last executing test programs: 28.374181677s ago: executing program 3 (id=960): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x1, 0xbaf, &(0x7f0000002f00)="$eJzs3M1rXOUaAPDnnEy+c5v0crn3tggGpCqK07QpFbpqXYsKunDZmExKyPTDJIIJXaR1ry5EXBSkf4Lg3m5cCS7qQutfUMQiRTdtFyNnPtKxk5mm6cwcE38/eHPe97wn8zxPTmfOe2BOA/jHms5+pBGHIuJsEjFZ359GxFC1NxKxWTvu/t3L81lLolJ5+7ckkoi4d/fyfOO1kvp2vD4YiYibryXx749a466ubyzPlcullfr46Nr5S0dX1zdeWTo/d650rnThxOyrJ2ZPzs52sdbbl9774pkf3nj+6vWPZ978/MB3SZyOifpccx3dMh3TW3+TZoWImOt2sJwM1OtprjMp5JgQAAAdpU1ruP/GZAzEw8XbZHz7Y67JAQAAAF1RGYioAAAAAPtc4v4fAAAA9rnG9wDu3b0832j5fiOhv+6ciYipWv2N55trM4XYrG5HYjAixn5Povmx1qT2a09tOov09felrEWPnkPuZPNKRPx/u/OfVOufqj7F3Vp/GhEzXYg//ch4L9V/ugvxn6z+4S5EBICIG2dqF7LW61+6tf6Jba5/hW2uXbuR9/W/sf6737L+e1j/QJv131s7jHH4wUs32801r//e/eTnhSx+tn2qop7AnSsRhwvb1Z9s1Z+0qf/sDmOMz9++1m4uqz+rt9H6XX/lesSR6mqutf6GpNP/T3R0calcmqn93Ob11092jt98/rOWxW/cC/RDdv7HYnfn/9IOY0z979dD7eYeX3/6y1DyTrU3VN/z4dza2sqxiKHk9db9xzvn0jim8RpZ/S8+1/n9v1392WfCZv3vkP3ruVLfZuOrj8QcP3L8q93X31tZ/Qu7PP+f7jDGl99ce7/dXN71AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALA3pBExEUla3OqnabEYMR4R/4mxtHxxde3lxYsfXFjI5iKmYjBdXCqXZiJisjZOsvGxav/h+Pgj49mIOBgRn02OVsfF+YvlhbyLBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYMt4RExEkhYjIo2IPybTtFjMOysAAACg66byTgAAAADoOff/AAAAsP+13P8X/jIa6WcuAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA7EsHn71xK4mIzVOj1ZYZqs8N5poZ0Gvpzg4b63UeQP8N5J0AkJtCU79SqVRyTAXoM/f4QPKY+ZG2M8NdzwUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAv68XDt24lUTE5qnRassM1ecGc80M6LU07wSA3Ax0mkweuwPYwwp5JwDkxj0+UFvZP6jUtM6PtP3N4aeOCgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDeMVFtSVqMiLTaT9NiMeJfETEVg8niUrk0ExEHIuKnycHhbHws76QBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADoutX1jeW5crm0oqOj08XOaPQt1mj9zdzmmOH2Ux06OX8wAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACQi9X1jeW5crm0spp3JgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDeVtc3lufK5dJKDzt51wgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQH7+DAAA///6CAm5") syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000240)={[{@oldalloc}, {@grpquota}, {@noinit_itable}]}, 0xff, 0x4be, &(0x7f0000000a00)="$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") r0 = creat(&(0x7f0000000140)='./bus\x00', 0x182) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x9, 0x800800}) lchown(&(0x7f00000006c0)='./file0\x00', 0x0, 0xee01) 26.617134559s ago: executing program 3 (id=976): r0 = socket$inet6(0xa, 0x80002, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005000)=[{{0x0, 0x0, 0x0}, 0x3}], 0x4000000000001bc, 0x60, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) connect$inet6(r0, &(0x7f0000002140)={0xa, 0x4e20, 0x80000000, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 26.261120288s ago: executing program 3 (id=981): r0 = fsopen(&(0x7f0000000180)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) fchdir(r1) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x21c0, 0x103) 26.2480556s ago: executing program 4 (id=982): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) 26.159201097s ago: executing program 3 (id=984): syz_mount_image$ocfs2(&(0x7f00000026c0), &(0x7f0000004780)='./file0\x00', 0x200000, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x1, 0x4703, &(0x7f0000004800)="$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") r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregset(0x4205, r0, 0x1, &(0x7f0000000100)={&(0x7f0000000040)="dcef58b7f29c1f7c93d183044aedba283413e674c7719c33a4b17f028f68610a6c55bb2bf8282853f3e16f8394a8676ff55a3507e2ad50248c6130863b0f7433c7fbc9b978a39eae88bffd05d139cedbee444f7c98e1f92b0f64462b4b470bedced2125e0b1f38fbaa348c6d75aa1a4011e9cdae15ecb9309b0101edbf6dd6d111d6132f1821a4e4cbec8438c571a70e7ca7b0451a6cc55c", 0x98}) ptrace$setregset(0x4205, r0, 0x200, &(0x7f00000001c0)={&(0x7f0000000440)="c94522e546f93f6dedf11f1509685636", 0x60}) 26.007820426s ago: executing program 4 (id=986): syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000200)={[{@grpjquota}, {@i_version}, {@discard}, {@noload}, {@resuid}]}, 0x3, 0x4fe, &(0x7f0000000dc0)="$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") r0 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50) getdents(r0, 0x0, 0x0) lseek(r0, 0x6, 0x1) getdents(r0, 0x0, 0x0) 25.537404518s ago: executing program 4 (id=988): syz_mount_image$jfs(&(0x7f0000000380), &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4000, &(0x7f000000bcc0)=ANY=[@ANYRES16=0x0, @ANYRESDEC, @ANYRESHEX, @ANYRES16, @ANYBLOB="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", @ANYRESOCT, @ANYRES64, @ANYRES64, @ANYRESOCT], 0x41, 0x5eda, &(0x7f000005eb40)="$eJzs3UuPFNfZB/CnL9Nz4TWMLL2WhbIYY+dCMDBcDLnb3iRSVpEiNlmBxmMLBScRkCi2UBhrFvkGUbJIlOyzyifIHj6EF1kGCZKNV6moZs6BmkoPPQNMVzPn95OaqqdOVfcp/n2druoTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAED88Ps/PteLiKu/SguWI/4vBhH9iMW6XomIxZXlvP4wIl6PreZ4rV59PqLefuufYxEXI+L+0YiHj+6s1YvP77Ef/z7y/8f++dcfnP7933537+QfT73dbv/T+j/u/eRuui0AAABgX6qqqnrpY/7x9Pm+33WnAICpyK//VZKXq9VqtVqtPnx1UzXe3WYRERvNber3DHfHXRkAMLs24ouuu0CH5F+0YUQc6boTwExz3P3h9PDRnbVeyrfXfD1Y2W7Px4LsyH+j9/j8jt2mk7SPMZnW/WszBvHqLv1ZnFIfZknOv9/O/+p2+yitd9D5T8tu+Y+2T30qTs5/0M6/5fDk3x+bf6ly/sN95T+QPwAAAAAAzLD89//lqX3/29txvdn8i9mdiZ72/e/KlPoAAAAAAAAAAC/a847/95jx/wAAAGBm1Z/Va38++mTZbp+x6+VXehGvtNYHCpNOllnquh8AAAAAAAAAAAAAUJLh9jG8V3oRcxHxytJSVVX1pald79fzbv+yK33/oWRdP8kDAMC2+0db5/L3IhYi4kr6rb+5paWlqlpYXKqWqsX5/H52NL9QLTY+1+ZpvWx+tIc3xMNRVV/ZQmO7pkmflye1t6+vvq1RNdhDx6ajw8ABICK2X40eekU6ZKrqWHT9LoeXg8f/4ePxz150fT8FAAAADl5VVVUv/Zz38fSdf7/rTgEAU5Ff/9vfC6jVarVarT58dVM13t1mEREbzW3q9wx3x10ZADC7NuKLrrtAh+RftGFEvN51J4CZ1uu6AxyIh4/urPVSvr3m60Ea3z0fC7Ij/43e1nZ5+3HTSdrHmEzr/rUZg3h1l/68NqU+zJKcf7+d/9Xt9lFa76Dzn5bd8q/3c7mD/nQt5z9o599yePLvj82/VDn/4b7yH8gfAAAAAABmWP77/7Lvf/MuAwAAAAAAAMBL5+GjO2v5vNf8/f+Xxqzn/M/DKeffk3+Rcv79Vv5fa603aMw/eP9J/v96dGftR3/4/Hie7jX/+TzTS/esXrpH9NIt9YZp+sy7Nj9u4ebcYFTf0lyvPximY36quQ/jetyI9VjdsW4//X88aT+3o73u6Vy6K2+3n9/RPtxub2x/YUf7XPrdgWoxt5+Jtfh53IgPttrrtvkJ+78wob2a0J7zH3j8FynnP2xc6vyXUnuvNa09+Kz/P4/75nTc7bz323v3Vw9+dybajMHjfWuq9+9EB/3Z+j85Mopf3lq/eebX127fvnku0mTH0vORJi9Yzn8uXR4//7+53Z6f95uP1wefjfad/6zYjOGu+b/ZmK/39+SU+9aFnP8oXXL+H6T28Y//lzn/3R//pzroDwAAAAAAAAAAAAAAADxNVVVbp4i+FxGX0vk/XZ2bCQBMV379r5K8XK1Wq9Vq9eGrm6rx3m0WEfH35jb1e4bfjLsyAGCW/SciPu+6E3RG/gXLv/dXT9/qujPAVN365NOfXrtxY/3mra57AgAAAAAAAAA8qzz+50pj/Oe3ImK5td6O8V/fj5XnHf9zmGceDzD67AN978dmfzToN4YbfyOePv73iXj6+N/DCbc3N6F9NKF97CDmDQsT2see6NGQ83+jMd55nf/x1vDrJYz/2h7zvgQ5/xON+3Od/1db6zXzr/7yjPnPwA+LbEZ/R/5nb3/8i7O3Pvn09PWPr320/tH6zy6url66cPmd1curZz+8fmM9/dthjw9Wzj+Pfe040LLk/HPm8i9Lzv/LqZZ/WXL+X0m1/MuS88/v9+Rflpx//uwj/7Lk/E+mWv5lyfl/PdXyL0vO/1Sq5V+WnP/bqZZ/WXL+p1Mt/7Lk/M+kWv5lyfmfTbX8y5Lzz99wyb8sOf98ZIP8y5LzP59q+Zcl538h1fIvS87/YqrlX5ac/zupln9Zcv6XUi3/suT8L6da/mXJ+X8j1fIvS87/m6mWf1ly/t9KtfzLkvP/dqrlX5ac/3dSLf+y5Py/m2r5lyXn/71Uy78sOf93Uy3/sjz5/X8zZsyYyTNdPzMBAAAAAAAAAAAAAG3TOJy4630EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID/sgMHAgAAAABA/q+NUFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVYUdOBAAAAAAAPJ/bYSqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqoq7N1rjFxneQfws+tdZ+1w2UIIbgiwSUwIyZJdO77EtAZzK2lCWgqEtvQSUnsdDL7Va3NrpBiFlkiN2kjlA3wotyKVLxURoIqqFLlSK5BAIp9opbYhVaCKKLSG9gNUhK3mzPu8OzPe65mNPXPO7yfFjz17ZuadM+/M7n+d/xoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6XfPauQ+PFEXR+q/8ZbIontH6/ZapydYft7/iUq8QAAAA6NdT5a/nn50vOLCGK3Uc89UXffOLCwsLC8Vj333Z8z+ysJA/MFUUk5cVRfmx8OSdf7u985jkgWJiZLTjz6Or3P2mVT4+tsrHx1f5+OZVPn7ZKh+fWOXjF5yAC2xpfz+mvLHt5W8n26e0uKIYLz+2fYlrPTBy2ehofC+nNFJeZ2H8cHGkOFrMFbNdx7ePHSmP//I1rfu6rYj7Gu24r6tbO+SH9x2MNYykc7y9674WbzP84NXF1I9+eN/BN33s8auWmquehq7ba6/zhmtb6/xQuqS91pHisnxOYp2jHeu8eonnZFPXOkfK67V+37vO82tc56bFZV5Uvc/5RDFa/v7R8jyNdX5bL5+nq9NlP76uKIqzi8vuPeaC+ypGi61dl4wuPj8T7R3Zuo3WVnpOMbaufXrNGvZpax7a3r1Pe18T8fxfk643tswaOp+mH3xw8wXP+3r3aWg96uVeK717cKNfK4OyB2NfPFo+6AeX3IPb0+O/7/rl9+CSe2eJPZgfd8cevHa1PTi6eVO55vwkjJTXWdyDO7qO31Te00g5n7x+5T04c/rYyZn593/g5UeO3XPv3L1zx3fNzu65Ze/u2b2zM4ePHJ1Lv1Y824NvazGaXwPXpnMXr4GX9hzbuVUXPrVxr8OJFV6Hkz3HbvTrcKz3wY1cnBfkhXu6/dp4a+ukTzw0WizzGiufnxv7fx3mx93xOhzreB0u+Tllidfh2Bpeh61jTt64tq9Zxjr+W2oNT9fngsmOPdj79UjvHtzor0cGZQ9OpH3xrzcu/7ng6rTeB6fX+/XIpgv2YH646b2ndUn+en/i1nIstS+van3g8s3Fmfm5Uze/757Tp0/tKNK4KJ7bsVd69+vWjsdUXLBfR9e9Xw98+OvfuGqJyyfTuZp4eeuXiWWfq9Yxu25e+bkqP7stfT67Lt1ZpLHBLvb5XOqzeet85iy5wvlsHfOhmf6/Fs+5tOP9d3yZ99/I/T8r72d7vqkHNo2PtV+/m/LZGe96P+5+qsbK966R8r7Pz6zt/Xg8/Xex34+vWOH9eFvPsRv9fjze++Di/Xhkte929Kf3+ZxI++To7Mrvx61jtu1c754cW/H9+Lo0R9L5f1lKCjkXdeyd5fZtvq+xsfH0uMbiHrr36S1dx4+nbNa6r8/urLZPb7iufVub8qNbdLH26VTPsRu9T/P71XL7dGS1775V0/t8TqR9ccUtK+/T1jHndvX/3rklftvx3rl5tT04vmlza83jeRO23+8XtsQevLk4WJwojhaHyo9uLvfTSHlf07vXtgc3p/8u9nvlthX24A09x270Hsyfx5bbeyNjFz74DdD7fE6kffHR3SvvwdYxr9u7sV+73pAuycd0fO3a+/215b7ndVXPaXo6v+fVWuc/7F35e7OtY47eut6cufJ5uildcvkS56n39bvca+pQcXHO07a0zu/fuvx5aq2ndcxH9q1xPx0oiuILdxwov9+b/n7l82e+9cWuv3c50P7Yl/Yt3tYFX3Us9fc+X7jjwLl/vv0n63mMAAy2n5W/bt/a/lzX8TdTa/n7fwAAAGAoRO4fTTOT/wEAAKA2IvfH/xWeyf8AAABQG5H7x9LMGpL/H/y35737p/cXuZm/kMTH4zScfKJ9XHRcP5n+PLWwqHX5az7zj19/+/1ru+/Roih+evu/LHn8g0/EutoeTuuc+nb35RfY9u013f877lo8rrMDOJluPx5P7zb48n8/UV5val97nrv9XDnffPbBB1ofP7+v/efoTj75P+3j/jyVeQ8c/vuu69/wWPv+tj+28uOK633ujVvueMHbFu8vrjdy7bPKh/HRV7ZvN37uzcOvbR9/Ph233Pr/7o8/+7nW8e97ydLrv3906fU/mW73O2n+5Kn25Z3ntPXnuN4fpvXH/cX1bv70V5Zc/yNvaB//SHpePplm7/pf/acvfKrzfMX6434OPN6+Xtz/7F//R3m9uL24/d71T7zqia7z0Xv75z7fvp397/nfTZ3Hx+VxP3nfPd79PLdup3O/hc/+0bmu81z8e/t6f9Oz/ri9k48vvf6betZ5csfW8vrLVcY/PvedJR9vrOfAXz3a9Xge+V46f6+5s7zdiR+n/Zg+/n8Pt2+v96clPPq97veTOP6Tk+3XZdzeTM/6H+5Z/9kXt87d6uu/7Uft9T/yqq92Px//2V7HgR+052rrv/cT3+y6/qe+1X4+Tr13+viJ+TNHokM9mX72z8nvtm/vsoktWy9/xjOf9ez0Xtn757tPnH7n3Kmp2anZopgawh+J93Sv/9Np/ld7nN3o27+vKIr3dnxeu/H17f1XvOj8n7z4ts+8M477p9e1L3/ojvbnrZem4x5Ol59Nz3fczsc/1v582O/6436Wm3m9a3Tmax/es6YD0+P/6DVXlq+ykXPti3vfr6qK1/njz+t+3T/21vb8UjqvC+knM1975dfK43rvP342wkNvab++4yu5uH6/6//L9Hzf+Z327cft5vWmr2O+sq37/TGeny/d3/OTBibbP8XjbHr/KM62Px5HxddUD52/cj3LXNb8++dnjh45fuZ9M6fn5k/PzL//A3cfO3Hm+Om7y5/Nefe7Vrv+4ut7a/n6PjS3Z1dRvtpPtMfT7FKv/+RdBw/tnb3+0Nzhe84cPn3XyblT9x6cnz84d2j++nsOH55772rXP3Jo/46d+27Zu3P63iOH9t+6b98t+6aPHD/RWkZ7UavYM/vu6eOn7i6vMr9/174du3fvmp0+duLQ3P69s7PTZ1a7fvm5abp17fdMn5o7es/pI8fmpuePfGBu/459e/bsXPWn+x07eXh+aubUmeMzZ+bnTs20H8vU6fLi1ue+1a4PLfOf2LLk56mR9NX7jpv25J/P2vKZDy57U+1Den6A6PfTz6L5xl/82e61/Dly/3iaWUPyPwAAADRB5P7NaWbyPwAAANRG5P7L0szkfwAAAKiNyP0TaWYNyf/6//r/+v/6/0H/X/+/Cv1//f8q9P/1/4dh/fr/+v/0b9D6/5H7txRFI/M/AAAANEHk/q1pZvI/AAAA1Ebk/svTzOR/AAAAqI3I/c9IM2tI/tf/1//X/9f/D/r/+v9V6P/r/1eh/6//Pwzr1//X/6d/g9b/j9z/zDSzhuR/AAAAaILI/c9KM5P/AQAAoDYi9z87zUz+BwAAgNqI3D+ZZtaQ/K//r/+v/1+x/79Z/1//X/+/0P/X/69I/1//fxjWr/+v/0//Bq3/H7n/59LMGpL/AQAAoAki9z8nzUz+BwAAgNqI3P/cNDP5HwAAAGojcv8VaWYNyf/6//r/g9P/X6zFDkX/37//r/+v/1/S/9f/r0L/X/9/GNav/6//T/8Grf8fuf95aWYNyf8AAADQBJH7r0wzk/8BAACgNiL3Pz/NTP4HAACA2ojcvy3NrCH5X/9f/39w+v9D9u//6//r/+v/l/T/9f+r0P/X/x+G9ev/6//Tv0Hr/0fu//k0s4bkfwAAAGiCyP1XpZnJ/wAAAFAbkftfkGYm/wMAAEBtRO6/Os2sIflf/1//X/9f/z/o/+v/V6H/r/9fhf6//v8wrF//X/+f/g1a/z9y/wvTzBqS/wEAAKAJIve/KM1M/gcAAIDaiNz/4jQz+R8AAABqI3L/VJpZQ/K//r/+v/6//n/Q/9f/r0L/X/+/Cv1//f9hWL/+v/4//Ru0/n/k/mvSzBqS/wEAAKAJIvdfm2Ym/wMAAEBtRO6/Ls1M/gcAAIDaiNy/Pc2sIflf/1//X/9f/z/o/+v/V6H/r/9fhf6//v8wrF//X/+f/g1a/z9y/0vSzBqS/wEAAKAJIvdfn2Ym/wMAAEBtRO5/aZqZ/A8AAAC1Ebn/hjSzhuR//X/9f/1//f+g/6//X4X+v/5/Ffr/+v/DsH79f/1/+jdo/f/I/S9LM2tI/gcAAIAmiNx/Y5qZ/A8AAAC1Ebn/pjQz+R8AAABqI3L/dJpZQ/K//r/+v/6//n/Q/9f/r0L/X/+/Cv1//f9hWL/+v/4//Ru0/n/k/penmTUk/wMAAEATRO6/Oc1M/gcAAIDaiNw/k2Ym/wMAAEBtRO6fTTNrSP7X/9f/1//X/w/6//r/Vej/6/9Xof+v/z8M69f/1/+nf4PW/4/cvyPNrCH5HwAAAJogcv/ONDP5HwAAAGojcv8taWbyPwAAANRG5P5daWYNyf/6//r/+v/6/0H/X/+/Cv1//f8q9P/1/4dh/fr/+v/0b9D6/5H7d6eZNST/AwAAQBNE7t+TZib/AwAAQG1E7t+bZib/AwAAQG1E7r81zawh+V//X/9f/1//P+j/6/9Xof+v/1+F/r/+/zCs/6L0/x9Y/scA6P9TB4PW/4/cvy/NrCH5HwAAAJogcv8r0szkfwAAAKiNyP2/kGYm/wMAAEBtRO7/xTSzhuR//X/9f/1//f+g/6//X4X+v/5/Ffr/+v/DsH7//r/+P/0btP5/5P79aWYNyf8AAADQBJH7X5lmJv8DAABAbUTuf1WamfwPAAAAtRG5/0CaWUPyv/6//r/+v/5/0P8fkv7/H6zhmItI/1//vwr9f/3/YVi//r/+P/0btP5/5P5Xp5k1JP8DAABAE0Tuf02amfwPAAAAtRG5/7VpZvI/AAAA1Ebk/telmTUk/+v/6//r/+v/B/3/Ien/Dxj9f/3/KvT/9f+HYf36//r/9G/Q+v+R+1+fZtaQ/A8AAABNELn/l9LM5H8AAACojcj9b0gzk/8BAACgNiL335Zm1pD8r/+v//909f83p9vQ/+/Yd/r/Jf1//f/10P/X/y/W0/8fSa9g/f/Spe7PD/v69f/1/+nfoPX/I/f/cppZQ/I/AAAANEHk/tvTzOR/AAAAqI3I/Xekmcn/AAAAUBuR+9+YZtaQ/D/w/f90h/r/y/b/n9mag9j/D/r/HftO/7+k/6//vx76//r/hX//v7JL3Z8f9vXr/+v/079B6/9H7r8zzawh+R8AAACaIHL/r6SZdeb/5f6yDAAAABgKkft/Nc3M3/8DAABAbUTuf1OaWUPy/8D3/xP9/+H79/+D/n/HvtP/L+n/6/+vh/6//n+h/1/Zpe7PD/v69f/1/+nfoPX/I/f/WppZQ/I/AAAANEHk/jenmcn/AAAAUBuR+9+SZib/AwAAQG1E7n9rmllD8r/+v/6//r/+f9D/1/+vQv9f/78K/X/9/2FYv/6//j/9G7T+f+T+u9LMGpL/AQAAoAki978tzUz+BwAAgNqI3P/raWbyPwAAANRG5P7fSDNrSP7X/9f/1//X/w/6//r/Vej/6/9Xof+v/z8M69f/1/+nf4PW/4/c/5tpZg3J/wAAANAEkfvfnmYm/wMAAEBtRO7/rTQz+R8AAABqI3L/b6eZNST/6//r/+v/6/8H/f/h6P+Prn7IRaX/r/9fhf6//v8wrF//X/+f/g1a/z9y/++kmTUk/wMAAEATRO7/3TQz+R8AAABqI3L/3Wlm8j8AAADURuT+d6SZNST/6//r/+v/6/8H/f/h6P8PGv1//f8q9P/1/4dh/fr/+v/0b9D6/5H770kza0j+BwAAgCaI3P97aWbyPwAAANRG5P6DaWbyPwAAANRG5P5DaWYNyf/6//r/+v/6/0H/X/+/Cv1//f8q9P/1/8NKT8ilXv9G9f83Ffr/NNeg9f8j98+lmTUk/wMAAEATRO4/nGYm/wMAAEBtRO6/N81M/gcAAIDaiNz/zjSzhuR//X/9f/1//f+g/6//X4X+v/5/Ffr/+v/DsH7//r/+P/0btP5/5P4jaWYNyf8AAADQBJH735VmJv8DAABAbUTuf3eamfwPAAAAtRG5/2iaWUPyv/6//r/+v/5/0P/X/69C/1//vwr9f/3/YVi//r/+P/0btP5/5P5jaWYNyf8AAADQBJH7j6eZyf8AAABQG5H7T6SZyf8AAABQG5H7T6aZNST/6//r/+v/6/8H/X/9/yr0//X/q9D/1/8fhvXr/+v/079B6/9H7v/9NLOG5H8AAABogsj9p9LM5H8AAACojcj982lm8j8AAADURuT+02lmDcn/+v/6///P3l39enpVcRz+hQCZhMB/i0txd3d3p7i7u7u7S3G4IPSstcjQQbr3mXP2u9fzXHQl00yz05w0/Wbyyav/1/8n/b/+f4T+X/8/Qv+v/z/C+/X/+n/mrdb/5+6/c9zSZP8DAABAB7n77xK32P8AAACwjdz9d41b7H8AAADYRu7+u8UtTfa//l//r//X/yf9v/5/hP5f/z9C/6//X/v9t7/5r/p//T/zVuv/c/ffPW5psv8BAACgg9z994hb7H8AAADYRu7+e8Yt9j8AAABsI3f/veKWJvtf/6//1//r/5P+X/8/Qv+v/x+h/9f/H+H9+n/9P/NW6/9z9987bmmy/wEAAKCD3P33iVvsfwAAANhG7v4b4hb7HwAAALaRu/++cUuT/a//1//r//X/Sf+v/x+h/9f/j9D/6/+P8H79v/6feav1/7n77xe3NNn/AAAA0EHu/vvHLfY/AAAAbCN3/wPiFvsfAAAAtpG7/4FxS5P9r//X/+v/9f9J/6//H6H/1/+P0P/r/4/wfv2//p95q/X/ufsfFLc02f8AAADQQe7+B8ct9j8AAABsI3f/Q+IW+x8AAAC2kbv/oXFLk/2v/9f/6//1/0n/r/8fof/X/4/Q/+v/j/B+/b/+n3mr9f+5+x8WtzTZ/wAAANBB7v6Hxy32PwAAAGwjd/8j4hb7HwAAALaRu/+RcUuT/a//1//r//X/Sf+v/x+h/9f/j9D/6/+P8H79v/6feav1/7n7HxW3NNn/AAAA0EHu/kfHLfY/AAAAbCN3/2Piln/f/1cu8lUAAADAecrd/9i4pcmf/+v/9f/6f/1/0v/r/0fo//X/I/T/+v8jvF//r/9n3mr9f+7+x8UtTfY/AAAAdJC7//Fxi/0PAAAA28jd/4S4xf4HAACAbeTuf2Lc0mT/6//1//p//X/S/+v/R+j/9f8j9P/6/yO8X/+v/2feav1/7v4nxS1N9j8AAAB0kLv/yXGL/Q8AAADbyN3/lLjF/gcAAIBt5O5/atzSZP/r//X/+n/9f9L/6/9H6P/1/yP0//r/I7xf/6//Z95q/X/u/qfFLU32PwAAAHSQu//pcYv9DwAAANvI3f+MuMX+BwAAgG3k7n9m3NJk/+v/9f/6f/1/0v/r/0fo//X/I/T/+v8jvF//r/9n3mr9f+7+Z8UtTfY/AAAAdJC7/9lxi/0PAAAA28jd/5y4xf4HAACAbeTuf27c0mT/6//1//p//X/S/+v/R2zY/5/9COj/9f/6f/2//l//z7TV+v/c/c+LW5rsfwAAAOggd//z4xb7HwAAALaRu/8FcYv9DwAAANvI3f/CuKXJ/tf/6//1//r/pP/X/4/YsP/3/f/Teff/V27xK/p//f8R3q//1/8zb7X+P3f/i+KWJvsfAAAAOsjd/+K4xf4HAACAbeTuf0ncYv8DAADANnL3vzRuabL/9f/6f/2//j/p//X/I/T/m/b/tzn5/r/+X/+v/9f/M221/j93/8vilib7HwAAADrI3f/yuMX+BwAAgG3k7n9F3GL/AwAAwDZy978ybmmy//X/+n/9v/4/6f/1/yP0/5v2/+f6/f9b0v/r/4/wfv2//p95q/X/uftfFbc02f8AAABwWLdiu+fuf3XckX8GAAAAsLbc/a+JW+x/AAAA2Ebu/tfGLU32v/5f/79G/3/j6Vrv1//r/0/6/+Xp//X/I/T/173/v8NpgX5+1mW//zr1//ljqv+nhdX6/9z9r4tbmux/AAAA6CB3/41xi/0PAAAA28jd//q4xf4HAACAbeTuf0Pc0mT/6//1/2v0/z2//39F/3/Vv0/9v/7/WvT/+v+T/n/YZffzR3+/7//r/5m3Wv+fu/+NcUuT/Q8AAAAd5O5/U9xi/wMAAMA2cve/OW6x/wEAAGAbufvfErc02f/6f/2//t/3/5P+X/8/Qv+v/x+h/9f/H+H9+n/9P/NW6/9z9781bmmy/wEAAKCD3P1vi1vsfwAAANhG7v63xy32PwAAAGwjd/874pYm+1//r//X/+v/k/5f/z9C/6//H6H/1/8f4f36f/0/81br/3P3vzNuabL/AQAAoIPc/e+KW+x/AAAA2Ebu/nfHLfY/AAAAbCN3/3vilib7X/+v/9f/6/+T/l//P0L/r/8fof/X/x/h/fp//T/zVuv/c/e/N25psv8BAACgg9z974tb7H8AAADYRu7+98ct9j8AAABsI3f/B+KWJvtf/6//1//r/5P+X/8/Qv+v/x+h/9f/H+H9+n/9P/NW6/9z938wbmmy/wEAAKCD3P0filvsfwAAANhG7v4Pxy32PwAAAGwjd/9H4pYm+1//v3j/f8PVv0//r//X/19A/39T/EdN//9/0f/r/0fo//X/R3i//l//z7zV+v/c/R+NW5rsfwAAAOggd//H4hb7HwAAALaRu//jcYv9DwAAANvI3f+JuKXJ/tf/L97/n67+ffp//b/+3/f/V6P/1/+P0P/r/4/wfv2//p95q/X/ufs/Gbc02f8AAADQQe7+T8Ut9j8AAABsI3f/p+MW+x8AAAC2kbv/Mzff2/7rbzTZ//p//b/+X/+f9P/6/xH6f/3/CP2//v8I79f/6/+Zt1r/f7b7r5w+G7c02f8AAADQQe7+z8Ut9j8AAABsI3f/5+MW+x8AAAC2kbv/C3FLk/2v/9f/6//1/0n/r/8fof/X/4/Q/+v/j/B+/b/+n3mr9f+5+78YtzTZ/wAAANBB7v4vxS32PwAAAGwjd/+X4xb7HwAAALaRu/8rcUuT/a//1//v1f+fpXj6/zMX3f/f8aT/P+n/z53+X/9/0v8Pu+x+/ujv1//r/5m3Wv+fu/+rcUuT/Q8AAAAd5O7/Wtxi/wMAAMA2cvd/PW6x/wEAAGAbufu/Ebc02f/6f/3/Xv3/Gf3/Gd//P6P/v770//r/Efp//f8R3q//1/8zb7X+P3f/N+OWJvsfAAAAOsjd/624xf4HAACAbeTu/3bcYv8DAADANnL3fyduabL/9f/6f/2//j/p//X/I/T/+v8R+n/9/39yp4Xer//X/zNvtf4/d/9345Ym+x8AAAA6yN3/vbjF/gcAAIBt5O7/ftxi/wMAAMA2cvf/IG5psv/1//p//b/+P+n/9f8j9P/6/xH6f/3/Ed6v/9f/M2+1/j93/w/jlib7HwAAADrI3f+juMX+BwAAgG3k7v9x3GL/AwAAwDZy9/8kbmmy//X/+n/9v/4/6f/1/yP0//r/Efp//f8R3q//1/8zb7X+P3f/T+OWJvsfAAAAOsjd/7O4xf4HAACAbeTu/3ncYv8DAADANnL3/yJuabL/9f/6f/2//j/p//X/I/T/+v8R+n/9/xHer//X/zPvv/X/8f/8F9r/5+7/ZdzSZP8DAABAB7n7fxW32P8AAACwjdz9v45b7H8AAADYRu7+38QtTfa//l//r//X/yf9v/5/hP5f/z9C/6//P8L79f/6f+at9v3/3P2/jVua7H8AAADoIHf/7+IW+x8AAAC2kbv/prjF/gcAAIBt5O7/fdzSZP//r/7/dnEvsf/PJ+j/9f/6f/2//n9B+n/9/wj9v/7/CO/X/+v/mbda/5+7/w9xS5P9DwAAAB3k7v9j3GL/AwAAwDZy9/8pbrH/AQAAYBu5+/8ctzTZ/77/r//X/+v/k/5f/z9C/6//H9G+///nL+v/l3+//l//z7zV+v/c/X+JW5rsfwAAAOggd/9f4xb7HwAAALaRu/9vcYv9DwAAANvI3f/3uKXJ/tf/6//1//r/pP/X/4/Q/+v/R7Tv/33//xDv1//r/5m3Wv+fu/8fAQAA///PAGyG") syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='./bus\x00', 0x691, 0x0, 0xb6, 0x0, &(0x7f00000007c0)) chdir(&(0x7f00000003c0)='./bus\x00') r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x100, 0x4) getdents64(r0, &(0x7f0000000100)=""/216, 0xd8) 24.832069846s ago: executing program 3 (id=990): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="110000000000fbffffff2e00000008000300", @ANYRES32=r2, @ANYBLOB="0a003400020202020202000024002a002d1a0000789681b0fb9e01a7007f000000060000faffffff080602ff7f"], 0x4c}}, 0x0) 23.851172036s ago: executing program 4 (id=1002): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x1400c, &(0x7f0000000000)={[{@test_dummy_encryption}, {@init_itable}, {@norecovery}]}, 0x3, 0x470, &(0x7f0000000dc0)="$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") mount$bind(0x0, 0x0, 0x0, 0x3a09007, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000002c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x4b) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, 0x0) 23.496979254s ago: executing program 3 (id=1006): setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000040), 0x10) r0 = memfd_create(&(0x7f0000000080)=',\xea\x00', 0x4) ftruncate(r0, 0x7000000) r1 = dup(r0) preadv2(r1, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/83, 0x200000}], 0x1000000000000146, 0x300, 0x0, 0x0) 23.175687177s ago: executing program 32 (id=1006): setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000040), 0x10) r0 = memfd_create(&(0x7f0000000080)=',\xea\x00', 0x4) ftruncate(r0, 0x7000000) r1 = dup(r0) preadv2(r1, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/83, 0x200000}], 0x1000000000000146, 0x300, 0x0, 0x0) 22.686018572s ago: executing program 4 (id=1015): r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), r0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', r1, 0x4, 0x0, 0x0, 0x45, 0x0, @dev={0xfe, 0x80, '\x00', 0x3a}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x80, 0x0, 0x1, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000180)={'ip6tnl0\x00', r2, 0x0, 0x0, 0x0, 0x4, 0x8, @remote, @dev={0xfe, 0x80, '\x00', 0xe}, 0x0, 0x1, 0xfffffffe, 0x1}}) 21.935782178s ago: executing program 4 (id=1017): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x200, 