last executing test programs: 3m51.004390578s ago: executing program 2 (id=49): r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000080)={0x0, 0x7, 0x30}, 0xc) sendto$inet(r0, &(0x7f00000000c0)='}', 0x1, 0x0, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10) sendto$inet(r0, &(0x7f0000000440)='p', 0x1, 0x24008810, 0x0, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240), 0xc) sendmmsg(r0, &(0x7f0000000680)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)=':', 0x1}], 0x1}}], 0x1, 0x40800) sendto$inet(r0, &(0x7f0000000300)="ab", 0x34000, 0x0, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10) 3m50.598911211s ago: executing program 2 (id=51): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x22, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x2}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = socket(0x2b, 0x1, 0x1) listen(r1, 0x5) accept4$vsock_stream(r1, 0x0, 0x0, 0x80800) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x77359400}}, 0x0) 3m48.676339418s ago: executing program 2 (id=55): ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0xe45, 0x9, 0xfffffffffffffffd, 0x10000000, 0x10000, 0x3, 0x4002004c2, 0x7ff, 0x1, 0x0, 0x400, 0x80, 0x88, 0x0, 0x8, 0x8d], 0xeeee8000, 0x240046}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3m48.023338817s ago: executing program 2 (id=57): r0 = syz_open_procfs(0x0, &(0x7f0000000580)='mountinfo\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x51) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x81899, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount(0x0, &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f00000001c0)='./file0/../file0\x00', &(0x7f00000002c0)='./file0/../file0\x00', 0x0, 0x18f881, 0x0) read$FUSE(r0, &(0x7f0000002600)={0x2020}, 0x2020) 3m47.70559759s ago: executing program 2 (id=58): bpf$OBJ_GET_PROG(0x7, &(0x7f0000000180)=@generic={&(0x7f0000000140)='./file0\x00', 0x0, 0x10}, 0x18) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000080)={0x0, 0x0}) close(r0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) r2 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f00000008c0), 0x43) sendmsg$kcm(r2, &(0x7f0000000100)={&(0x7f0000001540)=@tipc=@name={0x1e, 0x2, 0x2, {{0x1, 0x2000}, 0x1}}, 0x80, 0x0}, 0x0) 3m42.97237819s ago: executing program 2 (id=73): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000406c256d0000000200000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, &(0x7f00000001c0)={0x0, 0x3, 0x2, @string={0x2}}, &(0x7f0000000200), 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000640)={0x2c, &(0x7f00000002c0)={0x20, 0x21, 0x2, {0x2, 0x6}}, &(0x7f0000000440)={0x0, 0x3, 0xc, @string={0xc, 0x3, "94d748b4d966a4ab22b9"}}, 0x0, &(0x7f00000005c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x7, 0x4, 0x26, 0x0, "ae836011", "97615124"}}, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000940)={0x2c, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x9, @string={0x9, 0x3, "7807814bed41cc"}}, 0x0, 0x0, 0x0}, 0x0) 3m42.498488252s ago: executing program 32 (id=73): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000406c256d0000000200000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, &(0x7f00000001c0)={0x0, 0x3, 0x2, @string={0x2}}, &(0x7f0000000200), 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000640)={0x2c, &(0x7f00000002c0)={0x20, 0x21, 0x2, {0x2, 0x6}}, &(0x7f0000000440)={0x0, 0x3, 0xc, @string={0xc, 0x3, "94d748b4d966a4ab22b9"}}, 0x0, &(0x7f00000005c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x7, 0x4, 0x26, 0x0, "ae836011", "97615124"}}, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000940)={0x2c, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x9, @string={0x9, 0x3, "7807814bed41cc"}}, 0x0, 0x0, 0x0}, 0x0) 3m5.377913319s ago: executing program 3 (id=191): syz_open_procfs(0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) syz_read_part_table(0x5c6, &(0x7f0000000bc0)="$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") syz_clone(0x200000, 0x0, 0x0, 0x0, 0x0, 0x0) quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f00000003c0)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000540)={0x4, 0x2, 0x0, 0xc, 0x6, 0xfffffffffffffffd, 0x20000001000, 0x7, 0xfffffffd}) lchown(&(0x7f0000000080)='./file1\x00', 0xee01, 0xffffffffffffffff) 3m3.151459018s ago: executing program 3 (id=198): syz_open_dev$video(&(0x7f0000000180), 0x100000ffffffff, 0x2100) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x10, 0x3, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000100), 0x10) sendmsg$can_bcm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="05"], 0x48}, 0x1, 0x0, 0x0, 0x48850}, 0x200008c1) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x1d, r1}, 0x10, &(0x7f0000000180)={&(0x7f0000001140)=ANY=[@ANYRES64=r0], 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x8001) 3m1.227914437s ago: executing program 3 (id=204): setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="340000001400b5950800", @ANYRES32=r2, @ANYBLOB="14000200ff020000000000000000000000000001080008000207"], 0x34}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="400000001400a59500000000000000000a6800c8", @ANYRES32=r2, @ANYBLOB="14000200ff02000000000000000000000000000114000100fe"], 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 3m0.658626664s ago: executing program 3 (id=205): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc8) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000440)='./file0/../file0/../file0/../file0\x00') prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='./file0/../file0/../file0/../file0/file0\x00') 3m0.273913169s ago: executing program 3 (id=207): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0xf8, 0xfc, 0xc0}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000980)="91f8a9849519def28691bbc4173c3d6f357d0272b7e95a136b3ffec75b73e6937b7b22a1319130feaab952ac4703cad04be68907e50e997fc26e4c91ea4feb931647fc5393de25000000000000f2ffffff2e3591ceb1757de97fb25500620d0d30506e7429fa5337b74945da657f794d5b5bf89588e07b14a17f069912dc0c3f201bff8b9a687b85baa11244632642a9be7b42b6b5882b738f05eba73221490e2d", 0xa1}], 0x1}}, {{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000001500)="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", 0x1ac}], 0x1}}], 0x2, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 2m57.712945497s ago: executing program 3 (id=209): bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0e00000004000000080000000800000000000000", @ANYRES32, @ANYBLOB="000000000000000000000000000000e6cc"], 0x50) r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e) r1 = socket$unix(0x1, 0x2, 0x0) connect$unix(r1, &(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e) writev(r1, &(0x7f00000008c0)=[{&(0x7f0000000580)='`', 0x1}], 0x1) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000080)=0x6, 0x26) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f00000000c0)=0x6d5, 0x4) recvmmsg(r0, &(0x7f0000000300), 0x40000000000049e, 0x1000000000fe, 0x0) 2m57.280365542s ago: executing program 33 (id=209): bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0e00000004000000080000000800000000000000", @ANYRES32, @ANYBLOB="000000000000000000000000000000e6cc"], 0x50) r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e) r1 = socket$unix(0x1, 0x2, 0x0) connect$unix(r1, &(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e) writev(r1, &(0x7f00000008c0)=[{&(0x7f0000000580)='`', 0x1}], 0x1) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000080)=0x6, 0x26) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f00000000c0)=0x6d5, 0x4) recvmmsg(r0, &(0x7f0000000300), 0x40000000000049e, 0x1000000000fe, 0x0) 1m28.53081545s ago: executing program 0 (id=371): clock_adjtime(0x14, &(0x7f0000000000)={0x80ea33, 0x5, 0x379ee6, 0x10000, 0x9, 0x622, 0x2, 0x5, 0x8, 0x4, 0xc, 0x8, 0xb, 0x80000000000002, 0x6, 0x3, 0x41ada053, 0x2, 0x9, 0x5, 0x200, 0x3, 0x11cb, 0x101, 0x40, 0x5}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x2140, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.time\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x13, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x60, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1m25.304351757s ago: executing program 0 (id=373): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000280)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0xb83297c01978451f}, 0x48) 1m23.319769296s ago: executing program 0 (id=375): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000180)=0x1001) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_open_dev$MSR(0x0, 0x0, 0x0) r1 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x5) fchdir(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r3, 0x0, 0x0) 1m19.649973975s ago: executing program 1 (id=378): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000080)=[{0x0}], 0x1, 0x0, 0x0, 0x40001}, 0x881) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0x1}}, 0x20) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0) setsockopt$inet_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, 0x0) r1 = semget$private(0x0, 0x6, 0x0) setresuid(0x0, 0xee00, 0x0) capset(0x0, 0x0) read$FUSE(r0, 0x0, 0x0) semtimedop(r1, 0x0, 0x0, 0x0) 1m17.498075322s ago: executing program 0 (id=379): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000070000000200000007"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) close(0x3) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x1, 0x40, 0x5, 0x41}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000700), 0x5003, r2}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000b98cad95850000000300000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4) sendmsg$unix(r4, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 1m16.83517725s ago: executing program 0 (id=380): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000280)='./file0\x00', 0x200841a, &(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRESOCT], 0x1, 0x553b, &(0x7f00000024c0)="$eJzs3EtvG1UUAOA7TtPSJxFiwa4jVUiJVFt12lSwC9CKh0gV8ViwAsd2LLe2J4odJ2SFBEvEgn+CQGLFkt/AgjU7xALEDgnkuWNKKI9WduKk/T5pfGbujM+cO7ISnRnLAXhiLaS//pyES+FsCGEuhHAhCfl6Uiy51RieCyFcDiGU/rIkxfifA6dDCOdCCJdGyWPOpNj1+dXhlZWf3vjlm+/OnDr/xdffz27WwKw9H0LobsX13W6MWSvGu8V4bdjOY/fGsIhxR/desZ3FuNvcyDPs1sbH1fJ4vRWPz7Z2+qO42anVR7HV3szHt3rxhP1ha5wnf8Pd2na+3Whu5LHdz/LY2o917e3Hv237/UHM0yjyfZinD4PBOMbx5l4zzmfrXh7rvUExHvNmjebeKA6LWJwu1LNOI69jY5Irfby92e7t7KXD5na/nfXSlUr1hUr1Zrm6nTWag+aNcq3buHkjXWx1RoeVB81ad7WVZa1Os1LPukvpYqteL1er6eKt5ka71kur1cr1yrXyylKxdjV99c67aaeRLo7iy+3ezul2p59uZttpfMdSuly5/uJSeqWavr22nq6/dfv22vo77996785La6+/Uhz0QFnp4vK15eVy9Vp5ubp0DOY/+r/7kPMfTDL/T4qiH2H+yWSXB/6bDxjAI3ug/w/6f+DwnfT+P0yz/x+1VPr//+9/S5P3/xP1v8e1/z/B84eJ6P8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJ5YP8x/+Vq+shC3zxfjF4uhZ4rtJIRQCiH8/g/mwukDOeeKPPP/cvz832r4Ngl5htE5zhTLuRDCarH89vRhXwUAAAB4fH310eXPYrceXxZmXRBHKd60KV34YEr5khDC/MKPU8pWGr08O6Vk+ef7VNibUrb8BtZTU0oWb7mdmla2hzI3Dh9fvD+YTyiJoXSk5QAAAEdi7kA42i4EAACAo/TprAtgNpIwfpQ5fhacf/P+/qPNswf2AQAAACdQMusCAAAAgEOX9/9+/w8AAAAeb/H3/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4g537uU0ciOIA/GwwsP+0aLX3bWVvUEZKyDHHQAFpghJIC2mAGsgtJUQQYY+QHIEUiXGsoO+TPM7Y0W9mgMsbSwYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6NJztZ4/3v97uDRnt79MntUAAAAAp2yr9bz+Y9r0f6Trv9KlP6lfREQZEadq90GMWpmDlFOd+f/q3RyeIuqEwxjjdHyPiP/peP3d9acAAAAA12uzXM2aar1ppn1PiM/UbNqUP28y5RURUU1fMqWVh+ZvprD69z2Mu0xp9QbWJFNYs+U2PH1vlGuQtkHrlFYyWdRfYt0ruxkXAADoU7sSOFOFAAAAcAVu+54A/SiOzfE547g5pQeC31o9AAAA4Asq+p4AAAAA0Lm6/vf+PwAAALhuzfv/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6NK2Ws83y9Xs3P3FB3N2+8vkWxEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwBv7844CIRAGYbB3fWcy9z+sNGhobFIFwsffGAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAm9/95f/E1DiTzL02lp5HkrVTY+vU2Ds3jv4wvn4NAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXOzPSwqEQBBEwZzxv5O+/2ElQc8gQgQ0PKqoRQMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPBFv/vl/8TUOJPMnTaWjkeStavG1lVj70Hj6MF4+zcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXOzcP28cRRQA8Hd7t5c/gDAGuTCgIFFAQ+xLSEgJBcii4CMgWc45GC4EEhckskBuoEKu0yAoEUICmS7fIXUspQldChdGogbt3u5lkxhyiszuEv9+0uy8Pa9m3uydLD/P2gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAafedeCkp4m52mBnH5Wu39jZWsn7ngT5zY+v2fNayuPOoib55++CTb7eXqycn5ionX9WfDAAAAIdDt6zvI+JOur2U9clMXv+n5TVZzf/9M+O4rOcfrPt39jaOFl+aL+v/3369+8JkopnxPNmgq2uj4eLDqfT+oyW23rOPvKKX3/n8dy/d/A1J3t98fjfN72fn25s33+3n4ZE6sgUAHsfJsi+C8uehrB80mRgAh0avUniX9X93ptmcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOqwuxlPlXEnIuZ79+LMzt7Gyn79ja3b82U7e/36VnXMbIg0IlbXRsO0xrW03ZWr1z5ZHo2Gl+sPTkREc7MXwYdTXBPx79cUH89obhX/HHTakUajQVK8P23J5yCD8rN38CM39A0JAIAnVlq0rK6/k24vZa91ZiP++uH++v+1ShxT1v93Pzp7qzpXtf4f1LbC9ltYv/jZwpWr195Yu7h8YXhh+OmbpwZvDU6fO3Pm3EJ2rxYXViMZLjadJgAAAP9j/aJV6/9k9uH9/+OVOKas/z//bvBlda6u+n9f9zb9ms4EAADgMOpPoude+fOPzj5XdPr9+GJ5ff3yYHycnJ8aH2tN9zEdKVq1/u/ONp0VAAAAUIfdzc59+//nK3FMuf//9I8v/lwdsxsRxyIuRcTw5Mql0fn6ltNqdfyhcj5Rv+mVAgAA0JRjRavu/6f58//J5JGHJCJef3Ucl//rapr6v/ve1z9V56o+/3+6viW2UjI3vh95PxfRm2s6IwAAAJ5kR4uWFfu/p9tLH/9y/IO+5/8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6vZ3AAAA//+pzDYD") mkdirat(0xffffffffffffff9c, 0x0, 0xc0) syz_mount_image$fuse(0x0, &(0x7f0000000140)='./bus\x00', 0x100688d, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000240)={0x10b141, 0x2, 0x10}, 0x18) chdir(&(0x7f00000003c0)='./bus\x00') renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x2) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, &(0x7f0000000140)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) 1m14.164409959s ago: executing program 0 (id=382): syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x5b) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f00000014c0)=0x10000b, 0x4) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000200000008ac05300240000102030109022400010104800909040000020301020509210100020122890309058103ff03020910"], 0x0) sendmmsg$alg(r1, &(0x7f00000007c0)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xffffffa9}, {&(0x7f00000002c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)}, {0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000003c0)="96e6e14d06cd2cd1dc6969313336a9017d94"}, {&(0x7f0000000400)="499b7fee4035c5b8beb1f70453870f0783c185665f5661dc54c5a1a1ad65e127a695fb29eb758e857595e5277fdfcd8246da633a7d6ed7e05fe75f4f36c670e755ca5142914fdc83650da6c01c7a06ebf495fbe36b151a4c207d9347308484a5891ad7c14310bd"}, {&(0x7f0000000640)="7caba4f81ffec1c44c4691773da226d91a54e9721f1f4c8f4d4f19a73292612c8ad72d40ac83e55148f6700815e6d140cfab03adc719caee1f3feed087bc616c3bc19a510350d0befe495457b7d16c139c6e6850f1e32a661bd7cc91e333472aae3e3eb8815a38aa8fea91788c44336c8437a86f885f3546456df377a81b43b22f543cad111ff0d0"}], 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="00000000000000001701000004000000040000000000000000000000000000001701000003000000000000000000000000000000000000001701000002000000000000008db6ba8669d9e3af336c9db7d7b600000000000067ab9dfade50263fca68064513414d4a7812c38b4c70753e9ef9f941ff7c1ebcfd79c64a594b41dd41b329d3cc14c29fa008f5c24363ad52e2bafeba6e55ac24ad2a44cbeacd365353b6541f21789daab56174ca2941b64022d67061ec8e2b1fa1eed6e9d4"], 0x0, 0x40088c0}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0xaed3}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) 1m7.813868036s ago: executing program 1 (id=383): sendmmsg$unix(0xffffffffffffffff, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x38}}], 0x1, 0x4) pipe(&(0x7f0000000680)={0xffffffffffffffff}) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6(0xa, 0x3, 0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x4, 0x4, 0x4, 0x12}, 0x50) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000100)={{{@in=@broadcast, @in=@remote, 0x0, 0x0, 0x0, 0x6, 0x2}, {0x0, 0x200000000, 0x40000000007, 0x20000a0de, 0x40000000000001, 0x4, 0x200000003, 0x9}, {0xa5f}, 0x4, 0x0, 0x1, 0x0, 0x3, 0x3}, {{@in=@empty, 0x4d3, 0x6c}, 0xa, @in=@private=0x200, 0x3502, 0x1, 0x8, 0x0, 0x9075}}, 0xe8) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x8000000000000001, 0x14) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x10, &(0x7f0000000000), 0x1, 0x4ec, &(0x7f0000000640)="$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") socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@updpolicy={0xb8, 0x1d, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x30, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x4}, {}, 0x0, 0x0, 0x2}}, 0xb8}}, 0x0) 1m6.51113488s ago: executing program 1 (id=384): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000000) syz_mount_image$jfs(&(0x7f0000000380), &(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000000, &(0x7f000000bcc0)=ANY=[@ANYRES16=0x0, @ANYRESDEC=0x0, @ANYRESHEX, @ANYRES16, @ANYBLOB="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", @ANYRESOCT, @ANYRES64=0x0, @ANYRES64, @ANYRESOCT], 0x41, 