last executing test programs: 4.975964267s ago: executing program 0 (id=88): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x8031, 0xffffffffffffffff, 0x0) migrate_pages(0x0, 0x5, &(0x7f0000000000)=0x9, &(0x7f0000000080)=0x272) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 3.392818362s ago: executing program 2 (id=108): r0 = fsopen(&(0x7f0000000000)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000040)='source', &(0x7f0000001bc0)='//\xf2/\x06\b/\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6h\xd1\x1d\xac\xaa\xfb\xc7Y\xcd\xc5n\xeb\xab\xf70\x99\xef\x8b0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000740)='=q', 0x2}], 0x1}, 0x1) recvmsg(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000001c0)=""/180, 0xb4}], 0x1}, 0x12042) 2.963626526s ago: executing program 0 (id=114): r0 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x7fffefff) 2.856480644s ago: executing program 2 (id=115): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fd\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) fstat(r0, 0x0) 2.746198053s ago: executing program 0 (id=118): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x8031, 0xffffffffffffffff, 0x0) migrate_pages(0x0, 0x5, &(0x7f0000000000)=0x9, &(0x7f0000000080)=0x272) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 1.949180536s ago: executing program 2 (id=126): syz_usb_connect(0x0, 0x36, &(0x7f0000000680)=ANY=[@ANYBLOB="1201000014da2108ab1204000000000000010902240001b30000040904410c17ff5d810009050f1f050440000009058303"], 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/devices\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f00000028c0)={0x2020}, 0x2020) 1.599177814s ago: executing program 1 (id=129): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000440)={0x2, 0xfffffffc, 0x6}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x20, 0x12, 0xa01, 0x0, 0x0, {0x80}}, 0x26}}, 0x0) 1.581939955s ago: executing program 0 (id=130): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000001080)={{0x12, 0x1, 0x0, 0x78, 0x82, 0xb7, 0x40, 0x2c42, 0x1709, 0xcab7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xbf, 0x60, 0xe7}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000440)={0x40, 0x18, 0x1, "8e"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) 1.421627528s ago: executing program 1 (id=132): sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4b, 0x9, 0x8, 0x0, 0x400003}, 0x0) pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff}, 0x80) read(r0, 0x0, 0x0) 1.290652308s ago: executing program 1 (id=134): keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new default user:syz 000040'], 0x2a, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), 0x0, 0x0, 0xfffffffffffffffe) 1.002245831s ago: executing program 1 (id=135): r0 = socket$inet6(0xa, 0x805, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)) getsockopt$bt_hci(r0, 0x84, 0x0, &(0x7f0000000080)=""/4076, &(0x7f0000000040)=0xfec) 920.894398ms ago: executing program 3 (id=136): r0 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r0, &(0x7f00000004c0)={&(0x7f0000000140)={0x2, 0x0, @local}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000180)="ba", 0x1}], 0x1}, 0x4008804) sendmsg$inet(r0, &(0x7f0000000a00)={&(0x7f0000000040)={0x2, 0x0, @dev}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000000)="c109000000000000001d1e020e71", 0xe}, {&(0x7f0000000500)="392696cbe26ae95948441e8fef48b36bd7", 0x11}], 0x2}, 0x20040000) 798.396917ms ago: executing program 1 (id=137): r0 = memfd_create(&(0x7f0000000580)='\xff\x00l\x1e\xa0,\xc1\x8d\\Rxt\'\xb6\xbf\xc8*\n\xaf\x1b\xec\xfd\xbbY\x99\xb3\x06c\xd6\xf6\xb0\xcd=\xf3\x03`\x93\xd9\xb5\x00\x00$\x00\xeaw\xd9\x10\x0f\x1d\x888\x8cS\x12?R\x99\xda7\xce)\x8f\xcc\x87\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xd32J\xd7\x9f\xea:=\xcc\x17(|L\xda\xc3\x1ca\xe8s\xb6\xebw\xc7\xab\x00\xd7pB\xd2\xa1\xcf\xae\x1f2\x9f\x98\xa80\r\x85\xb4\x86\xbc\xd0\xea\xbf\xb1Z\xb7e$\xcf<\ra\x9b\xa5\xdc\v\x1e\xfd\xc7\x91\xf22\xcf\x96\x99\xc1\xbb\xa1j\xe5\xa8\x7f\a\xa9\xa7G\xad\xa3\x8b\xf1\xdb\\]R\x8cf\xac1\xd7V\xaf\xb5\x8e\x10\x95\x9f=2\xd0-\xe1K:\xc3b\x89\x15OS\xa5\x98Ky\x12\xe7Qt#\xeb\x99\a\x10\x1c\xb3N\x85\xeb\x80\x05\x82_\x15\xdc\xbc\xf93\xdd\xf5g\x98\xd4\x8az\xe4`\xa5\x00\x00\x00\x00\xcd\x13\xfc+\xac\xe5\x8bI\f\xd6\x89\xc7HY\xcf\x00O\x88\xe6\x8b\x8bF/\x82u\xffCnG\x02\x82\xfc\xe9Od\x92\x06\xdeg@y\xa6=4\xb1}\xa8Yr\xad9\xb9b)\xec}\x87=\x91:IV\xab\xdf\xa2\xba+6D\x1fuf\xdeJYw$L\xa1\x83NH\xe3\xf2\x91\x8cW\xb7\b\x04\x12\x8b\x8bV\x19\xf1\r\xcb\x94\xa3\xf4\xe4\x97$\x99c\rG\xd7#\xe2\xfd\x80\xadR\x83\xdc\xb8d\x15|\xac\xb8g$\x0f@\xca3\x9f\xb1\xea\xc6vQ\x1b\xdb#\xa3\"\x9f\x9e\xd8\xba\x13d\x9bx\x9a\xbf\xee\xf2kQ\xe0\xc4/~7\xcd\xd1\x06\xe5\x17\x9b\bW|\xbc\x86D\x05\xaf<\xdfy,I2f\xa7G\xe3Qp<\'6 x\n\x94f\xf8\xa2\xea\xf4\xa5\x9eY\xf80C\x91\x7f\x16u\x8c(Xl\x90\xd2\x9f\xa9\xb9kJy[\x93\xfe{\xe5\x1a\xe9\xb7T\x19;\xb9\t\xe7\x0ei\xfaZ\xfbS:\x9b\xc1r\xcbM.\xf8\xb8wR\xb3p~b\xcb\v1-\a-\x8a#\xaa1\xa9\x9a\x88\a\xc5\xb9*\xd3?\xac\n\x9c\xcd\xe2\xc9\xbd\xeb\xb3\xf65\xbdaP\t\xd6\x06\x1c\xeeNg\x92>\x92>\xaf\b3\x05\xfdM\xd2F\v\xbd\xeb\x83 \x9d\x90S\x11w\xefg\\\xca\xe2\xfc~w\xbe\xefh#\x96\xa5h\xec\xbfr\xc8Bi\x90\"(\xf2\xc6\xcc\xfbX\x14{\x9e5\x87\x91\xe2\x9b\xd4\xc6\x00\x00\x00\x00+\x0f\x82\xca\xc1@\xcb~P\xe4\x18\xf9E\'\xab\xc7z\xd7\x05V{\xa1X\xa3\x10\x13.]tlz\x12\xde\xf2\xa43\xee#\x92J~\xda \x9b\xc4\xc0V\xb3\x9dCO\x1fu\x1c4\x1d\v}\x1b\xe5>w\xfbsm\xa3\fI|\x96-p\x86\xd3O\xfa\x9a\x8f\xb2\x8e\x88qGEGG\x97&\xef\x8e!}a\xff\xff\x00\x00\x90\xd7;\x12lE\x0es\xb7\xe9$=\xe0\x98E\xdc\x01\x9f\xb7\x10\xe8\x94\xa8\x9c>\x87\xfd\x864\xfaT!