last executing test programs: 45.41174681s ago: executing program 1 (id=408): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x94, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x64, 0x2, [@TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x1}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x0, [0x8, 0x4], [0xfffd]}}]}}]}, 0x94}, 0x1, 0x7a00, 0x0, 0x4c8c1}, 0x0) 45.333951054s ago: executing program 1 (id=409): openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000006a80), 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 44.436715367s ago: executing program 1 (id=415): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900030073797a32000000001400048008000240326565a708000140000000000900010073797a300000000048000000060a010400000000000000000100000008000b40000000000900010073797a3000000000200004801c0001800b00010072656a65637400000c000280080001400000000114000000110001"], 0xd0}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000008c0)={{0x14}, [@NFT_MSG_NEWCHAIN={0x34, 0x3, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_POLICY={0x8}]}], {0x14}}, 0x5c}}, 0x0) 44.314619374s ago: executing program 1 (id=416): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x8, &(0x7f0000000080)={[{@nodioread_nolock}, {@sb={'sb', 0x3d, 0x1}}]}, 0x4, 0x523, &(0x7f00000018c0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x1e0) setxattr$trusted_overlay_origin(&(0x7f0000000100)='./file0\x00', &(0x7f0000000000), &(0x7f0000000b40), 0xfe68, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000300)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]}) 43.614623445s ago: executing program 1 (id=423): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffa) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) lseek(r0, 0xf, 0x4) 42.389367287s ago: executing program 1 (id=434): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a00100000000280", 0x2a}, {&(0x7f0000000400)="6a6f8e5e", 0x4}], 0x2}, 0x0) 42.087150605s ago: executing program 32 (id=434): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a00100000000280", 0x2a}, {&(0x7f0000000400)="6a6f8e5e", 0x4}], 0x2}, 0x0) 27.424451477s ago: executing program 5 (id=510): unshare(0x24020400) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) splice(r0, 0x0, r1, 0x0, 0x6, 0x0) 27.2022386s ago: executing program 5 (id=512): ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000040)={0x9, 0x5, 0x1, 'queue0\x00', 0x2}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000140)={[{@user_xattr}, {@heartbeat_none}, {@resv_level={'resv_level', 0x3d, 0x4}}, {@coherency_full}, {@coherency_full}, {@localflocks}, {@preferred_slot={'preferred_slot', 0x3d, 0x1}}, {@dir_resv_level={'dir_resv_level', 0x3d, 0x3}}]}, 0x1, 0x442c, &(0x7f0000008940)="$eJzs3c9PHGUfAPBnBt630LftC3176JuYuIlNNGoI9KTSRErpD2ixptrGeNkusG3RhW1gMR56wFsTTybGGA+NJt44NRy81j/Bi8d6bqIHLyYmjZjdnYWdYTdsGxZs8/kk8DDPb/juzDxzGJ44Ubk1v5ybX84VFnPl2RvLJ3OflEsrC8UQ75H9Hp/OdCNOYr9/Lp859961kyH8OPfzo42NjY1Q1RtaGmn6+Y/f78w2pw1xpk2139a97ZYPQwjHts2rqieE8MEPIUQhhNNJ3niS9ocQjiTzvXbn8+u5XZrN/YfFU/nH03fXR09Mrd1bb/+7RyF8U/r/6zcXfn2pZ/SXV3dpeAAAAAAAAAAAAAAAAAAAnnHnr1y++u7wSHgQhd61aPv7uueTtN37sRu75sXu/7IAAAAAAAAAAAAAAAAAAADwD7X1/n8uOtri/f+JJB1r037j7e7Pke6ZfOfyxNnhkWT/92hb+RtJ1m+ne8Jgi33fs/u/n860b73/+/ZxnlZjfo1xB0IUD6WO43hoKITvko3fj0cH41J5ufLajfLK4tyuTeOZlY5/fff+VHSSDf07jf94pv/u7///v22fpurx9d37iD3X0vHvaVvv+8+ijuJ/JtNuL+LP00vHv7eW199cYax+AajG/4veneM/kem/W/E/EkLIRdW55lJXgOoapprfbr1CWjr+/6rlpS6dyR+y3fn/Zyb+ZzP978f5X53/avZGREvp+P+7lteXqrF1/g/GO5//5zL978f9vzr/Vff/jqTjf6Ce2ZuqUvtLdnr9b/y/uPBVPelW/K/GyTyPRKlPwFpUz2/3/+pIS8e/b1v51vNf3NH670Km/V49/zXGbTz/NS7/r0T15z9aS8e/v229Ts//yUy7bl//x2rrP55WOv4Ha3nptfNA7Xun8Z/K9N+t+NdWJX2N+G9dT/46UM//1vqvI+n4/6eeGTfXWK19r63/op3X/xcz/e/H+q86/9W4u6M+L9LxP9S2XjX+P3Vw/7+Uadf9+Icw3PQBEPYnk47/4bb1aud/387xn86063b8X+5m5wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADPgPEkHQhRPJQ6juOhoRDOJMfHw8FopjCXnymVZz9eDmEiyc+Fo9HNUnmmUMrPL5bnivlCqVSeDeFsUn4s9EXLpXIlv1C4fW6zr/7oVrGwVJkpFiohhPNJ/gvhcKOvmfnKQuF2COHCZtl/4/LS7VuFxfzc/NJbw8PDw2Fycw6DUfHTSnGxUh+9XhrC1GbbgahpcrXii5tzORR9VF5ZWiyUavmXmtqUyrOFUlOb6aTsyzAYVZZWFmcLlWK+VL7ZGG8/jSXpxOSV969cGtlWfj2qp+N7Oy0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAntCD0Te/DiH01o/iEMJY44co+Uq5/7B4Kv94+u766ImptXvrj1rVAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgL/ZgQMBAAAAACD/10aoqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwi79ozQQRHEAfjMWWnoMq2W3s11RRAtXBE+gx/AwehQv4R0sUqRNEQLJLIT9A9sk1fc1D+bHzHswDwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFju8a17f62biBRX28uI38+//+P8udTvu+n7F2eYkdN5eunuH+qm/Hsa5bflaNXmfbpZf33ERO39DPZkuE8H4z5Dc/s2N1/f9zpSriKiLflNyrmqlr0FAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwI4dOBAAAAAAAPJ/bYSqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqoq7MCxAAAAAIAwf+so+jYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAXwEAAP//1HYgCQ==") ioctl$sock_bt_hci(r0, 0x800448f0, &(0x7f00000001c0)) 25.562744007s ago: executing program 5 (id=523): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c80)=ANY=[@ANYBLOB="5c0000001000090402000000fbdbdf2500000000", @ANYRES32=r2, @ANYBLOB="84000000000000003c001280110001006272696467655f736c617665000000002400058005001b000000000005001c0000000000050006000000000008002200b0"], 0x5c}}, 0x2) 25.277135913s ago: executing program 5 (id=525): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000080)='./file2\x00', 0x10, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x4, 0x5510, &(0x7f00000020c0)="$eJzs3M1rI2UYAPAn7Xa/XYt48LYDi9DKJjT9WPRWdRc/sEtZ9eBJ0yQN2U0ypUnT2pMHj+LB/0QUPHn0b/Dg2Zt4ULwJSmYmuvUDhKaN3f5+MHnmffPmmecNy8IzUxLAuTWf/PJTKW7ElYiYjYjrEdl5qTgy63l4LiJuRsTMY0epmP9j4mJEXI2IG6Pkec5S8dZnt4e31n588+evv7104drnX303vV0D0/Z8RHR38vP9bh7TVh4fFvO1YTuL3dVhEfM3uo+KcZrH/eZWlmG/Nl5Xy+JKK1+f7uz1R3G7U6uPYqu9nc3v9PIL9oetcZ7sAw9ru9m40dzKYrufZrF1mNd1cJj/33bYH+R5GkW+D7P0MRiMYz7fPGjm+9l5lMV6b1DM53nTRvNgFIdFLC4X9bTTyOrYOs43/f/2Vru3d5AMm7v9dtpL1irVFyvVO+XqbtpoDpqr5Vq3cWc1WWh1RsvKg2atu95K01anWamn3cVkoVWvl6vVZOFuc6td6yXVamWlslReWyzObiev3X836TSShVF8pd3bG7Q7/WQ73U3yTywmy5WVlxaTW9Xk7Y3NZPPBvXsbm++8f/e9+y9vvPFqsehvZb0Qy0vLy+XqUnm5uniO9v9xUXSyMLH9w7GUpl0AwNmj/wem4eT6/90HESff/4f+fyLOVP87LmuC/e953z8ci/4fAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAODc+n7ui9ezk/l8fK2Yf6qYeqYYlyJiJiJ++wezcfFIztkiz9y/rJ/7Sw3flCLLMLrGpeK4GhHrxfHr0yf9LQAAAMCT68uPbn6ad+v5y/y0C+I05TdtZq5/MKF8pYiYm/9hQtlmRi/PTihZ9u/7QhxMKFt2A+vyhJLlt9wuTCrbfzJ7JFx+LJTyMHOq5QAAAKfiaCdwul0IAAAAp+mTaRfAdJRi/Chz/Cw4+8v7Px8IXjkyAgAAAM6g0rQLAAAAAE5c1v/7/T8AAAB4suW//wcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPzOzv3cqA1EcQB+NjiQfwqKck8ruUEZKSHHHCMKSBMUkANpIQ1QA7ltCStY4RlYWKG9eIy1q++TzDCW+fGM8GFmpAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIA+/W/Wi7+/vv7umrPbd1PmbgAAAIBrts160b6Zpf77fP5jPvU596uIqCPi2th9FG8uMkc5p3m8/s/59c2TGv5FtAmH75jk411EfMvH/ae+fwUAAAB4vTbL1TyN1tPLbOiCuKU0aVN/+F4or4qIZnZXKK0+5H0pFNb+v8fxs1BaO4E1LRSWptzGuVMs9Vnt436atZueNVVq6qsfOxZ5oyoBAICyRhfNeNBaAAAA6NOPoQtgGFUclzJPS4GT1OTlvbcXPQAAAOAFqoYuAAAAAOhdO/6/0f5/e/v/AQAAwDDS/n8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD0adusF5vlat41Z7fvpszdAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwwP68o0AIhEEY7F3fmcz9DysNmpqaVIHw8TcGAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALz53V/+T0yNM8nca2PpeSRZOzW2To29c+PoD+Pr1wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAX+/OSAiEQBFEwZ/zvpO9/WEnQM4gQAQ2PKmrRAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAX/S7X/5PTI0zydxpY+l4JFm7amxdNfYeNI4ejLd/AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXO/fv20YVBwD8nc/n0ALCBOQhCIHEAAt13dLSDTGAIgb+BESUuiXU5UebgVYVIgsbytwFwYgQEihs/R86J1KWsGXwECTmoDvf2ZcfUsyvO5N8PtK79/XpdO/7nqUo33uXAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEBh+PYkjtNDexQ38nObew+W037rUJ96tL69kLY0jqpM+v/hxfKHqDMO9+pIBgAAgLMhLur7EMJOsrGY9o12Vv8nxTVpzf/d06O4qOcP1/1FX9T+afv1l93nxwO1R+OkN72xMuhfPJpK87+b5Wx75sQrmtnKZ89e4uwLaby39twwydYz+ubx43daWThXRbYAwN9xoejzoPh9KO17dSYGwJnRLBXeRf0ft+vNCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKAKw7XwZBFHIYSF5iRObe09WD6uf7S+vVC0qw8froevJvdMb5GEEG6sDPoXK53NbLt77/6tpcGgf6f64KUQQl2jv5VP/9YHU1wcQi3rI/h3gv25/MuekXxmIPgwOnk1avyhBADAqZTkLa3rd5KNxfRcNB/C/vcH6/9XS3GYsv7f/ejqZnmscv3fq2yGs6+7evuz7t17919fub10s3+z/8kbl3pv9i5fu3LlWjd7VtL1xAQAAIB/ppW3cv3fmD+6/3++FIcp6//Pv+19WR4rVv8fa7LpV3cmAAAAZ9uzL//xe3TM+ajVCl8sra7e6Y2O48+XRscaUv3L5vJWrv/j+bqzAgAAAKowXIsO7P9fL8Vhyv3/p3544afyPeMQwrl8///C8qeD69VNZ6ZV8SfHdc8RAACAep3LW3n/P8ne/2+MX3lohBBee2UU5/8GcKr6P3736x/LY5Xf/79c3RRnUqMzWo+s74TQ7NSdEQAAAKfZE3lLi/3fko3Fj38+/37L+/8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAVfszAAD//z3MPqM=") mkdir(&(0x7f0000000300)='./file0\x00', 0xfffffffffffffffe) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x140) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 23.318513398s ago: executing program 5 (id=533): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYRES16=0x0, @ANYRES32], 0x2, 0x5512, &(0x7f00000020c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183341, 0x0) ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x8000000, 0x2000003}) 21.393467312s ago: executing program 5 (id=549): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000001c0)='cgroup.max.descendants\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[@ANYRESDEC=r0, @ANYRESDEC=r0], 0x27) 21.054299801s ago: executing program 33 (id=549): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000001c0)='cgroup.max.descendants\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[@ANYRESDEC=r0, @ANYRESDEC=r0], 0x27) 3.004788303s ago: executing program 3 (id=689): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000000)={0x0, 0x7, 0x1, 'h'}, 0x9) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000000340)={0x0, 0x1}, 0x8) 3.004363943s ago: executing program 6 (id=690): syz_mount_image$nilfs2(&(0x7f0000000ec0), &(0x7f0000000080)='./file0\x00', 0x40, &(0x7f0000000000)=ANY=[], 0x4, 0xf82, &(0x7f0000003080)="$eJzs3U9sHNX9APA36/W/2MRr4AcGfoQUWhEo2CGJ1PQWBOqlEuLSOygkNMJQ1NBKREBMD4hKiCIhThUHEBdKpRSpSKBKFeqp7alVb+0F9UKlKpWCemgjJa5iv1nvPu9k12N7dtf7+UjffX7zZuf7HXsTz4xn3wZgZNXWHo8dW8hCeOeztx99+ansk2vL7mqucXDtMYu9RghhvKWfJdv7Ii64cumlk53aLBxZe8z74bGLzefOhBBWwsHweWiEj5aWv/rw3UcOffza1C1vnnvmlV3a/aZ0PwAAYC+68Mflv973jz88MH/5woETYbK5PD8+b8T+TDzuPxwPlPPj5Vpo72ct0WoiWW8sRi1ZbyxZr57kqRfkG0+2M16w3kSXfGMtyzrtJwAAAAyj/Ly2EbLaYlu/VltcXD/vv+aLuYls8bkzy6fP9qlQAAAAoLR/n1+76XaIY2oAahBpTOcvsK0976Pvbv0524paxfnqFecbmSj3ehNCCCGE2LlwPCKGIFbnKrzYAAAAANBhvrBNVnZ2pq7m1hq95b/4cK3z82EHJK+/zdNO7PDr//r5pzavUGn+DnY//3if8193/z941f84AACUt1ePJvP9yo+j83kM0nkEx9qeNTO21fOPWrKd+hbrLJpXcFjmGyyqc6ziOsoqqn+rP8d+Kao/nQ9zUBXVn87TOaiK6p+suI6yiurvcOUnDOI/66L6pyuuo6yi+vdVXEdZRfXPVFxHWUX1z1ZcR1lF9d9QcR1lFdW/v+I6yiqqf1huqy2qv1FxHWUV1T+/3gz8YURR/TdWXEdZRfXfVHEdZRXVf3PFdfTLnbHNvw8HCtab6XDwN3AHgwAAAEBH/x36+f9GNOoDUIMQQgx9vLr+y7B9+VSHZWJbURuAGnYrpju9hoQQQoiBjPN9vPYAAAAADIb8fQH5u95Xo3x8bNP4396/9piP11vHpzY2kI+Pd9n+RJfxyS7jAAAAQAi/ef30bW9lG/Pdpe/p3+p8ePm8UdPhk6uhxDxG6XyEW82/3XnPtpu/84QjwzIbGwAAAHtV9p3Pr97/6HsvzF++cOBEy9nv1Xi+m88DWo/XBj6N/fy+gNmkn+Xn0Cfa89QK1kuvD9xQtL3Ht7mjAAAAMMLy8/dGyGqLLefdjVCrLS5unI8vhPHs9JnlU4djP/98lt/PjU9eW/5QxXUDAAAAvds43+98/p9/ju9CmMgWnzuzfPrsen+2uXy81npdYG5jedZ6XaCRLD9SsPxo7MfP7wzfn5teW7548gfLT+30zgMAAMCIOPviuWeeXF4+9cPR+aIeQtjWdsIg7IUvfLGrX/T7fyYAAGCnffnl2+M/Ojr72/X3/2/Mf3c1fnEw9htxbr8/xeX5fQL5+wA2vV//ifY8c0XrPd++XiNZbyzGZFL3VMt2wtp8g+3Pmy/K12jfzkRBvpkk32ySL52noJ6sn3WYSzB0mAkwX28uWZ7Ow1hPcmRJ/rs75AIAAIDc0gvPPr909sVzD5559smnTz196rmjR45/+/jxww9966Gltfv6l1rv7gcAAACG0cZNv/2uBAAAAAAAAAAAAAAAAAAAAEZXFR8n1u99BAAAgFH3r/MhhBUhCiL/gMF+1zHskQ1ADbsXq5P9r2FvR/DvUAghhBDbjP6e9005lhmMWF1NP2keAAAAYHddufTSydZ2k5VsR/M1t9ZYb67GvHk7++Bf5q9FvtrFh9uvl+zb0WoYdVW//uUf1PyTHcc/eHVn869diG9s9Lv//1dr38CJtcd67E33mvfepV8sNPOHEG6v95g/3f/He83Y7lCS/97QW/7V95L8T7T1ar3mvy/Jv6/H/Jv2//miDFPXzX9/zL8Q+4fu6TV/+y5OJtl6fQF8M9n/p0Kv+ZP9b/SYMPFAzA8Ao6j523z1fH8L2WH5UUJ+PD0T+/n+5ges6d0PWz3+ryXbqW+78vbt5sdBt8Z+86hupT1vbqv159+X2djeULLO1LDcVVJU/079HHdbUf3jFddRVlH9ExXXUVZR/Z3P3gdPUf3XP3scHEX193whos+K6h+W68pF9c9UXEdZRfXPVlxHWUX1b/X3eL8U1b+/4jrKKqp/ruI6yiqqv+RltcoV1T9fcR1lFdV/Y8V1lFVU/00V11FWUf03V1xHv9wR26Lz4fz8cy6O5f1G0p/s8L3s+Y8hAAAAwK7650DO/9dy5aDvtQghhBBiGGJsAGoQYpjjP6vr+l2HEGL3YnW1n1cf6LdsiO4VB2Dn7O5sFgw6P//R5uc/2vz8uZ78L/FZ0s+NdRmvdxkf7zI+kYxnyRMni8ajm5LtrubXNaObu4z/X9yDovH9yfN/nIzf2mX7C13Gb+syfnuX8Tu6jAMAADAabomt80MAAADYu17+5adv/PreJy7NX75w4ESY2DTv/OHYn4x/W3899tN573Pj8W/+P4n992P7u9j+PVnf/ScAAACw+/LPifH3fwAAANi78s8pdf4PAAAAe9d8bJ3/AwAAwN51Y2yd/wMAAMAelk11Xhzb/LrA3bHtdV4/AGDw/X9s74ztgdjeFduvxTY/Drgntl+vqD4AYOf8/Hs/Pf5WtjHf/9Fk/EpcnrebrKxfKchq7TP5T8d2X2y/0WM96ecB9Jo/t7/HPLuVf26b+QEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAvaO29njs2EIWwjufvf3ozybe+PO1ZXc11zi49pjFXiOEMN58Xj660f9VXPHKpZdOtrZXY5uFIyELWXN5eOxiM9NMCGElHAyfh0b4aGn5qw/ffeTQx69N3fLmuWde2cVvQdv+AQAAwF70vwAAAP//7lUWHg==") prctl$PR_SET_NAME(0xf, &(0x7f0000000040)=')\x00') mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0xffffffff) 2.899039179s ago: executing program 3 (id=691): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, 0x0, 0x10001}, 0x94) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x106, 0x9}}, 0x20) 2.780128036s ago: executing program 3 (id=692): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) syz_clone3(0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000300)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000080)={r1, 0x1, r0, 0x80004}) 2.478871634s ago: executing program 2 (id=693): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x2800000, &(0x7f0000000380)={[{@debug}, {@delalloc}, {@journal_ioprio}, {@test_dummy_encryption}, {@nodiscard}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}, {@acl}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x40}}]}, 0x1, 0xbb4, &(0x7f00000017c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x8004587d, &(0x7f0000000080)={@id={0x2, 0x0, @c}}) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40106614, 0x0) 2.417467427s ago: executing program 4 (id=694): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000002340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@volatile}]}) mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x150021, 0x0) 2.37294398s ago: executing program 6 (id=695): syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) syz_mount_image$cramfs(&(0x7f00000004c0), &(0x7f0000000500)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x1000000, &(0x7f0000000080)=ANY=[], 0x7e, 0x167, &(0x7f0000000740)="$eJzszk+rEmEUx/HvOFOMpVlQYEEltGjQTB2x2gRpJLlIqXDTStCRCsVIKJdGtGsRtHWhCa3Et2BZG8sg7C0E925c3+W9PD7ePxtfwT2fzcDvN+ec58HdP44dARPgHtxvNV+99tptrxZ5UnqUf7o9mWRVdRKwOdqz8i0Lz9XXguU7UPGPINRfNLyb1VajBn416AC50zpP8t8P+ICBhc5S6HnHhukFnbn72bXDLA2myi6p4yGoY+mHDOC6unHuYJ+h4k4vNs5uFeezQjz69bLJh0Lsqp6I0fWFHs92zegV76ObvzgMhE3K3s8v5Axo9f4lZvG/ifFosd5E2nVvpZMpm8yi9HteyHQ/YT0MvIFnhr4z+lWcr1+DVYb3BnxedcvvRhCY9ndKzTO3+/qXOzfemhEwOr1qJXxiWDl/tovpYPEysF5isEnj1MZKCCGEEEIIIYQQQgghhBBCCCHEcbQXAAD//3t1WPU=") r0 = open(&(0x7f0000000140)='.\x00', 0x8000, 0x112) getdents(r0, &(0x7f00000003c0)=""/200, 0xc8) 1.896651258s ago: executing program 3 (id=696): ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000040)={0x0, 0x2000, 0x0, {0x2, 0xa}, {0x1}, @const={0x0, {0xfbff, 0x8, 0x4, 0x81}}}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b04, &(0x7f0000000040)={'virt_wifi0\x00', @link_local}) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r0, 0x8b27, &(0x7f0000000040)) 1.846355531s ago: executing program 2 (id=697): r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e2a, 0xffffffff, @mcast2, 0x9}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x65, &(0x7f0000000080)=0x8, 0x4) sendmmsg$inet(r0, &(0x7f0000001ac0)=[{{&(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@ip_ttl={{0x14, 0x0, 0x34, 0x2}}, @ip_tos_int={{0x14, 0x900, 0x1, 0x7}}], 0x30}}], 0x400000000000234, 0x200448c0) 1.843283371s ago: executing program 6 (id=698): r0 = syz_io_uring_setup(0x5c6, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x4}, &(0x7f0000000300)=0x0, &(0x7f0000000580)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x18, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x4}) io_uring_enter(r0, 0x6e2, 0x3900, 0x1, 0x0, 0xe00) rt_sigsuspend(&(0x7f00000002c0)={[0x225c17d03]}, 0x8) 1.820609712s ago: executing program 4 (id=699): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000a00)={'syz1\x00', {0x9, 0x7, 0x5, 0x5}, 0x3f, [0x9, 0x2, 0x18, 0x2, 0x2, 0x400, 0x80000000, 0x0, 0x8, 0x0, 0x6, 0x1, 0xfffffffb, 0x39, 0x747d5e13, 0x800, 0xfffffb9a, 0xfffffffe, 0x0, 0xfffffffb, 0x2004, 0x3, 0x0, 0xf250, 0x80, 0x4800, 0x300000, 0x7, 0xe, 0x4623f, 0x0, 0x10001, 0x1ff, 0x8000, 0x0, 0x3, 0xc, 0x3, 0xba55, 0x8da8, 0x2, 0x200, 0x2, 0x5, 0xe, 0x4, 0x2, 0x6f, 0x8, 0x9, 0x1, 0x199d, 0x6, 0x2, 0x9, 0xffffffff, 0x4, 0x6, 0x1000, 0x5, 0x3d, 0x8, 0xa, 0x5], [0x7, 0x1e, 0x3, 0x8000, 0xfffffffd, 0x3, 0x0, 0x25, 0x7, 0xfffffffc, 0x8, 0x7fff, 0x72c, 0x1c32, 0x3, 0x5, 0x10000, 0x400, 0x7ffd, 0x3, 0x3, 0x297, 0x5, 0x0, 0x981, 0x4, 0x0, 0x3ff, 0x0, 0xfffffffe, 0x8, 0x1000001, 0x10, 0xfffffff9, 0xfffffffd, 0x7, 0x1, 0xffffffff, 0x6, 0x2000008, 0x800, 0xffff, 0x6, 0x96, 0xfffffff9, 0x2, 0x0, 0x2, 0x401, 0xc, 0x3, 0x379, 0x9, 0xe, 0x5, 0x7, 0x6, 0x2, 0x1, 0x1, 0x8, 0x7, 0x200, 0x3], [0x401, 0x8000c584, 0xffff, 0xcd3, 0x7, 0x1f, 0x404, 0x4, 0x4008, 0xc, 0x7, 0x9, 0x1e88, 0x5, 0x80000001, 0x8, 0x3f92, 0x1000, 0x0, 0x10, 0x1, 0xfffffff9, 0x0, 0xffe, 0x80040101, 0x5, 0x4, 0x5, 0x200003, 0x1, 0x5, 0x80, 0x9, 0x8001, 0x10000, 0x0, 0x3, 0x400004, 0x3, 0x6d7e, 0x3, 0x8, 0x3, 0xbf23, 0x6, 0x9, 0x956, 0x0, 0x3ff, 0xe, 0x6, 0x100fffd, 0x2005, 0x9, 0x4, 0xea, 0x9, 0x20000005, 0x3, 0x80, 0x0, 0x7d, 0x401, 0x5], [0x108e, 0xffff, 0x3, 0x3, 0x88, 0x2, 0x4000000, 0x4, 0x50, 0x2, 0x763, 0xb, 0x402, 0x1, 0x5, 0x1000, 0x7f, 0x5, 0x3fa6, 0x4, 0x0, 0x5, 0x3, 0x4, 0xe47, 0x4, 0x3, 0x4, 0x200, 0x2851, 0x3b, 0x20000001, 0x5, 0x5, 0xa80a, 0x65f413f9, 0x4, 0x20008, 0x8a5, 0x86, 0x44, 0x409, 