last executing test programs: 19.205200065s ago: executing program 0 (id=49): r0 = syz_usb_connect(0x2, 0x4e, &(0x7f0000000500)=ANY=[@ANYBLOB="12010002ff000040cd06310100010102030109023c00010100a0320904000006ff00000007050102400000070502024000000705040240000007050602400000070581034000010705880240"], &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=@ipv6_deladdr={0x2c, 0x15, 0x1, 0x70bd29, 0x25dfdbfd, {0xa, 0x1f, 0x22}, [@IFA_LOCAL={0x14, 0x2, @private0}]}, 0x2c}, 0x1, 0x0, 0x0, 0x804}, 0x20004840) syz_usb_ep_write(r0, 0x88, 0xfffffffffffffebe, &(0x7f0000000580)="02c0e5db37065ae2a1e12a5d97536f0ec800ce5f58753f01a2da60238fdddfe68111cabeff08a03ebc3a5746f2c258f43bff13e494f8e527d18d984bfd8bd882952a13d60c9ed5fc0ceb3f5348c5e49ff7530ef44c8149c792f8c95ff944e5b384586e29ee432d34d71cd03b127428347545ebffe973cdbdf67c31c57df2fc6fa0d55e24c36a434d399615fe1ed5c19b87a44d6b5003c93c92") syz_usb_ep_write(r0, 0x6, 0x0, 0x0) 15.977778933s ago: executing program 0 (id=58): syz_emit_ethernet(0x4a, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x3c, 0x1, @dev={0xfe, 0x80, '\x00', 0x26}, @local, {[], {{0xdc05, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) r0 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0x3751, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000000)={r0, r0, r0}, 0x0, 0x0, 0x0) 15.641279881s ago: executing program 0 (id=62): r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000001000)=ANY=[@ANYBLOB="1201000200000040501d4d610001000000010902200001010080320904000002ff00000007050102"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000100)={0x20, 0x90069109b15ef6c8, 0x1e, "4d61501d0100000000000000100000000000800700000000000038040000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) 13.526115612s ago: executing program 0 (id=77): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x810, &(0x7f0000000000)={[{@errors_remount}, {@grpquota}]}, 0x8, 0x4fe, &(0x7f0000000a40)="$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") syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000280)='./bus\x00', 0x3c9c9b, 0x0, 0x0, 0x0, &(0x7f0000000140)) mount$overlay(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f0000000b80), 0x4008, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) removexattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=@known='system.posix_acl_default\x00') 12.651707323s ago: executing program 0 (id=78): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/nfsv4leasetime\x00', 0x1, 0x0) write(r0, &(0x7f00000001c0)='\x00', 0x1) 11.751379355s ago: executing program 0 (id=82): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_X2APIC_API(r1, 0x4068aea3, &(0x7f0000000080)) 11.167014629s ago: executing program 32 (id=82): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_X2APIC_API(r1, 0x4068aea3, &(0x7f0000000080)) 4.479116362s ago: executing program 1 (id=111): syz_mount_image$jfs(&(0x7f0000000040), &(0x7f0000000140)='./file0\x00', 0xa10008, &(0x7f0000000240)=ANY=[@ANYBLOB="696f636861727365743d63703836302c00bc03aec574fed94bec499f0537c696426fdc67c6064116a1d440ff5fe2d962d2c447be725f56d4e75439aa7b6b3335160e6d0e54038503688fda7affa628c6dff93410047f9921e3c689e5bbc5b8add23a556fb41b5d09d7136e86d6829d6bdf235dec41447d9dcb847e3ebb1e202f0a45a2b27f0309ab31190229ffdf6045cbbc8f3b1a3e9292b32577b5953cc7d1715bf2dd56acedc52ad83c81000000000000000000"], 0x1, 0x6303, &(0x7f0000000340)="$eJzs3UuPHFfZB/Cn+jYXv3GsLKK8FkKTxFxCiK/BGAIkWcCCDQvkLbI1mUQWDiDbICey8ESzYcGHACGxRIglKz5AFmzZ8QGwZCOBskqhmj5nXNOZdo/Hma4en99Pmql6+lRNn/K/qy+uqj4BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMQPf/Djc1VEXPlVuuFExP9FP6IXsdLUaxGxsnYiLz+IiBdiuzmej4jhUkSz/vavZyNej4iPj0fcf3Bnvbn5/D778f0//+MPPzn2o7//aXjmv3+51X9j2nK3b//2P3+9+2TbDAAAAKWp67qu0sf8k+nzfa/rTgEAc5Ff/+sk365euHpzwfqjVqvV6iNYt9V7u9suImKzvU7znsHheAA4Yjbjk667QIfkX7RBRBzruhPAQqu67gCH4v6DO+tVyrdqvx6sjdvzuSC78t+sdq7vmDadZfIck3k9vraiH89N6c/KnPqwSHL+vcn8r4zbR2m5w85/XqblPxpf+lScnH9/Mv8JKf/l7d9HOv/envmXKuc/2F/+Y5t9+QMAAAAAwALL//9/ouPjv0sH6fwBDiI86vjv2kH6AAAAAAAAAAAL4EnH/9th/D8AAABYWM1n9cbvjj+8bdp3sTW3X64inplYHihMulhmtet+AAAAAAAAAAAAAEBJBuNzeC9XEcOIeGZ1ta7r5qdtsn5cT7r+UVf69kPJun6SBwCAsY+PT1zLX0UsR8Tl9F1/w9XV1bpeXlmtV+uVpfx+drS0XK+0PtfmaXPb0mgfb4gHo7r5Y8ut9dpmfV6e1T7595r7GtX9fXRsPjoMHAAiYvxqdN8r0lOmrp+Nrt/lcDTY/58+9n/2o+vHKQAAAHD46rquq/R13ifTMf9e150CAOYiv/5PHhdQq9VqtVr99NVt9d7utouI2Gyv07xnMBw/ABwxm/FJ112gQ/Iv2iAiXui6E8BCq7ruAIfi/oM761XKt2q/HqTx3fO5ILvy36y218vr7zWdZfIck3k9vraiH89N6c/zc+rDIsn59ybzvzJuH6XlDpr/tFy7OsdoWv7Ndp7ooD9dy/n3J/OfcNj7/7xsRW/P/EuV8x88Vv59+QMAAAAAwALL//9/YqGO/44OujkzPer479qh3SsAAAAAAAAAHK77D+6s5+te8/H/L+yxnOs/n045/0r+Rcr59yby/+rEcv3W/L23H+b/7wd31v9461//n6f7zX8pz1TpkVWlR0SV7qkapOmTbN1nbQ37o+aehlWv39zD2s7fvx4bcXbXsr3071EP341r2+3ndrU3PR1ut9f9cfv5Xe2Dnfa8/oVd7cN0plO9kttPx3r8PK7HO9vtTdvSjO1fntFez2jP+fft/0XK+Q9aP03+q6m9mpg27n3U+8x+357udT9vXfvib84e/ubMtBX9nW1ra7bvpQ76s/1vcmwUv7y5ceP07au3bt04F2my69bzkSafs5z/MP3sPP+/PG7Pz/vt/fXeR6PHzn9RbMVgav4vt+ab7X1lzn3rQs5/lH5y/u+k9r33/6Oc//T9/9UO+gMAAAAAAAAAAAAAAACPUtf19iWib0XExXT9T1fXZgIA85Vf/+sk3z6vuj/n+1Orj3hdLVh/5lp/Wi9Wf9Tqo1i31Xt7s11ExN/a6zTvGX691x8DABbZpxHxz647QWfkX7D8fX/N9NSub/kFnnY3P/jwp1evX9+4cbPrngAAAAAAAAAAB5XH/1xrjf98qq7ruxPL7Rr/9e1Ye9LxPwd5ZmeA0SkDVX/OpyRt9Ub9Xmu48RejPT53e4Ti4c7co8b/Hsy4v+GM9tGM9qUZ7csz2ve80GPX6uP8X2yNd34qIk5ODL9ewvivk2PelyDv/y+1Hs9N/l+ZWK6df/37o5x/b1f+Z269/4szNz/48LVr7199b+O9jZ9dOHfu7IWLFy9dunTm3WvXN86Of3fY48OV889jX+f8KUPOP2cu/7Lk/L+UavmXJef/5VTLvyw5//x+T/5lyfnnzz7yL0vO/5VUy78sOf+vpVr+Zcn5v5pq+Zcl5//1VMu/LDn/11It/7Lk/E+nWv5lyfmfSfU+81857H4xHzn/fITL/l+WnH8+s0H+Zcn5n0+1/MuS87+QavmXJef/eqrlX5ac/zdSLf+y5Pwvplr+Zcn5fzPV8i9Lzv9SquVflpz/t1It/7Lk/L+davmXJef/RqrlX5ac/3dSLf+y5Py/m2r5lyXn/71Uy78sOf83Uy3/sjz8/v9FncmX2C9Kf8yYKWGm62cmAAAAAAAAAAAAAGDSPE4n7nobAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOB/7MCBAAAAAACQ/2sjVFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVWEHDgQAAAAAgPxfG6GqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqoKe3cbI8dd3wF87tFnBxIDIXVSQy6OCSFxcmc78QNtigmPDU8lEAp9iO36zubAsR2fXQKNZEeBEgmjIkTb8KItINRGqiqsihe0ApQXqFWlStC+oG8QFSpSoyqggFSprYCrdub//9/u3tzunW/vvDvz+Uj2z7c7O/Of2f/O7e/O3x0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAaHbLG2Y/OZRlWeNP/tfWLHtR49+bJ7fmt732ao8QAAAAWKuf53+/cF264dAKHtS0zD++8ttfXVhYWMjeP/LHY59bWEh3TGbZ2KYsy++LLv/gA0PNywRPZhNDw01fD3fZ/EiX+0e73D/W5f7xLvdv6nL/RJf7lxyAJTYXP4/JV7Yz/+fW4pBm12dj+X07Sx715NCm4eH4s5zcUP6YhbHj2Vx2MpvNpluWL5Ydypf/+i2Nbb01i9sabtrW9sYM+cnjx+IYhsIx3tmyrcV1Rj96fTb50588fuwvzz1/Y1ntehha1leM8/YdjXF+PNxSjHUo25SOSRzncNM4t5c8JyMt4xzKH9f4d/s4X1jhOEcWh7mh2p/ziWw4//d38uM02vxjvXSctofb/ufWLMsuLg67fZkl28qGsy0ttwwvPj8TxYxsrKMxlV6aja5qnt6ygnnaqDM7W+dp+2siPv+3hMeNLjOG5qfpR0+MNz3vP1u4knkaNfZ6uddK+xzs9WulX+ZgnBffyXf6qdI5uDPs/+O3LT8HS+dOyRxM+900B3d0m4PD4yP5mNOTMJQ/ZnEO7m5ZfiTf0lBen7ut8xycOvfIman5j37srrlHjp6YPTF7au/u3dN79+07cODA1PG5k7PTxd9XeLT735ZsOL0GdoRjF18Dr25btnmqLnxxfMn590pfhxMdXodb25bt9etwtH3nhjbmBbl0Thevjfc2DvrEpeFsmddY/vzcsfbXYdrvptfhaNPrsPR7SsnrcHQFr8PGMmfuWNl7ltGmP2VjWP57wdrm4NamOdj+fqR9Dvb6/Ui/zMGJMC++d8fy3wu2h/E+tWu170dGlszBtLvh3NO4Jb3fnziQl7J5eVPjjmvGs/Pzs2fvfuzouXNnd2ehbIiXNc2V9vm6pWmfsiXzdXjV8/XQ3Cufuqnk9q3hWE3c1fhrYtnnqrHMPXd3fq7y727lx7Pl1j1ZKD220cez7Lt543iOZ9nnv/XEg994/PNvWPZ4NvrNj0+t/b146kubzr9jy5x/Y9//i2J7aVVPjoyNFq/fkXR0xlrOx61P1Wh+7hrKt/3C1MrOx2Phz0afj6/vcD7e1rZsr8/HY+07F8/HQ91+2rE27c/nRJgnJ6c7n48by2zbs9o5OdrxfHxrqEPh+L8mdAqpL2qaO8vN27St0dGxsF+jcQut83Rvy/JjoTdrbOuZPVc2T2+/tVjXSNq7RRs1Tyfblu31PE0/+1pung51++nblWl/PifCvLh+b+d52ljm2XvWfu7cHP/ZdO4c7zYHx0bGG2MeS5MwP99nC5vjHLw7O5adzk5mM/m94/l8Gsq3tevelc3B8fBno8+V2zrMwdvblu31HEzfx5abe0OjS3e+B9qfz4kwL56+t/McbCzzxv29fe96e7glLdP03rX952vL/czrprbDtF5zZTSM81v7O/9strHMyQOr7TM7H6c7wy3XlByn9tfvcq+pmWxjjtO2MM7nDyx/nBrjaSzzuYMrnE+Hsiy78Oj9+c97w+9X/vb8d7/a8nuXst/pXHj0/h+/+Pg/rGb8AAy+XxRlS/G9ruk3Uyv5/T8AAAAwEGLfPxxqov8HAACAyoh9f/xf4Yn+HwAAACoj9v2joSY16f+3vfH5uV9cyFIyfyGI96fD8ECxXMy4ToevJxcWNW6//8uz//33F1a27eEsy372wB+ULr/tgTiuwmQY5+U3td6+xFfvWtG2jzx0IW23Ob/+hbD+uD8rnQZlEdzpLMu+ft2n8+1MfuBSXp994EheH7z41JONZV44WHwdH//cy4rl/yyEfw8dP9ry+OfCcfhhqNNvKz8e8XFfufSa7fvft7i9+LihHdfmu/30w8V64+fkfObJYvl4nJcb/zc+9cxXGss/9qry8V8YLh//M2G9Xw71f19RLN/8HDS+jo/7RBh/Y3uNGRofd/eXvlk6/sufLJY/8+ZiuSOhxu3fHr7e+ebn55qP12NDR1v2K3tLsVzc/vR3/yi/P64vrr99/BOHL7Ucj/b58ey/FuuZals+3h63E/1d2/Yb62men3H7z/zhkZbj3G37lx987hWN9bZv/8625c48eke+/cX1tX5i059/4tOl24vjOfQ3Z1r259C7w+s4bP/ph8N8DPf/3+Vife2frnDk3a3nn7j8F7ZeaNmf6K0/LbZ/+XUn8rppYvOWa1704msv3tw4dln2nU3F+rpt/8RfnG4Z/xdvKI5HvD9m9Nu3v5y4/bMf2XXq9Pz5uZl0VB+/Lv/snLcX44njvS6cW9u/Pnz63Adnz05OT05n2WR1P0Lvin0p1B8X5WLnpReWnEHveCg8nzf96de33PYvn4q3/9t7i9svva34vvXqsNxnwu1bw/O3uu0v9fQtN+Sv76FnwwgXln5e8Fps3/lfB1a0YNj/9vcFcb6fefkH8+PQuC//vhFf12sc//dnivV8LRzXhfDJzDtuWNxe8/LxsxEuvad4va/5+IXTXHxe/yo83+/4YbH+OK64v98P72O+ua31fBfnx9cuDLevP/8Uj4vhfJJdLO6PS8XjfemFG0qHFz+HJLt4Y/71Z9N6blzVbi5n/qPzUyfnTp1/bOrc7Py5qfmPfuzwI6fPnzp3OP8sz8Mf6vb4xfPTlvz8NDO7754sP1udLso6u9rjP/PQsZn907fNzB4/ev74uYfOzJ49cWx+/tjszPxtR48fn/1It8fPzdy3e8/Bvfv37DoxN3PfgYMH9x7cNXfqdGMYxaC62Df94V2nzh7OHzJ/3z0Hd9977z3Tux45PTN73/7p6V3nuz0+/960q/Ho3991dvbk0XNzj8zump/72Ox9uw/u27en66cBPnLm+Pzk1Nnzp6bOz8+enSr2ZfJcfnPje1+3x1NN8/9evJ9tN1R8EF/2rjv3pc9nbfjyE8uuqlik7QNEnw+fRfNPLzlzYCVfx75/LNSkJv0/AAAA1EHs+8dDTfT/AAAAUBmx798UaqL/BwAAgMqIff9EqElN+v/K5f+3XVjR9uX/By//n8n/y/+37c8V5//f02/5/+J8If/fG2vN38v/B/L/8v/y//L/8v/0QL/l/2PfvznLatn/AwAAQB3Evn9LqIn+HwAAACoj9v3XhJro/wEAAKAyYt//olCTmvT/8v/y//L/8v/y/+XbX0X+f1O2AvL/G0P+v7Oa5/+Huw5A/n8qq1f+/2Ivx1/f/H/RQ8n/U6bf8v+x739xqElN+n8AAAColP8svzn2/deGmuj/AQAAoDJi339dqIn+HwAAACoj9v1bQ01q0v/L/8v/y//L/8v/l2/f9f8Hk/x/ZzXP/3cn/+/6//L/rv9PT/Vb/j/2/S8JNalJ/w8AAAB1EPv+l4aa6P8BAACg/4xe2cNi3/+yUJMl/f8VbgAAAAC46mLff33WFgSvye//5f/l/+X/5f/l/8u3v/L8/0gm/98/5P87k//vQv5f/l/+X/6fnuq3/H/e92cT2ctDTWrS/wMAAEAdxL7/hlAT/T8AAABURuz7fynURP8PAAAAlRH7/m2hJjXp/+X/K5n/bzxN8v/y/8tuvwL5//xk3T/5/3W9/v9sCGzK/6+Q/H9n8v9dyP/L/8v/y//TU/2W/499/42hJjXp/wEAAKAOYt9/U6iJ/h8AAAAqI/b9vxxqov8HAACAyoh9//ZQk5r0//L/fZ7/j8lR1/+X/1/M/z8q/1+oSf7f9f9XSf6/M/n/LuT/5f/l/+X/6al+y//Hvv8VoSY16f8BAACgDmLf/8pQE/0/AAAAVEbs+28ONdH/AwAAQGXEvn8y1KQm/b/8f5/n/6/s+v/y/9XO/6/q+v83y//L/9eM/H9n8v9dyP/L/8v/y//TU/2W/499/y2hJjXp/wEAAKAOYt+/I9RE/w8AAACVEfv+W0NN9P8AAABQGbHv3xlqUpP+X/5f/l/+v9r5/7Lty//L/1eZ/H9n8v9dyP/L/8v/y//TU/2W/499/6tCTWrS/wMAAEAdxL7/tlAT/T8AAABURuz7Xx1qov8HAACAyoh9/+2hJjXp/+X/5f/l/+X/a57/vyD/Xy3y/53J/3ch/9+L/Pw75P/l/+X/ifot/x/7/teEmtSk/wcAAIA6iH3/HaEm+n8AAACojNj33xlqov8HAACAyoh9/65Qk5r0//L/8v/y//L/Nc//u/5/xfRB/n9iLduX/5f/r0D+3/X/5f/l/0muVv4/y8rz/7HvvyvUpCb9PwAAANRB7PvvDjXR/wMAAMAA2lx6a+z7p0JN9P8AAABQGbHvnw41qUn/L/8v/y//X+v8/8VV5/9vXlyv/H9B/r+/rFv+fzhz/X/5f/n/LgYt/9/+28H+yP+Pyf9TKVeU//9K6ap6cv3/2PfvDjWpSf8PAAAAdRD7/j2hJvp/AAAAqIzY9+8NNdH/AwAAQGXEvv+eUJOa9P/y/xuX/x/N5P/l//su/+/6//L/ldMH1/9f0/YHL/8fd1H+X/5/8PL/vR6/6//L/7PUFeX/y/Uk/x/7/ntDTWrS/wMAAEAdxL5/X6iJ/h8AAAAqI/b9+0NN9P8AAABQGbHvPxBqUpP+X/7f9f/l/+X/5f/Lty//P5jk/ztz/f8u5P/l/+X/5f/pqX7L/8e+/2CoSU36fwAAAKiD2Pe/NtRE/w8AAACVEfv+Xwk10f8DAABAZcS+/1dDTWrS/8v/y//L/8v/y/+Xb1/+fzDJ/3cm/9+F/L/8v/y//D891W/5/9j33xdqUpP+HwAAAOog9v2/Fmqi/wcAAIDKiH3/60JN9P8AAABQGbHvPxRqUpP+X/5/hfn/zZ3XJ//fOn75//L5If8v/y//v/7k/zuT/+9C/l/+v4L5/yfk/7mK+i3/H/v+14ea1KT/BwAAgDqIff/9oSb6fwAAAKiM2Pe/IdRE/w8AAACVEfv+N4aa1KT/l/93/X/5f/l/+f/y7cv/Dyb5/87k/7uQ/5f/r2D+fwOu/z8eqvw/S6w0/x/fV613/j/2/W8KNalJ/w8AAAB1EPv+N4ea6P8BAACgMmLf/5ZQE/0/AAAAVEbs+98aalKT/l/+X/5f/l/+X/6/fPvy/4NJ/r8z+f8u5P/l/wck///dksdfxfx/zvX/KdNv1/+Pff+vh5rUpP8HAACAOoh9/wOhJvp/AAAAqIzY978t1ET/DwAAAJUR+/63h5rUpP/vXf5/XP6/jfy//H/7/JD/l/+X/19/8v+dDVj+/+fXhtvl/wvy/+s0/snPFgd+gPL/ZUrz/z9YLv+/sKn98fL/rId+y//Hvv8doSY16f8BAACgDmLf/85QE/0/AAAAVEbs+98VaqL/BwAAgMG3UMQHYt//G6EmNen/Xf+/MY7F9PI65///Wv5f/l/+X/5f/n99yf93NmD5f9f/byP/39/j78v8v+v/c5X1W/4/9v3vDjWpSf8PAAAAdRD7/gdDTfT/AAAAUBmx739PqIn+HwAAACoj9v3vDTWpSf8v/+/6//L/A57/n8yyTP5f/p9E/r8z+f8u5P/l//st//8f8v8Mtn7L/8e+/6FQk5r0/wAAAFAHse9/X6iJ/h8AAAAqI/b9vxlqov8HAACAyoh9//tDTWrS/8v/D0r+f1L+X/7f9f/b9kf+X/6/jPx/Zxuf/1/dGyr5f/n/QR6/6//L/7NUv+X/Y9//gVCTlX+7mljxkgAAAMBVEfv+3wo1qcnv/wEAAKAOYt//26Em+n8AAACojNj3/06oSU36f/n/Qcn/u/5/Jv8v/9+2P/L/8v9lNi7/H8888v+u/y//H8n/y//L/9Ou3/L/se//3VCTmvT/AAAAUAex73841ET/DwAAAAOh7P9kt4t9/+FQk+79/6r/Tx8AAABwdcS+/0ioSU1+/y//L/8v/9+n+f8/2fHP3/v2O4/slv+X/5f/X5UNvf5/48Xv+v9t+f+HWzLK8v/y//L/8v9nNsn/19k65P/Hmm9cbf4/9v1HQ01q0v8DAABAHcS+//dCTfT/AAAAUBmx7z8WaqL/BwAAgMqIff9MqElN+v+U/w/xOPl/+X/5/z7J/6/y+v9DYTv9kP+Px0P+v1XP8v/xpCv/X2pD8//vW8yJy/+v9vr/46W3yv+vOP+f51/l//tr/PL/rv/PUr3K/48s5v9brDb/H/v+2VCTmvT/AAAAUAeh7x8+XtTFO/T/AAAAUBmx7z8RaqL/BwAAgMqIff8HQ01q0v+7/r/8v/x/NfL/rv+/uHzl8/+u/9+R/H9n/ZP/Lyf/7/r/gzx++X/5f5Zah+v/t1ht/j/2/XOhJjXp/wEAAKAOYt//oVAT/T8AAABURuz7Pxxqov8HAACAyvh/9u7k2fL6rOP4uXi76C4WllVWuXAhVS4t/wFZwFpXrly4cWMVZSkO4AAO3TiPOE84gLOoOIAiTjgCCk4omUNGkpA5ISQhJKlO0f08T5977xnu7Xtu39/5Pq/XIo+0IeembbvzSfe7vrn7vzFuabL/9f/6f/2//l//v/jzL/X/u1f+dfX/20H/v5r+fw39v/5f/6//Z6Om1v/n7v+muKXJ/gcAAIAOcvffFrfY/wAAADCM3P3fHLfY/wAAADCM3P3fErc02f/6f/3/sP3/zfr/ZZ+v//f+/8j0/6vp/9fYov7/C8/q/6f29ev/9f8cNLX+P3f/t8YtTfY/AAAAdJC7/9viFvsfAAAAhpG7//a4xf4HAACAYeTuvyNuabL/9/X/O7Oe/X9mvPr/kfp/7/8v/Xz9v/5/ZNe2/7/71Z/59P/6f+//B/2//l//z35T6/9z93973NJk/wMAAEAHufu/I26x/wEAAGAYufu/M26x/wEAAGAYufu/K25psv+P9/7/7ij9f9lA/7+TLbr+X/+//8eH/l//r/8/ed7/X61T/3/7szfc9uIjX/zoUT5f/6//1//r/9msqfX/ufvvjFua7H8AAADoIHf/XXGL/Q8AAADDyN3/3XGL/Q8AAABDeOHLZ7X7vyduabL/j9f/D/P+f/H+v/7/0jfo//X/+v+tpf9frVP/fzWfr//X/1/F11+/DOr/9f8cNLX+P3f/98YtTfY/AAAAdJC7//viFvsfAAAAhpG7/3zcYv8DAADAMHL3X4hbmux//f/J9/+f1f9vff9/Zqb/v0z/r/+fPv3/avr/NfT/+n/v/+v/2aip9f+5+++OW5rsfwAAAOggd//3xy32PwAAAAwjd/8PxC32PwAAAAwjd/8Pxi1N9r/+3/v/+n/v/+v/F3++/n876f9X0/+vof8/bj9/Rv+v/9f/M++I/f8rK37a3kj/n7v/h+KWJvsfAAAAOsjd/8Nxi/0PAAAAw8jd/yNxi/0PAAAAw8jd/6NxS5P9r//X/+v/9f/6/8Wfr//fTvr/1SbT/+/sLvxm/f/W9//e/9f/6//ZY2rv/+fu/7G4pcn+BwAAgA5y9/943GL/AwAAwDBy9/9E3GL/AwAAwDBy9/9k3NJk/+v/9f/6f/2//n/x56/q/x+d+/r0/9Oy0f5/R//v/X/9v/5f/6//5zim1v/n7v+puKXJ/gcAAIAOcvffE7fY/wAAADCM3P0/HbfM7f/9fxYVAAAA2C65+38mbmny+/+L+/8r/3v9/+Fco/5/V/+v/7/8f+/L/4r6/5X9/y3e/+/J+/+rre//82dU/b/+X/+/kf5/tjNK/39u3d+v/2eRqfX/uft/Nm5psv8BAACgg9z9Pxe32P8AAAAwjNz9Px+32P8AAAAwjNz9vxC3NNn/3v/fqv7f+/+9+v/7z3j//5Ipvv8/u+b9/67+/5D0/6t5/38N/b/+f1Lv/3/pdbPZZPp/7/9zVabW/+fu/8W4pcn+BwAAgA5y9/9S3GL/AwAAwHaY/7MDSx7xz93/y3GL/Q8AAADDyN3/K3FLk/0/eP9/87J/mv5f/z///TXR/n/p+//6/8t69f/e/z8s/f9q+v819P8n0c/vDtb/37fs7998/3/09//P6/+ZmD39/2NXvv20+v/c/b8atzTZ/wAAANBB7v574xb7HwAAAIaRu//X4hb7HwAAAIaRu//X45Ym+//E+/9zyz/b+//6f/2//l//r//fNP3/avr/Nfb3/6/+R0P9v/f/T+39/6P3/97/Z2r29P9zTqv/z93/G3FLk/0PAAAAHeTu/824xf4HAACAYeTuvy9usf8BAABgGLn7749bmuz/wd//X0r/r/+f//7S/+v/F32+/n876f9X0/+v4f1//f9p9P/xA0D/z4im1v/n7v+tuKXJ/gcAAIAOcvf/dtxi/wMAAMAwcvf/Ttxi/wMAAMAwcvf/btzSZP/r/0+2/89v1//r/2f6f/2//v+aaNv/7yz6leigJf3/07de+Kq936L/1/8P2f8/f6Jfv/f/9f8cNIn+/+KV/3SZu//34pYm+x8AAAA6yN3/+3GL/Q8AAADDyN3/B3GL/Q8AAADDyN3/h3FLk/0/1/9ncqH/9/6//l//r//X/2+ttv3/IXn/f7WX49+v/n/U/v9kv379v/6fgybR/8/9de7+B+KWJvsfAAAAOsjd/0dxi/0PAAAAw8jd/8dxi/0PAAAAw8jd/ydxS5P97/3/Hv3/9TP9v/5f/6//70H/v5r+fw3v/+v/9f/6fzZqav1/7v4H45Ym+x8AAAA6yN3/p3GL/Q8AAADDyN3/Z3GL/Q8AAADDyN3/53FLk/2v/1/S/8/G6v+9/6//n+n/9f9N6P9XO+3+f9Gvl/OuSf//0IovYFH/f/F6/f+W9/9nD/n36//1/2ze1Pr/3P1/Ebc02f8AAADQQe7+h+IW+x8AAACGkbv/4bjF/gcAAIBh5O7/y7ilyf7X//d4/1//r/+f6f/1/03o/1db3P9fd/CbvP/v/f+B+n/v/+v/OT1T6/9z9/9V3NJk/wMAAEAHufsfiVvsfwAAABhG7v6/jlvsfwAAABhG7v5H45Ym+1//r//X/+v/9f+LP1//v51Orv+fDdz/L6D/1//r//X/+n82YGr9f+7+v4lbmux/AAAA6CB3/9/GLfY/AAAADCN3/9/FLfY/AAAADCN3/9/HLU32/2n1/7fo//X/+n/9v/6/vlf1/5vj/f/V9P9r6P/1//p//T8bNbX+P3f/P8QtTfY/AAAAdJC7/7G4xf4HAACAYeTu/8e4Zcn+P7/hP4cHAAAAnLzc/f8UtzT5/X/v/+v/9/b/s9nE+//8f1L9v/5/hP7/7Ez/v3H6/9X0/2vo/8fs/6+bDdT/n1v69+v/maKp9f+5+/85bmmy/wEAAKCD3P3/ErfY/wAAADCM3P3/GrfY/wAAADCM3P3/Frc02f/6f/2/9//H6f8ff2nxj0f9/2T7//pe1f9vjv5/Nf3/Gvr/Mfv/0d7/X/KjWv/PFE2t/8/d/3jc0mT/AwAAQAe5+5/Y/3uo9j8AAAAM44lL/3h29mTcYv8DAADAMHL3/3vc0mT/6//1//r/cfp/7/9fpv/v7ZT6/51Nfb7+X/+v/9/er/+a9f9L6P+Zoqn1/7n7/yNuabL/AQAAoIPc/U/FLfY/AAAADCN3/9Nxi/0PAAAAw8jd/59xS5P9r//X/+v/t7P/P6v/H77/z69M/380U3n//6abvvKZfZ//wJ1PfsXaz9f/6//1/9v79ev/9f8cNLX+P3f/f8UtTfY/AAAAdJC7/7/jFvsfAAAAhpG7/3/iFvsfAAAAhpG7/3/jlib7/2D/f2Z2uVC9bFH/H42a/n+O/n/v16//X/zjw/v/+n/v/5+8qfT/3v+/uq9/av3/Hfp//f9J9f83Hvz79f+MaGr9f+7+Z+KWJvsfAAAAOsjd/39xi/0PAAAAE7boT2Ivl7v//+MW+x8AAACGkbv/2bilyf73/r/+X/+v/9f/L/78df1/0v9Pi/5/Nf3/Gt7/1/83ev8/fv2rn6eq//88/T+bM7X+P3f/a+KWJvsfAAAAOsjd/9q4xf4HAACAYeTuf13cYv8DAADAMHL3vz5uabL/9f8b7f93579N/6//3/fjQ/8/WP/v/f9p0v+vpv9fQ/+v/2/U/+/n/X9OwtT6/9z9b4hbmux/AAAA6CB3/xvjlkPt/3Mn9FUBAAAAm5S7/01xi9//BwAAgGHk7n9z3NJk/0+1/z+/nf3/Hvr/qfT/X6f/3/f5+n/9/8j0//kr+mL6/zX0/0ft51+e/wv9v/5f/89+U+v/c/c/F7c02f8AAADQQe7+t8Qt9j8AAAAMI3f/W+MW+x8AAACGkbv/bXFLk/0/1f5/S9//32OK/f/OrGP/7/3/S3+9s6P/1/+3oP9fTf+/xmb7/7sb9P976P/1//r/Zu5a/1Ps1Pr/3P1vj1ua7H8AAADYVl/zZd/w3GH/ubn73xG32P8AAAAwjNz974xb7H8AAAAYRu7+5+OWJvtf/9+r/+/5/r/+3/v/+v9O9P+r6f/X8P6//l//r/9no6bW/+fuf1fcMjf8do/87xIAAACYktz9745bmvz+PwAAAHSQu/89ccuB/X/xkH+qHQAAAJia3P0vxC1Nfv//2P3/bEf/f5L9/0z/r//X/+v/9f9Hof9f7Zj9/8Ud/f9o/f+Z+b847X7+uE7769f/6//Z69wE+//c/e+NW5rsfwAAABjUnv9GIXf/++IW+x8AAACGkbv//XGL/Q8AAADDyN3/gbilyf73/v/E+/+rev//XP1P+v/m/f89Zxd+vv5f/z8y/f9SXxC30/v/Fz9f/38kp93Pb/vXr//X/3PQ1Pr/3P0fjFua7H8AAADoIHf/h+IW+x8AAACGkbv/w3GL/Q8AAADDyN3/kbilyf7X/4/Y/3v/X/+/+vPH6f+/6IYLT33t1z/8oP6fK65l/58/Frak/7/kmO//b1v/f5TPv/fSP+r/9f+n1/9/9e6W9v83xtX/s8jU+v/c/R+NW5rsfwAAAOggd/+LcYv9DwAAAMPI3f+xuMX+BwAAgGHk7n8pbmmy/7eq//8S/f/I/X9+X59C/39h+/r/bIq79//e/9f/H+T9/9X0/2vo//X/3v/3/j8bNbX+P3f/x+OWJvsfAAAAOsjd/4m4xf4HAACAYeTu/2TcYv8DAADAMHL3vxy3NNn/W9X/e/9/6P4/XU3/n5/v/X/9/0z/357+f87uwW/S/6+h/9f/6//1/2zU1Pr/3P2filua7H8AAADoIHf/K3GL/Q8AAADDyN3/6bjF/gcAAIBh5O7/TNzSZP/r//X/I/T/x3z//3T6/1d/utH/6//1/xun/19N/7+G/l//377/v1X/z0ZNrf/P3f+5AAAA//8L9mN4") r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000000)=""/50, 0x32) getdents64(r0, 0xfffffffffffffffe, 0x29) 3.180937623s ago: executing program 1 (id=116): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000006a00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000000)="1408000000000000b89e08dc88a8", 0x0, 0x1000fe2, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 2.715372594s ago: executing program 3 (id=119): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local, @random="a538ae464632", @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x7, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {0x12, 0x0, 0x0, @multicast1}}}}}, 0x0) sendto$packet(r0, &(0x7f0000000000)="114353012008ba00000037510800", 0x59f, 0x4008015, &(0x7f00000000c0)={0x11, 0xe5, r1, 0x1, 0x7}, 0x14) 2.662331835s ago: executing program 2 (id=120): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000002080)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) setsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, 0x0, 0x0) 2.46268542s ago: executing program 2 (id=121): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x3, 0x11, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x81}, [@call={0x85, 0x0, 0x0, 0x27}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}]}, &(0x7f0000000080)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f00000003c0)="c274386d178550cb864bd57221bc", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.399806442s ago: executing program 3 (id=122): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)={0x1c, r1, 0x1, 0x70bd25, 0x25dfdbf8, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x24000850}, 0x20044004) 2.227282906s ago: executing program 2 (id=123): bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) 2.161867467s ago: executing program 3 (id=124): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x1400c, &(0x7f0000000840)={[{@stripe={'stripe', 0x3d, 0x9}}, {@init_itable}, {@nojournal_checksum}]}, 0x3, 0x465, &(0x7f0000001340)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x109342, 0x0) pwrite64(r0, &(0x7f0000000300)='2', 0x1, 0x8080c60) fallocate(r0, 0x3, 0x3f, 0x8000c62) 2.004265162s ago: executing program 2 (id=125): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0xd) syz_emit_ethernet(0x52, &(0x7f0000000300)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x5a}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x1c, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0x2, 0x0, 0x0, 0x1000, {[@fastopen={0x1e, 0x8, "31c77bfa4cd0"}]}}}}}}}}, 0x0) 1.67876389s ago: executing program 3 (id=126): r0 = syz_open_dev$vcsa(&(0x7f0000000300), 0x4, 0x102) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$VT_DISALLOCATE(r1, 0x5608) write$proc_mixer(r0, 0x0, 0x0) 1.677616999s ago: executing program 2 (id=127): syz_mount_image$jfs(&(0x7f0000000040), &(0x7f0000000380)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x8, &(0x7f0000002740)=ANY=[], 0x1, 0x6001, &(0x7f0000006400)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2141, 0x59) truncate(&(0x7f0000000040)='./file1\x00', 0x8800000) pwrite64(r0, &(0x7f0000000140)="f6", 0xffffff07, 0x8000c61) 1.64974128s ago: executing program 1 (id=128): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x1, 0x1000, 0x2000, &(0x7f0000000000/0x2000)=nil}) 1.184754501s ago: executing program 1 (id=129): socket$nl_xfrm(0x10, 0x3, 0x6) syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000300)='.