last executing test programs: 5.435501331s ago: executing program 3 (id=332): syz_usb_connect$lan78xx(0x5, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000700)=ANY=[@ANYBLOB="04132509c9000100c9008900c9"], 0x28) 4.668728082s ago: executing program 3 (id=335): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000006a000d0e"], 0x20}}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000904000a000000fe0000000000000008000f00", 0x20) 4.412548529s ago: executing program 3 (id=336): r0 = socket(0x11, 0x800000003, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000540)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_CE_THRESHOLD={0x8, 0xc, 0xb1e}, @TCA_FQ_TIMER_SLACK={0x8, 0xd, 0x800}]}}]}, 0x40}}, 0x0) 4.189166235s ago: executing program 3 (id=339): syz_mount_image$nilfs2(&(0x7f0000000ec0), &(0x7f0000000a80)='./file0\x00', 0x0, &(0x7f0000000000)=ANY=[], 0x7, 0xee6, &(0x7f0000001ec0)="$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") mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x80000, 0x2) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, 0x0) 3.726275268s ago: executing program 2 (id=342): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000b40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000080)={0x30, r1, 0x1, 0x0, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_FLAGS={0x8, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_AUTHORIZED={0x4}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x80d0}, 0x8004) 3.618939431s ago: executing program 3 (id=344): r0 = fsopen(&(0x7f0000000080)='securityfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0xf) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) 3.374854418s ago: executing program 2 (id=346): r0 = memfd_create(&(0x7f00000000c0)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00\x81Ks\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x14\xb1`\x87#X\\W`;\'_4\xc5\xc9\x921<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\x02\x00\x00\x00\x8aeh;F[\xe2\x1c\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\x9a{C|S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ', 0x6) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8010002}) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x17, 0x97052, r0, 0x0) mlockall(0x7) 3.067483366s ago: executing program 2 (id=348): syz_mount_image$hfs(&(0x7f0000000080), &(0x7f00000008c0)='./bus\x00', 0x808808, &(0x7f0000000340)=ANY=[], 0x1, 0x2e2, &(0x7f0000000900)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) truncate(&(0x7f0000000000)='./file1\x00', 0x8000) truncate(&(0x7f00000000c0)='./file1\x00', 0x6e3) 2.864573092s ago: executing program 2 (id=350): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x1a5042, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r0, 0x0) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl(r1, 0xfffff000, &(0x7f0000000000)) 2.759292935s ago: executing program 2 (id=351): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x2c, r1, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 2.658944687s ago: executing program 3 (id=352): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010002000020fedbdf252500000008000300", @ANYRES32=r2, @ANYBLOB="08002600b41400000a000600ffffffffffff000008003500000000000a0034000202020202020000200050800800070000000006"], 0x64}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 2.375588055s ago: executing program 32 (id=352): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010002000020fedbdf252500000008000300", @ANYRES32=r2, @ANYBLOB="08002600b41400000a000600ffffffffffff000008003500000000000a0034000202020202020000200050800800070000000006"], 0x64}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 2.370563145s ago: executing program 2 (id=357): r0 = syz_usb_connect(0x0, 0x202, &(0x7f0000000180)=ANY=[@ANYBLOB="1201100152018b401e040740185d000000010902f00101040000030904"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000040)={0x2c, &(0x7f00000000c0)={0x0, 0xd, 0x2, 'Vx'}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000100)={0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="4008c6"], 0x0}, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f00000014c0)={0x14, &(0x7f0000000000)=ANY=[], 0x0}, 0x0) 1.748348372s ago: executing program 0 (id=361): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x10000000000) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='smaps\x00') read$FUSE(r1, &(0x7f0000002dc0)={0x2020}, 0x2020) 1.554702048s ago: executing program 0 (id=363): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'tunl0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000013c0)={&(0x7f00000006c0)=@bridge_setlink={0x58, 0x10, 0x1, 0x0, 0x25dfdbfe, {0x7, 0x0, 0x0, r2, 0x20c05}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x28, 0x2, 0x0, 0x1, [@IFLA_IPTUN_TOS={0x5, 0x5, 0x6b}, @IFLA_IPTUN_ENCAP_DPORT={0x6, 0x12, 0x4e22}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}, @IFLA_IPTUN_LINK={0x8, 0x1, r2}, @IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4080}, 0x40000) 1.234247496s ago: executing program 0 (id=364): r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r0, &(0x7f0000000240)={0xa, 0x2, 0x1000, @empty}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, "fbddf0", 0x8, 0x3a, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, {[], @echo_reply={0x81, 0x0, 0x0, 0x2, 0x4}}}}}}, 0x0) recvmmsg(r0, &(0x7f0000001d00)=[{{0x0, 0x0, 0x0}, 0xfb}], 0x1, 0x50, 0x0) 1.214314767s ago: executing program 1 (id=365): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x101800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) dup3(r0, r1, 0x80000) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15) 958.874814ms ago: executing program 0 (id=366): lsetxattr$trusted_overlay_upper(0x0, 0x0, &(0x7f00000000c0)={0x0, 0xfb, 0xb2, 0x6, 0xe0, "c08541f45aefe2eb9570162187a2427d", "e55e0eefcac51654f623a7dffb59056df381f3a44fe0d97edaf1004e0c11bddf27c89448a69e92d8e711ffdd565e9834172df5d526fd6ed58ae578fb06c2cf9178e86f60f49f4542be5f0683381e1532587e687d9608c032526259e5304b7a25e00b8b668161e9087f0f1976a806ac11a9b05ba5752125143df5d2def4a3da1d1b32bc23ad88fdc9148c8dd14a1f4f2c5d9828b83d6ef55cadc1a0853b"}, 0xb2, 0x2) syz_emit_vhci(&(0x7f0000000240)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x60, 0x0, 0x41c}}}, 0x7) openat$cuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) llistxattr(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000300)=""/231, 0xe7) 868.979596ms ago: executing program 0 (id=367): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000024c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="50000000100001042abd70000000000000000000", @ANYRES32=r1, @ANYBLOB="824900000000000028003780090021007665746800000000180002801400010000000000", @ANYRES32=r1, @ANYBLOB="0000010024810400050027"], 0x50}, 0x1, 0x0, 0x0, 0xc10}, 0x8000) 862.425386ms ago: executing program 1 (id=368): r0 = syz_open_dev$loop(&(0x7f0000000200), 0x4, 0x40100) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000005c0)={r1, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x13, 0x15, "fee8a2ab78fc179f51f8a0e9a1af1e0b91c2f0fd967ab7f890020000000003002b78cc33a55f4c0c0000000000000000000000000000001b00", "28095397ba01177d02458dac00", "908f000e00000000000000000000001a00020000001900", [0x4, 0x80000001]}}) ioctl$LOOP_CHANGE_FD(r0, 0x4c07, 0xffffffffffffffff) 662.910542ms ago: executing program 1 (id=369): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000280)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@local}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000540)={{@hyper, 0xffffffff}, @local, 0x1, 0x0, 0x5b, 0x0, 0x10100}) 603.721334ms ago: executing program 1 (id=370): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x83, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000080)={0x1, 0x0, [{0xd, 0x0, 0x7, 0x9, 0x80104000, 0xffffffff, 0x7}]}) 584.108204ms ago: executing program 0 (id=371): syz_mount_image$ocfs2(&(0x7f0000004740), &(0x7f0000004780)='./file0\x00', 0x100000a, &(0x7f00000002c0)={[{@journal_async_commit}, {@heartbeat_none}, {@usrquota}, {@barrier={'barrier', 0x3d, 0x7}}, {@heartbeat_none}, {@inode64}]}, 0x1, 0x4703, &(0x7f0000004800)="$eJzs212IXFcBB/BzJ6vZpMl2P9ImafoxSQQXLcumT9X6ENeqjabNh7bVVFlnN9vN6uzMujujBYPUIIiCoARBxQ+qQulLLYiBvtQiFPxAWoVSUbS+iBSq4INBG+jKzNybnXtntneyk7S0/f2gnb3n3nPumf3vPXfOPZNCrHZqYaW4sFIsVYrV2ftXbil+rlquL86FwqvktT4/vbkSOcn+tXPkfR/4yD23hPCHY1/70Orq6mpoGA5dHWj7+fy/T8+2vyYKmTqNdru31vLH+iMv/fwtr3REnhMhhB0d/WrYFEL42C9C2BxCGInLRuPXLSGEbSGEKITw6G/+9ePBfrrQ5uy9Lzx37MzhfWemHn/smQvzR9c9MArhu+XdN88vvrh/023Pv+MynR4AAF7RB48fufvo5IHwZBSGzg10fl7fGb8mn4/vfNun7np4YG3/Kr3Z9CqGCgAAABlr8//h6OUu63XJylqyJPjEAyfufipa229i+/p26K4jt79/8kC8/ht17L81Lvrnezc111Cz677Z9d+RTP3u679r53n4q8/+svLWjfc/6V9y3uEQFSZS24XCxEQIx6Za27uirYVydaX2zvur9crJjZ/3jSKdf3b1fm1Bv9f8RzPV89b/d3/i8z/bMtDPOxgL2b/axnax80+ZLtL5rz+W/+RLUU/5j2Xq5eV/x9Pbz/9qcz/vIHtGLkU6/9aFuK/9gGJrAGjk/82B/Px3ZNrPy//7U+cePbGB7/80xpnhqNHXwdQI8HJcvs5XmMhI598KIjV0xr/I9a7//2XyvybTfl7+d1b/8bu/9XH/X2/8H5/qp803j3T+rSCKqSPWrv+RQv71f22m/bz8f3vqz89+sq97dWf+jf6Pu//3JJ1/fCNOD57N32Sv4//OTPt5+e8au++hhQ30+8Nb4n4ORWGs7Vun5xq3sKG19ermlKaxe2kDJ3kTSOff+q2lLp2h1kvz+h/OH/93ZdrPy/+hPV9/z+m+vv/bffyfNP73JJ3/lmbZpeT/Uib/3Zn28/L/4em//+W+yzz+N7YPyr8n6fy3duxfe/5T6Gn+d12mft7zn32jTz3y1z7m/0n/kvMmz3+S5xDjUev5D92l879q3eN6vf/vydTLu/6/9Z/nn97fz/gfDXoC0Id0/ttahV0mgL3mf32m/bz8v3DPlz/+pw3M/5qf+AaT/Nvm/5tb5UeN/z1J57+9VZj6x1APNv/fvP9Hnbn/N5P/DZn28/K/cGhi4CuX+f7f6P94l0fZdErnP7TucY38f9/D/f/GTL28/L+496cv3tzX5/8QJs31Nyyd/9XrHte8/gfz878pUy8v/+9849dPPNhH/9/eR12y+bfu9anLKf5s3uv8v5hpPy//H42fP7v/Csz/bnX/70k6/9aq+aXkn53/7820n5f/9478YHngCjz/uUP+AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGzIavw6HqDCR2i4UJiZCGIu3d4Wt0Uzp5PRMuTr7mZUQdsTlxTAazZerM6Xy9EKlenJuulQuV2dDuCbevyMMRivlam16sbR07cW2tkSn5krLtZm5Ui2EsDMuvz5sT9qaWagtlpaaxyZ1ropKn61Xa6WJ+srccth9sXxbUj6/XK0vXXexrasL1eWlU6XK9MmF5XdPTk5Ohj0X+zwSzT1Qm6vUWr1t7W3USeoOR21vprn7hrbzfbpaX66Uys3yG9vqlKuzpXJbnZvazldbrldmS7W56XJ1Pjlfsa1u23tr7t4b7xsPI6n3l9TNOhi/3n7o+EePHz7Qsb8YpfOu1BfnJrd3/5sAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4I3rydve9e0QwkBrqxBCOJj8EMX/pZy994Xnjp05vO/M1OOPPXNh/mi3YwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4PztwIAAAAAAA5P/aCFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVXYuZ+XKro4DsBnxve+FkgpbYRcBoaI6E7Cgn4RSeU1smWb1kGtEjIoCgwjWhYEQVC7qCBoFVT+BVELl62qTS1aGERQMTqTlzvCDS90zHkeGM4Mc++ZLwzcO3M+hwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALB+nN2x2JW1l3ZtXtq6+0PozM/9H0IYTZb3P+/tCD0hhK9fZk6HVdpCT1P/bybnxstXTX7v7R9/eH00WXv9xXeL63aHJB1qON6ZpOnQ0Nr736juDD6bHkxCSGMXQhQLY0/O1EIIHbELIYqfH+cvZr/v/8UuhCj6P9ztyu5/LXYhRLF196e+Wv6MR/Wcr18YbPzvb/UI3sYjOuvQ25NX3qVuauW9zN//k3zzPlgNsyeOvH8euwiimZ2bOhq7BgAA4O861yL/D1uW9+9fTkJPdzn3/9aU//c29b96/r/i3vYbYzNthRDbSmOT2fHwvnb63PhODVy9/bpmvKeq5P/VJv+vNvl/tcn/q03+X23yfzKv5P+V9PjmnsUXsYsgGvk/AABUz6HjE1P14ZHs5X/Tj85yXt+Xt/U8T39wa3rgUcO4kfzw33b42MSBg8Mj+X0vDwiurP+QLp39ns/3aG4Lk03zLlqt/9D7dGH+Wmf5E/U/nL9R1Fdc1/oPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAvdueehkEwCsPod1sRtdGqaMLCT4IPNDAiACnMaEAHEwZgIAQUMJBzlnuTZ3kBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA5/tXeV18f2mM9Foj0lR22bV/jqfZz9y3w/I+e9y4FQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADZ24EAGAAAAQJi/dR7tBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4KkAAAD//8Oayzs=") syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181d011, 0x0, 0x40, 0x0, &(0x7f0000000140)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101041, 0xd5) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xe7c) 138.865946ms ago: executing program 1 (id=372): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x11, 0x4, 0x4, 0x2, 0x0, 0x1, 0x1000000}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x15, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x86}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x8650bf77ffef8b55}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r2, 0x2000012, 0xe, 0x0, &(0x7f0000000240)="63eced8e465c1c76e716c0be4b07", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xd}, 0x50) 0s ago: executing program 1 (id=373): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r0, 0x7, &(0x7f00000006c0)={0x0, 0x0, 0xac1d}) fcntl$lock(r0, 0x25, &(0x7f0000000040)={0x1, 0x0, 0x7f, 0x7}) fcntl$lock(r0, 0x24, &(0x7f00000000c0)={0x0, 0x2, 0x85, 0x1}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.2' (ED25519) to the list