0x6, 0x4, 0x4, 0xe, 0x4, 0xffffffff, 0x7fff, 0xffff8a33, 0xfffffff8, 0x401, 0x3, 0x200, 0x7, 0x4edf, 0xfffffffd, 0xa, 0xe, 0x101, 0xf, 0xf, 0x136, 0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) 1.752188996s ago: executing program 3 (id=700): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000210018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x13, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x61, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0x2000300, 0xe, 0x0, &(0x7f0000000040)="63eced324031f2a2be0db81e115d", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.552176668s ago: executing program 3 (id=701): setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000980)=ANY=[@ANYBLOB="12010000b1bd2f087d0403508c2f010203010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f00000000c0)={0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="0000f50000000341e9"], 0x0}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 1.5164966s ago: executing program 0 (id=702): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(0x0, r0) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000002c80), r0) sendmsg$IEEE802154_ASSOCIATE_RESP(r0, &(0x7f0000002d40)={0x0, 0x0, &(0x7f0000002d00)={&(0x7f0000002cc0)={0x14, r1, 0x1, 0x70bd2b, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) 1.337629261s ago: executing program 0 (id=703): syz_mount_image$hfsplus(&(0x7f0000000240), &(0x7f0000000f80)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x50, &(0x7f0000000940)=ANY=[@ANYBLOB="6e6c733d6575632d6a702c6e6f626172726965722c63726561746f723dbd3c66f52c756d61736b3d30303137373737372c666f7263652c6e6f626172726965722c00"/81, @ANYBLOB="7e470ec52ef30900c72e7be44e1072e77aee1fff5388f306186de2b71167f738c95488f2dfab0487b84972924808fdcdaea36d445ecd3928f6ca291cb81d39aed37e6e3254b0b86c0ae79d7308d4e1dde03b8beb1a4452d898b97ca891ca36a15ab3f712153e4bb342d1be670f992a30d90a23e13aff5ce6794f9b2a37cc003462eb47e5979ec3acc9fd1842606adb0c4e86bbe75227a0b1fd8bba3bdf0a360057d44aa04f235f853d9e454a37bd0c458dfdbebcd592", @ANYRES64, @ANYRESOCT], 0x13, 0x6b2, &(0x7f0000000280)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x183341, 0x0) link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000300)='./bus\x00') write$sequencer(r0, &(0x7f0000006080)=ANY=[], 0x21) 1.216529408s ago: executing program 4 (id=704): r0 = syz_io_uring_setup(0xd, &(0x7f0000000200), &(0x7f00000003c0)=0x0, &(0x7f0000000400)=0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x1a, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x19bc, 0x1b79, 0x0, 0x0, 0x0) 1.051716207s ago: executing program 4 (id=705): r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000000)=0x3) r1 = getpid() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000340)={{0xfffffffe, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x2, 0x4, r1, 0x0, 0x0, 'syz1\x00', 0x0}) 1.029079509s ago: executing program 2 (id=706): syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0x4000, &(0x7f0000000e40)=ANY=[@ANYBLOB='mode=00000000000000000000177,mode=00000000000000000000005,shortad,utf8,shortad,shortad,session=00000000000016777223,umask=00000000000000000000250,uid=ignore,shortad,dmode=00000000000000000170430,gid=ignore,adinicb,gid=forget,mode=00000000000000000002000,lastblock=00000000000000001024,shortad,euid>', @ANYBLOB=',fsmagic=0x0000000000000002,smackfsf^oor=smackfstrans-ute,fowner>', @ANYBLOB="d4199c3f003c5c8d6d222e24bfdda0389fe9ebc4333e5d9521a6cc631f653d174fb504401934b83a72449268d54cd62dbbb66d7ba1b35073e60bf699ea6cb1b5923e3a3d5e51423a7c1a13920aea8e6d3c7d53f4aa34acbe0b78df03569d0b620d54f96b33fd4895161524abc937b9d619a3add1c3b57ad5124502de88fe8f0e436f04aded9c4f7b60876d2ac9caa8502b7faa4fe85e7819540dabf8e44ccdd382e5292164879e30f5b039e5f2314adff12c154c627fabadc824eb6d2fc48d1bc75a9dd2589e2c3324cd33f0a8508f6d4a899b6e8b45fec164", @ANYRESDEC=0x0, @ANYBLOB="2c736d61636b6673747261736d7574653d001c0b235ffdce27803854a81c498e5bc58fdfc2e25738bee597df2c00"/55], 0x2, 0xc2d, &(0x7f00000001c0)="$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") write$FUSE_DIRENTPLUS(0xffffffffffffffff, 0x0, 0xb0) r0 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') read$FUSE(r0, &(0x7f0000002780)={0x2020}, 0x5ecfb203) 868.561528ms ago: executing program 0 (id=707): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) recvmsg(r0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x1f00) sendmmsg$inet(r0, &(0x7f0000000780)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40800) 849.052669ms ago: executing program 6 (id=708): bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000140)={{}, 0x0, &(0x7f0000000380)='%pI4 \x00'}, 0x20) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1, 0x6, 0x8, 0x8, 0x40}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040), &(0x7f00000004c0), 0xce, r0}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={r0, &(0x7f0000000040), &(0x7f0000000280)=""/201}, 0x20) 698.461459ms ago: executing program 4 (id=709): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="05030500d3fc030000004788031c09102f28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) 681.95958ms ago: executing program 6 (id=710): syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000180)='./file1\x00', 0x1218088, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0xa, 0x2c2, &(0x7f00000008c0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x100) mkdirat(0xffffffffffffff9c, &(0x7f0000001dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) rename(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000100)='./file0\x00') 562.088136ms ago: executing program 2 (id=711): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000083c0)={{0x1, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000200)={0x2, 0xd3e, 0x389, 0x0, 0xe}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) 516.395259ms ago: executing program 4 (id=712): syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file0\x00', 0x3200000, &(0x7f0000000080)=ANY=[@ANYRES64=0x0], 0x1, 0x5d8, &(0x7f00000006c0)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0) lseek(r0, 0x1, 0x0) getdents(r0, 0x0, 0x58) 511.819939ms ago: executing program 0 (id=713): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80141, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0xc0010141, 0x0, 0x4}]}) 299.949092ms ago: executing program 0 (id=714): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c00000012003b77"], 0x4c}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000010c0)=ANY=[@ANYBLOB="1c0000005200010001000000fcdbdf250a00000008000100", @ANYRES8=r0], 0x1c}, 0x1, 0x0, 0x0, 0xc005}, 0x20040004) 265.915173ms ago: executing program 2 (id=715): sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x400c4) r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x74, &(0x7f0000000000)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x73, 0x0, @private=0x300, @multicast1}, {0x0, 0x0, 0xfffffe9a, 0x0, @gue={{0x2}}}}}}}, 0x0) 259.710314ms ago: executing program 6 (id=716): set_mempolicy(0x4005, &(0x7f0000000040)=0x10000000005, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) syz_clone3(&(0x7f0000000440)={0x40040000, 0x0, &(0x7f00000000c0), &(0x7f0000000140), {0x3f}, &(0x7f00000001c0)=""/105, 0x69, 0x0, 0x0, 0x0, {r0}}, 0x58) 108.195823ms ago: executing program 2 (id=717): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x4e23, 0x4, @dev={0xfe, 0x80, '\x00', 0x38}, 0x9}]}, &(0x7f0000000040)=0x10) shutdown(r0, 0x2) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000340)={0xd79, 0x0, 0x8004, 0x6, 0x1d7c, 0xd, 0xc, 0xc, r1}, &(0x7f0000000380)=0x20) 0s ago: executing program 0 (id=718): socketpair$unix(0x1, 0x2, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = getpid() ptrace$setopts(0x4206, r0, 0x0, 0x200004) kernel console output (not intermixed with test programs): tadv_slave_0: link becomes ready [ 76.299957][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 76.315594][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 76.324368][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 76.333522][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 76.343204][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 76.352340][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 76.361558][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 76.374555][ T4200] device veth0_vlan entered promiscuous mode [ 76.383914][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.393560][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.410310][ T4185] device veth0_macvtap entered promiscuous mode [ 76.421073][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.438919][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.450595][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.461615][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.473319][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.482472][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 76.495367][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 76.506319][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 76.522363][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 76.548020][ T4200] device veth1_vlan entered promiscuous mode [ 76.574164][ T4185] device veth1_macvtap entered promiscuous mode [ 76.584562][ T4191] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.594061][ T4191] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.603033][ T4191] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.612863][ T4191] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.630397][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 76.640538][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 76.648894][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 76.671156][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.682148][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.699927][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.712675][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.726094][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.736778][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.746956][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.758120][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.771198][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.790678][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 76.799702][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 76.810665][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 76.822429][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.835299][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.845596][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.857683][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.867892][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.879942][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.891487][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.915710][ T4200] device veth0_macvtap entered promiscuous mode [ 76.936699][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 76.946616][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 76.961923][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 76.971848][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 76.981124][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 76.994032][ T4185] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.003867][ T4185] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.013980][ T4185] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.023698][ T4185] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.038887][ T4200] device veth1_macvtap entered promiscuous mode [ 77.114877][ T4301] loop2: detected capacity change from 0 to 512 [ 77.127196][ T4200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.140047][ T4200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.152404][ T4200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.164281][ T4200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.174770][ T4200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.185969][ T4200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.195969][ T4200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.206750][ T4200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.223551][ T4200] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.256973][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 77.272483][ T4301] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 77.275813][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 77.293561][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 77.304739][ T4301] ext4 filesystem being mounted at /0/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 77.321970][ T4200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.338174][ T4200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.349423][ T4301] fs-verity (loop2, inode 15): Unrecognized descriptor size: 0 bytes [ 77.361128][ T4301] fs-verity (loop2, inode 15): Unrecognized descriptor size: 0 bytes [ 77.370002][ T4200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.383247][ T4301] fs-verity (loop2, inode 15): Unrecognized descriptor size: 0 bytes [ 77.391720][ T4200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.401727][ T4200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.413513][ T4200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.423562][ T4200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.435498][ T4200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.447254][ T4200] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.475183][ T1565] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 77.492815][ T1565] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 77.513701][ T4200] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.548888][ T4200] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.557648][ T4200] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.595799][ T4200] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.647526][ T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.677887][ T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.736155][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 77.755619][ T4308] loop2: detected capacity change from 0 to 8192 [ 77.797484][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.809044][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.832710][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.835462][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 77.872160][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.886703][ T4308] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 77.917042][ T26] audit: type=1800 audit(1770916388.409:2): pid=4308 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.6" name="file1" dev="loop2" ino=1048584 res=0 errno=0 [ 77.967509][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.994556][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 78.039624][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.073697][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.101330][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.131405][ T4306] Bluetooth: hci1: command 0x0419 tx timeout [ 78.158363][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 78.166804][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 78.174830][ T4290] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.190125][ T4306] Bluetooth: hci0: command 0x0419 tx timeout [ 78.195115][ T4290] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.209457][ T21] Bluetooth: hci2: command 0x0419 tx timeout [ 78.221848][ T21] Bluetooth: hci3: command 0x0419 tx timeout [ 78.229851][ T21] Bluetooth: hci4: command 0x0419 tx timeout [ 78.270009][ T4321] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 78.294391][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 78.602439][ T4335] loop4: detected capacity change from 0 to 256 [ 78.646055][ T4336] program syz.3.4 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 79.107811][ T4359] loop3: detected capacity change from 0 to 256 [ 79.110313][ T4356] Zero length message leads to an empty skb [ 79.120435][ T4354] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 79.160391][ T4359] ======================================================= [ 79.160391][ T4359] WARNING: The mand mount option has been deprecated and [ 79.160391][ T4359] and is ignored by this kernel. Remove the mand [ 79.160391][ T4359] option from the mount to silence this warning. [ 79.160391][ T4359] ======================================================= [ 79.446354][ T4359] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 79.484577][ T4359] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 79.533400][ T4359] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 79.584832][ T4367] loop4: detected capacity change from 0 to 8192 [ 79.693096][ T4367] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 79.733116][ T4342] loop0: detected capacity change from 0 to 32768 [ 79.755753][ T4367] REISERFS (device loop4): using ordered data mode [ 79.762510][ T4367] reiserfs: using flush barriers [ 79.768090][ T4378] loop1: detected capacity change from 0 to 256 [ 79.798621][ T4367] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 80.067669][ T4367] REISERFS (device loop4): checking transaction log (loop4) [ 80.149244][ T4367] REISERFS (device loop4): Using r5 hash to sort names [ 80.211273][ T4367] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 80.276290][ T4389] loop0: detected capacity change from 0 to 256 [ 80.328858][ T4389] exfat: Deprecated parameter 'namecase' [ 80.418147][ T4389] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad258, utbl_chksum : 0xe619d30d) [ 80.761082][ T4407] loop4: detected capacity change from 0 to 