0x5e97, &(0x7f0000005e00)="$eJzs3UuPFNfZB/CnL9Nz4TWMLL2WhbIYY+dCMDBcDLnb3iRSVpEiNlmBxmMLBScRkCi2UBhrFvkGUbJIlOyzyifIHj6EF1kGCZKNV6moZs6BmkoPzQDT1TPn95OaqqdOVfcp/n2druoTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAED88Ps/PteLiKu/SguWI/4vBhH9iMW6XomIxZXlvP4wIl6PreZ4rV59PqLefuufYxEXI+L+0YiHj+6s1YvPP2M//n3k/4/9868/OP37v/3u3sk/nnq73f6n9X/c+8nddFsAAADAnlRVVfXSx/zj6fN9v+tOAQBTkV//qyQvV6vVarVaffjqpmq8u80iIjaa29TvGe6OuzIAYHZtxBddd4EOyb9ow4g40nUngJnmuPvD6eGjO2u9lG+v+Xqwst2ejwXZkf9G7/H5HbtNJ2kfYzKt+9dmDOLVXfqzOKU+zJKcf7+d/9Xt9lFab7/zn5bd8h9tn/pUnJz/oJ1/y+HJvz82/1Ll/Id7yn8gfwAAAAAAmGH57//LU/v+t7fjerP5l7M7Ez3t+9+VKfUBAAAAAAAAAF62Fx3/7zHj/wEAAMDMqj+r1/589Mmy3T5j18uv9CJeaa0PFCadLLPUdT8AAAAAAAAAAAAAoCTD7WN4r/Qi5iLilaWlqqrqS1O73qsX3f6gK33/oWRdP8kDAMC2+0db5/L3IhYi4kr6rb+5paWlqlpYXKqWqsX5/H52NL9QLTY+1+ZpvWx+9AxviIejqr6yhcZ2TZM+L09qb19ffVujavAMHZuODgMHgIjYfjV66BXpkKmqY9H1uxwOBo//w8fjn2fR9f0UAAAA2H9VVVW99HPex9N3/v2uOwUATEV+/W9/L6BWq9Vqtfrw1U3VeHebRURsNLep3zPcHXdlAMDs2ogvuu4CHZJ/0YYR8XrXnQBmWq/rDrAvHj66s9ZL+faarwdpfPd8LMiO/Dd6W9vl7cdNJ2kfYzKt+9dmDOLVXfrz2pT6MEty/v12/le320dpvf3Of1p2y7/ez+UO+tO1nP+gnX/L4cm/Pzb/UuX8h3vKfyB/AAAAAACYYfnv/8u+/827DAAAAAAAAAAHzsNHd9byea/5+/8vjVnP+Z+HU86/J/8i5fz7rfy/1lpv0Jh/8P6T/P/16M7aj/7w+fE8fdb85/NML92zeuke0Uu31Bum6XPv2vy4hZtzg1F9S3O9/mCYjvmp5j6M63Ej1mN1x7r99P/xpP3cjva6p3Pprrzdfn5H+3C7vbH9hR3tc+l3B6rF3H4m1uLncSM+2Gqv2+Yn7P/ChPZqQnvOf+DxX6Sc/7BxqfNfSu291rT24LP+/zzum9Nxt/Peb+/dX93/3ZloMwaP962p3r8THfRn6//kyCh+eWv95plfX7t9++a5SJMdS89HmrxkOf+5dHn8/P/mdnt+3m8+Xh98Ntpz/rNiM4a75v9mY77e35NT7lsXcv6jdMn5f5Daxz/+D3L+uz/+T3XQHwAAAAAAAAAAAAAAAHiaqqq2ThF9LyIupfN/ujo3EwCYrvz6XyV5uVqtVqvV6sNXN1XjvdssIuLvzW3q9wy/GXdlAMAs+09EfN51J+iM/AuWf++vnr7VdWeAqbr1yac/vXbjxvrNW133BAAAAAAAAAB4Xnn8z5XG+M9vRcRya70d47++HysvOv7nMM88HmD0+Qf63ovN/mjQbww3/kY8ffzvE/H08b+HE25vbkL7aEL72EHMGxYmtI890aMh5/9GY7zzOv/jreHXSxj/tT3mfQly/ica9+c6/6+21mvmX/3lIOff35H/2dsf/+LsrU8+PX3942sfrX+0/rOLq6uXLlx+Z/Xy6tkPr99YT/922OP9lfPPY187DrQsOf+cufzLkvP/cqrlX5ac/1dSLf+y5Pzz+z35lyXnnz/7yL8sOf+TqZZ/WXL+X0+1/MuS8z+VavmXJef/dqrlX5ac/+lUy78sOf8zqZZ/WXL+Z1Mt/7Lk/PM3XPIvS84/H9kg/7Lk/M+nWv5lyflfSLX8y5Lzv5hq+Zcl5/9OquVflpz/pVTLvyw5/8upln9Zcv7fSLX8y5Lz/2aq5V+WnP+3Ui3/suT8v51q+Zcl5/+dVMu/LDn/76Za/mXJ+X8v1fIvS87/3VTLvyxPfv/fjBkzZvJM189MAAAAAAAAAAAAAEDbNA4n7nofAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+C87cCAAAAAAAOT/2ghVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVV2IEDAQAAAAAg/9dGqKqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqsLevcbIdZZ3AD97c9YOly2E4IYAG8cEkyzZ9T2mNZhbSRPSUiC0pRfj2mtj8K1em1sjxSi0RGrURiof4EO5Fal8qYgAVVSlyJVagQQS+UQrtQ2pAlVEoTW0H6AibDUz7/PuzHivZzb2zDm/nxQ/9uyZmXfOvDO7/3X+awAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoN1Nr5398FBRFI3/mr9MFMUzGr/fODnR+OPWV1ztFQIAAAC9eqr566Vn5wsOrOJKbcd89UXf/OL8/Px88dh3X/b8j8zP5w9MFsXENUXR/Fh48p6/3dp+TPJAMT403Pbn4RXufmSFj4+u8PGxFT6+YYWPX7PCx8dX+PhlJ+AyG1vfj2ne2Nbmbydap7S4rhhrfmzrItd6YOia4eH4Xk7TUPM682NHi+PFiWK2mOk4vnXsUPP4L9/UuK87i7iv4bb7urGxQ3543+FYw1A6x1s77mvhNsMPXl1M/uiH9x1+08cev2GxueJp6Li91jq3bWms80PpktZah4pr8jmJdQ63rfPGRZ6TkY51DjWv1/h99zovrXKdIwvLvKK6n/PxYrj5+0eb52m0/dt6+TzdmC778c1FUVxYWHb3MZfdVzFcbOq4ZHjh+Rlv7cjGbTS20nOK0TXt05tWsU8b88jWzn3a/ZqI5/+mdL3RJdbQ/jT94IMbLnve17pPQ+NRL/Va6d6D6/1a6Zc9GPvi0eaDfnDRPbg1Pf77bll6Dy66dxbZg/lxt+3BLSvtweENI8015ydhqHmdhT24veP4keY9DTXnk7csvwenz508Mz33/g+8/PjJQ8dmj82e2jUzs2fn3t0ze2emjx4/MZt+LXm2+9+mYji/BrakcxevgZd2Hdu+Vec/tX6vw/FlXocTXceu9+twtPvBDV2ZF+Tle7r12nhr46SPPzRcLPEaaz4/t/b+OsyPu+11ONr2Olz0c8oir8PRVbwOG8ecuXV1X7OMtv232Bqers8FE217sPvrke49uN5fj/TLHhxP++Jfb136c8GNab0PTq3165GRy/ZgfrjpvadxSf56f/yO5lhsX97Q+MC1G4rzc7Nnb3/foXPnzm4v0rgintu2V7r366a2x1Rctl+H17xfD3z469+4YZHLJ9K5Gn9545fxJZ+rxjG7bl/+uWp+dlv8fHZcuqNIY51d6fO52GfzxvnMWXKZ89k45kPTvX8tnnNp2/vv2BLvv5H7f9a8n635ph4YGRttvX5H8tkZ63g/7nyqRpvvXUPN+740vbr347H035V+P75umffjzV3Hrvf78Vj3g4v346GVvtvRm+7nczztkxMzy78fN47ZvGOte3J02ffjm9McSuf/ZSkp5FzUtneW2rf5vkZHx9LjGo176NynOzuOH0vZrHFfn91Rbp9uu7l1WyP50S24Uvt0suvY9d6n+f1qqX06tNJ338rpfj7H0764bufy+7RxzMVdvb93bozftr13blhpD46NbGiseSxvwtb7/fzG2IO3F4eL08WJ4kjzoxua+2moeV9Tu1e3Bzek/670e+XmZfbgtq5j13sP5s9jS+29odHLH/w66H4+x9O++Oju5fdg45jX7V3fr123pUvyMW1fu3Z/f22p73nd0HWans7veTXW+Q97l//ebOOYE3esNWcuf55uS5dcu8h56n79LvWaOlJcmfO0Oa3z+3csfZ4a62kc85F9q9xPB4qi+MLdB5rf701/v/L589/6YsffuxxofexL+xZu67KvOhb7e58v3H3g4j/f9ZO1PEYA+tvPmr9u3dT6XNf2N1Or+ft/AAAAYCBE7h9OM5P/AQAAoDIi98f/FZ7J/wAAAFAZkftH08xqkv8f/Lfnvfun9xe5mT+fxMfjNJx5onVcdFw/mf48Ob+gcflrPvOPX3/7/au77+GiKH56178sevyDT8S6Wh5O65z8dufll9n87VXd/zvuXTiuvQM4kW4/Hk/3Nvjyfz/RvN7kvta8eNfF5nzzhQcfaHz80r7Wn6M7+eT/tI7781TmPXD07zuuv+2x1v1tfWz5xxXX+9wbN979grct3F9cb2jLs5oP46OvbN1u/Nybh1/bOv5SOm6p9f/dH3/2c43j3/eSxdd///Di638y3e530vzJU63L289p489xvT9M64/7i+vd/umvLLr+R97QOv6R9Lx8Ms3u9b/6T1/4VPv5ivXH/Rx4vHW9uP+Zv/6P5vXi9uL2u9c//qonOs5H9+1f/Hzrdva/539H2o+Py+N+8r57vPN5btxO+34Ln/2jix3nufj31vX+pmv9cXtnHl98/bd1rfPM9k3N6y9VGf/47HcWfbyxngN/9WjH43nke+n8veae5u2O/zjtx/Tx/3u4dXvdPy3h0e91vp/E8Z+caL0u4/amu9b/cNf6L7y4ce5WXv+dP2qt/5FXfbXz+fjP1joO/KA1V1r/sU98s+P6n/pW6/k4+96pU6fnzh+PDvVE+tk/Z77bur1rxjduuvYZz3zWs9N7ZfefD54+987Zs5MzkzNFMTmAPxLv6V7/p9P8r9a4sN63f19RFO9t+7x26+tb+6940aU/efGdn3lnHPdPr2td/tDdrc9bL03HPZwuv5Ce77idj3+s9fmw1/XH/Sw183pX6fzXPrxnVQemx//Rm65vvsqGLrYu7n6/Kite548/r/N1/9hbW/NL6bzOp5/MvOX6rzWP677/+NkID72l9fqOr+Ti+r2u/y/T833Pd1q3H7eb15u+jvnK5s73x3h+vnR/108amGj9FI8L6f2juND6eBwVX1M9dOn6tSxzSXPvn5s+cfzU+fdNn5udOzc99/4PHDx5+vypcwebP5vz4LtWuv7C63tT8/V9ZHbPrqL5aj/dGk+zq73+M/cePrJ35pYjs0cPnT967t4zs2ePHZ6bOzx7ZO6WQ0ePzr53pesfP7J/+459O/fumDp2/Mj+O/bt27lv6vip041ltBa1gj0z7546dfZg8ypz+3ft2757966ZqZOnj8zu3zszM3V+pes3PzdNNa79nqmzsycOnTt+cnZq7vgHZvdv37dnz44Vf7rfyTNH5yanz54/NX1+bvbsdOuxTJ5rXtz43LfS9aFh7hMbF/08NZS+et9+257881kbPvPBJW+qdUjXDxD9fvpZNN/4iz/bvZo/R+4fSzOrSf4HAACAOojcvyHNTP4HAACAyojcf02amfwPAAAAlRG5fzzNrCb5X/9f/1//X/8/6P/r/5eh/6//X4b+v/7/IKxf/1//n971W/8/cv/Goqhl/gcAAIA6iNy/Kc1M/gcAAIDKiNx/bZqZ/A8AAACVEbn/GWlmNcn/+v/6//r/+v9B/1//vwz9f/3/MvT/9f8HYf36//r/9K7f+v+R+5+ZZlaT/A8AAAB1ELn/WWlm8j8AAABURuT+Z6eZyf8AAABQGZH7J9LMapL/9f/1//X/9f+D/r/+fxn6//r/Zej/6/8Pwvr1//X/6V2/9f8j9/9cmllN8j8AAADUQeT+56SZyf8AAABQGZH7n5tmJv8DAABAZUTuvy7NrCb5X/9f/79/+v8LtVj9f/1//f/Bof+v/1+G/r/+/yCsX/9f/5/e9Vv/P3L/89LMapL/AQAAoA4i91+fZib/AwAAQGVE7n9+mpn8DwAAAJURuX9zmllN8r/+v/5///T//fv/Qf9f/3+Q6P/r/5eh/6//Pwjr1//X/6d3/db/j9z/82lmNcn/AAAAUAeR+29IM5P/AQAAoDIi978gzUz+BwAAgMqI3H9jmllN8r/+v/6//r/+f9D/1/8vQ/9f/78M/X/9/0FYv/6//j+967f+f+T+F6aZ1ST/AwAAQB1E7n9Rmpn8DwAAAJURuf/FaWbyPwAAAFRG5P7JNLOa5H/9f/1//X/9/6D/r/9fhv6//n8Z+v/6/4Owfv1//X9612/9/8j9N6WZ1ST/AwAAQB1E7t+SZib/AwAAQGVE7r85zUz+BwAAgMqI3L81zawm+V//X/9f/1//P+j/6/+Xof+v/1+G/r/+/yCsX/9f/5/e9Vv/P3L/S9LMapL/AQAAoA4i99+SZib/AwAAQGVE7n9pmpn8DwAAAJURuX9bmllN8r/+v/6//r/+f9D/1/8vQ/9f/78M/X/9/0FYv/6//j+967f+f+T+l6WZ1ST/AwAAQB1E7r81zUz+BwAAgMqI3H9bmpn8DwAAAJURuX8qzawm+V//X/9f/1//P+j/6/+Xof+v/1+G/r/+/yCsX/9f/5/e9Vv/P3L/y9PMapL/AQAAoA4i99+eZib/AwAAQGVE7p9OM5P/AQAAoDIi98+kmdUk/+v/6//r/+v/B/1//f8y9P/1/8vQ/9f/H4T16//r/9O7fuv/R+7fnmZWk/wPAAAAdRC5f0eamfwPAAAAlRG5f2eamfwPAAAAlRG5f1eaWU3yv/6//r/+v/5/0P/X/y9D/1//vwz9f/3/QVi//r/+P73rt/5/5P7daWY1yf8AAABQB5H796SZyf8AAABQGZH796aZyf8AAABQGZH770gzq0n+1//X/9f/1/8P+v/6/2Xo/+v/l6H/r/8/COu/Iv3/B5b+MQD6/1RBv/X/I/fvSzOrSf4HAACAOojc/4o0M/kfAAAAKiNy/y+kmcn/AAAAUBmR+38xzawm+V//X/9f/1//P+j/6/+Xof+v/1+G/r/+/yCs37//r/9P7/qt/x+5f3+aWU3yPwAAANRB5P5XppnJ/wAAAFAZkftflWYm/wMAAEBlRO4/kGZWk/yv/6//r/+v/x/0/wek//8HqzjmCtL/1/8vQ/9f/38Q1q//r/9P7/qt/x+5/9VpZjXJ/wAAAFAHkftfk2Ym/wMAAEBlRO5/bZqZ/A8AAACVEbn/dWlmNcn/+v/6//r/+v9B/39A+v99Rv9f/78M/X/9/0FYv/6//j+967f+f+T+16eZ1ST/AwAAQB1E7v+lNDP5HwAAACojcv8b0szkfwAAAKiMyP13ppnVJP/r/+v/P139/w3pNvT/2/ad/n+T/r/+/1ro/+v/F2vp/w+lV7D+f9PV7s8P+vr1//X/6V2/9f8j9/9ymllN8j8AAADUQeT+u9LM5H8AAACojMj9d6eZyf8AAABQGZH735hmVpP83/f9/3SH+v9L9v+f2Zj92P8P+v9t+07/v0n/X/9/LfT/9f8L//5/aVe7Pz/o69f/1/+nd/3W/4/cf0+aWU3yPwAAANRB5P5fSTNrz/9L/WUZAAAAMBAi9/9qmpm//wcAAIDKiNz/pjSzmuT/vu//J/r/g/fv/wf9/7Z9p//fpP+v/78W+v/6/4X+f2lXuz8/6OvX/9f/p3f91v+P3P9raWY1yf8AAABQB5H735xmJv8DAABAZUTuf0uamfwPAAAAlRG5/61pZjXJ//r/+v/6//r/Qf9f/78M/X/9/zL0//X/B2H9+v/6//Su3/r/kfvvTTOrSf4HAACAOojc/7Y0M/kfAAAAKiNy/6+nmcn/AAAAUBmR+38jzawm+V//X/9f/1//P+j/6/+Xof+v/1+G/r/+/yCsX/9f/5/e9Vv/P3L/b6aZ1ST/AwAAQB1E7n97mpn8DwAAAJURuf+30szkfwAAAKiMyP2/nWZWk/yv/6//r/+v/x/0//X/y9D/1/8vQ/9f/38Q1q//r/9P7/qt/x+5/3fSzGqS/wEAAKAOIvf/bpqZ/A8AAACVEbn/YJqZ/A8AAACVEbn/HWlmNcn/+v/6//r/+v9B/1//vwz9f/3/MvT/9f8HYf36//r/9K7f+v+R+w+lmdUk/wMAAEAdRO7/vTQz+R8AAAAqI3L/4TQz+R8AAAAqI3L/kTSzmuR//X/9f/1//f+g/6//X4b+v/5/Gfr/+v9huSfkaq9/vfr/I4X+P/XVb/3/yP2zaWY1yf8AAABQB5H7j6aZyf8AAABQGZH7j6WZyf8AAABQGZH735lmVpP8r/+v/6//r/8f9P/1/8vQ/9f/L0P/X/9/ENbv3//X/6d3/db/j9x/PM2sJvkfAAAA6iBy/7vSzOR/AAAAqIzI/e9OM5P/AQAAoDIi959IM6tJ/tf/1//X/9f/D/r/+v9l6P/r/5eh/6//Pwjr1//X/6d3/db/j9x/Ms2sJvkfAAAA6iBy/6k0M/kfAAAAKiNy/+k0M/kfAAAAKiNy/5k0s5rkf/1//X/9f/3/oP+v/1+G/r/+fxn6//r/g7B+/X/9f3rXb/3/yP2/n2ZWk/wPAAAAdRC5/2yamfwPAAAAlRG5fy7NTP4HAACAyojcfy7NrCb5X/9f/1//X/8/6P/r/5eh////7N3Vi2DZEcfxJiTQT/lv4+7u7u6+cXd3d3d3z0NIuqpCspuEPXdm99yqz+eloBeWw9AP82P4cvX/K/T/+v8zvF//r//nuN36/9z9d4hbhux/AAAAmCB3/x3jFvsfAAAA2sjdf6e4xf4HAACANnL33zluGbL/9f/6f/2//j/p//X/K/T/+v8V+n/9/xner//X/3Pcbv1/7v67xC1D9j8AAABMkLv/rnGL/Q8AAABt5O6/W9xi/wMAAEAbufvvHrcM2f/6f/2//l//n/T/+v8V+n/9/wr9v/7/DO/X/+v/OW63/j93/z3iliH7HwAAACbI3X/PuMX+BwAAgDZy998rbrH/AQAAoI3c/feOW4bsf/2//l//r/9P+n/9/wr9v/5/hf5f/3+G9+v/9f8ct1v/n7v/PnHLkP0PAAAAE+Tuv2/cYv8DAABAG7n77xe32P8AAADQRu7++8ctQ/a//l//r//X/yf9v/5/hf5f/79C/6//P8P79f/6f47brf/P3f+AuGXI/gcAAIAJcvc/MG6x/wEAAKCN3P0PilvsfwAAAGgjd/+D45Yh+1//r//X/+v/k/5f/79C/6//X6H/1/+f4f36f/0/x+3W/+fuf0jcMmT/AwAAwAS5+x8at9j/AAAA0Ebu/ofFLfY/AAAAtJG7/+Fxy5D9r//X/+v/9f9J/6//X6H/1/+v0P/r/8/wfv2//p/jduv/c/c/Im4Zsv8BAABggtz9j4xb7H8AAABoI3f/o+KW/9z/l7fkqwAAAIBrKXf/o+OWIf/+r//X/+v/9f9J/6//X6H/1/+v0P/r/8/wfv2//p/jduv/c/c/Jm4Zsv8BAABggtz9j41b7H8AAABoI3f/4+IW+x8AAADayN3/+LhlyP7X/+v/9f/6/6T/1/+v0P/r/1fo//X/Z3i//l//z3G79f+5+58QtwzZ/wAAADBB7v4nxi32PwAAALSRu/9JcYv9DwAAAG3k7n9y3DJk/+v/9f/6f/1/0v/r/1fo//X/K/T/+v8zvF//r//nuN36/9z9T4lbhux/AAAAmCB3/1PjFvsfAAAA2sjd/7S4xf4HAACANnL3Pz1uGbL/9f/6f/2//j/p//X/K/T/+v8V+n/9/xner//X/3Pcbv1/7v5nxC1D9j8AAABMkLv/mXGL/Q8AAABt5O5/Vtxi/wMAAEAbufufHbcM2f/6f/2//l//n/T/+v8VDfv/q18B/b/+X/+v/9f/6/85bLf+P3f/c+KWIfsfAAAAJsjd/9y4xf4HAACANnL3Py9usf8BAACgjdz9z49bhux//b/+X/+v/0/6f/3/iob9v+//X1zr/v/yRj/R/+v/z/B+/b/+n+N26/9z978gbhmy/wEAAGCC3P0vjFvsfwAAAGgjd/+L4hb7HwAAANrI3f/iuGXI/tf/6//1//r/pP/X/6/Q/zft/29z4fv/+n/9v/5f/89hu/X/uftfErcM2f8AAAAwQe7+l8Yt9j8AAAC0kbv/ZXGL/Q8AAABt5O5/edwyZP/r//X/+n/9f9L/6/9X6P+b9v/X9Pv/N6b/1/+f4f36f/0/x+3W/+fuf0XcMmT/AwAAwGndjO2eu/+VcVf+HwAAAMDecve/Km6x/wEAAKCN3P2vjluG7H/9v/5/j/7/houber/+X/9/of/fnv5f/79C/6//P8P7r1P/n7+m+n9G2K3/z93/mrhlyP4HAACACXL33xC32P8AAADQRu7+18Yt9j8AAAC0kbv/dXHLkP2v/9f/79H/z/z+/6X+/9/+PPX/+v+bov/X/1/o/5fd2v382d/v+//6f47brf/P3f/6uGXI/gcAAIAJcve/IW6x/wEAAKCN3P1vjFvsfwAAAGgjd/+b4pYh+1//r//X//v+f9L/6/9X6P/1/yv0//r/M7xf/6//57jd+v/c/W+OW4bsfwAAAJggd/9b4hb7HwAAANrI3f/WuMX+BwAAgDZy978tbhmy//X/+n/9v/4/6f/1/yv0//r/Ffp//f8Z3q//1/9z3G79f+7+t8ctQ/Y/AAAATJC7/x1xi/0PAAAAbeTuf2fcYv8DAABAG7n73xW3DNn/+n/9v/5f/5/0//r/Ffp//f8K/b/+/wzv1//r/zlut/4/d/+745Yh+x8AAAAmyN3/nrjF/gcAAIA2cve/N26x/wEAAKCN3P3vi1uG7H/9v/5f/6//T/p//f8K/b/+f4X+X/9/hvfr//X/HLdb/5+7//1xy5D9DwAAABPk7v9A3GL/AwAAQBu5+z8Yt9j/AAAA0Ebu/g/FLUP2v/5f/6//1/8n/b/+f4X+X/+/Qv+v/z/D+/X/+n+O263/z93/4bhlyP4HAACACXL3fyRusf8BAACgjdz9H41b7H8AAABoI3f/x+KWIftf/6//1//r/5P+X/+/Qv+v/1+h/9f/n+H9+n/9P8ft1v/n7v943DJk/wMAAMAEufs/EbfY/wAAANBG7v5Pxi32PwAAALSRu/9T/7y3/dd/GLL/9f/6f/2//j/p//X/K/T/+v8V+n/9/xner//X/3Pcbv3/1e6/vPh03DJk/wMAAMAEufs/E7fY/wAAANBG7v7Pxi32PwAAALSRu/9zccuQ/a//1//r//X/Sf+v/1+h/9f/r9D/6//P8H79v/6f43br/3P3fz5uGbL/AQAAYILc/V+IW+x/AAAAaCN3/xfjFvsfAAAA2sjd/6W4Zcj+1//r/3v1/1cpnv7/iv7/iv7/+tL/6/9X6P/1/2d4v/5f/89xu/X/ufu/HLcM2f8AAAAwQe7+r8Qt9j8AAAC0kbv/q3GL/Q8AAABt5O7/WtwyZP/r//X/vfr/K/r/K/r/K/r/60v/r/9fof/X/5/h/fp//T/H7db/5+7/etwyZP8DAADABLn7vxG32P8AAADQRu7+b8Yt9j8AAAC0kbv/W3HLkP2v/9f/6//1/0n/r/9fof/X/6/Q/+v//5vbb/R+/b/+n+N26/9z9387bhmy/wEAAGCC3P3fiVvsfwAAAGgjd/934xb7HwAAANrI3f+9uGXI/tf/6//1//r/pP/X/6/Q/+v/V+j/9f9neL/+X//Pcbv1/7n7vx+3DNn/AAAAMEHu/h/ELfY/AAAAtJG7/4dxi/0PAAAAbeTu/1HcMmT/6//1//p//X/S/+v/V+j/9f8r9P/6/zO8X/+v/+e43fr/3P0/jluG7H8AAACYIHf/T+IW+x8AAADayN3/07jF/gcAAIA2cvf/LG4Zsv/1//p//b/+P+n/9f8r9P/6/xX6f/3/Gd6v/9f/c9z/6v/j7/y3aP+fu//nccuQ/Q8AAAAT5O7/Rdxi/wMAAEAbuft/GbfY/wAAANBG7v5fxS1D9r/+X/+v/9f/J/2//n+F/l//v0L/r/8/w/v1//p/jtvt+/+5+38dtwzZ/wAAADBB7v7fxC32PwAAALSRu/+3cYv9DwAAAG3k7v9d3DJk//+//v92cW/F/j+foP/X/+v/9f/6/w3p//X/K/T/+v8zvF//r//nuN36/9z9v49bhux/AAAAmCB3/x/iFvsfAAAA2sjd/8e4xf4HAACANnL3/yluGbL/ff9f/6//1/8n/b/+f4X+X/+/Ynz//48f6/+3f7/+X//Pcbv1/7n7/xy3DNn/AAAAMEHu/r/ELfY/AAAAtJG7/69xi/0PAAAAbeTu/1vcMmT/6//1//p//X/S/+v/V+j/9f8rxvf/vv9/ivfr//X/HLdb/5+7/+8BAAD//xKBZe0=") syz_mount_image$vfat(&(0x7f0000000b00), &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181d011, 0x0, 0x40, 0x0, &(0x7f0000000140)) mkdir(&(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x824851, 0x0, 0x1, 0x0, &(0x7f0000000d40)) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) creat(&(0x7f00000009c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x44) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000580)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0, 0x0, 0x0, 0x0) symlink(&(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000001180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x1008000, 0x0) 1m2.960769085s ago: executing program 1 (id=386): socket$packet(0x11, 0x3, 0x300) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008200122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000040)={0x2c, &(0x7f0000000680)={0x40, 0x0, 0x4, "0c8ac451"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000880)={0x2c, &(0x7f0000000440)={0x20, 0x7, 0x5, "739d25a9c9"}, 0x0, 0x0, 0x0, 0x0}) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, 0x0, 0x4810) 58.783909497s ago: executing program 34 (id=382): syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x5b) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f00000014c0)=0x10000b, 0x4) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000200000008ac05300240000102030109022400010104800909040000020301020509210100020122890309058103ff03020910"], 0x0) sendmmsg$alg(r1, &(0x7f00000007c0)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xffffffa9}, {&(0x7f00000002c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)}, {0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000003c0)="96e6e14d06cd2cd1dc6969313336a9017d94"}, {&(0x7f0000000400)="499b7fee4035c5b8beb1f70453870f0783c185665f5661dc54c5a1a1ad65e127a695fb29eb758e857595e5277fdfcd8246da633a7d6ed7e05fe75f4f36c670e755ca5142914fdc83650da6c01c7a06ebf495fbe36b151a4c207d9347308484a5891ad7c14310bd"}, {&(0x7f0000000640)="7caba4f81ffec1c44c4691773da226d91a54e9721f1f4c8f4d4f19a73292612c8ad72d40ac83e55148f6700815e6d140cfab03adc719caee1f3feed087bc616c3bc19a510350d0befe495457b7d16c139c6e6850f1e32a661bd7cc91e333472aae3e3eb8815a38aa8fea91788c44336c8437a86f885f3546456df377a81b43b22f543cad111ff0d0"}], 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="00000000000000001701000004000000040000000000000000000000000000001701000003000000000000000000000000000000000000001701000002000000000000008db6ba8669d9e3af336c9db7d7b600000000000067ab9dfade50263fca68064513414d4a7812c38b4c70753e9ef9f941ff7c1ebcfd79c64a594b41dd41b329d3cc14c29fa008f5c24363ad52e2bafeba6e55ac24ad2a44cbeacd365353b6541f21789daab56174ca2941b64022d67061ec8e2b1fa1eed6e9d4"], 0x0, 0x40088c0}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0xaed3}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) 58.28584131s ago: executing program 1 (id=390): socket$inet_tcp(0x2, 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) pipe(&(0x7f0000000d00)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, &(0x7f0000000040)}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r3, &(0x7f0000000500)=[{{&(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='p'], 0x70}}], 0x40000000000007c, 0x2000c044) write$binfmt_misc(r1, &(0x7f0000000680)="73823e4ce60189b35d6b84", 0xb) splice(r0, 0x0, r2, 0x0, 0x714f, 0x0) 57.688594472s ago: executing program 1 (id=392): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x0, 0x0, 0xc, @vifc_lcl_addr=@local, @dev={0xac, 0x14, 0x14, 0x3c}}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @private, @multicast1}, @address_request={0x11, 0x2}}}}}, 0x0) setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)="2e00000010008108040f80ecdb4cb92e0a480e000f000000e8bd6efb250314000e000100240248ff050005001200", 0x2e}], 0x1}, 0x40880) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @address_request}}}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r2, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xfffffff7, 0x4, 0x40000006}, 0x3c) 43.161717325s ago: executing program 4 (id=403): prlimit64(0x0, 0xe, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000040)='./file1\x00', 0x800810, &(0x7f0000000140)={[{@nossd_spread}, {@nodatasum}, {@compress_force}, {@compress_algo={'compress', 0x3d, 'lzo'}}, {@flushoncommit}, {@autodefrag}, {@max_inline={'max_inline', 0x3d, [0x30, 0x37, 0x65]}}, {@nodiscard}]}, 0xfb, 0x510a, &(0x7f000000d000)="$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") ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) open(&(0x7f0000000240)='./file1\x00', 0x84242, 0x1df2a23c5997fa5f) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x4c142, 0x0) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) sendfile(r0, r0, 0x0, 0xe3aa6ea) 42.381042275s ago: executing program 35 (id=392): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x0, 0x0, 0xc, @vifc_lcl_addr=@local, @dev={0xac, 0x14, 0x14, 0x3c}}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @private, @multicast1}, @address_request={0x11, 