of known hosts. [ 77.927753][ T5756] cgroup: Unknown subsys name 'net' [ 78.073198][ T5756] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 79.585963][ T5756] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 81.151621][ T5778] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 81.160121][ T5778] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 81.169254][ T5778] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 81.170797][ T5779] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 81.177799][ T5778] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 81.191644][ T5779] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 81.194078][ T5778] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 81.205644][ T5779] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 81.213418][ T5779] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 81.218465][ T5778] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 81.223444][ T5779] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 81.229573][ T5778] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 81.241882][ T5778] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 81.244871][ T5779] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 81.257844][ T5781] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 81.265670][ T5779] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 81.288847][ T5083] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 81.300306][ T5083] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 81.307993][ T5779] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 81.315779][ T5779] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 81.323194][ T5779] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 81.342661][ T5772] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 81.358660][ T5772] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 81.366296][ T5772] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 81.825767][ T5768] chnl_net:caif_netlink_parms(): no params data found [ 81.894332][ T5769] chnl_net:caif_netlink_parms(): no params data found [ 81.915944][ T5770] chnl_net:caif_netlink_parms(): no params data found [ 82.010252][ T5767] chnl_net:caif_netlink_parms(): no params data found [ 82.021753][ T5768] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.029976][ T5768] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.037451][ T5768] bridge_slave_0: entered allmulticast mode [ 82.044730][ T5768] bridge_slave_0: entered promiscuous mode [ 82.075737][ T5768] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.082947][ T5768] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.092998][ T5768] bridge_slave_1: entered allmulticast mode [ 82.100302][ T5768] bridge_slave_1: entered promiscuous mode [ 82.185625][ T5768] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.197514][ T5768] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.218619][ T5769] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.225891][ T5769] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.233265][ T5769] bridge_slave_0: entered allmulticast mode [ 82.243338][ T5769] bridge_slave_0: entered promiscuous mode [ 82.287708][ T5768] team0: Port device team_slave_0 added [ 82.294020][ T5769] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.303941][ T5769] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.311195][ T5769] bridge_slave_1: entered allmulticast mode [ 82.318778][ T5769] bridge_slave_1: entered promiscuous mode [ 82.353514][ T5768] team0: Port device team_slave_1 added [ 82.370264][ T5770] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.380108][ T5770] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.387672][ T5770] bridge_slave_0: entered allmulticast mode [ 82.394918][ T5770] bridge_slave_0: entered promiscuous mode [ 82.441746][ T5769] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.452169][ T5770] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.459946][ T5770] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.467287][ T5770] bridge_slave_1: entered allmulticast mode [ 82.474613][ T5770] bridge_slave_1: entered promiscuous mode [ 82.493428][ T5768] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.500663][ T5768] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.529807][ T5768] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.544118][ T5769] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.588924][ T5768] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.596047][ T5768] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.624305][ T5768] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.658791][ T5767] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.666107][ T5767] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.673241][ T5767] bridge_slave_0: entered allmulticast mode [ 82.680744][ T5767] bridge_slave_0: entered promiscuous mode [ 82.699623][ T5770] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.716476][ T5770] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.731244][ T5769] team0: Port device team_slave_0 added [ 82.737961][ T5767] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.750118][ T5767] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.757555][ T5767] bridge_slave_1: entered allmulticast mode [ 82.764762][ T5767] bridge_slave_1: entered promiscuous mode [ 82.805722][ T5769] team0: Port device team_slave_1 added [ 82.831657][ T5767] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.874035][ T5767] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.886285][ T5770] team0: Port device team_slave_0 added [ 82.908572][ T5768] hsr_slave_0: entered promiscuous mode [ 82.915591][ T5768] hsr_slave_1: entered promiscuous mode [ 82.940967][ T5770] team0: Port device team_slave_1 added [ 82.947870][ T5769] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.955134][ T5769] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.981330][ T5769] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.995425][ T5769] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.002426][ T5769] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.028872][ T5769] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.079798][ T5767] team0: Port device team_slave_0 added [ 83.088965][ T5767] team0: Port device team_slave_1 added [ 83.106842][ T5770] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.113809][ T5770] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.144797][ T5770] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.158074][ T5770] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.165223][ T5770] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.191741][ T5770] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.270677][ T5767] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.277763][ T5767] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.303971][ T5767] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.324672][ T5772] Bluetooth: hci0: command tx timeout [ 83.341330][ T5769] hsr_slave_0: entered promiscuous mode [ 83.348558][ T5769] hsr_slave_1: entered promiscuous mode [ 83.355260][ T5769] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 83.363103][ T5769] Cannot create hsr debugfs directory [ 83.369491][ T5767] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.376540][ T5767] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.402604][ T5767] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.407322][ T5772] Bluetooth: hci1: command tx timeout [ 83.419101][ T5774] Bluetooth: hci2: command tx timeout [ 83.467811][ T5770] hsr_slave_0: entered promiscuous mode [ 83.474307][ T5770] hsr_slave_1: entered promiscuous mode [ 83.480471][ T5770] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 83.485905][ T5772] Bluetooth: hci3: command tx timeout [ 83.489875][ T5770] Cannot create hsr debugfs directory [ 83.619726][ T5767] hsr_slave_0: entered promiscuous mode [ 83.626439][ T5767] hsr_slave_1: entered promiscuous mode [ 83.632694][ T5767] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 83.641039][ T5767] Cannot create hsr debugfs directory [ 83.850893][ T5768] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 83.886599][ T5768] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 83.897894][ T5768] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 83.951453][ T5768] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 84.055494][ T5770] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 84.067721][ T5770] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 84.078517][ T5770] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 84.093177][ T5770] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 84.195599][ T5767] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 84.216464][ T5767] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 84.227842][ T5767] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 84.239180][ T5767] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 84.345719][ T5769] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 84.357787][ T5769] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 84.373532][ T5768] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.388755][ T5769] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 84.402452][ T5769] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 84.429564][ T5768] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.451097][ T5770] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.474341][ T172] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.481768][ T172] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.508837][ T172] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.516322][ T172] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.562404][ T5770] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.619416][ T1114] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.626652][ T1114] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.652815][ T73] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.660013][ T73] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.695124][ T5767] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.738793][ T5767] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.765735][ T73] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.772929][ T73] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.804094][ T1084] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.811301][ T1084] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.850312][ T5770] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 84.861691][ T5770] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 84.889379][ T5769] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.988298][ T5769] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.043407][ T73] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.050666][ T73] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.092381][ T172] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.099602][ T172] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.406175][ T5772] Bluetooth: hci0: command tx timeout [ 85.438228][ T5768] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.481477][ T5767] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.486947][ T5772] Bluetooth: hci1: command tx timeout [ 85.493755][ T5772] Bluetooth: hci2: command tx timeout [ 85.513833][ T5770] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.565552][ T5774] Bluetooth: hci3: command tx timeout [ 85.608311][ T5768] veth0_vlan: entered promiscuous mode [ 85.621892][ T5768] veth1_vlan: entered promiscuous mode [ 85.696057][ T5767] veth0_vlan: entered promiscuous mode [ 85.730894][ T5767] veth1_vlan: entered promiscuous mode [ 85.743071][ T5768] veth0_macvtap: entered promiscuous mode [ 85.761285][ T5769] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.790592][ T5768] veth1_macvtap: entered promiscuous mode [ 85.801449][ T5770] veth0_vlan: entered promiscuous mode [ 85.851589][ T5770] veth1_vlan: entered promiscuous mode [ 85.881778][ T5767] veth0_macvtap: entered promiscuous mode [ 85.902078][ T5768] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.915380][ T5767] veth1_macvtap: entered promiscuous mode [ 85.933174][ T5768] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.951764][ T5770] veth0_macvtap: entered promiscuous mode [ 85.972163][ T5768] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.981738][ T5768] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.990895][ T5768] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.000680][ T5768] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.015839][ T5770] veth1_macvtap: entered promiscuous mode [ 86.035890][ T5767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.047481][ T5767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.066154][ T5767] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.097936][ T5767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.109323][ T5767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.121642][ T5767] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.132923][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.143898][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.154109][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.165361][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.177370][ T5770] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.196763][ T5769] veth0_vlan: entered promiscuous mode [ 86.206563][ T5767] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.216039][ T5767] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.225279][ T5767] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.234119][ T5767] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.253892][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.264703][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.275556][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.287439][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.299073][ T5770] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.310821][ T5770] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.320393][ T5770] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.329490][ T5770] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.338617][ T5770] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.403496][ T5769] veth1_vlan: entered promiscuous mode [ 86.514873][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.529522][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.569615][ T1101] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.577684][ T1101] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.612455][ T5769] veth0_macvtap: entered promiscuous mode [ 86.648202][ T1101] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.659363][ T1101] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.661756][ T5769] veth1_macvtap: entered promiscuous mode [ 86.693787][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.706076][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.727936][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.742145][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.752981][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.773964][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.784075][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.795599][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.808359][ T5769] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.880263][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.899493][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.910061][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.923056][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.957807][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.972328][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.988502][ T5769] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.998316][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.014241][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.038855][ T5769] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.047874][ T5769] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.057846][ T5769] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.067295][ T5769] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.136132][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.147075][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.374925][ T1114] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.382820][ T1114] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.485508][ T5772] Bluetooth: hci0: command tx timeout [ 87.565534][ T5772] Bluetooth: hci2: command tx timeout [ 87.571121][ T5774] Bluetooth: hci1: command tx timeout [ 87.588179][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.644569][ T5772] Bluetooth: hci3: command tx timeout [ 87.648184][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.766748][ T5841] syz.2.5[5841]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 87.802954][ T5841] loop2: detected capacity change from 0 to 1024 [ 87.830410][ T5841] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 87.853104][ T5841] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 87.916016][ T5841] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 87.995014][ T5841] EXT4-fs (loop2): orphan cleanup on readonly fs [ 88.002537][ T5841] EXT4-fs error (device loop2): ext4_free_blocks:6694: comm syz.2.5: Freeing blocks not in datazone - block = 0, count = 4096 [ 88.104213][ T5841] EXT4-fs (loop2): Remounting filesystem read-only [ 88.117762][ T5841] EXT4-fs (loop2): 1 orphan inode deleted [ 88.166937][ T5841] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 88.389034][ T5770] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.449609][ T5852] loop3: detected capacity change from 0 to 7 [ 88.498834][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 88.508288][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 88.523904][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 88.533130][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 88.555478][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 88.564722][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 88.573284][ C1] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 88.582502][ C1] Buffer I/O error on dev loop3, logical block 0, async page read [ 88.593926][ C1] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 88.603165][ C1] Buffer I/O error on dev loop3, logical block 0, async page read [ 88.626818][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 88.636099][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 88.644379][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 88.653540][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 88.661938][ T5758] ldm_validate_partition_table(): Disk read failed. [ 88.674193][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 88.683385][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 88.695212][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 88.704452][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 88.714765][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 88.723961][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 88.744711][ T5758] Dev loop3: unable to read RDB block 0 [ 88.755108][ T5758] loop3: unable to read partition table [ 88.771665][ T5758] loop3: partition table beyond EOD, truncated [ 88.811345][ T5852] ldm_validate_partition_table(): Disk read failed. [ 88.834373][ T5852] Dev loop3: unable to read RDB block 0 [ 88.867042][ T5852] loop3: unable to read partition table [ 88.872946][ T5852] loop3: partition table beyond EOD, truncated [ 88.891762][ T5852] loop_reread_partitions: partition scan of loop3 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ֘ȵ4FLQkÝŠ5) failed (rc=-5) [ 88.972690][ T5858] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12'. [ 89.315290][ T5871] loop3: detected capacity change from 0 to 512 [ 89.322632][ T5871] EXT4-fs: Ignoring removed bh option [ 89.384671][ T5871] EXT4-fs: inline encryption not supported [ 89.413227][ T5873] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 89.448859][ T5871] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 89.540370][ T5871] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1154: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 89.565056][ T5772] Bluetooth: hci0: command tx timeout [ 89.581498][ T5871] EXT4-fs error (device loop3): ext4_validate_block_bitmap:439: comm syz.3.16: bg 0: block 248: padding at end of block bitmap is not set [ 89.601300][ T5871] Quota error (device loop3): write_blk: dquota write failed [ 89.617709][ T5871] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota [ 89.628527][ T5871] EXT4-fs error (device loop3): ext4_acquire_dquot:6953: comm syz.3.16: Failed to acquire dquot type 1 [ 89.644327][ T5772] Bluetooth: hci2: command tx timeout [ 89.649764][ T5772] Bluetooth: hci1: command tx timeout [ 89.672362][ T5871] EXT4-fs (loop3): 1 truncate cleaned up [ 89.686572][ T5871] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 89.724737][ T146] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 89.732959][ T5772] Bluetooth: hci3: command tx timeout [ 89.771295][ T5885] loop1: detected capacity change from 0 to 256 [ 89.837564][ T5885] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 89.915807][ T5871] syz.3.16 (5871) used greatest stack depth: 20104 bytes left [ 89.930181][ T146] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 89.965667][ T146] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice= 0.03 [ 89.982356][ T146] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.994725][ T5769] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 90.001824][ T172] Quota error (device loop3): do_check_range: Getting block 0 out of range 1-5 [ 90.021251][ T146] usb 3-1: config 0 descriptor?? [ 90.054057][ T172] EXT4-fs error (device loop3): ext4_release_dquot:6989: comm kworker/u4:6: Failed to release dquot type 1 [ 90.079638][ T146] pwc: Askey VC010 type 2 USB webcam detected. [ 90.323548][ T5898] loop0: detected capacity change from 0 to 1024 [ 90.341072][ T146] pwc: send_video_command error -71 [ 90.345945][ T5898] ======================================================= [ 90.345945][ T5898] WARNING: The mand mount option has been deprecated and [ 90.345945][ T5898] and is ignored by this kernel. Remove the mand [ 90.345945][ T5898] option from the mount to silence this warning. [ 90.345945][ T5898] ======================================================= [ 90.354636][ T146] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 90.431872][ T146] Philips webcam: probe of 3-1:0.0 failed with error -71 [ 90.471214][ T5898] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 90.483948][ T146] usb 3-1: USB disconnect, device number 2 [ 90.551905][ T5898] ext4 filesystem being mounted at /8/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 90.586103][ T5898] EXT4-fs error (device loop0): ext4_map_blocks:720: inode #15: block 3: comm syz.0.27: lblock 3 mapped to illegal pblock 3 (length 3) [ 90.605127][ T5898] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 90.617939][ T5898] EXT4-fs (loop0): This should not happen!! Data will be lost [ 90.617939][ T5898] [ 90.640475][ T5901] EXT4-fs error (device loop0): ext4_map_blocks:610: inode #15: block 3: comm syz.0.27: lblock 3 mapped to illegal pblock 3 (length 1) [ 90.694287][ T28] audit: type=1800 audit(1777415948.347:2): pid=5901 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.27" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 90.830720][ T73] EXT4-fs error (device loop0): ext4_map_blocks:720: inode #15: block 8: comm kworker/u4:5: lblock 8 mapped to illegal pblock 8 (length 8) [ 90.877975][ T73] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 90.893639][ T73] EXT4-fs (loop0): This should not happen!! Data will be lost [ 90.893639][ T73] [ 90.910047][ T5767] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 91.114996][ T146] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 91.271376][ T5896] loop1: detected capacity change from 0 to 40427 [ 91.296788][ T5896] F2FS-fs (loop1): Wrong segment_count / block_count (31 > 0) [ 91.310868][ T146] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 91.320679][ T5896] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 91.341781][ T146] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice= 0.03 [ 91.363972][ T5896] F2FS-fs (loop1): invalid crc value [ 91.373147][ T146] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.406274][ T146] usb 3-1: config 0 descriptor?? [ 91.418924][ T146] pwc: Askey VC010 