0xfffffffd}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f00000002c0)={0x100042, 0xf7, 0x1}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x42}, 0x10) 21.530223776s ago: executing program 33 (id=1017): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x200, 0xfffffffd}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f00000002c0)={0x100042, 0xf7, 0x1}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x42}, 0x10) 7.66902076s ago: executing program 1 (id=1068): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r0) pipe(&(0x7f0000000140)) r1 = fsopen(&(0x7f0000000080)='binfmt_misc\x00', 0x1) mount$9p_fd(0x0, &(0x7f0000000680)='./file0\x00', &(0x7f0000000380), 0x14c98, &(0x7f0000002780)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 7.417985978s ago: executing program 1 (id=1069): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/class/fcloop/ctl/add_remote_port\x00', 0x1, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5) write(r0, &(0x7f0000000600)='wwnn', 0x4) 7.267096647s ago: executing program 1 (id=1071): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e21, @rand_addr=0x64010102}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000080)={r2, 0x9}, &(0x7f0000000100)=0x8) 6.447704987s ago: executing program 2 (id=1077): mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./proc\x00', 0x180) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2002, 0x0) write(r0, &(0x7f0000000000)='7', 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x6, 0x4, 0x4096, 0x89, 0x0, 0xffffffffffffffff, 0x100000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5}, 0x50) 6.236880628s ago: executing program 1 (id=1078): sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000128bd7000fedbdf250900000028000a800800020002000080080001000000000014000880080001000010000008000100"], 0x3c}, 0x1, 0x0, 0x0, 0x4004000}, 0x24040021) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000013000100000000000000000007000001", @ANYRES32=r1, @ANYBLOB="00000000000000001c001a8018000580"], 0x3c}, 0x1, 0x0, 0x0, 0x4080}, 0x4004000) 5.820765469s ago: executing program 2 (id=1080): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @empty}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x20000001) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x85, &(0x7f00000008c0)={0x0, @in={{0x2, 0x4e21, @local}}, 0x2400, 0xfffa}, 0x90) 5.751199852s ago: executing program 1 (id=1081): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000009c0)={0x24, &(0x7f0000000480)=ANY=[@ANYBLOB="40000f000000012721dcfe14c639a500ba17162716"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r1, 0x5b15, 0x0) 5.471393527s ago: executing program 5 (id=1082): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000140)=0x881) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001a80)={0x4, 0x0, &(0x7f0000001900)=[@enter_looper], 0x1, 0x0, &(0x7f0000000a80)='h'}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 5.112206146s ago: executing program 2 (id=1084): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x10008, &(0x7f0000000080)={[{@debug}, {@resuid={'resuid', 0x3d, 0xee01}}]}, 0xff, 0x49e, &(0x7f0000000f40)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x8042, 0x81) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f0000000200)={0x17c04, 0xffffffffffffffff, 0xfdfd, 0x973f, 0x83, 0x3}) 4.945352649s ago: executing program 5 (id=1086): syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='fd/3\x00') r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000c40)={0x20002012}) 4.560822023s ago: executing program 5 (id=1088): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000020c0)={@val={0x1c, 0xf5}, @val, @mpls={[{}], @ipv6=@tcp={0x4, 0x6, "71f390", 0x3d, 0x6, 0x1, @loopback, @mcast2, {[], {{0x4e22, 0x4e24, 0x41424344, 0x41424344, 0x1, 0x0, 0x8, 0x80, 0x37b, 0x0, 0x82, {[@timestamp={0x8, 0xa, 0x40, 0x3}]}}, {"f9ad7a703e0bf5c7a89a4b3bd799b809f5ae08be2a78aa2e09872634b8"}}}}}}, 0x77) 4.3209751s ago: executing program 2 (id=1090): r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000006d000100"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000180034801400350069"], 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 4.21976381s ago: executing program 0 (id=1091): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000040de28421100000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000140)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="000085000000854eb1"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_open_dev$hidraw(&(0x7f0000000000), 0x15e, 0x800) 4.080241447s ago: executing program 2 (id=1092): syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$OCFS2_IOC_RESVSP64(r1, 0x4008c001, 0x0) 3.914513299s ago: executing program 5 (id=1093): syz_mount_image$f2fs(&(0x7f00000000c0), &(0x7f0000000080)='./file1\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="6c617a7974696d652c6e6f696e6c696e655f78617474722c6c617a7974696d652c6e6f626172726965722c6163746976655f6c6f67733d342c757365725f78617474722c6d6f64653d6c66732c616c6c6f635f6d6f64653d64656661756c742c00be9ee044c45511e65887f6fac9eba6d787c3684a836f23dbf8ad3d2de2d5931c08b4d8bde7e8acbbf3bf3326f2faa5952a332ad2ced40c98a2affa2dad4d6c3f9ff3ffa81e45095548ab6200f069d0f63d20fd71d3043b0dd5c4cf9785f3f531abc19bc1678f5e0b33006bd1049ca45fd8500d67a5aa6e1c23d900000000007867738729e703bb122283fb2fae9813a0cfefcdf3dc968af1cf80e96649d943198a96d9b1af9c91506b30922be8537f54e65cf60c6b6a5798955796aea325770d6ccc93a95fad93b2c7bad114fcbc55036a301c23b07073c71555791db8919235022bb0ee4294211ab9b43f3fbedecd223722d937aa22b31e2e9c97e5ea94e4ab83d4e5811c7556813c334aec856af0a0c12b3c93ba5aa906c6e2268a0c6cbbb13f496d87c608604eb02b2c031d5ae40dfc4e1c24ecafb84f531cbc4b2ee41cbda0dbf2"], 0x1, 0x5531, &(0x7f0000000b00)="$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") r0 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x80) ftruncate(r0, 0x2007ffc) write$ppp(r0, &(0x7f0000000200)="3e67f3c128", 0x5) sendfile(r0, r0, 0x0, 0x800000009) 3.508636058s ago: executing program 6 (id=1018): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r0 = syz_create_resource$binfmt(&(0x7f0000000340)='./sys/kernel/reboot/mode\x00') r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) write$binfmt_script(r1, &(0x7f0000000080)={'#! ', './file1'}, 0xb) 3.300899618s ago: executing program 6 (id=1094): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x50, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x50}}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f00000500070084000000060005"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r1 = socket$netlink(0x10, 0x3, 0xc) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 3.177067642s ago: executing program 6 (id=1095): syz_emit_ethernet(0x36, &(0x7f0000000180)={@local, @random="b0c942034375", @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @initdev={0xac, 0x1e, 0xfe, 0x0}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) r0 = socket$inet6(0xa, 0x3, 0x3) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000180)={{{@in=@empty, @in6=@private1, 0x4f23, 0x0, 0x4e23, 0x2, 0xa, 0x2a11bad3d5f03f24, 0x10, 0x89, 0x0, 0xee01}, {0xfffffffe, 0x2, 0xfffffffffffffffc, 0x1, 0xfffffffffffffffb, 0x3, 0x9, 0x7fff}, {0x4800000, 0xfffffffffffffffe, 0x4, 0x9}, 0xd8, 0x0, 0x1, 0x0, 0x2, 0x3}, {{@in=@private=0xa010100, 0x210000, 0x2b}, 0xa, @in=@loopback, 0x0, 0x0, 0x0, 0x17, 0x0, 0x0, 0xfffffffb}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0xffe0) 3.021531172s ago: executing program 6 (id=1096): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f00000001c0)={[{@acl}, {@heartbeat_none}, {@err_cont}, {@coherency_full}, {@resv_level}, {@localflocks}, {@coherency_full}, {@inode64}]}, 0x1, 0x4444, &(0x7f0000004480)="$eJzs3bFvFFcCB+A3Y3PYHHA2R8FJJ91Kh3Snu5NlU11ipBhjMDY4RCSgKCmWtb2Ak7UX2esoBYXTIaWKlCJKgRIpnSvkIi35E9KkJG2QkiJNpEgojnZ31vaMd+XF8dqAvk/Cs/PevDfP/u28fVsMEycqd+aWcnNLucJCrjxza+lM7oNyaXm+GOJ9ctDnpz2dyKne57tB9vvv6vmLb944E8I3s989WV9fXw9V3aGpoS2vf/n53szWbUOcaVPtt3lve+WdEMLJbeOq6gohvP11/fW5pGw02faGEI6HEKIQwo17H9/M7dFoHj4uns0/nbq/Nnx6cvXBWuvfPQrh89Lf/nd7/sd/dg1//589Oj0AAAAAAAAAAAAAAAAAAC+48WtXr78xOBQeRaF7Ndp+v+54sm11f+z6nvlH539ZAAAAAAAAAAAAAAAAAAAAeE5t3v+fi040uf9/LNmOtGi//lrnx0jnTLx+dezC4FDy/PdoW/3/k6KfznWF/ibPfc8+//1cpn3z579vP89uNcbXOG9fiOKB1H4cDwyE8GXy4PdT0ZG4VF6q/PdWeXlhds+G8cJqln8qneSB/u3mP5rpv/PP///rtndTdf/m3r3FXmrp/LtaHvfVR1Fb+Z/PtNuP/Nm9dP7dtbLerQeM1CeAav6fdO+c/1im/07lfzyEkIuqY82lZoDqGqZa3mq9Qlo6/0O1stTUmfwhW13/v2byv5Dp/6Dm/5XsBxFNpfP/U62sJ3XE5vXfH+98/V/M9H8Q+VfHv+Lzvy3p/A/XC7tTh9T+kpvz/w9JbfP8xzP9/+H8e5sXX4+TcR6PUu+A1ahe3ur/qyMtnX/PtvrN739xW+u/S5n2+/X9r3Hexve/xvT/76j+/Y/m0vm3uNieYf03kWnX6fl/pLb+Y7fS+R+plaXXzn21n+3mP7n5svZm6lT+tVVJTyP/zfnkt8P18i+s/9qSzv/P9cJ46xErtZ+19V+08/r/cqb/g1j/Vce/Enf2rC+LdP5HWx5Xzf/bNj7/r2TadT7/EAat9Xctnf+xlsfVrv+enfOfyrTrdP7/Coc62T0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAc2802faFKB5I7cfxwEAI55P9U+FINF2YzU+XyjPvL4UwlpTnwonodqk8XSjl5xbKs8V8oVQqz4RwIak/GXqipVK5kp8v3L240VdvdKdYWKxMFwuVEMJ4Uv73cKzR1/RcZb5wN4RwaaPuL3F58e6dwkJ+dm7x1cHBwcEwsTGG/qj4YaW4UKmfvV4bwuRG275oy+Bq1Zc3xnI0eq+8vLhQKNXKr2xpUyrPFEpb2kwldZ+G/qiyuLwwU6gU86Xy7cb5DtJIsh2buPbWtStD2+pvRvXt6P4OCwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBn9Gj4lc9CCN31vTiEkIuSF1HyL+Xh4+LZ/NOp+2vDpydXH6w9aXZMU717PnQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA39mBAwEAAAAAIP/XRqiqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqrCLh2jRAxEYQB+MxbaCB7DKiSdbUQRLYwInkCP4WH0FrZewjtYWNhayMJmsizJBrbZLZbvax7Jz8x7MA8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOAg3Dx2Tw91E5FOT/6PIz5fvr7X87tS3y43nz/aw4zszu19d3VdN+Xd0yS/KL9+2rxM/35fn2NVPyKi/x68j/ZkvE+9aZ+xuX2bm2/oexYpVxHRlvw85VxV290FAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALNiBAwEAAAAAIP/XRqiqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqrCDhwLAAAAAAjzt46ibwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAXwEAAP//F2UcOA==") syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x380c07b, 0x0, 0x1, 0x0, &(0x7f0000000140)) syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0x61, &(0x7f00000001c0)=ANY=[], 0x1, 0x0, &(0x7f00000000c0)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000000ec0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000300)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x2, 0x0) 2.907058285s ago: executing program 1 (id=1097): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40400, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x80000, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r0, 0x4004743b, &(0x7f0000000180)) 2.05798352s ago: executing program 2 (id=1098): sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="300000002d0001002abd70000000000008000000", @ANYRES32], 0x30}], 0x1}, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) 1.95284753s ago: executing program 0 (id=1099): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="02000000040000000400000001"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="09000000040000008000000040"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000010000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000500000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000001c0)={r1, 0xffffffffffffffff, 0x60000000}, 0xc) 1.809070988s ago: executing program 0 (id=1100): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./tracing/uprobe_events\x00', 0x401, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff002, 0x0, 0x2000000000032, 0xffffffffffffffff, 0x0) write(r0, &(0x7f0000000300)='r:', 0x2) 1.677318764s ago: executing program 0 (id=1101): syz_mount_image$udf(&(0x7f0000000080), &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x4040, &(0x7f00000015c0)=ANY=[], 0x2, 0xc2d, &(0x7f00000001c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='pids.current\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0xc0086c43, &(0x7f0000000080)=0x6ff) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040), 0x208e24b) 1.493592669s ago: executing program 5 (id=1102): r0 = syz_open_dev$mtd(&(0x7f0000000000), 0x0, 0x2) write(0xffffffffffffffff, &(0x7f0000000200)="0000000000000000000001000000000000000000703100"/164, 0x98) ioctl$BLKPG(r0, 0x1269, &(0x7f00000000c0)={0x1, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x10000, 0x1}}) write(0xffffffffffffffff, &(0x7f0000000300)="000000000000000000000000000000000100"/160, 0x98) ioctl$BLKPG(r0, 0x1269, &(0x7f00000001c0)={0x2, 0x0, 0x0, &(0x7f00000003c0)={0x0, 0x0, 0x1}}) 559.703301ms ago: executing program 6 (id=1103): sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010028bd7000fddbdf251000000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900080000002c0000001400040076657468305f6d616376746170000000040017"], 0x40}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001000010400000000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="90010000305200001c0012ff030000d0899047ff95ef33000c0002800800"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00000018"], 0x50}}, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) 558.230031ms ago: executing program 0 (id=1104): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./trace/error_log\x00', 0x20000, 0x4) pread64(r0, &(0x7f00000000c0)=""/144, 0x90, 0x7d) pread64(r0, &(0x7f00000001c0)=""/49, 0x31, 0x5) 256.981089ms ago: executing program 0 (id=1105): socket(0x2c, 0x3, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000000)={r1, 0x1, 0x6, @broadcast}, 0x10) close(0x4) 0s ago: executing program 5 (id=1106): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) close(r0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1a1102, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22ffe6) ioctl$TUNGETVNETLE(r0, 0x8010743f, &(0x7f0000000180)) kernel console output (not intermixed with test programs): s_readahead: readahead error at page 4 @ nid 89 [ 100.755239][ T5271] syz.0.357 (5271): drop_caches: 2 [ 100.766026][ T5268] attempt to access beyond end of device [ 100.766026][ T5268] loop4: rw=524288, want=56, limit=16 [ 100.833669][ T5268] attempt to access beyond end of device [ 100.833669][ T5268] loop4: rw=0, want=34359738368, limit=16 [ 100.834856][ T5281] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 100.834856][ T5281] The task syz.3.362 (5281) triggered the difference, watch for misbehavior. [ 100.868732][ T26] audit: type=1800 audit(1791034746.224:7): pid=5268 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.359" name="file2" dev="loop4" ino=89 res=0 errno=0 [ 101.044424][ T5286] loop2: detected capacity change from 0 to 64 [ 101.237334][ T5286] BFS-fs: bfs_fill_super(): loop2 is unclean, continuing [ 101.280188][ T5286] BFS-fs: bfs_fill_super(): Impossible last inode number 2097656 > 513 on loop2 [ 101.482561][ T5286] device-mapper: ioctl: ioctl interface mismatch: kernel(4.45.0), user(3538721912.1090652605.3789554960), cmd(2) [ 101.890230][ T5298] input: syz1 as /devices/virtual/input/input6 [ 101.933026][ T5298] input: failed to attach handler leds to device input6, error: -6 [ 102.101316][ T23] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 102.109793][ C0] sched: RT throttling activated [ 102.433972][ T5304] overlayfs: failed to set xattr on upper [ 102.470110][ T23] usb 3-1: not running at top speed; connect to a high speed hub [ 102.489550][ T5304] overlayfs: ...falling back to index=off,metacopy=off. [ 102.740202][ T23] usb 3-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice= 1.00 [ 102.764989][ T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.814772][ T23] usb 3-1: Product: syz [ 102.819087][ T23] usb 3-1: Manufacturer: syz [ 102.851175][ T23] usb 3-1: SerialNumber: syz [ 102.912212][ T23] keyspan 3-1:1.0: Keyspan 4 port adapter converter detected [ 102.951577][ T23] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 103.008052][ T23] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 103.064700][ T23] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 103.143662][ T23] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 103.170099][ C1] usb 3-1: malformed indat packet [ 103.523508][ T5328] loop1: detected capacity change from 0 to 1024 [ 103.671039][ T5328] hfsplus: unable to parse mount options [ 104.208833][ T5317] loop4: detected capacity change from 0 to 32768 [ 104.294135][ T5317] JBD2: Ignoring recovery information on journal [ 104.369475][ T5354] netlink: 16 bytes leftover after parsing attributes in process `syz.0.388'. [ 104.382438][ T5317] ocfs2: Mounting device (7,4) on (node local, slot 0) with writeback data mode. [ 104.526723][ T4198] ocfs2: Unmounting device (7,4) on (node local) [ 104.758916][ T5363] loop1: detected capacity change from 0 to 256 [ 104.834701][ T5365] mmap: syz.3.394 (5365): VmData 35377152 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 104.856670][ T4265] usb 3-1: USB disconnect, device number 3 [ 104.901514][ T5363] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xfcc0b04e, utbl_chksum : 0xe619d30d) [ 104.929559][ T4265] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 104.999508][ T4265] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 105.076717][ T4265] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 105.172211][ T4265] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 105.233825][ T4265] keyspan 3-1:1.0: device disconnected [ 105.909005][ T5402] device-mapper: table: 248:1: target type multipath must appear alone in table [ 105.948307][ T5408] loop1: detected capacity change from 0 to 256 [ 105.992010][ T5402] device-mapper: ioctl: error adding target to table [ 106.012334][ T5410] loop4: detected capacity change from 0 to 512 [ 106.056603][ T5410] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 106.170284][ T5410] EXT4-fs error (device loop4): ext4_iget_extra_inode:4573: inode #15: comm syz.4.412: corrupted in-inode xattr [ 106.225376][ T5410] EXT4-fs error (device loop4): ext4_orphan_get:1415: comm syz.4.412: couldn't read orphan inode 15 (err -117) [ 106.300574][ T5410] EXT4-fs (loop4): mounted filesystem without journal. Opts: journal_dev=0x0000000000000003,inode_readahead_blks=0x0000000008000000,quota,noload,user_xattr,mblk_io_submit,noinit_itable,noblock_validity,max_dir_size_kb=0x0000000000000009,init_itable=0x0000000000000fff,,errors=continue. Quota mode: writeback. [ 106.431403][ T5420] netlink: 4 bytes leftover after parsing attributes in process `syz.1.416'. [ 106.923920][ T5431] input: syz1 as /devices/virtual/input/input7 [ 107.040823][ T5439] syz.0.422 uses obsolete (PF_INET,SOCK_PACKET) [ 107.164813][ T5442] loop1: detected capacity change from 0 to 512 [ 107.171622][ C0] net_ratelimit: 42 callbacks suppressed [ 107.198007][ T5445] loop3: detected capacity change from 0 to 2048 [ 107.213133][ T5444] netlink: 8 bytes leftover after parsing attributes in process `syz.4.427'. [ 107.256328][ T5442] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 107.352434][ T5445] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 107.364015][ T5442] EXT4-fs error (device loop1): ext4_orphan_get:1436: comm syz.1.425: bad orphan inode 131083 [ 107.407489][ T5442] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsv0,dioread_lock,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none. [ 107.478270][ T5445] ext4 filesystem being mounted at /92/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 107.727196][ T5456] loop4: detected capacity change from 0 to 1024 [ 107.829840][ T5461] netlink: 4 bytes leftover after parsing attributes in process `syz.0.434'. [ 