0x2}}}}}, 0x0) setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)="2e00000010008108040f80ecdb4cb92e0a480e000f000000e8bd6efb250314000e000100240248ff050005001200", 0x2e}], 0x1}, 0x40880) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @address_request}}}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r2, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xfffffff7, 0x4, 0x40000006}, 0x3c) 40.6398387s ago: executing program 4 (id=405): sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x14, 0x0, 0xb49705592b0ef824, 0x70bd27, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x48890) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x22}}, 0x6}, 0x1c) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0xd}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000005c0)={r2, 0xffffffffffffffff, 0x15, 0x0, @val=@kprobe_multi=@syms={0x0, 0x0, 0x0}}, 0x30) sendmsg$nl_route(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x800) sendmmsg$inet6(r1, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000002c0)="cd", 0x1}], 0x1}}], 0x4000000000000ec, 0x8001) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000400)=""/165, 0xa5, 0x1, 0x0}, &(0x7f0000000180)=0x40) 32.469748365s ago: executing program 4 (id=406): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x103080, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000180)={0x1, 0xaa4, 0x0, &(0x7f0000000340)}) ioctl$KVM_SET_CLOCK(r1, 0x4188aec6, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x20000000000003, 0x1004}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000680)=[@text16={0x10, &(0x7f0000000080)="66b9800000c00f326635010000000f3064660f38828e4258660f08676ac744240012e93bf96766c744240201000000f20f78ecf5543e660f3829544e66b9800000c00f326635002000000f300f01df66b805000000f3a5baf80c66b80e5ca48f66efbafc0cec0f01310f019c09000f01c2", 0x71}], 0x1, 0x7d, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_X86_USER_SPACE_MSR(r1, 0x4068aea3, &(0x7f0000000100)={0xbc, 0x0, 0x4}) ioctl$KVM_RUN(r2, 0xae80, 0x0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000840)={0x0, 0x215, "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"}, &(0x7f0000000080)=0x21d) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 28.216532284s ago: executing program 4 (id=407): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f00000000c0)={[{@nobh}, {@nodiscard}, {@bh}, {@init_itable_val={'init_itable', 0x3d, 0x10}}, {@dioread_lock}, {@errors_remount}, {@nodioread_nolock}]}, 0x1, 0x787, &(0x7f0000001000)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x44042, 0x1ff) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x2000, 0x0) sendfile(r1, r2, 0x0, 0x20fffe82) 25.044946316s ago: executing program 4 (id=408): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000880)={0x14, 0x3a, 0x229, 0x0, 0x0, {0x2}}, 0x14}}, 0x1000000) 16.184349498s ago: executing program 4 (id=409): socket$nl_netfilter(0x10, 0x3, 0xc) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) socket(0x80000000000000a, 0x2, 0x0) socket$rds(0x15, 0x5, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) epoll_create1(0x80000) r0 = socket$packet(0x11, 0x2, 0x300) socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) bind$packet(r0, &(0x7f00000000c0)={0x11, 0x18, r2, 0x1, 0x81}, 0x14) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f00000010c0)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x0, 0x0, 0xffffffff}, 0x1c) 0s ago: executing program 36 (id=409): socket$nl_netfilter(0x10, 0x3, 0xc) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) socket(0x80000000000000a, 0x2, 0x0) socket$rds(0x15, 0x5, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) epoll_create1(0x80000) r0 = socket$packet(0x11, 0x2, 0x300) socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) bind$packet(r0, &(0x7f00000000c0)={0x11, 0x18, r2, 0x1, 0x81}, 0x14) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f00000010c0)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x0, 0x0, 0xffffffff}, 0x1c) kernel console output (not intermixed with test programs): entation "cts-cbc-aes-aesni" [ 97.614883][ T5816] fscrypt: AES-256-XTS using implementation "xts-aes-aesni-avx" [ 98.109499][ T9] usb 2-1: config 0 descriptor?? [ 98.348291][ T5822] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 98.613126][ T5605] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.782270][ T9] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 98.850578][ T5819] loop4: detected capacity change from 0 to 32768 [ 99.203944][ T5830] loop0: detected capacity change from 0 to 256 [ 99.341582][ T5830] exfat: Deprecated parameter 'utf8' [ 99.462192][ T5819] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 100.001438][ T5819] XFS (loop4): Ending clean mount [ 100.076430][ T5830] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe3908169, utbl_chksum : 0xe619d30d) [ 100.237188][ T9] gspca_sonixj: i2c_w8 err -71 [ 100.258528][ T9] sonixj 2-1:0.0: probe with driver sonixj failed with error -71 [ 100.306559][ T5610] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 100.507987][ T9] usb 2-1: USB disconnect, device number 2 [ 102.688208][ T5865] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 102.758531][ T5867] loop3: detected capacity change from 0 to 512 [ 102.850439][ T5869] netlink: 88 bytes leftover after parsing attributes in process `syz.4.12'. [ 103.153127][ T5858] syz.0.17 (5858) used greatest stack depth: 19040 bytes left [ 103.575071][ T5867] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.575189][ T5867] ext4 filesystem being mounted at /3/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 103.609069][ T5862] loop1: detected capacity change from 0 to 32768 [ 103.908821][ T5862] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 103.994560][ T5862] XFS (loop1): Ending clean mount [ 104.032414][ T5884] loop4: detected capacity change from 0 to 512 [ 104.216587][ T5884] EXT4-fs error (device loop4): ext4_orphan_get:1423: comm syz.4.22: bad orphan inode 11862016 [ 104.216722][ T5884] loop4: lost filesystem error report for type 5 error -117 [ 104.219325][ C0] EXT4-fs (loop4): initial error at time 1779834140: ext4_orphan_get:1423 [ 104.219346][ C0] EXT4-fs (loop4): last error at time 1779834140: ext4_orphan_get:1423 [ 104.384377][ T5884] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 104.384533][ T5884] ext4 filesystem being mounted at /4/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 104.799337][ T5732] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 104.895301][ T5606] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 105.082994][ T5732] usb 3-1: New USB device found, idVendor=0402, idProduct=5602, bcdDevice=49.83 [ 105.083022][ T5732] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.083042][ T5732] usb 3-1: Product: syz [ 105.083055][ T5732] usb 3-1: Manufacturer: syz [ 105.083069][ T5732] usb 3-1: SerialNumber: syz [ 105.170501][ T5732] usb 3-1: config 0 descriptor?? [ 105.419570][ T5732] gspca_main: ALi m5602-2.14.0 probing 0402:5602 [ 105.431585][ T5605] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.681638][ T5732] gspca_m5602: Failed to find a sensor [ 105.681651][ T5732] ALi m5602 3-1:0.0: ALi m5602 webcam failed [ 105.763820][ T5732] usb 3-1: USB disconnect, device number 2 [ 106.054299][ T5610] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 106.637622][ T5616] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 106.805861][ T5616] usb 3-1: New USB device found, idVendor=0402, idProduct=5602, bcdDevice=49.83 [ 106.805889][ T5616] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.805908][ T5616] usb 3-1: Product: syz [ 106.805921][ T5616] usb 3-1: Manufacturer: syz [ 106.805935][ T5616] usb 3-1: SerialNumber: syz [ 106.861330][ T5616] usb 3-1: config 0 descriptor?? [ 106.963200][ T5616] gspca_main: ALi m5602-2.14.0 probing 0402:5602 [ 107.036376][ T5923] loop3: detected capacity change from 0 to 128 [ 107.059560][ T5923] ======================================================= [ 107.059560][ T5923] WARNING: The mand mount option has been deprecated and [ 107.059560][ T5923] and is ignored by this kernel. Remove the mand [ 107.059560][ T5923] option from the mount to silence this warning. [ 107.059560][ T5923] ======================================================= [ 107.129881][ T5616] gspca_m5602: Failed to find a sensor [ 107.129897][ T5616] ALi m5602 3-1:0.0: ALi m5602 webcam failed [ 107.147909][ T5923] EXT4-fs (loop3): Test dummy encryption mode enabled [ 107.304971][ T5923] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 107.387868][ T5616] usb 3-1: USB disconnect, device number 3 [ 107.595167][ T5926] loop4: detected capacity change from 0 to 32768 [ 107.596403][ T5926] btrfs: Deprecated parameter 'usebackuproot' [ 107.596618][ T5926] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 107.638493][ T5926] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.32 (5926) [ 107.685606][ T5923] ext4 filesystem being mounted at /5/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 107.776593][ T5926] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 107.776639][ T5926] BTRFS info (device loop4): using crc32c checksum algorithm [ 107.995233][ T5908] loop0: detected capacity change from 0 to 40427 [ 108.041535][ T57] BTRFS warning (device loop4): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 108.069170][ T5926] BTRFS error (device loop4): failed to load root extent [ 108.069230][ T5926] BTRFS warning (device loop4): try to load backup roots slot 1 [ 108.076354][ T159] BTRFS warning (device loop4): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 108.081283][ T5926] BTRFS warning (device loop4): couldn't read tree root [ 108.081311][ T5926] BTRFS warning (device loop4): try to load backup roots slot 2 [ 108.083758][ T1027] BTRFS error (device loop4): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 108.083857][ T5926] BTRFS warning (device loop4): couldn't read tree root [ 108.083874][ T5926] BTRFS warning (device loop4): try to load backup roots slot 3 [ 108.141194][ T5926] BTRFS info (device loop4): rebuilding free space tree [ 108.200573][ T5908] F2FS-fs (loop0): invalid crc value [ 108.422100][ T5926] BTRFS info (device loop4): checking UUID tree [ 108.446076][ T5926] BTRFS info (device loop4): enabling ssd optimizations [ 108.446102][ T5926] BTRFS info (device loop4): turning on async discard [ 108.446121][ T5926] BTRFS info (device loop4): enabling free space tree [ 108.446137][ T5926] BTRFS info (device loop4): force clearing of disk cache [ 108.446152][ T5926] BTRFS info (device loop4): enabling auto defrag [ 108.446170][ T5926] BTRFS info (device loop4): trying to use backup root at mount time [ 108.446196][ T5926] BTRFS info (device loop4): use zstd compression, level 3 [ 109.033997][ T5605] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 110.506341][ T5908] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 110.686917][ T5966] process 'syz.2.41' launched './file1' with NULL argv: empty string added [ 111.607463][ T5610] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 111.727956][ T5981] loop1: detected capacity change from 0 to 512 [ 111.755944][ T5981] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 111.755963][ T5981] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 111.895975][ T5981] EXT4-fs (loop1): 1 truncate cleaned up [ 112.002820][ T5981] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 112.608468][ T5606] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.956267][ T5992] loop3: detected capacity change from 0 to 8192 [ 113.485379][ T38] audit: type=1800 audit(1779834150.140:2): pid=5992 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.48" name="file1" dev="loop3" ino=1048605 res=0 errno=0 [ 114.357666][ T5616] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 114.597962][ T5616] usb 1-1: Using ep0 maxpacket: 16 [ 114.604985][ T5616] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 114.605009][ T5616] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 114.628459][ T5616] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 114.628486][ T5616] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.628505][ T5616] usb 1-1: Product: syz [ 114.628518][ T5616] usb 1-1: Manufacturer: syz [ 114.628532][ T5616] usb 1-1: SerialNumber: syz [ 114.702326][ T5616] usb 1-1: 0:2 : does not exist [ 114.984652][ T5616] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 115.951787][ T5616] usb 1-1: USB disconnect, device number 2 [ 115.992385][ T6018] loop4: detected capacity change from 0 to 32768 [ 116.197788][ T6018] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.54 (6018) [ 116.830377][ T6018] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 116.830412][ T6018] BTRFS info (device loop4): using crc32c checksum algorithm [ 117.583914][ T6018] BTRFS info (device loop4): enabling ssd optimizations [ 117.583941][ T6018] BTRFS info (device loop4): turning on async discard [ 117.583959][ T6018] BTRFS info (device loop4): enabling free space tree [ 117.777084][ T9] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 117.949893][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 117.952337][ T9] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 117.952376][ T9] usb 1-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 117.952417][ T9] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 117.952443][ T9] usb 1-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 117.952472][ T9] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 117.952498][ T9] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 117.952523][ T9] usb 1-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 117.952548][ T9] usb 1-1: config 168 interface 0 has no altsetting 0 [ 117.955099][ T9] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 117.955135][ T9] usb 1-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 117.955172][ T9] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 117.955197][ T9] usb 1-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 117.955220][ T9] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 117.955242][ T9] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 117.955266][ T9] usb 1-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 117.955291][ T9] usb 1-1: config 168 interface 0 has no altsetting 0 [ 117.958567][ T9] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 117.958603][ T9] usb 1-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 117.958638][ T9] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 117.958664][ T9] usb 1-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 117.958688][ T9] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 117.958712][ T9] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 117.958736][ T9] usb 1-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 117.958761][ T9] usb 1-1: config 168 interface 0 has no altsetting 0 [ 117.973181][ T9] usb 1-1: string descriptor 0 read error: -22 [ 117.973321][ T9] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 117.973342][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.348870][ T5610] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 118.680822][ T6075] loop1: detected capacity change from 0 to 4096 [ 118.692694][ T6075] EXT4-fs: Ignoring removed orlov option [ 118.703392][ T6075] EXT4-fs (loop1): Test dummy encryption mode enabled [ 119.018762][ T6075] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 119.200220][ T5616] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 119.340192][ T9] adutux 1-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 119.420291][ T5616] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 119.479021][ T9] usb 1-1: USB disconnect, device number 3 [ 119.920592][ T6087] fido_id[6087]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 120.484881][ T5606] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.748595][ T5615] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 121.794989][ T5615] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 121.804745][ T5615] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 121.806658][ T5615] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 121.832043][ T5615] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 122.242488][ T1027] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.679719][ T6132] loop4: detected capacity change from 0 to 2048 [ 122.817165][ T6132] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 123.946622][ T6147] loop0: detected capacity change from 0 to 32768 [ 124.018133][ T5614] Bluetooth: hci3: command tx timeout [ 124.034467][ T6147] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 124.111956][ T6147] XFS (loop0): Internal error hlen <= 0 || hlen > bufsize at line 2979 of file fs/xfs/xfs_log_recover.c. Caller xlog_valid_rec_header+0x1a0/0x290 [ 124.112029][ T6147] CPU: 0 UID: 0 PID: 6147 Comm: syz.0.84 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 124.112057][ T6147] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 124.112077][ T6147] Call Trace: [ 124.112087][ T6147] [ 124.112096][ T6147] dump_stack_lvl+0xe8/0x150 [ 124.112124][ T6147] xfs_corruption_error+0x122/0x170 [ 124.112145][ T6147] ? xlog_valid_rec_header+0x1a0/0x290 [ 124.112174][ T6147] xlog_valid_rec_header+0x205/0x290 [ 124.112198][ T6147] ? xlog_valid_rec_header+0x1a0/0x290 [ 124.112227][ T6147] xlog_do_recovery_pass+0x331/0xcd0 [ 124.112266][ T6147] ? __pfx_xlog_do_recovery_pass+0x10/0x10 [ 124.112307][ T6147] ? kfree+0x1c5/0x6c0 [ 124.112336][ T6147] xlog_verify_head+0x136/0x440 [ 124.112371][ T6147] xlog_find_tail+0x5b4/0x830 [ 124.112396][ T6147] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 124.112425][ T6147] xlog_recover+0x4b/0x3e0 [ 124.112454][ T6147] xfs_log_mount+0x253/0x3e0 [ 124.112485][ T6147] xfs_mountfs+0xe70/0x22e0 [ 124.112522][ T6147] ? __pfx_xfs_mountfs+0x10/0x10 [ 124.112552][ T6147] ? trace_xfs_inode_timestamp_range+0x84/0x200 [ 124.112577][ T6147] xfs_fs_fill_super+0x11b5/0x1600 [ 124.112604][ T6147] get_tree_bdev_flags+0x431/0x4f0 [ 124.112632][ T6147] ? __pfx_xfs_fs_fill_super+0x10/0x10 [ 124.112649][ T6147] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 124.112682][ T6147] vfs_get_tree+0x92/0x2a0 [ 124.112707][ T6147] do_new_mount+0x341/0xd30 [ 124.112725][ T6147] ? apparmor_capable+0x126/0x170 [ 124.112760][ T6147] ? __pfx_do_new_mount+0x10/0x10 [ 124.112775][ T6147] ? ns_capable+0x89/0xe0 [ 124.112794][ T6147] ? user_path_at+0xd4/0x160 [ 124.112815][ T6147] ? user_path_at+0xd4/0x160 [ 124.112838][ T6147] __se_sys_mount+0x31d/0x420 [ 124.112865][ T6147] ? __pfx___se_sys_mount+0x10/0x10 [ 124.112894][ T6147] ? __x64_sys_mount+0x20/0xc0 [ 124.112912][ T6147] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.112931][ T6147] do_syscall_64+0x174/0x580 [ 124.112950][ T6147] ? trace_irq_disable+0x3b/0x140 [ 124.112973][ T6147] ? clear_bhb_loop+0x40/0x90 [ 124.112997][ T6147] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.113016][ T6147] RIP: 0033:0x7efdfed3e0ca [ 124.113039][ T6147] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 124.113055][ T6147] RSP: 002b:00007efdfcf95e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 124.113082][ T6147] RAX: ffffffffffffffda RBX: 00007efdfcf95ee0 RCX: 00007efdfed3e0ca [ 124.113095][ T6147] RDX: 0000200000000080 RSI: 0000200000009780 RDI: 00007efdfcf95ea0 [ 124.113107][ T6147] RBP: 0000200000000080 R08: 00007efdfcf95ee0 R09: 0000000000000041 [ 124.113118][ T6147] R10: 0000000000000041 R11: 0000000000000246 R12: 0000200000009780 [ 124.113129][ T6147] R13: 00007efdfcf95ea0 R14: 000000000000976f R15: 0000200000000040 [ 124.113155][ T6147] [ 124.113173][ T6147] XFS (loop0): Corruption detected. Unmount and run xfs_repair [ 124.113200][ T6147] XFS (loop0): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x50. [ 124.261258][ T6147] XFS (loop0): Starting recovery (logdev: internal) [ 124.281219][ T1027] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.737195][ T6147] XFS (loop0): Ending recovery (logdev: internal) [ 125.101766][ T6169] loop4: detected capacity change from 0 to 512 [ 125.197124][ T6169] EXT4-fs error (device loop4): ext4_iget_extra_inode:5128: inode #15: comm syz.4.91: corrupted in-inode xattr: invalid ea_ino [ 125.197295][ T6169] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 125.204666][ T6169] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.91: couldn't read orphan inode 15 (err -117) [ 125.204700][ T6169] loop4: lost filesystem error report for type 5 error -117 [ 125.211406][ C0] EXT4-fs (loop4): error count since last fsck: 2 [ 125.211431][ C0] EXT4-fs (loop4): initial error at time 1779834161: ext4_iget_extra_inode:5128: inode 15 [ 125.211456][ C0] EXT4-fs (loop4): last error at time 1779834161: ext4_orphan_get:1402 [ 125.300557][ T6169] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 125.315384][ T5608] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 125.472179][ T5610] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.710870][ T1027] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.094380][ T5614] Bluetooth: hci3: command tx timeout [ 126.864696][ T6186] loop1: detected capacity change from 0 to 256 [ 126.896391][ T6186] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 127.080816][ T1027] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.177034][ T5614] Bluetooth: hci3: command tx timeout [ 128.813979][ T6213] loop1: detected capacity change from 0 to 32768 [ 128.848449][ T6199] loop0: detected capacity change from 0 to 32768 [ 129.100366][ T6213] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 129.122043][ T159] Bluetooth: Error in BCSP hdr checksum [ 129.288278][ T6199] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 129.329267][ T13] Bluetooth: Error in BCSP hdr checksum [ 129.361857][ T6213] syz.1.104 (6213) used greatest stack depth: 19032 bytes left [ 129.654968][ T6199] XFS (loop0): Ending clean mount [ 130.082767][ T6112] bridge0: port 1(bridge_slave_0) entered blocking state [ 130.083177][ T6112] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.083459][ T6112] bridge_slave_0: entered allmulticast mode [ 130.086467][ T6112] bridge_slave_0: entered promiscuous mode [ 130.130915][ T6112] bridge0: port 2(bridge_slave_1) entered blocking state [ 130.131246][ T6112] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.131523][ T6112] bridge_slave_1: entered allmulticast mode [ 130.161043][ T6112] bridge_slave_1: entered promiscuous mode [ 130.251463][ T5615] Bluetooth: hci3: command tx timeout [ 130.438028][ T1027] bridge_slave_1: left allmulticast mode [ 130.460677][ T1027] bridge_slave_1: left promiscuous mode [ 130.493903][ T1027] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.539982][ T5608] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 130.790819][ T5606] ocfs2: Unmounting device (7,1) on (node local) [ 130.800533][ T6235] loop3: detected capacity change from 0 to 512 [ 130.878065][ T1027] bridge_slave_0: left allmulticast mode [ 130.878088][ T1027] bridge_slave_0: left promiscuous mode [ 130.878459][ T1027] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.080465][ T5614] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 131.138635][ T6235] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 131.138794][ T6235] ext4 filesystem being mounted at /27/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 131.334009][ T6241] capability: warning: `syz.3.109' uses deprecated v2 capabilities in a way that may be insecure [ 131.762779][ T5605] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.495425][ T6258] syz.1.115 uses obsolete (PF_INET,SOCK_PACKET) [ 132.523494][ T6258] netlink: 8 bytes leftover after parsing attributes in process `syz.1.115'. [ 132.830649][ T4935] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 132.975119][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.975246][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.043315][ T4935] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 133.043367][ T4935] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 133.043388][ T4935] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.132260][ T4935] usb 5-1: config 0 descriptor?? [ 133.265468][ T4935] pwc: Askey VC010 type 2 USB webcam detected. [ 133.401987][ T6259] Zero length message leads to an empty skb [ 133.443622][ T4935] pwc: send_video_command error -71 [ 133.443653][ T4935] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 133.493090][ T4935] Philips webcam 5-1:0.0: probe with driver Philips webcam failed with error -71 [ 133.495045][ T6270] netlink: 'syz.1.120': attribute type 1 has an invalid length. [ 133.495066][ T6270] netlink: 'syz.1.120': attribute type 4 has an invalid length. [ 133.495078][ T6270] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.120'. [ 133.530687][ T4935] usb 5-1: USB disconnect, device number 2 [ 134.205198][ T6272] loop1: detected capacity change from 0 to 4096 [ 134.226789][ T6274] loop8: detected capacity change from 0 to 7 [ 134.296415][ T6272] ntfs3(loop1): Different NTFS sector size (1024) and media sector size (512). [ 134.635567][ T5616] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 134.713855][ T6274] Dev loop8: unable to read RDB block 7 [ 134.713900][ T6274] loop8: unable to read partition table [ 134.714143][ T6274] loop8: partition table beyond EOD, truncated [ 134.714192][ T6274] loop_reread_partitions: partition scan of loop8 (þ被xü—ŸÑà– ) failed (rc=-5) [ 134.873432][ T5616] usb 5-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 134.873464][ T5616] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.076656][ T5616] usb 5-1: config 0 descriptor?? [ 135.231223][ T5616] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 135.671064][ T6285] loop0: detected capacity change from 0 to 2048 [ 135.852819][ T6285] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=a842c029, mo2=0003] [ 135.852967][ T6285] System zones: 0-7 [ 135.985654][ T6285] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 136.092539][ T5616] gspca_stv06xx: I2C: Read error writing address: -71 [ 136.131173][ T6285] EXT4-fs error (device loop0): ext4_find_extent:939: inode #2: comm syz.0.127: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 136.137150][ T4935] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 136.303846][ T5616] usb 5-1: USB disconnect, device number 3 [ 136.306102][ T6285] EXT4-fs (loop0): Remounting filesystem read-only [ 136.346474][ T4935] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 136.346525][ T4935] usb 4-1: New USB device found, idVendor=0b48, idProduct=1006, bcdDevice=52.91 [ 136.346538][ T4935] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.368933][ T5608] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.461729][ T4935] ttusb_dec_send_command: command bulk message failed: error -22 [ 136.461964][ T4935] ttusb-dec 4-1:1.0: probe with driver ttusb-dec failed with error -22 [ 136.823719][ T1027] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 136.945525][ T5620] usb 4-1: USB disconnect, device number 2 [ 137.080851][ T1027] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 137.178909][ T6310] loop0: detected capacity change from 0 to 1024 [ 137.181408][ T1027] bond0 (unregistering): Released all slaves [ 137.751922][ T6112] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 137.784187][ T6112] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 138.037072][ T6112] team0: Port device team_slave_0 added [ 138.077326][ T6112] team0: Port device team_slave_1 added [ 138.383285][ T6112] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 138.383300][ T6112] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 138.383323][ T6112] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 138.577485][ T6112] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 138.577501][ T6112] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 138.577523][ T6112] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 141.142080][ T5267] 8021q: adding VLAN 0 to HW filter on device eth1 [ 141.870947][ T6112] hsr_slave_0: entered promiscuous mode [ 141.921415][ T6112] hsr_slave_1: entered promiscuous mode [ 141.964540][ T6112] debugfs: 'hsr0' already exists in 'hsr' [ 141.964565][ T6112] Cannot create hsr debugfs directory [ 142.296494][ T6377] loop0: detected capacity change from 0 to 1024 [ 142.386023][ T6380] loop1: detected capacity change from 0 to 4096 [ 142.442353][ T6380] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512). [ 142.882941][ T6380] ntfs3(loop1): Mark volume as dirty due to NTFS errors [ 143.107151][ T6380] ntfs3(loop1): ino=19, mi_enum_attr [ 144.943223][ T6409] loop1: detected capacity change from 0 to 32768 [ 144.954818][ T6409] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.157 (6409) [ 144.966526][ T6409] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 144.966561][ T6409] BTRFS info (device loop1): using sha256 checksum algorithm [ 145.096839][ T6409] BTRFS info (device loop1): setting nodatasum [ 145.096867][ T6409] BTRFS info (device loop1): enabling ssd optimizations [ 145.096883][ T6409] BTRFS info (device loop1): turning on async discard [ 145.096897][ T6409] BTRFS info (device loop1): enabling free space tree [ 145.172897][ T38] audit: type=1800 audit(1779834181.880:3): pid=6409 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.157" name="file1" dev="loop1" ino=260 res=0 errno=0 [ 145.196129][ T6408] ALSA: mixer_oss: invalid OSS volume '' [ 145.198933][ T5732] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 145.332657][ T6397] pim6reg1: entered promiscuous mode [ 145.332683][ T6397] pim6reg1: entered allmulticast mode [ 145.379107][ T5732] usb 1-1: Using ep0 maxpacket: 32 [ 145.381145][ T5732] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 145.381171][ T5732] usb 1-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 145.381194][ T5732] usb 1-1: config 0 interface 0 has no altsetting 0 [ 145.386717][ T5732] usb 1-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 145.386744][ T5732] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.386761][ T5732] usb 1-1: Product: syz [ 145.386775][ T5732] usb 1-1: Manufacturer: syz [ 145.386789][ T5732] usb 1-1: SerialNumber: syz [ 145.443854][ T5267] 8021q: adding VLAN 0 to HW filter on device eth2 [ 145.504086][ T5732] usb 1-1: config 0 descriptor?? [ 145.954620][ T5732] gs_usb 1-1:0.0: Configuring for 1 interfaces [ 146.365884][ T5732] gs_usb 1-1:0.0: Disabling termination support for channel 0 (-EPIPE) [ 146.510906][ T5606] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 147.780183][ T5732] usb 1-1: USB disconnect, device number 4 [ 148.065557][ T6437] loop4: detected capacity change from 0 to 32768 [ 148.100505][ T1027] hsr_slave_0: left promiscuous mode [ 148.193142][ T1027] hsr_slave_1: left promiscuous mode [ 148.194108][ T1027] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 148.194169][ T1027] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 148.305360][ T1027] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 148.305377][ T1027] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 148.321136][ T9] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 148.441167][ T6437] JBD2: Ignoring recovery information on journal [ 148.517106][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 148.558221][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 148.558275][ T9] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 148.558299][ T9] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 148.558320][ T9] usb 2-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 148.558343][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 148.558375][ T9] usb 2-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 148.558396][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.564394][ T9] usb 2-1: config 0 descriptor?? [ 149.265928][ T6437] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 149.312248][ T9] hid-thrustmaster 0003:044F:B65D.0002: unbalanced collection at end of report description [ 149.313287][ T9] hid-thrustmaster 0003:044F:B65D.0002: parse failed with error -22 [ 149.313366][ T9] hid-thrustmaster 0003:044F:B65D.0002: probe with driver hid-thrustmaster failed with error -22 [ 149.382165][ T5716] usb 2-1: USB disconnect, device number 3 [ 149.418769][ T1027] veth1_macvtap: left promiscuous mode [ 149.418987][ T1027] veth0_macvtap: left promiscuous mode [ 149.419215][ T1027] veth1_vlan: left promiscuous mode [ 149.419442][ T1027] veth0_vlan: left promiscuous mode [ 149.860740][ T5616] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 149.932658][ T6459] loop0: detected capacity change from 0 to 2048 [ 150.062845][ T5616] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 150.062874][ T5616] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.062893][ T5616] usb 4-1: Product: syz [ 150.062907][ T5616] usb 4-1: Manufacturer: syz [ 150.062920][ T5616] usb 4-1: SerialNumber: syz [ 150.071727][ T6459] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 150.193561][ T5616] usb 4-1: config 0 descriptor?? [ 150.433556][ T5616] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 151.578237][ T5610] ocfs2: Unmounting device (7,4) on (node local) [ 151.614340][ T9] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 151.676080][ T5616] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 151.742901][ T5616] usb 4-1: USB disconnect, device number 3 [ 151.757111][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 151.761766][ T9] usb 2-1: config 0 has an invalid interface number: 34 but max is 0 [ 151.761791][ T9] usb 2-1: config 0 has no interface number 0 [ 151.761848][ T9] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 151.761872][ T9] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 151.764626][ T9] usb 2-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 151.764653][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.764672][ T9] usb 2-1: Product: syz [ 151.764686][ T9] usb 2-1: Manufacturer: syz [ 151.764698][ T9] usb 2-1: SerialNumber: syz [ 151.964665][ T9] usb 2-1: config 0 descriptor?? [ 151.972139][ T6475] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 151.972295][ T6475] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 