\xdb\x98\xaa\xb1\x8b\x99\x8b\x1e\xd2\xcb\xfduaO\x18\xc6\xc0\xb3hv%\v\x941\xdeL\x92-\xba\x10\x96eA\x11\x1a\x11\xf7q\b]\xe7v\'\xcf\xb9b%\xff\xa8\x99L\xa23N*\x1ag\x99\x8e@\x80-E&\x99\b\xebW\x19WG\xb3\x88\x1e<\\g\x1959\xc9\xfb\x91\xa3\xe0bp', 0x4) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x4c092, r0, 0x0) fallocate(r0, 0x3, 0x8dc, 0xfffffffb) 737.259282ms ago: executing program 3 (id=138): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc3c0000000e0a170600000000000000000a00000a0900020073797a3100000000100003800c00008005000340010000000900010073797a31"], 0xa0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 686.094666ms ago: executing program 1 (id=139): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x8031, 0xffffffffffffffff, 0x0) migrate_pages(0x0, 0x5, &(0x7f0000000000)=0x9, &(0x7f0000000080)=0x272) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 538.771398ms ago: executing program 3 (id=140): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f00000004c0)='W', 0x1, 0x4, &(0x7f0000000400)={0xa, 0x4e21, 0x3, @loopback, 0x18}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x33, 0x0, 0x0) 474.923023ms ago: executing program 3 (id=141): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @null}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @null, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @bcast]}, 0x48) connect$netrom(r0, &(0x7f0000000080)={{0x6, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}, [@bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @default, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast]}, 0x48) 369.481561ms ago: executing program 2 (id=142): r0 = socket(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x5e22, 0x400f, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xf}}, 0x8}, 0x1c) sendmmsg$unix(r0, &(0x7f0000004440)=[{{&(0x7f0000000100)=@abs={0x0, 0x0, 0x4e21}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x91}}], 0x1, 0x40000a0) 322.708285ms ago: executing program 3 (id=143): syz_mount_image$hfs(&(0x7f0000000140), &(0x7f0000000000)='./bus\x00', 0x0, &(0x7f0000000180)=ANY=[@ANYRES8=0x0, @ANYRESOCT, @ANYRES32=0x0, @ANYRES8, @ANYRESOCT], 0x1, 0x273, &(0x7f0000001200)="$eJzs3U9rE0EYx/HfbNIabalrWxHEg1QLnsTWi3gRpO/AiydRmwjFUEErqBerZ/EFePctePAleBLPQm6e9J5bZP7EbNJsNo2Jk8TvBxI2yTw7z2RnOzO7lAjAf+v2TuPj9R/2YaSSSpJuSomkilSWdFbnKs/3D/YO6rXqoB2VXIR9GPlIc6TM7n6tX6iNcxFBal+VtZx9D5NR+R47A0wDd/Z7v7LvJ9KJcHa6zytRshu/w9gJRGaaauqFVmLnAQCIK4z/SRjnl8P8PUmkzTDsd4//Mz6ANmMnEFlm/HerrJaxx/e0+6iz3jN+9meFVeIodS3K96xSVwJFq0qXS3Ly0V69dnX3Sb2a6K1uBZli6+656rtuWyOT7Zuju97oszYdoDFy25dcGxZsG7Zz8l8bb43FzBfz1dwzqT6o+mf+V24Ze5jckUp7jpTP/1r+Hl0rU18qp5VnXCXnQw3BwFaW1JNG1mLYZ9cFgrQoTxe12hPlW7dVELXWN2q7IGq9N6rTm/MjJ828N3fNhn7qk3Yy8//EftubGubMtGVcydAzBran7EqmbjwxF91bhxf6lkxGbhKO750e6oZWnr189fhBvV57ysYIG6/Dlzkt+Qy70e4E05LP3G7YLzlK7eW/7plR/irhH+sc9GMGcm9mXth5l/Hrv/Z65fNCuH1nn9IB8/RW0c4zK6CtnLXBqns+lb+C62LcpYclmbxbEcOuuS5dkS4PU6OXhjznhNnRN93n+j8AAAAAAAAAAAAAAAAAAMCsGd+/HFSU91HsNgIAAAAAAAAAAAAAAAAAAAAAMOum7vd/78i/4vd/gYn7HQAA//8NSnOZ") r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) write$FUSE_WRITE(r0, &(0x7f00000000c0)={0x18}, 0xfffffdef) 204.460944ms ago: executing program 2 (id=144): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_read_part_table(0x409c, &(0x7f0000000000)="$eJzsz8FJxFAUBdCbScYkKIhgAdqAWIFd2IMNCK5UXLh2aQky2I0V2IOgu0hiMlH3A8NwziLc3Pffhx+2Q9X236JJ0hVj97I/Td8ekzpJMxV1Xo9S5WQ51Bm/k4MkZR/Ou8N5qcz9fGQoL1cbfBEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALAl2rskn0Nc/u6LOfb9zd+tKnnOYvy5vUhXJ81enTyU/WqR4+T0rB9Oh/K+vrReX/PVrTbxJgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgFz1dpf1JZa7/Dz+6pBrS4pv9OTZBIIqCKHr/R1EsQhD7sAv7WbAC+xUUEUHMNzsne2+YYJbZrJZPsKvO3S7HTfs63f96Y/R8q+3P83uMml0fh7UmAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAvduBAAAAAAADI/7URqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqrADByQAAAAAgv6/bkegAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAATBQAAP//QdkcnA==") ioprio_set$pid(0x1, r0, 0x2007) 0s ago: executing program 3 (id=145): unshare(0x26020480) r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x7, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.202' (ED25519) to the list of known hosts. syzkaller login: [ 61.068903][ T5768] cgroup: Unknown subsys name 'net' [ 61.201518][ T5768] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 62.571505][ T5768] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 63.994197][ T5788] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 64.003142][ T5790] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 64.003359][ T5788] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 64.012040][ T5790] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 64.018721][ T5788] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 64.026603][ T5790] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 64.034216][ T5788] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 64.051410][ T5788] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 64.058994][ T5790] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 64.067308][ T5788] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 64.075021][ T5790] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 64.078364][ T5792] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 64.086166][ T5794] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 64.091102][ T5792] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 64.104289][ T5793] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 64.104520][ T5790] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 64.112077][ T5792] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 64.119861][ T5790] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 64.126460][ T5792] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 64.133716][ T5790] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 64.142339][ T5792] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 64.154448][ T5792] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 64.162361][ T5790] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 64.165338][ T5792] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 64.663430][ T5780] chnl_net:caif_netlink_parms(): no params data found [ 64.689941][ T5781] chnl_net:caif_netlink_parms(): no params data found [ 64.703639][ T5779] chnl_net:caif_netlink_parms(): no params data found [ 64.780367][ T5778] chnl_net:caif_netlink_parms(): no params data found [ 64.853264][ T5780] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.861492][ T5780] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.869389][ T5780] bridge_slave_0: entered allmulticast mode [ 64.876362][ T5780] bridge_slave_0: entered promiscuous mode [ 64.932431][ T5780] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.939758][ T5780] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.947933][ T5780] bridge_slave_1: entered allmulticast mode [ 64.955384][ T5780] bridge_slave_1: entered promiscuous mode [ 64.974017][ T5779] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.981391][ T5779] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.988614][ T5779] bridge_slave_0: entered allmulticast mode [ 64.995511][ T5779] bridge_slave_0: entered promiscuous mode [ 65.003051][ T5779] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.010404][ T5779] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.018139][ T5779] bridge_slave_1: entered allmulticast mode [ 65.025050][ T5779] bridge_slave_1: entered promiscuous mode [ 65.076143][ T5781] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.083391][ T5781] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.091418][ T5781] bridge_slave_0: entered allmulticast mode [ 65.099043][ T5781] bridge_slave_0: entered promiscuous mode [ 65.109289][ T5780] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.121962][ T5780] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.137733][ T5779] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.147481][ T5781] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.154795][ T5781] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.162285][ T5781] bridge_slave_1: entered allmulticast mode [ 65.169188][ T5781] bridge_slave_1: entered promiscuous mode [ 65.210847][ T5779] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.242585][ T5780] team0: Port device team_slave_0 added [ 65.252885][ T5780] team0: Port device team_slave_1 added [ 65.299065][ T5778] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.306831][ T5778] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.314262][ T5778] bridge_slave_0: entered allmulticast mode [ 65.322784][ T5778] bridge_slave_0: entered promiscuous mode [ 65.333983][ T5779] team0: Port device team_slave_0 added [ 65.342794][ T5779] team0: Port device team_slave_1 added [ 65.350828][ T5781] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.362853][ T5781] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.381008][ T5778] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.388334][ T5778] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.395794][ T5778] bridge_slave_1: entered allmulticast mode [ 65.402588][ T5778] bridge_slave_1: entered promiscuous mode [ 65.428939][ T5780] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.436170][ T5780] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.463366][ T5780] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.477279][ T5780] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.484243][ T5780] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.510422][ T5780] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.574127][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.581333][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.608612][ T5779] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.622331][ T5781] team0: Port device team_slave_0 added [ 65.631581][ T5781] team0: Port device team_slave_1 added [ 65.640537][ T5778] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.652621][ T5778] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.662393][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.669565][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.696074][ T5779] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.760362][ T5781] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.767546][ T5781] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.799583][ T5781] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.829360][ T5780] hsr_slave_0: entered promiscuous mode [ 65.836250][ T5780] hsr_slave_1: entered promiscuous mode [ 65.845975][ T5778] team0: Port device team_slave_0 added [ 65.852546][ T5781] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.859953][ T5781] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.886899][ T5781] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.927724][ T5778] team0: Port device team_slave_1 added [ 65.936780][ T5779] hsr_slave_0: entered promiscuous mode [ 65.943051][ T5779] hsr_slave_1: entered promiscuous mode [ 65.949798][ T5779] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 65.957760][ T5779] Cannot create hsr debugfs directory [ 66.014523][ T5781] hsr_slave_0: entered promiscuous mode [ 66.021473][ T5781] hsr_slave_1: entered promiscuous mode [ 66.028066][ T5781] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 66.035736][ T5781] Cannot create hsr debugfs directory [ 66.063408][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.070531][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.096815][ T5778] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.110571][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.117629][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.143817][ T5778] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.165811][ T5792] Bluetooth: hci2: command tx timeout [ 66.245115][ T5792] Bluetooth: hci0: command tx timeout [ 66.245139][ T5100] Bluetooth: hci1: command tx timeout [ 66.245371][ T5100] Bluetooth: hci3: command tx timeout [ 66.320284][ T5778] hsr_slave_0: entered promiscuous mode [ 66.327012][ T5778] hsr_slave_1: entered promiscuous mode [ 66.333013][ T5778] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 66.341794][ T5778] Cannot create hsr debugfs directory [ 66.561574][ T5780] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 66.599531][ T5780] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 66.629628][ T5780] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 66.640875][ T5780] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 66.692073][ T5781] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 66.721894][ T5781] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 66.732310][ T5781] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 66.764329][ T5781] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 66.833228][ T5779] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 66.866260][ T5779] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 66.876917][ T5779] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 66.887991][ T5779] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 66.952123][ T5778] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 66.964070][ T5778] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 66.982625][ T5778] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 67.000642][ T5780] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.009263][ T5778] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 67.062426][ T5780] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.097282][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.104701][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.129755][ T1134] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.136958][ T1134] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.211950][ T5781] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.277876][ T5781] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.290835][ T5779] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.324153][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.331452][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.363375][ T5779] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.382565][ T1311] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.389780][ T1311] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.408851][ T5778] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.432942][ T1134] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.440215][ T1134] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.476634][ T1134] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.483781][ T1134] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.554554][ T5778] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.581406][ T5781] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 67.604321][ T5779] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 67.639569][ T1311] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.646863][ T1311] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.663858][ T1311] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.671062][ T1311] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.712077][ T5780] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.881472][ T5780] veth0_vlan: entered promiscuous mode [ 67.922953][ T5780] veth1_vlan: entered promiscuous mode [ 67.970010][ T5779] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.009869][ T5780] veth0_macvtap: entered promiscuous mode [ 68.023754][ T5780] veth1_macvtap: entered promiscuous mode [ 68.094808][ T5780] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.124571][ T5780] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.152775][ T5779] veth0_vlan: entered promiscuous mode [ 68.170554][ T5780] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.181178][ T5780] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.190575][ T5780] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.201007][ T5780] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.219963][ T5779] veth1_vlan: entered promiscuous mode [ 68.255034][ T5100] Bluetooth: hci2: command tx timeout [ 68.256875][ T5781] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.313432][ T5778] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.328083][ T5790] Bluetooth: hci0: command tx timeout [ 68.328095][ T5792] Bluetooth: hci1: command tx timeout [ 68.333624][ T5100] Bluetooth: hci3: command tx timeout [ 68.377596][ T5779] veth0_macvtap: entered promiscuous mode [ 68.395770][ T1311] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.403785][ T1311] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.442779][ T5779] veth1_macvtap: entered promiscuous mode [ 68.487108][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.497846][ T5781] veth0_vlan: entered promiscuous mode [ 68.505806][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.517288][ T5778] veth0_vlan: entered promiscuous mode [ 68.525805][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.536697][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.548266][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.567336][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.578005][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.589718][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.607711][ T5779] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.619579][ T5779] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.628738][ T5779] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.638203][ T5779] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.661296][ T5781] veth1_vlan: entered promiscuous mode [ 68.670407][ T5778] veth1_vlan: entered promiscuous mode [ 68.796548][ T5778] veth0_macvtap: entered promiscuous mode [ 68.850790][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.853356][ T5781] veth0_macvtap: entered promiscuous mode [ 68.873508][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.878819][ T5781] veth1_macvtap: entered promiscuous mode [ 68.900639][ T5778] veth1_macvtap: entered promiscuous mode [ 68.977970][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.990573][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.002323][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.013186][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.024834][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.045091][ T1134] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.053753][ T1134] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.065502][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.077660][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.088071][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.098599][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.109954][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.118386][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.130229][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.140397][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.150886][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.160821][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.171600][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.182840][ T5781] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.205975][ T5778] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.215545][ T5778] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.224324][ T5778] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.233380][ T5778] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.252503][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.264207][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.277047][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.288349][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.298400][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.309040][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.321571][ T5781] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.370367][ T5781] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.395418][ T5781] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.404166][ T5781] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.434931][ T5781] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.630081][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.655894][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.682642][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.697436][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.771184][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.815766][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.830562][ T1134] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.835711][ T5878] syz.2.9[5878]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 69.868534][ T1134] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.868928][ T5878] loop2: detected capacity change from 0 to 512 [ 69.904090][ T5878] ======================================================= [ 69.904090][ T5878] WARNING: The mand mount option has been deprecated and [ 69.904090][ T5878] and is ignored by this kernel. Remove the mand [ 69.904090][ T5878] option from the mount to silence this warning. [ 69.904090][ T5878] ======================================================= [ 69.939278][ C0] vkms_vblank_simulate: vblank timer overrun [ 70.098812][ T5878] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.129411][ T5878] ext4 filesystem being mounted at /4/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 70.170073][ T5887] loop1: detected capacity change from 0 to 512 [ 70.179317][ T5887] EXT4-fs: inline encryption not supported [ 70.185431][ T5887] EXT4-fs: Ignoring removed mblk_io_submit option [ 70.325302][ T5100] Bluetooth: hci2: command tx timeout [ 70.334391][ T5887] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 70.355954][ T5887] EXT4-fs (loop1): Test dummy encryption mode enabled [ 70.377823][ T5878] Quota error (device loop2): do_check_range: Getting dqdh_next_free 2741 out of range 0-6 [ 70.401715][ T5887] EXT4-fs (loop1): orphan cleanup on readonly fs [ 70.408314][ T5100] Bluetooth: hci3: command tx timeout [ 70.408354][ T5100] Bluetooth: hci0: command tx timeout [ 70.416296][ T5100] Bluetooth: hci1: command tx timeout [ 70.426427][ T5878] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 70.471035][ T5878] EXT4-fs error (device loop2): ext4_acquire_dquot:6940: comm syz.2.9: Failed to acquire dquot type 0 [ 70.483979][ T5887] EXT4-fs error (device loop1): ext4_orphan_get:1399: comm syz.1.11: inode #13: comm syz.1.11: iget: illegal inode # [ 70.511013][ T5887] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.11: couldn't read orphan inode 13 (err -117) [ 70.578291][ T5887] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 70.621163][ T5780] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.623154][ T5887] EXT4-fs error (device loop1): ext4_resize_begin:62: comm syz.1.11: resize_inode disabled but reserved GDT blocks non-zero [ 70.642144][ T5899] loop0: detected capacity change from 0 to 1024 [ 70.736718][ T5899] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.841889][ T5779] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.882313][ T5778] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.948011][ T5904] Driver unsupported XDP return value 0 on prog (id 3) dev N/A, expect packet loss! [ 71.771493][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.780655][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.004642][ T5922] loop1: detected capacity change from 0 to 128 [ 72.047255][ T5922] VFS: Found a Xenix FS (block size = 512) on device loop1 [ 72.154503][ T5779] sysv_free_block: trying to free block not in datazone [ 72.172279][ T5779] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 72.176090][ T5924] netlink: 16 bytes leftover after parsing attributes in process `syz.0.24'. [ 72.188800][ T5845] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 72.395300][ T5845] usb 3-1: Using ep0 maxpacket: 32 [ 72.415169][ T5100] Bluetooth: hci2: command tx timeout [ 72.424448][ T5845] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 72.445334][ T5932] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 72.478557][ T5845] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 72.489964][ T5845] usb 3-1: New USB device found, idVendor=0c70, idProduct=f0b6, bcdDevice= 0.00 [ 72.499136][ T5790] Bluetooth: hci0: command tx timeout [ 72.499178][ T5790] Bluetooth: hci3: command tx timeout [ 72.510497][ T5100] Bluetooth: hci1: command tx timeout [ 72.516377][ T5845] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.526635][ T5918] loop3: detected capacity change from 0 to 32768 [ 72.582551][ T5845] usb 3-1: config 0 descriptor?? [ 72.591466][ T5936] loop0: detected capacity change from 0 to 128 [ 72.595605][ T5918] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.21 (5918) [ 72.634568][ T5936] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 72.693435][ T5936] ext4 filesystem being mounted at /8/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 72.726724][ T5918] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 72.754382][ T5918] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 72.766317][ T5918] BTRFS info (device loop3): using free space tree [ 72.788296][ T5936] EXT4-fs warning (device loop0): verify_group_input:151: Cannot add at group 5 (only 1 groups) [ 72.846179][ T5778] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 72.925752][ T5918] BTRFS info (device loop3): enabling ssd optimizations [ 72.942786][ T5918] BTRFS info (device loop3): auto enabling async discard [ 73.060659][ T27] audit: type=1800 audit(1756464215.436:2): pid=5918 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.21" name="file1" dev="loop3" ino=260 res=0 errno=0 [ 73.114439][ T5845] aquacomputer_d5next 0003:0C70:F0B6.0001: hidraw0: USB HID vff.fc Device [HID 0c70:f0b6] on usb-dummy_hcd.2-1/input0 [ 73.130849][ T5781] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 73.488807][ T5964] loop1: detected capacity change from 0 to 1024 [ 73.490434][ T8] usb 3-1: USB disconnect, device number 2 [ 74.222859][ T5980] loop3: detected capacity change from 0 to 256 [ 74.290598][ T5980] FAT-fs (loop3): Directory bread(block 64) failed [ 74.310872][ T5980] FAT-fs (loop3): Directory bread(block 65) failed [ 74.325770][ T5980] FAT-fs (loop3): Directory bread(block 66) failed [ 74.343011][ T5980] FAT-fs (loop3): Directory bread(block 67) failed [ 74.355089][ T5980] FAT-fs (loop3): Directory bread(block 68) failed [ 74.371677][ T5980] FAT-fs (loop3): Directory bread(block 69) failed [ 74.381868][ T5980] FAT-fs (loop3): Directory bread(block 70) failed [ 74.402028][ T5980] FAT-fs (loop3): Directory bread(block 71) failed [ 74.426148][ T5980] FAT-fs (loop3): Directory bread(block 72) failed [ 74.442946][ T5980] FAT-fs (loop3): Directory bread(block 73) failed [ 75.108254][ T5985] loop2: detected capacity change from 0 to 32768 [ 75.212760][ T5985] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 75.310452][ T6007] loop3: detected capacity change from 0 to 1024 [ 75.395237][ T5985] XFS (loop2): Ending clean mount [ 75.430382][ T5985] XFS (loop2): Quotacheck needed: Please wait. [ 75.556041][ T5985] XFS (loop2): Quotacheck: Done. [ 75.696298][ T5780] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 75.795104][ T5770] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 75.995025][ T5770] usb 4-1: Using ep0 maxpacket: 32 [ 76.002788][ T5770] usb 4-1: config 0 has an invalid interface number: 196 but max is 0 [ 76.011524][ T5770] usb 4-1: config 0 has no interface number 0 [ 76.029291][ T5770] usb 4-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 76.050239][ T5770] usb 4-1: config 0 interface 196 has no altsetting 0 [ 76.082263][ T5770] usb 4-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 76.105431][ T5770] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.113566][ T5770] usb 4-1: Product: syz [ 76.118174][ T5770] usb 4-1: Manufacturer: syz [ 76.122789][ T5770] usb 4-1: SerialNumber: syz [ 76.142168][ T6009] loop0: detected capacity change from 0 to 32768 [ 76.150840][ T5770] usb 4-1: config 0 descriptor?? [ 76.156586][ T6011] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 76.187379][ T6009] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.46 (6009) [ 76.225131][ T6009] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 76.247317][ T6009] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 76.265067][ T6009] BTRFS info (device loop0): using free space tree [ 76.284976][ T788] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 76.352474][ T6009] BTRFS info (device loop0): enabling ssd optimizations [ 76.362588][ T6009] BTRFS info (device loop0): auto enabling async discard [ 76.510532][ T27] audit: type=1800 audit(1756464218.886:3): pid=6009 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.46" name="file1" dev="loop0" ino=260 res=0 errno=0 [ 76.542624][ T6019] loop2: detected capacity change from 0 to 32768 [ 76.547627][ T788] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 76.592585][ T788] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 76.606936][ T5778] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 76.612506][ T5770] ipheth 4-1:0.196: ipheth_get_macaddr: usb_control_msg: short packet: 0 bytes [ 76.627779][ T788] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 76.630144][ T6019] [ 76.630144][ T6019] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 76.630144][ T6019] [ 76.647892][ T5770] ipheth: probe of 4-1:0.196 failed with error -22 [ 76.657982][ T788] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.721891][ T788] usb 2-1: config 0 descriptor?? [ 76.753253][ T788] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 76.784314][ T6019] ERROR: (device loop2): diWrite: ixpxd invalid [ 76.784314][ T6019] [ 76.796487][ T788] dvb-usb: bulk message failed: -22 (3/0) [ 76.821006][ T6019] ERROR: (device loop2): txCommit: [ 76.821006][ T6019] [ 76.864185][ T6036] jfs_create: dtSearch returned -17 [ 76.871094][ T788] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 76.921617][ T788] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 76.930467][ T5770] usb 4-1: USB disconnect, device number 2 [ 76.952312][ T788] usb 2-1: media controller created [ 76.976432][ T5795] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 9 /dev/loop0 scanned by udevd (5795) [ 76.993553][ T788] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 77.074534][ T788] dvb-usb: bulk message failed: -22 (6/0) [ 77.093767][ T788] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 77.114532][ T5780] [ 77.114532][ T5780] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 77.114532][ T5780] [ 77.143875][ T788] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input5 [ 77.150508][ T5780] [ 77.150508][ T5780] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 77.150508][ T5780] [ 77.218016][ T788] dvb-usb: schedule remote query interval to 150 msecs. [ 77.236150][ T788] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 77.290688][ T788] usb 2-1: USB disconnect, device number 2 [ 77.461592][ T788] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 77.810036][ T6048] netlink: 'syz.0.56': attribute type 4 has an invalid length. [ 78.040905][ T6054] tipc: Enabling of bearer rejected, failed to enable media [ 78.048371][ T6055] loop0: detected capacity change from 0 to 128 [ 78.054332][ T6053] loop2: detected capacity change from 0 to 512 [ 78.083640][ T6055] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 78.104587][ T6053] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 78.137190][ T6053] [EXT4 FS