type 2 USB webcam detected. [ 91.427275][ T5896] F2FS-fs (loop1): Found nat_bits in checkpoint [ 91.443417][ T5905] loop3: detected capacity change from 0 to 32768 [ 91.509868][ T5905] (syz.3.29,5905,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 91.530723][ T5905] (syz.3.29,5905,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 91.581014][ T5896] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0 [ 91.591367][ T5896] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 91.596075][ T5905] (syz.3.29,5905,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xbec99099, computed 0x3881d996. Applying ECC. [ 91.622095][ T5905] (syz.3.29,5905,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x93f628a2, computed 0x2aee8be5. Applying ECC. [ 91.653799][ T5905] JBD2: Ignoring recovery information on journal [ 91.730708][ T28] audit: type=1800 audit(1777415949.377:3): pid=5896 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.26" name="file1" dev="loop1" ino=10 res=0 errno=0 [ 91.794980][ T5905] (syz.3.29,5905,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xbec99099, computed 0x3881d996. Applying ECC. [ 91.825773][ T146] pwc: recv_control_msg error -71 req 02 val 2b00 [ 91.843216][ T146] pwc: recv_control_msg error -71 req 02 val 2700 [ 91.864568][ T5905] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 91.876293][ T146] pwc: recv_control_msg error -71 req 02 val 2c00 [ 91.889604][ T5905] (syz.3.29,5905,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x93f628a2, computed 0x2aee8be5. Applying ECC. [ 91.934839][ T146] pwc: recv_control_msg error -71 req 04 val 1000 [ 91.941966][ T146] pwc: recv_control_msg error -71 req 04 val 1300 [ 91.958513][ T146] pwc: recv_control_msg error -71 req 04 val 1400 [ 91.969985][ T5768] syz-executor: attempt to access beyond end of device [ 91.969985][ T5768] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 91.987436][ T146] pwc: recv_control_msg error -71 req 02 val 2000 [ 92.006213][ T5768] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 92.018603][ T23] cfg80211: failed to load regulatory.db [ 92.026250][ T146] pwc: recv_control_msg error -71 req 02 val 2100 [ 92.038103][ T146] pwc: recv_control_msg error -71 req 04 val 1500 [ 92.045051][ T5905] (syz.3.29,5905,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x98842a5e, computed 0xe74db1cd. Applying ECC. [ 92.093232][ T146] pwc: recv_control_msg error -71 req 02 val 2500 [ 92.118203][ T146] pwc: recv_control_msg error -71 req 02 val 2400 [ 92.128228][ T146] pwc: recv_control_msg error -71 req 02 val 2600 [ 92.144804][ T146] pwc: recv_control_msg error -71 req 02 val 2900 [ 92.154666][ T146] pwc: recv_control_msg error -71 req 02 val 2800 [ 92.165990][ T146] pwc: recv_control_msg error -71 req 04 val 1100 [ 92.174749][ T146] pwc: recv_control_msg error -71 req 04 val 1200 [ 92.198329][ T146] pwc: Registered as video103. [ 92.217156][ T146] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input5 [ 92.237759][ T5905] (syz.3.29,5905,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x1cec3d0f, computed 0xd2ffbdfe. Applying ECC. [ 92.280418][ T146] usb 3-1: USB disconnect, device number 3 [ 92.358788][ T5905] (syz.3.29,5905,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x2c7b5077, computed 0x4d558a87. Applying ECC. [ 92.445857][ T5905] (syz.3.29,5905,1):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0x2c7b5077, computed 0x5d2751af [ 92.529778][ T5905] (syz.3.29,5905,1):ocfs2_read_quota_phys_block:160 ERROR: status = -5 [ 92.540487][ T5905] (syz.3.29,5905,1):ocfs2_quota_read:201 ERROR: status = -5 [ 92.565341][ T5905] Quota error (device loop3): find_tree_dqentry: Can't read quota tree block 5 [ 92.592929][ T5905] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 92.645193][ T5905] (syz.3.29,5905,1):ocfs2_acquire_dquot:878 ERROR: status = -5 [ 92.663184][ T5905] (syz.3.29,5905,1):ocfs2_mknod:314 ERROR: status = -5 [ 92.697114][ T5905] (syz.3.29,5905,1):ocfs2_mknod:502 ERROR: status = -5 [ 92.768595][ T5921] netlink: 4 bytes leftover after parsing attributes in process `syz.2.34'. [ 92.791670][ T5905] syz.3.29 (5905) used greatest stack depth: 18960 bytes left [ 92.891307][ T5769] ocfs2: Unmounting device (7,3) on (node local) [ 92.998720][ T5925] loop2: detected capacity change from 0 to 256 [ 93.783961][ T5945] loop0: detected capacity change from 0 to 4096 [ 93.914898][ T5945] ntfs: volume version 3.1. [ 94.193673][ T5935] loop1: detected capacity change from 0 to 40427 [ 94.258365][ T5935] F2FS-fs (loop1): invalid crc value [ 94.273041][ T5935] F2FS-fs (loop1): Found nat_bits in checkpoint [ 94.374729][ T5935] F2FS-fs (loop1): Start checkpoint disabled! [ 94.408307][ T5953] loop2: detected capacity change from 0 to 256 [ 94.430949][ T5953] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d) [ 94.454418][ T5935] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 94.514551][ T146] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 94.586443][ T28] audit: type=1804 audit(1777415952.247:4): pid=5935 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.39" name="/newroot/7/file0/file0" dev="loop1" ino=10 res=1 errno=0 [ 94.727716][ T146] usb 4-1: Using ep0 maxpacket: 16 [ 94.758954][ T28] audit: type=1326 audit(1777415952.417:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5955 comm="syz.2.49" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f70b9cdd9 code=0x7ffc0000 [ 94.777322][ T146] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 94.817449][ T146] usb 4-1: config 0 has no interfaces? [ 94.829714][ T146] usb 4-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 94.844379][ T146] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.844916][ T28] audit: type=1326 audit(1777415952.447:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5955 comm="syz.2.49" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f70b9cdd9 code=0x7ffc0000 [ 94.862973][ T146] usb 4-1: Product: syz [ 94.894584][ T146] usb 4-1: Manufacturer: syz [ 94.899266][ T146] usb 4-1: SerialNumber: syz [ 94.910658][ T1101] kworker/u4:8: attempt to access beyond end of device [ 94.910658][ T1101] loop1: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 94.925524][ T28] audit: type=1326 audit(1777415952.467:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5955 comm="syz.2.49" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9f70b9cdd9 code=0x7ffc0000 [ 94.925590][ T28] audit: type=1326 audit(1777415952.467:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5955 comm="syz.2.49" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f70b9cdd9 code=0x7ffc0000 [ 94.925638][ T28] audit: type=1326 audit(1777415952.467:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5955 comm="syz.2.49" exe="/root/syz-executor" sig=0 arch=c000003e syscall=294 compat=0 ip=0x7f9f70b9cdd9 code=0x7ffc0000 [ 94.925705][ T28] audit: type=1326 audit(1777415952.467:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5955 comm="syz.2.49" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f70b9cdd9 code=0x7ffc0000 [ 94.925755][ T28] audit: type=1326 audit(1777415952.467:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5955 comm="syz.2.49" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f70b9cdd9 code=0x7ffc0000 [ 94.925799][ T28] audit: type=1326 audit(1777415952.467:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5955 comm="syz.2.49" exe="/root/syz-executor" sig=0 arch=c000003e syscall=254 compat=0 ip=0x7f9f70b9cdd9 code=0x7ffc0000 [ 94.925842][ T28] audit: type=1326 audit(1777415952.467:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5955 comm="syz.2.49" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f70b9cdd9 code=0x7ffc0000 [ 94.977563][ T146] usb 4-1: config 0 descriptor?? [ 95.109154][ T1101] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 95.130926][ T1101] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 95.188677][ T28] audit: type=1326 audit(1777415952.467:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5955 comm="syz.2.49" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f70b9cdd9 code=0x7ffc0000 [ 95.306907][ T5951] loop0: detected capacity change from 0 to 32768 [ 95.353119][ T5951] (syz.0.45,5951,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 95.394211][ T5951] (syz.0.45,5951,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 95.441445][ T5951] (syz.0.45,5951,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xbec99099, computed 0x3881d996. Applying ECC. [ 95.475408][ T5951] (syz.0.45,5951,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x93f628a2, computed 0x2aee8be5. Applying ECC. [ 95.525851][ T5951] JBD2: Ignoring recovery information on journal [ 95.570090][ T23] usb 4-1: USB disconnect, device number 2 [ 95.592565][ T5951] (syz.0.45,5951,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xbec99099, computed 0x3881d996. Applying ECC. [ 95.618777][ T5951] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 95.632481][ T5951] (syz.0.45,5951,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x93f628a2, computed 0x2aee8be5. Applying ECC. [ 95.667845][ T5951] (syz.0.45,5951,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x98842a5e, computed 0xe74db1cd. Applying ECC. [ 95.800881][ T5951] (syz.0.45,5951,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x1cec3d0f, computed 0xd2ffbdfe. Applying ECC. [ 95.904076][ T5951] (syz.0.45,5951,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x2c7b5077, computed 0x4d558a87. Applying ECC. [ 95.941214][ T5951] (syz.0.45,5951,0):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0x2c7b5077, computed 0x5d2751af [ 95.978809][ T5951] (syz.0.45,5951,0):ocfs2_read_quota_phys_block:160 ERROR: status = -5 [ 95.993300][ T5951] (syz.0.45,5951,0):ocfs2_quota_read:201 ERROR: status = -5 [ 96.006019][ T5951] (syz.0.45,5951,0):ocfs2_acquire_dquot:878 ERROR: status = -5 [ 96.032214][ T5951] (syz.0.45,5951,0):ocfs2_mknod:314 ERROR: status = -5 [ 96.043568][ T5951] (syz.0.45,5951,0):ocfs2_mknod:502 ERROR: status = -5 [ 96.115798][ T5767] ocfs2: Unmounting device (7,0) on (node local) [ 96.355710][ T5977] netlink: 8 bytes leftover after parsing attributes in process `syz.3.57'. [ 96.375286][ T146] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 96.492155][ T5982] loop3: detected capacity change from 0 to 1024 [ 96.574338][ T146] usb 3-1: Using ep0 maxpacket: 8 [ 96.588589][ T146] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 96.622618][ T146] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 96.641851][ T146] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.656325][ T146] usb 3-1: config 0 descriptor?? [ 96.808319][ T5988] loop0: detected capacity change from 0 to 128 [ 96.836427][ T5988] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 96.865566][ T5988] hpfs: filesystem error: improperly stopped [ 96.890650][ T5988] hpfs: You really don't want any checks? You are crazy... [ 96.921288][ T5988] hpfs: hpfs_map_sector(): read error [ 96.932682][ T146] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 96.954359][ T5988] hpfs: code page support is disabled [ 96.973757][ T5988] hpfs: hpfs_map_4sectors(): unaligned read [ 96.991213][ T5988] hpfs: hpfs_map_4sectors(): unaligned read [ 97.008905][ T5988] hpfs: filesystem error: unable to find root dir [ 97.146887][ T23] usb 3-1: USB disconnect, device number 4 [ 97.393033][ T5996] loop1: detected capacity change from 0 to 256 [ 97.423733][ T5996] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d) [ 97.643308][ T6004] netlink: 12 bytes leftover after parsing attributes in process `syz.1.67'. [ 98.194299][ T146] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 98.247134][ T6020] loop2: detected capacity change from 0 to 1024 [ 98.394425][ T146] usb 2-1: Using ep0 maxpacket: 16 [ 98.408158][ T146] usb 2-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 98.421947][ T146] usb 2-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 98.445778][ T146] usb 2-1: Product: syz [ 98.460074][ T146] usb 2-1: Manufacturer: syz [ 98.473805][ T146] usb 2-1: SerialNumber: syz [ 98.493452][ T146] usb 2-1: config 0 descriptor?? [ 98.643025][ T6023] loop3: detected capacity change from 0 to 4096 [ 98.700847][ T6023] ntfs: volume version 3.1. [ 98.792378][ T146] usb 2-1: USB disconnect, device number 2 [ 99.196823][ T6033] loop0: detected capacity