152.193532][ T6475] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 152.201410][ T6479] netlink: 408 bytes leftover after parsing attributes in process `syz.4.174'. [ 152.223693][ T6475] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 152.428560][ T9] asix 2-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 152.717140][ T32] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 152.827890][ T1027] team0 (unregistering): Port device team_slave_1 removed [ 152.887427][ T32] usb 5-1: Using ep0 maxpacket: 16 [ 152.922809][ T1027] team0 (unregistering): Port device team_slave_0 removed [ 152.922943][ T32] usb 5-1: config 1 has an invalid interface number: 105 but max is 0 [ 152.922965][ T32] usb 5-1: config 1 has no interface number 0 [ 152.923010][ T32] usb 5-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 152.923034][ T32] usb 5-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 152.923056][ T32] usb 5-1: config 1 interface 105 has no altsetting 0 [ 152.925942][ T32] usb 5-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 152.925971][ T32] usb 5-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 152.925990][ T32] usb 5-1: Product: syz [ 152.926003][ T32] usb 5-1: Manufacturer: syz [ 152.926017][ T32] usb 5-1: SerialNumber: syz [ 152.942682][ T6481] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 152.942859][ T6481] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 153.026402][ T5620] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 153.278161][ T5620] usb 4-1: Using ep0 maxpacket: 32 [ 153.310479][ T5620] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 153.310507][ T5620] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 153.310524][ T5620] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 153.310776][ T5620] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 153.310797][ T5620] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 153.310820][ T5620] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 153.310862][ T5620] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 153.310932][ T5620] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.365262][ T6481] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 153.365586][ T6481] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 153.455089][ T5620] usb 4-1: config 0 descriptor?? [ 153.664031][ T9] asix 2-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 153.664062][ T9] asix 2-1:0.34 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 153.731079][ T9] asix 2-1:0.34: probe with driver asix failed with error -71 [ 153.756837][ T5620] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 4 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 153.770089][ T32] aqc111 5-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -32 [ 153.779733][ T32] aqc111 5-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -32 [ 153.824913][ T9] usb 2-1: USB disconnect, device number 4 [ 154.035998][ T5794] usb 4-1: USB disconnect, device number 4 [ 154.081445][ T5794] usblp0: removed [ 154.700080][ T5723] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 154.723309][ T6495] loop4: detected capacity change from 0 to 512 [ 154.749717][ T32] aqc111 5-1:1.105 eth5: register 'aqc111' at usb-dummy_hcd.4-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, f6:6b:a5:fe:84:23 [ 154.840965][ T6495] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 154.861178][ T6495] EXT4-fs error (device loop4): ext4_orphan_get:1397: inode #15: comm syz.4.181: iget: bad i_size value: 38620345925642 [ 154.861215][ T6495] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 154.867047][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 154.867068][ C0] EXT4-fs (loop4): initial error at time 1779834191: ext4_orphan_get:1397: inode 15 [ 154.867091][ C0] EXT4-fs (loop4): last error at time 1779834191: ext4_orphan_get:1397: inode 15 [ 154.871043][ T32] usb 5-1: USB disconnect, device number 4 [ 154.877112][ T5723] usb 2-1: Using ep0 maxpacket: 16 [ 154.899576][ T32] aqc111 5-1:1.105 eth5: unregister 'aqc111' usb-dummy_hcd.4-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 154.918863][ T5723] usb 2-1: config index 0 descriptor too short (expected 16456, got 72) [ 154.918889][ T5723] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 154.918905][ T5723] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 154.918922][ T5723] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 154.918938][ T5723] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 154.918956][ T5723] usb 2-1: config 0 has no interface number 0 [ 154.919007][ T5723] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 154.919032][ T5723] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 154.919050][ T5723] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 154.919079][ T5723] usb 2-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 154.919100][ T5723] usb 2-1: config 0 interface 125 has no altsetting 0 [ 154.919115][ T5723] usb 2-1: config 0 interface 125 has no altsetting 2 [ 154.941317][ T5723] usb 2-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 154.941344][ T5723] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.941361][ T5723] usb 2-1: Product: syz [ 154.941372][ T5723] usb 2-1: Manufacturer: syz [ 154.941384][ T5723] usb 2-1: SerialNumber: syz [ 155.116507][ T6495] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.181: couldn't read orphan inode 15 (err -117) [ 155.116539][ T6495] loop4: lost filesystem error report for type 5 error -117 [ 155.173129][ T5723] usb 2-1: config 0 descriptor?? [ 155.210312][ T5723] usb 2-1: selecting invalid altsetting 2 [ 155.265874][ T6495] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 155.714502][ T5610] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.390164][ T6503] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 156.500716][ T32] aqc111 5-1:1.105 eth5 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 156.500799][ T32] aqc111 5-1:1.105 eth5 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 156.500866][ T32] aqc111 5-1:1.105 eth5 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 157.346288][ T6112] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 157.400715][ T32] usb 2-1: USB disconnect, device number 5 [ 157.788937][ T6112] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 157.977817][ T6112] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 158.120007][ T6112] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 158.147830][ T6112] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 158.295924][ T6112] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 158.296873][ T6112] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 158.519564][ T6112] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 158.734919][ T6538] loop3: detected capacity change from 0 to 512 [ 158.952086][ T6538] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 158.952215][ T6538] ext4 filesystem being mounted at /54/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 159.833294][ T6558] loop1: detected capacity change from 0 to 40427 [ 159.878742][ T6558] F2FS-fs (loop1): invalid crc value [ 160.088874][ T6558] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 160.128405][ T6558] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 160.304225][ T6558] F2FS-fs (loop1): Inconsistent segment (8) type [1, 0] in SSA and SIT [ 160.312410][ T6558] CPU: 1 UID: 0 PID: 6558 Comm: syz.1.192 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 160.312440][ T6558] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 160.312453][ T6558] Call Trace: [ 160.312461][ T6558] [ 160.312469][ T6558] dump_stack_lvl+0xe8/0x150 [ 160.312514][ T6558] f2fs_stop_checkpoint+0x3ef/0x5d0 [ 160.312554][ T6558] do_garbage_collect+0x1502/0x6dd0 [ 160.312582][ T6558] ? lockdep_unlock+0x5d/0xd0 [ 160.312603][ T6558] ? __lock_acquire+0x146e/0x2d10 [ 160.312644][ T6558] ? do_raw_spin_lock+0x12b/0x2f0 [ 160.312681][ T6558] ? lockdep_hardirqs_on+0x7a/0x110 [ 160.312724][ T6558] ? __pfx_do_garbage_collect+0x10/0x10 [ 160.312768][ T6558] ? __lock_acquire+0x6b5/0x2d10 [ 160.312798][ T6558] ? do_raw_spin_lock+0x12b/0x2f0 [ 160.312832][ T6558] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 160.312853][ T6558] ? lockdep_hardirqs_on+0x7a/0x110 [ 160.312873][ T6558] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 160.312894][ T6558] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 160.312930][ T6558] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 160.312950][ T6558] ? lockdep_hardirqs_on+0x7a/0x110 [ 160.312970][ T6558] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 160.312993][ T6558] f2fs_gc+0xcca/0x24d0 [ 160.313047][ T6558] ? __pfx_f2fs_gc+0x10/0x10 [ 160.313117][ T6558] ? rcu_is_watching+0x15/0xb0 [ 160.313150][ T6558] f2fs_expand_inode_data+0x656/0xb20 [ 160.313196][ T6558] ? __pfx_f2fs_expand_inode_data+0x10/0x10 [ 160.313230][ T6558] ? __pfx_inode_dio_wait+0x10/0x10 [ 160.313262][ T6558] ? mnt_put_write_access_file+0xc6/0x100 [ 160.313291][ T6558] ? file_update_time_flags+0x406/0x4b0 [ 160.313320][ T6558] f2fs_fallocate+0x4e8/0x980 [ 160.313352][ T6558] vfs_fallocate+0x672/0x7f0 [ 160.313386][ T6558] ? __pfx_vfs_fallocate+0x10/0x10 [ 160.313424][ T6558] file_ioctl+0x5cb/0x870 [ 160.313455][ T6558] ? __pfx_file_ioctl+0x10/0x10 [ 160.313497][ T6558] ? kasan_quarantine_put+0xbb/0x1f0 [ 160.313549][ T6558] ? tomoyo_path_number_perm+0x219/0x630 [ 160.313575][ T6558] ? tomoyo_path_number_perm+0x219/0x630 [ 160.313601][ T6558] do_vfs_ioctl+0xc29/0x1540 [ 160.313631][ T6558] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 160.313672][ T6558] ? do_futex+0x333/0x420 [ 160.313715][ T6558] ? __fget_files+0x2a/0x420 [ 160.313737][ T6558] ? __fget_files+0x2a/0x420 [ 160.313754][ T6558] ? __fget_files+0x3a6/0x420 [ 160.313771][ T6558] ? __fget_files+0x2a/0x420 [ 160.313790][ T6558] ? bpf_lsm_file_ioctl+0x9/0x20 [ 160.313816][ T6558] __se_sys_ioctl+0x82/0x170 [ 160.313838][ T6558] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.313857][ T6558] do_syscall_64+0x174/0x580 [ 160.313877][ T6558] ? trace_irq_disable+0x3b/0x140 [ 160.313902][ T6558] ? clear_bhb_loop+0x40/0x90 [ 160.313926][ T6558] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.313947][ T6558] RIP: 0033:0x7f68b010ce59 [ 160.313966][ T6558] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 160.313984][ T6558] RSP: 002b:00007f68ae35e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 160.314004][ T6558] RAX: ffffffffffffffda RBX: 00007f68b0385fa0 RCX: 00007f68b010ce59 [ 160.314020][ T6558] RDX: 0000200000000040 RSI: 0000000040305828 RDI: 0000000000000006 [ 160.314033][ T6558] RBP: 00007f68b01a2d6f R08: 0000000000000000 R09: 0000000000000000 [ 160.314047][ T6558] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 160.314059][ T6558] R13: 00007f68b0386038 R14: 00007f68b0385fa0 R15: 00007ffe9d761dc8 [ 160.314091][ T6558] [ 160.314100][ T6558] F2FS-fs (loop1): Stopped filesystem due to reason: 4 [ 161.037616][ T6112] 8021q: adding VLAN 0 to HW filter on device bond0 [ 161.152960][ T5605] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.191390][ T5267] 8021q: adding VLAN 0 to HW filter on device eth3 [ 161.864296][ T6576] loop4: detected capacity change from 0 to 40427 [ 161.872122][ T6576] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 161.872150][ T6576] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 161.881815][ T6576] F2FS-fs (loop4): invalid crc value [ 161.894707][ T6112] 8021q: adding VLAN 0 to HW filter on device team0 [ 161.996138][ T6576] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 162.058970][ T6576] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 162.059000][ T6576] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 162.230351][ T1963] bridge0: port 1(bridge_slave_0) entered blocking state [ 162.230603][ T1963] bridge0: port 1(bridge_slave_0) entered forwarding state [ 162.291991][ T6588] loop0: detected capacity change from 0 to 1024 [ 162.295198][ T6588] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (7780!=20869) [ 162.295316][ T6588] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 162.306083][ T6588] EXT4-fs (loop0): invalid journal inode [ 162.398138][ T159] bridge0: port 2(bridge_slave_1) entered blocking state [ 162.426606][ T159] bridge0: port 2(bridge_slave_1) entered forwarding state [ 162.621961][ T6588] loop0: detected capacity change from 0 to 512 [ 162.623849][ T6588] EXT4-fs: Ignoring removed oldalloc option [ 162.795020][ T6592] netlink: 28 bytes leftover after parsing attributes in process `syz.3.204'. [ 163.233155][ T6588] EXT4-fs (loop0): 1 truncate cleaned up [ 163.249268][ T6588] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 163.653796][ T5608] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.958159][ T5267] 8021q: adding VLAN 0 to HW filter on device eth4 [ 165.491113][ T6616] loop1: detected capacity change from 0 to 32768 [ 167.279980][ T5615] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 167.296102][ T5615] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 167.300964][ T5615] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 167.349121][ T5615] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 167.385679][ T5615] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 168.191663][ T67] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.196129][ T6640] faux_driver vkms: [drm] Unknown color mode 3; guessing buffer size. [ 168.489802][ T6112] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 169.007122][ T5620] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 169.162523][ T5620] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 169.162553][ T5620] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.162572][ T5620] usb 1-1: Product: syz [ 169.162587][ T5620] usb 1-1: Manufacturer: syz [ 169.162600][ T5620] usb 1-1: SerialNumber: syz [ 169.770305][ T5620] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 169.770362][ T5620] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 169.830436][ T67] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.861558][ T5614] Bluetooth: hci0: command tx timeout [ 170.596582][ T5620] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x0000011c. ret = -EPROTO [ 170.596631][ T5620] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 170.664853][ T5620] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 170.730605][ T6674] netlink: 4 bytes leftover after parsing attributes in process `syz.4.219'. [ 170.782548][ T5620] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -71 [ 170.842210][ T5620] usb 1-1: USB disconnect, device number 5 [ 171.030757][ T67] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.166571][ T6674] team1: entered promiscuous mode [ 171.170047][ T6674] team1: entered allmulticast mode [ 171.171050][ T6674] 8021q: adding VLAN 0 to HW filter on device team1 [ 171.411302][ T6682] loop0: detected capacity change from 0 to 128 [ 171.453909][ T6682] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 171.549607][ T6682] ext4 filesystem being mounted at /51/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 171.775025][ T5608] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 171.928662][ T5614] Bluetooth: hci0: command tx timeout [ 172.100383][ T6693] overlayfs: failed to set uuid (43/file0, err=-1); falling back to uuid=null. [ 172.100586][ T6693] overlayfs: failed to verify upper root origin [ 172.154347][ T67] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.295694][ T6695] binder: 6694:6695 ioctl c0306201 2000000001c0 returned -22 [ 173.137367][ T6112] veth0_vlan: entered promiscuous mode [ 173.431441][ T6112] veth1_vlan: entered promiscuous mode [ 173.544836][ T6112] veth0_macvtap: entered promiscuous mode [ 173.581969][ T6112] veth1_macvtap: entered promiscuous mode [ 174.007082][ T5614] Bluetooth: hci0: command tx timeout [ 174.522688][ T6112] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 174.708977][ T6722] loop4: detected capacity change from 0 to 128 [ 174.738816][ T6112] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 174.760339][ T6722] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002] [ 174.760447][ T6722] System zones: 1-3, 19-19, 35-36 [ 174.858740][ T6722] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 174.941500][ T6722] ext4 filesystem being mounted at /48/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 174.990035][ T6722] EXT4-fs warning (device loop4): verify_group_input:137: Cannot add at group 1986356271 (only 1 groups) [ 175.299955][ T5610] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 175.324256][ T68] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.447948][ T68] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.481975][ T68] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.490368][ T68] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.709300][ T67] bridge_slave_1: left allmulticast mode [ 175.709324][ T67] bridge_slave_1: left promiscuous mode [ 175.709500][ T67] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.865857][ T67] bridge_slave_0: left allmulticast