout [ 84.089070][ T5827] veth1_vlan: entered promiscuous mode [ 84.113068][ T5823] Bluetooth: hci4: command tx timeout [ 84.113095][ T5140] Bluetooth: hci0: command tx timeout [ 84.118527][ T5823] Bluetooth: hci3: command tx timeout [ 84.155726][ T5818] veth0_vlan: entered promiscuous mode [ 84.189930][ T5819] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.231699][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.246303][ T5820] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.256556][ T5818] veth1_vlan: entered promiscuous mode [ 84.293976][ T5827] veth0_macvtap: entered promiscuous mode [ 84.328247][ T5827] veth1_macvtap: entered promiscuous mode [ 84.400336][ T5819] veth0_vlan: entered promiscuous mode [ 84.430506][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.466191][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.480790][ T5818] veth0_macvtap: entered promiscuous mode [ 84.509220][ T5818] veth1_macvtap: entered promiscuous mode [ 84.524298][ T5819] veth1_vlan: entered promiscuous mode [ 84.531477][ T49] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.541602][ T49] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.558915][ T5829] veth0_vlan: entered promiscuous mode [ 84.581206][ T49] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.591078][ T49] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.627100][ T5820] veth0_vlan: entered promiscuous mode [ 84.652058][ T5820] veth1_vlan: entered promiscuous mode [ 84.683284][ T5829] veth1_vlan: entered promiscuous mode [ 84.696336][ T5818] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.711662][ T5818] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.768554][ T70] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.778544][ T70] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.814222][ T70] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.823196][ T70] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.871647][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.881846][ T5819] veth0_macvtap: entered promiscuous mode [ 84.888341][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.932622][ T5819] veth1_macvtap: entered promiscuous mode [ 84.990003][ T146] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.998425][ T146] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.008858][ T5829] veth0_macvtap: entered promiscuous mode [ 85.030621][ T5820] veth0_macvtap: entered promiscuous mode [ 85.074459][ T5829] veth1_macvtap: entered promiscuous mode [ 85.105969][ T5819] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.112398][ T5827] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 85.131246][ T5820] veth1_macvtap: entered promiscuous mode [ 85.166370][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.179427][ T5819] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.181821][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.216584][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.273936][ T5942] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 85.336348][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.347408][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.361363][ T146] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.371713][ T146] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.398010][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.406079][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.418774][ T146] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.428513][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.437522][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.488407][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.499535][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.528494][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.547947][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.600812][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.610676][ T5946] netlink: 68 bytes leftover after parsing attributes in process `syz.1.7'. [ 85.611143][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.642284][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.655753][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.911985][ T137] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.945700][ T137] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.048889][ T70] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.057096][ T70] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.065875][ T5954] loop4: detected capacity change from 0 to 64 [ 86.113007][ T5823] Bluetooth: hci2: command tx timeout [ 86.116720][ T51] Bluetooth: hci1: command tx timeout [ 86.193000][ T51] Bluetooth: hci0: command tx timeout [ 86.198555][ T51] Bluetooth: hci4: command tx timeout [ 86.202361][ T5823] Bluetooth: hci3: command tx timeout [ 86.249304][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.287083][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.364312][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.392603][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.405216][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.424142][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.548025][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.561359][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.595166][ T55] cfg80211: failed to load regulatory.db [ 86.710569][ T5968] capability: warning: `syz.4.16' uses deprecated v2 capabilities in a way that may be insecure [ 86.795358][ T5970] netlink: 'syz.1.17': attribute type 1 has an invalid length. [ 86.963592][ T5978] loop1: detected capacity change from 0 to 128 [ 86.988358][ T5978] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 87.012586][ T5979] netlink: 120 bytes leftover after parsing attributes in process `syz.3.4'. [ 87.034062][ T5979] netlink: 'syz.3.4': attribute type 1 has an invalid length. [ 87.051644][ T5978] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 87.078247][ T5979] netlink: 64 bytes leftover after parsing attributes in process `syz.3.4'. [ 87.267651][ T137] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 87.426091][ T5995] sch_tbf: burst 6 is lower than device ip6gre0 mtu (1448) ! [ 87.725348][ T6002] loop2: detected capacity change from 0 to 2048 [ 87.777770][ T6002] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 87.927328][ T6008] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 88.322555][ T6022] netlink: 8 bytes leftover after parsing attributes in process `syz.4.37'. [ 88.337960][ T6022] netlink: 4 bytes leftover after parsing attributes in process `syz.4.37'. [ 88.347787][ T6022] netlink: 'syz.4.37': attribute type 12 has an invalid length. [ 88.390910][ T6024] loop1: detected capacity change from 0 to 16 [ 88.472067][ T6024] erofs (device loop1): mounted with root inode @ nid 36. [ 88.547330][ T5985] loop0: detected capacity change from 0 to 40427 [ 88.564001][ T30] audit: type=1800 audit(1771952045.513:2): pid=6024 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.38" name="file1" dev="loop1" ino=86 res=0 errno=0 [ 88.612262][ T5985] F2FS-fs (loop0): build fault injection rate: 771 [ 88.633538][ T5985] F2FS-fs (loop0): invalid crc value [ 88.789256][ T5985] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 88.846945][ T5985] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 89.057832][ T5819] syz-executor: attempt to access beyond end of device [ 89.057832][ T5819] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 89.092978][ T5819] CPU: 1 UID: 0 PID: 5819 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 89.093010][ T5819] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 89.093029][ T5819] Call Trace: [ 89.093038][ T5819] [ 89.093046][ T5819] dump_stack_lvl+0xe8/0x150 [ 89.093088][ T5819] f2fs_handle_critical_error+0x37c/0x540 [ 89.093119][ T5819] f2fs_write_end_io+0xcdb/0xff0 [ 89.093167][ T5819] __submit_merged_bio+0x256/0x700 [ 89.093197][ T5819] __submit_merged_write_cond+0x3c9/0x4e0 [ 89.093230][ T5819] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 89.093279][ T5819] f2fs_write_data_pages+0x2975/0x35e0 [ 89.093344][ T5819] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 89.093383][ T5819] ? unwind_get_return_address+0x4d/0x90 [ 89.093412][ T5819] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 89.093463][ T5819] ? check_noncircular+0xda/0x150 [ 89.093501][ T5819] ? lockdep_unlock+0x5d/0xd0 [ 89.093522][ T5819] ? __lock_acquire+0x146e/0x2cf0 [ 89.093572][ T5819] ? do_raw_spin_lock+0x12b/0x2f0 [ 89.093605][ T5819] ? do_raw_spin_unlock+0xf5/0x210 [ 89.093626][ T5819] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 89.093653][ T5819] do_writepages+0x32e/0x550 [ 89.093692][ T5819] ? do_raw_spin_unlock+0xf5/0x210 [ 89.093718][ T5819] filemap_fdatawrite+0x1e9/0x2f0 [ 89.093769][ T5819] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 89.093854][ T5819] ? do_raw_spin_unlock+0xf5/0x210 [ 89.093881][ T5819] f2fs_sync_dirty_inodes+0x30e/0x860 [ 89.093928][ T5819] f2fs_write_checkpoint+0x9df/0x26a0 [ 89.093957][ T5819] ? lockdep_hardirqs_on+0x7a/0x110 [ 89.094022][ T5819] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 89.094106][ T5819] ? kfree+0x1c1/0x630 [ 89.094136][ T5819] ? f2fs_stop_gc_thread+0x7f/0xb0 [ 89.094178][ T5819] kill_f2fs_super+0x314/0x720 [ 89.094214][ T5819] ? __pfx_kill_f2fs_super+0x10/0x10 [ 89.094258][ T5819] ? lockdep_hardirqs_on+0x7a/0x110 [ 89.094301][ T5819] deactivate_locked_super+0xbc/0x130 [ 89.094337][ T5819] cleanup_mnt+0x437/0x4d0 [ 89.094358][ T5819] ? _raw_spin_unlock_irq+0x23/0x50 [ 89.094388][ T5819] task_work_run+0x1d9/0x270 [ 89.094414][ T5819] ? __pfx_task_work_run+0x10/0x10 [ 89.094450][ T5819] exit_to_user_mode_loop+0xed/0x480 [ 89.094473][ T5819] ? rcu_is_watching+0x15/0xb0 [ 89.094508][ T5819] do_syscall_64+0x32d/0xf80 [ 89.094535][ T5819] ? trace_irq_disable+0x3b/0x150 [ 89.094565][ T5819] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.094587][ T5819] ? clear_bhb_loop+0x40/0x90 [ 89.094613][ T5819] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.094633][ T5819] RIP: 0033:0x7f656ff9d897 [ 89.094681][ T5819] Code: a2 c7 05 5c ee 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 