\x02\x00', 0x2000800, &(0x7f0000000180)=ANY=[@ANYRES8=0x0, @ANYRES16, @ANYRES64=0x0, @ANYRES16, @ANYRES64=0x0, @ANYRESOCT=0x0, @ANYRES64=0x0, @ANYRESOCT=0x0, @ANYRES64, @ANYBLOB="4e73ffed029678b24acf42b62a7ebf0ffb61162fed3c98e178788da9fca15495406d3f16fdbb58655ddc297ab592ac65ca1826643d989c42b9bddbd085b521f64b0472f6f38f92d1ae5fadc698e12b1d1c3322aa0a569f173a7f0c5efb58ee54030117cb7332eead32d076b550fcb60f79238393af994228d7a115118cc0f31fed4a2660ca1e5a603e7901e4a8cf50c1a4572f243e082c4c17474de93de0f9c0423f83c4419c9822cb863ff586d84a5bd70d3e88ebee3838d094410049397ceceb46c2d3b7ea4a4923", @ANYRES64=0x0], 0x1, 0x2e0, &(0x7f0000000940)="$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") syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x380407b, 0x0, 0x1, 0x0, &(0x7f0000000140)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0) 904.454558ms ago: executing program 4 (id=83): r0 = syz_ublk_setup_io_uring(0x7449, &(0x7f0000000200)={0x0, 0x7723, 0x2, 0x2, 0x166}, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000340)=[0xffffffffffffffff], 0x1) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000400), 0x0) 710.328253ms ago: executing program 1 (id=130): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x16a002, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_TSC_KHZ_cpu(r2, 0xaea2, 0x40000007a921) 483.278898ms ago: executing program 3 (id=131): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) landlock_create_ruleset(0x0, 0x0, 0x0) personality(0x4100001) ppoll(0x0, 0x0, &(0x7f0000000140)={0x77359400}, 0x0, 0x0) 482.644968ms ago: executing program 4 (id=132): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x9a974000) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3000003, 0x204031, 0xffffffffffffffff, 0x6f7df000) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 172.780226ms ago: executing program 1 (id=133): r0 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001d80)=ANY=[@ANYBLOB="4c060000", @ANYRES16=r0, @ANYBLOB="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"], 0x64c}, 0x1, 0x0, 0x0, 0xc004}, 0x40001) r1 = socket$nl_generic(0x10, 0x3, 0x10) writev(r1, &(0x7f0000000200), 0x20) 15.236479ms ago: executing program 2 (id=134): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000010)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000050)='./proc/net/afs/rootcell\x00', 0x202, 0x188) write(r0, &(0x7f0000000070)='syz0:1', 0x6) 0s ago: executing program 3 (id=135): r0 = socket(0x10, 0x803, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000240)={'macsec0\x00', 0x1}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.202' (ED25519) to the list of known hosts. [ 83.022191][ T5763] cgroup: Unknown subsys name 'net' [ 83.162830][ T5763] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 84.802022][ T5763] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 86.625013][ T5780] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 86.634098][ T5786] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 86.641978][ T5786] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 86.665261][ T5786] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 86.685984][ T5786] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 86.695188][ T5786] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 86.700951][ T5788] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 86.710714][ T5786] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 86.715329][ T5788] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 86.738191][ T5783] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 86.746126][ T5788] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 86.754362][ T5783] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 86.762190][ T5783] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 86.770538][ T5783] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 86.778530][ T5783] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 86.785980][ T5783] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 86.796631][ T5790] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 86.804647][ T5790] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 86.811832][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 86.823054][ T5790] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 86.831693][ T5790] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 86.838913][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 86.847321][ T51] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 86.864881][ T5780] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 87.389210][ T5773] chnl_net:caif_netlink_parms(): no params data found [ 87.532648][ T5775] chnl_net:caif_netlink_parms(): no params data found [ 87.552540][ T5774] chnl_net:caif_netlink_parms(): no params data found [ 87.609012][ T5776] chnl_net:caif_netlink_parms(): no params data found [ 87.637664][ T5773] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.645454][ T5773] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.652721][ T5773] bridge_slave_0: entered allmulticast mode [ 87.660592][ T5773] bridge_slave_0: entered promiscuous mode [ 87.701994][ T5773] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.709254][ T5773] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.716879][ T5773] bridge_slave_1: entered allmulticast mode [ 87.723835][ T5773] bridge_slave_1: entered promiscuous mode [ 87.807344][ T5773] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.820557][ T5773] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.903312][ T5776] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.911547][ T5776] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.918869][ T5776] bridge_slave_0: entered allmulticast mode [ 87.926714][ T5776] bridge_slave_0: entered promiscuous mode [ 87.949960][ T5773] team0: Port device team_slave_0 added [ 87.956536][ T5775] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.963704][ T5775] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.971796][ T5775] bridge_slave_0: entered allmulticast mode [ 87.979571][ T5775] bridge_slave_0: entered promiscuous mode [ 87.998977][ T5776] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.006530][ T5776] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.013710][ T5776] bridge_slave_1: entered allmulticast mode [ 88.021259][ T5776] bridge_slave_1: entered promiscuous mode [ 88.029977][ T5773] team0: Port device team_slave_1 added [ 88.046418][ T5775] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.053658][ T5775] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.063245][ T5775] bridge_slave_1: entered allmulticast mode [ 88.071289][ T5775] bridge_slave_1: entered promiscuous mode [ 88.078185][ T5774] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.085591][ T5774] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.092793][ T5774] bridge_slave_0: entered allmulticast mode [ 88.100265][ T5774] bridge_slave_0: entered promiscuous mode [ 88.109887][ T5774] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.117365][ T5774] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.124732][ T5774] bridge_slave_1: entered allmulticast mode [ 88.131647][ T5774] bridge_slave_1: entered promiscuous mode [ 88.171080][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.178241][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.204352][ T5773] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.226936][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.233911][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.260417][ T5773] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.313835][ T5776] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.326868][ T5776] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.338557][ T5775] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.350438][ T5774] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.365760][ T5774] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.387791][ T5775] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.474355][ T5773] hsr_slave_0: entered promiscuous mode [ 88.484235][ T5773] hsr_slave_1: entered promiscuous mode [ 88.494134][ T5774] team0: Port device team_slave_0 added [ 88.506395][ T5776] team0: Port device team_slave_0 added [ 88.516439][ T5775] team0: Port device team_slave_0 added [ 88.524802][ T5774] team0: Port device team_slave_1 added [ 88.532375][ T5776] team0: Port device team_slave_1 added [ 88.576674][ T5775] team0: Port device team_slave_1 added [ 88.629439][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.636628][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.662983][ T5776] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.681555][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.688915][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.714978][ T5776] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.726923][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.733974][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.760014][ T5774] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.800986][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.808408][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.834718][ T5774] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.859594][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.866665][ T5777] Bluetooth: hci3: command tx timeout [ 88.866854][ T5777] Bluetooth: hci1: command tx timeout [ 88.867382][ T5780] Bluetooth: hci0: command tx timeout [ 88.877671][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.909568][ T5775] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.939430][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.946513][ T5780] Bluetooth: hci2: command tx timeout [ 88.952285][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.978439][ T5775] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.039200][ T5776] hsr_slave_0: entered promiscuous mode [ 89.045814][ T5776] hsr_slave_1: entered promiscuous mode [ 89.051983][ T5776] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.059907][ T5776] Cannot create hsr debugfs directory [ 89.138632][ T5774] hsr_slave_0: entered promiscuous mode [ 89.146154][ T5774] hsr_slave_1: entered promiscuous mode [ 89.152614][ T5774] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.160498][ T5774] Cannot create hsr debugfs directory [ 89.242869][ T5775] hsr_slave_0: entered promiscuous mode [ 89.249414][ T5775] hsr_slave_1: entered promiscuous mode [ 89.256219][ T5775] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.263799][ T5775] Cannot create hsr debugfs directory [ 89.372409][ T5773] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 89.391861][ T5773] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 89.440281][ T5773] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 89.450489][ T5773] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 89.686453][ T5776] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 89.696540][ T5776] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 89.707427][ T5776] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 89.718355][ T5776] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 89.786744][ T5774] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 89.806316][ T5774] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 89.824390][ T5774] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 89.850347][ T5774] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 89.909116][ T5775] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 89.921815][ T5775] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 89.946659][ T5775] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 89.960769][ T5773] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.976849][ T5775] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 90.040168][ T5773] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.062612][ T147] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.070037][ T147] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.099017][ T2942] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.106323][ T2942] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.246666][ T5774] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.265220][ T5776] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.283734][ T5773] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 90.330750][ T5776] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.372084][ T5774] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.387999][ T2942] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.395195][ T2942] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.424066][ T2942] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.431256][ T2942] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.460084][ T5775] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.471958][ T2942] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.479178][ T2942] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.543415][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.550635][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.590674][ T5774] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 90.622277][ T5775] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.695692][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.702901][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.768371][ T34] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.775672][ T34] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.869452][ T5773] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.949923][ T5780] Bluetooth: hci0: command tx timeout [ 90.956250][ T5790] Bluetooth: hci1: command tx timeout [ 90.961825][ T5790] Bluetooth: hci3: command tx timeout [ 91.030568][ T5790] Bluetooth: hci2: command tx timeout [ 91.131210][ T5774] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.149173][ T5773] veth0_vlan: entered promiscuous mode [ 91.186116][ T5773] veth1_vlan: entered promiscuous mode [ 91.270608][ T5776] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.312864][ T5774] veth0_vlan: entered promiscuous mode [ 91.328750][ T5773] veth0_macvtap: entered promiscuous mode [ 91.361780][ T5773] veth1_macvtap: entered promiscuous mode [ 91.373467][ T5774] veth1_vlan: entered promiscuous mode [ 91.417407][ T5775] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.470830][ T5774] veth0_macvtap: entered promiscuous mode [ 91.488616][ T5776] veth0_vlan: entered promiscuous mode [ 91.498445][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.512286][ T5774] veth1_macvtap: entered promiscuous mode [ 91.530545][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.551152][ T5776] veth1_vlan: entered promiscuous mode [ 91.566375][ T5773] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.576963][ T5773] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.589305][ T5773] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.598398][ T5773] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.628394][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.639743][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.653180][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.724208][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.738706][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.751644][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.763545][ T5774] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.773547][ T5774] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.782505][ T5774] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.791371][ T5774] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.807473][ T5776] veth0_macvtap: entered promiscuous mode [ 91.842329][ T5776] veth1_macvtap: entered promiscuous mode [ 91.851854][ T5775] veth0_vlan: entered promiscuous mode [ 91.929574][ T5775] veth1_vlan: entered promiscuous mode [ 91.942928][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.954261][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.964839][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.975650][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.990100][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.018820][ T2931] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.036847][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.048112][ T2931] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.054404][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.069774][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.081337][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.085185][ T27] cfg80211: failed to load regulatory.db [ 92.096597][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.146258][ T34] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.154121][ T34] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.163293][ T5776] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.175501][ T5776] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.184224][ T5776] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.193585][ T5776] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.238577][ T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.253935][ T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.272286][ T5775] veth0_macvtap: entered promiscuous mode [ 92.336332][ T5775] veth1_macvtap: entered promiscuous mode [ 92.381667][ T2931] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.398440][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.409488][ T2931] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.412211][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.428372][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.438877][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.448841][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.459409][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.472147][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.504739][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.512614][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.568058][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.587208][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.597259][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.607957][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.618166][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.630310][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.642294][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.683602][ T5775] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.693163][ T5775] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.702843][ T5775] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.711974][ T5775] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.728822][ T147] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.751028][ T147] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.961447][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.971916][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.024970][ T5790] Bluetooth: hci3: command tx timeout [ 93.034691][ T5790] Bluetooth: hci0: command tx timeout [ 93.035121][ T5780] Bluetooth: hci1: command tx timeout [ 93.078303][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.104797][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.112785][ T5780] Bluetooth: hci2: command tx timeout [ 93.274968][ T5821] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 93.394897][ T27] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 93.491843][ T5821] usb 3-1: Using ep0 maxpacket: 32 [ 93.521372][ T5862] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 93.541827][ T5821] usb 3-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 93.574728][ T5821] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.617165][ T27] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 93.634947][ T27] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 93.654431][ T27] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 93.656045][ T5821] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 93.672616][ T27] usb 4-1: New USB device found, idVendor=8087, idProduct=0025, bcdDevice= 0.01 [ 93.699374][ T27] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.713828][ T5865] FAULT_INJECTION: forcing a failure. [ 93.713828][ T5865] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 93.720977][ T5852] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 93.731442][ T5865] CPU: 0 PID: 5865 Comm: syz.1.10 Not tainted syzkaller #0 [ 93.741554][ T5865] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 93.751651][ T5865] Call Trace: [ 93.754967][ T5865] [ 93.757932][ T5865] dump_stack_lvl+0x18c/0x250 [ 93.762648][ T5865] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 93.768851][ T5865] ? show_regs_print_info+0x20/0x20 [ 93.774077][ T5865] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 93.780278][ T5865] ? dump_stack+0x9/0x20 [ 93.784553][ T5865] should_fail_ex+0x394/0x4c0 [ 93.789288][ T5865] _copy_from_user+0x2f/0xe0 [ 93.793911][ T5865] kstrtouint_from_user+0xde/0x170 [ 93.799062][ T5865] ? kstrtol_from_user+0x190/0x190 [ 93.804204][ T5865] ? get_pid_task+0x20/0x1e0 [ 93.808838][ T5865] proc_fail_nth_write+0x8f/0x250 [ 93.813915][ T5865] ? proc_fail_nth_read+0x260/0x260 [ 93.819157][ T5865] ? iov_iter_iovec_advance+0x1ef/0x290 [ 93.824759][ T5865] do_iter_write+0x4e5/0xc50 [ 93.829403][ T5865] ? proc_fail_nth_read+0x260/0x260 [ 93.834644][ T5865] ? vfs_iter_write+0xa0/0xa0 [ 93.839375][ T5865] ? rcu_read_lock_any_held+0xb4/0x140 [ 93.844874][ T5865] ? rcu_read_lock_bh_held+0x100/0x100 [ 93.850380][ T5865] do_writev+0x27f/0x480 [ 93.854656][ T5865] ? do_readv+0x460/0x460 [ 93.859044][ T5865] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 93.865055][ T5865] ? lock_chain_count+0x20/0x20 [ 93.869952][ T5865] ? lockdep_hardirqs_on+0x98/0x150 [ 93.875197][ T5865] do_syscall_64+0x55/0xb0 [ 93.879742][ T5865] ? clear_bhb_loop+0x40/0x90 [ 93.884444][ T5865] ? clear_bhb_loop+0x40/0x90 [ 93.889151][ T5865] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 93.895070][ T5865] RIP: 0033:0x7f053619e159 [ 93.899539][ T5865] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 93.919165][ T5865] RSP: 002b:00007f05370ba028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 93.927610][ T5865] RAX: ffffffffffffffda RBX: 00007f0536425fa0 RCX: 00007f053619e159 [ 93.935619][ T5865] RDX: 0000000000000003 RSI: 00002000000003c0 RDI: 0000000000000003 [ 93.943642][ T5865] RBP: 00007f0536235024 R08: 0000000000000000 R09: 0000000000000000 [ 93.951637][ T5865] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 93.959631][ T5865] R13: 00007f0536426038 R14: 00007f0536425fa0 R15: 00007ffe591bb4f8 [ 93.967664][ T5865] [ 94.497481][ T5821] gspca_nw80x: reg_w err -71 [ 94.502251][ T5821] nw80x: probe of 3-1:3.0 failed with error -71 [ 94.505038][ T27] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 94.520114][ T5821] usb 3-1: USB disconnect, device number 2 [ 94.722329][ T5818] usb 4-1: USB disconnect, device number 2 [ 94.728611][ T5780] Bluetooth: hci4: Reading Intel version command failed (-71) [ 94.746226][ T27] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 94.767706][ T27] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 94.787344][ T27] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 94.800030][ T27] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.812432][ T27] usb 1-1: config 0 descriptor?? [ 94.822265][ T27] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 94.829841][ T27] dvb-usb: bulk message failed: -22 (3/0) [ 94.844240][ T27] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 94.854502][ T27] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 94.862022][ T27] usb 1-1: media controller created [ 94.877278][ T27] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 94.920471][ T27] dvb-usb: bulk message failed: -22 (6/0) [ 94.928685][ T27] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 94.947540][ T27] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input5 [ 94.989930][ T27] dvb-usb: schedule remote query interval to 150 msecs. [ 95.006193][ T27] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 95.054602][ T5873] syz.1.13[5873]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 95.104898][ T5780] Bluetooth: hci0: command tx timeout [ 95.106528][ T5790] Bluetooth: hci3: command tx timeout [ 95.115964][ T5790] Bluetooth: hci1: command tx timeout [ 95.151719][ T5868] dvb-usb: bulk message failed: -22 (2/0) [ 95.167227][ T5818] usb 1-1: USB disconnect, device number 2 [ 95.194714][ T5790] Bluetooth: hci2: command tx timeout [ 95.260610][ T5818] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 95.410034][ T5877] loop2: detected capacity change from 0 to 256 [ 95.432598][ T5877] ======================================================= [ 95.432598][ T5877] WARNING: The mand mount option has been deprecated and [ 95.432598][ T5877] and is ignored by this kernel. Remove the mand [ 95.432598][ T5877] option from the mount to silence this warning. [ 95.432598][ T5877] ======================================================= [ 95.490579][ T5879] loop3: detected capacity change from 0 to 512 [ 95.522986][ T5879] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 95.525507][ T5877] exfat: Deprecated parameter 'utf8' [ 95.562197][ T5879] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 95.584096][ T5877] exfat: Deprecated parameter 'utf8' [ 95.594281][ T5877] exfat: Deprecated parameter 'utf8' [ 95.622976][ T5879] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2002c018, mo2=0002] [ 95.646216][ T5877] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xc70f51ff, utbl_chksum : 0xe619d30d) [ 95.660709][ T5879] System zones: 1-12 [ 95.676905][ T5879] EXT4-fs error (device loop3): ext4_orphan_get:1434: comm syz.3.16: bad orphan inode 16 [ 95.728668][ T5879] ext4_test_bit(bit=15, block=4) = 0 [ 95.734039][ T5879] EXT4-fs (loop3): 1 orphan inode deleted [ 95.742029][ T5873] loop1: detected capacity change from 0 to 32768 [ 95.768683][ T5879] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 95.811011][ T5873] ocfs2: Slot 0 on device (7,1) was already allocated to this node! [ 95.950127][ T5873] JBD2: Ignoring recovery information on journal [ 95.963911][ T5879] EXT4-fs error (device loop3): __ext4_new_inode:1083: comm syz.3.16: reserved inode found cleared - inode=9 [ 96.127342][ T5776] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.150228][ T5873] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 96.448739][ T5773] ocfs2: Unmounting device (7,1) on (node local) [ 96.565137][ T5816] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 96.603342][ T5884] loop0: detected capacity change from 0 to 32768 [ 96.787399][ T5816] usb 4-1: unable to get BOS descriptor or descriptor too short [ 96.816060][ T5816] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 96.852396][ T5816] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 96.885504][ T5816] usb 4-1: New USB device found, idVendor=0590, idProduct=004c, bcdDevice= 0.40 [ 96.894896][ T5816] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.902940][ T5816] usb 4-1: Product: syz [ 96.922533][ T5816] usb 4-1: Manufacturer: syz [ 96.934502][ T5816] usb 4-1: SerialNumber: syz [ 97.175877][ T5816] usb 4-1: unit 115 not found! [ 97.180918][ T5816] usb 4-1: unit 255 not found! [ 97.225166][ T5816] usb 4-1: USB disconnect, device number 3 [ 97.257999][ T5785] udevd[5785]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 97.346201][ T1197] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 97.474587][ T5846] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 97.557868][ T5905] loop0: detected capacity change from 0 to 512 [ 97.569421][ T1197] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 97.581647][ T5905] EXT4-fs: Ignoring removed nobh option [ 97.590098][ T1197] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 97.600049][ T1197] usb 3-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.01 [ 97.609878][ T1197] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.625296][ T1197] usb 3-1: config 0 descriptor?? [ 97.647975][ T5905] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 97.663045][ T5905] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 97.664182][ T5846] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 97.685021][ T5905] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 97.685402][ T5846] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 97.704954][ T5905] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 97.714839][ T5846] usb 2-1: New USB device found, idVendor=041e, idProduct=3010, bcdDevice= 1.00 [ 97.723458][ T5905] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 97.723892][ T5846] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.741076][ T5905] EXT4-fs (loop0): orphan cleanup on readonly fs [ 97.757217][ T5905] EXT4-fs error (device loop0): ext4_validate_block_bitmap:439: comm syz.0.23: bg 0: block 34: padding at end of block bitmap is not set [ 97.773800][ T5905] Quota error (device loop0): write_blk: dquota write failed [ 97.782588][ T5905] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 97.792979][ T5905] EXT4-fs error (device loop0): ext4_acquire_dquot:6953: comm syz.0.23: Failed to acquire dquot type 1 [ 97.807367][ T5846] usb 2-1: 0:1 : does not exist [ 97.853292][ T5905] EXT4-fs (loop0): 1 truncate cleaned up [ 97.899464][ T5905] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 98.036415][ T5775] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.083938][ T5846] usb 2-1: USB disconnect, device number 2 [ 98.126963][ T1197] arvo 0003:1E7D:30D4.0001: unknown main item tag 0x0 [ 98.163913][ T5908] loop3: detected capacity change from 0 to 4096 [ 98.174305][ T1197] arvo 0003:1E7D:30D4.0001: unknown main item tag 0x0 [ 98.190046][ T1197] arvo 0003:1E7D:30D4.0001: unknown main item tag 0x0 [ 98.207415][ T1197] arvo 0003:1E7D:30D4.0001: unknown main item tag 0x0 [ 98.228747][ T1197] arvo 0003:1E7D:30D4.0001: unknown main item tag 0x0 [ 98.248699][ T1197] arvo 0003:1E7D:30D4.0001: unknown main item tag 0x0 [ 98.260753][ T5911] loop0: detected capacity change from 0 to 2048 [ 98.274862][ T1197] arvo 0003:1E7D:30D4.0001: unknown main item tag 0x0 [ 98.286001][ T5908] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 98.298721][ T5911] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=4294967289, location=4294967289 [ 98.321337][ T1197] arvo 0003:1E7D:30D4.0001: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.2-1/input0 [ 98.349784][ T5908] ntfs3: loop3: Failed to load $Extend (-22). [ 98.359612][ T1197] arvo 0003:1E7D:30D4.0001: couldn't init struct arvo_device [ 98.368700][ T5908] ntfs3: loop3: Failed to initialize $Extend. [ 98.377118][ T5911] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 98.396758][ T1197] arvo 0003:1E7D:30D4.0001: couldn't install keyboard [ 98.420445][ T1197] arvo: probe of 0003:1E7D:30D4.0001 failed with error -71 [ 98.479174][ T1197] usb 3-1: USB disconnect, device number 3 [ 98.658821][ T5912] fido_id[5912]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 98.904101][ T5916] loop3: detected capacity change from 0 to 2048 [ 98.953535][ T5916] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 99.150724][ T5916] EXT4-fs (loop3): stripe (227) is not aligned with cluster size (16), stripe