mode [ 175.865884][ T67] bridge_slave_0: left promiscuous mode [ 175.912217][ T67] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.087058][ T5614] Bluetooth: hci0: command tx timeout [ 176.184700][ T6740] loop1: detected capacity change from 0 to 512 [ 176.953012][ T6740] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 176.953151][ T6740] ext4 filesystem being mounted at /51/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 177.557438][ T5606] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.228167][ T6753] loop1: detected capacity change from 0 to 512 [ 178.331030][ T6753] EXT4-fs error (device loop1): ext4_orphan_get:1397: inode #15: comm syz.1.241: inode has both inline data and extents flags [ 178.331065][ T6753] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 178.345668][ T6753] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.241: couldn't read orphan inode 15 (err -117) [ 178.345703][ T6753] loop1: lost filesystem error report for type 5 error -117 [ 178.384662][ T6753] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 178.939669][ T67] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 179.017610][ T67] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 179.096435][ T67] bond0 (unregistering): Released all slaves [ 180.157269][ T6635] bridge0: port 1(bridge_slave_0) entered blocking state [ 180.157462][ T6635] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.157729][ T6635] bridge_slave_0: entered allmulticast mode [ 180.179370][ T6635] bridge_slave_0: entered promiscuous mode [ 180.265938][ T6635] bridge0: port 2(bridge_slave_1) entered blocking state [ 180.266272][ T6635] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.266744][ T6635] bridge_slave_1: entered allmulticast mode [ 180.300172][ T6635] bridge_slave_1: entered promiscuous mode [ 180.763063][ T6775] loop4: detected capacity change from 0 to 32768 [ 180.959374][ T6775] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 181.087891][ T5606] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.169705][ T6775] XFS (loop4): Ending clean mount [ 181.322680][ T6775] XFS (loop4): Quotacheck needed: Please wait. [ 182.148261][ T6635] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 182.634939][ T5615] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 182.673495][ T5615] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 182.691256][ T5615] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 182.714819][ T5615] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 182.727568][ T5615] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 183.079061][ T6775] XFS (loop4): Quotacheck: Done. [ 183.145775][ T6775] XFS (loop4): Metadata CRC error detected at xfs_refcountbt_read_verify+0x42/0xe0, xfs_refcountbt block 0x28 [ 183.145826][ T6775] XFS (loop4): Unmount and run xfs_repair [ 183.145838][ T6775] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 183.145855][ T6775] 00000000: 52 ff ff ff 7f 00 00 00 ff ff ff ff ff ff ff ff R............... [ 183.145868][ T6775] 00000010: 00 00 00 00 00 00 00 28 00 00 00 00 00 00 00 00 .......(........ [ 183.145881][ T6775] 00000020: c4 96 e0 5e 54 0d 4c 72 b5 91 04 d7 9d 8b 4e eb ...^T.Lr......N. [ 183.145894][ T6775] 00000030: 00 00 00 00 bd e7 de 5d 00 00 00 00 00 00 00 00 .......]........ [ 183.145908][ T6775] 00000040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 183.145921][ T6775] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 183.145933][ T6775] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 183.145945][ T6775] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 183.146769][ T6635] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 183.147964][ T6775] XFS (loop4): metadata I/O error in "xfs_btree_read_buf_block+0x2b0/0x490" at daddr 0x28 len 8 error 74 [ 183.316877][ T6775] XFS (loop4): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x518/0x8f0 (fs/xfs/xfs_trans_buf.c:311). Shutting down filesystem. [ 183.316986][ T6775] XFS (loop4): Please unmount the filesystem and rectify the problem(s) [ 183.492656][ T5610] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 183.500772][ T5723] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 183.674354][ T5723] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 183.674382][ T5723] usb 1-1: config 0 has no interfaces? [ 183.674410][ T5723] usb 1-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00 [ 183.674433][ T5723] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.858939][ T5723] usb 1-1: config 0 descriptor?? [ 184.071906][ T6635] team0: Port device team_slave_0 added [ 184.186398][ T6635] team0: Port device team_slave_1 added [ 184.323791][ T5716] usb 1-1: USB disconnect, device number 6 [ 184.887222][ T5615] Bluetooth: hci5: command tx timeout [ 186.015790][ T6635] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 186.015807][ T6635] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 186.015831][ T6635] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 186.511816][ T5267] 8021q: adding VLAN 0 to HW filter on device eth5 [ 186.541771][ T6635] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 186.541787][ T6635] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 186.541811][ T6635] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 187.008935][ T5615] Bluetooth: hci5: command tx timeout [ 187.737088][ T67] hsr_slave_0: left promiscuous mode [ 188.026840][ T6848] loop1: detected capacity change from 0 to 32768 [ 188.043757][ T67] hsr_slave_1: left promiscuous mode [ 188.044657][ T67] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 188.044678][ T67] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 188.103837][ T6848] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 188.131552][ T67] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 188.131580][ T67] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 188.265766][ T6848] XFS (loop1): Ending clean mount [ 188.789831][ T67] veth1_macvtap: left promiscuous mode [ 188.789939][ T67] veth0_macvtap: left promiscuous mode [ 188.888334][ T67] veth1_vlan: left promiscuous mode [ 188.888545][ T67] veth0_vlan: left promiscuous mode [ 189.054099][ T5615] Bluetooth: hci5: command tx timeout [ 189.070733][ T5606] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 191.127453][ T5615] Bluetooth: hci5: command tx timeout [ 191.329725][ T5616] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 191.497630][ T67] team0 (unregistering): Port device team_slave_1 removed [ 191.538379][ T67] team0 (unregistering): Port device team_slave_0 removed [ 191.580184][ T5616] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 191.580215][ T5616] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 191.580235][ T5616] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 191.580274][ T5616] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 191.580295][ T5616] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.616220][ T5616] usb 5-1: config 0 descriptor?? [ 192.045408][ T6635] hsr_slave_0: entered promiscuous mode [ 192.138609][ T6635] hsr_slave_1: entered promiscuous mode [ 192.140173][ T6635] debugfs: 'hsr0' already exists in 'hsr' [ 192.140195][ T6635] Cannot create hsr debugfs directory [ 192.355189][ T6893] loop4: detected capacity change from 0 to 8 [ 193.177126][ T5616] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 193.250307][ T6893] squashfs image failed sanity check [ 193.915764][ T5616] usb 5-1: USB disconnect, device number 5 [ 194.425551][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.425637][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.637232][ T6942] loop1: detected capacity change from 0 to 32768 [ 195.638333][ T6942] btrfs: Deprecated parameter 'usebackuproot' [ 195.638353][ T6942] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 195.640658][ T6942] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.280 (6942) [ 195.710218][ T6942] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 195.710251][ T6942] BTRFS info (device loop1): using crc32c checksum algorithm [ 195.914991][ T85] BTRFS warning (device loop1): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 195.915125][ T6942] BTRFS error (device loop1): failed to load root extent [ 195.915161][ T6942] BTRFS warning (device loop1): try to load backup roots slot 1 [ 195.949706][ T1027] BTRFS warning (device loop1): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 195.949808][ T6942] BTRFS warning (device loop1): couldn't read tree root [ 195.949826][ T6942] BTRFS warning (device loop1): try to load backup roots slot 2 [ 195.951020][ T1027] BTRFS error (device loop1): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 195.951105][ T6942] BTRFS warning (device loop1): couldn't read tree root [ 195.951123][ T6942] BTRFS warning (device loop1): try to load backup roots slot 3 [ 195.968598][ T6942] BTRFS info (device loop1): rebuilding free space tree [ 196.240753][ T6942] BTRFS info (device loop1): disabling free space tree [ 196.240944][ T6942] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 196.240968][ T6942] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 196.291769][ T6942] BTRFS info (device loop1): checking UUID tree [ 196.304761][ T6942] BTRFS info (device loop1): enabling ssd optimizations [ 196.304789][ T6942] BTRFS info (device loop1): turning on async discard [ 196.304804][ T6942] BTRFS info (device loop1): force clearing of disk cache [ 196.304819][ T6942] BTRFS info (device loop1): trying to use backup root at mount time [ 196.304837][ T6942] BTRFS info (device loop1): use lzo compression, level 1 [ 196.488823][ T5267] 8021q: adding VLAN 0 to HW filter on device eth6 [ 196.623810][ T6635] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 196.743121][ T6635] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 196.805644][ T5606] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 196.915603][ T6635] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 196.989399][ T6635] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 197.172469][ T6635] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 197.279130][ T6635] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 197.341351][ T4935] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 197.501499][ T4935] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 197.501528][ T4935] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.501547][ T4935] usb 5-1: Product: syz [ 197.501560][ T4935] usb 5-1: Manufacturer: syz [ 197.501573][ T4935] usb 5-1: SerialNumber: syz [ 197.572031][ T4935] usb 5-1: config 0 descriptor?? [ 197.779921][ T4935] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 198.802341][ T4935] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 198.815649][ T4935] usb 5-1: USB disconnect, device number 6 [ 199.283284][ T67] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.648356][ T7005] loop1: detected capacity change from 0 to 1024 [ 199.736043][ T7005] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 199.794362][ T7005] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 199.794799][ T7005] EXT4-fs (loop1): orphan cleanup on readonly fs [ 199.925056][ T6635] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 200.202931][ T7005] EXT4-fs error (device loop1): ext4_free_blocks:6718: comm syz.1.289: Freeing blocks not in datazone - block = 0, count = 4096 [ 200.202976][ T7005] loop1: lost filesystem error report for type 5 error -117 [ 200.211601][ C1] EXT4-fs (loop1): initial error at time 1779834236: ext4_free_blocks:6718 [ 200.211633][ C1] EXT4-fs (loop1): last error at time 1779834236: ext4_free_blocks:6718 [ 200.408964][ T6635] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 200.542151][ T7005] EXT4-fs (loop1): Remounting filesystem read-only [ 200.542369][ T7005] EXT4-fs (loop1): 1 orphan inode deleted [ 200.562309][ T7005] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 200.711506][ T5606] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.618003][ T67] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.081282][ T6792] bridge0: port 1(bridge_slave_0) entered blocking state [ 202.081547][ T6792] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.081871][ T6792] bridge_slave_0: entered allmulticast mode [ 202.106607][ T6792] bridge_slave_0: entered promiscuous mode [ 202.246039][ T6792] bridge0: port 2(bridge_slave_1) entered blocking state [ 202.246293][ T6792] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.246582][ T6792] bridge_slave_1: entered allmulticast mode [ 202.256502][ T6792] bridge_slave_1: entered promiscuous mode [ 202.834332][ T67] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.013468][ T6792] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 203.112381][ T6792] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 203.725211][ T7087] loop1: detected capacity change from 0 to 512 [ 204.100766][ T7087] EXT4-fs error (device loop1): ext4_orphan_get:1397: inode #15: comm syz.1.305: inode has both inline data and extents flags [ 204.100803][ T7087] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 204.101155][ T7087] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.305: couldn't read orphan inode 15 (err -117) [ 204.101200][ T7087] loop1: lost filesystem error report for type 5 error -117 [ 204.149517][ T7087] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 204.710422][ T7080] loop0: detected capacity change from 0 to 32768 [ 205.256395][ T7095] overlayfs: failed to resolve './bus': -2 [ 205.265655][ T7080] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 205.431734][ T7080] XFS (loop0): Ending clean mount [ 205.551026][ T5606] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.878699][ T67] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.941758][ T5608] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 205.962442][ T6792] team0: Port device team_slave_0 added [ 205.990928][ T6792] team0: Port device team_slave_1 added [ 206.372289][ T7116] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 206.449473][ T6792] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 206.449487][ T6792] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 206.449506][ T6792] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 206.455990][ T6792] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 206.456006][ T6792] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 206.456029][ T6792] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 206.907023][ T5613] Bluetooth: hci1: command 0x0406 tx timeout [ 206.907298][ T5613] Bluetooth: hci4: command 0x0406 tx timeout [ 207.007189][ T7119] syz.4.312 (7119) used greatest stack depth: 19008 bytes left [ 207.020055][ T6792] hsr_slave_0: entered promiscuous mode [ 207.028911][ T6792] hsr_slave_1: entered promiscuous mode [ 207.039665][ T6792] debugfs: 'hsr0' already exists in 'hsr' [ 207.039691][ T6792] Cannot create hsr debugfs directory [ 207.288070][ T60] Bluetooth: hci2: command 0x0406 tx timeout [ 208.480322][ T7134] netlink: 'syz.1.315': attribute type 11 has an invalid length. [ 210.484469][ T5267] 8021q: adding VLAN 0 to HW filter on device eth7 [ 211.034198][ T32] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 211.192778][ T32] usb 1-1: Using ep0 maxpacket: 16 [ 211.195242][ T32] usb 1-1: config 1 has an invalid interface number: 105 but max is 0 [ 211.195280][ T32] usb 1-1: config 1 has no interface number 0 [ 211.195321][ T32] usb 1-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 211.195344][ T32] usb 1-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 211.195367][ T32] usb 1-1: config 1 interface 105 has no altsetting 0 [ 211.390170][ T7156] binder: 7154:7156 ioctl c0306201 200000000040 returned -22 [ 211.390712][ T7156] binder: 7154:7156 ioctl c0306201 200000000640 returned -22 [ 211.390907][ T32] usb 1-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 211.390932][ T32] usb 1-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 211.390950][ T32] usb 1-1: Product: syz [ 211.390963][ T32] usb 1-1: Manufacturer: syz [ 211.390975][ T32] usb 1-1: SerialNumber: syz [ 211.840122][ T7151] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 211.840353][ T7151] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 212.300275][ T7151] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 212.300462][ T7151] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 212.842142][ T32] aqc111 1-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -32 [ 212.846227][ T32] aqc111 1-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -32 [ 213.045107][ T32] aqc111 1-1:1.105 eth10: register 'aqc111' at usb-dummy_hcd.0-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, f6:6b:a5:fe:84:23 [ 213.102389][ T32] usb 1-1: USB disconnect, device number 7 [ 213.132563][ T32] aqc111 1-1:1.105 eth10: unregister 'aqc111' usb-dummy_hcd.0-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 213.524958][ T32] aqc111 1-1:1.105 eth10 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 213.525098][ T32] aqc111 1-1:1.105 eth10 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 213.525217][ T32] aqc111 1-1:1.105 eth10 