64 [ 80.842321][ T4414] loop1: detected capacity change from 0 to 2048 [ 80.964539][ T4414] UDF-fs: error (device loop1): udf_process_sequence: Primary Volume Descriptor not found! [ 81.142591][ T4414] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 81.317599][ T4423] F2FS-fs (loop4): invalid crc value [ 81.334874][ T4423] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 81.393897][ T4414] UDF-fs: error (device loop1): udf_rename: directory (ino 1345) has parent entry pointing to another inode (1376 != 1367) [ 81.417286][ T4423] F2FS-fs (loop4): Cannot turn on quotas: -2 on 0 [ 81.424084][ T4423] F2FS-fs (loop4): Cannot turn on quotas: -2 on 2 [ 81.435016][ T4423] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 81.843848][ T4441] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x1cbb3694, utbl_chksum : 0xe619d30d) [ 81.851966][ T4436] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 81.907340][ T4436] capability: warning: `syz.1.52' uses 32-bit capabilities (legacy support in use) [ 81.996981][ T4441] exFAT-fs (loop2): error, found bogus dentry(5) beyond unused empty group(4) (start_clu : 5, cur_clu : 5) [ 82.082074][ T4450] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 82.135988][ T4450] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 82.256200][ T4450] EXT4-fs error (device loop0): ext4_xattr_inode_iget:401: inode #2: comm syz.0.61: missing EA_INODE flag [ 82.429761][ T4450] EXT4-fs error (device loop0): ext4_xattr_inode_iget:406: comm syz.0.61: error while reading EA inode 2 err=-117 [ 82.484174][ T4306] kernel write not supported for file /input/event2 (pid: 4306 comm: kworker/1:7) [ 82.529504][ T4450] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2807: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 82.564682][ T4469] set_capacity_and_notify: 5 callbacks suppressed [ 82.585237][ T4469] loop3: detected capacity change from 0 to 128 [ 82.613210][ T4450] EXT4-fs (loop0): 1 truncate cleaned up [ 82.651772][ T4450] EXT4-fs (loop0): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,resuid=0x0000000000000000,debug_want_extra_isize=0x0000000000000068,lazytime,nombcache,nogrpid,,errors=continue. Quota mode: none. [ 82.736565][ T4471] netlink: 28 bytes leftover after parsing attributes in process `syz.1.68'. [ 82.858897][ T4450] EXT4-fs (loop0): shut down requested (2) [ 82.930310][ T4475] device bridge0 entered promiscuous mode [ 82.936432][ T4475] device macvlan2 entered promiscuous mode [ 83.109886][ T4480] loop0: detected capacity change from 0 to 8 [ 83.187434][ T4487] netlink: 36 bytes leftover after parsing attributes in process `syz.1.73'. [ 83.250382][ T4486] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 83.706073][ T4458] loop4: detected capacity change from 0 to 40427 [ 83.799669][ T4502] loop0: detected capacity change from 0 to 8192 [ 83.841395][ T4458] F2FS-fs (loop4): build fault injection attr: rate: 690, type: 0x1ffff [ 83.870257][ T4458] F2FS-fs (loop4): build fault injection attr: rate: 0, type: 0x35f7 [ 83.898841][ T4502] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 83.914960][ T4458] F2FS-fs (loop4): invalid crc value [ 83.970094][ T4458] F2FS-fs (loop4): Found nat_bits in checkpoint [ 84.135900][ T4510] blk_update_request: I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 0 [ 84.165611][ T4458] F2FS-fs (loop4): Start checkpoint disabled! [ 84.187180][ T4510] SQUASHFS error: Failed to read block 0x0: -5 [ 84.211047][ T4458] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 84.333189][ T4493] loop2: detected capacity change from 0 to 32768 [ 84.340476][ T4497] loop3: detected capacity change from 0 to 32768 [ 84.385513][ T4497] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.77 (4497) [ 84.487112][ T4497] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 84.501279][ T4493] read_mapping_page failed! [ 84.513715][ T4497] BTRFS info (device loop3): using free space tree [ 84.535755][ T4497] BTRFS info (device loop3): has skinny extents [ 84.542715][ T4493] ERROR: (device loop2): txCommit: [ 84.542715][ T4493] [ 84.636329][ T144] attempt to access beyond end of device [ 84.636329][ T144] loop4: rw=2049, want=40976, limit=40427 [ 84.836900][ T4497] BTRFS info (device loop3): enabling ssd optimizations [ 85.391666][ T4553] netlink: 'syz.0.96': attribute type 5 has an invalid length. [ 85.748410][ T4573] netlink: 'syz.0.101': attribute type 8 has an invalid length. [ 85.957809][ T4582] loop1: detected capacity change from 0 to 512 [ 86.069559][ T4588] loop0: detected capacity change from 0 to 512 [ 86.214589][ T4557] loop2: detected capacity change from 0 to 32768 [ 86.268390][ T4557] (syz.2.88,4557,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 86.328446][ T4574] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 86.352869][ T4557] (syz.2.88,4557,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 86.361497][ T4588] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.107: couldn't read orphan inode 26 (err -116) [ 86.439769][ T4588] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 86.477492][ T4557] JBD2: Ignoring recovery information on journal [ 86.559961][ T4588] ext4 filesystem being mounted at /19/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 86.578384][ T4574] usb 5-1: Using ep0 maxpacket: 16 [ 86.698605][ T4574] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 86.744865][ T4574] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 86.753389][ T4557] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 86.778726][ T4609] loop0: detected capacity change from 0 to 47 [ 86.910839][ T4611] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 86.940831][ T1108] cfg80211: failed to load regulatory.db [ 86.968457][ T4574] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 86.987845][ T4574] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.028423][ T4574] usb 5-1: Product: syz [ 87.032666][ T4574] usb 5-1: Manufacturer: syz [ 87.060012][ T4574] usb 5-1: SerialNumber: syz [ 87.077883][ T4611] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: inode #2: comm syz.1.115: missing EA_INODE flag [ 87.176586][ T4611] EXT4-fs (loop1): Remounting filesystem read-only [ 87.226587][ T4611] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.115: error while reading EA inode 2 err=-117 [ 87.325708][ T4611] EXT4-fs (loop1): Remounting filesystem read-only [ 87.333895][ T4611] EXT4-fs (loop1): 1 truncate cleaned up [ 87.347606][ T4611] EXT4-fs (loop1): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,resuid=0x0000000000000000,debug_want_extra_isize=0x0000000000000068,init_itable,errors=remount-ro,nogrpid,. Quota mode: none. [ 87.419538][ T26] audit: type=1800 audit(1770916397.919:3): pid=4557 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.88" name="file1" dev="loop2" ino=16979 res=0 errno=0 [ 87.468495][ T4574] usb 5-1: 0:2 : does not exist [ 87.501644][ T4611] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: inode #2: comm syz.1.115: missing EA_INODE flag [ 87.559545][ T4574] usb 5-1: USB disconnect, device number 2 [ 87.605406][ T4611] EXT4-fs (loop1): Remounting filesystem read-only [ 87.647390][ T4611] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.115: error while reading EA inode 2 err=-117 [ 87.689566][ T4611] EXT4-fs (loop1): Remounting filesystem read-only [ 87.697953][ T4186] ocfs2: Unmounting device (7,2) on (node local) [ 87.945659][ T4177] udevd[4177]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 88.069451][ T4563] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 88.137188][ T4629] set_capacity_and_notify: 1 callbacks suppressed [ 88.137205][ T4629] loop1: detected capacity change from 0 to 164 [ 88.250341][ T4629] ISOFS: primary root directory is empty. Disabling Rock Ridge and switching to Joliet. [ 88.318493][ T4563] usb 1-1: Using ep0 maxpacket: 32 [ 88.395380][ T4635] netlink: 'syz.2.126': attribute type 1 has an invalid length. [ 88.446453][ T4637] netlink: 8 bytes leftover after parsing attributes in process `syz.4.127'. [ 88.459620][ T4563] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 88.470191][ T4563] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 88.489075][ T4563] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 88.515972][ T4563] usb 1-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 88.557415][ T4563] usb 1-1: config 0 interface 0 has no altsetting 0 [ 88.576648][ T4563] usb 1-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 88.604006][ T4563] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.660792][ T4563] usb 1-1: config 0 descriptor?? [ 88.859659][ T4651] netlink: 12 bytes leftover after parsing attributes in process `syz.1.134'. [ 88.991064][ T4658] loop3: detected capacity change from 0 to 164 [ 89.065836][ T4658] ISOFS: Bad logical zone size 25856 [ 89.171188][ T4563] hid-thrustmaster 0003:044F:B65D.0001: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.0-1/input0 [ 89.205756][ T4563] hid-thrustmaster 0003:044F:B65D.0001: Wrong number of endpoints? [ 89.367437][ T4663] loop1: detected capacity change from 0 to 8192 [ 89.408526][ C0] hid-thrustmaster 0003:044F:B65D.0001: Unknown packet type 0x0, unable to proceed further with wheel init [ 89.455869][ T4663] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 89.478434][ T4674] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 89.585592][ T4676] netlink: 8 bytes leftover after parsing attributes in process `syz.2.145'. [ 89.632049][ T1346] usb 1-1: USB disconnect, device number 2 [ 89.876760][ T4690] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 90.017458][ T4698] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 90.098986][ T4700] IPVS: sh: FWM 4 0x00000004 - no destination available [ 90.257449][ T4702] loop4: detected capacity change from 0 to 8192 [ 90.334839][ T4710] loop1: detected capacity change from 0 to 64 [ 90.662393][ T4714] loop0: detected capacity change from 0 to 4096 [ 90.708715][ T4714] ntfs3: loop0: Different NTFS' sector size (1024) and media sector size (512) [ 90.822742][ T4718] tap0: tun_chr_ioctl cmd 1074025677 [ 90.852855][ T4718] tap0: linktype set to 0 [ 91.023817][ T4722] loop4: detected capacity change from 0 to 8192 [ 91.074377][ T4722] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 91.121139][ T4722] REISERFS (device loop4): using ordered data mode [ 91.127716][ T4722] reiserfs: using flush barriers [ 91.165895][ T4727] loop1: detected capacity change from 0 to 512 [ 91.177249][ T4722] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 91.195418][ T4722] REISERFS (device loop4): checking transaction log (loop4) [ 91.204488][ T4722] REISERFS (device loop4): Using r5 hash to sort names [ 91.212857][ T4722] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 91.245603][ T4732] netlink: 36 bytes leftover after parsing attributes in process `syz.2.172'. [ 91.278096][ T4727] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 91.297793][ T4727] EXT4-fs (loop1): inline encryption not supported [ 91.305228][ T4733] loop3: detected capacity change from 0 to 128 [ 91.316461][ T4727] EXT4-fs (loop1): Test dummy encryption mode enabled [ 91.344611][ T4735] loop0: detected capacity change from 0 to 64 [ 91.364350][ T4727] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 91.410332][ T4727] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 91.410516][ T4733] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 91.462944][ T4727] EXT4-fs (loop1): 1 truncate cleaned up [ 91.487440][ T4733] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 91.493365][ T4727] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,mblk_io_submit,inlinecrypt,test_dummy_encryption=v1,barrier,mblk_io_submit,nogrpid,. Quota mode: none. [ 91.567875][ T4733] [U] [ 91.571436][ T4733] [U] [ 91.575627][ T4733] [U] \ÀÀN¼.ÜZÀ‚9Q¡ÝÌZ׎ۤØ!QÒÝH‰'»ßݙ͎ [ 91.582791][ T4733] [U] ÊL [ 91.586732][ T4733] [U] Û$GETÛPR¯YEÔ§ÔÞJGM×)GWE´÷¥’9Ï÷ÞÕÄU›§_O¿ZŸŽÄC¯¨V¿?´ÒÏ›\9:Ë_Ñ%SAµ3ƒ–ÓKC2:0PÅWÈ—>V´÷Ä©ÈC×2ÛÑB÷ÛÔJÎɱÈÐÁ¬Ò [ 91.603892][ T4733] [U] „ºS,Ì›KªÖÚÍÆÑÅÙ,Á;„#Ý»¢ÉšY~ˆ÷CI{\Ú' 1ŒQÔ'£ÑVÛ¹ -ɃLÜW2ÚÓË=6Ή{AÁEšÔ»ÃÙÉ\·Û³Œ¾Ú'ˆÕ§™I³ÝÆF¼XGF©ŒÝBCW„±Y/Ö¤Œ~®»3ŒÍÑB?ÑÌÉ 6ÁÅ>ICSAÌÞÑÉɱ¦ÐÇÕß×E´ÍÅ´ ÊÒ–—ÍF;ʱWÞ ÛÛ›Õ;ºOŸ_OߟŒ,»IÛÁ=¯½ÏÖÛž¿^ÚÍÕ–Œ¾Ù~[L+Q»~«ß;L¯OÈHÂ×ÊØ„ÝÆFV\°M«߷E”-,”ËÆÖ¿­ÈÝ?RßOT·Ž&ÕßÖȲ¤=ΦƜ:$ǯ]™œÌÍ’ A‚D9±Ú=ZÁ»ß&£7ÏßVÏØÛ¿V‡Ã¿¿¯‡÷ß#Õ;JÒÝ[DÙ;‰UJÎÜÔL,%¹ÅÙKÏŧF&R¹BO6S¸ÛÐÞL,ŒÍÂTÝEµ.Å̳ڕ¿.?ŸUŽßJßÕ;JRÝO,KTŒWÊ>UØÚß]FOÝ´P~Ž~ÐØ?XÎZÆ©ÅÏÒÕÙ¤Ú¿Y–´Ç}¤1§ [ 91.665587][ T4733] [U] 8RÔ…ŒÖªDNX ¶HG¢ŸX×Þ [ 91.670110][ T4733] [U] [ 91.672852][ T4733] [U] [ 91.675588][ T4733] [U] [ 91.736020][ T4733] [U] [ 91.738794][ T4733] [U] [ 91.741533][ T4733] [U] [ 91.794485][ T4730] [U] [ 92.100209][ T4761] input: syz1 as /devices/virtual/input/input5 [ 92.103237][ T4756] Set syz1 is full, maxelem 1029 reached [ 92.129112][ T4760] exfat: Deprecated parameter 'namecase' [ 92.135114][ T4760] exfat: Deprecated parameter 'utf8' [ 92.149322][ T1108] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 92.171054][ T4760] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x22785e93, utbl_chksum : 0xe619d30d) [ 92.254079][ T4765] netlink: 96 bytes leftover after parsing attributes in process `syz.4.186'. [ 92.529568][ T1108] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 92.553259][ T1108] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 92.758497][ T1108] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 92.776594][ T1108] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.797001][ T1108] usb 3-1: Product: syz [ 92.807498][ T1108] usb 3-1: Manufacturer: syz [ 92.812488][ T1108] usb 3-1: SerialNumber: syz [ 93.091965][ T4778] EXT4-fs (loop0): Ignoring removed oldalloc option [ 93.118433][ T4778] EXT4-fs (loop0): Ignoring removed bh option [ 93.124598][ T4778] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 93.157025][ T4763] F2FS-fs (loop3): invalid crc value [ 93.195361][ T4763] F2FS-fs (loop3): Found nat_bits in checkpoint [ 93.274477][ T4778] EXT4-fs (loop0): mounted filesystem without journal. Opts: delalloc,data_err=abort,data_err=abort,usrquota,data_err=ignore,mb_optimize_scan=0x0000000000000001,oldalloc,grpquota,noload,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 93.378749][ T1108] usb 3-1: cannot find UAC_HEADER [ 93.387682][ T4778] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:3887: comm syz.0.193: Allocating blocks 481-513 which overlap fs metadata [ 93.421336][ T4791] program syz.1.198 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 93.431079][ T4763] F2FS-fs (loop3): Start checkpoint disabled! [ 93.467823][ T1108] snd-usb-audio: probe of 3-1:1.0 failed with error -22 [ 93.495202][ T4763] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 93.506517][ T1108] usb 3-1: USB disconnect, device number 2 [ 93.698068][ T4763] F2FS-fs (loop3): switch discard_unit option is not allowed [ 93.749802][ T4175] udevd[4175]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 93.830075][ T4805] netlink: 16 bytes leftover after parsing attributes in process `syz.4.204'. [ 93.879123][ T4807] program syz.0.205 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 94.322110][ T4829] set_capacity_and_notify: 5 callbacks suppressed [ 94.322127][ T4829] loop3: detected capacity change from 0 to 512 [ 94.424717][ T4829] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 94.628458][ T21] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 94.902862][ T4306] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 95.039318][ T21] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 95.074099][ T21] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.106031][ T21] usb 1-1: config 0 descriptor?? [ 95.175554][ T21] cp210x 1-1:0.0: cp210x converter detected [ 95.181987][ T4306] usb 2-1: Using ep0 maxpacket: 32 [ 95.269899][ T4873] loop4: detected capacity change from 0 to 47 [ 95.309905][ T4306] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 95.333522][ T4306] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 95.353746][ T4306] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 95.380964][ T4306] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.420248][ T4306] usb 2-1: config 0 descriptor?? [ 95.434126][ T4876] loop2: detected capacity change from 0 to 1024 [ 95.527475][ T4876] EXT4-fs error (device loop2): ext4_map_blocks:629: inode #3: block 2: comm syz.2.233: lblock 2 mapped to illegal pblock 2 (length 1) [ 95.550583][ T4876] Quota error (device loop2): qtree_write_dquot: dquota write failed [ 95.601131][ T4876] EXT4-fs error (device loop2): ext4_map_blocks:629: inode #3: block 48: comm syz.2.233: lblock 0 mapped to illegal pblock 48 (length 1) [ 95.628554][ T4876] Quota error (device loop2): v2_write_file_info: Can't write info structure [ 95.639283][ T4876] EXT4-fs error (device loop2): ext4_acquire_dquot:6234: comm syz.2.233: Failed to acquire dquot type 0 [ 95.652080][ T4876] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5854: Corrupt filesystem [ 95.707763][ T4876] EXT4-fs error (device loop2): ext4_evict_inode:282: inode #11: comm syz.2.233: mark_inode_dirty error [ 95.714291][ T4886] netlink: 'syz.3.241': attribute type 1 has an invalid length. [ 95.729444][ T4886] NCSI netlink: No device for ifindex 131092 [ 95.731386][ T4876] EXT4-fs warning (device loop2): ext4_evict_inode:285: couldn't mark inode dirty (err -117) [ 95.787534][ T4876] EXT4-fs (loop2): 1 orphan inode deleted [ 95.799246][ T1565] EXT4-fs error (device loop2): ext4_map_blocks:629: inode #3: block 1: comm kworker/u4:4: lblock 1 mapped to illegal pblock 1 (length 1) [ 95.804144][ T4876] EXT4-fs (loop2): mounted filesystem without journal. Opts: nodioread_nolock,noblock_validity,data_err=ignore,max_batch_time=0x0000000000000007,nodiscard,stripe=0x0000000000000004,noauto_da_alloc,,errors=continue. Quota mode: none. [ 95.860834][ T1565] Quota error (device loop2): remove_tree: Can't read quota data block 1 [ 95.888650][ T1565] EXT4-fs error (device loop2): ext4_release_dquot:6270: comm kworker/u4:4: Failed to release dquot type 0 [ 95.931388][ T4306] ft260 0003:0403:6030.0002: unknown main item tag 0x7 [ 95.970039][ T4306] ft260 0003:0403:6030.0002: hidraw0: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.1-1/input0 [ 95.978741][ T4563] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 96.010482][ T4892] netlink: 284 bytes leftover after parsing attributes in process `syz.3.244'. [ 96.058563][ T21] cp210x 1-1:0.0: failed to get vendor val 0x370c size 15: -71 [ 96.066221][ T21] cp210x 1-1:0.0: GPIO initialisation failed: -71 [ 96.093883][ T21] usb 1-1: cp210x converter now attached to ttyUSB0 [ 96.110556][ T21] usb 1-1: USB disconnect, device number 3 [ 96.128499][ T21] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 96.170614][ T21] cp210x 1-1:0.0: device disconnected [ 96.181064][ T4306] ft260 0003:0403:6030.0002: failed to retrieve chip version [ 96.192299][ T4306] ft260: probe of 0003:0403:6030.0002 failed with error -71 [ 96.215654][ T4306] usb 2-1: USB disconnect, device number 2 [ 96.291627][ T1565] EXT4-fs error (device loop2): ext4_map_blocks:629: inode #3: block 1: comm kworker/u4:4: lblock 1 mapped to illegal pblock 1 (length 1) [ 96.320015][ T1565] Quota error (device loop2): remove_tree: Can't read quota data block 1 [ 96.328617][ T1565] EXT4-fs error (device loop2): ext4_release_dquot:6270: comm kworker/u4:4: Failed to release dquot type 0 [ 96.335262][ T4563] usb 5-1: not running at top speed; connect to a high speed hub [ 96.348785][ T4186] EXT4-fs error (device loop2): __ext4_get_inode_loc:4327: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 96.366253][ T4186] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5854: Corrupt filesystem [ 96.388873][ T4186] EXT4-fs error (device loop2): ext4_quota_off:6540: inode #3: comm syz-executor: mark_inode_dirty error [ 96.413910][ T4897] fido_id[4897]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 96.449730][ T4563] usb 5-1: config 1 has an invalid interface number: 78 but max is 0 [ 96.469091][ T4563] usb 5-1: config 1 has no interface number 0 [ 96.485860][ T4563] usb 5-1: config 1 interface 78 has no altsetting 0 [ 96.644204][ T4905] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 96.644204][ T4905] The task syz.2.248 (4905) triggered the difference, watch for misbehavior. [ 96.667139][ T4563] usb 5-1: New USB device found, idVendor=11ba, idProduct=1001, bcdDevice=ec.57 [ 96.679349][ T4904] loop0: detected capacity change from 0 to 512 [ 96.692225][ T4563] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.703012][ T4563] usb 5-1: Manufacturer: Њ [ 96.707563][ T4563] usb 5-1: SerialNumber: ை匜솖剚æ“â»êˆ·ê»‘僿æ»ïš‡âº­áº¤çº¬ã­¨ã’‡é›ºäžá¤ªæž¡æ©žéˆ„絹狻륾ႚ浮㤲鄗è´âœ¿é²³ê•µâ¯®î–³ [ 96.810159][ T4904] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 97.046586][ T4918] loop1: detected capacity change from 0 to 2048 [ 97.055620][ T4563] pvrusb2: Hardware description: OnAir USB2 Hybrid USB tuner [ 97.065744][ T4563] usb 5-1: selecting invalid altsetting 0 [ 97.092800][ T4563] usb 5-1: USB disconnect, device number 3 [ 97.109605][ T2427] pvrusb2: control-write URB failure, status=-71 [ 97.131159][ T2427] pvrusb2: Device being rendered inoperable [ 97.173757][ T4918] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 97.208436][ T4918] ext4 filesystem being mounted at /69/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 97.224611][ T2427] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 97.237046][ T2427] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 97.522108][ T4928] sch_fq: defrate 0 ignored. [ 97.666353][ T4937] netlink: 7 bytes leftover after parsing attributes in process `syz.3.261'. [ 97.776588][ T4920] loop0: detected capacity change from 0 to 32768 [ 97.856264][ T4947] capability: warning: `syz.3.266' uses deprecated v2 capabilities in a way that may be insecure [ 97.884436][ T4920] (syz.0.255,4920,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 97.920052][ T4920] (syz.0.255,4920,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 97.962265][ T4920] JBD2: Ignoring recovery information on journal [ 98.073289][ T4920] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 98.148400][ T21] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 98.211185][ T4959] process 'syz.3.272' launched '/dev/fd/-1/./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 98.267729][ T4185] ocfs2: Unmounting device (7,0) on (node local) [ 98.362607][ T4563] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 98.381628][ T4959] loop3: detected capacity change from 0 to 4096 [ 98.432060][ T21] usb 2-1: Using ep0 maxpacket: 32 [ 98.452476][ T4959] EXT4-fs (loop3): inline encryption not supported [ 98.463082][ T4959] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled [ 98.498060][ T4959] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 98.517293][ T4959] System zones: 0-5 [ 98.532639][ T4959] EXT4-fs (loop3): mounted filesystem without journal. Opts: debug,delalloc,inlinecrypt,auto_da_alloc=0x00000000000000de,stripe=0x0000000000001000,jqfmt=vfsv0,delalloc,barrier,,errors=continue. Quota mode: writeback. [ 98.594476][ T21] usb 2-1: config 0 has an invalid interface number: 66 but max is 0 [ 98.615163][ T21] usb 2-1: config 0 has no interface number 0 [ 98.668817][ T21] usb 2-1: config 0 interface 66 altsetting 11 endpoint 0x9 has invalid maxpacket 1024, setting to 64 [ 98.720300][ T21] usb 2-1: config 0 interface 66 altsetting 11 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 98.734064][ T21] usb 2-1: config 0 interface 66 has no altsetting 0 [ 98.750291][ T4969] pim6reg1: tun_chr_ioctl cmd 1074025673 [ 98.894155][ T4563] usb 5-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55 [ 98.918577][ T4563] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.928790][ T21] usb 2-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=e2.11 [ 98.937092][ T4563] usb 5-1: Product: syz [ 98.947165][ T4563] usb 5-1: Manufacturer: syz [ 98.948398][ T21] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.967694][ T4563] usb 5-1: SerialNumber: syz [ 98.989154][ T4563] usb 5-1: config 0 descriptor?? [ 99.015046][ T21] usb 2-1: Product: syz [ 99.026925][ T21] usb 2-1: Manufacturer: syz [ 99.032446][ T21] usb 2-1: SerialNumber: syz [ 99.040676][ T4563] gspca_main: sonixb-2.14.0 probing 0c45:6005 [ 99.068923][ T21] usb 2-1: config 0 descriptor?? [ 99.175765][ T4988] xt_hashlimit: max too large, truncated to 1048576 [ 99.284480][ T4992] netlink: 4 bytes leftover after parsing attributes in process `syz.3.285'. [ 99.483999][ T4563] input: sonixb as /devices/platform/dummy_hcd.4/usb5/5-1/input/input6 [ 99.658510][ T21] usb 2-1: USB disconnect, device number 3 [ 99.721846][ T4306] usb 5-1: USB disconnect, device number 4 [ 99.896621][ T5013] loop3: detected capacity change from 0 to 512 [ 99.934810][ T5001] udevd[5001]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.66/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 99.992841][ T5010] loop2: detected capacity change from 0 to 8192 [ 100.128463][ T5017] device macvtap1 entered promiscuous mode [ 100.166620][ T5017] device vlan0 entered promiscuous mode [ 100.323081][ T5017] team0: Device macvtap1 failed to register rx_handler [ 100.399137][ T5017] device vlan0 left promiscuous mode [ 100.492614][ T5029] loop3: detected capacity change from 0 to 128 [ 100.565313][ T5029] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 100.597706][ T5029] ext4 filesystem being mounted at /64/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 100.890970][ T5045] loop1: detected capacity change from 0 to 512 [ 100.931386][ T5045] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x05417272 (sector = 1) [ 100.974353][ T5045] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 101.121964][ T5045] FAT-fs (loop1): FAT read failed (blocknr 128) [ 101.267789][ T5055] loop3: detected capacity change from 0 to 128 [ 101.375554][ T5055] VFS: Found a Xenix FS (block size = 512) on device loop3 [ 101.458961][ T5055] sysv_free_block: trying to free block not in datazone [ 101.571250][ T4200] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 101.765913][ T5072] loop0: detected capacity change from 0 to 128 [ 101.814085][ T5070] loop2: detected capacity change from 0 to 4096 [ 101.867956][ T5072] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 101.912250][ T5070] ntfs3: loop2: Failed to load $Volume. [ 101.959011][ T5072] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 102.202108][ T5087] loop3: detected capacity change from 0 to 256 [ 102.348119][ T5087] FAT-fs (loop3): Directory bread(block 64) failed [ 102.384139][ T5087] FAT-fs (loop3): Directory bread(block 65) failed [ 102.405608][ T5095] loop2: detected capacity change from 0 to 256 [ 102.412434][ T5087] FAT-fs (loop3): Directory bread(block 66) failed [ 102.429790][ T5087] FAT-fs (loop3): Directory bread(block 67) failed [ 102.446984][ T5087] FAT-fs (loop3): Directory bread(block 68) failed [ 102.467782][ T5087] FAT-fs (loop3): Directory bread(block 69) failed [ 102.475705][ T5097] loop4: detected capacity change from 0 to 256 [ 102.485898][ T5087] FAT-fs (loop3): Directory bread(block 70) failed [ 102.492599][ T5087] FAT-fs (loop3): Directory bread(block 71) failed [ 102.501834][ T5087] FAT-fs (loop3): Directory bread(block 72) failed [ 102.508896][ T5087] FAT-fs (loop3): Directory bread(block 73) failed [ 102.544029][ T5095] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 198) [ 102.597748][ T5095] FAT-fs (loop2): error, fat_free_clusters: deleting FAT entry beyond EOF [ 102.639613][ T5097] FAT-fs (loop4): Directory bread(block 64) failed [ 102.649035][ T5097] FAT-fs (loop4): Directory bread(block 65) failed [ 102.671884][ T5097] FAT-fs (loop4): Directory bread(block 66) failed [ 102.682274][ T5097] FAT-fs (loop4): Directory bread(block 67) failed [ 102.691012][ T5097] FAT-fs (loop4): Directory bread(block 68) failed [ 102.700196][ T5097] FAT-fs (loop4): Directory bread(block 69) failed [ 102.707061][ T5097] FAT-fs (loop4): Directory bread(block 70) failed [ 102.714294][ T5097] FAT-fs (loop4): Directory bread(block 71) failed [ 102.725740][ T5097] FAT-fs (loop4): Directory bread(block 72) failed [ 102.757267][ T5064] XFS (loop1): Mounting V5 Filesystem [ 102.780704][ T5097] FAT-fs (loop4): Directory bread(block 73) failed [ 102.951657][ T5064] XFS (loop1): Ending clean mount [ 103.319279][ T4191] XFS (loop1): Unmounting Filesystem [ 103.708166][ T5123] ntfs3: loop4: Different NTFS' sector size (1024) and media sector size (512) [ 103.772542][ T5123] ntfs3: loop4: MFT: r=1a, expect seq=1 instead of 4! [ 103.794506][ T5123] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 104.137664][ T5137] netlink: 8 bytes leftover after parsing attributes in process `syz.4.346'. [ 104.208350][ T5137] netlink: 8 bytes leftover after parsing attributes in process `syz.4.346'. [ 104.377303][ T5141] bond0: Unable to set up delay as MII monitoring is disabled [ 104.400782][ T5139] EXT4-fs (loop1): mounted filesystem without journal. Opts: init_itable,inode_readahead_blks=0x0000000000000200,,errors=continue. Quota mode: writeback. [ 104.428442][ T5139] ext4 filesystem being mounted at /78/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 104.524099][ T5139] EXT4-fs (loop1): re-mounted. Opts: (null). Quota mode: writeback. [ 104.537937][ T5152] input: syz0 as /devices/virtual/input/input7 [ 104.796886][ T5150] EXT4-fs (loop1): re-mounted. Opts: (null). Quota mode: writeback. [ 104.972925][ T5162] set_capacity_and_notify: 4 callbacks suppressed [ 104.972942][ T5162] loop2: detected capacity change from 0 to 512 [ 105.235314][ T5162] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 105.327976][ T5162] ext4 filesystem being mounted at /76/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 105.547885][ T5156] loop4: detected capacity change from 0 to 131072 [ 105.651988][ T5156] F2FS-fs (loop4): invalid crc value [ 105.666897][ T5174] netlink: 8 bytes leftover after parsing attributes in process `syz.1.360'. [ 105.695868][ T5156] F2FS-fs (loop4): Found nat_bits in checkpoint [ 105.733455][ T5156] F2FS-fs (loop4): Cannot turn on quotas: -2 on 2 [ 105.774523][ T5156] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 106.115532][ T5192] loop1: detected capacity change from 0 to 64 [ 106.175814][ T5196] loop3: detected capacity change from 0 to 128 [ 106.303422][ T5196] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 106.334043][ T5196] ext4 filesystem being mounted at /72/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 106.809701][ T5212] loop1: detected capacity change from 0 to 512 [ 106.936981][ T5212] EXT4-fs error (device loop1): ext4_do_update_inode:5222: inode #15: comm syz.1.375: corrupted inode contents [ 107.031688][ T5217] loop2: detected capacity change from 0 to 512 [ 107.094351][ T5212] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 107.114540][ T5212] EXT4-fs error (device loop1): ext4_do_update_inode:5222: inode #15: comm syz.1.375: corrupted inode contents [ 107.130672][ T5205] loop0: detected capacity change from 0 to 32768 [ 107.160483][ T5217] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 107.161085][ T5212] EXT4-fs error (device loop1): ext4_evict_inode:330: inode #15: comm syz.1.375: mark_inode_dirty error [ 107.215569][ T5212] EXT4-fs (loop1): 1 orphan inode deleted [ 107.230526][ T5212] EXT4-fs (loop1): mounted filesystem without journal. Opts: nouid32,,errors=continue. Quota mode: none. [ 107.380743][ T5205] UFO tlock:0xffffc90002902120 [ 107.420005][ T5205] MetaData crosses page boundary!! [ 107.425179][ T5205] lblock = 6300000010, size = -820051968 [ 107.454516][ T5221] loop3: detected capacity change from 0 to 1024 [ 107.498748][ T5205] CPU: 1 PID: 5205 Comm: syz.0.374 Not tainted syzkaller #0 [ 107.506104][ T5205] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 107.516215][ T5205] Call Trace: [ 107.519529][ T5205] [ 107.522483][ T5205] dump_stack_lvl+0x188/0x250 [ 107.527209][ T5205] ? show_regs_print_info+0x20/0x20 [ 107.532433][ T5205] ? load_image+0x400/0x400 [ 107.537070][ T5205] ? unlock_page+0x17c/0x1f0 [ 107.541698][ T5205] ? release_metapage+0x2f7/0xe10 [ 107.546764][ T5205] ? unlock_page+0x17c/0x1f0 [ 107.551392][ T5205] __get_metapage+0xbfa/0x1060 [ 107.556261][ T5205] dtSearch+0x5d5/0x2050 [ 107.560559][ T5205] dtDelete+0x123/0x2a40 [ 107.564837][ T5205] ? jfs_unlink+0x23d/0xa00 [ 107.569363][ T5205] ? __mutex_lock_common+0x465/0x2400 [ 107.574768][ T5205] ? dtInsertEntry+0x1270/0x1270 [ 107.579751][ T5205] ? _raw_spin_unlock+0x24/0x40 [ 107.584630][ T5205] ? txBegin+0x4b2/0x650 [ 107.588907][ T5205] jfs_unlink+0x297/0xa00 [ 107.593289][ T5205] ? jfs_link+0x650/0x650 [ 107.597644][ T5205] ? rwsem_write_trylock+0x135/0x1c0 [ 107.602969][ T5205] ? clear_nonspinnable+0x60/0x60 [ 107.608027][ T5205] ? bpf_lsm_inode_unlink+0x5/0x10 [ 107.613455][ T5205] ? security_inode_unlink+0xcb/0x110 [ 107.618860][ T5205] vfs_unlink+0x385/0x600 [ 107.623227][ T5205] do_unlinkat+0x391/0x710 [ 107.627668][ T5205] ? __virt_addr_valid+0x3c6/0x470 [ 107.632840][ T5205] ? fsnotify_link_count+0xf0/0xf0 [ 107.638127][ T5205] ? strncpy_from_user+0x1fb/0x360 [ 107.643305][ T5205] ? getname_flags+0x1fe/0x500 [ 107.648108][ T5205] __x64_sys_unlink+0x45/0x50 [ 107.652826][ T5205] do_syscall_64+0x4c/0xa0 [ 107.657270][ T5205] ? clear_bhb_loop+0x30/0x80 [ 107.661970][ T5205] ? clear_bhb_loop+0x30/0x80 [ 107.666687][ T5205] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 107.672637][ T5205] RIP: 0033:0x7f8c49fd4f79 [ 107.677094][ T5205] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 107.696739][ T5205] RSP: 002b:00007f8c4822f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000057 [ 107.705190][ T5205] RAX: ffffffffffffffda RBX: 00007f8c4a24efa0 RCX: 00007f8c49fd4f79 [ 107.713191][ T5205] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000040 [ 107.721185][ T5205] RBP: 00007f8c4a06b7e0 R08: 0000000000000000 R09: 0000000000000000 [ 107.729189][ T5205] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 107.737199][ T5205] R13: 00007f8c4a24f038 R14: 00007f8c4a24efa0 R15: 00007fffba2506e8 [ 107.745217][ T5205] [ 108.077079][ T5229] sctp: [Deprecated]: syz.2.382 (pid 5229) Use of struct sctp_assoc_value in delayed_ack socket option. [ 108.077079][ T5229] Use struct sctp_sack_info instead [ 108.108697][ T5205] bread failed! [ 108.136313][ T5205] jfs_unlink: dtDelete returned -5 [ 108.142720][ T5205] ERROR: (device loop0): jfs_unlink: [ 108.142720][ T5205] [ 108.179176][ T5205] ERROR: (device loop0): remounting filesystem as read-only [ 108.205858][ T5233] loop4: detected capacity change from 0 to 1024 [ 108.558777][ T5226] loop1: detected capacity change from 0 to 32768 [ 108.703011][ T144] hfsplus: b-tree write err: -5, ino 4 [ 108.825845][ T5226] XFS (loop1): Mounting V5 Filesystem [ 109.015400][ T5253] NILFS (loop3): invalid segment: Checksum error in segment payload [ 109.061925][ T5226] XFS (loop1): Ending clean mount [ 109.099282][ T5253] NILFS (loop3): trying rollback from an earlier position [ 109.127400][ T5226] XFS (loop1): Quotacheck needed: Please wait. [ 109.218994][ T5253] NILFS (loop3): recovery complete [ 109.258159][ T5265] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 109.502403][ T5278] use of bytesused == 0 is deprecated and will be removed in the future, [ 109.513069][ T5278] use the actual size instead. [ 109.536425][ T5226] XFS (loop1): Quotacheck: Done. [ 109.547340][ T5247] XFS (loop4): Mounting V5 Filesystem [ 109.651340][ T5285] exfat: Deprecated parameter 'namecase' [ 109.699547][ T5247] XFS (loop4): Ending