107.853562][ T5456] EXT4-fs (loop4): Ignoring removed orlov option [ 107.951395][ T5456] EXT4-fs (loop4): mounted filesystem without journal. Opts: block_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,norecovery,,errors=continue. Quota mode: none. [ 108.046304][ T5470] netlink: 8 bytes leftover after parsing attributes in process `syz.1.435'. [ 108.402346][ T5482] Illegal XDP return value 4294967274, expect packet loss! [ 108.545731][ T5490] loop3: detected capacity change from 0 to 128 [ 108.775539][ T5486] loop2: detected capacity change from 0 to 4096 [ 108.880123][ T5499] netlink: 104 bytes leftover after parsing attributes in process `syz.3.448'. [ 108.910423][ T5486] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 108.999682][ T5486] ntfs3: loop2: ntfs_set_state r=3 failed, -22. [ 109.055196][ T5506] loop4: detected capacity change from 0 to 2 [ 109.224739][ T5507] ntfs3: loop2: ino=1e, "file1" encrypted i/o not supported [ 109.316699][ T5509] netlink: 35 bytes leftover after parsing attributes in process `syz.3.452'. [ 109.326252][ T26] audit: type=1800 audit(1791034754.674:8): pid=5507 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.442" name="file1" dev="loop2" ino=30 res=0 errno=0 [ 109.389936][ T5509] netlink: 16 bytes leftover after parsing attributes in process `syz.3.452'. [ 109.442394][ T4254] ntfs3: loop2: ntfs3_write_inode r=3 failed, -22. [ 109.465779][ T4189] ntfs3: loop2: ntfs_set_state r=3 failed, -22. [ 109.493373][ T4189] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 109.552772][ T4189] ntfs3: loop2: ntfs_set_state r=3 failed, -22. [ 109.599676][ T4254] ntfs3: loop2: ntfs3_write_inode r=3 failed, -22. [ 109.615151][ T4189] ntfs3: loop2: ntfs_evict_inode r=3 failed, -22. [ 109.944113][ T5525] loop1: detected capacity change from 0 to 512 [ 110.038566][ T5528] netlink: 'syz.2.461': attribute type 12 has an invalid length. [ 110.060038][ T23] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 110.080395][ T5528] netlink: 'syz.2.461': attribute type 29 has an invalid length. [ 110.116212][ T5525] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 110.133427][ T5528] netlink: 148 bytes leftover after parsing attributes in process `syz.2.461'. [ 110.142452][ T5525] ext4 filesystem being mounted at /115/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 110.160092][ T5528] netlink: 'syz.2.461': attribute type 1 has an invalid length. [ 110.175195][ T5528] netlink: 'syz.2.461': attribute type 1 has an invalid length. [ 110.190862][ T5528] netlink: 'syz.2.461': attribute type 2 has an invalid length. [ 110.444742][ T23] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 110.486884][ T23] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 110.560083][ T23] usb 1-1: New USB device found, idVendor=0451, idProduct=5416, bcdDevice= 1.00 [ 110.616145][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.712237][ T23] usb-storage 1-1:1.0: USB Mass Storage device detected [ 110.759681][ T23] usb-storage 1-1:1.0: Quirks match for vid 0451 pid 5416: 2 [ 110.857786][ T23] scsi host1: usb-storage 1-1:1.0 [ 110.958118][ T23] usb 1-1: USB disconnect, device number 2 [ 111.130254][ T5564] loop2: detected capacity change from 0 to 128 [ 111.242417][ T5564] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 111.275371][ T5564] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 111.936879][ T5589] loop4: detected capacity change from 0 to 16 [ 112.011979][ T5589] erofs: (device loop4): mounted with root inode @ nid 36. [ 112.053145][ T5589] erofs: (device loop4): z_erofs_readahead: readahead error at page 1 @ nid 89 [ 112.125352][ T5589] erofs: (device loop4): z_erofs_readahead: readahead error at page 0 @ nid 89 [ 112.201528][ T26] audit: type=1800 audit(1791034757.564:9): pid=5589 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.486" name="file2" dev="loop4" ino=89 res=0 errno=0 [ 112.289854][ C1] net_ratelimit: 46 callbacks suppressed [ 112.538347][ T5608] loop4: detected capacity change from 0 to 512 [ 112.631432][ T5612] loop2: detected capacity change from 0 to 128 [ 113.102620][ T5624] loop1: detected capacity change from 0 to 16 [ 113.136476][ T5622] input: syz1 as /devices/virtual/input/input8 [ 113.185952][ T5624] erofs: (device loop1): mounted with root inode @ nid 36. [ 113.281245][ T5624] attempt to access beyond end of device [ 113.281245][ T5624] loop1: rw=524288, want=32, limit=16 [ 113.319300][ T5624] erofs: (device loop1): z_erofs_lz4_decompress: failed to decompress -23 in[46, 4050] out[4096] [ 113.365552][ T26] audit: type=1800 audit(1791034758.714:10): pid=5624 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.499" name="file2" dev="loop1" ino=89 res=0 errno=0 [ 113.666462][ T5635] loop4: detected capacity change from 0 to 64 [ 114.093717][ T23] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 114.144477][ T5605] IPVS: You probably need to specify IP address on multicast interface. [ 114.172945][ T5648] FAULT_INJECTION: forcing a failure. [ 114.172945][ T5648] name failslab, interval 1, probability 1, space 0, times 0 [ 114.198137][ T5605] IPVS: Error connecting to the multicast addr [ 114.243906][ T5648] CPU: 1 PID: 5648 Comm: syz.0.510 Not tainted syzkaller #0 [ 114.251344][ T5648] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 114.261511][ T5648] Call Trace: [ 114.264840][ T5648] [ 114.267795][ T5648] dump_stack_lvl+0x188/0x250 [ 114.272504][ T5648] ? show_regs_print_info+0x20/0x20 [ 114.277732][ T5648] ? load_image+0x410/0x410 [ 114.282371][ T5648] ? __might_sleep+0xf0/0xf0 [ 114.287010][ T5648] ? __lock_acquire+0x7d40/0x7d40 [ 114.292071][ T5648] should_fail+0x383/0x4b0 [ 114.296655][ T5648] should_failslab+0x5/0x20 [ 114.301183][ T5648] slab_pre_alloc_hook+0x51/0xc0 [ 114.306331][ T5648] kmem_cache_alloc_trace+0x47/0x290 [ 114.311820][ T5648] ? cuse_channel_open+0x53/0x610 [ 114.316884][ T5648] cuse_channel_open+0x53/0x610 [ 114.321856][ T5648] ? fuse_dax_writepages+0xe0/0xe0 [ 114.326993][ T5648] misc_open+0x31f/0x390 [ 114.331382][ T5648] chrdev_open+0x585/0x5f0 [ 114.335931][ T5648] ? cd_forget+0x160/0x160 [ 114.340586][ T5648] ? fsnotify_perm+0x3a7/0x560 [ 114.345380][ T5648] ? cd_forget+0x160/0x160 [ 114.349911][ T5648] do_dentry_open+0x7f7/0xf90 [ 114.354664][ T5648] ? vfs_open+0x2b/0x80 [ 114.358847][ T5648] path_openat+0x2718/0x2fb0 [ 114.363494][ T5648] ? __kasan_slab_alloc+0xa9/0xc0 [ 114.368563][ T5648] ? do_filp_open+0x400/0x400 [ 114.373290][ T5648] do_filp_open+0x1df/0x400 [ 114.377843][ T5648] ? vfs_tmpfile+0x300/0x300 [ 114.382505][ T5648] ? _raw_spin_unlock+0x24/0x40 [ 114.387394][ T5648] ? alloc_fd+0x59e/0x650 [ 114.391943][ T5648] do_sys_openat2+0x14b/0x500 [ 114.396749][ T5648] ? __lock_acquire+0x7d40/0x7d40 [ 114.401936][ T5648] ? do_sys_open+0xe0/0xe0 [ 114.406408][ T5648] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 114.412555][ T5648] ? lock_chain_count+0x20/0x20 [ 114.417445][ T5648] __x64_sys_openat+0x135/0x160 [ 114.422425][ T5648] do_syscall_64+0x4c/0xa0 [ 114.426865][ T5648] ? clear_bhb_loop+0x30/0x80 [ 114.431566][ T5648] ? clear_bhb_loop+0x30/0x80 [ 114.436354][ T5648] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 114.442267][ T5648] RIP: 0033:0x7f1210cd0159 [ 114.442329][ T5648] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 114.442348][ T5648] RSP: 002b:00007f120ef28028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 114.442374][ T5648] RAX: ffffffffffffffda RBX: 00007f1210f57fa0 RCX: 00007f1210cd0159 [ 114.442390][ T5648] RDX: 0000000000000002 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 114.466633][ T5648] RBP: 00007f1210d6706b R08: 0000000000000000 R09: 0000000000000000 [ 114.483290][ T5648] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 114.483309][ T5648] R13: 00007f1210f58038 R14: 00007f1210f57fa0 R15: 00007fffec49f0a8 [ 114.483344][ T5648] [ 114.710362][ T23] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 114.738245][ T23] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 114.764810][ T23] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 114.799026][ T23] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 114.826373][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.868547][ T23] usb 3-1: config 0 descriptor?? [ 115.375062][ T23] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 115.472707][ T23] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 115.600059][ T5167] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 116.026656][ T5167] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 116.051635][ T5167] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 116.155526][ T5169] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 116.184456][ T5167] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 116.224663][ T5167] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 116.244955][ T5167] usb 2-1: SerialNumber: syz [ 116.409959][ T5169] usb 4-1: Using ep0 maxpacket: 16 [ 116.546413][ T5167] usb 2-1: 0:2 : does not exist [ 116.552284][ T5169] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 116.565714][ T5169] usb 4-1: config 0 has no interface number 0 [ 116.588083][ T5169] usb 4-1: config 0 interface 1 altsetting 3 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 116.632165][ T5169] usb 4-1: config 0 interface 1 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 116.672714][ T5167] usb 2-1: USB disconnect, device number 4 [ 116.680706][ T5169] usb 4-1: config 0 interface 1 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 116.746268][ T5169] usb 4-1: config 0 interface 1 has no altsetting 0 [ 116.775120][ T5169] usb 4-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.00 [ 116.817267][ T5169] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.844661][ T5169] usb 4-1: config 0 descriptor?? [ 116.933948][ T5169] usbhid 4-1:0.1: fixing wrong optional hid class descriptors count [ 117.055645][ T5021] udevd[5021]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 117.329887][ C1] net_ratelimit: 38 callbacks suppressed [ 117.355514][ T5169] elan 0003:04F3:074D.0004: failed to start in urb: -90 [ 117.570348][ T5169] elan 0003:04F3:074D.0004: Set report error for parm 6: -71 [ 117.603538][ T5169] elan 0003:04F3:074D.0004: hidraw1: USB HID v0.00 Joystick [HID 04f3:074d] on usb-dummy_hcd.3-1/input1 [ 117.651772][ T5169] elan 0003:04F3:074D.0004: Input device is not registered [ 117.685302][ T5169] elan: probe of 0003:04F3:074D.0004 failed with error -119 [ 117.713825][ T13] usb 3-1: USB disconnect, device number 4 [ 117.804228][ T5169] usb 4-1: USB disconnect, device number 5 [ 118.026192][ T5688] fido_id[5688]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 119.217753][ T5704] loop4: detected capacity change from 0 to 40427 [ 119.268876][ T5704] F2FS-fs (loop4): invalid crc value [ 119.309358][ T5704] F2FS-fs (loop4): Found nat_bits in checkpoint [ 119.417630][ T5704] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 119.507898][ T4198] attempt to access beyond end of device [ 119.507898][ T4198] loop4: rw=2049, want=45104, limit=40427 [ 120.446208][ T5746] loop3: detected capacity change from 0 to 4096 [ 120.450236][ T4231] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 120.554849][ T5746] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 120.660310][ T5746] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 120.710149][ T4231] usb 2-1: Using ep0 maxpacket: 8 [ 120.830179][ T4231] usb 2-1: config 0 has no interfaces? [ 120.835993][ T4231] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 120.881030][ T4231] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.943454][ T4231] usb 2-1: config 0 descriptor?? [ 120.956071][ T144] ntfs3: loop3: ino=5, directory corrupted [ 120.996578][ T144] ntfs3: loop3: ino=1e, Internal error [ 121.018167][ T144] ntfs3: loop3: ntfs3_write_inode r=1e failed, -22. [ 121.449548][ T5755] device macvtap1 entered promiscuous mode [ 121.475554][ T5755] device vlan0 entered promiscuous mode [ 121.551614][ T5755] team0: Device macvtap1 failed to register rx_handler [ 121.597183][ T5755] device vlan0 left promiscuous mode [ 121.729991][ T5759] geneve1 speed is unknown, defaulting to 1000 [ 121.776445][ T5759] geneve1 speed is unknown, defaulting to 1000 [ 121.783802][ T23] usb 2-1: USB disconnect, device number 5 [ 121.822933][ T5750] loop2: detected capacity change from 0 to 40427 [ 121.846674][ T5759] geneve1 speed is unknown, defaulting to 1000 [ 121.883660][ T5750] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 121.908754][ T5759] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 121.926369][ T5750] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 121.979466][ T5750] F2FS-fs (loop2): invalid crc value [ 121.993899][ T5759] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 122.031564][ T5750] F2FS-fs (loop2): Found nat_bits in checkpoint [ 122.239042][ T5771] device-mapper: table: 248:1: target type multipath must appear alone in table [ 122.261009][ T5759] geneve1 speed is unknown, defaulting to 1000 [ 122.296075][ T5750] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 122.315780][ T5771] device-mapper: ioctl: error adding target to table [ 122.323948][ T5759] geneve1 speed is unknown, defaulting to 1000 [ 122.340029][ T5750] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 122.365974][ T5759] geneve1 speed is unknown, defaulting to 1000 [ 122.372406][ C1] net_ratelimit: 33 callbacks suppressed [ 122.473521][ T5774] syz.3.558 (5774): drop_caches: 2 [ 122.493103][ T5759] geneve1 speed is unknown, defaulting to 1000 [ 122.530935][ T5759] geneve1 speed is unknown, defaulting to 1000 [ 122.552284][ T5777] syz.3.558 (5777): drop_caches: 2 [ 122.639138][ T5774] syz.3.558 (5774): drop_caches: 2 [ 122.690397][ C1] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 122.971823][ T5788] WARNING! power/level is deprecated; use power/control instead [ 123.188440][ T5797] FAULT_INJECTION: forcing a failure. [ 123.188440][ T5797] name fail_futex, interval 1, probability 0, space 0, times 1 [ 123.261770][ T5790] geneve1 speed is unknown, defaulting to 1000 [ 123.347729][ T5797] CPU: 1 PID: 5797 Comm: syz.3.569 Not tainted syzkaller #0 [ 123.355154][ T5797] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 123.365237][ T5797] Call Trace: [ 123.368631][ T5797] [ 123.371588][ T5797] dump_stack_lvl+0x188/0x250 [ 123.376301][ T5797] ? show_regs_print_info+0x20/0x20 [ 123.381629][ T5797] ? load_image+0x410/0x410 [ 123.386256][ T5797] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 123.392475][ T5797] ? lock_chain_count+0x20/0x20 [ 123.397517][ T5797] should_fail+0x383/0x4b0 [ 123.402077][ T5797] get_futex_key+0x1a1/0x12d0 [ 123.406822][ T5797] ? __lock_acquire+0x13b3/0x7d40 [ 123.412050][ T5797] ? futex_wait_restart+0x250/0x250 [ 123.417316][ T5797] futex_wake+0x101/0x540 [ 123.421801][ T5797] ? futex_wait+0x680/0x680 [ 123.421824][ T5797] ? verify_lock_unused+0x140/0x140 [ 123.421848][ T5797] ? verify_lock_unused+0x140/0x140 [ 123.421875][ T5797] do_futex+0xd83/0x12b0 [ 123.421916][ T5797] ? futex_exit_release+0x1c0/0x1c0 [ 123.421939][ T5797] ? __context_tracking_exit+0x4c/0x80 [ 123.432184][ T5797] __se_sys_futex+0x389/0x420 [ 123.432218][ T5797] ? __x64_sys_futex+0xf0/0xf0 [ 123.432244][ T5797] ? __x64_sys_futex+0x1d/0xf0 [ 123.432268][ T5797] do_syscall_64+0x4c/0xa0 [ 123.432290][ T5797] ? clear_bhb_loop+0x30/0x80 [ 123.432309][ T5797] ? clear_bhb_loop+0x30/0x80 [ 123.432331][ T5797] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 123.432352][ T5797] RIP: 0033:0x7fe3600ac159 [ 123.432375][ T5797] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 123.432393][ T5797] RSP: 002b:00007fe35e3040e8 EFLAGS: 00000246 [ 123.441846][ T5797] ORIG_RAX: 00000000000000ca [ 123.441862][ T5797] RAX: ffffffffffffffda RBX: 00007fe360333fa8 RCX: 00007fe3600ac159 [ 123.441878][ T5797] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fe360333fac [ 123.441892][ T5797] RBP: 00007fe360333fa0 R08: 000838f4269fd8e2 R09: 0000000000000000 [ 123.441908][ T5797] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 123.452587][ T5797] R13: 00007fe360334038 R14: 00007ffd702937b0 R15: 00007ffd70293898 [ 123.452621][ T5797] [ 123.998715][ T5806] loop2: detected capacity change from 0 to 4096 [ 124.130457][ T5806] ntfs3: loop2: Failed to load $Extend. [ 124.230573][ T5817] syz.1.575 (5817): drop_caches: 2 [ 124.236335][ T5817] syz.1.575 (5817): drop_caches: 2 [ 124.340646][ T5817] syz.1.575 (5817): drop_caches: 2 [ 124.468581][ T5820] loop3: detected capacity change from 0 to 512 [ 124.559661][ T5820] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 124.640865][ T5820] EXT4-fs (loop3): 1 truncate cleaned up [ 124.646835][ T5820] EXT4-fs (loop3): mounted filesystem without journal. Opts: acl,errors=remount-ro,. Quota mode: none. [ 125.090415][ T5169] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 125.098321][ T5844] loop4: detected capacity change from 0 to 4096 [ 125.319700][ T5850] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 125.354107][ T5849] loop3: detected capacity change from 0 to 1024 [ 125.370273][ T5169] usb 1-1: Using ep0 maxpacket: 16 [ 125.458155][ T5849] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 125.482510][ T5849] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 125.526169][ T5169] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 125.559650][ T5169] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 125.592400][ T5849] EXT4-fs (loop3): mounted filesystem without journal. Opts: noblock_validity,nojournal_checksum,minixdf,grpjquota=,journal_ioprio=0x0000000000000000,dioread_nolock,nomblk_io_submit,noinit_itable,nogrpid,,errors=continue. Quota mode: none. [ 125.696404][ T5853] loop1: detected capacity change from 0 to 512 [ 125.760706][ T5849] ext4 filesystem being mounted at /129/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 125.786454][ T5849] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.590: bg 0: block 112: padding at end of block bitmap is not set [ 125.845964][ T5849] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 7 with max blocks 1 with error 28 [ 125.860337][ T5169] usb 1-1: New USB device found, idVendor=1d73, idProduct=1f01, bcdDevice= b.04 [ 125.869521][ T5169] usb 1-1: New USB device strings: Mfr=102, Product=2, SerialNumber=3 [ 125.884503][ T5169] usb 1-1: Product: syz [ 125.901150][ T5169] usb 1-1: Manufacturer: syz [ 125.907290][ T5849] EXT4-fs (loop3): This should not happen!! Data will be lost [ 125.907290][ T5849] [ 125.913023][ T5169] usb 1-1: SerialNumber: syz [ 125.933887][ T5853] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,discard,quota,,errors=continue. Quota mode: writeback. [ 125.949966][ T5849] EXT4-fs (loop3): Total free blocks count 0 [ 125.984605][ T5849] EXT4-fs (loop3): Free/Dirty block details [ 126.029152][ T5853] ext4 filesystem being mounted at /146/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 126.040440][ T5849] EXT4-fs (loop3): free_blocks=0 [ 126.046494][ T5849] EXT4-fs (loop3): dirty_blocks=0 [ 126.066001][ T5849] EXT4-fs (loop3): Block reservation details [ 126.108907][ T5849] EXT4-fs (loop3): i_reserved_data_blocks=0 [ 126.308959][ T5860] loop2: detected capacity change from 0 to 2048 [ 126.400384][ T5169] usb 1-1: 0:2 : does not exist [ 126.433619][ T5860] EXT4-fs (loop2): mounted filesystem without journal. Opts: quota,auto_da_alloc=0x0000000000000005,errors=remount-ro,sysvgroups,. Quota