89.094698][ T5819] RSP: 002b:00007ffe42a188c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 89.094720][ T5819] RAX: 0000000000000000 RBX: 00007f6570031ef0 RCX: 00007f656ff9d897 [ 89.094734][ T5819] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe42a18980 [ 89.094750][ T5819] RBP: 00007ffe42a18980 R08: 00007ffe42a19980 R09: 00000000ffffffff [ 89.094764][ T5819] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe42a19a10 [ 89.094777][ T5819] R13: 00007f6570031ef0 R14: 0000000000015b9e R15: 00007ffe42a19a50 [ 89.094812][ T5819] [ 89.166112][ T5819] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 89.714802][ T6043] loop3: detected capacity change from 0 to 40427 [ 89.738113][ T6043] ======================================================= [ 89.738113][ T6043] WARNING: The mand mount option has been deprecated and [ 89.738113][ T6043] and is ignored by this kernel. Remove the mand [ 89.738113][ T6043] option from the mount to silence this warning. [ 89.738113][ T6043] ======================================================= [ 89.825334][ T6043] F2FS-fs (loop3): Small segment_count (9 < 1 * 24) [ 89.846293][ T6043] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 90.038075][ T6043] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 90.101304][ T6043] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 90.128421][ T6043] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 90.219444][ T30] audit: type=1800 audit(1771952047.173:3): pid=6043 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.45" name="file1" dev="loop3" ino=10 res=0 errno=0 [ 90.256960][ T6041] loop4: detected capacity change from 0 to 32768 [ 90.291324][ T6062] hub 8-0:1.0: USB hub found [ 90.310193][ T5820] syz-executor: attempt to access beyond end of device [ 90.310193][ T5820] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 90.346903][ T6062] hub 8-0:1.0: 1 port detected [ 90.388822][ T6041] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 90.426486][ T5820] CPU: 0 UID: 0 PID: 5820 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 90.426513][ T5820] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 90.426542][ T5820] Call Trace: [ 90.426549][ T5820] [ 90.426558][ T5820] dump_stack_lvl+0xe8/0x150 [ 90.426594][ T5820] f2fs_handle_critical_error+0x37c/0x540 [ 90.426625][ T5820] f2fs_write_end_io+0xcdb/0xff0 [ 90.426671][ T5820] __submit_merged_bio+0x256/0x700 [ 90.426702][ T5820] __submit_merged_write_cond+0x3c9/0x4e0 [ 90.426734][ T5820] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 90.426781][ T5820] f2fs_write_data_pages+0x2975/0x35e0 [ 90.426843][ T5820] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 90.426893][ T5820] ? css_rstat_updated+0x23a/0x530 [ 90.426937][ T5820] ? rcu_is_watching+0x15/0xb0 [ 90.426965][ T5820] ? mod_memcg_lruvec_state+0x1b8/0x360 [ 90.427003][ T5820] ? lru_gen_update_size+0x7c9/0xd10 [ 90.427044][ T5820] ? __lock_acquire+0x6b5/0x2cf0 [ 90.427090][ T5820] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 90.427116][ T5820] do_writepages+0x32e/0x550 [ 90.427153][ T5820] ? do_raw_spin_unlock+0xf5/0x210 [ 90.427177][ T5820] filemap_fdatawrite+0x1e9/0x2f0 [ 90.427209][ T5820] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 90.427278][ T5820] ? do_raw_spin_unlock+0xf5/0x210 [ 90.427303][ T5820] f2fs_sync_dirty_inodes+0x30e/0x860 [ 90.427343][ T5820] f2fs_write_checkpoint+0x9df/0x26a0 [ 90.427400][ T5820] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 90.427477][ T5820] kill_f2fs_super+0x314/0x720 [ 90.427509][ T5820] ? __pfx_kill_f2fs_super+0x10/0x10 [ 90.427546][ T5820] ? lockdep_hardirqs_on+0x7a/0x110 [ 90.427585][ T5820] deactivate_locked_super+0xbc/0x130 [ 90.427617][ T5820] cleanup_mnt+0x437/0x4d0 [ 90.427637][ T5820] ? _raw_spin_unlock_irq+0x23/0x50 [ 90.427664][ T5820] task_work_run+0x1d9/0x270 [ 90.427687][ T5820] ? __pfx_task_work_run+0x10/0x10 [ 90.427717][ T5820] exit_to_user_mode_loop+0xed/0x480 [ 90.427740][ T5820] ? rcu_is_watching+0x15/0xb0 [ 90.427770][ T5820] do_syscall_64+0x32d/0xf80 [ 90.427795][ T5820] ? trace_irq_disable+0x3b/0x150 [ 90.427823][ T5820] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.427842][ T5820] ? clear_bhb_loop+0x40/0x90 [ 90.427866][ T5820] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.427885][ T5820] RIP: 0033:0x7f91c4f9d897 [ 90.427902][ T5820] Code: a2 c7 05 5c ee 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 90.427918][ T5820] RSP: 002b:00007ffca1a6ef88 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 90.427938][ T5820] RAX: 0000000000000000 RBX: 00007f91c5031ef0 RCX: 00007f91c4f9d897 [ 90.427951][ T5820] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffca1a6f040 [ 90.427963][ T5820] RBP: 00007ffca1a6f040 R08: 00007ffca1a70040 R09: 00000000ffffffff [ 90.427981][ T5820] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffca1a700d0 [ 90.427993][ T5820] R13: 00007f91c5031ef0 R14: 000000000001605c R15: 00007ffca1a70110 [ 90.428023][ T5820] [ 90.428031][ T5820] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 90.917404][ T6041] XFS (loop4): Ending clean mount [ 90.987063][ T6041] XFS (loop4): Quotacheck needed: Please wait. [ 91.068301][ T6041] XFS (loop4): Quotacheck: Done. [ 91.114414][ T6061] loop0: detected capacity change from 0 to 40427 [ 91.133493][ T6061] F2FS-fs (loop0): invalid crc value [ 91.228666][ T5818] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 91.464952][ T6061] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 91.495212][ T6061] F2FS-fs (loop0): Start checkpoint disabled! [ 91.552357][ T6061] F2FS-fs (loop0): f2fs_disable_checkpoint() finish, err:0 [ 91.565653][ T6061] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 91.683154][ T6071] loop2: detected capacity change from 0 to 40427 [ 91.699693][ T36] kworker/u8:2: attempt to access beyond end of device [ 91.699693][ T36] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 91.749391][ T6071] F2FS-fs (loop2): invalid crc value [ 91.751517][ T36] CPU: 0 UID: 0 PID: 36 Comm: kworker/u8:2 Not tainted syzkaller #0 PREEMPT(full) [ 91.751571][ T36] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 91.751607][ T36] Workqueue: writeback wb_workfn (flush-7:0) [ 91.751694][ T36] Call Trace: [ 91.751713][ T36] [ 91.751732][ T36] dump_stack_lvl+0xe8/0x150 [ 91.751819][ T36] f2fs_handle_critical_error+0x37c/0x540 [ 91.751903][ T36] f2fs_write_end_io+0xcdb/0xff0 [ 91.752020][ T36] __submit_merged_bio+0x256/0x700 [ 91.752103][ T36] __submit_merged_write_cond+0x3c9/0x4e0 [ 91.752189][ T36] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 91.752321][ T36] f2fs_write_data_pages+0x2975/0x35e0 [ 91.752530][ T36] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 91.752716][ T36] ? __lock_acquire+0x6b5/0x2cf0 [ 91.752794][ T36] ? __lock_acquire+0x6b5/0x2cf0 [ 91.752908][ T36] ? kvm_sched_clock_read+0x11/0x20 [ 91.752971][ T36] ? sched_clock+0x3f/0x60 [ 91.753021][ T36] ? sched_clock_cpu+0x74/0x440 [ 91.753145][ T36] ? lockdep_hardirqs_on+0x7a/0x110 [ 91.753218][ T36] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 91.753280][ T36] do_writepages+0x32e/0x550 [ 91.753374][ T36] ? reacquire_held_locks+0x104/0x190 [ 91.753448][ T36] ? writeback_sb_inodes+0x477/0x1a20 [ 91.753534][ T36] __writeback_single_inode+0x133/0x11a0 [ 91.753606][ T36] ? do_raw_spin_unlock+0xf5/0x210 [ 91.753672][ T36] writeback_sb_inodes+0x992/0x1a20 [ 91.753857][ T36] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 91.753922][ T36] ? do_raw_spin_lock+0x12b/0x2f0 [ 91.754087][ T36] ? rcu_is_watching+0x15/0xb0 [ 91.754188][ T36] wb_writeback+0x456/0xb70 [ 91.754265][ T36] ? queue_io+0x2c1/0x4a0 [ 91.754358][ T36] ? __pfx_wb_writeback+0x10/0x10 [ 91.754454][ T36] ? do_raw_spin_lock+0x12b/0x2f0 [ 91.754570][ T36] wb_workfn+0x414/0xf50 [ 91.754634][ T36] ? look_up_lock_class+0x57/0x110 [ 91.754733][ T36] ? __pfx_wb_workfn+0x10/0x10 [ 91.754824][ T36] ? do_raw_spin_lock+0x12b/0x2f0 [ 91.754849][ T36] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 91.754895][ T36] ? process_one_work+0x87c/0x1650 [ 91.754921][ T36] process_one_work+0x949/0x1650 [ 91.755030][ T36] ? __pfx_process_one_work+0x10/0x10 [ 91.755111][ T36] ? do_raw_spin_lock+0x12b/0x2f0 [ 91.755229][ T36] worker_thread+0xb46/0x1140 [ 91.755341][ T36] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 91.755454][ T36] kthread+0x388/0x470 [ 91.755514][ T36] ? __pfx_worker_thread+0x10/0x10 [ 91.755579][ T36] ? __pfx_kthread+0x10/0x10 [ 91.755652][ T36] ret_from_fork+0x51e/0xb90 [ 91.755728][ T36] ? __pfx_ret_from_fork+0x10/0x10 [ 91.755787][ T36] ? __switch_to+0xc7d/0x1450 [ 91.755864][ T36] ? __pfx_kthread+0x10/0x10 [ 91.755919][ T36] ret_from_fork_asm+0x1a/0x30 [ 91.756032][ T36] [ 92.052285][ T36] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 92.367424][ T6071] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 92.395845][ T6071] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 92.482640][ T9] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 92.554447][ T5829] syz-executor: attempt to access beyond end of device [ 92.554447][ T5829] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 92.583136][ T5829] CPU: 1 UID: 0 PID: 5829 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 92.583163][ T5829] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 92.583175][ T5829] Call Trace: [ 92.583182][ T5829] [ 92.583190][ T5829] dump_stack_lvl+0xe8/0x150 [ 92.583224][ T5829] f2fs_handle_critical_error+0x37c/0x540 [ 92.583256][ T5829] f2fs_write_end_io+0xcdb/0xff0 [ 92.583304][ T5829] __submit_merged_bio+0x256/0x700 [ 92.583335][ T5829] __submit_merged_write_cond+0x3c9/0x4e0 [ 92.583369][ T5829] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 92.583420][ T5829] f2fs_write_data_pages+0x2975/0x35e0 [ 92.583488][ T5829] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 92.583532][ T5829] ? css_rstat_updated+0x23a/0x530 [ 92.583584][ T5829] ? rcu_is_watching+0x15/0xb0 [ 92.583612][ T5829] ? mod_memcg_lruvec_state+0x1b8/0x360 [ 92.583645][ T5829] ? __lock_acquire+0x6b5/0x2cf0 [ 92.583689][ T5829] ? __lock_acquire+0x6b5/0x2cf0 [ 92.583720][ T5829] ? do_raw_spin_lock+0x12b/0x2f0 [ 92.583754][ T5829] ? do_raw_spin_unlock+0xf5/0x210 [ 92.583783][ T5829] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 92.583812][ T5829] do_writepages+0x32e/0x550 [ 92.583852][ T5829] ? do_raw_spin_unlock+0xf5/0x210 [ 92.583879][ T5829] filemap_fdatawrite+0x1e9/0x2f0 [ 92.583913][ T5829] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 92.583994][ T5829] ? do_raw_spin_unlock+0xf5/0x210 [ 92.584021][ T5829] f2fs_sync_dirty_inodes+0x30e/0x860 [ 92.584066][ T5829] f2fs_write_checkpoint+0x9df/0x26a0 [ 92.584132][ T5829] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 92.584222][ T5829] kill_f2fs_super+0x314/0x720 [ 92.584257][ T5829] ? __pfx_kill_f2fs_super+0x10/0x10 [ 92.584300][ T5829] ? lockdep_hardirqs_on+0x7a/0x110 [ 92.584343][ T5829] deactivate_locked_super+0xbc/0x130 [ 92.584377][ T5829] cleanup_mnt+0x437/0x4d0 [ 92.584397][ T5829] ? _raw_spin_unlock_irq+0x23/0x50 [ 92.584426][ T5829] task_work_run+0x1d9/0x270 [ 92.584452][ T5829] ? __pfx_task_work_run+0x10/0x10 [ 92.584486][ T5829] exit_to_user_mode_loop+0xed/0x480 [ 92.584508][ T5829] ? rcu_is_watching+0x15/0xb0 [ 92.584542][ T5829] do_syscall_64+0x32d/0xf80 [ 92.584568][ T5829] ? trace_irq_disable+0x3b/0x150 [ 92.584596][ T5829] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.584617][ T5829] ? clear_bhb_loop+0x40/0x90 [ 92.584643][ T5829] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.584662][ T5829] RIP: 0033:0x7f34cfd9d897 [ 92.584681][ T5829] Code: a2 c7 05 5c ee 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 92.584697][ T5829] RSP: 002b:00007ffc0e3ce668 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 92.584717][ T5829] RAX: 0000000000000000 RBX: 00007f34cfe31ef0 RCX: 00007f34cfd9d897 [ 92.584730][ T5829] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc0e3ce720 [ 92.584742][ T5829] RBP: 00007ffc0e3ce720 R08: 00007ffc0e3cf720 R09: 00000000ffffffff [ 92.584756][ T5829] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc0e3cf7b0 [ 92.584774][ T5829] R13: 00007f34cfe31ef0 R14: 0000000000016935 R15: 00007ffc0e3cf7f0 [ 92.584809][ T5829] [ 92.584817][ T5829] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 92.692398][ T9] usb 2-1: not running at top speed; connect to a high speed hub [ 92.924166][ T9] usb 2-1: config 95 has an invalid interface number: 1 but max is 0 [ 92.987094][ T9] usb 2-1: config 95 has no interface number 0 [ 93.011013][ T9] usb 2-1: config 95 interface 1 has no altsetting 0 [ 93.042854][ T9] usb 2-1: New USB device found, idVendor=0763, idProduct=2031, bcdDevice=ad.3f [ 93.051961][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.060052][ T9] usb 2-1: Product: syz [ 93.064447][ T9] usb 2-1: Manufacturer: syz [ 93.070163][ T9] usb 2-1: SerialNumber: syz [ 93.335889][ T6121] netlink: 44 bytes leftover after parsing attributes in process `syz.3.75'. [ 93.378641][ T6121] netlink: 'syz.3.75': attribute type 6 has an invalid length. [ 93.409047][ T6121] netlink: 'syz.3.75': attribute type 5 has an invalid length. [ 93.436811][ T6121] netlink: 'syz.3.75': attribute type 4 has an invalid length. [ 93.644986][ T9] usb 2-1: USB disconnect, device number 2 [ 93.672157][ T55] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 93.750977][ T6133] loop3: detected capacity change from 0 to 512 [ 93.775315][ T6135] loop2: detected capacity change from 0 to 128 [ 93.792938][ T6135] EXT4-fs: Ignoring removed nomblk_io_submit option [ 93.799586][ T6135] EXT4-fs: Ignoring removed nomblk_io_submit option [ 93.812398][ T6135] EXT4-fs: Ignoring removed nobh option [ 93.823188][ T6135] EXT4-fs (loop2): Test dummy encryption mode enabled [ 93.836849][ T6133] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 93.864457][ T55] usb 5-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 128, changing to 11 [ 93.880276][ T6135] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 93.902155][ T55] usb 5-1: config 0 interface 0 has no altsetting 0 [ 93.909097][ T55] usb 5-1: New USB device found, idVendor=056a, idProduct=0094, bcdDevice= 0.00 [ 93.918675][ T55] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.935047][ T6133] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=42c028, mo2=0002] [ 93.949087][ T6135] ext4 filesystem being mounted at /12/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 93.982159][ T6133] EXT4-fs (loop3): orphan cleanup on readonly fs [ 93.988876][ T55] usb 5-1: config 0 descriptor?? [ 93.997978][ T6133] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4222: comm syz.3.79: Allocating blocks 41-42 which overlap fs metadata [ 94.023821][ T6133] loop3: lost filesystem error report for type 5 error -117 [ 94.026035][ T6133] EXT4-fs (loop3): Remounting filesystem read-only [ 94.033734][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 94.033835][ C1] EXT4-fs (loop3): initial error at time 1771952050: ext4_mb_mark_diskspace_used:4222 [ 94.033861][ C1] EXT4-fs (loop3): last error at time 1771952050: ext4_mb_mark_diskspace_used:4222 [ 94.071383][ T6135] fscrypt: AES-256-XTS using implementation "xts-aes-aesni-avx" [ 94.115996][ T5872] udevd[5872]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:95.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 94.169744][ T6133] Quota error (device loop3): write_blk: dquota write failed [ 94.211168][ T6133] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 94.223838][ T6133] EXT4-fs (loop3): 1 truncate cleaned up [ 94.251357][ T6123] loop0: detected capacity change from 0 to 32768 [ 94.268409][ T6133] EXT4-fs (loop3): pa ffff88803708abc8: logic 1, phys. 41, len 23 [ 94.278438][ T6140] vlan2: entered promiscuous mode [ 94.285775][ T6133] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 94.307732][ T5829] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 94.348493][ T5820] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.358210][ T6140] bridge0: entered promiscuous mode [ 94.370593][ T6140] vlan2: entered allmulticast mode [ 94.388121][ T6123] JBD2: Ignoring recovery information on journal [ 94.443148][ T6140] bridge0: entered allmulticast mode [ 94.526752][ T55] wacom 0003:056A:0094.0001: Using device in hidraw-only mode [ 94.570057][ T6123] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 94.597612][ T55] wacom 0003:056A:0094.0001: hidraw0: USB HID v8.00 Device [HID 056a:0094] on usb-dummy_hcd.4-1/input0 [ 94.738205][ T55] usb 5-1: USB disconnect, device number 2 [ 94.787792][ T6148] fido_id[6148]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 94.876681][ T5819] ocfs2: Unmounting device (7,0) on (node local) [ 95.566571][ T6180] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 95.749787][ T6186] loop3: detected capacity change from 0 to 512 [ 95.828109][ T6186] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 95.886426][ T6167] loop1: detected capacity change from 0 to 32768 [ 95.920255][ T6186] ext4 filesystem being mounted at /23/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 95.961815][ T6167] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 96.018184][ T6186] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.100: bg 0: block 217: padding at end of block bitmap is not set [ 96.054162][ T6186] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 96.094141][ T6167] XFS (loop1): Ending clean mount [ 96.154004][ T5820] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.260695][ T5827] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 96.737412][ T6229] loop0: detected capacity change from 0 to 64 [ 97.082215][ T55] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 97.262197][ T55] usb 2-1: Using ep0 maxpacket: 16 [ 97.279529][ T55] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 97.313655][ T55] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 97.340048][ T55] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 97.361795][ T55] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 97.419240][ T55] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 97.464632][ T55] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 97.505204][ T55] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 97.531177][ T55] usb 2-1: Manufacturer: syz [ 97.554402][ T6258] process 'syz.3.129' launched '/dev/fd/3' with NULL argv: empty string added [ 97.568216][ T55] usb 2-1: config 0 descriptor?? [ 97.642742][ T6267] loop0: detected capacity change from 0 to 64 [ 97.956937][ T55] rc_core: IR keymap rc-hauppauge not found [ 97.968783][ T55] Registered IR keymap rc-empty [ 97.981054][ T55] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 98.034795][ T55] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 98.064973][ T55] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 98.132049][ T55] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input5 [ 98.166711][ T55] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 98.192307][ T55] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 98.240173][ T55] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 98.281711][ T55] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 98.332196][ T5908] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 98.342944][ T55] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 98.362252][ T55] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 98.382210][ T55] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 98.412363][ T55] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 98.442294][ T55] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 98.462218][ T55] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 98.487867][ T6298] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (das16m1) [ 98.498172][ T6299] ieee802154 phy0 wpan0: encryption failed: -22 [ 98.505939][ T55] mceusb 2-1:0.0: Registered with mce emulator interface version 1 [ 98.530985][ T55] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 98.543307][ T5908] usb 3-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 98.552695][ T5908] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.572372][ T5908] usb 3-1: Product: syz [ 98.579810][ T55] usb 2-1: USB disconnect, device number 3 [ 98.588132][ T5908] usb 3-1: Manufacturer: syz [ 98.593564][ T5908] usb 3-1: SerialNumber: syz [ 98.645270][ T5908] usb 3-1: config 0 descriptor?? [ 98.698115][ T5908] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 98.740498][ T5908] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 98.784043][ T5908] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 98.802637][ T5908] usb 3-1: media controller created [ 98.852302][ T5908] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 99.043050][ T5908] DVB: Unable to find symbol mt352_attach() [ 99.192427][ T5908] DVB: Unable to find symbol nxt6000_attach() [ 99.198572][ T5908] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 99.257841][ T5908] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input6 [ 99.288180][ T6322] Zero length message leads to an empty skb [ 99.296791][ T5908] dvb-usb: schedule remote query interval to 1000 msecs. [ 99.313144][ T5908] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 99.332484][ T5908] dvb-usb: bulk message failed: -22 (7/0) [ 99.342207][ T5908] dvb-usb: bulk message failed: -22 (7/0) [ 99.367060][ T5908] usb 3-1: USB disconnect, device number 2 [ 99.382657][ T5833] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 99.632378][ T5833] usb 1-1: Using ep0 maxpacket: 32 [ 99.641461][ T5833] usb 1-1: New USB device found, idVendor=2040, idProduct=d900, bcdDevice=a9.2c [ 99.661482][ T5833] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.662001][ T6327] loop4: detected capacity change from 0 to 512 [ 99.688901][ T5833] usb 1-1: Product: syz [ 99.711028][ T5833] usb 1-1: Manufacturer: syz [ 99.719639][ T5833] usb 1-1: SerialNumber: syz [ 99.748941][ T6327] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 99.799654][ T5908] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 99.802386][ T5833] usb 1-1: config 0 descriptor?? [ 99.875438][ T6337] netlink: 252 bytes leftover after parsing attributes in process `syz.2.166'. [ 99.904927][ T5833] dvb-usb: found a 'Hauppauge MAX S2 or WinTV NOVA HD USB2.0' in warm state. [ 99.938841][ T5833] dw2102: su3000_power_ctrl: 1, initialized 0 [ 99.953926][ T5833] dvb-usb: bulk message failed: -22 (2/0) [ 99.978959][ T5818] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.060646][ T5833] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 100.112737][ T5833] dvbdev: DVB: registering new adapter (Hauppauge MAX S2 or WinTV NOVA HD USB2.0) [ 100.133602][ T6316] dvb-usb: bulk message failed: -22 (3/0) [ 100.139570][ T6316] dw2102: i2c transfer failed. [ 100.152617][ T5833] usb 1-1: media controller created [ 100.169833][ T6316] dvb-usb: bulk message failed: -22 (4/0) [ 100.195056][ T6316] dw2102: i2c transfer failed. [ 100.221489][ T5833] dvb-usb: bulk message failed: -22 (6/0) [ 100.235812][ T5833] dw2102: i2c transfer failed. [ 100.241484][ T5833] dvb-usb: bulk message failed: -22 (6/0) [ 100.248678][ T5833] dw2102: i2c transfer failed. [ 100.256901][ T5833] dvb-usb: bulk message failed: -22 (6/0) [ 100.275293][ T5833] dw2102: i2c transfer failed. [ 100.291573][ T5833] dvb-usb: bulk message failed: -22 (6/0) [ 100.301272][ T5833] dw2102: i2c transfer failed. [ 100.341139][ T5833] dvb-usb: bulk message failed: -22 (6/0) [ 100.360257][ T5833] dw2102: i2c transfer failed. [ 100.379123][ T5833] dvb-usb: bulk message failed: -22 (6/0) [ 100.399404][ T5833] dw2102: i2c transfer failed. [ 100.409740][ T5833] dvb-usb: MAC address: 02:02:02:02:02:02 [ 100.457432][ T5833] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 100.551172][ T5833] dvb-usb: bulk message failed: -22 (3/0) [ 100.565208][ T5833] dw2102: command 0x0e transfer failed. [ 100.570958][ T5833] dvb-usb: bulk message failed: -22 (3/0) [ 100.598093][ T5833] dw2102: command 0x0e transfer failed. [ 100.711978][ T6363] loop1: detected capacity change from 0 to 164 [ 100.733290][ T6362] binder: 6360:6362 unknown command 1847616617 [ 100.741271][ T6362] binder: 6360:6362 ioctl c0306201 200000000080 returned -22 [ 100.783636][ T6363] ISOFS: unable to read i-node block [ 100.789183][ T6363] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 100.799265][ T6365] netlink: 8 bytes leftover after parsing attributes in process `syz.3.180'. [ 100.920225][ T5833] dvb-usb: bulk message failed: -22 (3/0) [ 100.942143][ T5833] dw2102: command 0x0e transfer failed. [ 100.947781][ T5833] dvb-usb: bulk message failed: -22 (3/0) [ 101.000959][ T5833] dw2102: command 0x0e transfer failed. [ 101.012289][ T6371] loop0: detected capacity change from 0 to 1024 [ 101.030013][ T5833] dvb-usb: bulk message failed: -22 (1/0) [ 101.049255][ T5833] dw2102: command 0x51 transfer failed. [ 101.232487][ T5879] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 101.240064][ T5833] DVB: Unable to find symbol ds3000_attach() [ 101.252249][ T5833] dvb-usb: no frontend was attached by 'Hauppauge MAX S2 or WinTV NOVA HD USB2.0' [ 101.294908][ T13] hfsplus: b-tree write err: -5, ino 25 [ 101.300991][ T13] hfsplus: b-tree write err: -5, ino 4 [ 101.342771][ T13] hfsplus: b-tree write err: -5, ino 2 [ 101.443098][ T5879] usb 3-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 101.458021][ T5879] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.462231][ T5833] rc_core: IR keymap rc-su3000 not found [ 101.489562][ T5833] Registered IR keymap rc-empty [ 101.503757][ T5879] usb 3-1: Product: syz [ 101.508953][ T5879] usb 3-1: Manufacturer: syz [ 101.514714][ T5833] rc rc0: Hauppauge MAX S2 or WinTV NOVA HD USB2.0 as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0 [ 101.525563][ T5879] usb 3-1: SerialNumber: syz [ 101.545761][ T5879] usb 3-1: config 0 descriptor?? [ 101.573092][ T5879] gspca_main: sq930x-2.14.0 probing 2770:930c [ 101.605636][ T5833] input: Hauppauge MAX S2 or WinTV NOVA HD USB2.0 as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0/input7 [ 101.647746][ T5833] dvb-usb: schedule remote query interval to 150 msecs. [ 101.682397][ T5833] dw2102: su3000_power_ctrl: 0, initialized 1 [ 101.688564][ T5833] dvb-usb: Hauppauge MAX S2 or WinTV NOVA HD USB2.0 successfully initialized and connected. [ 101.747991][ T5833] usb 1-1: USB disconnect, device number 2 [ 101.859115][ T5833] dvb-usb: Hauppauge MAX S2 or WinTV NOVA HD USB2. successfully deinitialized and disconnected. [ 101.973527][ T6367] loop4: detected capacity change from 0 to 32768 [ 102.028208][ T6367] [ 102.028208][ T6367] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 102.028208][ T6367] [ 102.063604][ T9] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 102.086558][ T6367] ERROR: (device loop4): dbAlloc: the hint is outside the map [ 102.086558][ T6367] [ 102.187138][ T70] read_mapping_page failed! [ 102.209937][ T70] ERROR: (device loop4): txCommit: [ 102.209937][ T70] [ 102.220748][ T5879] gspca_sq930x: reg_w 0305 fd00 failed -71 [ 102.228390][ T5879] sq930x 3-1:0.0: probe with driver sq930x failed with error -71 [ 102.240733][ T70] jfs_write_inode: jfs_commit_inode failed! [ 102.255166][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 102.259898][ T5879] usb 3-1: USB disconnect, device number 3 [ 102.272725][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 102.287193][ T5818] [ 102.287193][ T5818] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 102.287193][ T5818] [ 102.316257][ T5818] [ 102.316257][ T5818] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 102.316257][ T5818] [ 102.318127][ T9] usb 2-1: New USB device found, idVendor=050d, idProduct=3201, bcdDevice= 0.00 [ 102.369891][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.391903][ T6398] loop3: detected capacity change from 0 to 4096 [ 102.411463][ T9] usb 2-1: config 0 descriptor?? [ 102.452776][ T6387] loop0: detected capacity change from 0 to 32768 [ 102.495709][ T6399] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 102.546705][ T6398] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=12) [ 102.581224][ T6398] Remounting filesystem read-only [ 102.776119][ T6403] netlink: 260 bytes leftover after parsing attributes in process `syz.3.197'. [ 102.868353][ T9] belkin 0003:050D:3201.0002: global environment stack underflow [ 102.899215][ T9] belkin 0003:050D:3201.0002: item 0 4 1 11 parsing failed [ 102.932812][ T9] belkin 0003:050D:3201.0002: parse failed [ 102.938753][ T9] belkin 0003:050D:3201.0002: probe with driver belkin failed with error -22 [ 103.007454][ T6410] loop3: detected capacity change from 0 to 128 [ 103.050560][ T6410] FAT-fs (loop3): Directory bread(block 32) failed [ 103.064509][ T6410] FAT-fs (loop3): Directory bread(block 33) failed [ 103.093196][ T5833] usb 2-1: USB disconnect, device number 4 [ 103.106815][ T6410] FAT-fs (loop3): Directory bread(block 34) failed [ 103.126401][ T6410] FAT-fs (loop3): Directory bread(block 35) failed [ 103.142518][ T6410] FAT-fs (loop3): Directory bread(block 36) failed [ 103.155327][ T6410] FAT-fs (loop3): Directory bread(block 37) failed [ 103.164250][ T6410] FAT-fs (loop3): Directory bread(block 38) failed [ 103.170811][ T6410] FAT-fs (loop3): Directory bread(block 39) failed [ 103.221825][ T6410] FAT-fs (loop3): Directory bread(block 40) failed [ 103.228973][ T6410] FAT-fs (loop3): Directory bread(block 41) failed [ 103.398197][ T6410] FAT-fs (loop3): error, corrupted directory (invalid entries) [ 103.421371][ T6410] FAT-fs (loop3): Filesystem has been set read-only [ 103.770398][ T6427] loop2: detected capacity change from 0 to 4096 [ 103.812613][ T9] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 103.830632][ T6427] ntfs3(loop2): Different NTFS sector size (1024) and media sector size (512). [ 103.911733][ T6435] loop3: detected capacity change from 0 to 256 [ 104.016997][ T9] usb 1-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 104.032935][ T6435] FAT-fs (loop3): Directory bread(block 64) failed [ 104.045143][ T9] usb 1-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 104.064909][ T6435] FAT-fs (loop3): Directory bread(block 65) failed [ 104.082249][ T6435] FAT-fs (loop3): Directory bread(block 66) failed [ 104.087926][ T9] usb 1-1: Product: syz [ 104.109305][ T6435] FAT-fs (loop3): Directory bread(block 67) failed [ 104.119066][ T9] usb 1-1: Manufacturer: syz [ 104.128770][ T9] usb 1-1: SerialNumber: syz [ 104.143695][ T6435] FAT-fs (loop3): Directory bread(block 68) failed [ 104.153036][ T9] usb 1-1: config 0 descriptor?? [ 104.161187][ T6435] FAT-fs (loop3): Directory bread(block 69) failed [ 104.181603][ T9] ch341 1-1:0.0: ch341-uart converter detected [ 104.194737][ T6435] FAT-fs (loop3): Directory bread(block 70) failed [ 104.205689][ T6435] FAT-fs (loop3): Directory bread(block 71) failed [ 104.226502][ T6435] FAT-fs (loop3): Directory bread(block 72) failed [ 104.264709][ T6435] FAT-fs (loop3): Directory bread(block 73) failed [ 104.331501][ T6445] [U] VÔ3¸ÂFÙ¾"SÇÁ/ÉÊ4:ÃXTZ“W¡T‘’LWµ«= [ 104.344258][ T6445] [U] J"—E:ÀÆ" [ 104.714705][ T6457] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (das16m1) [ 104.757120][ T6457] mkiss: ax0: crc mode is auto. [ 104.795059][ T9] usb 1-1: failed to send control message: -71 [ 104.817778][ T9] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 104.844364][ T9] usb 1-1: USB disconnect, device number 3 [ 104.857014][ T9] ch341 1-1:0.0: device disconnected [ 104.985116][ T6463] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.227'. [ 105.066460][ T6461] loop2: detected capacity change from 0 to 4096 [ 105.122684][ T6465] tipc: Started in network mode [ 105.128145][ T6465] tipc: Node identity 84e, cluster identity 4711 [ 105.142807][ T6465] tipc: Node number set to 2126 [ 105.164921][ T6467] netlink: 4 bytes leftover after parsing attributes in process `syz.3.229'. [ 105.190606][ T6461] ntfs3(loop2): failed to convert "0000" to iso8859-13 [ 105.222382][ T6461] ntfs3(loop2): failed to convert name for inode 1e. [ 105.235494][ T6461] ntfs3(loop2): ino=1f, mi_enum_attr [ 105.251090][ T6461] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 105.357644][ T6448] loop1: detected capacity change from 0 to 40427 [ 105.621094][ T6448] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 105.653418][ T6448] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 105.811170][ T5827] syz-executor: attempt to access beyond end of device [ 105.811170][ T5827] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 105.845578][ T5827] CPU: 0 UID: 0 PID: 5827 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 105.845606][ T5827] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 105.845618][ T5827] Call Trace: [ 105.845625][ T5827] [ 105.845634][ T5827] dump_stack_lvl+0xe8/0x150 [ 105.845668][ T5827] f2fs_handle_critical_error+0x37c/0x540 [ 105.845698][ T5827] f2fs_write_end_io+0xcdb/0xff0 [ 105.845746][ T5827] __submit_merged_bio+0x256/0x700 [ 105.845777][ T5827] __submit_merged_write_cond+0x3c9/0x4e0 [ 105.845810][ T5827] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 105.845860][ T5827] f2fs_write_data_pages+0x2975/0x35e0 [ 105.845927][ T5827] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 105.845970][ T5827] ? css_rstat_updated+0x23a/0x530 [ 105.846021][ T5827] ? rcu_is_watching+0x15/0xb0 [ 105.846067][ T5827] ? mod_memcg_lruvec_state+0x1b8/0x360 [ 105.846101][ T5827] ? __lock_acquire+0x6b5/0x2cf0 [ 105.846148][ T5827] ? __lock_acquire+0x6b5/0x2cf0 [ 105.846181][ T5827] ? do_raw_spin_lock+0x12b/0x2f0 [ 105.846217][ T5827] ? do_raw_spin_unlock+0xf5/0x210 [ 105.846240][ T5827] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 105.846269][ T5827] do_writepages+0x32e/0x550 [ 105.846312][ T5827] ? do_raw_spin_unlock+0xf5/0x210 [ 105.846340][ T5827] filemap_fdatawrite+0x1e9/0x2f0 [ 105.846375][ T5827] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 105.846467][ T5827] ? do_raw_spin_unlock+0xf5/0x210 [ 105.846495][ T5827] f2fs_sync_dirty_inodes+0x30e/0x860 [ 105.846543][ T5827] f2fs_write_checkpoint+0x9df/0x26a0 [ 105.846612][ T5827] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 105.846708][ T5827] kill_f2fs_super+0x314/0x720 [ 105.846744][ T5827] ? __pfx_kill_f2fs_super+0x10/0x10 [ 105.846789][ T5827] ? lockdep_hardirqs_on+0x7a/0x110 [ 105.846835][ T5827] deactivate_locked_super+0xbc/0x130 [ 105.846870][ T5827] cleanup_mnt+0x437/0x4d0 [ 105.846892][ T5827] ? _raw_spin_unlock_irq+0x23/0x50 [ 105.846922][ T5827] task_work_run+0x1d9/0x270 [ 105.846950][ T5827] ? __pfx_task_work_run+0x10/0x10 [ 105.846986][ T5827] exit_to_user_mode_loop+0xed/0x480 [ 105.847010][ T5827] ? rcu_is_watching+0x15/0xb0 [ 105.847044][ T5827] do_syscall_64+0x32d/0xf80 [ 105.847071][ T5827] ? trace_irq_disable+0x3b/0x150 [ 105.847101][ T5827] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.847122][ T5827] ? clear_bhb_loop+0x40/0x90 [ 105.847149][ T5827] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.847170][ T5827] RIP: 0033:0x7fbb8d19d897 [ 105.847190][ T5827] Code: a2 c7 05 5c ee 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 105.847207][ T5827] RSP: 002b:00007fffe4cd0908 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 105.847229][ T5827] RAX: 0000000000000000 RBX: 00007fbb8d231ef0 RCX: 00007fbb8d19d897 [ 105.847243][ T5827] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fffe4cd09c0 [ 105.847255][ T5827] RBP: 00007fffe4cd09c0 R08: 00007fffe4cd19c0 R09: 00000000ffffffff [ 105.847269][ T5827] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fffe4cd1a50 [ 105.847282][ T5827] R13: 00007fbb8d231ef0 R14: 0000000000019d02 R15: 00007fffe4cd1a90 [ 105.847319][ T5827] [ 105.847327][ T5827] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 106.291705][ T6495] syz_tun: entered allmulticast mode [ 106.685395][ T6480] loop4: detected capacity change from 0 to 32768 [ 106.785701][ T6480] [ 106.785701][ T6480] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 106.785701][ T6480] [ 106.798270][ T6506] ubi31: attaching mtd0 [ 106.825657][ T6506] ubi31: scanning is finished [ 106.830502][ T6506] ubi31: empty MTD device detected [ 106.858859][ T6480] read_mapping_page failed! [ 106.872135][ T6480] ERROR: (device loop4): txCommit: [ 106.872135][ T6480] [ 106.958923][ T5818] [ 106.958923][ T5818] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 106.958923][ T5818] [ 107.002201][ T5818] [ 107.002201][ T5818] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 107.002201][ T5818] [ 107.110656][ T6494] loop0: detected capacity change from 0 to 32768 [ 107.146045][ T6506] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 107.153902][ T6506] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 107.173093][ T6506] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 107.212009][ T6506] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 107.254307][ T6506] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 107.261236][ T6506] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 107.332776][ T6506] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 2278717497 [ 107.386331][ T6506] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 107.442391][ T6515] ubi31: background thread "ubi_bgt31d" started, PID 6515 [ 107.664995][ T6529] MTD: Couldn't look up 'mountinfo': -2 [ 107.911181][ T6535] [U] VÔ3¸ÂFÙ¾"SÇÁ/ÉÊ4:ÃXTZ“W¡T‘’LWµ«= [ 107.948433][ T6535] [U] J"—E:ÀÆ" [ 107.972157][ T6535] [U] [ 108.450267][ T6562] loop2: detected capacity change from 0 to 512 [ 108.460264][ T6563] genirq: Flags mismatch irq 10. 00200000 (pcl812) vs. 00200080 (virtio2) [ 108.475444][ T6562] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 108.510922][ T6560] loop1: detected capacity change from 0 to 8 [ 108.529859][ T6562] EXT4-fs (loop2): orphan cleanup on readonly fs [ 108.559964][ T6560] SQUASHFS error: zlib decompression failed, data probably corrupt [ 108.577029][ T6562] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 108.592265][ T6560] SQUASHFS error: Failed to read block 0x9b: -5 [ 108.598612][ T6560] SQUASHFS error: Unable to read metadata cache entry [99] [ 108.621096][ T6562] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 108.685551][ T6560] SQUASHFS error: Unable to read inode 0x127 [ 108.703654][ T6568] netlink: 28 bytes leftover after parsing attributes in process `syz.4.274'. [ 108.722726][ T6562] EXT4-fs (loop2): 1 truncate cleaned up [ 108.730476][ T6562] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 108.784449][ T6569] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 4, id = 0 [ 108.892005][ T6573] loop3: detected capacity change from 0 to 128 [ 108.919597][ T5829] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.947261][ T6573] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 108.966514][ T6573] ext4 filesystem being mounted at /72/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 109.014055][ T6573] EXT4-fs warning (device loop3): ext4_dirblock_csum_verify:375: inode #2: comm syz.3.275: No space for directory leaf checksum. Please run e2fsck -D. [ 109.032411][ T6573] EXT4-fs error (device loop3): htree_dirblock_to_tree:1051: inode #2: comm syz.3.275: Directory block failed checksum [ 109.130354][ T6577] loop4: detected capacity change from 0 to 4096 [ 109.162246][ T6578] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 109.218007][ T5820] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 109.507651][ T6587] loop1: detected capacity change from 0 to 256 [ 109.567021][ T6587] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001e4a3, chksum : 0x009ea0b8, utbl_chksum : 0x7319d30d) [ 109.697199][ T6559] loop0: detected capacity change from 0 to 32768 [ 109.768506][ T6559] ERROR: (device loop0): jfs_readdir: JFS:Dtree error: ino = 2, bn=0, index = 1 [ 109.768506][ T6559] [ 109.806488][ T6596] capability: warning: `syz.3.286' uses 32-bit capabilities (legacy support in use) [ 109.835720][ T6559] ERROR: (device loop0): remounting filesystem as read-only [ 109.894837][ T6598] loop2: detected capacity change from 0 to 1024 [ 109.954920][ T6598] hfsplus: b-tree write err: -5, ino 2 [ 110.010147][ T6600] loop1: detected capacity change from 0 to 764 [ 110.097272][ T6600] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 110.109766][ T6602] loop0: detected capacity change from 0 to 128 [ 110.129748][ T70] hfsplus: b-tree write err: -5, ino 25 [ 110.153482][ T70] hfsplus: b-tree write err: -5, ino 4 [ 110.173956][ T70] hfsplus: b-tree write err: -5, ino 2 [ 110.189836][ T70] hfsplus: b-tree write err: -5, ino 26 [ 110.282677][ T6602] FAT-fs (loop0): Directory bread(block 32) failed [ 110.289268][ T6602] FAT-fs (loop0): Directory bread(block 33) failed [ 110.374240][ T6602] FAT-fs (loop0): Directory bread(block 34) failed [ 110.380862][ T6602] FAT-fs (loop0): Directory bread(block 35) failed [ 110.439210][ T6602] FAT-fs (loop0): Directory bread(block 36) failed [ 110.462296][ T6602] FAT-fs (loop0): Directory bread(block 37) failed [ 110.484806][ T6602] FAT-fs (loop0): Directory bread(block 38) failed [ 110.502141][ T6602] FAT-fs (loop0): Directory bread(block 39) failed [ 110.529677][ T6602] FAT-fs (loop0): Directory bread(block 40) failed [ 110.566548][ T6602] FAT-fs (loop0): Directory bread(block 41) failed [ 110.799774][ T6602] FAT-fs (loop0): error, corrupted directory (invalid entries) [ 110.799813][ T6602] FAT-fs (loop0): Filesystem has been set read-only [ 110.856123][ T6594] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 110.974606][ T6594] XFS (loop4): Ending clean mount [ 111.094248][ T6604] XFS (loop3): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 111.169851][ T6637] netlink: 'syz.1.297': attribute type 322 has an invalid length. [ 111.194657][ T5818] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 111.230078][ T6604] XFS (loop3): Ending clean mount [ 111.462585][ T5820] XFS (loop3): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 111.783432][ T10] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 111.958844][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 111.980295][ T10] usb 3-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 112.001449][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.010794][ T6663] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 112.030044][ T10] usb 3-1: Product: syz [ 112.046260][ T10] usb 3-1: Manufacturer: syz [ 112.059874][ T6663] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 112.072274][ T10] usb 3-1: SerialNumber: syz [ 112.082775][ T10] usb 3-1: config 0 descriptor?? [ 112.106008][ T10] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 112.122613][ T10] dvb-usb: bulk message failed: -22 (2/0) [ 112.140530][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 112.185003][ T10] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 112.188517][ T6667] set_capacity_and_notify: 4 callbacks suppressed [ 112.188565][ T6667] loop4: detected capacity change from 0 to 1024 [ 112.231453][ T10] usb 3-1: media controller created [ 112.305950][ T6646] cxusb: i2c wr: len=78 is too big! [ 112.305950][ T6646] [ 112.339767][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 112.351035][ T6669] loop0: detected capacity change from 0 to 512 [ 112.382179][ T6671] loop3: detected capacity change from 0 to 512 [ 112.389700][ T6671] EXT4-fs: inline encryption not supported [ 112.428857][ T1040] hfsplus: b-tree write err: -5, ino 25 [ 112.437783][ T6671] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.456125][ T1040] hfsplus: b-tree write err: -5, ino 4 [ 112.462017][ T6655] loop1: detected capacity change from 0 to 32768 [ 112.469817][ T1040] hfsplus: b-tree write err: -5, ino 2 [ 112.476695][ T6671] ext4 filesystem being mounted at /79/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 112.492687][ T6669] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.569193][ T6655] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 112.579575][ T10] usb 3-1: selecting invalid altsetting 7 [ 112.588420][ T6669] ext4 filesystem being mounted at /43/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 112.611221][ T10] cxusb: set interface failed [ 112.626215][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 112.692004][ T10] DVB: Unable to find symbol lgdt330x_attach() [ 112.698397][ T10] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 112.730634][ T6669] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 112.757618][ T5820] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.785379][ T6655] XFS (loop1): Ending clean mount [ 112.841517][ T6655] XFS (loop1): Quotacheck needed: Please wait. [ 112.920865][ T6655] XFS (loop1): Quotacheck: Done. [ 112.944897][ T5819] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.993966][ T10] rc_core: IR keymap rc-dvico-portable not found [ 113.000424][ T10] Registered IR keymap rc-empty [ 113.018277][ T10] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0 [ 113.091561][ T10] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input8 [ 113.167700][ T10] dvb-usb: schedule remote query interval to 100 msecs. [ 113.180607][ T10] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 113.220052][ T10] usb 3-1: USB disconnect, device number 4 [ 113.275080][ T5827] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 113.412774][ T10] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 113.530702][ T6708] warning: `syz.0.325' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 113.608620][ T6704] loop4: detected capacity change from 0 to 4096 [ 113.650411][ T6704] ntfs3(loop4): Different NTFS sector size (1024) and media sector size (512). [ 113.749518][ T6704] ntfs3(loop4): ino=1a, mi_enum_attr [ 113.761183][ T6704] ntfs3(loop4): Mark volume as dirty due to NTFS errors [ 113.962223][ T5908] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 114.096002][ T6696] loop3: detected capacity change from 0 to 32768 [ 114.125755][ T6723] loop4: detected capacity change from 0 to 512 [ 114.153880][ T6696] BTRFS warning: excessive commit interval 2147483648, use with care [ 114.187687][ T5908] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 0, changing to 4 [ 114.210425][ T6723] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 114.246495][ T5908] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 15380, setting to 1023 [ 114.263445][ T6696] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.316 (6696) [ 114.284160][ T5908] usb 1-1: config 0 interface 0 has no altsetting 0 [ 114.303446][ T6723] EXT4-fs error (device loop4): ext4_readdir:225: inode #12: comm syz.4.329: path /65/file0/file0: directory fails checksum at offset 0 [ 114.324057][ T5908] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 114.340736][ T6729] loop2: detected capacity change from 0 to 512 [ 114.349222][ T5908] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 114.375682][ T6729] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 114.395417][ T5908] usb 1-1: Product: syz [ 114.399718][ T5908] usb 1-1: Manufacturer: syz [ 114.421256][ T6696] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 114.435097][ T5908] usb 1-1: SerialNumber: syz [ 114.448110][ T5908] usb 1-1: config 0 descriptor?? [ 114.466635][ T6729] EXT4-fs (loop2): 1 truncate cleaned up [ 114.479668][ T6696] BTRFS info (device loop3): using crc32c checksum algorithm [ 114.504162][ T5818] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.520030][ T6729] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 114.530547][ T5908] usb 1-1: selecting invalid altsetting 0 [ 114.552236][ T6729] EXT4-fs warning (device loop2): ext4_group_add:1735: No reserved GDT blocks, can't resize [ 114.631213][ T5829] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.712839][ T49] BTRFS warning (device loop3): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 114.764400][ T6712] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled [ 114.809374][ T6749] netlink: 12 bytes leftover after parsing attributes in process `syz.2.336'. [ 114.863349][ T6696] BTRFS error (device loop3): failed to load root extent [ 114.882163][ T6696] BTRFS warning (device loop3): try to load backup roots slot 1 [ 114.903357][ T36] BTRFS warning (device loop3): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 114.936936][ T5908] usb 1-1: USB disconnect, device number 4 [ 114.936956][ T6696] BTRFS warning (device loop3): couldn't read tree root [ 114.960498][ T6696] BTRFS warning (device loop3): try to load backup roots slot 2 [ 114.996763][ T137] BTRFS error (device loop3): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 115.039768][ T6696] BTRFS warning (device loop3): couldn't read tree root [ 115.062434][ T6696] BTRFS warning (device loop3): try to load backup roots slot 3 [ 115.091990][ T6156] udevd[6156]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 115.170996][ T6696] BTRFS info (device loop3): checking UUID tree [ 115.204025][ T6696] BTRFS info (device loop3): enabling ssd optimizations [ 115.231667][ T6696] BTRFS info (device loop3): using spread ssd allocation scheme [ 115.255085][ T6696] BTRFS info (device loop3): turning on sync discard [ 115.261817][ T6696] BTRFS info (device loop3): enabling free space tree [ 115.288052][ T6696] BTRFS info (device loop3): enabling auto defrag [ 115.318342][ T6696] BTRFS info (device loop3): trying to use backup root at mount time [ 115.575375][ T6751] loop4: detected capacity change from 0 to 40427 [ 115.603917][ T6751] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 115.605242][ T5820] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 115.611702][ T6751] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 115.661327][ T6733] loop1: detected capacity change from 0 to 32768 [ 115.694895][ T6751] F2FS-fs (loop4): invalid crc value [ 115.732263][ T6733] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.334 (6733) [ 115.850358][ T6733] BTRFS info (device loop1): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 115.932158][ T6733] BTRFS info (device loop1): using blake2b checksum algorithm [ 116.087438][ T6751] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 116.173204][ T6751] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 116.192528][ T6751] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 116.205424][ T6733] BTRFS info (device loop1 state EC): enabling ssd optimizations [ 116.232225][ T6733] BTRFS info (device loop1 state EC): using spread ssd allocation scheme [ 116.272226][ T6733] BTRFS info (device loop1 state EC): turning off barriers [ 116.322143][ T6733] BTRFS info (device loop1 state EC): enabling free space tree [ 116.329774][ T6733] BTRFS info (device loop1 state EC): enabling auto defrag [ 116.368134][ T6733] BTRFS info (device loop1 state EC): ignoring data csums [ 116.389192][ T30] audit: type=1800 audit(1771952073.343:4): pid=6751 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.335" name="file1" dev="loop4" ino=10 res=0 errno=0 [ 116.392353][ T6733] BTRFS info (device loop1 state EC): force zlib compression, level 