bs=4096, gc=1, bpg=42, ipg=32, mo=842c018, mo2=0000] [ 78.146191][ T6055] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 78.178348][ T6053] EXT4-fs (loop2): orphan cleanup on readonly fs [ 78.225006][ T6053] Quota error (device loop2): v2_read_file_info: Free block number 1 out of range (1, 6). [ 78.270705][ T6053] EXT4-fs warning (device loop2): ext4_enable_quotas:7175: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 78.312407][ T6053] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 78.327119][ T6053] EXT4-fs (loop2): 1 truncate cleaned up [ 78.336617][ T6053] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 78.530394][ T5780] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.706340][ T6068] Dead loop on virtual device ip6_vti0, fix it urgently! [ 78.915468][ T6072] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 79.679946][ T6100] netlink: 4 bytes leftover after parsing attributes in process `syz.0.82'. [ 79.807003][ T6102] loop3: detected capacity change from 0 to 512 [ 79.839018][ T6102] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 79.948363][ T6102] EXT4-fs error (device loop3): ext4_do_update_inode:5230: inode #3: comm syz.3.83: corrupted inode contents [ 80.004348][ T6102] EXT4-fs error (device loop3): ext4_dirty_inode:6106: inode #3: comm syz.3.83: mark_inode_dirty error [ 80.029833][ T6102] EXT4-fs error (device loop3): ext4_do_update_inode:5230: inode #3: comm syz.3.83: corrupted inode contents [ 80.047005][ T6091] loop1: detected capacity change from 0 to 40427 [ 80.047945][ T6102] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #3: comm syz.3.83: mark_inode_dirty error [ 80.082690][ T6102] Quota error (device loop3): write_blk: dquota write failed [ 80.098255][ T6091] F2FS-fs (loop1): invalid crc value [ 80.105308][ T6102] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 80.126916][ T6102] EXT4-fs error (device loop3): ext4_acquire_dquot:6940: comm syz.3.83: Failed to acquire dquot type 0 [ 80.149936][ T6091] F2FS-fs (loop1): Found nat_bits in checkpoint [ 80.211029][ T6102] EXT4-fs (loop3): 1 orphan inode deleted [ 80.225739][ T59] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 80.246705][ T6102] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.259630][ T59] EXT4-fs error (device loop3): ext4_release_dquot:6976: comm kworker/u4:4: Failed to release dquot type 1 [ 80.294479][ T6102] ext4 filesystem being mounted at /15/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 80.317058][ T6091] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 80.659032][ T5781] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.208889][ T6137] warning: `syz.3.98' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 81.421357][ T6142] loop1: detected capacity change from 0 to 1024 [ 81.569024][ T1311] hfsplus: b-tree write err: -5, ino 4 [ 82.021378][ T28] cfg80211: failed to load regulatory.db [ 82.138139][ T6165] vivid-002: disconnect [ 82.164575][ T6163] vivid-002: reconnect [ 82.479257][ T27] audit: type=1326 audit(1756464224.846:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6177 comm="syz.2.115" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fdd5f38ebe9 code=0x0 [ 82.631510][ T6183] loop1: detected capacity change from 0 to 256 [ 82.760034][ T6183] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 83.019309][ T5100] Bluetooth: Frame is too long (len 18, expected len 4) [ 83.509256][ T6208] loop1: detected capacity change from 0 to 512 [ 83.571389][ T6208] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.617565][ T6208] ext4 filesystem being mounted at /38/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 83.665094][ T55] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 83.697970][ T5779] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.855315][ T55] usb 3-1: Using ep0 maxpacket: 8 [ 83.872720][ T55] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 83.891738][ T55] usb 3-1: config 179 has no interface number 0 [ 83.912022][ T55] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 64, changing to 10 [ 83.944945][ T55] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 1029, setting to 1024 [ 83.967381][ T55] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 83.989808][ T55] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 84.005588][ T6223] GUP no longer grows the stack in syz.3.133 (6223): 200000005000-200000008000 (200000004000) [ 84.016559][ T8] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 84.023892][ T6223] CPU: 1 PID: 6223 Comm: syz.3.133 Not tainted syzkaller #0 [ 84.029922][ T55] usb 3-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 84.031299][ T6223] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 84.054857][ T6223] Call Trace: [ 84.055035][ T55] usb 3-1: config 179 interface 65 has no altsetting 0 [ 84.058137][ T6223] [ 84.058161][ T6223] dump_stack_lvl+0x16c/0x230 [ 84.058191][ T6223] ? show_regs_print_info+0x20/0x20 [ 84.069745][ T55] usb 3-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 84.072636][ T6223] ? load_image+0x3b0/0x3b0 [ 84.072659][ T6223] ? find_vma+0x12e/0x1b0 [ 84.072689][ T6223] fixup_user_fault+0x652/0x710 [ 84.086345][ T55] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.086865][ T6223] fault_in_user_writeable+0x71/0xe0 [ 84.097311][ T6206] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 84.100633][ T6223] futex_lock_pi+0x21b/0x8d0 [ 84.125873][ T6223] ? fixup_pi_state_owner+0x5c0/0x5c0 [ 84.126254][ T55] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input6 [ 84.131290][ T6223] ? userfaultfd_unmap_prep+0x3d0/0x3d0 [ 84.131324][ T6223] ? mas_find_setup+0x493/0x590 [ 84.131344][ T6223] do_futex+0x23d/0x3e0 [ 84.131365][ T6223] ? __ia32_sys_get_robust_list+0x90/0x90 [ 84.131387][ T6223] __se_sys_futex+0x36f/0x3f0 [ 84.131409][ T6223] ? __x64_sys_futex+0xf0/0xf0 [ 84.131432][ T6223] ? __x64_sys_futex+0x21/0xf0 [ 84.131450][ T6223] do_syscall_64+0x55/0xb0 [ 84.131468][ T6223] ? clear_bhb_loop+0x40/0x90 [ 84.186560][ T6223] ? clear_bhb_loop+0x40/0x90 [ 84.191276][ T6223] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 84.197208][ T6223] RIP: 0033:0x7f832738ebe9 [ 84.201653][ T6223] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 84.221378][ T6223] RSP: 