change from 0 to 64 [ 99.806484][ T6046] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 100.156942][ T6038] loop0: detected capacity change from 0 to 32768 [ 100.217951][ T6038] XFS (loop0): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 100.274285][ T27] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 100.320110][ T6038] XFS (loop0): Ending clean mount [ 100.458112][ T27] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 100.475437][ T27] usb 3-1: config 0 interface 0 has no altsetting 0 [ 100.484344][ T9] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 100.495618][ T27] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 100.509497][ T27] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 100.522132][ T5767] XFS (loop0): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 100.531237][ T27] usb 3-1: Product: syz [ 100.540627][ T27] usb 3-1: Manufacturer: syz [ 100.547631][ T27] usb 3-1: SerialNumber: syz [ 100.560226][ T27] usb 3-1: config 0 descriptor?? [ 100.577649][ T27] usb 3-1: selecting invalid altsetting 0 [ 100.691421][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 100.713563][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 100.769977][ T9] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 100.817135][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.834911][ T27] usb 3-1: USB disconnect, device number 5 [ 100.849957][ T9] usb 4-1: config 0 descriptor?? [ 101.002354][ T6071] syz.0.91 uses obsolete (PF_INET,SOCK_PACKET) [ 101.080884][ T9] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 101.350251][ T6069] loop1: detected capacity change from 0 to 40427 [ 101.367682][ T6069] F2FS-fs (loop1): Invalid SB checksum offset: 0 [ 101.374852][ T9] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 101.383431][ T6069] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 101.402765][ T6069] F2FS-fs (loop1): invalid crc value [ 101.502389][ T6069] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0 [ 101.515426][ T6069] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 101.554256][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 101.571831][ T9] usb 1-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 101.601971][ T9] usb 1-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 101.624314][ T9] usb 1-1: Product: syz [ 101.633072][ T9] usb 1-1: Manufacturer: syz [ 101.643446][ T9] usb 1-1: SerialNumber: syz [ 101.657477][ T9] usb 1-1: config 0 descriptor?? [ 101.682659][ T5768] syz-executor: attempt to access beyond end of device [ 101.682659][ T5768] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 101.714944][ T5768] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 101.805723][ T6079] input: syz0 as /devices/virtual/input/input6 [ 101.976677][ T27] usb 1-1: USB disconnect, device number 2 [ 102.367089][ T27] usb 4-1: USB disconnect, device number 3 [ 103.265024][ T6110] program syz.0.109 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 103.419723][ T6100] loop2: detected capacity change from 0 to 32768 [ 103.461269][ T6100] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop2 scanned by syz.2.104 (6100) [ 103.504390][ T6100] BTRFS info (device loop2): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 103.518261][ T6100] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 103.528882][ T6100] BTRFS info (device loop2): enabling disk space caching [ 103.536437][ T6100] BTRFS info (device loop2): force clearing of disk cache [ 103.544485][ T6100] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 103.584296][ T6100] BTRFS info (device loop2): use zstd compression, level 3 [ 103.591592][ T6100] BTRFS info (device loop2): disk space caching is enabled [ 103.645551][ T9] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 103.733286][ T6100] BTRFS info (device loop2): enabling ssd optimizations [ 103.747129][ T6100] BTRFS info (device loop2): auto enabling async discard [ 103.785962][ T6100] BTRFS info (device loop2): rebuilding free space tree [ 103.898066][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 103.907399][ T6100] BTRFS info (device loop2): disabling free space tree [ 103.916940][ T9] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 103.924767][ T6100] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 103.940082][ T9] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 103.954370][ T6100] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 103.971163][ T9] usb 1-1: config 0 interface 0 has no altsetting 0 [ 103.990528][ T9] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 104.014276][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.055546][ T9] usb 1-1: config 0 descriptor?? [ 104.272375][ T5770] BTRFS info (device loop2): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 104.500511][ T9] hid (null): bogus close delimiter [ 104.524671][ T5774] Bluetooth: hci4: command 0x1003 tx timeout [ 104.532125][ T5772] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 104.553176][ T9] hid (null): unknown global tag 0xe [ 104.745775][ T5808] usb 1-1: USB disconnect, device number 3 [ 105.421281][ T6170] loop0: detected capacity change from 0 to 128 [ 105.454993][ T6170] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 105.494298][ T6170] hpfs: filesystem error: improperly stopped [ 105.500444][ T6170] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 105.544236][ T6170] hpfs: You really don't want any checks? You are crazy... [ 105.573047][ T6170] hpfs: hpfs_map_sector(): read error [ 105.604500][ T6170] hpfs: code page support is disabled [ 105.624652][ T6170] hpfs: hpfs_map_4sectors(): unaligned read [ 105.630775][ T6170] hpfs: hpfs_map_4sectors(): unaligned read [ 105.645007][ T6170] hpfs: filesystem error: unable to find root dir [ 105.721015][ T6174] loop2: detected capacity change from 0 to 2048 [ 105.805550][ T6174] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 105.841198][ T6174] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 105.914054][ T5770] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.035134][ T6165] loop1: detected capacity change from 0 to 32768 [ 106.346444][ T6189] loop0: detected capacity change from 0 to 512 [ 106.397638][ T6189] EXT4-fs error (device loop0): ext4_orphan_get:1430: comm syz.0.140: bad orphan inode 11862016 [ 106.448495][ T6189] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 106.492807][ T6189] ext4 filesystem being mounted at /42/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 106.659704][ T5767] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 106.774801][ T6200] loop3: detected capacity change from 0 to 64 [ 106.884254][ T23] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 106.969571][ T6205] batadv_slave_1: entered promiscuous mode [ 106.999425][ T6204] batadv_slave_1: left promiscuous mode [ 107.101299][ T23] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 107.114488][ T23] usb 3-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 107.124550][ T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.132583][ T23] usb 3-1: Product: syz [ 107.136822][ T23] usb 3-1: Manufacturer: syz [ 107.141463][ T23] usb 3-1: SerialNumber: syz [ 107.150363][ T6192] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 107.159808][ T6192] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 107.334561][ T1530] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 107.390726][ T23] usb 3-1: USB disconnect, device number 6 [ 107.534285][ T1530] usb 4-1: Using ep0 maxpacket: 32 [ 107.543091][ T1530] usb 4-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 107.554512][ T1530] usb 4-1: config 0 interface 0 altsetting 128 endpoint 0x2 has invalid wMaxPacketSize 0 [ 107.566891][ T1530] usb 4-1: config 0 interface 0 has no altsetting 0 [ 107.573722][ T1530] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1c09, bcdDevice= 0.00 [ 107.582885][ T1530] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.606464][ T1530] usb 4-1: config 0 descriptor?? [ 107.947502][ T6217] warning: `syz.1.150' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 108.031905][ T1530] corsair-psu 0003:1B1C:1C09.0002: unknown main item tag 0x0 [ 108.058090][ T1530] corsair-psu 0003:1B1C:1C09.0002: unknown main item tag 0x0 [ 108.082382][ T1530] corsair-psu 0003:1B1C:1C09.0002: unknown main item tag 0x0 [ 108.103322][ T1530] corsair-psu 0003:1B1C:1C09.0002: unknown main item tag 0x0 [ 108.125460][ T6221] loop1: detected capacity change from 0 to 64 [ 108.131501][ T1530] corsair-psu 0003:1B1C:1C09.0002: unknown main item tag 0x0 [ 108.175688][ T1530] corsair-psu 0003:1B1C:1C09.0002: hidraw0: USB HID v4.08 Device [HID 1b1c:1c09] on usb-dummy_hcd.3-1/input0 [ 108.301341][ T1530] corsair-psu 0003:1B1C:1C09.0002: unable to initialize device (-90) [ 108.333127][ T1530] corsair-psu: probe of 0003:1B1C:1C09.0002 failed with error -90 [ 108.379204][ T1530] usb 4-1: USB disconnect, device number 4 [ 108.411365][ T6223] fido_id[6223]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 108.470592][ T6211] loop0: detected capacity change from 0 to 40427 [ 108.492539][ T6227] Bluetooth: MGMT ver 1.22 [ 108.499128][ T6211] F2FS-fs (loop0): build fault injection attr: rate: 771, type: 0x7ffff [ 108.522283][ T6211] F2FS-fs (loop0): invalid crc value [ 108.566366][ T6211] F2FS-fs (loop0): Found nat_bits in checkpoint [ 108.712493][ T6211] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 108.751517][ T6233] loop2: detected capacity change from 0 to 1024 [ 108.763856][ T6233] EXT4-fs: Ignoring removed nomblk_io_submit option [ 108.792442][ T6233] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 108.820934][ T6233] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 108.843308][ T6233] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.916567][ T5767] syz-executor: attempt to access beyond end of device [ 108.916567][ T5767] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 108.953196][ T5767] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 109.044902][ T5770] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.430669][ T6249] loop3: detected capacity change from 0 to 256 [ 109.473476][ T6249] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3ec, utbl_chksum : 0xe619d30d) [ 110.544015][ T6276] capability: warning: `syz.0.172' uses 32-bit capabilities (legacy support in use) [ 110.576087][ T6276] program syz.0.172 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 110.825280][ T6287] capability: warning: `syz.3.177' uses deprecated v2 capabilities in a way that may be insecure [ 111.251048][ T6294] loop2: detected capacity change from 0 to 32768 [ 111.257475][ T5808] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 111.269429][ T6294] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 scanned by syz.2.181 (6294) [ 111.297169][ T6294] BTRFS info (device loop2): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 111.311781][ T6294] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 111.321473][ T9] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 111.336266][ T6294] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 111.346904][ T6294] BTRFS info (device loop2): use zstd compression, level 3 [ 111.354358][ T6294] BTRFS info (device loop2): using free space tree [ 111.391800][ T6294] BTRFS info (device loop2): enabling ssd optimizations [ 111.406954][ T6294] BTRFS info (device loop2): auto enabling async discard [ 111.445068][ T5808] usb 1-1: Using ep0 maxpacket: 8 [ 111.448161][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 111.448191][ T28] audit: type=1800 audit(1777415969.107:17): pid=6294 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.181" name="file1" dev="loop2" ino=260 res=0 errno=0 [ 111.462824][ T5808] usb 1-1: config index 0 descriptor too short (expected 30, got 18) [ 111.519816][ T9] usb 4-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 111.538843][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.552470][ T5808] usb 1-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 111.566898][ T5808] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.578176][ T5808] usb 1-1: Product: syz [ 111.582448][ T9] usb 4-1: config 0 descriptor?? [ 111.589488][ T5808] usb 1-1: Manufacturer: syz [ 111.601655][ T5808] usb 1-1: SerialNumber: syz [ 111.610513][ T5808] usb 1-1: config 0 descriptor?? [ 111.634980][ T5808] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 111.643115][ T5808] usb 1-1: setting power ON [ 111.659086][ T5808] dvb-usb: bulk message failed: -22 (2/0) [ 111.691417][ T5808] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 111.702293][ T5808] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 111.705927][ T5770] BTRFS info (device loop2): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 111.712270][ T5808] usb 1-1: media controller created [ 111.791623][ T5808] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 111.890623][ T6292] dvb-usb: bulk message failed: -22 (3/0) [ 111.919198][ T6292] dvb-usb: bulk message failed: -22 (4/0) [ 111.947745][ T6292] cxusb: i2c read failed [ 111.953478][ T6318] dvb-usb: bulk message failed: -22 (3/0) [ 111.970281][ T6318] dvb-usb: bulk message failed: -22 (3/0) [ 112.017770][ T5760] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 10 /dev/loop2 scanned by udevd (5760) [ 112.036532][ T5808] usb 1-1: selecting invalid altsetting 6 [ 112.065366][ T5808] usb 1-1: digital interface selection failed (-22) [ 112.085548][ T5808] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 112.114988][ T5808] usb 1-1: setting power OFF [ 112.120200][ T5808] dvb-usb: bulk message failed: -22 (2/0) [ 112.148763][ T5808] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 112.171696][ T5808] (NULL device *): no alternate interface [ 112.247699][ T5808] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 112.301463][ T5808] usb 1-1: USB disconnect, device number 4 [ 112.418737][ T9] usb 4-1: Cannot set autoneg [ 112.435341][ T9] MOSCHIP usb-ethernet driver: probe of 4-1:0.0 failed with error -71 [ 112.473152][ T9] usb 4-1: USB disconnect, device number 5 [ 112.519214][ T6328] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 112.618722][ T6330] loop1: detected capacity change from 0 to 256 [ 112.627228][ T6330] exfat: Deprecated parameter 'utf8' [ 112.638797][ T6330] exfat: Deprecated parameter 'namecase' [ 112.660081][ T6330] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 112.840166][ T6334] loop0: detected capacity change from 0 to 512 [ 112.848783][ T6334] EXT4-fs: Ignoring removed bh option [ 112.884325][ T6334] EXT4-fs: Ignoring removed nomblk_io_submit option [ 112.917976][ T6334] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 113.024564][ T6334] EXT4-fs (loop0): 1 truncate cleaned up [ 113.032357][ T6334] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 113.093840][ T6340] loop1: detected capacity change from 0 to 1024 [ 113.113826][ T6334] EXT4-fs warning (device loop0): ext4_block_to_path:107: block 1057052516 > max in inode 18 [ 113.167115][ T28] audit: type=1800 audit(1777415970.827:18): pid=6340 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.193" name="file1" dev="loop1" ino=20 res=0 errno=0 [ 113.187541][ T5767] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.434251][ T1530] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 113.617069][ T1530] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 113.626952][ T1530] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.638959][ T1530] usb 4-1: config 0 descriptor?? [ 113.694494][ T23] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 113.875135][ T1530] [drm] vendor descriptor length:6 data:06 5f 01 01 00 00 00 00 00 00 00 [ 113.893880][ T1530] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 113.906490][ T23] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 113.915835][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.928848][ T23] usb 1-1: config 0 descriptor?? [ 113.946822][ T23] cp210x 1-1:0.0: cp210x converter detected [ 114.084280][ T1530] [drm:udl_init] *ERROR* Selecting channel failed [ 114.165593][ T1530] [drm] Initialized udl 0.0.1 20120220 for 4-1:0.0 on minor 2 [ 114.173171][ T1530] [drm] Initialized udl on minor 2 [ 114.201599][ T1530] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 114.222126][ T1530] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 114.238657][ T5811] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 114.250284][ T1530] usb 4-1: USB disconnect, device number 6 [ 114.264876][ T5811] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 114.355513][ T23] cp210x 1-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 114.397052][ T23] usb 1-1: cp210x converter now attached to ttyUSB0 [ 114.398794][ T6357] loop1: detected capacity change from 0 to 32768 [ 114.497950][ T6357] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 114.587842][ T5811] usb 1-1: USB disconnect, device number 5 [ 114.609569][ T5811] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 114.637900][ T5811] cp210x 1-1:0.0: device disconnected [ 114.689697][ T6357] XFS (loop1): Ending clean mount [ 114.842559][ T5768] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 115.214729][ T6386] loop1: detected capacity change from 0 to 512 [ 115.218490][ T6387] loop0: detected capacity change from 0 to 1024 [ 115.245543][ T6386] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 115.273296][ T6386] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 115.308801][ T6386] EXT4-fs (loop1): 1 orphan inode deleted [ 115.318082][ T6386] EXT4-fs (loop1): 1 truncate cleaned up [ 115.362830][ T6386] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 115.431075][ T28] audit: type=1800 audit(1777415973.077:19): pid=6387 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.209" name="file1" dev="loop0" ino=20 res=0 errno=0 [ 115.507127][ T5768] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.704812][ T6399] loop1: detected capacity change from 0 to 512 [ 115.769330][ T6399] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.813526][ T6406] loop2: detected capacity change from 0 to 1024 [ 115.825569][ T6406] EXT4-fs: Ignoring removed orlov option [ 115.862442][ T6399] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 115.948226][ T6407] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 115.974510][ T6406] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 116.099964][ T5768] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.260059][ T5770] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.451305][ T6427] netlink: 4 bytes leftover after parsing attributes in process `syz.3.224'. [ 116.514436][ T5808] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 116.724391][ T5808] usb 2-1: Using ep0 maxpacket: 8 [ 116.754445][ T5808] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 116.784417][ T5808] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 116.837146][ T5808] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 116.878225][ T5808] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 116.934401][ T5808] usb 2-1: New USB device found, idVendor=0c45, idProduct=760b, bcdDevice= 0.00 [ 116.982217][ T5808] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.010664][ T5808] usb 2-1: config 0 descriptor?? [ 117.109948][ T6434] netlink: 116 bytes leftover after parsing attributes in process `syz.0.227'. [ 117.240740][ T6437] hsr0: entered promiscuous mode [ 117.248516][ T6437] macsec1: entered allmulticast mode [ 117.253902][ T6437] hsr0: entered allmulticast mode [ 117.261120][ T6437] hsr_slave_0: entered allmulticast mode [ 117.268505][ T6437] hsr_slave_1: entered allmulticast mode [ 117.280153][ T6426] loop2: detected capacity change from 0 to 32768 [ 117.288665][ T6437] hsr0: left allmulticast mode [ 117.296372][ T6437] hsr_slave_0: left allmulticast mode [ 117.310201][ T6426] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.223 (6426) [ 117.322452][ T6437] hsr_slave_1: left allmulticast mode [ 117.408603][ T6426] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 117.436373][ T5808] redragon 0003:0C45:760B.0003: unknown main item tag 0x6 [ 117.445757][ T5808] redragon 0003:0C45:760B.0003: item fetching failed at offset 7/133 [ 117.460864][ T6426] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 117.472308][ T5808] redragon: probe of 0003:0C45:760B.0003 failed with error -22 [ 117.479864][ T6426] BTRFS info (device loop2): turning on sync discard [ 117.480007][ T6426] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 117.480048][ T6426] BTRFS info (device loop2): use zstd compression, level 3 [ 117.480069][ T6426] BTRFS info (device loop2): turning on async discard [ 117.480295][ T6426] BTRFS warning (device loop2): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 117.480314][ T6426] BTRFS info (device loop2): trying to use backup root at mount time [ 117.480334][ T6426] BTRFS info (device loop2): enabling auto defrag [ 117.480354][ T6426] BTRFS info (device loop2): using free space tree [ 117.611436][ T172] BTRFS warning (device loop2): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 117.637410][ T6426] BTRFS error (device loop2): failed to load root extent [ 117.662629][ T6426] BTRFS warning (device loop2): try to load backup roots slot 1 [ 117.675494][ T1530] usb 2-1: USB disconnect, device number 3 [ 117.722850][ T73] BTRFS warning (device loop2): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 117.751837][ T6426] BTRFS warning (device loop2): couldn't read tree root [ 117.765547][ T6426] BTRFS warning (device loop2): try to load backup roots slot 2 [ 117.774573][ T1114] BTRFS error (device loop2): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 117.814228][ T6426] BTRFS warning (device loop2): couldn't read tree root [ 117.831586][ T6426] BTRFS warning (device loop2): try to load backup roots slot 3 [ 117.872066][ T6426] BTRFS info (device loop2): enabling ssd optimizations [ 117.889890][ T6426] BTRFS info (device loop2): rebuilding free space tree [ 117.927322][ T6426] BTRFS info (device loop2): checking UUID tree [ 118.049385][ T5770] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 118.064746][ T5808] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 118.280717][ T5808] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 118.299011][ T5808] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.355316][ T5808] usb 1-1: config 0 descriptor?? [ 118.390330][ T5808] cp210x 1-1:0.0: cp210x converter detected [ 118.468135][ T6453] loop3: detected capacity change from 0 to 40427 [ 118.504206][ T6453] F2FS-fs (loop3): Invalid log_blocksize (64), supports only 12 [ 118.535658][ T6453] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 118.608068][ T6453] F2FS-fs (loop3): invalid crc value [ 118.805149][ T5808] usb 1-1: cp210x converter now attached to ttyUSB0 [ 118.906556][ T6453] F2FS-fs (loop3): Start checkpoint disabled! [ 118.915317][ T6473] netlink: 4 bytes leftover after parsing attributes in process `syz.1.235'. [ 118.930598][ T6453] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 118.938290][ T6453] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 118.983506][ T5773] usb 1-1: USB disconnect, device number 6 [ 118.997508][ T6453] syz.3.229: attempt to access beyond end of device [ 118.997508][ T6453] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 119.014311][ T1530] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 119.025458][ T6453] syz.3.229: attempt to access beyond end of device [ 119.025458][ T6453] loop3: rw=2049, sector=45112, nr_sectors = 8 limit=40427 [ 119.037750][ T5773] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 119.053937][ T6475] syz.3.229: attempt to access beyond end of device [ 119.053937][ T6475] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 119.070893][ T5773] cp210x 1-1:0.0: device disconnected [ 119.098195][ T6475] syz.3.229: attempt to access beyond end of device [ 119.098195][ T6475] loop3: rw=2049, sector=45112, nr_sectors = 8 limit=40427 [ 119.160607][ T6477] Driver unsupported XDP return value 0 on prog (id 18) dev N/A, expect packet loss! [ 119.186177][ T59] kworker/u4:4: attempt to access beyond end of device [ 119.186177][ T59] loop3: rw=2049, sector=45120, nr_sectors = 8 limit=40427 [ 119.205926][ T59] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 119.217969][ T1530] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 119.235443][ T1530] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 119.245696][ T1530] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 119.254821][ T1530] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.270459][ T6471] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 119.291500][ T1530] usb 3-1: Quirk or no altest; falling back to MIDI 1.0 [ 119.766631][ T5773] usb 3-1: USB disconnect, device number 7 [ 120.286295][ T6509] netlink: 'syz.3.250': attribute type 2 has an invalid length. [ 120.510108][ T6519] loop2: detected capacity change from 0 to 2048 [ 120.527440][ T6519] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 120.565626][ T6520] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 120.611944][ T28] audit: type=1800 audit(1777415978.267:20): pid=6519 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.255" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 120.704435][ T5808] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 120.714275][ T1530] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 120.904937][ T1530] usb 2-1: Using ep0 maxpacket: 8 [ 120.919184][ T1530] usb 2-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 120.931960][ T5808] usb 4-1: Using ep0 maxpacket: 8 [ 120.940677][ T1530] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.955791][ T5808] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 120.959625][ T1530] usb 2-1: Product: syz [ 120.978424][ T5808] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 120.981625][ T1530] usb 2-1: Manufacturer: syz [ 120.991687][ T5808] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 121.008707][ T1530] usb 2-1: SerialNumber: syz [ 121.025007][ T1530] usb 2-1: config 0 descriptor?? [ 121.031330][ T5808] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 121.055592][ T1530] gspca_main: se401-2.14.0 probing 047d:5003 [ 121.063538][ T5808] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 121.079314][ T5808] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.312882][ T5808] usb 4-1: GET_CAPABILITIES returned 0 [ 121.318776][ T5808] usbtmc 4-1:16.0: can't read capabilities [ 121.469644][ T1530] gspca_se401: Too many frame sizes [ 121.526993][ T6516] usb 4-1: usbtmc_ioctl_clear_out_halt returned -32 [ 121.552043][ T1530] usb 4-1: USB disconnect, device number 7 [ 121.554455][ T9] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 121.683775][ T5811] usb 2-1: USB disconnect, device number 4 [ 121.749963][ T6539] loop0: detected capacity change from 0 to 1024 [ 121.754445][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 121.763427][ T6539] EXT4-fs: Ignoring removed nobh option [ 121.769999][ T6539] EXT4-fs: Ignoring removed bh option [ 121.775975][ T9] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 121.784044][ T9] usb 3-1: config 0 has no interface number 0 [ 121.791702][ T9] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 121.803966][ T9] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 121.813710][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.829228][ T6539] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 121.842917][ T9] usb 3-1: config 0 descriptor?? [ 121.869057][ T9] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 121.963878][ T5767] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.364549][ T5808] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 122.442357][ T6557] loop1: detected capacity change from 0 to 128 [ 122.475208][ T6557] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 122.514263][ T6557] hpfs: filesystem error: improperly stopped [ 122.520443][ T6557] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 122.538383][ T6557] hpfs: You really don't want any checks? You are crazy... [ 122.546598][ T6557] hpfs: hpfs_map_sector(): read error [ 122.552149][ T6557] hpfs: code page support is disabled [ 122.560105][ T6557] hpfs: hpfs_map_4sectors(): unaligned read [ 122.568487][ T6557] hpfs: hpfs_map_4sectors(): unaligned read [ 122.579486][ T5808] usb 1-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 122.588860][ T5808] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.597364][ T6557] hpfs: filesystem error: unable to find root dir [ 122.653555][ T5808] usb 1-1: config 0 descriptor?? [ 122.680616][ T5808] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 122.925704][ T23] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 123.085816][ T5808] cpia1 1-1:0.0: unexpected state after lo power cmd: 00 [ 123.098510][ T5773] usb 3-1: USB disconnect, device number 8 [ 123.161866][ T23] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 123.182991][ T23] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 123.211027][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.239720][ T23] usb 4-1: config 0 descriptor?? [ 123.487557][ T5808] gspca_cpia1: usb_control_msg 02, error -71 [ 123.498779][ T5808] gspca_cpia1: usb_control_msg 05, error -71 [ 123.541111][ T5808] cpia1 1-1:0.0: unexpected systemstate: 00 [ 123.568072][ T5808] usb 1-1: USB disconnect, device number 7 [ 123.855750][ T23] ath6kl: mismatched byte count 0 vs. expected 12 [ 123.879885][ T23] ath6kl: Failed to init ath6kl core: -22 [ 123.915134][ T23] ath6kl_usb: probe of 4-1:0.0 failed with error -22 [ 124.064586][ T23] usb 4-1: USB disconnect, device number 8 [ 124.126291][ T6603] Set syz1 is full, maxelem 14 reached [ 124.165447][ T6599] loop1: detected capacity change from 0 to 2048 [ 124.238569][ T6599] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 124.271463][ T6599] ext4 filesystem being mounted at /70/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 124.457392][ T5768] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.706368][ T23] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 124.716268][ T6620] 8021q: adding VLAN 0 to HW filter on device bond1 [ 124.740713][ T6620] bond0: (slave bond1): Enslaving as an active interface with an up link [ 124.759334][ T6629] IPVS: sync thread started: state = BACKUP, mcast_ifn = hsr0, syncid = 4, id = 0 [ 124.898791][ T23] usb 1-1: Using ep0 maxpacket: 32 [ 124.944238][ T23] usb 1-1: config 0 has no interfaces? [ 124.960417][ T23] usb 1-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 124.978627][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.997602][ T23] usb 1-1: Product: syz [ 125.008322][ T23] usb 1-1: Manufacturer: syz [ 125.013028][ T23] usb 1-1: SerialNumber: syz [ 125.064753][ T23] usb 1-1: config 0 descriptor?? [ 125.152186][ T6639] loop1: detected capacity change from 0 to 8192 [ 125.202875][ T6639] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 125.216870][ T6639] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 125.226296][ T6639] REISERFS (device loop1): using ordered data mode [ 125.233495][ T6639] reiserfs: using flush barriers [ 125.243128][ T6639] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 125.263009][ T6639] REISERFS (device loop1): checking transaction log (loop1) [ 125.284642][ T23] usb 1-1: USB disconnect, device number 8 [ 125.308267][ T6639] REISERFS (device loop1): Using r5 hash to sort names [ 125.338504][ T6639] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 125.468255][ T6644] loop3: detected capacity change from 0 to 2048 [ 125.522758][ T6644] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 126.024231][ T6655] loop3: detected capacity change from 0 to 8192 [ 126.053198][ T6655] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 126.071193][ T6655] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 126.082993][ T6655] REISERFS (device loop3): using journaled data mode [ 126.089929][ T5808] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 126.098360][ T6655] reiserfs: using flush barriers [ 126.112871][ T6655] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 126.130451][ T6655] REISERFS (device loop3): checking transaction log (loop3) [ 126.141764][ T6655] REISERFS (device loop3): Using r5 hash to sort names [ 126.153066][ T6655] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 126.169464][ T6655] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 126.290289][ T5808] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 126.311065][ T5808] usb 3-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 126.363239][ T5808] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 126.382110][ T5808] usb 3-1: config 220 has no interface number 2 [ 126.403163][ T5808] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 126.422306][ T5808] usb 3-1: config 220 interface 0 has no altsetting 0 [ 126.430621][ T5808] usb 3-1: config 220 interface 76 has no altsetting 0 [ 126.442115][ T5808] usb 3-1: config 220 interface 1 has no altsetting 0 [ 126.466730][ T5808] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 126.485288][ T5808] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.532625][ T5808] usb 3-1: Product: syz [ 126.542132][ T5808] usb 3-1: Manufacturer: syz [ 126.554657][ T5808] usb 3-1: SerialNumber: syz [ 126.805187][ T5808] usb 3-1: Found UVC 7.01 device syz (8086:0b07) [ 126.811627][ T5808] usb 3-1: No valid video chain found. [ 126.859556][ T5808] usb 3-1: selecting invalid altsetting 0 [ 126.908285][ T5808] usb 3-1: selecting invalid altsetting 0 [ 126.918681][ T5808] usbtest: probe of 3-1:220.1 failed with error -22 [ 126.935148][ T5808] usb 3-1: USB disconnect, device number 9 [ 127.474253][ T5808] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 127.602472][ T6697] netlink: 'syz.0.320': attribute type 1 has an invalid length. [ 127.674320][ T5808] usb 4-1: Using ep0 maxpacket: 8 [ 127.705501][ T5808] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 127.713578][ T5808] usb 4-1: config 0 has no interface number 0 [ 127.732743][ T5808] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 127.763900][ T5808] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 127.782513][ T5808] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.806797][ T5808] usb 4-1: config 0 descriptor?? [ 127.835010][ T5808] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 128.042257][ T5808] usb 4-1: USB disconnect, device number 9 [ 128.424370][ T1530] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 128.556889][ T6712] loop0: detected capacity change from 0 to 32768 [ 128.596987][ T6712] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 128.614627][ T1530] usb 2-1: Using ep0 maxpacket: 16 [ 128.624226][ T6712] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 128.665677][ T1530] usb 2-1: unable to get BOS descriptor or descriptor too short [ 128.682564][ T6718] loop2: detected capacity change from 0 to 32768 [ 128.699530][ T1530] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 128.713694][ T5772] Bluetooth: hci1: hcon ffff888030c90000 sent 0 < count 137 [ 128.730555][ T1530] usb 2-1: config 1 interface 0 altsetting 127 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 128.749476][ T1530] usb 2-1: config 1 interface 0 has no altsetting 0 [ 128.762038][ T1530] usb 2-1: New USB device found, idVendor=05ac, idProduct=0242, bcdDevice= 0.40 [ 128.763140][ T6718] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 128.781828][ T1530] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.793538][ T6712] gfs2: fsid=syz:syz.s: journal 0 mapped with 5 extents in 0ms [ 128.814834][ T1530] usb 2-1: Product: syz [ 128.819809][ T1530] usb 2-1: Manufacturer: syz [ 128.867146][ T1530] usb 2-1: SerialNumber: syz [ 128.891696][ T1530] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input7 [ 128.931409][ T6718] XFS (loop2): Ending clean mount [ 128.946744][ T6712] gfs2: fsid=syz:syz.s: first mount done, others may mount [ 128.975597][ T6718] XFS (loop2): Quotacheck needed: Please wait. [ 129.063201][ T6718] XFS (loop2): Quotacheck: Done. [ 129.123424][ T5123] bcm5974 2-1:1.0: could not read from device [ 129.166789][ T1530] bcm5974 2-1:1.0: could not read from device [ 129.206041][ T5123] bcm5974 2-1:1.0: could not read from device [ 129.294595][ T1530] input: failed to attach handler mousedev to device input7, error: -5 [ 129.313199][ T5770] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 129.335910][ T5123] bcm5974 2-1:1.0: could not read from device [ 129.356526][ T1530] usb 2-1: USB disconnect, device number 5 [ 129.374579][ T5123] bcm5974 2-1:1.0: could not read from device [ 129.521271][ T6732] netlink: 8 bytes leftover after parsing attributes in process `syz.3.335'. [ 129.732329][ T6738] loop0: detected capacity change from 0 to 2048 [ 129.804402][ T6739] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 129.865979][ T6741] process 'syz.2.334' launched './file1' with NULL argv: empty string added [ 129.957451][ T6744] loop1: detected capacity change from 0 to 128 [ 129.967260][ T5772] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 129.976777][ T5772] Bluetooth: hci2: Injecting HCI hardware error event [ 129.985832][ T5774] Bluetooth: hci2: hardware error 0x00 [ 130.036268][ T6739] NILFS (loop0): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 130.092748][ T6745] loop3: detected capacity change from 0 to 4096 [ 130.110977][ T6739] NILFS error (device loop0): nilfs_bmap_propagate: broken bmap (inode number=4) [ 130.130508][ T6739] Remounting filesystem read-only [ 130.146187][ T1101] NILFS (loop0): discard dirty page: offset=0, ino=3 [ 130.185809][ T1101] NILFS (loop0): discard dirty block: blocknr=42, size=1024 [ 130.193338][ T1101] NILFS (loop0): discard dirty block: blocknr=43, size=1024 [ 130.221748][ T6748] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 130.244520][ T1101] NILFS (loop0): discard dirty block: blocknr=44, size=1024 [ 130.252858][ T1101] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 130.269099][ T1101] NILFS (loop0): discard dirty page: offset=229376, ino=3 [ 130.280232][ T1101] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 130.314326][ T1101] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 130.345608][ T1101] NILFS (loop0): discard dirty block: blocknr=50, size=1024 [ 130.353802][ T1101] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 130.416997][ T1101] NILFS (loop0): discard dirty page: offset=0, ino=5 [ 130.446886][ T1101] NILFS (loop0): discard dirty block: blocknr=41, size=1024 [ 130.466226][ T1101] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 130.495905][ T1101] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 130.528509][ T1101] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 130.547869][ T1101] NILFS (loop0): discard dirty page: offset=0, ino=4 [ 130.568653][ T1101] NILFS (loop0): discard dirty block: blocknr=40, size=1024 [ 130.595491][ T1101] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 130.631996][ T1101] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 130.659757][ T1101] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 130.679594][ T28] audit: type=1326 audit(1777415988.337:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6754 comm="syz.1.345" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe62759cdd9 code=0x0 [ 130.695417][ T5767] NILFS (loop0): disposed unprocessed dirty file(s) when stopping log writer [ 130.717617][ T5767] NILFS (loop0): discard dirty page: offset=0, ino=6 [ 130.726989][ T5767] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 130.738703][ T5767] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 130.749899][ T5767] NILFS (loop0): discard dirty block: blocknr=37, size=1024 [ 130.757705][ T5767] NILFS (loop0): discard dirty block: blocknr=38, size=1024 [ 131.043845][ T6764] loop2: detected capacity change from 0 to 64 [ 131.349126][ T73] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.541960][ T73] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.637358][ T73] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.750639][ T73] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.779454][ T6780] loop1: detected capacity change from 0 to 2048 [ 131.794905][ T6780] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 131.835510][ T6781] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 131.994282][ T23] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 132.048255][ T5774] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 132.218052][ T23] usb 3-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 132.253474][ T23] usb 3-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 132.270237][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.297040][ T23] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 132.586234][ T5772] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 132.596465][ T5772] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 132.614251][ T5772] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 132.644482][ T5772] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 132.653940][ T5772] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 132.664479][ T5772] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 132.941662][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.948977][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.295707][ T6825] macvlan0: entered promiscuous mode [ 133.338120][ T6825] netlink: 'syz.0.367': attribute type 2 has an invalid length. [ 133.368102][ T23] stv0680 3-1:4.0: Could not get descriptor 0200 [ 133.580329][ T23] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 133.603618][ T23] stv0680 3-1:4.0: last error: 0, command = 0x0 [ 133.672473][ T23] usb 3-1: USB disconnect, device number 10 [ 133.954999][ T6797] chnl_net:caif_netlink_parms(): no params data found [ 133.972195][ T1114] wlan1: Trigger new scan to find an IBSS to join [ 134.006628][ T6832] loop0: detected capacity change from 0 to 32768 [ 134.035424][ T172] ------------[ cut here ]------------ [ 134.041310][ T172] no supported rates for sta (null) (0xffffffff, band 0) in rate_mask 0xffffffff with flags 0x40 [ 134.052771][ T172] WARNING: CPU: 1 PID: 172 at net/mac80211/rate.c:385 __rate_control_send_low+0x635/0x880 [ 134.062784][ T172] Modules linked in: [ 134.066862][ T172] CPU: 1 PID: 172 Comm: kworker/u4:6 Not tainted syzkaller #0 [ 134.074408][ T172] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 134.084548][ T172] Workqueue: events_unbound cfg80211_wiphy_work [ 134.090860][ T172] RIP: 0010:__rate_control_send_low+0x635/0x880 [ 134.097221][ T172] Code: 30 42 0f b6 04 28 84 c0 0f 85 e6 01 00 00 41 8b 0e 48 c7 c7 a0 04 df 8b 48 8b 74 24 10 44 8b 44 24 1c 45 89 e1 e8 8b a7 54 f7 <0f> 0b e9 78 fe ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 03 fa ff [ 134.116965][ T172] RSP: 0018:ffffc90002eb7380 EFLAGS: 00010246 [ 134.123106][ T172] RAX: 214067dfc0add900 RBX: 000000000000000c RCX: ffff88801b761e00 [ 134.131146][ T172] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002 [ 134.139186][ T172] RBP: 0000000000000084 R08: ffffc90002eb6f87 R09: 1ffff920005d6df0 [ 134.147293][ T172] R10: dffffc0000000000 R11: fffff520005d6df1 R12: 0000000000000040 [ 134.155339][ T172] R13: dffffc0000000000 R14: ffff88801db03358 R15: ffff88805db76028 [ 134.163359][ T172] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 134.172373][ T172] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 134.179025][ T172] CR2: 00007fe6283456b8 CR3: 0000000060f7b000 CR4: 00000000003506e0 [ 134.187115][ T172] Call Trace: [ 134.190460][ T172] [ 134.193480][ T172] rate_control_send_low+0x194/0x790 [ 134.198863][ T172] rate_control_get_rate+0x20b/0x5d0 [ 134.204322][ T172] ieee80211_tx_h_rate_ctrl+0xb63/0x1790 [ 134.210016][ T172] ? ieee80211_tx_h_select_key+0x19e0/0x19e0 [ 134.216116][ T172] ? __lock_acquire+0x1273/0x7d40 [ 134.221197][ T172] ? ieee80211_is_bufferable_mmpdu+0xfb/0x1f0 [ 134.227356][ T172] invoke_tx_handlers_late+0xb6/0x1810 [ 134.232887][ T172] ? invoke_tx_handlers_early+0xa11/0x1cf0 [ 134.238799][ T172] ieee80211_tx+0x2d8/0x460 [ 134.243360][ T172] ? ieee80211_skb_resize+0x630/0x630 [ 134.248853][ T172] ? ieee80211_set_qos_hdr+0x1ca/0x510 [ 134.254404][ T172] ? __bpf_trace_tasklet+0x160/0x160 [ 134.259751][ T172] ? ieee80211_xmit+0x310/0x3f0 [ 134.264695][ T172] ? __ieee80211_tx_skb_tid_band+0x490/0x610 [ 134.270720][ T172] __ieee80211_tx_skb_tid_band+0x4d5/0x610 [ 134.276629][ T172] ? ieee80211_scan_state_send_probe+0x4b4/0x930 [ 134.283018][ T172] ieee80211_scan_state_send_probe+0x560/0x930 [ 134.289291][ T172] ieee80211_scan_work+0x4e9/0x1c40 [ 134.294601][ T172] cfg80211_wiphy_work+0x225/0x260 [ 134.299765][ T172] ? process_scheduled_works+0x96f/0x15d0 [ 134.305571][ T172] process_scheduled_works+0xa5d/0x15d0 [ 134.311232][ T172] ? worker_attach_to_pool+0x380/0x380 [ 134.316785][ T172] ? assign_work+0x3d2/0x5d0 [ 134.321431][ T172] worker_thread+0xa55/0xfc0 [ 134.326147][ T172] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 134.332118][ T172] ? _raw_spin_unlock+0x40/0x40 [ 134.337064][ T172] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 134.343057][ T172] kthread+0x2fa/0x390 [ 134.347232][ T172] ? pr_cont_work+0x560/0x560 [ 134.351971][ T172] ? kthread_blkcg+0xd0/0xd0 [ 134.356655][ T172] ret_from_fork+0x48/0x80 [ 134.361132][ T172] ? kthread_blkcg+0xd0/0xd0 [ 134.365812][ T172] ret_from_fork_asm+0x11/0x20 [ 134.370649][ T172] [ 134.373708][ T172] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 134.381022][ T172] CPU: 1 PID: 172 Comm: kworker/u4:6 Not tainted syzkaller #0 [ 134.388506][ T172] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 134.398579][ T172] Workqueue: events_unbound cfg80211_wiphy_work [ 134.404850][ T172] Call Trace: [ 134.408176][ T172] [ 134.411125][ T172] dump_stack_lvl+0x18c/0x250 [ 134.415836][ T172] ? show_regs_print_info+0x20/0x20 [ 134.421063][ T172] ? load_image+0x420/0x420 [ 134.425637][ T172] panic+0x2dc/0x730 [ 134.429562][ T172] ? bpf_jit_dump+0xd0/0xd0 [ 134.434107][ T172] ? ret_from_fork_asm+0x11/0x20 [ 134.439072][ T172] __warn+0x2e0/0x470 [ 134.443078][ T172] ? __rate_control_send_low+0x635/0x880 [ 134.448744][ T172] ? __rate_control_send_low+0x635/0x880 [ 134.454411][ T172] report_bug+0x2be/0x4f0 [ 134.458766][ T172] ? __rate_control_send_low+0x635/0x880 [ 134.464424][ T172] ? __rate_control_send_low+0x635/0x880 [ 134.470076][ T172] ? __rate_control_send_low+0x637/0x880 [ 134.475761][ T172] handle_bug+0xcf/0x120 [ 134.480029][ T172] exc_invalid_op+0x1a/0x50 [ 134.484560][ T172] asm_exc_invalid_op+0x1a/0x20 [ 134.489426][ T172] RIP: 0010:__rate_control_send_low+0x635/0x880 [ 134.495699][ T172] Code: 30 42 0f b6 04 28 84 c0 0f 85 e6 01 00 00 41 8b 0e 48 c7 c7 a0 04 df 8b 48 8b 74 24 10 44 8b 44 24 1c 45 89 e1 e8 8b a7 54 f7 <0f> 0b e9 78 fe ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 03 fa ff [ 134.515318][ T172] RSP: 0018:ffffc90002eb7380 EFLAGS: 00010246 [ 134.521401][ T172] RAX: 214067dfc0add900 RBX: 000000000000000c RCX: ffff88801b761e00 [ 134.529423][ T172] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002 [ 134.537425][ T172] RBP: 0000000000000084 R08: ffffc90002eb6f87 R09: 1ffff920005d6df0 [ 134.545419][ T172] R10: dffffc0000000000 R11: fffff520005d6df1 R12: 0000000000000040 [ 134.553408][ T172] R13: dffffc0000000000 R14: ffff88801db03358 R15: ffff88805db76028 [ 134.561452][ T172] rate_control_send_low+0x194/0x790 [ 134.566774][ T172] rate_control_get_rate+0x20b/0x5d0 [ 134.572086][ T172] ieee80211_tx_h_rate_ctrl+0xb63/0x1790 [ 134.577747][ T172] ? ieee80211_tx_h_select_key+0x19e0/0x19e0 [ 134.583744][ T172] ? __lock_acquire+0x1273/0x7d40 [ 134.588893][ T172] ? ieee80211_is_bufferable_mmpdu+0xfb/0x1f0 [ 134.594986][ T172] invoke_tx_handlers_late+0xb6/0x1810 [ 134.600475][ T172] ? invoke_tx_handlers_early+0xa11/0x1cf0 [ 134.606311][ T172] ieee80211_tx+0x2d8/0x460 [ 134.610838][ T172] ? ieee80211_skb_resize+0x630/0x630 [ 134.616244][ T172] ? ieee80211_set_qos_hdr+0x1ca/0x510 [ 134.621722][ T172] ? __bpf_trace_tasklet+0x160/0x160 [ 134.627027][ T172] ? ieee80211_xmit+0x310/0x3f0 [ 134.631899][ T172] ? __ieee80211_tx_skb_tid_band+0x490/0x610 [ 134.637896][ T172] __ieee80211_tx_skb_tid_band+0x4d5/0x610 [ 134.643733][ T172] ? ieee80211_scan_state_send_probe+0x4b4/0x930 [ 134.650194][ T172] ieee80211_scan_state_send_probe+0x560/0x930 [ 134.656401][ T172] ieee80211_scan_work+0x4e9/0x1c40 [ 134.661645][ T172] cfg80211_wiphy_work+0x225/0x260 [ 134.666823][ T172] ? process_scheduled_works+0x96f/0x15d0 [ 134.672585][ T172] process_scheduled_works+0xa5d/0x15d0 [ 134.678195][ T172] ? worker_attach_to_pool+0x380/0x380 [ 134.683689][ T172] ? assign_work+0x3d2/0x5d0 [ 134.688325][ T172] worker_thread+0xa55/0xfc0 [ 134.692942][ T172] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 134.698883][ T172] ? _raw_spin_unlock+0x40/0x40 [ 134.703753][ T172] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 134.709692][ T172] kthread+0x2fa/0x390 [ 134.713774][ T172] ? pr_cont_work+0x560/0x560 [ 134.718481][ T172] ? kthread_blkcg+0xd0/0xd0 [ 134.723088][ T172] ret_from_fork+0x48/0x80 [ 134.727529][ T172] ? kthread_blkcg+0xd0/0xd0 [ 134.732133][ T172] ret_from_fork_asm+0x11/0x20 [ 134.736942][ T172] [ 134.740546][ T172] Kernel Offset: disabled [ 134.744973][ T172] Rebooting in 86400 seconds..