3 [ 116.659031][ T5827] BTRFS info (device loop1 state EC): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 117.016173][ T6778] F2FS-fs (loop2): Wrong MAIN_AREA boundary, start(4096) end(12800) block(12288) [ 117.049842][ T6778] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 117.114664][ T6778] F2FS-fs (loop2): Image doesn't support compression [ 117.121417][ T6778] F2FS-fs (loop2): build fault injection rate: 690 [ 117.183423][ T6778] F2FS-fs (loop2): build fault injection type: 0x35f7 [ 117.205719][ T6778] F2FS-fs (loop2): invalid crc value [ 117.473413][ T6778] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 117.486364][ T6825] Illegal XDP return value 4294967274 on prog (id 20) dev N/A, expect packet loss! [ 117.499287][ T6778] F2FS-fs (loop2): Start checkpoint disabled! [ 117.505164][ T6826] netlink: 'syz.4.358': attribute type 1 has an invalid length. [ 117.523468][ T6778] F2FS-fs (loop2): f2fs_disable_checkpoint() finish, err:0 [ 117.540215][ T6778] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 117.548092][ T6778] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 117.657665][ T6829] sp0: Synchronizing with TNC [ 117.662798][ T5833] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 117.685695][ T6828] [U] è` [ 117.827153][ T5833] usb 1-1: Using ep0 maxpacket: 32 [ 117.846677][ T5833] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 117.855859][ T5833] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 117.864793][ T5833] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 117.882686][ T5833] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 117.902143][ T5833] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 117.924074][ T5833] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 117.956186][ T5833] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 117.989706][ T5833] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 118.032485][ T5833] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.053925][ T5833] usb 1-1: config 0 descriptor?? [ 118.335015][ T5908] usb 1-1: USB disconnect, device number 5 [ 118.430833][ T6835] set_capacity_and_notify: 2 callbacks suppressed [ 118.430879][ T6835] loop4: detected capacity change from 0 to 32768 [ 118.464393][ T6835] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 118.547073][ T6835] XFS (loop4): Ending clean mount [ 118.593975][ T9] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 118.602873][ T5833] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 118.620196][ T5818] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 118.772319][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 118.781097][ T5833] usb 3-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 118.792082][ T6853] netlink: 60 bytes leftover after parsing attributes in process `syz.3.367'. [ 118.802887][ T5833] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.815637][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 118.826801][ T5833] usb 3-1: Product: syz [ 118.830990][ T5833] usb 3-1: Manufacturer: syz [ 118.836300][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 118.836617][ T6852] netlink: 60 bytes leftover after parsing attributes in process `syz.3.367'. [ 118.846225][ T5833] usb 3-1: SerialNumber: syz [ 118.850361][ T9] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 118.881179][ T5833] usb 3-1: config 0 descriptor?? [ 118.894114][ T5833] gspca_main: sq930x-2.14.0 probing 2770:930c [ 118.917577][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.956366][ T9] usb 2-1: config 0 descriptor?? [ 119.118761][ T6857] loop0: detected capacity change from 0 to 8192 [ 119.328206][ T10] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 119.377772][ T9] ft260 0003:0403:6030.0003: item fetching failed at offset 0/2 [ 119.403850][ T9] ft260 0003:0403:6030.0003: failed to parse HID [ 119.420759][ T9] ft260 0003:0403:6030.0003: probe with driver ft260 failed with error -22 [ 119.504487][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 119.523744][ T10] usb 4-1: config 2 has an invalid interface number: 88 but max is 0 [ 119.540588][ T10] usb 4-1: config 2 has no interface number 0 [ 119.547125][ T5833] gspca_sq930x: reg_w 0305 fd00 failed -71 [ 119.556404][ T10] usb 4-1: config 2 interface 88 has no altsetting 0 [ 119.568051][ T10] usb 4-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.1e [ 119.587392][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.597826][ T9] usb 2-1: USB disconnect, device number 5 [ 119.612697][ T10] usb 4-1: Product: syz [ 119.623306][ T6861] loop4: detected capacity change from 0 to 32768 [ 119.628296][ T10] usb 4-1: Manufacturer: syz [ 119.646198][ T10] usb 4-1: SerialNumber: syz [ 119.654930][ T6861] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.370 (6861) [ 119.688929][ T6861] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 119.699397][ T6861] BTRFS info (device loop4): using sha256 checksum algorithm [ 119.775310][ T6861] BTRFS info (device loop4): enabling ssd optimizations [ 119.775340][ T6861] BTRFS info (device loop4): turning on async discard [ 119.775358][ T6861] BTRFS info (device loop4): enabling free space tree [ 119.793486][ T5833] gspca_sq930x: Sensor ov9630 not yet treated [ 119.793595][ T5833] sq930x 3-1:0.0: probe with driver sq930x failed with error -22 [ 119.796617][ T5833] usb 3-1: USB disconnect, device number 5 [ 119.977834][ T6886] netlink: 84 bytes leftover after parsing attributes in process `syz.0.375'. [ 120.057867][ T5818] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 120.328283][ T10] asix 4-1:2.88 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 120.365421][ T10] asix 4-1:2.88: probe with driver asix failed with error -71 [ 120.422667][ T10] usb 4-1: USB disconnect, device number 2 [ 120.984568][ T6892] loop0: detected capacity change from 0 to 32768 [ 121.047508][ T6892] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 121.169655][ T30] audit: type=1326 audit(1771952078.123:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6931 comm="syz.3.394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91c4f9c629 code=0x7ffc0000 [ 121.222153][ T30] audit: type=1326 audit(1771952078.153:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6931 comm="syz.3.394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91c4f9c629 code=0x7ffc0000 [ 121.250758][ T6932] loop3: detected capacity change from 0 to 4096 [ 121.268606][ T6932] EXT4-fs: Ignoring removed orlov option [ 121.285432][ T6932] EXT4-fs (loop3): Test dummy encryption mode enabled [ 121.310658][ T30] audit: type=1326 audit(1771952078.153:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6931 comm="syz.3.394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f91c4f9c629 code=0x7ffc0000 [ 121.345698][ T6932] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 121.376507][ T30] audit: type=1326 audit(1771952078.153:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6931 comm="syz.3.394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f91c4f9c392 code=0x7ffc0000 [ 121.402322][ T30] audit: type=1326 audit(1771952078.163:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6931 comm="syz.3.394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f91c4f5cece code=0x7ffc0000 [ 121.430331][ T30] audit: type=1326 audit(1771952078.203:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6931 comm="syz.3.394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f91c4f9c457 code=0x7ffc0000 [ 121.492171][ T30] audit: type=1326 audit(1771952078.203:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6931 comm="syz.3.394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f91c4f5cece code=0x7ffc0000 [ 121.522545][ T6892] XFS (loop0): Ending clean mount [ 121.552615][ T6892] XFS (loop0): Quotacheck needed: Please wait. [ 121.602147][ T30] audit: type=1326 audit(1771952078.203:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6931 comm="syz.3.394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f91c4f9c2bb code=0x7ffc0000 [ 121.625494][ T6892] XFS (loop0): Quotacheck: Done. [ 121.655973][ T5820] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.691147][ T30] audit: type=1326 audit(1771952078.213:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6931 comm="syz.3.394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f91c4f5cece code=0x7ffc0000 [ 121.725755][ T30] audit: type=1326 audit(1771952078.213:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6931 comm="syz.3.394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f91c4f5cece code=0x7ffc0000 [ 121.803960][ T30] audit: type=1326 audit(1771952078.223:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6931 comm="syz.3.394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f91c4f9b507 code=0x7ffc0000 [ 121.849755][ T30] audit: type=1326 audit(1771952078.223:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6931 comm="syz.3.394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f91c4f9d8ca code=0x7ffc0000 [ 121.912360][ T30] audit: type=1326 audit(1771952078.363:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6931 comm="syz.3.394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f91c4f5cece code=0x7ffc0000 [ 121.944553][ T5819] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 121.962386][ T6948] netlink: 8 bytes leftover after parsing attributes in process `syz.3.398'. [ 121.978664][ T30] audit: type=1326 audit(1771952078.363:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6931 comm="syz.3.394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7f91c4f9aad7 code=0x7ffc0000 [ 122.302378][ T5908] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 122.433319][ T5823] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 122.443284][ T5823] Bluetooth: hci2: Injecting HCI hardware error event [ 122.451406][ T51] Bluetooth: hci2: hardware error 0x00 [ 122.474047][ T5908] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 122.483399][ T5908] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.496497][ T5908] usb 2-1: config 0 descriptor?? [ 122.505938][ T5908] cp210x 2-1:0.0: cp210x converter detected [ 122.621775][ T6949] loop4: detected capacity change from 0 to 32768 [ 