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 213.597497][ T7172] binder: 7171:7172 ioctl c0306201 200000000080 returned -14 [ 213.636715][ T7172] binder: 7171:7172 ioctl c0306201 2000000003c0 returned -14 [ 214.134104][ T7177] loop0: detected capacity change from 0 to 8 [ 214.460199][ T7177] SQUASHFS error: zlib decompression failed, data probably corrupt [ 214.460240][ T7177] SQUASHFS error: Failed to read block 0x9b: -5 [ 214.460258][ T7177] SQUASHFS error: Unable to read metadata cache entry [99] [ 214.460281][ T7177] SQUASHFS error: Unable to read inode 0x127 [ 214.516781][ T7177] netlink: 100 bytes leftover after parsing attributes in process `syz.0.326'. [ 214.632757][ T7177] netlink: 40 bytes leftover after parsing attributes in process `syz.0.326'. [ 214.632781][ T7177] netlink: 20 bytes leftover after parsing attributes in process `syz.0.326'. [ 215.060207][ T32] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 215.268475][ T32] usb 2-1: Using ep0 maxpacket: 16 [ 215.274224][ T32] usb 2-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 215.274259][ T32] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.274281][ T32] usb 2-1: Product: syz [ 215.274296][ T32] usb 2-1: Manufacturer: syz [ 215.274312][ T32] usb 2-1: SerialNumber: syz [ 215.339753][ T32] usb 2-1: config 0 descriptor?? [ 215.373925][ T32] ssu100 2-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 216.053825][ T7180] loop4: detected capacity change from 0 to 2048 [ 216.921170][ T7180] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 216.924653][ T7180] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 216.928396][ T7180] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 217.147572][ T32] ssu100 2-1:0.0: probe with driver ssu100 failed with error -71 [ 217.173587][ T32] usb 2-1: USB disconnect, device number 6 [ 218.247811][ T6635] 8021q: adding VLAN 0 to HW filter on device bond0 [ 218.680586][ T7195] netlink: 'syz.0.333': attribute type 6 has an invalid length. [ 218.680619][ T7195] netlink: 8 bytes leftover after parsing attributes in process `syz.0.333'. [ 219.918992][ T67] bridge_slave_1: left allmulticast mode [ 219.919025][ T67] bridge_slave_1: left promiscuous mode [ 219.919294][ T67] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.399371][ T7201] loop4: detected capacity change from 0 to 512 [ 220.507698][ T7201] EXT4-fs warning (device loop4): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 220.507732][ T7201] EXT4-fs warning (device loop4): dx_probe:849: Enable large directory feature to access it [ 220.507749][ T7201] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.334: Corrupt directory, running e2fsck is recommended [ 220.605327][ T7201] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 220.605472][ T7201] EXT4-fs error (device loop4): ext4_iget_extra_inode:5128: inode #15: comm syz.4.334: corrupted in-inode xattr: e_name out of bounds [ 220.605500][ T7201] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 220.606431][ T7201] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.334: couldn't read orphan inode 15 (err -117) [ 220.606462][ T7201] loop4: lost filesystem error report for type 5 error -117 [ 220.616936][ C1] EXT4-fs (loop4): error count since last fsck: 2 [ 220.616958][ C1] EXT4-fs (loop4): initial error at time 1779834257: ext4_iget_extra_inode:5128: inode 15 [ 220.616983][ C1] EXT4-fs (loop4): last error at time 1779834257: ext4_orphan_get:1402 [ 220.696460][ T7201] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 220.737647][ T7201] EXT4-fs warning (device loop4): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 220.737680][ T7201] EXT4-fs warning (device loop4): dx_probe:849: Enable large directory feature to access it [ 220.737696][ T7201] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.334: Corrupt directory, running e2fsck is recommended [ 220.789595][ T7201] EXT4-fs warning (device loop4): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 220.789628][ T7201] EXT4-fs warning (device loop4): dx_probe:849: Enable large directory feature to access it [ 220.789644][ T7201] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.334: Corrupt directory, running e2fsck is recommended [ 220.854631][ T7204] EXT4-fs warning (device loop4): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 220.854665][ T7204] EXT4-fs warning (device loop4): dx_probe:849: Enable large directory feature to access it [ 220.854681][ T7204] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.334: Corrupt directory, running e2fsck is recommended [ 220.936611][ T7201] EXT4-fs warning (device loop4): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 220.936793][ T7201] EXT4-fs error (device loop4): ext4_readdir:265: inode #2: block 3: comm syz.4.334: path /81/file0: bad entry in directory: directory entry overrun - offset=0, inode=4294967295, rec_len=65552, size=1024 fake=0 [ 222.035349][ T7201] EXT4-fs error (device loop4): ext4_readdir:265: inode #2: block 8: comm syz.4.334: path /81/file0: bad entry in directory: inode out of bounds - offset=0, inode=16810477, rec_len=1024, size=1024 fake=0 [ 222.775617][ T5610] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 222.821156][ T67] bridge_slave_0: left allmulticast mode [ 222.821189][ T67] bridge_slave_0: left promiscuous mode [ 222.842389][ T67] bridge0: port 1(bridge_slave_0) entered disabled state [ 223.222912][ T5794] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 223.415439][ T5794] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 223.415498][ T5794] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 223.415520][ T5794] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.479650][ T5794] usb 2-1: config 0 descriptor?? [ 223.619200][ T5794] pwc: Askey VC010 type 2 USB webcam detected. [ 223.925277][ T5794] pwc: recv_control_msg error -32 req 02 val 2b00 [ 223.934499][ T5794] pwc: recv_control_msg error -32 req 02 val 2700 [ 223.946412][ T5794] pwc: recv_control_msg error -32 req 02 val 2c00 [ 223.955247][ T5794] pwc: recv_control_msg error -32 req 04 val 1000 [ 223.956194][ T5794] pwc: recv_control_msg error -32 req 04 val 1300 [ 223.972189][ T5794] pwc: recv_control_msg error -32 req 04 val 1400 [ 224.396408][ T5794] pwc: recv_control_msg error -71 req 04 val 1500 [ 224.404853][ T5794] pwc: recv_control_msg error -71 req 02 val 2500 [ 224.405353][ T5794] pwc: recv_control_msg error -71 req 02 val 2400 [ 224.405809][ T5794] pwc: recv_control_msg error -71 req 02 val 2600 [ 224.435013][ T5794] pwc: recv_control_msg error -71 req 02 val 2900 [ 224.435533][ T5794] pwc: recv_control_msg error -71 req 02 val 2800 [ 224.436207][ T5794] pwc: recv_control_msg error -71 req 04 val 1100 [ 224.436665][ T5794] pwc: recv_control_msg error -71 req 04 val 1200 [ 224.728522][ T5794] pwc: Registered as video103. [ 225.219888][ T5794] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input5 [ 225.667253][ T5794] usb 2-1: USB disconnect, device number 7 [ 227.000070][ T5614] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 227.064536][ T5614] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 227.077210][ T5614] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 227.078412][ T5614] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 227.137046][ T5614] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 228.343373][ T7234] loop1: detected capacity change from 0 to 128 [ 229.242205][ T5614] Bluetooth: hci3: command tx timeout [ 229.840213][ T7237] loop1: detected capacity change from 0 to 32768 [ 229.941630][ T7237] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 230.303314][ T7237] XFS (loop1): Ending clean mount [ 231.481934][ T5614] Bluetooth: hci3: command tx timeout [ 231.482703][ T67] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 231.775555][ T67] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 231.859874][ T67] bond0 (unregistering): Released all slaves [ 231.961800][ T5606] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 232.134111][ T7224] syz_tun: entered allmulticast mode [ 233.533566][ T5614] Bluetooth: hci3: command tx timeout [ 234.365895][ T5267] 8021q: adding VLAN 0 to HW filter on device eth8 [ 235.611963][ T5614] Bluetooth: hci3: command tx timeout [ 238.550318][ T7305] loop1: detected capacity change from 0 to 256 [ 238.555928][ T7305] exfat: Deprecated parameter 'utf8' [ 238.556234][ T7305] exfat: Deprecated parameter 'namecase' [ 238.556272][ T7305] exfat: Deprecated parameter 'namecase' [ 238.769989][ T7305] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc232f927, utbl_chksum : 0xe619d30d) [ 240.586404][ T5267] 8021q: adding VLAN 0 to HW filter on device eth9 [ 242.747918][ T4920] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 242.925230][ T4920] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 242.926512][ T4920] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 242.943087][ T4920] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 242.943960][ T4920] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 243.358638][ T7323] loop0: detected capacity change from 0 to 512 [ 243.377630][ T7323] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 243.417125][ T5616] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 243.580749][ T5616] usb 2-1: Using ep0 maxpacket: 32 [ 243.656620][ T7323] EXT4-fs (loop0): 1 truncate cleaned up [ 243.683542][ T7323] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 243.880553][ T5616] usb 2-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 243.880616][ T5616] usb 2-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 243.880641][ T5616] usb 2-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 243.880666][ T5616] usb 2-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 243.883975][ T5616] usb 2-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 243.884004][ T5616] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.884022][ T5616] usb 2-1: Product: syz [ 243.884035][ T5616] usb 2-1: Manufacturer: syz [ 243.884046][ T5616] usb 2-1: SerialNumber: syz [ 244.070440][ T5716] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 244.320267][ T5716] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 244.320299][ T5716] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 244.320335][ T5716] usb 5-1: New USB device found, idVendor=054c, idProduct=0ba0, bcdDevice= 0.00 [ 244.320356][ T5716] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.367231][ T5716] usb 5-1: config 0 descriptor?? [ 244.864634][ T5716] playstation 0003:054C:0BA0.0004: unknown main item tag 0x0 [ 244.903021][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 244.945060][ T5608] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 245.019066][ T5716] playstation 0003:054C:0BA0.0004: hidraw0: USB HID v0.00 Device [HID 054c:0ba0] on usb-dummy_hcd.4-1/input0 [ 245.055918][ T5614] Bluetooth: hci0: command tx timeout [ 245.120789][ T5616] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:155.0/input/input6 [ 245.192147][ T5716] playstation 0003:054C:0BA0.0004: Invalid byte count transferred, expected 16 got 0 [ 245.192174][ T5716] playstation 0003:054C:0BA0.0004: Failed to retrieve DualShock4 pairing info: -22 [ 245.192217][ T5716] playstation 0003:054C:0BA0.0004: Failed to get MAC address from DualShock4 [ 245.192235][ T5716] playstation 0003:054C:0BA0.0004: Failed to create dualshock4. [ 245.308733][ T5616] imon 2-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 245.308754][ T5616] (id 0x00) [ 245.364136][ T5716] playstation 0003:054C:0BA0.0004: probe with driver playstation failed with error -22 [ 245.457848][ T5616] rc_core: IR keymap rc-imon-pad not found [ 245.457870][ T5616] Registered IR keymap rc-empty [ 245.457989][ T5616] imon 2-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 245.458006][ T5616] imon 2-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 246.558655][ T5716] usb 5-1: USB disconnect, device number 7 [ 246.641836][ T5616] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:155.0/rc/rc0 [ 246.721634][ T5616] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:155.0/rc/rc0/input7 [ 247.127310][ T5614] Bluetooth: hci0: command tx timeout [ 247.180244][ T5616] imon 2-1:155.0: iMON device (15c2:ffdc, intf0) on usb<2:8> initialized [ 247.556449][ T7347] loop0: detected capacity change from 0 to 1024 [ 247.569273][ T7347] EXT4-fs: Ignoring removed bh option [ 247.716544][ T7347] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 247.858361][ T7347] EXT4-fs error (device loop0): ext4_check_all_de:659: inode #12: block 7: comm syz.0.361: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=108 fake=0 [ 248.208166][ T67] hsr_slave_0: left promiscuous mode [ 248.317983][ T5616] usb 2-1: USB disconnect, device number 8 [ 248.615064][ T7343] loop4: detected capacity change from 0 to 32768 [ 248.735531][ T67] hsr_slave_1: left promiscuous mode [ 248.737460][ T67] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 248.737485][ T67] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 248.737756][ T7343] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.360 (7343) [ 248.984013][ T7347] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2860: Unable to expand inode 12. Delete some EAs or run e2fsck. [ 249.053241][ T7351] EXT4-fs error (device loop0): ext4_check_all_de:659: inode #12: block 7: comm syz.0.361: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=108 fake=0 [ 249.084135][ T67] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 249.105074][ T67] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 249.207392][ T5614] Bluetooth: hci0: command tx timeout [ 249.410439][ T5608] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 249.649982][ T7343] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 249.650018][ T7343] BTRFS info (device loop4): using sha256 checksum algorithm [ 250.029293][ T7343] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 250.151428][ T7343] BTRFS error (device loop4): open_ctree failed: -12 [ 250.579625][ T67] veth1_macvtap: left promiscuous mode [ 250.579728][ T67] veth0_macvtap: left promiscuous mode [ 250.580919][ T67] veth1_vlan: left promiscuous mode [ 250.581029][ T67] veth0_vlan: left promiscuous mode [ 251.290561][ T5614] Bluetooth: hci0: command tx timeout [ 251.553948][ T7378] netlink: 4 bytes leftover after parsing attributes in process `syz.0.367'. [ 253.854769][ T7384] loop0: detected capacity change from 0 to 32768 [ 254.814910][ T7384] dmapctl: invalid leafidx 1365 (expected 341) [ 254.814936][ T7384] ERROR: (device loop0): dbAllocAG: Corrupt dmapctl page [ 254.814936][ T7384] [ 254.838840][ T7384] ERROR: (device loop0): remounting filesystem as read-only [ 254.838930][ T7384] jfs_mkdir: dtInsert returned -EIO [ 254.839017][ T7384] ERROR: (device loop0): jfs_mkdir: [ 254.839017][ T7384] [ 257.320251][ T7391] kvm_intel: kvm [7390]: vcpu0, guest rIP: 0x0 Unhandled WRMSR(0x1d9) = 0x5 [ 257.400536][ T67] team0 (unregistering): Port device team_slave_1 removed [ 257.427821][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 257.427915][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.951265][ T67] team0 (unregistering): Port device team_slave_0 removed [ 258.666325][ T7398] loop4: detected capacity change from 0 to 256 [ 258.797882][ T7398] exFAT-fs (loop4): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 258.798228][ T7398] exFAT-fs (loop4): failed to load alloc-bitmap [ 258.798239][ T7398] exFAT-fs (loop4): failed to recognize exfat type [ 259.117043][ T823] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 259.307128][ T823] usb 5-1: Using ep0 maxpacket: 32 [ 259.323993][ T823] usb 5-1: unable to get BOS descriptor or descriptor too short [ 259.353348][ T823] usb 5-1: New USB device found, idVendor=0499, idProduct=1054, bcdDevice= 0.40 [ 259.353377][ T823] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 259.353395][ T823] usb 5-1: Product: syz [ 259.353408][ T823] usb 5-1: Manufacturer: syz [ 259.353421][ T823] usb 5-1: SerialNumber: syz [ 259.691122][ T823] usb 5-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 259.866199][ T823] usb 5-1: unit 37 not found! [ 259.866296][ T823] usb 5-1: unit 0 not found! [ 261.009161][ T823] usb 5-1: USB disconnect, device number 8 [ 262.099533][ T7409] loop1: detected capacity change from 0 to 40427 [ 262.103091][ T7409] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 262.103116][ T7409] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 262.346456][ T7409] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 262.381969][ T7409] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 262.381998][ T7409] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 264.188494][ T5606] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 264.188525][ T5606] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 264.188539][ T5606] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 264.188553][ T5606] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 264.188566][ T5606] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 264.188579][ T5606] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 