clean mount [ 109.710554][ T5285] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xd8f5bb5e, utbl_chksum : 0xe619d30d) [ 109.767794][ T5247] XFS (loop4): Quotacheck needed: Please wait. [ 109.782713][ T4191] XFS (loop1): Unmounting Filesystem [ 110.045147][ T5247] XFS (loop4): Quotacheck: Done. [ 110.266498][ T5301] set_capacity_and_notify: 4 callbacks suppressed [ 110.266515][ T5301] loop3: detected capacity change from 0 to 512 [ 110.335910][ T5303] loop0: detected capacity change from 0 to 256 [ 110.397866][ T5298] loop2: detected capacity change from 0 to 4096 [ 110.406824][ T4190] XFS (loop4): Unmounting Filesystem [ 110.415705][ T5301] EXT4-fs error (device loop3): ext4_xattr_inode_iget:401: comm syz.3.405: inode #1: comm syz.3.405: iget: illegal inode # [ 110.429882][ T5303] exfat: Deprecated parameter 'utf8' [ 110.435262][ T5303] exfat: Deprecated parameter 'utf8' [ 110.457580][ T5301] EXT4-fs (loop3): Remounting filesystem read-only [ 110.476926][ T5301] EXT4-fs error (device loop3): ext4_xattr_inode_iget:406: comm syz.3.405: error while reading EA inode 1 err=-117 [ 110.499780][ T5301] EXT4-fs (loop3): Remounting filesystem read-only [ 110.540612][ T5303] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 110.589177][ T5301] EXT4-fs (loop3): 1 orphan inode deleted [ 110.594982][ T5301] EXT4-fs (loop3): mounted filesystem without journal. Opts: noinit_itable,errors=remount-ro,debug_want_extra_isize=0x0000000000000006,grpid,usrjquota=,grpquota,nogrpid,journal_dev=0x0000000000000202,nouid32,. Quota mode: writeback. [ 110.654315][ T5311] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 110.697391][ T5301] EXT4-fs error (device loop3): __ext4_expand_extra_isize:5874: inode #15: comm syz.3.405: bad extra_isize 6 (inode size 256) [ 110.741251][ T5301] EXT4-fs (loop3): Remounting filesystem read-only [ 111.190567][ T4574] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 111.198368][ T23] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 111.448311][ T4574] usb 1-1: Using ep0 maxpacket: 8 [ 111.466478][ T5330] loop4: detected capacity change from 0 to 4096 [ 111.481964][ T23] usb 4-1: Using ep0 maxpacket: 16 [ 111.506790][ T5330] ntfs3: loop4: Different NTFS' sector size (1024) and media sector size (512) [ 111.568728][ T4574] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 111.659013][ T23] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 111.673416][ T23] usb 4-1: config 0 has no interface number 0 [ 111.682967][ T23] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 111.700399][ T23] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 111.746190][ T5336] loop1: detected capacity change from 0 to 512 [ 111.752868][ T4574] usb 1-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 111.762471][ T4574] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.786911][ T4574] usb 1-1: Product: syz [ 111.792958][ T4574] usb 1-1: Manufacturer: syz [ 111.797957][ T4574] usb 1-1: SerialNumber: syz [ 111.815768][ T4574] usb 1-1: config 0 descriptor?? [ 111.848618][ T23] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 111.857729][ T23] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 111.880680][ T5338] ieee802154 phy0 wpan0: encryption failed: -22 [ 111.915536][ T5338] ieee802154 phy0 wpan0: encryption failed: -22 [ 111.927560][ T23] usb 4-1: Product: syz [ 111.948528][ T5336] EXT4-fs (loop1): mounted filesystem without journal. Opts: nodioread_nolock,sb=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 111.963178][ T23] usb 4-1: SerialNumber: syz [ 111.972384][ T5336] ext4 filesystem being mounted at /90/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 111.973000][ T23] usb 4-1: config 0 descriptor?? [ 112.117944][ T4306] usb 1-1: USB disconnect, device number 4 [ 112.126198][ T23] cm109 4-1:0.8: invalid payload size 0, expected 4 [ 112.156601][ T23] input: CM109 USB driver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.8/input/input8 [ 112.214166][ T5336] overlayfs: invalid origin (00000079000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 112.263584][ T5347] device vlan2 entered promiscuous mode [ 112.292986][ T5347] device bond0 entered promiscuous mode [ 112.323570][ T5347] device bond_slave_0 entered promiscuous mode [ 112.350237][ T5347] device bond_slave_1 entered promiscuous mode [ 112.373563][ T23] usb 4-1: USB disconnect, device number 2 [ 112.380033][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 112.380300][ C1] cm109 4-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 112.429359][ T23] cm109 4-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 112.452631][ T4191] EXT4-fs error (device loop1): ext4_empty_dir:3136: inode #12: comm syz-executor: invalid size [ 112.496362][ T4191] EXT4-fs error (device loop1): ext4_empty_dir:3136: inode #12: comm syz-executor: invalid size [ 112.535929][ T4191] EXT4-fs error (device loop1): ext4_empty_dir:3136: inode #12: comm syz-executor: invalid size [ 112.561367][ T4191] EXT4-fs error (device loop1): ext4_empty_dir:3136: inode #12: comm syz-executor: invalid size [ 112.589162][ T4191] EXT4-fs error (device loop1): ext4_empty_dir:3136: inode #12: comm syz-executor: invalid size [ 112.606332][ T4191] EXT4-fs error (device loop1): ext4_empty_dir:3136: inode #12: comm syz-executor: invalid size [ 112.619195][ T4191] EXT4-fs error (device loop1): ext4_empty_dir:3136: inode #12: comm syz-executor: invalid size [ 112.636557][ T4191] EXT4-fs error (device loop1): ext4_empty_dir:3136: inode #12: comm syz-executor: invalid size [ 112.648593][ T4191] EXT4-fs error (device loop1): ext4_empty_dir:3136: inode #12: comm syz-executor: invalid size [ 112.695895][ T4191] EXT4-fs error (device loop1): ext4_empty_dir:3136: inode #12: comm syz-executor: invalid size [ 112.699753][ T5351] loop4: detected capacity change from 0 to 4096 [ 112.817374][ T5351] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 113.198754][ T5351] EXT4-fs (loop4): mounted filesystem without journal. Opts: (null). Quota mode: writeback. [ 113.213234][ T5353] loop2: detected capacity change from 0 to 32768 [ 113.227880][ T5366] input: syz1 as /devices/virtual/input/input9 [ 113.305569][ T5353] ocfs2: Slot 0 on device (7,2) was already allocated to this node! [ 113.339803][ T5353] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 113.447041][ T26] audit: type=1800 audit(1770916423.939:4): pid=5353 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.425" name="file1" dev="loop2" ino=17058 res=0 errno=0 [ 113.663886][ T4186] ocfs2: Unmounting device (7,2) on (node local) [ 113.666095][ T5375] loop3: detected capacity change from 0 to 64 [ 113.747054][ T155] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.834144][ T5375] hfs: hfs: Invalid key length: 94 [ 114.006227][ T155] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.145292][ T155] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.174114][ T5368] loop0: detected capacity change from 0 to 32768 [ 114.290649][ T155] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.354271][ T5368] XFS (loop0): Mounting V5 Filesystem [ 114.590066][ T5368] XFS (loop0): Ending clean mount [ 114.619211][ T5368] XFS (loop0): Quotacheck needed: Please wait. [ 114.692383][ T5368] XFS (loop0): Quotacheck: Done. [ 114.794416][ T5407] netlink: 12 bytes leftover after parsing attributes in process `syz.3.442'. [ 114.923002][ T4185] XFS (loop0): Unmounting Filesystem [ 114.977905][ T5377] loop4: detected capacity change from 0 to 40427 [ 115.034559][ T5377] F2FS-fs (loop4): build fault injection attr: rate: 771, type: 0x1ffff [ 115.086338][ T5377] F2FS-fs (loop4): invalid crc value [ 115.142307][ T5417] overlayfs: failed to clone lowerpath [ 115.170624][ T5377] F2FS-fs (loop4): Found nat_bits in checkpoint [ 115.449817][ T5377] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 115.472821][ T5397] chnl_net:caif_netlink_parms(): no params data found [ 115.568586][ T21] Bluetooth: hci4: command 0x0411 tx timeout [ 115.714138][ T5397] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.722146][ T5397] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.731170][ T5397] device bridge_slave_0 entered promiscuous mode [ 115.760712][ T4190] attempt to access beyond end of device [ 115.760712][ T4190] loop4: rw=2049, want=45104, limit=40427 [ 115.773917][ T5397] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.776925][ T5442] loop3: detected capacity change from 0 to 1764 [ 115.800509][ T5397] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.842780][ T5397] device bridge_slave_1 entered promiscuous mode [ 116.082789][ T5397] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 116.161425][ T5397] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 116.352877][ T5457] xt_CT: You must specify a L4 protocol and not use inversions on it [ 116.424611][ T5397] team0: Port device team_slave_0 added [ 116.484489][ T5397] team0: Port device team_slave_1 added [ 116.528302][ T1108] Bluetooth: hci2: command 0x0409 tx timeout [ 116.753497][ T5397] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 116.763307][ T5397] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 116.843150][ T5397] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 116.897873][ T5397] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 116.920870][ T5397] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 117.024618][ T5397] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 117.256509][ T5483] loop3: detected capacity change from 0 to 128 [ 117.311592][ T5397] device hsr_slave_0 entered promiscuous mode [ 117.375281][ T5461] loop2: detected capacity change from 0 to 32768 [ 117.391320][ T5483] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 117.424485][ T5397] device hsr_slave_1 entered promiscuous mode [ 117.438998][ T5397] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 117.439383][ T5483] ext4 filesystem being mounted at /97/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 117.446608][ T5397] Cannot create hsr debugfs directory [ 117.571564][ T5461] JBD2: Ignoring recovery information on journal [ 117.634663][ T155] device hsr_slave_0 left promiscuous mode [ 117.644622][ T5483] fscrypt (loop3, inode 12): Direct key flag not allowed with different contents and filenames modes [ 117.674036][ T5461] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 117.697941][ T155] device hsr_slave_1 left promiscuous mode [ 117.813398][ T155] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 117.855948][ T155] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 117.921102][ T155] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 117.948348][ T155] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 117.965207][ T155] device bridge_slave_1 left promiscuous mode [ 117.974138][ T155] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.041975][ T155] device bridge_slave_0 left promiscuous mode [ 118.048808][ T155] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.051696][ T4186] ocfs2: Unmounting device (7,2) on (node local) [ 118.121383][ T155] device bridge0 left promiscuous mode [ 118.139987][ T155] device veth1_macvtap left promiscuous mode [ 118.147776][ T155] device veth0_macvtap left promiscuous mode [ 118.177081][ T155] device veth1_vlan left promiscuous mode [ 118.211715][ T155] device veth0_vlan left promiscuous mode [ 118.350199][ T5501] loop3: detected capacity change from 0 to 32768 [ 118.400087][ T5501] (syz.3.463,5501,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 118.435806][ T5501] (syz.3.463,5501,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 118.493583][ T5501] JBD2: Ignoring recovery information on journal [ 118.534388][ T5505] loop2: detected capacity change from 0 to 8192 [ 118.568120][ T5501] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 118.597470][ T5505] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 118.610225][ T4574] Bluetooth: hci2: command 0x041b tx timeout [ 118.642105][ T5505] REISERFS (device loop2): using ordered data mode [ 118.649321][ T5505] reiserfs: using flush barriers [ 118.659487][ T5505] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 118.686913][ T5505] REISERFS (device loop2): checking transaction log (loop2) [ 118.709802][ T5505] REISERFS (device loop2): Using r5 hash to sort names [ 118.718811][ T5505] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 118.897120][ T5510] loop4: detected capacity change from 0 to 512 [ 118.916317][ T4200] ocfs2: Unmounting device (7,3) on (node local) [ 119.229529][ T155] team0 (unregistering): Port device team_slave_1 removed [ 119.333582][ T155] team0 (unregistering): Port device team_slave_0 removed [ 119.368661][ T155] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 119.396059][ T155] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 119.475027][ T5521] loop4: detected capacity change from 0 to 256 [ 119.498083][ T5521] exfat: Deprecated parameter 'namecase' [ 119.531350][ T5521] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 119.623269][ T155] bond0 (unregistering): Released all slaves [ 119.630808][ T4306] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 119.662488][ T5523] loop4: detected capacity change from 0 to 1024 [ 119.695384][ T5523] EXT4-fs (loop4): Test dummy encryption mode enabled [ 119.703352][ T5523] EXT4-fs (loop4): inline encryption not supported [ 119.719564][ T5523] EXT4-fs (loop4): mounted filesystem without journal. Opts: usrjquota=,nojournal_checksum,dax=inode,nobarrier,inode_readahead_blks=0x0000000002000000,test_dummy_encryption,inlinecrypt,grpjquota=,,errors=continue. Quota mode: writeback. [ 119.856910][ T5526] loop2: detected capacity change from 0 to 4096 [ 119.888150][ T5528] loop0: detected capacity change from 0 to 128 [ 119.918457][ T4306] usb 4-1: Using ep0 maxpacket: 8 [ 119.970171][ T5526] ntfs3: loop2: Different NTFS' sector size (1024) and media sector size (512) [ 120.036663][ T5528] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 323) [ 120.046533][ T4306] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 120.068525][ T4306] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 120.087879][ T5528] FAT-fs (loop0): Filesystem has been set read-only [ 120.102739][ T4306] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 120.103613][ T5523] EXT4-fs (loop4): Ignoring removed orlov option [ 120.125962][ T5528] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 323) [ 120.144252][ T4306] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 120.157853][ T5528] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 323) [ 120.177367][ T5528] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 323) [ 120.191104][ T4306] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 120.206131][ T5528] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 323) [ 120.216647][ T5523] EXT4-fs (loop4): Remounting file system with no journal so ignoring journalled data option [ 120.217609][ T26] audit: type=1800 audit(1770916430.709:5): pid=5526 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.473" name="file1" dev="loop2" ino=30 res=0 errno=0 [ 120.258119][ T4306] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.281950][ T5528] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 323) [ 120.342698][ T5523] EXT4-fs (loop4): re-mounted. Opts: bsdgroups,nodiscard,noblock_validity,sysvgroups,usrjquota=,orlov,norecovery,barrier,data=journal,. Quota mode: writeback. [ 120.367529][ T5528] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 323) [ 120.390541][ T4186] ntfs3: loop2: ntfs_evict_inode r=1e failed, -22. [ 120.394183][ T5397] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 120.397615][ T4186] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 120.423554][ T5528] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 323) [ 120.500538][ T26] audit: type=1800 audit(1770916430.999:6): pid=5528 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.474" name="file2" dev="loop0" ino=1048615 res=0 errno=0 [ 120.527760][ T5397] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 120.575956][ T5528] FAT-fs (loop0): error, fat_free_clusters: deleting FAT entry beyond EOF [ 120.592358][ T5397] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 120.599232][ T4306] usb 4-1: GET_CAPABILITIES returned 0 [ 120.599303][ T4306] usbtmc 4-1:16.0: can't read capabilities [ 120.696094][ T5397] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 120.724518][ T5528] syz.0.474 (5528) used greatest stack depth: 20080 bytes left [ 120.728820][ T1108] Bluetooth: hci2: command 0x040f tx timeout [ 120.921550][ T5517] usb 4-1: usbtmc_ioctl_clear_in_halt returned -32 [ 120.951232][ T4565] usb 4-1: USB disconnect, device number 3 [ 121.108576][ T4306] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 121.259658][ T5397] 8021q: adding VLAN 0 to HW filter on device bond0 [ 121.291630][ T5511] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 121.310793][ T5511] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 121.365345][ T5397] 8021q: adding VLAN 0 to HW filter on device team0 [ 121.378482][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 121.397766][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 121.417608][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.424886][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 121.496030][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 121.516547][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 121.526539][ T4306] usb 3-1: config 2 has an invalid interface number: 220 but max is 0 [ 121.544110][ T4306] usb 3-1: config 2 has no interface number 0 [ 121.559880][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 121.568086][ T4306] usb 3-1: config 2 interface 220 has no altsetting 0 [ 