122.636805][ T6949] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.399 (6949) [ 122.659726][ T6966] loop0: detected capacity change from 0 to 256 [ 122.681489][ T6949] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 122.698983][ T6949] BTRFS info (device loop4): using crc32c checksum algorithm [ 122.729220][ T6966] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 122.843721][ T6949] BTRFS info (device loop4): enabling ssd optimizations [ 122.850863][ T6949] BTRFS info (device loop4): turning on async discard [ 122.899463][ T6983] /dev/loop0: Can't open blockdev [ 122.910815][ T6949] BTRFS info (device loop4): enabling free space tree [ 122.936005][ T5908] usb 2-1: cp210x converter now attached to ttyUSB0 [ 123.153183][ T5879] usb 2-1: USB disconnect, device number 6 [ 123.159341][ T5818] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 123.218498][ T5879] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 123.278192][ T5879] cp210x 2-1:0.0: device disconnected [ 123.542658][ T6994] loop4: detected capacity change from 0 to 256 [ 123.565452][ T6994] exFAT-fs (loop4): failed to test first cluster bit of root dir(5) [ 123.907403][ T7004] loop4: detected capacity change from 0 to 2048 [ 123.978959][ T7004] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 123.991812][ T6989] loop0: detected capacity change from 0 to 32768 [ 124.052206][ T5879] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 124.077316][ T6989] overlayfs: upper fs needs to support d_type. [ 124.092411][ T5908] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 124.114679][ T6989] overlayfs: upper fs does not support tmpfile. [ 124.123934][ T5818] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.137401][ T6989] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 124.175507][ T6990] loop3: detected capacity change from 0 to 40427 [ 124.183682][ T6989] ERROR: (device loop0): dbAlloc: the hint is outside the map [ 124.183682][ T6989] [ 124.204131][ T6990] F2FS-fs (loop3): Invalid log blocks per segment (4278190089) [ 124.211859][ T6990] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 124.238025][ T5879] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 124.239185][ T6989] overlayfs: failed to set uuid (/file0, err=-5); falling back to uuid=null. [ 124.250802][ T5879] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.276559][ T5908] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 124.298676][ T5908] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00 [ 124.312225][ T5879] usb 3-1: Product: syz [ 124.316462][ T5879] usb 3-1: Manufacturer: syz [ 124.327274][ T6990] F2FS-fs (loop3): invalid crc value [ 124.335044][ T6989] ERROR: (device loop0): dbAlloc: the hint is outside the map [ 124.335044][ T6989] [ 124.344967][ T5908] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.350735][ T5908] usb 2-1: config 0 descriptor?? [ 124.360164][ T5879] usb 3-1: SerialNumber: syz [ 124.392927][ T6989] overlayfs: failed to verify upper root origin [ 124.431598][ T5879] r8152-cfgselector 3-1: Unknown version 0x0000 [ 124.438837][ T5879] r8152-cfgselector 3-1: config 0 descriptor?? [ 124.507749][ T12] read_mapping_page failed! [ 124.513818][ T51] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 124.540507][ T12] ERROR: (device loop0): txCommit: [ 124.540507][ T12] [ 124.552897][ T12] jfs_write_inode: jfs_commit_inode failed! [ 124.636089][ T6990] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 124.696171][ T5879] r8152-cfgselector 3-1: Needed 1 retries to read version [ 124.703583][ T6990] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 124.710707][ T6990] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 124.719384][ T7016] loop4: detected capacity change from 0 to 512 [ 124.747003][ T7016] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #15: comm syz.4.422: inode has both inline data and extents flags [ 124.813606][ T7016] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 124.818353][ T7016] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.422: couldn't read orphan inode 15 (err -117) [ 124.827601][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 124.827619][ C1] EXT4-fs (loop4): initial error at time 1771952081: ext4_orphan_get:1391: inode 15 [ 124.827669][ C1] EXT4-fs (loop4): last error at time 1771952081: ext4_orphan_get:1391: inode 15 [ 124.879611][ T5908] konepure 0003:1E7D:2DB4.0004: unknown main item tag 0x0 [ 124.887598][ T7019] F2FS-fs (loop3): Corrupted max_depth of 3: 255 [ 124.909084][ T5879] r8152-cfgselector 3-1: USB disconnect, device number 6 [ 124.936296][ T5908] konepure 0003:1E7D:2DB4.0004: unknown main item tag 0x0 [ 124.947425][ T7019] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 124.947614][ T7016] loop4: lost filesystem error report for type 5 error -117 [ 124.956588][ T5908] konepure 0003:1E7D:2DB4.0004: unknown main item tag 0x0 [ 124.974223][ T5908] konepure 0003:1E7D:2DB4.0004: hidraw0: USB HID v0.00 Device [HID 1e7d:2db4] on usb-dummy_hcd.1-1/input0 [ 125.008864][ T7016] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 125.088052][ T5908] usb 2-1: USB disconnect, device number 7 [ 125.109373][ T7020] fido_id[7020]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 125.158374][ T5820] ------------[ cut here ]------------ [ 125.165640][ T5820] kernel BUG at fs/f2fs/inode.c:977! [ 125.183164][ T5820] Oops: invalid opcode: 0000 [#1] SMP KASAN PTI [ 125.187498][ T5818] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.189469][ T5820] CPU: 0 UID: 0 PID: 5820 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 125.207850][ T5820] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 125.217931][ T5820] RIP: 0010:f2fs_evict_inode+0x1ad8/0x1af0 [ 125.223759][ T5820] Code: 00 00 00 e8 0a d6 80 fd 65 49 ff 47 08 49 bc 00 00 00 00 00 fc ff df e9 ba e7 ff ff e8 61 3f 9c fd 90 0f 0b e8 59 3f 9c fd 90 <0f> 0b e8 51 3f 9c fd 90 0f 0b 90 e9 9a fe ff ff 0f 1f 84 00 00 00 [ 125.243378][ T5820] RSP: 0018:ffffc90003b97780 EFLAGS: 00010293 [ 125.249494][ T5820] RAX: ffffffff84295f17 RBX: ffff88807717d2f8 RCX: ffff888025549e80 [ 125.257472][ T5820] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000000 [ 125.265450][ T5820] RBP: ffffc90003b97930 R08: ffff88807717d78f R09: 1ffff1100ee2faf1 [ 125.273431][ T5820] R10: dffffc0000000000 R11: ffffed100ee2faf2 R12: dffffc0000000000 [ 125.281420][ T5820] R13: 1ffff1100ee2fa67 R14: 0000000000000002 R15: ffff88807717d788 [ 125.289517][ T5820] FS: 00005555684a3500(0000) GS:ffff888125459000(0000) knlGS:0000000000000000 [ 125.298464][ T5820] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 125.305059][ T5820] CR2: 00005555684bea28 CR3: 0000000037e1a000 CR4: 00000000003526f0 [ 125.313049][ T5820] Call Trace: [ 125.316347][ T5820] [ 125.319298][ T5820] ? __pfx_f2fs_evict_inode+0x10/0x10 [ 125.324701][ T5820] ? do_raw_spin_lock+0x12b/0x2f0 [ 125.329750][ T5820] ? do_raw_spin_unlock+0xf5/0x210 [ 125.334882][ T5820] ? __pfx_f2fs_evict_inode+0x10/0x10 [ 125.340263][ T5820] evict+0x61e/0xb10 [ 125.344173][ T5820] ? __pfx_evict+0x10/0x10 [ 125.348609][ T5820] ? do_raw_spin_lock+0x12b/0x2f0 [ 125.353652][ T5820] ? do_raw_spin_unlock+0xf5/0x210 [ 125.358863][ T5820] evict_inodes+0x75a/0x7f0 [ 125.363394][ T5820] ? __pfx_evict_inodes+0x10/0x10 [ 125.368447][ T5820] generic_shutdown_super+0xaa/0x2d0 [ 125.373760][ T5820] kill_block_super+0x44/0x90 [ 125.378454][ T5820] kill_f2fs_super+0x402/0x720 [ 125.383246][ T5820] ? __pfx_kill_f2fs_super+0x10/0x10 [ 125.388554][ T5820] ? lockdep_hardirqs_on+0x7a/0x110 [ 125.393781][ T5820] deactivate_locked_super+0xbc/0x130 [ 125.399182][ T5820] cleanup_mnt+0x437/0x4d0 [ 125.403613][ T5820] ? _raw_spin_unlock_irq+0x23/0x50 [ 125.408828][ T5820] task_work_run+0x1d9/0x270 [ 125.413432][ T5820] ? __pfx_task_work_run+0x10/0x10 [ 125.418560][ T5820] exit_to_user_mode_loop+0xed/0x480 [ 125.423864][ T5820] ? rcu_is_watching+0x15/0xb0 [ 125.428651][ T5820] do_syscall_64+0x32d/0xf80 [ 125.433259][ T5820] ? trace_irq_disable+0x3b/0x150 [ 125.438338][ T5820] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.444416][ T5820] ? clear_bhb_loop+0x40/0x90 [ 125.449131][ T5820] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.455039][ T5820] RIP: 0033:0x7f91c4f9d897 [ 125.459486][ T5820] Code: a2 c7 05 5c ee 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 125.479102][ T5820] RSP: 002b:00007ffca1a6ef88 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 125.487537][ T5820] RAX: 0000000000000000 RBX: 00007f91c5031ef0 RCX: 00007f91c4f9d897 [ 125.495610][ T5820] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffca1a6f040 [ 125.503611][ T5820] RBP: 00007ffca1a6f040 R08: 00007ffca1a70040 R09: 00000000ffffffff [ 125.511595][ T5820] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffca1a700d0 [ 125.519590][ T5820] R13: 00007f91c5031ef0 R14: 000000000001e855 R15: 00007ffca1a70110 [ 125.527581][ T5820] [ 125.530613][ T5820] Modules linked in: [ 125.535846][ T5820] ---[ end trace 0000000000000000 ]--- [ 125.560427][ T5820] RIP: 0010:f2fs_evict_inode+0x1ad8/0x1af0 [ 125.566433][ T5820] Code: 00 00 00 e8 0a d6 80 fd 65 49 ff 47 08 49 bc 00 00 00 00 00 fc ff df e9 ba e7 ff ff e8 61 3f 9c fd 90 0f 0b e8 59 3f 9c fd 90 <0f> 0b e8 51 3f 9c fd 90 0f 0b 90 e9 9a fe ff ff 0f 1f 84 00 00 00 [ 125.588390][ T5820] RSP: 0018:ffffc90003b97780 EFLAGS: 00010293 [ 125.596008][ T5820] RAX: ffffffff84295f17 RBX: ffff88807717d2f8 RCX: ffff888025549e80 [ 125.606353][ T5820] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000000 [ 125.614754][ T5820] RBP: ffffc90003b97930 R08: ffff88807717d78f R09: 1ffff1100ee2faf1 [ 125.624852][ T5820] R10: dffffc0000000000 R11: ffffed100ee2faf2 R12: dffffc0000000000 [ 125.633906][ T5820] R13: 1ffff1100ee2fa67 R14: 0000000000000002 R15: ffff88807717d788 [ 125.642379][ T5820] FS: 00005555684a3500(0000) GS:ffff888125459000(0000) knlGS:0000000000000000 [ 125.651447][ T5820] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 125.660961][ T5820] CR2: 00007f65701e82f8 CR3: 0000000037e1a000 CR4: 00000000003526f0 [ 125.669969][ T5820] Kernel panic - not syncing: Fatal exception [ 125.676652][ T5820] Kernel Offset: disabled [ 125.680994][ T5820] Rebooting in 86400 seconds..