is disabled [ 99.178146][ T5916] EXT4-fs error (device loop3): __ext4_remount:6756: comm syz.3.30: Abort forced by user [ 99.204176][ T5916] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 99.322346][ T5776] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.448959][ T5923] loop0: detected capacity change from 0 to 32768 [ 99.509382][ T5923] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 99.589588][ T5923] XFS (loop0): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 99.622051][ T5923] XFS (loop0): Starting recovery (logdev: internal) [ 99.635133][ T5846] kernel read not supported for file /dsp (pid: 5846 comm: kworker/0:5) [ 99.702671][ T5923] XFS (loop0): Ending recovery (logdev: internal) [ 99.809620][ T5846] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 99.824117][ T5938] loop1: detected capacity change from 0 to 512 [ 99.890852][ T5923] syz.0.33 (5923) used greatest stack depth: 20520 bytes left [ 99.923882][ T5938] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.953569][ T5938] ext4 filesystem being mounted at /12/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 99.978123][ T5926] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 100.008711][ T5940] EXT4-fs error (device loop1): ext4_validate_block_bitmap:421: comm ext4lazyinit: bg 0: bad block bitmap checksum [ 100.021026][ T5846] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 100.024709][ T5775] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 100.032174][ T5846] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 100.051059][ T5846] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 100.061736][ T5846] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 100.070351][ T5846] usb 4-1: SerialNumber: syz [ 100.129744][ T5926] XFS (loop2): Ending clean mount [ 100.164017][ T5926] XFS (loop2): Quotacheck needed: Please wait. [ 100.253020][ T5926] XFS (loop2): Quotacheck: Done. [ 100.306526][ T5773] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.343931][ T5846] usb 4-1: 0:2 : does not exist [ 100.425438][ T5846] usb 4-1: USB disconnect, device number 4 [ 100.569921][ T5791] udevd[5791]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 100.612145][ T5774] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 101.100548][ T5961] set_capacity_and_notify: 1 callbacks suppressed [ 101.100563][ T5961] loop1: detected capacity change from 0 to 4096 [ 101.119144][ T5964] loop3: detected capacity change from 0 to 256 [ 101.140965][ T5964] exfat: Deprecated parameter 'namecase' [ 101.155923][ T5964] exfat: Deprecated parameter 'utf8' [ 101.180423][ T5961] ntfs3: loop1: ino=3, ntfs_set_state failed, -22. [ 101.187101][ T5846] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 101.196853][ T5961] ntfs3: loop1: Failed to initialize $Extend/$ObjId. [ 101.234970][ T5964] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001ff53, chksum : 0xd72bb7d8, utbl_chksum : 0xe619d30d) [ 101.310199][ T5961] ntfs3: loop1: ino=1e, "file1" attr_set_size [ 101.390230][ T5846] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 101.420052][ T5846] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 101.431506][ T3006] ntfs3: loop1: ino=3, ntfs3_write_inode failed, -22. [ 101.451885][ T5773] ntfs3: loop1: ino=3, ntfs_set_state failed, -22. [ 101.464825][ T5773] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 101.471162][ T5846] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 101.471811][ T5773] ntfs3: loop1: ino=3, ntfs_set_state failed, -22. [ 101.491184][ T5846] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.510919][ T2942] ntfs3: loop1: ino=3, ntfs3_write_inode failed, -22. [ 101.520188][ T5958] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 101.559584][ T5846] usb 1-1: Quirk or no altest; falling back to MIDI 1.0 [ 101.567044][ T5966] loop3: detected capacity change from 0 to 1024 [ 101.779144][ T5969] loop1: detected capacity change from 0 to 16 [ 101.817147][ T5969] erofs: (device loop1): mounted with root inode @ nid 36. [ 101.902386][ T5969] syz.1.45: attempt to access beyond end of device [ 101.902386][ T5969] loop1: rw=0, sector=15300821024, nr_sectors = 8 limit=16 [ 101.938717][ T2942] hfsplus: b-tree write err: -5, ino 8 [ 101.955147][ T5969] erofs: (device loop1): z_erofs_read_folio: read error -117 @ 72 of nid 36 [ 102.147946][ T5962] loop2: detected capacity change from 0 to 32768 [ 102.169692][ T5846] usb 1-1: USB disconnect, device number 3 [ 102.296986][ T5962] JBD2: Ignoring recovery information on journal [ 102.452318][ T5962] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 102.649489][ T5973] loop3: detected capacity change from 0 to 32768 [ 102.720842][ T5973] debugfs: Directory 'B1DE653C5FFC4D88B33B244AAB9EB3E9' with parent 'ocfs2' already present! [ 102.744828][ T5973] JBD2: Ignoring recovery information on journal [ 102.783956][ T5774] ocfs2: Unmounting device (7,2) on (node local) [ 102.938002][ T5973] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 103.246974][ T5776] ocfs2: Unmounting device (7,3) on (node local) [ 103.285400][ T5155] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 103.496671][ T5155] usb 1-1: not running at top speed; connect to a high speed hub [ 103.518205][ T5155] usb 1-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice= 1.00 [ 103.540643][ T5155] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.553428][ T5155] usb 1-1: Product: syz [ 103.564667][ T5155] usb 1-1: Manufacturer: syz [ 103.569320][ T5155] usb 1-1: SerialNumber: syz [ 103.605835][ T5155] keyspan 1-1:1.0: Keyspan 4 port adapter converter detected [ 103.673069][ T5155] usb 1-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 103.715650][ T5155] usb 1-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 103.746911][ T5155] usb 1-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 103.775957][ T5155] usb 1-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 103.954060][ T5985] loop2: detected capacity change from 0 to 32768 [ 104.017512][ T5985] JBD2: Ignoring recovery information on journal [ 104.066899][ T5985] jbd2_journal_bmap: journal block not found at offset 32 on loop2-75 [ 104.104406][ T5985] JBD2: bad block at offset 32 [ 104.159637][ T5985] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 104.214672][ T5985] (syz.2.48,5985,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: rec_len is smaller than minimal - offset=3344, inode=0, rec_len=0, name_len=0 [ 104.339289][ T5774] ocfs2: Unmounting device (7,2) on (node local) [ 104.424663][ T5155] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 104.580177][ T5992] loop3: detected capacity change from 0 to 32768 [ 104.597743][ T5992] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.52 (5992) [ 104.632317][ T5992] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 104.648485][ T5992] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 104.656131][ T5155] usb 2-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 104.675791][ T5992] BTRFS info (device loop3): metadata ratio 220 [ 104.687112][ T5155] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.695917][ T5155] usb 2-1: Product: syz [ 104.700234][ T5155] usb 2-1: Manufacturer: syz [ 104.700905][ T5992] BTRFS info (device loop3): setting nodatasum [ 104.704954][ T5155] usb 2-1: SerialNumber: syz [ 104.728003][ T5992] BTRFS info (device loop3): metadata ratio 4 [ 104.732582][ T5155] usb 2-1: config 0 descriptor?? [ 104.739803][ T1197] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 104.743995][ T5992] BTRFS info (device loop3): enabling ssd optimizations [ 104.759431][ T5992] BTRFS info (device loop3): allowing degraded mounts [ 104.767847][ T5992] BTRFS info (device loop3): using free space tree [ 104.781452][ T5155] i2c-tiny-usb 2-1:0.0: version 6d.cc found at bus 002 address 003 [ 104.846273][ T5992] BTRFS info (device loop3): auto enabling async discard [ 104.969424][ T1197] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 104.990644][ T1197] usb 3-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 105.024876][ T1197] usb 3-1: config 0 interface 0 has no altsetting 0 [ 105.031808][ T1197] usb 3-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 105.064871][ T1197] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.086608][ T1197] usb 3-1: config 0 descriptor?? [ 105.237761][ T5776] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 105.420630][ T5155] i2c i2c-1: failure reading functionality [ 105.466571][ T5155] i2c i2c-1: connected i2c-tiny-usb device [ 105.485318][ T5155] usb 2-1: USB disconnect, device number 3 [ 105.547534][ T1197] hid-multitouch 0003:0EEF:72C4.0002: unbalanced collection at end of report description [ 105.560389][ T1197] hid-multitouch: probe of 0003:0EEF:72C4.0002 failed with error -22 [ 105.677906][ T6017] loop3: detected capacity change from 0 to 256 [ 105.704025][ T6017] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d) [ 105.772112][ T1197] usb 3-1: USB disconnect, device number 4 [ 105.866420][ T6019] loop3: detected capacity change from 0 to 128 [ 105.925615][ T6019] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 106.021970][ T5155] usb 1-1: USB disconnect, device number 4 [ 106.060100][ T5155] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 106.085554][ T5155] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 106.182007][ T5155] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 106.219731][ T5155] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 106.249791][ T5155] keyspan 1-1:1.0: device disconnected [ 106.285728][ T6024] MPI: mpi too large (113288 bits) [ 106.466813][ T5790] Bluetooth: hci3: Malformed LE Event: 0x0d [ 106.628291][ T6035] loop2: detected capacity change from 0 to 4096 [ 106.663990][ T6035] ntfs3: loop2: Different NTFS sector size (2048) and media sector size (512). [ 106.894560][ T5155] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 107.137914][ T5155] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 107.154981][ T5155] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 107.174037][ T5155] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 107.204303][ T5155] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 107.248518][ T5155] usb 1-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 107.264059][ T5155] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.309812][ T6048] jffs2: notice: (6048) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 107.786468][ T5155] gud: probe of 1-1:1.0 failed with error -71 [ 107.817053][ T5155] usb 1-1: USB disconnect, device number 5 [ 107.929870][ T6060] loop2: detected capacity change from 0 to 2048 [ 108.036774][ T6060] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 108.245294][ T5774] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.408169][ T6067] Bluetooth: MGMT ver 1.22 [ 108.423788][ T6056] loop3: detected capacity change from 0 to 32768 [ 108.451113][ T6056] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.71 (6056) [ 108.515370][ T6056] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 108.546329][ T6056] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 108.592874][ T6056] BTRFS info (device loop3): force clearing of disk cache [ 108.616393][ T6062] loop1: detected capacity change from 0 to 32768 [ 108.635596][ T6056] BTRFS info (device loop3): enabling ssd optimizations [ 108.647012][ T6056] BTRFS info (device loop3): using spread ssd allocation scheme [ 108.660663][ T6062] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.74 (6062) [ 108.676255][ T6056] BTRFS info (device loop3): metadata ratio 0 [ 108.682481][ T6056] BTRFS info (device loop3): using free space tree [ 108.697188][ T6071] loop0: detected capacity change from 0 to 512 [ 108.740612][ T6062] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 108.766088][ T6071] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.781025][ T6071] ext4 filesystem being mounted at /14/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 108.796515][ T6062] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 108.833056][ T6062] BTRFS info (device loop1): setting nodatacow, compression disabled [ 108.872668][ T6062] BTRFS info (device loop1): enabling auto defrag [ 108.885390][ T1197] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 108.914678][ T6062] BTRFS info (device loop1): max_inline at 0 [ 108.920756][ T6062] BTRFS info (device loop1): using free space tree [ 108.954409][ T6056] BTRFS info (device loop3): auto enabling async discard [ 108.989580][ T6056] BTRFS info (device loop3): rebuilding free space tree [ 109.084016][ T6062] BTRFS info (device loop1): auto enabling async discard [ 109.112377][ T1197] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 196, using maximum allowed: 30 [ 109.163861][ T1197] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 109.214649][ T1197] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 109.259601][ T1197] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 196 [ 109.300213][ T1197] usb 3-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00 [ 109.334503][ T1197] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.390171][ T1197] usb 3-1: config 0 descriptor?? [ 109.435570][ T5775] EXT4-fs error (device loop0): ext4_empty_dir:3139: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 109.474024][ T5776] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 109.495380][ T5775] EXT4-fs (loop0): Remounting filesystem read-only [ 109.629139][ T5773] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 109.939686][ T1197] holtek_kbd 0003:04D9:A055.0003: hidraw0: USB HID v10.00 Device [HID 04d9:a055] on usb-dummy_hcd.2-1/input0 [ 110.125262][ T5775] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.174646][ T5818] usb 3-1: USB disconnect, device number 5 [ 110.235138][ T5846] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 110.284554][ T1197] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 110.359245][ T3006] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.458608][ T5846] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 110.487788][ T5846] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 110.514078][ T5846] usb 2-1: New USB device found, idVendor=056a, idProduct=033b, bcdDevice= 0.00 [ 110.528970][ T5846] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.544935][ T1197] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 110.554083][ T1197] usb 4-1: config 0 has no interface number 0 [ 110.594660][ T1197] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 110.610026][ T1197] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 110.632689][ T3006] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.655348][ T1197] usb 4-1: New USB device found, idVendor=048d, idProduct=ce50, bcdDevice= 0.00 [ 110.669374][ T1197] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.680651][ T1197] usb 4-1: config 0 descriptor?? [ 110.722821][ T3006] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.861409][ T3006] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.000252][ T5846] wacom 0003:056A:033B.0004: hidraw0: USB HID v1.11 Device [HID 056a:033b] on usb-dummy_hcd.1-1/input0 [ 111.042500][ T5846] input input7: Absolute device without dev->absinfo, refusing to register [ 111.079935][ T5846] wacom: probe of 0003:056A:033B.0004 failed with error -22 [ 111.127724][ T6118] loop2: detected capacity change from 0 to 4096 [ 111.155913][ T1197] asus 0003:048D:CE50.0005: unknown main item tag 0xd [ 111.216652][ T1197] asus 0003:048D:CE50.0005: hidraw0: USB HID v0.00 Device [HID 048d:ce50] on usb-dummy_hcd.3-1/input1 [ 111.253920][ T6118] NILFS (loop2): invalid segment: Checksum error in segment payload [ 111.313830][ T6118] NILFS (loop2): trying rollback from an earlier position [ 111.339069][ T1197] usb 2-1: USB disconnect, device number 4 [ 111.432996][ T9] usb 4-1: USB disconnect, device number 5 [ 111.476664][ T6118] NILFS (loop2): recovery complete [ 111.529679][ T6122] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 111.633281][ T6118] NILFS (loop2): nilfs_palloc_freev (ino=3): entry number 127 already freed [ 111.649775][ T6120] fido_id[6120]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 111.670319][ T6118] NILFS (loop2): nilfs_sufile_do_free: segment 9 is already clean [ 111.911640][ T5780] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 111.926156][ T5780] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 111.936218][ T5780] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 111.944368][ T5780] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 111.952896][ T5780] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 111.961540][ T5780] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 112.479410][ T8] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 112.694255][ T8] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 112.730513][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.774261][ T8] usb 4-1: config 0 descriptor?? [ 112.803239][ T8] cp210x 4-1:0.0: cp210x converter detected [ 113.342081][ T6126] chnl_net:caif_netlink_parms(): no params data found [ 113.439112][ T8] cp210x 4-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 113.458178][ T8] cp210x 4-1:0.0: GPIO initialisation failed: -71 [ 113.477161][ T8] usb 4-1: cp210x converter now attached to ttyUSB0 [ 113.505016][ T8] usb 4-1: USB disconnect, device number 6 [ 113.554399][ T8] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 113.581658][ T8] cp210x 4-1:0.0: device disconnected [ 113.725344][ T3006] hsr_slave_0: left promiscuous mode [ 113.734233][ T3006] hsr_slave_1: left promiscuous mode [ 113.744178][ T3006] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 113.772499][ T3006] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 113.786427][ T3006] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 113.813977][ T3006] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 113.836079][ T3006] bridge_slave_1: left allmulticast mode [ 113.841792][ T3006] bridge_slave_1: left promiscuous mode [ 113.856875][ T3006] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.871723][ T3006] bridge_slave_0: left allmulticast mode [ 113.882836][ T3006] bridge_slave_0: left promiscuous mode [ 113.891859][ T3006] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.954216][ T3006] veth1_macvtap: left promiscuous mode [ 113.965349][ T3006] veth0_macvtap: left promiscuous mode [ 113.977948][ T3006] veth1_vlan: left promiscuous mode [ 114.001853][ T3006] veth0_vlan: left promiscuous mode [ 114.074939][ T5780] Bluetooth: hci2: command tx timeout [ 114.994905][ T27] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 115.100847][ T6205] loop1: detected capacity change from 0 to 32768 [ 115.178415][ T6205] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 115.219947][ T27] usb 4-1: Using ep0 maxpacket: 8 [ 115.260674][ T27] usb 4-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 115.290354][ T27] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.328622][ T27] usb 4-1: Product: syz [ 115.348352][ T3006] team0 (unregistering): Port device team_slave_1 removed [ 115.360406][ T27] usb 4-1: Manufacturer: syz [ 115.372468][ T27] usb 4-1: SerialNumber: syz [ 115.378758][ T5773] ocfs2: Unmounting device (7,1) on (node local) [ 115.410901][ T27] usb 4-1: config 0 descriptor?? [ 115.431565][ T27] radio-usb-si4713 4-1:0.0: Si4713 development board discovered: (10C4:8244) [ 115.518880][ T3006] team0 (unregistering): Port device team_slave_0 removed [ 115.576372][ T3006] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 115.657664][ T3006] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 116.037075][ T3006] bond0 (unregistering): Released all slaves [ 116.071550][ T27] radio-usb-si4713: probe of 4-1:0.0 failed with error -71 [ 116.087064][ T27] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 116.098287][ T27] usb 4-1: USB disconnect, device number 7 [ 116.154703][ T5780] Bluetooth: hci2: command tx timeout [ 116.189070][ T6197] smc: net device erspan0 applied user defined pnetid SYZ1 [ 116.237047][ T6126] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.260575][ T6126] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.288466][ T6126] bridge_slave_0: entered allmulticast mode [ 116.297284][ T6126] bridge_slave_0: entered promiscuous mode [ 116.307582][ T6126] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.316352][ T6126] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.323605][ T6126] bridge_slave_1: entered allmulticast mode [ 116.331645][ T6126] bridge_slave_1: entered promiscuous mode [ 116.447946][ T6216] loop1: detected capacity change from 0 to 1024 [ 116.483801][ T6216] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 116.501831][ T6126] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 116.546981][ T6126] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 116.630316][ T6216] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 116.709228][ T6126] team0: Port device team_slave_0 added [ 116.754737][ T6126] team0: Port device team_slave_1 added [ 116.894230][ T6126] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 116.902261][ T6126] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 116.928665][ T6126] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 116.945178][ T6126] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 116.954281][ T6126] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 117.012950][ T6126] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 117.044070][ T5773] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.076262][ T6226] netlink: 8 bytes leftover after parsing attributes in process `syz.3.106'. [ 117.210494][ T6126] hsr_slave_0: entered promiscuous mode [ 117.232319][ T6126] hsr_slave_1: entered promiscuous mode [ 117.254659][ T6126] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 117.262274][ T6126] Cannot create hsr debugfs directory [ 117.274632][ T8] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 117.474733][ T8] usb 3-1: Using ep0 maxpacket: 16 [ 117.487256][ T8] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 117.512005][ T8] usb 3-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 117.538346][ T8] usb 3-1: config 0 interface 0 has no altsetting 0 [ 117.545514][ T8] usb 3-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00 [ 117.570643][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.606819][ T8] usb 3-1: config 0 descriptor?? [ 117.859920][ T6126] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 117.887195][ T6126] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 117.940974][ T6126] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 117.972542][ T6126] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 118.095895][ T8] hkems 0003:2006:0118.0006: item fetching failed at offset 6/24 [ 118.121348][ T8] hkems 0003:2006:0118.0006: parse failed [ 118.148955][ T8] hkems: probe of 0003:2006:0118.0006 failed with error -22 [ 118.225824][ T5780] Bluetooth: hci2: command tx timeout [ 118.240722][ T6126] 8021q: adding VLAN 0 to HW filter on device bond0 [ 118.269275][ T6126] 8021q: adding VLAN 0 to HW filter on device team0 [ 118.297252][ T34] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.304540][ T34] bridge0: port 1(bridge_slave_0) entered forwarding state [ 118.368800][ T27] usb 3-1: USB disconnect, device number 6 [ 118.378588][ T34] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.386570][ T34] bridge0: port 2(bridge_slave_1) entered forwarding state [ 118.518861][ T6245] loop1: detected capacity change from 0 to 32768 [ 118.635871][ T6245] ERROR: (device loop1): jfs_readdir: JFS:Dtree error: ino = 2, bn=0, index = 1 [ 118.635871][ T6245] [ 118.669459][ T6245] ERROR: (device loop1): remounting filesystem as read-only [ 118.715905][ T6260] ERROR: (device loop1): jfs_readdir: JFS:Dtree error: ino = 2, bn=0, index = 1 [ 118.715905][ T6260] [ 119.064380][ T6126] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 119.945481][ T6298] loop3: detected capacity change from 0 to 512 [ 119.976970][ T6298] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 120.003385][ T6298] EXT4-fs error (device loop3): ext4_orphan_get:1434: comm syz.3.124: bad orphan inode 131083 [ 120.089353][ T6298] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 120.110594][ T6126] veth0_vlan: entered promiscuous mode [ 120.179816][ T6126] veth1_vlan: entered promiscuous mode [ 120.287209][ T6126] veth0_macvtap: entered promiscuous mode [ 120.306747][ T5780] Bluetooth: hci2: command tx timeout [ 120.328635][ T6126] veth1_macvtap: entered promiscuous mode [ 120.383002][ T5776] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.421176][ T6126] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 120.464241][ T6126] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.482069][ T6126] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 120.516955][ T6126] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.543160][ T6126] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 120.559237][ T6126] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.573293][ T6126] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 120.630049][ T6126] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 120.630071][ T6126] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.630082][ T6126] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 120.630095][ T6126] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.630105][ T6126] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 120.630117][ T6126] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.631682][ T6126] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 120.656406][ T6126] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.656561][ T6126] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.656589][ T6126] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.656615][ T6126] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.876892][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.876939][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.941339][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.941361][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.040110][ T6320] loop1: detected capacity change from 0 to 512 [ 121.139277][ T6320] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 121.564845][ T6331] kvm: user requested TSC rate below hardware speed [ 121.725673][ T6311] loop2: detected capacity change from 0 to 32768 [ 121.812402][ T6311] ERROR: (device loop2): dbAlloc: the hint is outside the map [ 121.812402][ T6311] [ 121.849266][ T6311] ERROR: (device loop2): remounting filesystem as read-only [ 121.986199][ T5774] ------------[ cut here ]------------ [ 121.992076][ T5774] kernel BUG at fs/jfs/inode.c:175! [ 122.049109][ T5774] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 122.055256][ T5774] CPU: 1 PID: 5774 Comm: syz-executor Not tainted syzkaller #0 [ 122.062827][ T5774] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 122.072927][ T5774] RIP: 0010:jfs_evict_inode+0x424/0x430 [ 122.078523][ T5774] Code: df fe e9 e8 fd ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 23 fe ff ff 4c 89 f7 e8 86 a6 df fe e9 16 fe ff ff e8 1c 25 87 fe <0f> 0b 66 2e 0f 1f 84 00 00 00 00 00 f3 0f 1e fa 41 57 41 56 41 54 [ 122.098170][ T5774] RSP: 0018:ffffc900044a7b08 EFLAGS: 00010293 [ 122.104276][ T5774] RAX: ffffffff83005d54 RBX: ffff88805a5d3bb0 RCX: ffff88801b325a00 [ 122.112373][ T5774] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff88805a5d3bb0 [ 122.120382][ T5774] RBP: 0000000000000001 R08: ffffffff911ef617 R09: 1ffffffff223dec2 [ 122.128387][ T5774] R10: dffffc0000000000 R11: fffffbfff223dec3 R12: dffffc0000000000 [ 122.136393][ T5774] R13: dffffc0000000000 R14: ffff88805a5d3838 R15: ffff88805a5d3be8 [ 122.144489][ T5774] FS: 0000555581f68500(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 122.153444][ T5774] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 122.160065][ T5774] CR2: 000000110c355520 CR3: 0000000060b8e000 CR4: 00000000003506e0 [ 122.168086][ T5774] Call Trace: [ 122.171401][ T5774] [ 122.174402][ T5774] ? jfs_write_inode+0x220/0x220 [ 122.179388][ T5774] evict+0x4b7/0x8a0 [ 122.183319][ T5774] ? xa_load+0x64/0x2e0 [ 122.187508][ T5774] ? proc_nr_inodes+0x230/0x230 [ 122.192407][ T5774] ? do_raw_spin_unlock+0x121/0x230 [ 122.197661][ T5774] ? do_raw_spin_unlock+0x121/0x230 [ 122.202908][ T5774] evict_inodes+0x64a/0x6e0 [ 122.207453][ T5774] ? clear_inode+0x150/0x150 [ 122.212082][ T5774] ? dentry_kill+0xb8/0x290 [ 122.216647][ T5774] generic_shutdown_super+0x97/0x2b0 [ 122.221973][ T5774] kill_block_super+0x44/0x90 [ 122.226707][ T5774] deactivate_locked_super+0x97/0x100 [ 122.232119][ T5774] cleanup_mnt+0x3d7/0x460 [ 122.236587][ T5774] task_work_run+0x1d4/0x260 [ 122.241218][ T5774] ? task_work_cancel+0x220/0x220 [ 122.246284][ T5774] ? exit_to_user_mode_loop+0x3b/0x110 [ 122.251787][ T5774] exit_to_user_mode_loop+0xe6/0x110 [ 122.257150][ T5774] exit_to_user_mode_prepare+0xee/0x180 [ 122.262747][ T5774] syscall_exit_to_user_mode+0x1a/0x50 [ 122.268268][ T5774] do_syscall_64+0x61/0xb0 [ 122.272726][ T5774] ? clear_bhb_loop+0x40/0x90 [ 122.277452][ T5774] ? clear_bhb_loop+0x40/0x90 [ 122.282177][ T5774] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 122.288109][ T5774] RIP: 0033:0x7f3a9dd9f397 [ 122.292558][ T5774] Code: a2 c7 05 5c 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 122.312206][ T5774] RSP: 002b:00007ffcd4f60a98 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 122.320666][ T5774] RAX: 0000000000000000 RBX: 00007f3a9de34474 RCX: 00007f3a9dd9f397 [ 122.328766][ T5774] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffcd4f60b50 [ 122.336854][ T5774] RBP: 00007ffcd4f60b50 R08: 00007ffcd4f61b50 R09: 00000000ffffffff [ 122.344858][ T5774] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffcd4f61be0 [ 122.352890][ T5774] R13: 00007f3a9de34474 R14: 000000000001dbf3 R15: 00007ffcd4f61c20 [ 122.360932][ T5774] [ 122.363996][ T5774] Modules linked in: [ 122.411218][ T5774] ---[ end trace 0000000000000000 ]--- [ 122.437351][ T5774] RIP: 0010:jfs_evict_inode+0x424/0x430 [ 122.449840][ T5774] Code: df fe e9 e8 fd ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 23 fe ff ff 4c 89 f7 e8 86 a6 df fe e9 16 fe ff ff e8 1c 25 87 fe <0f> 0b 66 2e 0f 1f 84 00 00 00 00 00 f3 0f 1e fa 41 57 41 56 41 54 [ 122.478522][ T5774] RSP: 0018:ffffc900044a7b08 EFLAGS: 00010293 [ 122.484953][ T5774] RAX: ffffffff83005d54 RBX: ffff88805a5d3bb0 RCX: ffff88801b325a00 [ 122.493878][ T5774] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff88805a5d3bb0 [ 122.513170][ T5774] RBP: 0000000000000001 R08: ffffffff911ef617 R09: 1ffffffff223dec2 [ 122.534096][ T5774] R10: dffffc0000000000 R11: fffffbfff223dec3 R12: dffffc0000000000 [ 122.542960][ T5774] R13: dffffc0000000000 R14: ffff88805a5d3838 R15: ffff88805a5d3be8 [ 122.555599][ T5774] FS: 0000555581f68500(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 122.567194][ T5774] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 122.573832][ T5774] CR2: 0000562e3f9da950 CR3: 0000000060b8e000 CR4: 00000000003506e0 [ 122.582608][ T5774] Kernel panic - not syncing: Fatal exception [ 122.589327][ T5774] Kernel Offset: disabled [ 122.593659][ T5774] Rebooting in 86400 seconds..