121.590192][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.597416][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 121.656139][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 121.693648][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 121.757840][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 121.784594][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 121.801068][ T4306] usb 3-1: New USB device found, idVendor=0424, idProduct=cf30, bcdDevice=94.f4 [ 121.820772][ T4306] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.833375][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 121.860525][ T4306] usb 3-1: Product: syz [ 121.865976][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 121.877683][ T4306] usb 3-1: Manufacturer: syz [ 121.884215][ T4306] usb 3-1: SerialNumber: syz [ 121.934690][ T5397] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 121.995193][ T5397] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 122.051817][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 122.070610][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 122.089495][ T5575] loop3: detected capacity change from 0 to 2048 [ 122.098002][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 122.123261][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 122.164979][ T5575] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 122.172796][ T5560] loop4: detected capacity change from 0 to 32768 [ 122.191335][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 122.278776][ T4565] usb 3-1: USB disconnect, device number 3 [ 122.295034][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 122.615419][ T5562] loop0: detected capacity change from 0 to 40427 [ 122.735060][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 122.764609][ T5562] F2FS-fs (loop0): build fault injection attr: rate: 771, type: 0x1ffff [ 122.788337][ T4565] Bluetooth: hci2: command 0x0419 tx timeout [ 122.803635][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 122.817454][ T5562] F2FS-fs (loop0): invalid crc value [ 122.855648][ T5397] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 122.905508][ T5562] F2FS-fs (loop0): Found nat_bits in checkpoint [ 122.935186][ T26] audit: type=1326 audit(1770916433.429:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5592 comm="syz.2.486" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6d52bb0f79 code=0x0 [ 123.176689][ T5562] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 123.360567][ T5562] attempt to access beyond end of device [ 123.360567][ T5562] loop0: rw=2049, want=45112, limit=40427 [ 123.531002][ T4185] attempt to access beyond end of device [ 123.531002][ T4185] loop0: rw=2049, want=45120, limit=40427 [ 123.691595][ T5588] loop3: detected capacity change from 0 to 32768 [ 123.725222][ T5511] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 123.789599][ T5511] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 123.808600][ T5614] loop4: detected capacity change from 0 to 4096 [ 123.843674][ T5588] ialloc: diAlloc returned -28! [ 123.946061][ T5614] ntfs3: loop4: ntfs_set_state r=3 failed, -22. [ 123.952782][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 123.973729][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 124.041444][ T5397] device veth0_vlan entered promiscuous mode [ 124.057547][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 124.077254][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 124.136071][ T5397] device veth1_vlan entered promiscuous mode [ 124.196675][ T9] ntfs3: loop4: ntfs3_write_inode r=3 failed, -22. [ 124.230908][ T4190] ntfs3: loop4: ntfs_set_state r=3 failed, -22. [ 124.237236][ T4190] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 124.272122][ T4190] ntfs3: loop4: ntfs_set_state r=3 failed, -22. [ 124.291697][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 124.301640][ T4272] ntfs3: loop4: ntfs3_write_inode r=3 failed, -22. [ 124.323912][ T4190] ntfs3: loop4: ntfs_evict_inode r=3 failed, -22. [ 124.324950][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 124.365223][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 124.385323][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 124.398042][ T5397] device veth0_macvtap entered promiscuous mode [ 124.476177][ T5397] device veth1_macvtap entered promiscuous mode [ 124.542420][ T5629] loop4: detected capacity change from 0 to 64 [ 124.598847][ T5397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 124.626836][ T5397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.642286][ T5397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 124.665839][ T5397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.668017][ T5629] hfs: get root inode failed [ 124.697558][ T5397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 124.719887][ T5397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.736422][ T5397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 124.748563][ T5397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.760721][ T5397] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 124.788353][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 124.796757][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 124.827299][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 124.840667][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 124.854179][ T5397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 124.893535][ T5397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.955515][ T5397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 124.984486][ T5397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.999538][ T5397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 125.026139][ T5397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.048467][ T5397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 125.078254][ T5397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.122706][ T5397] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 125.145940][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 125.186554][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 125.250878][ T5397] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.299616][ T5397] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.341071][ T5397] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.366005][ T5647] loop3: detected capacity change from 0 to 1764 [ 125.366775][ T5397] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.549334][ T5647] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 125.701963][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 125.739610][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 125.807961][ T5511] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 125.884204][ T4272] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 125.898150][ T4272] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 125.933611][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 125.991251][ T4574] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 126.012682][ T5658] UHID_CREATE from different security context by process 257 (syz.2.497), this is not allowed. [ 126.058283][ T1108] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 126.091420][ T4574] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 126.150061][ T5638] loop0: detected capacity change from 0 to 32768 [ 126.321969][ T5662] fido_id[5662]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 126.410006][ T5671] loop5: detected capacity change from 0 to 1024 [ 126.438447][ T1108] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 126.446506][ T1108] usb 4-1: config 0 has no interface number 0 [ 126.453408][ T5638] XFS (loop0): Mounting V5 Filesystem [ 126.651766][ T5638] XFS (loop0): Ending clean mount [ 126.679819][ T1108] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 126.715973][ T1108] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.786988][ T1108] usb 4-1: Product: syz [ 126.817397][ T1108] usb 4-1: Manufacturer: syz [ 126.845475][ T1108] usb 4-1: SerialNumber: syz [ 126.860362][ T1108] usb 4-1: config 0 descriptor?? [ 126.940328][ T4185] XFS (loop0): Unmounting Filesystem [ 127.148733][ T1108] usb 4-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 127.157798][ T5686] loop5: detected capacity change from 0 to 256 [ 127.184017][ T1108] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 127.205574][ T1108] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 127.226059][ T1108] usb 4-1: media controller created [ 127.250886][ T5686] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3ec, utbl_chksum : 0xe619d30d) [ 127.301022][ T1108] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 127.336555][ T5674] loop2: detected capacity change from 0 to 32768 [ 127.350724][ T5654] usb 4-1: dvb_usb_ec168: I2C read not implemented [ 127.432584][ T5629] loop4: detected capacity change from 0 to 65536 [ 127.440039][ T1108] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 127.480317][ T5674] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.500 (5674) [ 127.616239][ T1108] usb 4-1: USB disconnect, device number 4 [ 127.701160][ T5674] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 127.719552][ T5674] BTRFS info (device loop2): enabling auto defrag [ 127.726227][ T5674] BTRFS info (device loop2): use no compression [ 127.740053][ T5674] BTRFS info (device loop2): force clearing of disk cache [ 127.747489][ T5674] BTRFS info (device loop2): max_inline at 4096 [ 127.768942][ T5674] BTRFS info (device loop2): disabling free space tree [ 127.775957][ T5674] BTRFS info (device loop2): has skinny extents [ 128.168410][ T5674] BTRFS info (device loop2): enabling ssd optimizations [ 128.187346][ T5724] loop0: detected capacity change from 0 to 4096 [ 128.195162][ T5674] BTRFS info (device loop2): clearing free space tree [ 128.209720][ T5674] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 128.222311][ T5674] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 128.874216][ T4185] ntfs3: loop0: ntfs_evict_inode r=5 failed, -22. [ 128.919068][ T4185] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 129.686125][ T1346] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 129.968816][ T1346] usb 4-1: Using ep0 maxpacket: 8 [ 130.007794][ T5739] loop4: detected capacity change from 0 to 32768 [ 130.055487][ T5743] loop5: detected capacity change from 0 to 32768 [ 130.167336][ T5743] (syz.5.512,5743,0):ocfs2_find_slot:468 ERROR: no free slots available! [ 130.184246][ T1346] usb 4-1: unable to get BOS descriptor or descriptor too short [ 130.192084][ T5743] (syz.5.512,5743,1):ocfs2_mount_volume:1811 ERROR: status = -22 [ 130.315918][ T5743] (syz.5.512,5743,1):ocfs2_fill_super:1177 ERROR: status = -22 [ 130.348564][ T1346] usb 4-1: config 4 interface 0 has no altsetting 0 [ 130.370153][ T5739] XFS (loop4): Mounting V5 Filesystem [ 130.524494][ T5739] XFS (loop4): Ending clean mount [ 130.585853][ T5739] XFS (loop4): Quotacheck needed: Please wait. [ 130.628412][ T1346] usb 4-1: string descriptor 0 read error: -22 [ 130.635772][ T1346] usb 4-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 130.666094][ T1346] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 130.758539][ T4306] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 130.771130][ T5739] XFS (loop4): Quotacheck: Done. [ 130.781889][ T1346] usb 4-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 130.859591][ T1346] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 130.922129][ T1346] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 130.939964][ T1346] usb 4-1: media controller created [ 130.997090][ T1346] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 131.149749][ T4190] XFS (loop4): Unmounting Filesystem [ 131.158699][ T4306] usb 1-1: config 0 interface 0 altsetting 251 bulk endpoint 0x9 has invalid maxpacket 99 [ 131.176606][ T4306] usb 1-1: config 0 interface 0 has no altsetting 0 [ 131.411983][ T4306] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 131.424971][ T4306] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 131.443701][ T4306] usb 1-1: Product: syz [ 131.452518][ T4306] usb 1-1: Manufacturer: syz [ 131.463031][ T4306] usb 1-1: SerialNumber: syz [ 131.486614][ T4306] usb 1-1: config 0 descriptor?? [ 131.518592][ T5794] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 131.541815][ T4306] usb 1-1: selecting invalid altsetting 0 [ 131.818655][ T5794] usb 1-1: selecting invalid altsetting 0 [ 131.843320][ T5794] usb 1-1: 0:0: usb_set_interface failed (-22) [ 131.860548][ T5797] loop5: detected capacity change from 0 to 40427 [ 131.897931][ T5791] usb 1-1: selecting invalid altsetting 0 [ 131.912453][ T5791] usb 1-1: 0:0: usb_set_interface failed (-22) [ 131.922448][ T5791] usb 1-1: selecting invalid altsetting 0 [ 131.933324][ T5791] usb 1-1: 0:0: usb_set_interface failed (-22) [ 131.941475][ T5791] usb 1-1: selecting invalid altsetting 0 [ 131.957337][ T5791] usb 1-1: 0:0: usb_set_interface failed (-22) [ 131.966958][ T5778] usb 1-1: USB disconnect, device number 5 [ 132.000676][ T5797] F2FS-fs (loop5): invalid crc value [ 132.039159][ T5797] F2FS-fs (loop5): Found nat_bits in checkpoint [ 132.108408][ T1346] zl10353_read_register: readreg error (reg=127, ret==0) [ 132.142646][ T5818] netlink: 36 bytes leftover after parsing attributes in process `syz.2.529'. [ 132.242277][ T5797] F2FS-fs (loop5): Start checkpoint disabled! [ 132.263007][ T1346] usb 4-1: USB disconnect, device number 5 [ 132.285831][ T5797] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 132.646020][ T5397] F2FS-fs (loop5): access invalid blkaddr:4043309056 [ 132.659220][ T5824] loop2: detected capacity change from 0 to 1024 [ 132.673888][ T5397] CPU: 1 PID: 5397 Comm: syz-executor Not tainted syzkaller #0 [ 132.681500][ T5397] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 132.691598][ T5397] Call Trace: [ 132.694916][ T5397] [ 132.697880][ T5397] dump_stack_lvl+0x188/0x250 [ 132.702620][ T5397] ? show_regs_print_info+0x20/0x20 [ 132.707859][ T5397] ? f2fs_get_next_page_offset+0x6a0/0x6a0 [ 132.713915][ T5397] f2fs_is_valid_blkaddr+0xc7e/0x1250 [ 132.719376][ T5397] f2fs_map_blocks+0xbcd/0x3300 [ 132.724418][ T5397] ? f2fs_force_buffered_io+0x680/0x680 [ 132.730104][ T5397] ? xa_load+0x276/0x2a0 [ 132.734396][ T5397] f2fs_mpage_readpages+0xc95/0x2260 [ 132.739754][ T5397] ? dquot_release_reservation_block+0xa0/0xa0 [ 132.746203][ T5397] ? f2fs_is_compress_backend_ready+0x99/0x120 [ 132.752439][ T5397] ? f2fs_readahead+0x163/0x2f0 [ 132.757341][ T5397] ? f2fs_set_data_page_dirty+0xad0/0xad0 [ 132.763111][ T5397] read_pages+0x175/0x930 [ 132.767505][ T5397] ? page_cache_ra_unbounded+0x940/0x940 [ 132.773198][ T5397] ? add_to_page_cache_lru+0x2a8/0x4a0 [ 132.778705][ T5397] page_cache_ra_unbounded+0x838/0x940 [ 132.784258][ T5397] ? read_cache_pages_invalidate_pages+0x1c0/0x1c0 [ 132.790920][ T5397] f2fs_readdir+0x496/0xda0 [ 132.795498][ T5397] ? f2fs_fill_dentries+0xd10/0xd10 [ 132.800748][ T5397] ? end_current_label_crit_section+0x14b/0x170 [ 132.807034][ T5397] ? iterate_dir+0x10d/0x560 [ 132.811665][ T5397] ? down_read_killable+0x1ce/0x340 [ 132.816911][ T5397] ? fsnotify_perm+0x254/0x560 [ 132.821769][ T5397] iterate_dir+0x218/0x560 [ 132.826475][ T5397] ? f2fs_fill_dentries+0xd10/0xd10 [ 132.832120][ T5397] __se_sys_getdents64+0xf2/0x270 [ 132.837216][ T5397] ? __x64_sys_getdents64+0x80/0x80 [ 132.842459][ T5397] ? filldir+0x720/0x720 [ 132.847061][ T5397] ? vtime_user_exit+0x2c8/0x3e0 [ 132.852048][ T5397] ? lockdep_hardirqs_on+0x94/0x140 [ 132.857321][ T5397] do_syscall_64+0x4c/0xa0 [ 132.861780][ T5397] ? clear_bhb_loop+0x30/0x80 [ 132.866509][ T5397] ? clear_bhb_loop+0x30/0x80 [ 132.871292][ T5397] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 132.877247][ T5397] RIP: 0033:0x7f0004475933 [ 132.881717][ T5397] Code: c7 c0 e8 ff ff ff 64 c7 00 16 00 00 00 31 c0 eb 9e e8 81 9b fd ff 90 b8 ff ff ff 7f 48 39 c2 48 0f 47 d0 b8 d9 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 05 c3 0f 1f 40 00 48 c7 c2 e8 ff ff ff f7 d8 [ 132.901541][ T5397] RSP: 002b:00007ffd2b1f9eb8 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9 [ 132.910022][ T5397] RAX: ffffffffffffffda RBX: 0000555560833a30 RCX: 00007f0004475933 [ 132.918214][ T5397] RDX: 0000000000008000 RSI: 0000555560833a60 RDI: 0000000000000005 [ 132.926225][ T5397] RBP: 0000555560833a60 R08: 00007f000469bcc0 R09: 0000000000000001 [ 132.934331][ T5397] R10: 0000000000000000 R11: 0000000000000293 R12: 0000555560833a34 [ 132.942490][ T5397] R13: ffffffffffffffe8 R14: 0000000000000010 R15: 00007ffd2b1fc160 [ 132.950539][ T5397] [ 132.975186][ T5397] attempt to access beyond end of device [ 132.975186][ T5397] loop5: rw=524288, want=45072, limit=40427 [ 132.987359][ T5397] attempt to access beyond end of device [ 132.987359][ T5397] loop5: rw=0, want=45072, limit=40427 [ 132.993048][ T5824] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 133.014409][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.014511][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.081427][ T5816] loop4: detected capacity change from 0 to 32768 [ 133.096549][ T5824] EXT4-fs (loop2): mounted filesystem without journal. Opts: dioread_nolock,norecovery,min_batch_time=0x0000000000000001,nojournal_checksum,debug_want_extra_isize=0x0000000000000080,nodelalloc,errors=remount-ro,acl,auto_da_alloc=0x0000000000000343,jqfmt=vfsold,barrier=0x00000000000000. Quota mode: none. [ 133.156892][ T5816] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.528 (5816) [ 133.218698][ T5816] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 133.227469][ T5816] BTRFS info (device loop4): enabling auto defrag [ 133.260854][ T154] attempt to access beyond end of device [ 133.260854][ T154] loop5: rw=2049, want=45112, limit=40427 [ 