mode: writeback. [ 126.456561][ T5864] tap0: tun_chr_ioctl cmd 1074025677 [ 126.471976][ T5864] tap0: linktype set to 780 [ 126.480993][ T5870] loop4: detected capacity change from 0 to 64 [ 126.511104][ T5860] EXT4-fs error (device loop2): ext4_find_extent:929: inode #2: comm syz.2.593: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 126.538498][ T5860] EXT4-fs (loop2): Remounting filesystem read-only [ 126.572751][ T5860] EXT4-fs error (device loop2): ext4_find_extent:929: inode #2: comm syz.2.593: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 126.598737][ T5864] tap0: tun_chr_ioctl cmd 1074025681 [ 126.601354][ T5860] EXT4-fs (loop2): Remounting filesystem read-only [ 126.647769][ T26] audit: type=1800 audit(1791034772.004:11): pid=5870 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.597" name="file1" dev="loop4" ino=21 res=0 errno=0 [ 126.668323][ C1] vkms_vblank_simulate: vblank timer overrun [ 126.707957][ T5169] usb 1-1: USB disconnect, device number 3 [ 126.855191][ T5871] attempt to access beyond end of device [ 126.855191][ T5871] loop4: rw=34817, want=164, limit=64 [ 127.024178][ T5871] attempt to access beyond end of device [ 127.024178][ T5871] loop4: rw=34817, want=168, limit=64 [ 127.074971][ T5021] udevd[5021]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 127.116859][ T5871] attempt to access beyond end of device [ 127.116859][ T5871] loop4: rw=34817, want=170, limit=64 [ 127.139551][ T5881] loop1: detected capacity change from 0 to 1024 [ 127.211508][ T5871] attempt to access beyond end of device [ 127.211508][ T5871] loop4: rw=34817, want=178, limit=64 [ 127.297576][ T5871] attempt to access beyond end of device [ 127.297576][ T5871] loop4: rw=34817, want=550, limit=64 [ 127.609497][ T5888] geneve1 speed is unknown, defaulting to 1000 [ 127.729846][ C1] net_ratelimit: 36 callbacks suppressed [ 127.738027][ T5897] loop1: detected capacity change from 0 to 1024 [ 127.889020][ T5904] loop2: detected capacity change from 0 to 256 [ 127.990897][ T5901] loop3: detected capacity change from 0 to 4096 [ 128.042722][ T5904] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 128.090104][ T5904] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 128.114786][ T5901] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 128.146609][ T5897] EXT4-fs (loop1): Test dummy encryption mode enabled [ 128.174888][ T5904] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 128.208491][ T5897] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended [ 128.292833][ T5897] EXT4-fs (loop1): Errors on filesystem, clearing orphan list. [ 128.334535][ T5897] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption,quota,,errors=continue. Quota mode: writeback. [ 128.341268][ T5901] EXT4-fs (loop3): re-mounted. Opts: (null). Quota mode: writeback. [ 128.430054][ T13] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 128.730073][ T13] usb 5-1: Using ep0 maxpacket: 16 [ 128.833982][ T5916] device syzkaller1 entered promiscuous mode [ 128.880526][ T13] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 128.913410][ T13] usb 5-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 128.968220][ T13] usb 5-1: config 0 interface 0 has no altsetting 0 [ 128.994200][ T13] usb 5-1: New USB device found, idVendor=046d, idProduct=c215, bcdDevice= 0.00 [ 129.030912][ T13] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.068024][ T13] usb 5-1: config 0 descriptor?? [ 129.176586][ T5888] IPVS: You probably need to specify IP address on multicast interface. [ 129.200054][ T5888] IPVS: Error connecting to the multicast addr [ 129.578474][ T13] input: HID 046d:c215 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:046D:C215.0005/input/input12 [ 129.705038][ T5921] loop2: detected capacity change from 0 to 32768 [ 129.730982][ T13] logitech 0003:046D:C215.0005: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 046d:c215] on usb-dummy_hcd.4-1/input0 [ 129.781456][ T4264] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 129.846441][ T13] usb 5-1: USB disconnect, device number 5 [ 129.964909][ T5921] XFS (loop2): Mounting V5 Filesystem [ 130.060438][ T4264] usb 4-1: Using ep0 maxpacket: 16 [ 130.153657][ T5921] XFS (loop2): Ending clean mount [ 130.200342][ T4264] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 130.216005][ T4264] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 130.218092][ T5941] fido_id[5941]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 130.306471][ T5948] netlink: 'syz.1.624': attribute type 29 has an invalid length. [ 130.343203][ T5921] XFS (loop2): WARNING: Reset corrupted AGFL on AG 0. 1 blocks leaked. Please unmount and run xfs_repair. [ 130.358034][ T5948] netlink: 'syz.1.624': attribute type 29 has an invalid length. [ 130.420175][ T4264] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 130.432047][ T4264] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.453036][ T5950] netlink: 'syz.1.624': attribute type 29 has an invalid length. [ 130.478698][ T4264] usb 4-1: Product: syz [ 130.489833][ T4264] usb 4-1: Manufacturer: syz [ 130.496061][ T4264] usb 4-1: SerialNumber: syz [ 130.529153][ T5951] netlink: 'syz.1.624': attribute type 29 has an invalid length. [ 130.546640][ T5948] netlink: 'syz.1.624': attribute type 29 has an invalid length. [ 130.646687][ T5955] netlink: 12 bytes leftover after parsing attributes in process `syz.1.626'. [ 130.679106][ T4189] XFS (loop2): Unmounting Filesystem [ 130.835375][ T5961] jffs2: notice: (5961) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 130.875347][ T4264] usb 4-1: 0:2 : does not exist [ 130.942681][ T4264] usb 4-1: USB disconnect, device number 6 [ 131.430031][ T4231] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 131.797878][ T5990] FAULT_INJECTION: forcing a failure. [ 131.797878][ T5990] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 131.811638][ T4231] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 131.832817][ T4231] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 131.836261][ T5990] CPU: 0 PID: 5990 Comm: syz.0.642 Not tainted syzkaller #0 [ 131.851574][ T5990] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 131.861766][ T5990] Call Trace: [ 131.864830][ T4231] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 131.865125][ T5990] [ 131.877991][ T5990] dump_stack_lvl+0x188/0x250 [ 131.882794][ T5990] ? show_regs_print_info+0x20/0x20 [ 131.888034][ T5990] ? load_image+0x410/0x410 [ 131.892677][ T5990] ? __lock_acquire+0x7d40/0x7d40 [ 131.897834][ T5990] should_fail+0x383/0x4b0 [ 131.900671][ T4231] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 131.902382][ T5990] _copy_from_user+0x2e/0x170 [ 131.902419][ T5990] __se_sys_mount+0x175/0x3d0 [ 131.902448][ T5990] ? __x64_sys_mount+0xc0/0xc0 [ 131.902474][ T5990] ? lockdep_hardirqs_on+0x94/0x140 [ 131.902497][ T5990] ? __x64_sys_mount+0x1c/0xc0 [ 131.902522][ T5990] do_syscall_64+0x4c/0xa0 [ 131.902542][ T5990] ? clear_bhb_loop+0x30/0x80 [ 131.902566][ T5990] ? clear_bhb_loop+0x30/0x80 [ 131.902590][ T5990] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 131.902610][ T5990] RIP: 0033:0x7f1210cd0159 [ 131.902631][ T5990] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 131.902650][ T5990] RSP: 002b:00007f120ef28028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 131.902675][ T5990] RAX: ffffffffffffffda RBX: 00007f1210f57fa0 RCX: 00007f1210cd0159 [ 131.902691][ T5990] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 131.902705][ T5990] RBP: 00007f1210d6706b R08: 0000200000000200 R09: 0000000000000000 [ 131.902720][ T5990] R10: 0000000000000020 R11: 0000000000000246 R12: 0000000000000000 [ 132.025641][ T5990] R13: 00007f1210f58038 R14: 00007f1210f57fa0 R15: 00007fffec49f0a8 [ 132.033650][ T5990] [ 132.081100][ T4231] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 132.109950][ T4231] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 132.128480][ T4231] usb 5-1: Manufacturer: syz [ 132.165464][ T4231] usb 5-1: config 0 descriptor?? [ 132.306938][ T5999] netlink: 80 bytes leftover after parsing attributes in process `syz.1.646'. [ 132.320162][ T5999] netlink: 80 bytes leftover after parsing attributes in process `syz.1.646'. [ 132.342190][ T5999] netlink: 80 bytes leftover after parsing attributes in process `syz.1.646'. [ 132.353278][ T5979] loop3: detected capacity change from 0 to 32768 [ 132.477315][ T5979] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 132.656698][ T6002] CacheFiles: Failed to register: -95 [ 132.677799][ T4231] appleir 0003:05AC:8243.0006: unknown main item tag 0x0 [ 132.697810][ T4231] appleir 0003:05AC:8243.0006: No inputs registered, leaving [ 132.807531][ T4231] appleir 0003:05AC:8243.0006: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0 [ 132.873274][ T4187] ocfs2: Unmounting device (7,3) on (node local) [ 132.937561][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.938240][ C0] net_ratelimit: 39 callbacks suppressed [ 132.943961][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.143238][ T23] usb 5-1: USB disconnect, device number 6 [ 133.212933][ T6014] fido_id[6014]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 133.351094][ T5169] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 133.367262][ T4264] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 133.661758][ T6032] geneve1 speed is unknown, defaulting to 1000 [ 133.727854][ T6035] loop4: detected capacity change from 0 to 512 [ 133.770307][ T6035] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 133.801830][ T5169] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 133.813205][ T4264] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 133.827121][ T6035] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802e12c, mo2=0002] [ 133.835757][ T4264] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 133.840155][ T6035] System zones: [ 133.846420][ T5169] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 133.847449][ T6035] 1-12 [ 133.867664][ T5169] usb 4-1: New USB device found, idVendor=056a, idProduct=0304, bcdDevice= 0.00 [ 133.877458][ T5169] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.888501][ T5169] usb 4-1: config 0 descriptor?? [ 133.916390][ T6035] [ 133.937019][ T6035] EXT4-fs (loop4): orphan cleanup on readonly fs [ 133.951121][ T4264] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 133.969517][ T6035] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.660: bg 0: block 361: padding at end of block bitmap is not set [ 133.988643][ T4264] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 133.997434][ T4264] usb 2-1: Manufacturer: syz [ 134.012961][ T4264] usb 2-1: config 0 descriptor?? [ 134.039152][ T6035] EXT4-fs (loop4): Remounting filesystem read-only [ 134.073699][ T6035] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 134.110691][ T6035] EXT4-fs (loop4): Remounting filesystem read-only [ 134.117263][ T6035] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.660: invalid indirect mapped block 12 (level 1) [ 134.199959][ T6035] EXT4-fs (loop4): Remounting filesystem read-only [ 134.229993][ T4264] rc_core: IR keymap rc-hauppauge not found [ 134.236617][ T4264] Registered IR keymap rc-empty [ 134.246803][ T6035] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.660: invalid indirect mapped block 2 (level 2) [ 134.274601][ T6040] siw: device registration error -23 [ 134.288824][ T4264] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 134.291529][ T6035] EXT4-fs (loop4): Remounting filesystem read-only [ 134.328730][ T4264] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input13 [ 134.367918][ T6035] EXT4-fs (loop4): 1 truncate cleaned up [ 134.397283][ T6035] EXT4-fs (loop4): mounted filesystem without journal. Opts: noload,acl,inode_readahead_blks=0x0000000000000040,errors=remount-ro,usrjquota=. Quota mode: none. [ 134.427782][ T5169] wacom 0003:056A:0304.0007: hidraw0: USB HID v0.00 Joystick [HID 056a:0304] on usb-dummy_hcd.3-1/input0 [ 134.496290][ T6043] netlink: 288 bytes leftover after parsing attributes in process `syz.2.662'. [ 134.565952][ T6043] netlink: 28 bytes leftover after parsing attributes in process `syz.2.662'. [ 134.640025][ C0] igorplugusb 2-1:0.0: receive overflow invalid: 64 [ 134.734128][ T6035] EXT4-fs error (device loop4): ext4_map_blocks:631: inode #2: block 5: comm syz.4.660: lblock 0 mapped to illegal pblock 5 (length 1) [ 134.812959][ T4264] usb 4-1: USB disconnect, device number 7 [ 134.866300][ T6035] EXT4-fs warning (device loop4): dx_probe:823: inode #2: lblock 0: comm syz.4.660: error -117 reading directory block [ 135.071740][ T5264] usb 2-1: USB disconnect, device number 6 [ 135.198758][ T6056] loop4: detected capacity change from 0 to 64 [ 135.220114][ T4231] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 135.470032][ T4231] usb 3-1: Using ep0 maxpacket: 32 [ 135.590431][ T4231] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 135.610519][ T4231] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 135.650026][ T4231] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 135.672363][ T6060] Mass Storage Function, version: 2009/09/11 [ 135.679204][ T6060] LUN: removable file: (no medium) [ 135.679959][ T4231] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.718008][ T4231] usb 3-1: config 0 descriptor?? [ 135.883132][ T6069] siw: device registration error -23 [ 136.236810][ T4231] savu 0003:1E7D:2D5A.0008: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.2-1/input0 [ 136.348598][ T6082] loop3: detected capacity change from 0 to 1024 [ 136.563909][ T5264] usb 3-1: USB disconnect, device number 5 [ 136.720359][ T6092] loop4: detected capacity change from 0 to 8192 [ 136.837381][ T6092] loop4: p1[EZD] p3 p4 [ 136.877574][ T6097] loop3: detected capacity change from 0 to 1024 [ 136.884616][ T6092] loop4: partition table partially beyond EOD, truncated [ 136.944380][ T6092] loop4: p3 start 150994944 is beyond EOD, truncated [ 136.984271][ T6097] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 137.069053][ T6097] EXT4-fs (loop3): mounted filesystem without journal. Opts: dioread_nolock,norecovery,min_batch_time=0x0000000000000001,inode_readahead_blks=0x0000000000000001,bsdgroups,noblock_validity,errors=remount-ro,acl,auto_da_alloc=0x0000000000000343,jqfmt=vfsold,delalloc,init_itable=0xffffff. Quota mode: none. [ 137.342441][ T6106] netlink: 4 bytes leftover after parsing attributes in process `syz.1.684'. [ 137.563453][ T4181] udevd[4181]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 137.618531][ T6114] loop2: detected capacity change from 0 to 256 [ 137.630895][ T5021] udevd[5021]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 137.730286][ T6106] 8021q: adding VLAN 0 to HW filter on device bond1 [ 138.049827][ C1] net_ratelimit: 39 callbacks suppressed [ 138.057697][ T5264] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 138.067061][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 138.169294][ T6125] loop4: detected capacity change from 0 to 1024 [ 138.265353][ T6132] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 138.333635][ T6125] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 138.385096][ T6125] ext4 filesystem being mounted at /126/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 138.416709][ T26] audit: type=1800 audit(1791034783.774:12): pid=6125 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.693" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 138.437364][ C0] vkms_vblank_simulate: vblank timer overrun [ 138.575428][ T26] audit: type=1800 audit(1791034783.814:13): pid=6125 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.693" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 138.650759][ T145] EXT4-fs error (device loop4): ext4_map_blocks:741: inode #15: comm kworker/u4:2: lblock 0 mapped to illegal pblock 0 (length 1) [ 138.734537][ T145] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 138.802211][ T26] audit: type=1800 audit(1791034784.164:14): pid=6152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.705" name="protocol" dev="configfs" ino=38890 res=0 errno=0 [ 138.825169][ T145] EXT4-fs (loop4): This should not happen!! Data will be lost [ 138.825169][ T145] [ 139.309932][ T5169] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 139.698816][ T6149] loop2: detected capacity change from 0 to 32768 [ 139.714514][ T5169] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 139.730710][ T5169] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 139.748344][ T5169] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 139.759923][ T5169] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 139.796532][ T5169] usb 2-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 139.810556][ T5169] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.873254][ T6149] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 139.938732][ T6149] (syz.2.703,6149,0):ocfs2_parse_options:1459 ERROR: Invalid heartbeat mount options [ 140.028101][ T4189] ocfs2: Unmounting device (7,2) on (node local) [ 140.260015][ T4264] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 140.710522][ T4264] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 140.736155][ T4264] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 140.964126][ T5169] gud 2-1:1.0: USB-1: Failed to add properties (ret=-71) [ 140.971719][ T4264] usb 4-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 140.985618][ T5169] gud 2-1:1.0: Failed to get connectors (error=-71) [ 140.996329][ T4264] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.010399][ T5169] gud: probe of 2-1:1.0 failed with error -71 [ 141.020829][ T4264] usb 4-1: Product: syz [ 141.032240][ T4264] usb 4-1: Manufacturer: syz [ 141.047229][ T4264] usb 4-1: SerialNumber: syz [ 141.088874][ T5169] usb 2-1: USB disconnect, device number 7 [ 141.317399][ T6198] loop4: detected capacity change from 0 to 40427 [ 141.378762][ T6198] F2FS-fs (loop4): invalid crc value [ 141.407641][ T4264] usblp 4-1:1.0: usblp0: USB Bidirectional printer dev 8 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900 [ 141.438333][ T6198] F2FS-fs (loop4): Found nat_bits in checkpoint [ 141.620003][ T6198] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 141.782608][ T5169] usb 4-1: USB disconnect, device number 8 [ 141.846616][ T5169] usblp0: removed [ 141.955719][ T6206] loop2: detected capacity change from 0 to 40427 [ 142.059397][ T6206] F2FS-fs (loop2): invalid crc value [ 142.082031][ T4198] attempt to access beyond end of device [ 142.082031][ T4198] loop4: rw=2049, want=45104, limit=40427 [ 142.110825][ T6206] F2FS-fs (loop2): Found nat_bits in checkpoint [ 142.279490][ T6206] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 142.339902][ T4231] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 142.461970][ T6228] scsi_dev_info_list_add_str: bad dev info string 'Ã' '(null)' '(null)' [ 142.517833][ T6206] attempt to access beyond end of device [ 142.517833][ T6206] loop2: rw=524288, want=45072, limit=40427 [ 142.590288][ T6206] attempt to access beyond end of device [ 142.590288][ T6206] loop2: rw=0, want=45072, limit=40427 [ 142.610171][ T4231] usb 1-1: Using ep0 maxpacket: 8 [ 142.641234][ T6229] attempt to access beyond end of device [ 142.641234][ T6229] loop2: rw=0, want=45072, limit=40427 [ 142.730245][ T4231] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 