002b:00007f8328226038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 84.229816][ T6223] RAX: ffffffffffffffda RBX: 00007f83275b5fa0 RCX: 00007f832738ebe9 [ 84.233138][ T8] usb 1-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 84.237786][ T6223] RDX: 00000000fffffffd RSI: 000000000000008d RDI: 0000200000004000 [ 84.237802][ T6223] RBP: 00007f8327411e19 R08: 0000000000000000 R09: 0000000000000000 [ 84.237812][ T6223] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 84.237822][ T6223] R13: 00007f83275b6038 R14: 00007f83275b5fa0 R15: 00007ffdf9596b38 [ 84.237846][ T6223] [ 84.237926][ C1] vkms_vblank_simulate: vblank timer overrun [ 84.379371][ T5770] usb 3-1: USB disconnect, device number 3 [ 84.379428][ C0] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 84.393977][ T5770] xpad 3-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 84.424342][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.444221][ T8] usb 1-1: Product: syz [ 84.449121][ T8] usb 1-1: Manufacturer: syz [ 84.453761][ T8] usb 1-1: SerialNumber: syz [ 84.487655][ T8] usb 1-1: config 0 descriptor?? [ 84.671562][ T6236] netlink: 'syz.3.138': attribute type 3 has an invalid length. [ 85.018379][ T6245] loop3: detected capacity change from 0 to 64 [ 85.116883][ T6245] hfs: request for non-existent node 237 in B*Tree [ 85.134983][ T8] usb 1-1: f81604_read: reg: 105 failed: -EPROTO [ 85.141400][ T8] f81604 1-1:0.0: Setting termination of CH#1 failed: -EPROTO [ 85.156233][ T6245] hfs: request for non-existent node 237 in B*Tree [ 85.175295][ T8] f81604: probe of 1-1:0.0 failed with error -71 [ 85.177849][ T6245] hfs: request for non-existent node 237 in B*Tree [ 85.195051][ T6245] hfs: request for non-existent node 237 in B*Tree [ 85.213438][ T8] usb 1-1: USB disconnect, device number 3 [ 85.308346][ T12] hfs: request for non-existent node 237 in B*Tree [ 85.325529][ T12] hfs: request for non-existent node 237 in B*Tree [ 85.346182][ T12] ------------[ cut here ]------------ [ 85.352717][ T12] kernel BUG at fs/hfs/inode.c:449! [ 85.372518][ T12] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 85.378632][ T12] CPU: 0 PID: 12 Comm: kworker/u4:1 Not tainted syzkaller #0 [ 85.386101][ T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 85.396168][ T12] Workqueue: writeback wb_workfn (flush-7:3) [ 85.402195][ T12] RIP: 0010:hfs_write_inode+0x7c4/0x7d0 [ 85.407754][ T12] Code: c7 c1 00 f3 ee 96 80 e1 07 80 c1 03 38 c1 0f 8c 7d fe ff ff 48 c7 c7 00 f3 ee 96 e8 e6 d4 85 ff e9 6c fe ff ff e8 bc 8e 2e ff <0f> 0b 66 2e 0f 1f 84 00 00 00 00 00 f3 0f 1e fa 55 41 57 41 56 41 [ 85.427379][ T12] RSP: 0018:ffffc90000117360 EFLAGS: 00010293 [ 85.433461][ T12] RAX: ffffffff825700e4 RBX: ffff88807d318ea8 RCX: ffff88801be55a00 [ 85.441536][ T12] RDX: 0000000000000000 RSI: ffffffff8cf37f60 RDI: 0000000000000000 [ 85.449525][ T12] RBP: ffffc900001174f0 R08: ffff88801be55a00 R09: 0000000000000003 [ 85.457511][ T12] R10: 0000000000000004 R11: 0000000000000000 R12: dffffc0000000000 [ 85.465490][ T12] R13: 1ffff92000022e70 R14: ffff88807d318e58 R15: 0000000000000000 [ 85.473474][ T12] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 85.482441][ T12] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 85.489039][ T12] CR2: 000000110c3d639e CR3: 0000000062079000 CR4: 00000000003506f0 [ 85.497130][ T12] Call Trace: [ 85.500548][ T12] [ 85.503671][ T12] ? hfs_inode_write_fork+0x1a0/0x1a0 [ 85.509156][ T12] ? __rwlock_init+0x150/0x150 [ 85.513935][ T12] __writeback_single_inode+0x705/0xee0 [ 85.519507][ T12] writeback_sb_inodes+0x77c/0xef0 [ 85.524648][ T12] ? queue_io+0x560/0x560 [ 85.529013][ T12] ? rcu_is_watching+0x15/0xb0 [ 85.533816][ T12] wb_writeback+0x450/0xba0 [ 85.538354][ T12] ? queue_io+0x3a1/0x560 [ 85.540952][ T6247] loop2: detected capacity change from 0 to 32768 [ 85.542688][ T12] ? percpu_ref_tryget+0x250/0x250 [ 85.542713][ T12] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 85.560255][ T12] ? _raw_spin_unlock_irq+0x23/0x50 [ 85.565487][ T12] wb_workfn+0x3ff/0xe20 [ 85.569761][ T12] ? inode_wait_for_writeback+0x200/0x200 [ 85.575513][ T12] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 85.581501][ T12] ? read_lock_is_recursive+0x20/0x20 [ 85.586862][ T12] ? _raw_spin_unlock_irq+0x23/0x50 [ 85.592138][ T12] ? process_scheduled_works+0x957/0x15b0 [ 85.597849][ T12] ? process_scheduled_works+0x957/0x15b0 [ 85.603560][ T12] process_scheduled_works+0xa45/0x15b0 [ 85.609191][ T12] ? assign_work+0x400/0x400 [ 85.613769][ T12] ? assign_work+0x39e/0x400 [ 85.618371][ T12] worker_thread+0xa55/0xfc0 [ 85.622954][ T12] kthread+0x2fa/0x390 [ 85.627007][ T12] ? pr_cont_work+0x560/0x560 [ 85.631669][ T12] ? kthread_blkcg+0xd0/0xd0 [ 85.636243][ T12] ret_from_fork+0x48/0x80 [ 85.640648][ T12] ? kthread_blkcg+0xd0/0xd0 [ 85.645220][ T12] ret_from_fork_asm+0x11/0x20 [ 85.649976][ T12] [ 85.653163][ T12] Modules linked in: [ 85.696380][ T12] ---[ end trace 0000000000000000 ]--- [ 85.701880][ T12] RIP: 0010:hfs_write_inode+0x7c4/0x7d0 [ 85.707501][ T12] Code: c7 c1 00 f3 ee 96 80 e1 07 80 c1 03 38 c1 0f 8c 7d fe ff ff 48 c7 c7 00 f3 ee 96 e8 e6 d4 85 ff e9 6c fe ff ff e8 bc 8e 2e ff <0f> 0b 66 2e 0f 1f 84 00 00 00 00 00 f3 0f 1e fa 55 41 57 41 56 41 [ 85.728539][ T12] RSP: 0018:ffffc90000117360 EFLAGS: 00010293 [ 85.734644][ T12] RAX: ffffffff825700e4 RBX: ffff88807d318ea8 RCX: ffff88801be55a00 [ 85.742970][ T12] RDX: 0000000000000000 RSI: ffffffff8cf37f60 RDI: 0000000000000000 [ 85.743100][ T6247] loop2: p2 p3 [ 85.755258][ T12] RBP: ffffc900001174f0 R08: ffff88801be55a00 R09: 0000000000000003 [ 85.757380][ T6247] loop2: p3 size 196608 extends beyond EOD, [ 85.765510][ T12] R10: 0000000000000004 R11: 0000000000000000 R12: dffffc0000000000 [ 85.775039][ T6247] truncated [ 85.780264][ T12] R13: 1ffff92000022e70 R14: ffff88807d318e58 R15: 0000000000000000 [ 85.791779][ T12] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 85.802128][ T12] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 85.809805][ T12] CR2: 00007f1e29751000 CR3: 000000007c53c000 CR4: 00000000003506f0 [ 85.818529][ T12] Kernel panic - not syncing: Fatal exception [ 85.824862][ T12] Kernel Offset: disabled [ 85.829185][ T12] Rebooting in 86400 seconds..