133.311287][ T5816] BTRFS info (device loop4): use no compression [ 133.333282][ T5837] netlink: 28 bytes leftover after parsing attributes in process `syz.3.535'. [ 133.342733][ T5816] BTRFS info (device loop4): force clearing of disk cache [ 133.370387][ T5816] BTRFS info (device loop4): max_inline at 4096 [ 133.376869][ T5816] BTRFS info (device loop4): disabling free space tree [ 133.387059][ T5816] BTRFS info (device loop4): has skinny extents [ 133.664884][ T154] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.685888][ T5863] loop3: detected capacity change from 0 to 128 [ 133.706405][ T5860] delete_channel: no stack [ 133.825223][ T5816] BTRFS info (device loop4): enabling ssd optimizations [ 133.840298][ T5816] BTRFS info (device loop4): clearing free space tree [ 133.859627][ T5816] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 133.878596][ T5816] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 134.252676][ T5879] loop0: detected capacity change from 0 to 64 [ 134.373483][ T5874] loop2: detected capacity change from 0 to 65536 [ 134.474573][ T154] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.604646][ T5874] XFS (loop2): Mounting V5 Filesystem [ 134.724494][ T5874] XFS (loop2): Ending clean mount [ 134.753722][ T154] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.035833][ T5897] loop0: detected capacity change from 0 to 256 [ 135.203298][ T5874] XFS (loop2): Quotacheck needed: Please wait. [ 135.343062][ T154] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.382300][ T5874] XFS (loop2): Quotacheck: Done. [ 135.527507][ T4186] XFS (loop2): Unmounting Filesystem [ 135.696558][ T5912] device erspan0 entered promiscuous mode [ 136.612755][ T5932] netlink: 28 bytes leftover after parsing attributes in process `syz.4.564'. [ 136.633872][ T5918] loop0: detected capacity change from 0 to 131072 [ 136.662210][ T5899] chnl_net:caif_netlink_parms(): no params data found [ 136.696076][ T5937] loop3: detected capacity change from 0 to 512 [ 136.740672][ T5918] F2FS-fs (loop0): Wrong CP boundary, start(512) end(1536) blocks(0) [ 136.749481][ T5918] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 136.766443][ T4565] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 136.787230][ T4565] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 136.811488][ T5918] F2FS-fs (loop0): invalid crc value [ 136.908547][ T5918] F2FS-fs (loop0): Found nat_bits in checkpoint [ 136.987278][ T5918] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 136.994459][ T5918] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 137.255181][ T5899] bridge0: port 1(bridge_slave_0) entered blocking state [ 137.328503][ T5778] Bluetooth: hci2: command 0x0409 tx timeout [ 137.335302][ T5899] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.351257][ T5899] device bridge_slave_0 entered promiscuous mode [ 137.423277][ T5899] bridge0: port 2(bridge_slave_1) entered blocking state [ 137.456423][ T5899] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.510439][ T5899] device bridge_slave_1 entered promiscuous mode [ 137.615344][ T5969] netlink: 'syz.2.557': attribute type 1 has an invalid length. [ 137.662644][ T5899] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 137.750487][ T5899] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 137.888055][ T5899] team0: Port device team_slave_0 added [ 137.976890][ T5899] team0: Port device team_slave_1 added [ 138.158932][ T5899] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 138.169036][ T5899] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 138.211061][ T5979] loop2: detected capacity change from 0 to 8192 [ 138.246251][ T5899] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 138.263100][ T5979] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 138.293523][ T5979] REISERFS (device loop2): using ordered data mode [ 138.313077][ T5899] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 138.318775][ T4565] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 138.320161][ T5899] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 138.354784][ T5899] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 138.372733][ T5979] reiserfs: using flush barriers [ 138.410714][ T5979] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 138.434464][ T5979] REISERFS (device loop2): checking transaction log (loop2) [ 138.443851][ T5979] REISERFS (device loop2): Using rupasov hash to sort names [ 138.451393][ T5979] REISERFS (device loop2): using 3.5.x disk format [ 138.461025][ T5979] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 138.481699][ T5979] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 138.502519][ T5899] device hsr_slave_0 entered promiscuous mode [ 138.509832][ T5979] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 138.533336][ T5979] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 138.543075][ T5899] device hsr_slave_1 entered promiscuous mode [ 138.552306][ T5899] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 138.558728][ T4565] usb 4-1: Using ep0 maxpacket: 8 [ 138.571367][ T5899] Cannot create hsr debugfs directory [ 138.678592][ T4565] usb 4-1: config 0 has an invalid interface number: 186 but max is 0 [ 138.696431][ T4565] usb 4-1: config 0 has no interface number 0 [ 138.723438][ T4565] usb 4-1: config 0 interface 186 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 138.770048][ T5995] loop4: detected capacity change from 0 to 2048 [ 138.785800][ T4565] usb 4-1: config 0 interface 186 altsetting 0 has an invalid endpoint with address 0x9A, skipping [ 138.807145][ T4565] usb 4-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 138.873561][ T154] device hsr_slave_0 left promiscuous mode [ 138.888473][ T5995] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 138.900282][ T5995] ext4 filesystem being mounted at /110/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 138.916763][ T154] device hsr_slave_1 left promiscuous mode [ 138.938082][ T26] audit: type=1800 audit(1770916449.439:8): pid=5995 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.577" name="file0" dev="loop4" ino=13 res=0 errno=0 [ 138.992214][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 139.008671][ T4565] usb 4-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 139.017868][ T4565] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.037878][ T154] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 139.059249][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 139.062460][ T4565] usb 4-1: Product: syz [ 139.067425][ T154] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 139.089856][ T4565] usb 4-1: Manufacturer: syz [ 139.094522][ T4565] usb 4-1: SerialNumber: syz [ 139.111378][ T4565] usb 4-1: config 0 descriptor?? [ 139.150176][ T154] device bridge_slave_1 left promiscuous mode [ 139.156454][ T154] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.177246][ T4565] iowarrior 4-1:0.186: no interrupt-in endpoint found [ 139.274482][ T154] device bridge_slave_0 left promiscuous mode [ 139.291267][ T154] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.328057][ T154] device veth1_macvtap left promiscuous mode [ 139.343028][ T154] device veth0_macvtap left promiscuous mode [ 139.379991][ T154] device veth1_vlan left promiscuous mode [ 139.385970][ T154] device veth0_vlan left promiscuous mode [ 139.409938][ T4565] Bluetooth: hci2: command 0x041b tx timeout [ 139.533504][ T6014] loop2: detected capacity change from 0 to 512 [ 139.651717][ T6014] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,delalloc,bsdgroups,. Quota mode: writeback. [ 139.718726][ T6014] ext4 filesystem being mounted at /134/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 139.750632][ C1] vkms_vblank_simulate: vblank timer overrun [ 139.785099][ T6014] EXT4-fs (loop2): shut down requested (1) [ 139.866109][ T6022] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 140.201695][ T154] team0 (unregistering): Port device team_slave_1 removed [ 140.221368][ T154] team0 (unregistering): Port device team_slave_0 removed [ 140.235624][ T154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 140.259378][ T154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 140.347989][ T154] bond0 (unregistering): Released all slaves [ 140.651558][ T6043] loop2: detected capacity change from 0 to 1024 [ 140.756266][ T6043] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 140.817013][ T6043] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 140.880273][ T6043] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 140.893948][ T6043] System zones: 0-1, 3-36 [ 140.912987][ T6043] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,delalloc,resuid=0x0000000000000000,debug,dioread_nolock,bsddf,nomblk_io_submit,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 140.949263][ T5899] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 140.984666][ T5899] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 141.054216][ T5784] usb 4-1: USB disconnect, device number 6 [ 141.099495][ T5899] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 141.133362][ T5899] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 141.219671][ T6060] netlink: 'syz.3.598': attribute type 6 has an invalid length. [ 141.245397][ T6068] netlink: 'syz.3.598': attribute type 6 has an invalid length. [ 141.457767][ T6065] loop0: detected capacity change from 0 to 4096 [ 141.488794][ T4565] Bluetooth: hci2: command 0x040f tx timeout [ 141.515763][ T6065] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 141.659223][ T5899] 8021q: adding VLAN 0 to HW filter on device bond0 [ 141.729082][ T6065] ntfs3: loop0: Failed to load $Extend. [ 141.807630][ T5511] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 141.829033][ T5511] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 141.867604][ T5899] 8021q: adding VLAN 0 to HW filter on device team0 [ 141.898068][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 141.909253][ T6085] vivid-000: disconnect [ 141.925583][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 141.965536][ T4290] bridge0: port 1(bridge_slave_0) entered blocking state [ 141.973167][ T4290] bridge0: port 1(bridge_slave_0) entered forwarding state [ 141.996251][ T6085] vivid-000: reconnect [ 142.034270][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 142.090740][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 142.119790][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 142.146441][ T4290] bridge0: port 2(bridge_slave_1) entered blocking state [ 142.153649][ T4290] bridge0: port 2(bridge_slave_1) entered forwarding state [ 142.216588][ T6088] loop0: detected capacity change from 0 to 4096 [ 142.230762][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 142.256531][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 142.273190][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 142.315317][ T6088] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 142.329833][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 142.350923][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 142.441150][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 142.465638][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 142.475150][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 142.485564][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 142.515925][ T5899] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 142.535023][ T26] audit: type=1800 audit(1770916453.029:9): pid=6088 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.604" name="file1" dev="loop0" ino=30 res=0 errno=0 [ 142.549052][ T5899] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 142.555484][ C1] vkms_vblank_simulate: vblank timer overrun [ 142.595759][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 142.625286][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 142.674324][ T26] audit: type=1800 audit(1770916453.109:10): pid=6088 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.604" name="file1" dev="loop0" ino=30 res=0 errno=0 [ 142.785397][ T4185] ntfs3: loop0: ntfs_evict_inode r=3 failed, -22. [ 142.828168][ T4185] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 142.852578][ T4185] ntfs3: loop0: ntfs_set_state r=3 failed, -22. [ 143.252841][ T6105] loop0: detected capacity change from 0 to 4096 [ 143.512939][ T6105] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 143.568801][ T4565] Bluetooth: hci2: command 0x0419 tx timeout [ 143.692568][ T6099] loop3: detected capacity change from 0 to 131072 [ 143.741483][ T5258] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 143.764175][ T5258] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 143.799873][ T6099] F2FS-fs (loop3): Invalid log sectors per block(570425347) log sectorsize(9) [ 143.808972][ T6099] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 143.823564][ T6105] EXT4-fs (loop0): Cannot specify journal on remount [ 143.833810][ T5899] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 143.848506][ T6099] F2FS-fs (loop3): invalid crc value [ 143.881241][ T6099] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (15359802341028777995, 275811881701387) [ 143.940845][ T6099] F2FS-fs (loop3): recover fsync data on readonly fs [ 143.947653][ T6099] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=3000000, run fsck to fix. [ 143.957486][ T6099] F2FS-fs (loop3): Bad quota inode 2:50331648 [ 143.964313][ T6099] F2FS-fs (loop3): Failed to enable quota tracking (type=2, err=-22). Please run fsck to fix. [ 143.974890][ T6099] F2FS-fs (loop3): Cannot turn on quota_ino: -22 [ 143.983251][ T6099] F2FS-fs (loop3): Try to recover 2th superblock, ret: -30 [ 143.990720][ T6099] F2FS-fs (loop3): Mounted with checkpoint version = 753bd00b [ 144.544988][ T6142] netlink: 7986 bytes leftover after parsing attributes in process `syz.0.618'. [ 144.913789][ T6157] loop4: detected capacity change from 0 to 1024 [ 144.944481][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 144.978522][ T23] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 144.998757][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 145.104694][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 145.164352][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 145.220303][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 145.249995][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 145.316884][ T6166] Set syz1 is full, maxelem 1048 reached [ 145.324841][ T5899] device veth0_vlan entered promiscuous mode [ 145.375029][ T5899] device veth1_vlan entered promiscuous mode [ 145.398751][ T23] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 145.432556][ T23] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 145.507075][ T23] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 145.527757][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 145.554558][ T6175] netlink: 32 bytes leftover after parsing attributes in process `syz.0.636'. [ 145.565816][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 145.605290][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 145.650343][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 145.659057][ T23] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 145.691948][ T5899] device veth0_macvtap entered promiscuous mode [ 145.705028][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 145.734368][ T5899] device veth1_macvtap entered promiscuous mode [ 145.748459][ T23] usb 4-1: SerialNumber: syz [ 145.805127][ T6145] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 145.838628][ T6145] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 145.894928][ T5899] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 145.959182][ T5899] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.988349][ T5899] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 146.029619][ T5899] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.050061][ T5899] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 146.074511][ T6145] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 146.088278][ T5899] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.102066][ T6145] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 146.109004][ T5784] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 146.123424][ T5899] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 146.145242][ T5899] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.170077][ T6190] loop0: detected capacity change from 0 to 2048 [ 146.182065][ T5899] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 146.212226][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 146.241888][ T6190] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 146.258426][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 146.280634][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 146.326731][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 146.349546][ T5784] usb 5-1: Using ep0 maxpacket: 16 [ 146.377295][ T6192] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.422905][ T5899] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 146.463353][ T5899] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.474971][ T5784] usb 5-1: config 0 interface 0 has no altsetting 0 [ 146.488359][ T5784] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 146.508326][ T5784] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.516091][ T5899] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 146.557777][ T5899] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.570285][ T5784] usb 5-1: config 0 descriptor?? [ 146.588797][ T5899] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 146.621185][ T5899] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.641403][ T5899] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 146.664856][ T5899] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.680807][ T5899] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 146.695442][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 146.710992][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 146.753694][ T5899] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.794112][ T23] cdc_ether 4-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.3-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 146.821688][ T5899] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.838497][ T23] usb 4-1: USB disconnect, device number 7 [ 146.845763][ T23] cdc_ether 4-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.3-1, CDC Ethernet Device [ 146.884021][ T5899] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.923567][ T5899] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.942731][ T6203] kvm [6201]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc0010006 data 0x0 [ 147.052814][ T5784] hid (null): bogus close delimiter [ 147.199385][ T6208] netlink: 'syz.2.638': attribute type 6 has an invalid length. [ 147.272518][ T1346] usb 5-1: USB disconnect, device number 5 [ 147.283304][ T6208] netlink: 'syz.2.638': attribute type 6 has an invalid length. [ 147.318857][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 147.333058][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 147.392789][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 147.512966][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 147.581383][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 147.611851][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 147.698947][ T1346] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 147.746532][ T1346] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz1] on syz0 [ 147.789308][ T6196] loop0: detected capacity change from 0 to 40427 [ 147.874956][ T6196] F2FS-fs (loop0): build fault injection attr: rate: 0, type: 0x35f7 [ 147.940012][ T6196] F2FS-fs (loop0): build fault injection attr: rate: 690, type: 0x1ffff [ 147.997904][ T6196] F2FS-fs (loop0): invalid crc value [ 148.103863][ T6196] F2FS-fs (loop0): Found nat_bits in checkpoint [ 148.365726][ T6196] F2FS-fs (loop0): Start checkpoint disabled! [ 148.425635][ T6196] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 148.540253][ T6254] loop6: detected capacity change from 0 to 64 [ 149.082192][ T4306] kernel read not supported for file /dsp1 (pid: 4306 comm: kworker/1:7) [ 149.444055][ T6276] loop0: detected capacity change from 0 to 2048 [ 149.621754][ T6276] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 149.656802][ T6284] loop4: detected capacity change from 0 to 1024 [ 149.700285][ T6276] ext4 filesystem being mounted at /123/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 149.767662][ T6279] loop2: detected capacity change from 0 to 4096 [ 149.909708][ T6295] attempt to access beyond end of device [ 149.909708][ T6295] loop4: rw=0, want=5780, limit=1024 [ 149.927241][ T6279] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 150.148408][ T4564] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 150.358562][ T4565] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 150.408328][ T4564] usb 7-1: Using ep0 maxpacket: 8 [ 150.437965][ T6308] loop3: detected capacity change from 0 to 512 [ 150.523488][ T6308] EXT4-fs (loop3): orphan cleanup on readonly fs [ 150.529495][ T4564] usb 7-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 150.543725][ T4564] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.557922][ T6308] EXT4-fs error (device loop3): ext4_ext_check_inode:501: inode #4: comm syz.3.663: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 1(1) [ 150.598417][ T4565] usb 3-1: Using ep0 maxpacket: 32 [ 150.614166][ T4564] pvrusb2: Hardware description: Terratec Grabster AV400 [ 150.626055][ T4564] pvrusb2: ********** [ 150.634820][ T4564] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 150.645882][ T4564] pvrusb2: Important functionality might not be entirely working. [ 150.655410][ T4564] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 150.656088][ T6308] EXT4-fs error (device loop3): ext4_quota_enable:6445: comm syz.3.663: Bad quota inode: 4, type: 1 [ 150.668805][ T4564] pvrusb2: ********** [ 150.707490][ T6308] EXT4-fs warning (device loop3): ext4_enable_quotas:6486: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 150.723303][ T4565] usb 3-1: config 0 has an invalid descriptor of length 194, skipping remainder of the config [ 150.734459][ T6308] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 150.753914][ T6308] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 150.807150][ T6308] EXT4-fs (loop3): shut down requested (2) [ 150.842696][ T2427] pvrusb2: Invalid write control endpoint [ 150.899291][ T4565] usb 3-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 150.921497][ T4565] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.934760][ T4565] usb 3-1: Product: syz [ 150.939397][ T4565] usb 3-1: Manufacturer: syz [ 150.947551][ T4565] usb 3-1: SerialNumber: syz [ 150.983487][ T4565] usb 3-1: config 0 descriptor?? [ 151.031617][ T2427] pvrusb2: Invalid write control endpoint [ 151.040420][ T4565] usb 3-1: bad CDC descriptors [ 151.057131][ T4565] usb 3-1: unsupported MDLM descriptors [ 151.096451][ T2427] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 151.119446][ T2427] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 151.127143][ T2427] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 151.143753][ T2427] pvrusb2: Device being rendered inoperable [ 151.174858][ T5784] usb 7-1: USB disconnect, device number 2 [ 151.185504][ T2427] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 151.197085][ T6327] ALSA: mixer_oss: invalid OSS volume 'E' [ 151.207381][ T2427] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 151.216784][ T6327] ALSA: mixer_oss: invalid OSS volume 'Æ' [ 151.274262][ T4564] usb 3-1: USB disconnect, device number 4 [ 151.315490][ T2427] pvrusb2: Attached sub-driver cx25840 [ 151.341790][ T2427] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 151.381515][ T2427] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 151.824449][ T6350] loop3: detected capacity change from 0 to 4096 [ 152.245094][ T6363] loop6: detected capacity change from 0 to 4096 [ 152.406993][ T6376] loop2: detected capacity change from 0 to 512 [ 152.436237][ T6363] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 152.541667][ T6376] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 152.618260][ T1346] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 152.687978][ T6376] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8802e02c, mo2=0102] [ 152.724756][ T6376] EXT4-fs (loop2): orphan cleanup on readonly fs [ 152.859825][ T6376] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.683: bg 0: block 361: padding at end of block bitmap is not set [ 152.888331][ T1346] usb 1-1: Using ep0 maxpacket: 16 [ 152.906116][ T6376] EXT4-fs (loop2): Remounting filesystem read-only [ 152.942764][ T6376] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6194: Corrupt filesystem [ 153.015444][ T6376] EXT4-fs (loop2): Remounting filesystem read-only [ 153.024581][ T6401] loop4: detected capacity change from 0 to 128 [ 153.033050][ T6376] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.683: invalid indirect mapped block 1358954509 (level 0) [ 153.085537][ T6376] EXT4-fs (loop2): Remounting filesystem read-only [ 153.108145][ T6376] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.683: invalid indirect mapped block 2185560079 (level 1) [ 153.139423][ T6376] EXT4-fs (loop2): Remounting filesystem read-only [ 153.146502][ T6376] EXT4-fs (loop2): 1 truncate cleaned up [ 153.208517][ T1346] usb 1-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 153.233752][ T6376] EXT4-fs (loop2): mounted filesystem without journal. Opts: abort,noblock_validity,abort,errors=remount-ro,lazytime. Quota mode: none. [ 153.254981][ T1346] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.261957][ T6403] loop6: detected capacity change from 0 to 4096 [ 153.280170][ T6401] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 153.299442][ T1346] usb 1-1: Product: syz [ 153.314055][ T1346] usb 1-1: Manufacturer: syz [ 153.323985][ T6401] ext4 filesystem being mounted at /134/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 153.332591][ T1346] usb 1-1: SerialNumber: syz [ 153.377917][ T6414] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 153.675392][ T6419] loop2: detected capacity change from 0 to 4096 [ 153.684504][ T1346] usb 1-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 153.748170][ T1346] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 153.769251][ T6419] EXT4-fs (loop2): Test dummy encryption mode enabled [ 153.804916][ T1346] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 153.822890][ T6419] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 153.863442][ T1346] usb 1-1: media controller created [ 153.869180][ T6419] System zones: 0-5 [ 153.878756][ T6419] EXT4-fs (loop2): mounted filesystem without journal. Opts: debug,delalloc,journal_ioprio=0x0000000000000000,test_dummy_encryption,nodiscard,min_batch_time=0x0000000000000004,acl,debug_want_extra_isize=0x0000000000000040,,errors=continue. Quota mode: writeback. [ 153.921034][ T6424] loop6: detected capacity change from 0 to 16 [ 153.980314][ T6424] MTD: Attempt to mount non-MTD device "/dev/loop6" [ 154.003395][ T1346] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 154.027828][ T6419] EXT4-fs (loop2): shut down requested (2) [ 154.169233][ T1346] zl10353_read_register: readreg error (reg=127, ret==-71) [ 154.343328][ T1346] dvb_usb_gl861: probe of 1-1:157.0 failed with error -5 [ 154.437464][ T6438] input: syz1 as /devices/virtual/input/input10 [ 154.446726][ T1346] usb 1-1: USB disconnect, device number 6 [ 154.707134][ T6451] loop0: detected capacity change from 0 to 1024 [ 154.778589][ T21] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 155.020643][ T5511] hfsplus: b-tree write err: -5, ino 4 [ 155.053422][ T21] usb 4-1: Using ep0 maxpacket: 8 [ 155.092409][ T6461] loop2: detected capacity change from 0 to 2048 [ 155.151235][ T6461] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=3932051, location=3932051 [ 155.265835][ T6461] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 155.325803][ T6472] loop6: detected capacity change from 0 to 256 [ 155.409458][ T21] usb 4-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 155.425405][ T21] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.474528][ T21] usb 4-1: Product: syz [ 155.487409][ T21] usb 4-1: Manufacturer: syz [ 155.518776][ T21] usb 4-1: SerialNumber: syz [ 155.544749][ T6479] loop4: detected capacity change from 0 to 1024 [ 155.562616][ T21] usb 4-1: config 0 descriptor?? [ 155.646231][ T21] gspca_main: se401-2.14.0 probing 047d:5003 [ 155.738646][ T6488] netlink: 12 bytes leftover after parsing attributes in process `syz.0.714'. [ 156.060125][ T154] wlan0: Trigger new scan to find an IBSS to join [ 156.078753][ T21] gspca_se401: Frame size: 1x0 bayer [ 156.139385][ T154] ------------[ cut here ]------------ [ 156.145677][ T154] no supported rates for sta (null) (0xffffffff, band 0) in rate_mask 0xfff with flags 0x40 [ 156.156651][ T154] WARNING: CPU: 1 PID: 154 at net/mac80211/rate.c:376 __rate_control_send_low+0x630/0x880 [ 156.166656][ T154] Modules linked in: [ 156.170620][ T154] CPU: 1 PID: 154 Comm: kworker/u4:2 Not tainted syzkaller #0 [ 156.178114][ T154] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 156.188256][ T154] Workqueue: phy5 ieee80211_scan_work [ 156.193701][ T154] RIP: 0010:__rate_control_send_low+0x630/0x880 [ 156.200043][ T154] Code: 0f b6 04 28 84 c0 0f 85 e9 01 00 00 48 8b 44 24 08 8b 08 48 c7 c7 20 6b 39 8b 4c 89 f6 44 8b 44 24 14 45 89 f9 e8 d0 ce 69 00 <0f> 0b e9 72 fe ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 08 fa ff [ 156.219725][ T154] RSP: 0018:ffffc90002047488 EFLAGS: 00010246 [ 156.225844][ T154] RAX: bd19ef145ec71600 RBX: 000000000000000c RCX: ffff88801c563b80 [ 156.233965][ T154] RDX: 0000000000000000 RSI: 0000000000000200 RDI: 0000000000000000 [ 156.242019][ T154] RBP: 0000000000000084 R08: ffffc90002046fa7 R09: 1ffff92000408df4 [ 156.250065][ T154] R10: dffffc0000000000 R11: fffff52000408df5 R12: ffff88801fa30ca8 [ 156.258083][ T154] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000040 [ 156.266143][ T154] FS: 0000000000000000(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 156.275178][ T154] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 156.281848][ T154] CR2: 00007fb1e6024212 CR3: 000000005f971000 CR4: 00000000003506e0 [ 156.289937][ T154] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 156.297948][ T154] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 156.306050][ T154] Call Trace: [ 156.309401][ T154] [ 156.312395][ T154] rate_control_send_low+0x194/0x790 [ 156.317730][ T154] ? ieee80211_scan_work+0x4eb/0x1b40 [ 156.323207][ T154] rate_control_get_rate+0x207/0x5c0 [ 156.328580][ T154] ieee80211_tx_h_rate_ctrl+0xb02/0x1700 [ 156.334295][ T154] ? ieee80211_tx_h_select_key+0x17f0/0x17f0 [ 156.340486][ T154] ? sta_info_hash_lookup+0x53e/0x580 [ 156.345919][ T154] ? ieee80211_queue_skb+0xbc/0x2060 [ 156.351310][ T154] invoke_tx_handlers_late+0xaa/0x16a0 [ 156.356823][ T154] ? ieee80211_tx_h_select_key+0x12c0/0x17f0 [ 156.362909][ T154] ? sta_info_get+0x220/0x230 [ 156.367641][ T154] ? invoke_tx_handlers_early+0xa11/0x1d10 [ 156.373567][ T154] ieee80211_tx+0x2d4/0x460 [ 156.378119][ T154] ? ieee80211_skb_resize+0x630/0x630 [ 156.383629][ T154] __ieee80211_tx_skb_tid_band+0x165/0x200 [ 156.389679][ T154] ieee80211_scan_state_send_probe+0x526/0x8a0 [ 156.395914][ T154] ieee80211_scan_work+0x4eb/0x1b40 [ 156.401280][ T154] process_one_work+0x85f/0x1010 [ 156.406288][ T154] ? worker_detach_from_pool+0x240/0x240 [ 156.412038][ T154] ? lockdep_hardirqs_off+0x70/0x100 [ 156.417425][ T154] ? _raw_spin_lock_irq+0xb7/0xf0 [ 156.422546][ T154] ? _raw_spin_lock_irqsave+0x100/0x100 [ 156.428144][ T154] ? wq_worker_running+0x97/0x170 [ 156.433282][ T154] worker_thread+0xaa6/0x1290 [ 156.438035][ T154] kthread+0x436/0x520 [ 156.442289][ T154] ? rcu_lock_release+0x20/0x20 [ 156.447188][ T154] ? kthread_blkcg+0xd0/0xd0 [ 156.451966][ T154] ret_from_fork+0x1f/0x30 [ 156.456442][ T154] [ 156.459646][ T154] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 156.467174][ T154] CPU: 1 PID: 154 Comm: kworker/u4:2 Not tainted syzkaller #0 [ 156.474678][ T154] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 156.484778][ T154] Workqueue: phy5 ieee80211_scan_work [ 156.490211][ T154] Call Trace: [ 156.493556][ T154] [ 156.496513][ T154] dump_stack_lvl+0x188/0x250 [ 156.501231][ T154] ? show_regs_print_info+0x20/0x20 [ 156.506471][ T154] ? load_image+0x400/0x400 [ 156.511036][ T154] panic+0x2e5/0x810 [ 156.514993][ T154] ? bpf_jit_dump+0xd0/0xd0 [ 156.519653][ T154] ? ret_from_fork+0x1f/0x30 [ 156.524296][ T154] ? __rate_control_send_low+0x630/0x880 [ 156.529983][ T154] __warn+0x248/0x2b0 [ 156.534011][ T154] ? __rate_control_send_low+0x630/0x880 [ 156.539794][ T154] report_bug+0x1b7/0x2e0 [ 156.544179][ T154] handle_bug+0x3a/0x70 [ 156.548378][ T154] exc_invalid_op+0x16/0x40 [ 156.552923][ T154] asm_exc_invalid_op+0x16/0x20 [ 156.557816][ T154] RIP: 0010:__rate_control_send_low+0x630/0x880 [ 156.564103][ T154] Code: 0f b6 04 28 84 c0 0f 85 e9 01 00 00 48 8b 44 24 08 8b 08 48 c7 c7 20 6b 39 8b 4c 89 f6 44 8b 44 24 14 45 89 f9 e8 d0 ce 69 00 <0f> 0b e9 72 fe ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 08 fa ff [ 156.583771][ T154] RSP: 0018:ffffc90002047488 EFLAGS: 00010246 [ 156.589886][ T154] RAX: bd19ef145ec71600 RBX: 000000000000000c RCX: ffff88801c563b80 [ 156.597903][ T154] RDX: 0000000000000000 RSI: 0000000000000200 RDI: 0000000000000000 [ 156.605940][ T154] RBP: 0000000000000084 R08: ffffc90002046fa7 R09: 1ffff92000408df4 [ 156.614045][ T154] R10: dffffc0000000000 R11: fffff52000408df5 R12: ffff88801fa30ca8 [ 156.622082][ T154] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000040 [ 156.630216][ T154] ? __rate_control_send_low+0x630/0x880 [ 156.635912][ T154] rate_control_send_low+0x194/0x790 [ 156.641251][ T154] ? ieee80211_scan_work+0x4eb/0x1b40 [ 156.646673][ T154] rate_control_get_rate+0x207/0x5c0 [ 156.652070][ T154] ieee80211_tx_h_rate_ctrl+0xb02/0x1700 [ 156.657863][ T154] ? ieee80211_tx_h_select_key+0x17f0/0x17f0 [ 156.663919][ T154] ? sta_info_hash_lookup+0x53e/0x580 [ 156.669379][ T154] ? ieee80211_queue_skb+0xbc/0x2060 [ 156.674733][ T154] invoke_tx_handlers_late+0xaa/0x16a0 [ 156.680248][ T154] ? ieee80211_tx_h_select_key+0x12c0/0x17f0 [ 156.686274][ T154] ? sta_info_get+0x220/0x230 [ 156.691011][ T154] ? invoke_tx_handlers_early+0xa11/0x1d10 [ 156.696933][ T154] ieee80211_tx+0x2d4/0x460 [ 156.701489][ T154] ? ieee80211_skb_resize+0x630/0x630 [ 156.707026][ T154] __ieee80211_tx_skb_tid_band+0x165/0x200 [ 156.712898][ T154] ieee80211_scan_state_send_probe+0x526/0x8a0 [ 156.719131][ T154] ieee80211_scan_work+0x4eb/0x1b40 [ 156.724414][ T154] process_one_work+0x85f/0x1010 [ 156.729418][ T154] ? worker_detach_from_pool+0x240/0x240 [ 156.735100][ T154] ? lockdep_hardirqs_off+0x70/0x100 [ 156.740441][ T154] ? _raw_spin_lock_irq+0xb7/0xf0 [ 156.745523][ T154] ? _raw_spin_lock_irqsave+0x100/0x100 [ 156.751123][ T154] ? wq_worker_running+0x97/0x170 [ 156.756202][ T154] worker_thread+0xaa6/0x1290 [ 156.760966][ T154] kthread+0x436/0x520 [ 156.765092][ T154] ? rcu_lock_release+0x20/0x20 [ 156.769997][ T154] ? kthread_blkcg+0xd0/0xd0 [ 156.774682][ T154] ret_from_fork+0x1f/0x30 [ 156.779157][ T154] [ 156.782527][ T154] Kernel Offset: disabled [ 156.787238][ T154] Rebooting in 86400 seconds..