142.761092][ T4231] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 142.819941][ T4231] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 142.863582][ T4231] usb 1-1: New USB device found, idVendor=054c, idProduct=042f, bcdDevice= 0.00 [ 142.909837][ T4231] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.941783][ T6236] capability: warning: `syz.4.733' uses 32-bit capabilities (legacy support in use) [ 142.960601][ T4231] usb 1-1: config 0 descriptor?? [ 143.032614][ T4189] attempt to access beyond end of device [ 143.032614][ T4189] loop2: rw=2049, want=45104, limit=40427 [ 143.212407][ T6241] fuse: Invalid user_id [ 143.589536][ T6252] net_ratelimit: 46 callbacks suppressed [ 143.823733][ T5169] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 143.956823][ T6260] loop1: detected capacity change from 0 to 16 [ 144.060002][ T6260] erofs: (device loop1): mounted with root inode @ nid 36. [ 144.120133][ T4231] sony 0003:054C:042F.0009: can't set operational mode: step 2 [ 144.128006][ T4231] sony 0003:054C:042F.0009: Failed to set controller into operational mode [ 144.150114][ T6260] erofs: (device loop1): z_erofs_fill_inode_lazy: per-inode big pcluster without sb feature for nid 36 [ 144.196243][ T4231] sony 0003:054C:042F.0009: hidraw0: USB HID v0.00 Joystick [HID 054c:042f] on usb-dummy_hcd.0-1/input0 [ 144.236431][ T6260] erofs: (device loop1): z_erofs_readahead: readahead error at page 3600 @ nid 36 [ 144.266978][ T4231] sony 0003:054C:042F.0009: failed to claim input [ 144.274954][ T6260] erofs: (device loop1): z_erofs_fill_inode_lazy: per-inode big pcluster without sb feature for nid 36 [ 144.339987][ T6260] erofs: (device loop1): z_erofs_readahead: readahead error at page 3599 @ nid 36 [ 144.352561][ T4231] usb 1-1: USB disconnect, device number 4 [ 144.367635][ T6269] erofs: (device loop1): z_erofs_fill_inode_lazy: per-inode big pcluster without sb feature for nid 36 [ 144.484419][ T6269] erofs: (device loop1): z_erofs_readpage: failed to read, err [-117] [ 144.518963][ T6271] fido_id[6271]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 144.856277][ T6279] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 144.876696][ T6251] loop4: detected capacity change from 0 to 32768 [ 144.968868][ T6251] JBD2: Ignoring recovery information on journal [ 145.286038][ T6251] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 145.336751][ T6294] loop1: detected capacity change from 0 to 512 [ 145.747417][ T6294] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 145.832089][ T6294] ext4 filesystem being mounted at /188/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 145.958512][ T4198] ocfs2: Unmounting device (7,4) on (node local) [ 146.325954][ T6297] loop3: detected capacity change from 0 to 131072 [ 146.460603][ T6297] F2FS-fs (loop3): Invalid log sectorsize (67108873) [ 146.467697][ T6297] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 146.478560][ T6297] F2FS-fs (loop3): invalid crc value [ 146.524341][ T6297] F2FS-fs (loop3): Found nat_bits in checkpoint [ 146.577796][ T6297] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 146.585003][ T6297] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 146.677395][ T6320] loop2: detected capacity change from 0 to 512 [ 146.770986][ T6297] F2FS-fs (loop3): inconsistent node block, nid:8, node_footer[nid:5,ino:5,ofs:0,cpver:1219692001,blkaddr:15361] [ 146.856283][ T6320] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 146.984482][ T6320] EXT4-fs (loop2): mount failed [ 147.157621][ T6337] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 147.468573][ T6341] loop3: detected capacity change from 0 to 512 [ 147.537008][ T6345] device ipvlan2 entered promiscuous mode [ 147.607451][ T6345] team0: Device ipvlan2 failed to register rx_handler [ 147.796801][ T6341] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 147.867615][ T6347] device hsr0 entered promiscuous mode [ 147.876184][ T6348] netlink: 4 bytes leftover after parsing attributes in process `syz.0.775'. [ 147.897583][ T6353] loop4: detected capacity change from 0 to 512 [ 147.907738][ T6341] ext4 filesystem being mounted at /171/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 147.919340][ T6348] device hsr_slave_0 left promiscuous mode [ 147.936452][ T6348] device hsr_slave_1 left promiscuous mode [ 147.972688][ T6353] EXT4-fs (loop4): Ignoring removed nobh option [ 148.086192][ T6353] EXT4-fs (loop4): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000001000,nobh,quota,,errors=continue. Quota mode: writeback. [ 148.163067][ T6348] device hsr0 left promiscuous mode [ 148.191895][ T6353] ext4 filesystem being mounted at /138/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 148.260649][ T6353] EXT4-fs error (device loop4): ext4_do_update_inode:5229: inode #2: comm syz.4.776: corrupted inode contents [ 148.341923][ T6353] EXT4-fs error (device loop4): ext4_dirty_inode:6087: inode #2: comm syz.4.776: mark_inode_dirty error [ 148.382180][ T6353] EXT4-fs error (device loop4): ext4_do_update_inode:5229: inode #2: comm syz.4.776: corrupted inode contents [ 148.481760][ T6353] EXT4-fs error (device loop4): __ext4_ext_dirty:183: inode #2: comm syz.4.776: mark_inode_dirty error [ 148.929831][ C1] net_ratelimit: 1205 callbacks suppressed [ 148.995483][ T6367] geneve1 speed is unknown, defaulting to 1000 [ 149.111479][ T5264] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 149.498281][ T5264] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 149.528090][ T5264] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 149.580418][ T4231] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 149.660431][ T5264] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 149.684324][ T5264] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 149.720923][ T5264] usb 2-1: Manufacturer: syz [ 149.759487][ T5264] usb 2-1: config 0 descriptor?? [ 150.125811][ T6378] loop3: detected capacity change from 0 to 1024 [ 150.263687][ T6378] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpjquota=,,errors=continue. Quota mode: writeback. [ 150.930364][ T5264] uclogic 0003:256C:006D.000A: failed retrieving string descriptor #100: -71 [ 150.939589][ T5264] uclogic 0003:256C:006D.000A: failed retrieving pen parameters: -71 [ 150.971541][ T6387] geneve1 speed is unknown, defaulting to 1000 [ 150.981691][ T6399] loop4: detected capacity change from 0 to 128 [ 150.995707][ T5264] uclogic 0003:256C:006D.000A: failed probing pen v1 parameters: -71 [ 151.034815][ T5264] uclogic 0003:256C:006D.000A: failed probing parameters: -71 [ 151.055348][ T5264] uclogic: probe of 0003:256C:006D.000A failed with error -71 [ 151.122178][ T5264] usb 2-1: USB disconnect, device number 8 [ 151.135232][ T6399] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a80ec018, mo2=0002] [ 151.151312][ T6399] System zones: 1-3, 19-19, 35-36 [ 151.161654][ T6399] EXT4-fs (loop4): mounted filesystem without journal. Opts: quota,debug,,errors=continue. Quota mode: writeback. [ 151.248010][ T6399] ext4 filesystem being mounted at /145/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 151.435856][ T6399] EXT4-fs warning (device loop4): verify_group_input:165: Last group not full [ 151.719399][ T6413] loop4: detected capacity change from 0 to 128 [ 151.756190][ T6413] FAT-fs (loop4): bogus number of reserved sectors [ 151.776165][ T6413] FAT-fs (loop4): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 151.815082][ T6413] FAT-fs (loop4): Can't find a valid FAT filesystem [ 151.982030][ T6415] Context (ID=0x0) not attached to queue pair (handle=0x4d8:0x0) [ 152.637187][ T6411] loop1: detected capacity change from 0 to 32768 [ 152.682678][ T6420] loop3: detected capacity change from 0 to 8192 [ 152.831323][ T6411] JBD2: Ignoring recovery information on journal [ 153.155240][ T6411] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 153.211669][ T6420] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 153.286921][ T6420] REISERFS (device loop3): using ordered data mode [ 153.327467][ T6420] reiserfs: using flush barriers [ 153.404209][ T6420] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 153.543859][ T6445] netlink: 4 bytes leftover after parsing attributes in process `syz.0.810'. [ 153.562627][ T6420] REISERFS (device loop3): checking transaction log (loop3) [ 153.618102][ T6420] REISERFS (device loop3): Using rupasov hash to sort names [ 153.637857][ T6411] syz.1.798 (6411) used greatest stack depth: 17216 bytes left [ 153.723661][ T6420] REISERFS (device loop3): using 3.5.x disk format [ 153.819450][ T4196] ocfs2: Unmounting device (7,1) on (node local) [ 153.850084][ T6420] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 153.864838][ T6420] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 153.880248][ T6420] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 153.975612][ T6420] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 154.057331][ T6453] net_ratelimit: 40 callbacks suppressed [ 154.057347][ T6453] Set syz0 is full, maxelem 0 reached [ 154.700037][ T4231] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 155.076312][ T4231] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 155.095319][ T6471] loop4: detected capacity change from 0 to 256 [ 155.109418][ T4231] usb 1-1: config 0 has no interface number 0 [ 155.193711][ T6471] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 155.267078][ T6471] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 155.290431][ T4231] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 155.309941][ T4231] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.317996][ T4231] usb 1-1: Product: syz [ 155.323753][ T6471] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000ff98, chksum : 0x84a6b859, utbl_chksum : 0xe619d30d) [ 155.349566][ T6475] loop1: detected capacity change from 0 to 1024 [ 155.379958][ T4231] usb 1-1: Manufacturer: syz [ 155.399154][ T4231] usb 1-1: SerialNumber: syz [ 155.436446][ T4231] usb 1-1: config 0 descriptor?? [ 155.521361][ T6477] loop3: detected capacity change from 0 to 512 [ 155.634975][ T6477] EXT4-fs (loop3): Ignoring removed nobh option [ 155.720416][ T4231] usb 1-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 155.835649][ T6477] EXT4-fs (loop3): orphan cleanup on readonly fs [ 155.850686][ T4231] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 155.900655][ T4231] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 155.939635][ T6463] usb 1-1: dvb_usb_ec168: I2C read not implemented [ 155.949395][ T6477] EXT4-fs error (device loop3): ext4_xattr_inode_update_ref:984: inode #11: comm syz.3.823: EA inode 11 ref wraparound: ref_count=0 ref_change=-1 [ 155.964923][ T4231] usb 1-1: media controller created [ 156.073541][ T6477] EXT4-fs warning (device loop3): ext4_xattr_inode_dec_ref_all:1178: inode #11: comm syz.3.823: ea_inode dec ref err=-117 [ 156.087409][ T6477] EXT4-fs (loop3): 1 orphan inode deleted [ 156.109972][ T6477] EXT4-fs (loop3): mounted filesystem without journal. Opts: acl,min_batch_time=0x000000000000000f,init_itable,nobh,lazytime,acl,init_itable=0x0000000000000002,,errors=continue. Quota mode: none. [ 156.164153][ T4231] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 156.310660][ T4231] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 156.600053][ T23] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 156.690935][ T4231] usb 1-1: USB disconnect, device number 5 [ 156.718026][ T6494] loop1: detected capacity change from 0 to 1024 [ 156.830182][ T6494] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 157.072788][ T26] audit: type=1800 audit(1791034802.434:15): pid=6500 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.828" name="proc" dev="loop1" ino=801 res=0 errno=0 [ 157.150432][ T23] usb 5-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 157.170339][ T23] usb 5-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 157.178584][ T23] usb 5-1: Product: syz [ 157.207823][ T23] usb 5-1: Manufacturer: syz [ 157.207871][ T6504] loop3: detected capacity change from 0 to 512 [ 157.212776][ T23] usb 5-1: SerialNumber: syz [ 157.231036][ T23] usb 5-1: config 0 descriptor?? [ 157.283502][ T23] ch341 5-1:0.0: ch341-uart converter detected [ 157.406233][ T6504] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 157.520071][ T6504] ext4 filesystem being mounted at /185/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 157.998728][ T6514] geneve1 speed is unknown, defaulting to 1000 [ 158.366158][ T23] ch341-uart ttyUSB0: failed to read break control: -71 [ 158.392961][ T23] ch341-uart: probe of ttyUSB0 failed with error -71 [ 158.436968][ T23] usb 5-1: USB disconnect, device number 7 [ 158.454066][ T23] ch341 5-1:0.0: device disconnected [ 158.591975][ T6531] loop2: detected capacity change from 0 to 1024 [ 158.618565][ T6530] 9pnet: p9_errstr2errno: server reported unknown error [ 159.169879][ C1] net_ratelimit: 31 callbacks suppressed [ 159.294989][ T6561] gadgetfs: bound to dummy_udc driver [ 159.812327][ T4231] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 160.040659][ T6583] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 160.050601][ T6583] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 160.059437][ T6583] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 160.068896][ T6583] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 160.240030][ T5167] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 160.587474][ T6602] netlink: 12 bytes leftover after parsing attributes in process `syz.1.874'. [ 160.610644][ T5167] usb 4-1: New USB device found, idVendor=072f, idProduct=2200, bcdDevice= 1.00 [ 160.646121][ T5167] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.672505][ T6602] netlink: 12 bytes leftover after parsing attributes in process `syz.1.874'. [ 160.900344][ T6587] loop4: detected capacity change from 0 to 131072 [ 160.980618][ T6587] F2FS-fs (loop4): invalid crc value [ 161.047947][ T6587] F2FS-fs (loop4): Found nat_bits in checkpoint [ 161.087705][ T6587] F2FS-fs (loop4): Cannot turn on quotas: -2 on 2 [ 161.134749][ T6587] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 161.265441][ T6621] loop1: detected capacity change from 0 to 1024 [ 161.459962][ C0] usb 4-1: NFC: Received an invalid frame [ 161.477245][ T5167] usb 4-1: NFC: Unable to get FW version [ 161.498608][ T5167] pn533_usb: probe of 4-1:1.0 failed with error -5 [ 161.697094][ T5167] usb 4-1: USB disconnect, device number 9 [ 161.805657][ T6627] geneve1 speed is unknown, defaulting to 1000 [ 162.230437][ T6635] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 162.758146][ T6646] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input18 [ 164.290263][ T4254] net_ratelimit: 38 callbacks suppressed [ 164.610020][ T13] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 164.665385][ T6672] loop1: detected capacity change from 0 to 512 [ 164.769056][ T6672] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 164.812473][ T6672] ext4 filesystem being mounted at /217/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 164.868449][ T26] audit: type=1326 audit(1791034810.224:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6678 comm="syz.0.902" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1210cd0159 code=0x7ffc0000 [ 164.943745][ T26] audit: type=1326 audit(1791034810.254:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6678 comm="syz.0.902" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1210cd0159 code=0x7ffc0000 [ 165.022195][ T26] audit: type=1326 audit(1791034810.254:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6678 comm="syz.0.902" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1210cd0159 code=0x7ffc0000 [ 165.050307][ T13] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 165.078079][ T26] audit: type=1326 audit(1791034810.254:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6678 comm="syz.0.902" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f1210cd0159 code=0x7ffc0000 [ 165.198947][ T6672] EXT4-fs (loop1): Remounting file system with no journal so ignoring journalled data option [ 165.228217][ T26] audit: type=1326 audit(1791034810.254:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6678 comm="syz.0.902" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1210cd0159 code=0x7ffc0000 [ 165.261439][ T6672] EXT4-fs (loop1): changing journal_checksum during remount not supported; ignoring [ 165.300348][ T13] usb 5-1: New USB device found, idVendor=08ca, idProduct=0110, bcdDevice= 1.00 [ 165.306307][ T26] audit: type=1326 audit(1791034810.264:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6678 comm="syz.0.902" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1210cd0159 code=0x7ffc0000 [ 165.323140][ T13] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.353934][ T6672] EXT4-fs (loop1): re-mounted. Opts: journal_checksum,journal_ioprio=0x0000000000000001,user_xattr,grpjquota=,data=writeback,noblock_validity,minixdf,journal_checksum,. Quota mode: writeback. [ 165.421348][ T26] audit: type=1326 audit(1791034810.264:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6678 comm="syz.0.902" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1210cd0159 code=0x7ffc0000 [ 165.450833][ T13] usb 5-1: Product: syz [ 165.455045][ T13] usb 5-1: Manufacturer: syz [ 165.481248][ T26] audit: type=1326 audit(1791034810.264:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6678 comm="syz.0.902" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=213 compat=0 ip=0x7f1210cd0159 code=0x7ffc0000 [ 165.485966][ T13] usb 5-1: SerialNumber: syz [ 165.589684][ T5262] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 165.620609][ T26] audit: type=1326 audit(1791034810.264:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6678 comm="syz.0.902" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1210cd0159 code=0x7ffc0000 [ 165.631249][ T6687] EXT4-fs (loop1): re-mounted. Opts: . Quota mode: writeback. [ 165.672473][ T13] gspca_main: mr97310a-2.14.0 probing 08ca:0110 [ 165.700507][ T26] audit: type=1326 audit(1791034810.264:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6678 comm="syz.0.902" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1210cd0159 code=0x7ffc0000 [ 165.970332][ T5262] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 165.990149][ T5262] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 166.014304][ T5262] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 166.032999][ T5262] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.060852][ T5262] usb 4-1: config 0 descriptor?? [ 166.540638][ T13] gspca_mr97310a: reg write [21] error -71 [ 166.549896][ T13] mr97310a: probe of 5-1:1.0 failed with error -71 [ 166.562470][ T5262] cm6533_jd 0003:0D8C:0022.000B: unknown main item tag 0x0 [ 166.585554][ T5262] cm6533_jd 0003:0D8C:0022.000B: unknown main item tag 0x0 [ 166.621732][ T13] usb 5-1: USB disconnect, device number 8 [ 166.634541][ T5262] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0D8C:0022.000B/input/input19 [ 166.675891][ T6701] loop2: detected capacity change from 0 to 1024 [ 166.768894][ T5262] cm6533_jd 0003:0D8C:0022.000B: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.3-1/input0 [ 166.885879][ T5262] usb 4-1: USB disconnect, device number 10 [ 167.101429][ T6708] fido_id[6708]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 167.361362][ T6697] loop1: detected capacity change from 0 to 32768 [ 167.444182][ T6697] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.909 (6697) [ 167.491021][ T6697] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 167.531269][ T6697] BTRFS info (device loop1): setting nodatasum [ 167.549359][ T6697] BTRFS info (device loop1): force zlib compression, level 3 [ 167.571761][ T6697] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_LZO (0x8) [ 167.626571][ T6697] BTRFS info (device loop1): use lzo compression, level 0 [ 167.682566][ T6697] BTRFS info (device loop1): turning on flush-on-commit [ 167.689695][ T6697] BTRFS info (device loop1): enabling auto defrag [ 167.733061][ T6697] BTRFS info (device loop1): max_inline at 4096 [ 167.739378][ T6697] BTRFS info (device loop1): using free space tree [ 167.788604][ T6697] BTRFS info (device loop1): has skinny extents [ 168.134856][ T6752] netlink: 12 bytes leftover after parsing attributes in process `syz.0.924'. [ 168.208899][ T6755] netlink: 12 bytes leftover after parsing attributes in process `syz.0.924'. [ 168.250704][ T6697] BTRFS info (device loop1): enabling ssd optimizations [ 168.463546][ T6762] loop3: detected capacity change from 0 to 2048 [ 168.523408][ T5262] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 168.600015][ T5264] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 168.616027][ T6762] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 168.850058][ T5264] usb 5-1: Using ep0 maxpacket: 16 [ 168.900761][ T5262] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 168.931522][ T5262] usb 3-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 168.971589][ T5264] usb 5-1: config 0 has an invalid interface number: 7 but max is 0 [ 169.002315][ T5262] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.019159][ T5264] usb 5-1: config 0 has no interface number 0 [ 169.050248][ T5264] usb 5-1: config 0 interface 7 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 169.103015][ T6775] loop3: detected capacity change from 0 to 64 [ 169.122146][ T5262] keyspan 3-1:1.0: Keyspan 2 port adapter converter detected [ 169.141579][ T5262] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 81 [ 169.149366][ T5262] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 1 [ 169.213622][ T5262] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 84 [ 169.251555][ T5262] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 2 [ 169.290480][ T5264] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 169.299561][ T5264] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.316102][ T5262] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 169.363347][ T5264] usb 5-1: Product: syz [ 169.369590][ T5262] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 88 [ 169.379997][ T5169] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 169.388392][ T5264] usb 5-1: Manufacturer: syz [ 169.403159][ T5262] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 6 [ 169.410931][ C1] net_ratelimit: 30 callbacks suppressed [ 169.417590][ T5264] usb 5-1: SerialNumber: syz [ 169.449406][ T5264] r8152-cfgselector 5-1: config 0 descriptor?? [ 169.458448][ T5262] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 169.674035][ T23] usb 3-1: USB disconnect, device number 6 [ 169.705970][ T6760] udc-core: couldn't find an available UDC or it's busy [ 169.718174][ T23] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 169.740102][ T6760] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 169.775705][ T23] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 169.786043][ T5264] r8152 5-1:0.7: Expected endpoints are not found [ 169.800849][ T5169] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 169.817729][ T23] keyspan 3-1:1.0: device disconnected [ 169.826750][ T5169] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 169.861221][ T5169] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 169.870953][ T5169] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.882072][ T5169] usb 2-1: config 0 descriptor?? [ 169.990577][ T5264] r8152-cfgselector 5-1: Unknown version 0x0000 [ 170.028432][ T5264] r8152-cfgselector 5-1: USB disconnect, device number 9 [ 170.102097][ T6783] loop3: detected capacity change from 0 to 256 [ 170.357994][ T5169] cm6533_jd 0003:0D8C:0022.000C: unknown main item tag 0x0 [ 170.376764][ T5169] cm6533_jd 0003:0D8C:0022.000C: unknown main item tag 0x0 [ 170.438440][ T5169] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0D8C:0022.000C/input/input20 [ 170.532328][ T5169] cm6533_jd 0003:0D8C:0022.000C: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.1-1/input0 [ 170.584279][ T6789] loop3: detected capacity change from 0 to 1024 [ 170.647834][ T5169] usb 2-1: USB disconnect, device number 9 [ 170.713763][ T6789] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled [ 170.766358][ T6789] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled [ 170.888254][ T6795] fido_id[6795]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 170.926200][ T6789] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,jqfmt=vfsold,resuid=0x0000000000000000,discard,jqfmt=vfsv0,bsddf,acl,norecovery,,errors=continue. Quota mode: writeback. [ 171.031220][ T6789] EXT4-fs (loop3): re-mounted. Opts: (null). Quota mode: writeback. [ 171.072477][ T6807] loop2: detected capacity change from 0 to 256 [ 171.122597][ T6807] exfat: Deprecated parameter 'utf8' [ 171.149052][ T6811] loop4: detected capacity change from 0 to 512 [ 171.155178][ T6807] exfat: Deprecated parameter 'namecase' [ 171.249238][ T6807] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc232f927, utbl_chksum : 0xe619d30d) [ 171.387197][ T6811] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 171.538995][ T6811] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #16: comm syz.4.946: invalid indirect mapped block 32768 (level 2) [ 171.578134][ T4281] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 171.715801][ T6811] EXT4-fs (loop4): 1 orphan inode deleted [ 171.737736][ T6811] EXT4-fs (loop4): 1 truncate cleaned up [ 171.758263][ T6811] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 171.773604][ T6829] loop1: detected capacity change from 0 to 512 [ 171.854377][ T6829] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue. Quota mode: writeback. [ 171.900325][ T6829] ext4 filesystem being mounted at /223/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 172.020184][ T4281] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 172.038892][ T4281] usb 1-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 172.068098][ T4281] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.125222][ T6833] netlink: 'syz.4.956': attribute type 11 has an invalid length. [ 172.140344][ T6833] netlink: 184116 bytes leftover after parsing attributes in process `syz.4.956'. [ 172.173845][ T6822] loop3: detected capacity change from 0 to 32768 [ 172.240954][ T6835] bonding: no command found in bonding_masters - use +ifname or -ifname [ 172.297792][ T6822] XFS (loop3): Mounting V5 Filesystem [ 172.312301][ T4281] keyspan 1-1:1.0: Keyspan 2 port adapter converter detected [ 172.356673][ T4281] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 81 [ 172.375732][ T6822] XFS (loop3): Ending clean mount [ 172.412728][ T4281] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 1 [ 172.466597][ T4281] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 84 [ 172.513709][ T4281] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 2 [ 172.543114][ T4281] usb 1-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 172.573582][ T4281] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 88 [ 172.598590][ T4281] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 6 [ 172.614775][ T4281] usb 1-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 172.660829][ T4281] usb 1-1: USB disconnect, device number 6 [ 172.706888][ T4281] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 172.740021][ T4281] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 172.757279][ T4281] keyspan 1-1:1.0: device disconnected [ 172.815923][ T4187] XFS (loop3): Unmounting Filesystem [ 172.949361][ T6853] loop2: detected capacity change from 0 to 256 [ 172.961297][ T6853] exfat: Deprecated parameter 'namecase' [ 172.982499][ T6853] exfat: Deprecated parameter 'namecase' [ 172.989549][ T6851] loop1: detected capacity change from 0 to 4096 [ 173.037598][ T6853] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 173.084025][ T6851] EXT4-fs (loop1): Test dummy encryption mode enabled [ 173.111276][ T6851] EXT4-fs (loop1): inline encryption not supported [ 173.117956][ T6851] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled [ 173.180845][ T6851] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled [ 173.308833][ T6851] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=842c0a8, mo2=0003] [ 173.331330][ T6851] EXT4-fs (loop1): mounted filesystem without journal. Opts: debug,test_dummy_encryption=v1,inlinecrypt,delalloc,max_dir_size_kb=0x0000000000000008,noblock_validity,minixdf,sysvgroups,errors=remount-ro,jqfmt=vfsv0,acl,noinit_itable,jqfmt=vfsv1,. Quota mode: writeback. [ 173.490064][ T6851] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 173.690163][ T6866] loop3: detected capacity change from 0 to 4096 [ 173.815188][ T6879] netlink: 2172 bytes leftover after parsing attributes in process `syz.4.971'. [ 173.909660][ T6866] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,,errors=continue. Quota mode: writeback. [ 174.040539][ T6887] loop4: detected capacity change from 0 to 256 [ 174.142164][ T13] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 174.540707][ T5883] net_ratelimit: 34 callbacks suppressed [ 174.560266][ T4281] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 174.568363][ T13] usb 3-1: New USB device found, idVendor=072f, idProduct=2200, bcdDevice= 1.00 [ 174.580383][ T13] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.972540][ T4281] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 174.990375][ T4281] usb 2-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 175.035671][ T4281] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.062574][ T6915] netlink: 'syz.0.987': attribute type 4 has an invalid length. [ 175.096397][ T6915] netlink: 203252 bytes leftover after parsing attributes in process `syz.0.987'. [ 175.113049][ T6914] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.986: invalid indirect mapped block 4294967295 (level 1) [ 175.141784][ T4281] keyspan 2-1:1.0: Keyspan 2 port adapter converter detected [ 175.155732][ T4281] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 81 [ 175.180985][ T6914] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.986: invalid indirect mapped block 4294967295 (level 1) [ 175.207379][ T4281] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 1 [ 175.219481][ T6909] set_capacity_and_notify: 1 callbacks suppressed [ 175.219492][ T6909] loop3: detected capacity change from 0 to 32768 [ 175.245353][ T4281] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 84 [ 175.245738][ T6914] EXT4-fs (loop4): 2 truncates cleaned up [ 175.253257][ T4281] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 2 [ 175.261334][ T6914] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpjquota=,i_version,discard,noload,resuid=0x0000000000000000,,errors=continue. Quota mode: writeback. [ 175.302392][ T6909] (syz.3.984,6909,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 175.330840][ T4281] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 175.361087][ T4281] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 88 [ 175.368850][ T4281] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 6 [ 175.382373][ T6909] (syz.3.984,6909,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 175.435589][ T4281] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 175.455163][ T6909] JBD2: Ignoring recovery information on journal [ 175.608401][ T6909] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 175.644491][ T13] usb 3-1: NFC: Unable to get FW version [ 175.662467][ T13] pn533_usb: probe of 3-1:1.0 failed with error -71 [ 175.714715][ T13] usb 3-1: USB disconnect, device number 7 [ 175.878114][ T4281] usb 2-1: USB disconnect, device number 10 [ 175.910790][ T4281] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 175.923478][ T6926] netlink: 8 bytes leftover after parsing attributes in process `syz.0.989'. [ 175.967903][ T4281] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 176.013931][ T4281] keyspan 2-1:1.0: device disconnected [ 176.051394][ T6926] device veth0_macvtap left promiscuous mode [ 176.131253][ T6926] netlink: 'syz.0.989': attribute type 1 has an invalid length. [ 176.187154][ T6926] netlink: 'syz.0.989': attribute type 2 has an invalid length. [ 176.714142][ T6943] loop1: detected capacity change from 0 to 256 [ 176.723643][ T6924] loop4: detected capacity change from 0 to 32768 [ 176.734927][ T6942] loop2: detected capacity change from 0 to 1024 [ 176.847690][ T6927] ocfs2: Unmounting device (7,3) on (node local) [ 177.070598][ T6942] hfsplus: b-tree write err: -5, ino 22 [ 177.127312][ T26] kauditd_printk_skb: 12 callbacks suppressed [ 177.127326][ T26] audit: type=1800 audit(1791034822.484:38): pid=6942 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.997" name="file1" dev="loop2" ino=20 res=0 errno=0 [ 177.156829][ T6942] hfsplus: b-tree write err: -5, ino 20 [ 177.331525][ T1139] hfsplus: b-tree write err: -5, ino 25 [ 177.337344][ T1139] hfsplus: b-tree write err: -5, ino 4 [ 177.356766][ T5883] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.389605][ T1139] hfsplus: b-tree write err: -5, ino 2 [ 177.422334][ T1139] hfsplus: b-tree write err: -5, ino 20 [ 177.428303][ T1139] hfsplus: b-tree write err: -5, ino 22 [ 177.642315][ T5883] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.678968][ T6960] loop4: detected capacity change from 0 to 512 [ 177.756169][ T6960] EXT4-fs (loop4): Test dummy encryption mode enabled [ 177.783909][ T5883] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.812464][ T6960] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 177.887738][ T6960] EXT4-fs error (device loop4): ext4_orphan_get:1436: comm syz.4.1002: bad orphan inode 131083 [ 177.921407][ T6960] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption,init_itable,norecovery,,errors=continue. Quota mode: none. [ 177.992991][ T5883] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.446277][ T6970] geneve1 speed is unknown, defaulting to 1000 [ 178.708758][ T6973] loop2: detected capacity change from 0 to 32768 [ 178.911310][ T5169] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 179.330487][ T5169] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 179.347655][ T5169] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 179.357572][ T5169] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 179.373790][ T5169] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 179.388512][ T5169] usb 2-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 179.402846][ T5169] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.615933][ T6970] chnl_net:caif_netlink_parms(): no params data found [ 179.651825][ T1357] net_ratelimit: 35 callbacks suppressed [ 180.210246][ T23] Bluetooth: hci0: command 0x0409 tx timeout [ 180.330433][ T5169] gud 2-1:1.0: Failed to get connectors (error=-5) [ 180.337444][ T5169] gud: probe of 2-1:1.0 failed with error -5 [ 180.477490][ T6970] bridge0: port 1(bridge_slave_0) entered blocking state [ 180.513056][ T6970] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.537480][ T6970] device bridge_slave_0 entered promiscuous mode [ 180.595248][ T6970] bridge0: port 2(bridge_slave_1) entered blocking state [ 180.606551][ T5169] usb 2-1: USB disconnect, device number 11 [ 180.611633][ T6970] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.660349][ T6970] device bridge_slave_1 entered promiscuous mode [ 180.759957][ T6997] geneve1 speed is unknown, defaulting to 1000 [ 180.817608][ T7015] loop2: detected capacity change from 0 to 16 [ 180.878622][ T7015] erofs: (device loop2): mounted with root inode @ nid 36. [ 180.928497][ T7015] xt_hashlimit: max too large, truncated to 1048576 [ 180.950956][ T7015] erofs: (device loop2): init_inode_xattrs: xattr_isize 12 of nid 46 is not supported yet [ 180.996109][ T6970] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 181.062166][ T6970] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 181.401692][ T6970] team0: Port device team_slave_0 added [ 181.440028][ T6970] team0: Port device team_slave_1 added [ 181.637317][ T6970] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 181.659943][ T6970] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 181.743234][ T6970] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 181.782220][ T6970] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 181.808341][ T6970] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 181.832146][ T5262] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 181.901254][ T6970] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 181.989329][ T5883] device hsr_slave_0 left promiscuous mode [ 182.028858][ T5883] device hsr_slave_1 left promiscuous mode [ 182.050497][ T23] Bluetooth: hci4: command 0x0409 tx timeout [ 182.087437][ T5883] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 182.100096][ T5262] usb 3-1: Using ep0 maxpacket: 16 [ 182.119530][ T5883] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 182.169250][ T5883] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 182.208996][ T5883] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 182.227905][ T5262] usb 3-1: config 1 has an invalid interface number: 105 but max is 0 [ 182.252201][ T5262] usb 3-1: config 1 has no interface number 0 [ 182.258497][ T5262] usb 3-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 182.321381][ T5883] device bridge_slave_1 left promiscuous mode [ 182.322843][ T5262] usb 3-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 182.333030][ T5883] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.400179][ T5262] usb 3-1: config 1 interface 105 has no altsetting 0 [ 182.408831][ T23] Bluetooth: hci0: command 0x041b tx timeout [ 182.455613][ T5883] device bridge_slave_0 left promiscuous mode [ 182.480073][ T5883] bridge0: port 1(bridge_slave_0) entered disabled state [ 182.567501][ T5262] usb 3-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 182.608248][ T5262] usb 3-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 182.622150][ T5883] device veth1_macvtap left promiscuous mode [ 182.646596][ T5883] device veth0_macvtap left promiscuous mode [ 182.652598][ T5262] usb 3-1: Product: syz [ 182.656983][ T5262] usb 3-1: Manufacturer: syz [ 182.680298][ T5883] device veth1_vlan left promiscuous mode [ 182.687911][ T5262] usb 3-1: SerialNumber: syz [ 182.714244][ T5883] device veth0_vlan left promiscuous mode [ 182.732077][ T7024] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 182.739366][ T7024] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 183.130292][ T23] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 183.191672][ T7024] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 183.201507][ T7024] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 183.387296][ T23] usb 2-1: Using ep0 maxpacket: 16 [ 183.436225][ T5883] team0 (unregistering): Port device team_slave_1 removed [ 183.476845][ T5883] team0 (unregistering): Port device team_slave_0 removed [ 183.525417][ T5883] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 183.566077][ T5883] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 183.672959][ T23] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40 [ 183.698050][ T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.722523][ T23] usb 2-1: Product: syz [ 183.726820][ T23] usb 2-1: Manufacturer: syz [ 183.752308][ T23] usb 2-1: SerialNumber: syz [ 183.837098][ T5883] bond0 (unregistering): Released all slaves [ 183.890108][ T5262] aqc111 3-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 183.920179][ T5262] aqc111 3-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 183.994791][ T7052] device tunl0 entered promiscuous mode [ 184.009727][ T7052] netlink: 'syz.0.1034': attribute type 4 has an invalid length. [ 184.028865][ T7052] netlink: 9 bytes leftover after parsing attributes in process `syz.0.1034'. [ 184.086973][ T5262] aqc111 3-1:1.105 eth5: register 'aqc111' at usb-dummy_hcd.2-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, 76:57:ef:a1:fa:db [ 184.177692][ T5262] usb 3-1: USB disconnect, device number 8 [ 184.212434][ T5262] aqc111 3-1:1.105 eth5: unregister 'aqc111' usb-dummy_hcd.2-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 184.258805][ T5264] Bluetooth: hci4: command 0x041b tx timeout [ 184.392752][ T6970] device hsr_slave_0 entered promiscuous mode [ 184.430866][ T6970] device hsr_slave_1 entered promiscuous mode [ 184.449906][ T4191] Bluetooth: hci0: command 0x040f tx timeout [ 184.482315][ T6970] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 184.514151][ T6970] Cannot create hsr debugfs directory [ 184.528876][ T5262] aqc111 3-1:1.105 eth5 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 184.567606][ T5262] aqc111 3-1:1.105 eth5 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 184.608760][ T5262] aqc111 3-1:1.105 eth5 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 184.689647][ C0] net_ratelimit: 38 callbacks suppressed [ 184.769143][ T6997] chnl_net:caif_netlink_parms(): no params data found [ 184.920155][ T23] snd-usb-audio: probe of 2-1:1.0 failed with error -71 [ 184.967047][ T23] usb 2-1: USB disconnect, device number 12 [ 185.505754][ T6997] bridge0: port 1(bridge_slave_0) entered blocking state [ 185.539919][ T6997] bridge0: port 1(bridge_slave_0) entered disabled state [ 185.581310][ T6997] device bridge_slave_0 entered promiscuous mode [ 185.626230][ T7083] loop1: detected capacity change from 0 to 2048 [ 185.657509][ T6997] bridge0: port 2(bridge_slave_1) entered blocking state [ 185.688516][ T6997] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.711720][ T7085] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1041'. [ 185.723756][ T6997] device bridge_slave_1 entered promiscuous mode [ 185.844962][ T7083] EXT4-fs (loop1): mounted filesystem without journal. Opts: mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none. [ 185.919293][ T7083] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 186.095179][ T6997] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 186.210100][ T4191] Bluetooth: hci3: command 0x0406 tx timeout [ 186.216441][ T4191] Bluetooth: hci1: command 0x0406 tx timeout [ 186.252031][ T4191] Bluetooth: hci2: command 0x0406 tx timeout [ 186.289909][ T23] Bluetooth: hci4: command 0x040f tx timeout [ 186.313604][ T6997] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 186.518749][ T6997] team0: Port device team_slave_0 added [ 186.529909][ T4191] Bluetooth: hci0: command 0x0419 tx timeout [ 186.614630][ T6997] team0: Port device team_slave_1 added [ 186.801151][ T7108] geneve1 speed is unknown, defaulting to 1000 [ 186.878840][ T6997] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 186.891359][ T6997] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 187.006287][ T6997] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 187.067289][ T6970] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 187.170808][ T6997] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 187.177870][ T6997] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 187.291059][ T6997] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 187.330088][ T6970] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 187.415678][ T6970] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 187.485659][ T6970] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 187.490063][ T23] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 187.616028][ T7133] geneve1 speed is unknown, defaulting to 1000 [ 187.688553][ T6997] device hsr_slave_0 entered promiscuous mode [ 187.711827][ T6997] device hsr_slave_1 entered promiscuous mode [ 187.730061][ T6997] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 187.737962][ T6997] Cannot create hsr debugfs directory [ 187.880443][ T23] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 187.901481][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.948639][ T23] usb 1-1: config 0 descriptor?? [ 188.011642][ T23] cp210x 1-1:0.0: cp210x converter detected [ 188.370326][ T5262] Bluetooth: hci4: command 0x0419 tx timeout [ 188.459422][ T23] cp210x 1-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 188.649503][ T6970] 8021q: adding VLAN 0 to HW filter on device bond0 [ 188.764224][ T23] usb 1-1: cp210x converter now attached to ttyUSB0 [ 188.809139][ T6970] 8021q: adding VLAN 0 to HW filter on device team0 [ 188.853883][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 188.864442][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 188.957433][ T23] usb 1-1: USB disconnect, device number 7 [ 188.979151][ T23] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 189.006253][ T1357] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 189.036301][ T23] cp210x 1-1:0.0: device disconnected [ 189.058855][ T1357] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 189.106658][ T1357] bridge0: port 1(bridge_slave_0) entered blocking state [ 189.113813][ T1357] bridge0: port 1(bridge_slave_0) entered forwarding state [ 189.180224][ T1357] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 189.232837][ T1357] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 189.273969][ T1357] bridge0: port 2(bridge_slave_1) entered blocking state [ 189.281540][ T1357] bridge0: port 2(bridge_slave_1) entered forwarding state [ 189.340304][ T1357] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 189.413720][ T1357] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 189.441977][ T1357] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 189.488704][ T6997] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 189.593412][ T6997] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 189.656356][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 189.690079][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 189.732886][ T6997] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 189.785822][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 189.816487][ T7141] loop2: detected capacity change from 0 to 32768 [ 189.835058][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 189.882248][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 189.889826][ C1] net_ratelimit: 30 callbacks suppressed [ 189.956213][ T6970] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 190.003712][ T7141] JBD2: Ignoring recovery information on journal [ 190.020120][ T6970] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 190.037217][ T6997] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 190.133145][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 190.166037][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 190.181736][ T7141] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 190.225181][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 190.255092][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 190.278356][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 190.441532][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 190.449257][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 190.488163][ T7141] OCFS2: ERROR (device loop2): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #17056 has bit count 2061 but max bitmap bits of 2048 [ 190.525071][ T6970] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 190.639868][ T4281] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 190.667051][ T7141] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 190.749425][ T7141] OCFS2: Returning error to the calling process. [ 190.774160][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 190.787559][ T7141] (syz.2.1053,7141,1):ocfs2_search_chain:1783 ERROR: status = -5 [ 190.805547][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 190.828458][ T7141] (syz.2.1053,7141,1):ocfs2_search_chain:1893 ERROR: status = -5 [ 190.840288][ T7141] (syz.2.1053,7141,0):ocfs2_claim_suballoc_bits:1972 ERROR: status = -5 [ 190.848678][ T7141] (syz.2.1053,7141,0):ocfs2_claim_suballoc_bits:2015 ERROR: status = -5 [ 190.864505][ T6997] 8021q: adding VLAN 0 to HW filter on device bond0 [ 190.900245][ T7141] (syz.2.1053,7141,0):ocfs2_claim_new_inode:2248 ERROR: status = -5 [ 190.909123][ T7141] (syz.2.1053,7141,0):ocfs2_claim_new_inode:2263 ERROR: status = -5 [ 190.943390][ T4281] usb 1-1: Using ep0 maxpacket: 8 [ 190.948910][ T1357] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 190.980802][ T1357] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 191.008018][ T7141] (syz.2.1053,7141,0):ocfs2_mknod_locked:641 ERROR: status = -5 [ 191.022229][ T1357] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 191.045959][ T1357] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 191.065208][ T7141] (syz.2.1053,7141,0):ocfs2_mknod:385 ERROR: status = -5 [ 191.080052][ T4281] usb 1-1: config 0 has no interfaces? [ 191.087143][ T7141] (syz.2.1053,7141,0):ocfs2_mknod:504 ERROR: status = -5 [ 191.106970][ T7141] (syz.2.1053,7141,0):ocfs2_mkdir:661 ERROR: status = -5 [ 191.119205][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 191.147878][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 191.215294][ T6970] device veth0_vlan entered promiscuous mode [ 191.247612][ T6997] 8021q: adding VLAN 0 to HW filter on device team0 [ 191.292291][ T5883] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.304016][ T4281] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000c, bcdDevice= 0.40 [ 191.325972][ T4281] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.348458][ T4281] usb 1-1: Product: syz [ 191.372578][ T4281] usb 1-1: Manufacturer: syz [ 191.421021][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 191.422329][ T4281] usb 1-1: SerialNumber: syz [ 191.474984][ T4281] usb 1-1: config 0 descriptor?? [ 191.481861][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 191.509418][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 191.516609][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 191.546007][ T4189] ocfs2: Unmounting device (7,2) on (node local) [ 191.590443][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 191.616296][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 191.671805][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 191.678898][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 191.724606][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 191.736398][ T6970] device veth1_vlan entered promiscuous mode [ 191.790634][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 191.825375][ T5264] usb 1-1: USB disconnect, device number 8 [ 191.851644][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 191.882240][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 191.935682][ T5883] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.028836][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 192.054603][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 192.074158][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 192.090147][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 192.099233][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 192.128453][ T6997] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 192.152899][ T6997] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 192.182687][ T1357] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 192.206069][ T1357] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 192.222711][ T1357] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 192.237553][ T1357] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 192.250728][ T1357] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 192.269012][ T6970] device veth0_macvtap entered promiscuous mode [ 192.286933][ T5883] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.326886][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 192.338493][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 192.380984][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 192.404211][ T6970] device veth1_macvtap entered promiscuous mode [ 192.455990][ T5883] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.555787][ T1357] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 192.576536][ T1357] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 192.606264][ T1357] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 192.644163][ T6970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 192.711643][ T6970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.752852][ T6970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 192.804227][ T6970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.848022][ T6970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 192.891272][ T6970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.939806][ T6970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 192.959471][ T6970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.978896][ T6970] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 193.003046][ T6997] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 193.035859][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 193.062866][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 193.110414][ T6970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 193.133843][ T6970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.159800][ T6970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 193.192161][ T6970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.207074][ T6970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 193.243679][ T6970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.280021][ T6970] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 193.331931][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 193.342836][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 193.383684][ T6970] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.422653][ T6970] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.445951][ T6970] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.462868][ T6970] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.695705][ T1357] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 193.745433][ T1357] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 193.998241][ T1357] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 194.014441][ T1357] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 194.040011][ T1357] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 194.051904][ T1357] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 194.091109][ T6997] device veth0_vlan entered promiscuous mode [ 194.156022][ T6997] device veth1_vlan entered promiscuous mode [ 194.228161][ T145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 194.251395][ T145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 194.320459][ T1357] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 194.366000][ T145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 194.382117][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.388434][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.413882][ T145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 194.520597][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 194.542600][ T6997] device veth0_macvtap entered promiscuous mode [ 194.597587][ T1139] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 194.626607][ T1139] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 194.689204][ T7260] FAULT_INJECTION: forcing a failure. [ 194.689204][ T7260] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 194.733375][ T7260] CPU: 1 PID: 7260 Comm: syz.2.1077 Not tainted syzkaller #0 [ 194.740806][ T7260] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 194.740979][ T7260] Call Trace: [ 194.740989][ T7260] [ 194.740999][ T7260] dump_stack_lvl+0x188/0x250 [ 194.741030][ T7260] ? show_regs_print_info+0x20/0x20 [ 194.741054][ T7260] ? load_image+0x410/0x410 [ 194.767690][ T7260] ? __lock_acquire+0x7d40/0x7d40 [ 194.767735][ T7260] should_fail+0x383/0x4b0 [ 194.767763][ T7260] prepare_alloc_pages+0x1e3/0x5b0 [ 194.767793][ T7260] __alloc_pages+0x11b/0x480 [ 194.767820][ T7260] ? zone_statistics+0x170/0x170 [ 194.777353][ T7260] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 194.777401][ T7260] pcpu_populate_chunk+0x15d/0xc80 [ 194.786941][ T7260] ? _find_next_bit+0x1a9/0x200 [ 194.796466][ T7260] pcpu_alloc+0xcb6/0x16d0 [ 194.807649][ T7260] bpf_map_alloc_percpu+0xc5/0x150 [ 194.817093][ T7260] array_map_alloc+0x362/0x6f0 [ 194.826958][ T7260] map_create+0x481/0x2330 [ 194.831391][ T7260] ? bpf_lsm_bpf+0x5/0x10 [ 194.831419][ T7260] __sys_bpf+0x30a/0x6f0 [ 194.840073][ T7260] ? bpf_link_show_fdinfo+0x380/0x380 [ 194.840120][ T7260] __x64_sys_bpf+0x78/0x90 [ 194.849894][ T7260] do_syscall_64+0x4c/0xa0 [ 194.849917][ T7260] ? clear_bhb_loop+0x30/0x80 [ 194.859019][ T7260] ? clear_bhb_loop+0x30/0x80 [ 194.863749][ T7260] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 194.869688][ T7260] RIP: 0033:0x7f6441538159 [ 194.874497][ T7260] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 194.894126][ T7260] RSP: 002b:00007f643f790028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 194.902710][ T7260] RAX: ffffffffffffffda RBX: 00007f64417bffa0 RCX: 00007f6441538159 [ 194.902729][ T7260] RDX: 0000000000000050 RSI: 0000200000000480 RDI: 0000000000000000 [ 194.902745][ T7260] RBP: 00007f64415cf06b R08: 0000000000000000 R09: 0000000000000000 [ 194.902757][ T7260] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 194.902770][ T7260] R13: 00007f64417c0038 R14: 00007f64417bffa0 R15: 00007ffe374fd7d8 [ 194.902805][ T7260] [ 194.903520][ C1] net_ratelimit: 83 callbacks suppressed [ 194.955224][ T1139] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 194.984443][ T6997] device veth1_macvtap entered promiscuous mode [ 195.060073][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 195.114130][ T6997] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 195.176377][ T6997] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.199554][ T7270] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 195.233567][ T6997] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 195.250404][ T6997] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.263259][ T6997] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 195.275364][ T6997] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.286200][ T6997] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 195.300918][ T6997] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.314353][ T6997] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 195.326424][ T6997] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.351130][ T6997] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 195.423141][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 195.447439][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 195.487576][ T7270] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 195.514990][ T6997] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 195.536201][ T6997] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.547816][ T7] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 195.573085][ T6997] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 195.600504][ T6997] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.620730][ T6997] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 195.641430][ T6997] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.651736][ T5264] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 195.675666][ T6997] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 195.718384][ T7279] capability: warning: `syz.0.1083' uses deprecated v2 capabilities in a way that may be insecure [ 195.733000][ T6997] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.757540][ T6997] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 195.829873][ T7] usb 2-1: Using ep0 maxpacket: 8 [ 195.863255][ T1357] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 195.877520][ T7275] binder: 7274:7275 ioctl c0306201 200000001a80 returned -14 [ 195.907078][ T1357] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 195.952688][ T7281] loop2: detected capacity change from 0 to 512 [ 195.989960][ T7] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 196.001955][ T7283] Invalid argument reading file caps for ./file0 [ 196.017251][ T7] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 196.031053][ T6997] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.047998][ T7] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 196.080185][ T7281] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 196.085954][ T7] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 196.088710][ T6997] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.099094][ T7] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 196.132935][ T7] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 196.142864][ T7] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.166168][ T7281] System zones: 1-12 [ 196.171660][ T6997] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.182849][ T6997] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.340583][ T7281] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: inode #12: comm syz.2.1084: missing EA_INODE flag [ 196.424909][ T7281] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.1084: error while reading EA inode 12 err=-117 [ 196.466398][ T7281] EXT4-fs (loop2): 1 orphan inode deleted [ 196.500464][ T7281] EXT4-fs (loop2): mounted filesystem without journal. Opts: debug,resuid=0x000000000000ee01,,errors=continue. Quota mode: writeback. [ 196.817527][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 196.832705][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 196.912798][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 197.045125][ T3039] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 197.053627][ T23] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 197.073522][ T3039] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 197.133315][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 197.207240][ T7318] usbtmc 2-1:16.0: simple usb_control_msg returned 0 [ 197.215046][ T4191] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 197.414282][ T5264] usb 2-1: USB disconnect, device number 13 [ 197.421167][ T23] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 197.460057][ T4191] usb 3-1: Using ep0 maxpacket: 8 [ 197.466220][ T23] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 197.533260][ T23] usb 1-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 197.572858][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.581891][ T4191] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 197.611663][ T4191] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 197.645502][ T23] usb 1-1: config 0 descriptor?? [ 197.663774][ T4191] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.732261][ T4191] usb 3-1: config 0 descriptor?? [ 197.774060][ T5883] device hsr_slave_0 left promiscuous mode [ 197.798773][ T5883] device hsr_slave_1 left promiscuous mode [ 197.860332][ T5883] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 197.875331][ T5883] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 197.908472][ T5883] device bridge_slave_1 left promiscuous mode [ 197.925605][ T5883] bridge0: port 2(bridge_slave_1) entered disabled state [ 197.955019][ T5883] device bridge_slave_0 left promiscuous mode [ 197.977714][ T5883] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.014260][ T4191] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 198.090610][ T5883] device veth1_macvtap left promiscuous mode [ 198.096703][ T5883] device veth0_macvtap left promiscuous mode [ 198.116169][ T5883] device veth1_vlan left promiscuous mode [ 198.142060][ T5883] device veth0_vlan left promiscuous mode [ 198.160799][ T23] hid-steam 0003:28DE:1142.000D: unknown main item tag 0x0 [ 198.193950][ T23] hid-steam 0003:28DE:1142.000D: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.0-1/input0 [ 198.281105][ T23] hid-steam 0003:28DE:1142.000E: unknown main item tag 0x0 [ 198.313672][ T4935] usb 3-1: USB disconnect, device number 9 [ 198.339570][ T7317] loop5: detected capacity change from 0 to 40427 [ 198.395634][ T7317] F2FS-fs (loop5): Invalid SB checksum offset: 0 [ 198.414313][ T23] hid-steam 0003:28DE:1142.000E: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.0-1/input0 [ 198.434638][ T7317] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock [ 198.488454][ T7317] F2FS-fs (loop5): invalid crc value [ 198.529041][ T7317] F2FS-fs (loop5): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 198.610203][ T23] hid-steam 0003:28DE:1142.000D: Steam wireless receiver connected [ 198.623902][ T23] hid-steam 0003:28DE:1142.000D: No HID_FEATURE_REPORT submitted - nothing to read [ 198.724740][ T23] usb 1-1: USB disconnect, device number 9 [ 198.813026][ T7317] F2FS-fs (loop5): Try to recover 2th superblock, ret: 0 [ 198.847049][ T23] hid-steam 0003:28DE:1142.000D: Steam wireless receiver disconnected [ 198.861163][ T7317] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 198.943010][ T7337] fido_id[7337]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 199.023884][ T7343] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1098'. [ 199.051680][ T7329] loop6: detected capacity change from 0 to 32768 [ 199.161838][ T26] audit: type=1800 audit(1791034844.524:39): pid=7317 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1093" name="file1" dev="loop5" ino=10 res=0 errno=0 [ 199.192814][ T7329] JBD2: Ignoring recovery information on journal [ 199.309514][ T7329] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 199.476220][ T6970] attempt to access beyond end of device [ 199.476220][ T6970] loop5: rw=2049, want=45104, limit=40427 [ 199.526155][ T7329] OCFS2: ERROR (device loop6): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #17056 has bit count 2061 but max bitmap bits of 2048 [ 199.565628][ T7329] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 199.612318][ T7329] OCFS2: Returning error to the calling process. [ 199.638451][ T7329] (syz.6.1096,7329,1):ocfs2_search_chain:1783 ERROR: status = -5 [ 199.668526][ T7329] (syz.6.1096,7329,1):ocfs2_search_chain:1893 ERROR: status = -5 [ 199.693688][ T7329] (syz.6.1096,7329,1):ocfs2_claim_suballoc_bits:1972 ERROR: status = -5 [ 199.724176][ T7329] (syz.6.1096,7329,1):ocfs2_claim_suballoc_bits:2015 ERROR: status = -5 [ 199.755821][ T7329] (syz.6.1096,7329,1):ocfs2_claim_new_inode:2248 ERROR: status = -5 [ 199.776894][ T7329] (syz.6.1096,7329,1):ocfs2_claim_new_inode:2263 ERROR: status = -5 [ 199.829585][ T7329] (syz.6.1096,7329,1):ocfs2_mknod_locked:641 ERROR: status = -5 [ 199.860423][ T7329] (syz.6.1096,7329,1):ocfs2_mknod:385 ERROR: status = -5 [ 199.867808][ T7329] (syz.6.1096,7329,1):ocfs2_mknod:504 ERROR: status = -5 [ 199.876700][ T7329] (syz.6.1096,7329,1):ocfs2_mkdir:661 ERROR: status = -5 [ 199.970495][ C1] net_ratelimit: 106 callbacks suppressed [ 200.048506][ T5883] team0 (unregistering): Port device team_slave_1 removed [ 200.119509][ T5883] team0 (unregistering): Port device team_slave_0 removed [ 200.131433][ T4254] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 200.196069][ T6997] ocfs2: Unmounting device (7,6) on (node local) [ 200.245212][ T7352] 0x000000000000-0x000000010000 : "" [ 200.266101][ T5883] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 200.324370][ T7352] ftl_cs: FTL header not found. [ 200.464029][ T5883] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 200.824635][ T7353] Removing MTD device #1 () with use count 1 [ 200.915636][ T5883] bond0 (unregistering): Released all slaves [ 201.021763][ T4281] geneve1 speed is unknown, defaulting to 1000 [ 201.038323][ T7358] device batadv_slave_0 entered promiscuous mode [ 201.063961][ T4281] ================================================================== [ 201.066731][ T7358] device batadv_slave_0 left promiscuous mode [ 201.072882][ T4281] BUG: KASAN: use-after-free in siw_query_port+0x359/0x450 [ 201.072954][ T4281] Read of size 4 at addr ffff88805f7f40d8 by task kworker/0:8/4281 [ 201.072973][ T4281] [ 201.072980][ T4281] CPU: 0 PID: 4281 Comm: kworker/0:8 Not tainted syzkaller #0 [ 201.072999][ T4281] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 201.073012][ T4281] Workqueue: infiniband ib_cache_event_task [ 201.073035][ T4281] Call Trace: [ 201.073043][ T4281] [ 201.073053][ T4281] dump_stack_lvl+0x188/0x250 [ 201.073079][ T4281] ? show_regs_print_info+0x20/0x20 [ 201.073098][ T4281] ? _printk+0xda/0x130 [ 201.073124][ T4281] ? load_image+0x410/0x410 [ 201.073141][ T4281] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 201.073172][ T4281] print_address_description+0x60/0x2d0 [ 201.073195][ T4281] ? siw_query_port+0x359/0x450 [ 201.115108][ T4281] kasan_report+0xdf/0x130 [ 201.115140][ T4281] ? siw_query_port+0x359/0x450 [ 201.115165][ T4281] siw_query_port+0x359/0x450 [ 201.115184][ T4281] ib_cache_update+0x1bd/0x9c0 [ 201.115213][ T4281] ? ib_cache_setup_one+0x5c0/0x5c0 [ 201.115232][ T4281] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 201.115252][ T4281] ? __lock_acquire+0x7d40/0x7d40 [ 201.130025][ T7361] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1103'. [ 201.132517][ T4281] ? read_lock_is_recursive+0x10/0x10 [ 201.132548][ T4281] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 201.137799][ T7361] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1103'. [ 201.142032][ T4281] ? _raw_spin_unlock+0x40/0x40 [ 201.142062][ T4281] ib_cache_event_task+0xcf/0x1c0 [ 201.142089][ T4281] process_one_work+0x867/0xff0 [ 201.142127][ T4281] ? worker_detach_from_pool+0x240/0x240 [ 201.142147][ T4281] ? lockdep_hardirqs_off+0x70/0x100 [ 201.142172][ T4281] ? _raw_spin_lock_irq+0xb7/0xf0 [ 201.142191][ T4281] ? _raw_spin_lock_irqsave+0x100/0x100 [ 201.142216][ T4281] ? wq_worker_running+0x97/0x170 [ 201.167224][ T4281] worker_thread+0xad7/0x12a0 [ 201.167273][ T4281] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 201.167309][ T4281] kthread+0x42e/0x520 [ 201.207061][ T4281] ? rcu_lock_release+0x20/0x20 [ 201.207093][ T4281] ? kthread_blkcg+0xd0/0xd0 [ 201.207116][ T4281] ret_from_fork+0x1f/0x30 [ 201.237737][ T4281] [ 201.237751][ T4281] [ 201.237757][ T4281] Allocated by task 4198: [ 201.264443][ T4281] __kasan_kmalloc+0xaf/0xe0 [ 201.264473][ T4281] kvmalloc_node+0x84/0x130 [ 201.264492][ T4281] alloc_netdev_mqs+0x84/0xc40 [ 201.264511][ T4281] rtnl_create_link+0x2fd/0xa90 [ 201.280381][ T4281] rtnl_newlink+0x12b6/0x1920 [ 201.280408][ T4281] rtnetlink_rcv_msg+0x7f1/0xf10 [ 201.280428][ T4281] netlink_rcv_skb+0x1e9/0x430 [ 201.280444][ T4281] netlink_unicast+0x78f/0x940 [ 201.280462][ T4281] netlink_sendmsg+0x8ba/0xbe0 [ 201.280478][ T4281] __sys_sendto+0x46d/0x620 [ 201.280495][ T4281] __x64_sys_sendto+0xda/0xf0 [ 201.280513][ T4281] do_syscall_64+0x4c/0xa0 [ 201.280532][ T4281] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 201.280552][ T4281] [ 201.280559][ T4281] Freed by task 5883: [ 201.280569][ T4281] kasan_set_track+0x4b/0x70 [ 201.280587][ T4281] kasan_set_free_info+0x1f/0x40 [ 201.298789][ T4281] ____kasan_slab_free+0xd5/0x110 [ 201.298816][ T4281] slab_free_freelist_hook+0xec/0x170 [ 201.298835][ T4281] kfree+0xef/0x2a0 [ 201.317916][ T4281] device_release+0x92/0x1c0 [ 201.317941][ T4281] kobject_put+0x217/0x450 [ 201.317958][ T4281] netdev_run_todo+0x942/0xac0 [ 201.342129][ T4281] default_device_exit_batch+0x369/0x3c0 [ 201.342157][ T4281] cleanup_net+0x78e/0xba0 [ 201.342175][ T4281] process_one_work+0x867/0xff0 [ 201.342194][ T4281] worker_thread+0xad7/0x12a0 [ 201.342211][ T4281] kthread+0x42e/0x520 [ 201.342226][ T4281] ret_from_fork+0x1f/0x30 [ 201.342245][ T4281] [ 201.342252][ T4281] The buggy address belongs to the object at ffff88805f7f4000 [ 201.342252][ T4281] which belongs to the cache kmalloc-cg-4k of size 4096 [ 201.342270][ T4281] The buggy address is located 216 bytes inside of [ 201.342270][ T4281] 4096-byte region [ffff88805f7f4000, ffff88805f7f5000) [ 201.342290][ T4281] The buggy address belongs to the page: [ 201.342299][ T4281] page:ffffea00017dfc00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x5f7f0 [ 201.342319][ T4281] head:ffffea00017dfc00 order:3 compound_mapcount:0 compound_pincount:0 [ 201.371574][ T4281] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 201.371608][ T4281] raw: 00fff00000010200 0000000000000000 dead000000000122 ffff888016c4c280 [ 201.371626][ T4281] raw: 0000000000000000 0000000000040004 00000001ffffffff 0000000000000000 [ 201.371636][ T4281] page dumped because: kasan: bad access detected [ 201.371654][ T4281] page_owner tracks the page as allocated [ 201.371661][ T4281] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd60c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_RETRY_MAYFAIL|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4189, ts 64989441614, free_ts 22382294088 [ 201.371692][ T4281] get_page_from_freelist+0x24f6/0x2670 [ 201.371717][ T4281] __alloc_pages+0x1ee/0x480 [ 201.371735][ T4281] new_slab+0xc0/0x4b0 [ 201.371750][ T4281] ___slab_alloc+0x807/0xdd0 [ 201.387600][ T4281] __kmalloc_node+0x142/0x3a0 [ 201.387625][ T4281] kvmalloc_node+0x84/0x130 [ 201.387642][ T4281] alloc_netdev_mqs+0x84/0xc40 [ 201.401935][ T4281] rtnl_create_link+0x2fd/0xa90 [ 201.416082][ T4281] rtnl_newlink+0x12b6/0x1920 [ 201.416111][ T4281] rtnetlink_rcv_msg+0x7f1/0xf10 [ 201.439898][ T4281] netlink_rcv_skb+0x1e9/0x430 [ 201.439923][ T4281] netlink_unicast+0x78f/0x940 [ 201.439941][ T4281] netlink_sendmsg+0x8ba/0xbe0 [ 201.439957][ T4281] __sys_sendto+0x46d/0x620 [ 201.439975][ T4281] __x64_sys_sendto+0xda/0xf0 [ 201.439993][ T4281] do_syscall_64+0x4c/0xa0 [ 201.440012][ T4281] page last free stack trace: [ 201.440019][ T4281] free_unref_page_prepare+0x637/0x6c0 [ 201.440039][ T4281] free_unref_page+0x8f/0x2a0 [ 201.461699][ T4281] free_contig_range+0x96/0xf0 [ 201.461725][ T4281] destroy_args+0xef/0xa00 [ 201.461743][ T4281] debug_vm_pgtable+0x321/0x380 [ 201.461761][ T4281] do_one_initcall+0x272/0x730 [ 201.507455][ T4281] do_initcall_level+0x13d/0x1f0 [ 201.507483][ T4281] do_initcalls+0x4b/0x90 [ 201.507501][ T4281] kernel_init_freeable+0x3d5/0x560 [ 201.507522][ T4281] kernel_init+0x19/0x1b0 [ 201.524775][ T4281] ret_from_fork+0x1f/0x30 [ 201.557722][ T4281] [ 201.557733][ T4281] Memory state around the buggy address: [ 201.557746][ T4281] ffff88805f7f3f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 201.557760][ T4281] ffff88805f7f4000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 201.557772][ T4281] >ffff88805f7f4080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 201.557781][ T4281] ^ [ 201.557793][ T4281] ffff88805f7f4100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 201.557806][ T4281] ffff88805f7f4180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 201.557817][ T4281] ================================================================== [ 201.557825][ T4281] Disabling lock debugging due to kernel taint [ 201.789879][ T4281] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 201.797124][ T4281] CPU: 0 PID: 4281 Comm: kworker/0:8 Tainted: G B syzkaller #0 [ 201.805991][ T4281] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 201.816543][ T4281] Workqueue: infiniband ib_cache_event_task [ 201.822642][ T4281] Call Trace: [ 201.826026][ T4281] [ 201.827261][ T7361] procname=mcast_resolicit mode=644 proc_handler=neigh_proc_dointvec_zero_intmax data=ffff88802ae49f60 [ 201.828977][ T4281] dump_stack_lvl+0x188/0x250 [ 201.829003][ T4281] ? show_regs_print_info+0x20/0x20 [ 201.829022][ T4281] ? load_image+0x410/0x410 [ 201.829043][ T4281] panic+0x2f8/0x850 [ 201.859126][ T4281] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 201.865485][ T4281] ? bpf_jit_dump+0xd0/0xd0 [ 201.870025][ T4281] ? _raw_spin_unlock_irqrestore+0x10d/0x120 [ 201.874817][ T7362] kcov: kcov_task_exit: t = ffff88801e083b80, kcov->t = ffff88801e083b80 [ 201.877252][ T4281] ? _raw_spin_unlock+0x40/0x40 [ 201.891376][ T4281] ? siw_query_port+0x359/0x450 [ 201.896254][ T4281] check_panic_on_warn+0x80/0xa0 [ 201.901409][ T4281] ? siw_query_port+0x359/0x450 [ 201.906377][ T4281] end_report+0x6d/0xf0 [ 201.910642][ T4281] kasan_report+0x102/0x130 [ 201.915178][ T4281] ? siw_query_port+0x359/0x450 [ 201.915900][ T7361] procname=retrans_time mode=644 proc_handler=neigh_proc_dointvec_userhz_jiffies data=ffff88802ae49f64 [ 201.920138][ T4281] siw_query_port+0x359/0x450 [ 201.920162][ T4281] ib_cache_update+0x1bd/0x9c0 [ 201.920184][ T4281] ? ib_cache_setup_one+0x5c0/0x5c0 [ 201.920202][ T4281] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 201.920223][ T4281] ? __lock_acquire+0x7d40/0x7d40 [ 201.920243][ T4281] ? read_lock_is_recursive+0x10/0x10 [ 201.920261][ T4281] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 201.920282][ T4281] ? _raw_spin_unlock+0x40/0x40 [ 201.920301][ T4281] ib_cache_event_task+0xcf/0x1c0 [ 201.920320][ T4281] process_one_work+0x867/0xff0 [ 201.920345][ T4281] ? worker_detach_from_pool+0x240/0x240 [ 201.920363][ T4281] ? lockdep_hardirqs_off+0x70/0x100 [ 201.920385][ T4281] ? _raw_spin_lock_irq+0xb7/0xf0 [ 201.920403][ T4281] ? _raw_spin_lock_irqsave+0x100/0x100 [ 201.965441][ T7361] procname=base_reachable_time mode=644 proc_handler=neigh_proc_base_reachable_time data=ffff88802ae49f68 [ 201.969073][ T4281] ? wq_worker_running+0x97/0x170 [ 201.969096][ T4281] worker_thread+0xad7/0x12a0 [ 201.969127][ T4281] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 201.969152][ T4281] kthread+0x42e/0x520 [ 201.969168][ T4281] ? rcu_lock_release+0x20/0x20 [ 201.969185][ T4281] ? kthread_blkcg+0xd0/0xd0 [ 201.969203][ T4281] ret_from_fork+0x1f/0x30 [ 201.969228][ T4281] [ 201.969312][ T4281] Kernel Offset: disabled [ 202.059409][ T4281] Rebooting in 86400 seconds..