264.188604][ T5606] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 264.755737][ T7417] loop4: detected capacity change from 0 to 32768 [ 264.757041][ T7417] btrfs: Deprecated parameter 'usebackuproot' [ 264.757063][ T7417] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 264.794153][ T7417] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.376 (7417) [ 264.828094][ T7417] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 264.828127][ T7417] BTRFS info (device loop4): using crc32c checksum algorithm [ 265.044490][ T1448] BTRFS warning (device loop4): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 265.044634][ T7417] BTRFS error (device loop4): failed to load root extent [ 265.044676][ T7417] BTRFS warning (device loop4): try to load backup roots slot 1 [ 265.063832][ T68] BTRFS warning (device loop4): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 265.063940][ T7417] BTRFS warning (device loop4): couldn't read tree root [ 265.063959][ T7417] BTRFS warning (device loop4): try to load backup roots slot 2 [ 265.065141][ T159] BTRFS error (device loop4): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 265.065224][ T7417] BTRFS warning (device loop4): couldn't read tree root [ 265.065250][ T7417] BTRFS warning (device loop4): try to load backup roots slot 3 [ 265.214479][ T7417] BTRFS info (device loop4): rebuilding free space tree [ 265.413043][ T7417] BTRFS info (device loop4): checking UUID tree [ 265.424772][ T7417] BTRFS info (device loop4): enabling ssd optimizations [ 265.424798][ T7417] BTRFS info (device loop4): turning on async discard [ 265.424813][ T7417] BTRFS info (device loop4): enabling free space tree [ 265.424829][ T7417] BTRFS info (device loop4): force clearing of disk cache [ 265.424843][ T7417] BTRFS info (device loop4): enabling auto defrag [ 265.424858][ T7417] BTRFS info (device loop4): trying to use backup root at mount time [ 265.424876][ T7417] BTRFS info (device loop4): use lzo compression, level 1 [ 266.157922][ T7229] bridge0: port 1(bridge_slave_0) entered blocking state [ 266.158185][ T7229] bridge0: port 1(bridge_slave_0) entered disabled state [ 266.158467][ T7229] bridge_slave_0: entered allmulticast mode [ 266.201296][ T7229] bridge_slave_0: entered promiscuous mode [ 266.256366][ T7229] bridge0: port 2(bridge_slave_1) entered blocking state [ 266.256623][ T7229] bridge0: port 2(bridge_slave_1) entered disabled state [ 266.272053][ T7229] bridge_slave_1: entered allmulticast mode [ 266.290970][ T7229] bridge_slave_1: entered promiscuous mode [ 267.330072][ T7229] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 267.395234][ T7229] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 267.569073][ T7449] loop0: detected capacity change from 0 to 40427 [ 267.578450][ T7449] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 267.578476][ T7449] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 267.731198][ T7449] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 267.772639][ T7449] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 267.772669][ T7449] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 269.616292][ T5608] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix. [ 269.616316][ T5608] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix. [ 269.616330][ T5608] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix. [ 269.616343][ T5608] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix. [ 269.616355][ T5608] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix. [ 269.616368][ T5608] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix. [ 269.616381][ T5608] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix. [ 270.125045][ T5610] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 274.296632][ T5737] usb 5-1: new low-speed USB device number 9 using dummy_hcd [ 274.468381][ T7229] team0: Port device team_slave_0 added [ 274.510781][ T5737] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 274.510809][ T5737] usb 5-1: config 0 has no interface number 0 [ 274.510846][ T5737] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 274.510872][ T5737] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 274.510911][ T5737] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 274.510933][ T5737] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.601283][ T5737] usb 5-1: config 0 descriptor?? [ 274.604589][ T7461] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 274.760949][ T7229] team0: Port device team_slave_1 added [ 274.937272][ T5737] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 275.078770][ T5716] usb 5-1: USB disconnect, device number 9 [ 275.756242][ T38] audit: type=1326 audit(1779834312.460:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7464 comm="syz.1.378" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68b010ce59 code=0x7ffc0000 [ 275.756290][ T38] audit: type=1326 audit(1779834312.460:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7464 comm="syz.1.378" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68b010ce59 code=0x7ffc0000 [ 275.802041][ T38] audit: type=1326 audit(1779834312.470:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7464 comm="syz.1.378" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f68b010ce59 code=0x7ffc0000 [ 275.805740][ T38] audit: type=1326 audit(1779834312.510:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7464 comm="syz.1.378" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f68b010ce59 code=0x7ffc0000 [ 276.421463][ T7469] loop1: detected capacity change from 0 to 512 [ 276.567166][ T7469] EXT4-fs warning (device loop1): read_mmp_block:111: Error -117 while reading MMP block 0 [ 276.703325][ T7229] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 276.703342][ T7229] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 276.703367][ T7229] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 276.844206][ T7229] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 276.844223][ T7229] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 276.844249][ T7229] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 277.221445][ T7469] netlink: 168 bytes leftover after parsing attributes in process `syz.1.383'. [ 277.479649][ T7229] hsr_slave_0: entered promiscuous mode [ 277.641319][ T7229] hsr_slave_1: entered promiscuous mode [ 277.643140][ T7229] debugfs: 'hsr0' already exists in 'hsr' [ 277.643165][ T7229] Cannot create hsr debugfs directory [ 278.578956][ T7483] netlink: 24 bytes leftover after parsing attributes in process `syz.4.385'. [ 279.858250][ T7474] loop1: detected capacity change from 0 to 32768 [ 280.543877][ T7474] read_mapping_page failed! [ 280.561001][ T7474] jfs_mount: Failed to read AGGREGATE_I [ 280.561016][ T7474] Mount JFS Failure: -5 [ 280.561026][ T7474] jfs_mount failed w/return code = -5 [ 281.548258][ T823] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 281.838492][ T823] usb 2-1: Using ep0 maxpacket: 32 [ 281.844187][ T823] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 281.844220][ T823] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 281.844257][ T823] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 281.844280][ T823] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 282.010899][ T823] usb 2-1: config 0 descriptor?? [ 282.024332][ T823] hub 2-1:0.0: USB hub found [ 282.293129][ T823] hub 2-1:0.0: 1 port detected [ 283.133636][ T823] hub 2-1:0.0: activate --> -90 [ 283.547016][ T823] usb 2-1-port1: cannot disable (err = -71) [ 283.728228][ T5716] usb 2-1: USB disconnect, device number 9 [ 283.767580][ T823] hub 2-1:0.0: hub_ext_port_status failed (err = -71) [ 283.767609][ T823] usb 2-1-port1: connect-debounce failed [ 283.843748][ T7314] bridge0: port 1(bridge_slave_0) entered blocking state [ 283.844016][ T7314] bridge0: port 1(bridge_slave_0) entered disabled state [ 283.844328][ T7314] bridge_slave_0: entered allmulticast mode [ 284.095528][ T7314] bridge_slave_0: entered promiscuous mode [ 284.254685][ T7314] bridge0: port 2(bridge_slave_1) entered blocking state [ 284.254940][ T7314] bridge0: port 2(bridge_slave_1) entered disabled state [ 284.255242][ T7314] bridge_slave_1: entered allmulticast mode [ 284.336288][ T7314] bridge_slave_1: entered promiscuous mode [ 285.865997][ T7314] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 285.977782][ T7314] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 286.285953][ T7314] team0: Port device team_slave_0 added [ 286.485203][ T4920] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 286.592899][ T4920] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 286.596420][ T4920] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 286.625359][ T4920] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 286.647855][ T4920] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 287.939424][ T5614] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 288.103565][ T5614] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 288.133440][ T5614] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 288.159845][ T5614] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 288.161526][ T5614] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 288.894831][ T4920] Bluetooth: hci6: command tx timeout [ 290.407928][ T5614] Bluetooth: hci5: command tx timeout [ 290.967250][ T4920] Bluetooth: hci6: command tx timeout [ 292.892571][ T4920] Bluetooth: hci5: command tx timeout [ 293.337189][ T4920] Bluetooth: hci6: command tx timeout [ 294.027306][ T7559] Bluetooth: MGMT ver 1.23 [ 295.799766][ T4920] Bluetooth: hci6: command tx timeout [ 295.967806][ T4920] Bluetooth: hci5: command tx timeout [ 296.023007][ T7567] netlink: 8 bytes leftover after parsing attributes in process `syz.4.398'. [ 296.145813][ T7314] team0: Port device team_slave_1 added [ 296.155145][ T7522] syz_tun: entered allmulticast mode [ 296.952928][ T7572] loop4: detected capacity change from 0 to 32768 [ 297.112204][ T7572] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 297.187473][ T7572] XFS (loop4): Ending clean mount [ 297.554425][ T7528] bond0: entered promiscuous mode [ 297.554451][ T7528] bond_slave_0: entered promiscuous mode [ 297.554688][ T7528] bond_slave_1: entered promiscuous mode [ 297.734570][ T5610] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 298.007096][ T4920] Bluetooth: hci5: command tx timeout [ 298.466571][ T38] audit: type=1326 audit(1779834335.140:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7581 comm="syz.4.401" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6241fce59 code=0x7ffc0000 [ 298.495624][ T38] audit: type=1326 audit(1779834335.140:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7581 comm="syz.4.401" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6241fce59 code=0x7ffc0000 [ 298.495668][ T38] audit: type=1326 audit(1779834335.200:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7581 comm="syz.4.401" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6241fce59 code=0x7ffc0000 [ 298.593523][ T38] audit: type=1326 audit(1779834335.200:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7581 comm="syz.4.401" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6241fce59 code=0x7ffc0000 [ 298.593574][ T38] audit: type=1326 audit(1779834335.200:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7581 comm="syz.4.401" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7fe6241fce59 code=0x7ffc0000 [ 298.593614][ T38] audit: type=1326 audit(1779834335.300:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7581 comm="syz.4.401" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6241fce59 code=0x7ffc0000 [ 298.593652][ T38] audit: type=1326 audit(1779834335.300:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7581 comm="syz.4.401" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6241fce59 code=0x7ffc0000 [ 298.593680][ T38] audit: type=1326 audit(1779834335.300:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7581 comm="syz.4.401" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe6241bd68e code=0x7ffc0000 [ 298.593702][ T38] audit: type=1326 audit(1779834335.300:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7581 comm="syz.4.401" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe6241bd68e code=0x7ffc0000 [ 298.593724][ T38] audit: type=1326 audit(1779834335.300:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7581 comm="syz.4.401" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe6241bd68e code=0x7ffc0000 [ 301.081395][ T7592] loop4: detected capacity change from 0 to 32768 [ 301.198094][ T7592] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.403 (7592) [ 301.295391][ T7592] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 301.295431][ T7592] BTRFS info (device loop4): using crc32c checksum algorithm [ 301.670545][ T7592] BTRFS info (device loop4): enabling ssd optimizations [ 301.670573][ T7592] BTRFS info (device loop4): turning on flush-on-commit [ 301.670590][ T7592] BTRFS info (device loop4): enabling free space tree [ 301.670608][ T7592] BTRFS info (device loop4): enabling auto defrag [ 301.670626][ T7592] BTRFS info (device loop4): use lzo compression, level 1 [ 301.670646][ T7592] BTRFS info (device loop4): max_inline set to 4096 [ 302.092988][ T5614] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 302.190360][ T5614] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 302.221121][ T5614] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 302.243654][ T5614] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 302.244279][ T5614] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 304.511049][ T4920] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 304.683367][ T4920] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 304.702168][ T4920] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 304.747961][ T4920] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 304.749944][ T4920] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 305.689651][ T5610] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 306.290854][ T4920] Bluetooth: hci2: command tx timeout [ 307.127084][ T4920] Bluetooth: hci7: command tx timeout [ 308.407301][ T4920] Bluetooth: hci2: command tx timeout [ 309.217076][ T4920] Bluetooth: hci7: command tx timeout [ 310.527041][ T4920] Bluetooth: hci2: command tx timeout [ 311.308472][ T4920] Bluetooth: hci7: command tx timeout [ 312.607035][ T4920] Bluetooth: hci2: command tx timeout [ 313.884334][ T4920] Bluetooth: hci7: command tx timeout [ 314.752164][ T7520] syz_tun (unregistering): left allmulticast mode [ 315.797126][ T7661] loop4: detected capacity change from 0 to 2048 [ 315.837166][ T7661] EXT4-fs: Ignoring removed nobh option [ 315.837194][ T7661] EXT4-fs: Ignoring removed bh option [ 316.369907][ T7661] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 316.410546][ T38] kauditd_printk_skb: 175 callbacks suppressed [ 316.410565][ T38] audit: type=1800 audit(1779834353.120:193): pid=7661 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.407" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 317.843028][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.843124][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 320.598718][ T1448] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 320.642047][ T1448] EXT4-fs (loop4): Remounting filesystem read-only [ 323.542271][ T5610] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 346.666022][ T4920] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 346.735013][ T4920] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 346.748068][ T4920] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 346.749522][ T4920] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 346.780044][ T4920] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 347.610565][ T5614] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 347.686544][ T5614] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 347.705574][ T5614] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 348.061899][ T5614] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 348.066802][ T5614] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 349.611736][ T5614] Bluetooth: hci0: command tx timeout [ 350.653457][ T1027] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.034181][ T5614] Bluetooth: hci0: command tx timeout [ 352.034251][ T5614] Bluetooth: hci1: command tx timeout [ 352.035234][ T5614] Bluetooth: hci3: command 0x0406 tx timeout [ 354.129104][ T60] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 354.216300][ T5615] Bluetooth: hci0: command tx timeout [ 354.216337][ T5615] Bluetooth: hci1: command tx timeout [ 354.344775][ T60] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 354.498160][ T4920] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 356.906543][ T4920] Bluetooth: hci1: command tx timeout [ 356.906577][ T4920] Bluetooth: hci0: command tx timeout [ 357.017810][ T4920] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 357.421250][ T4920] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 359.085326][ T4920] Bluetooth: hci1: command tx timeout [ 360.167374][ T4920] Bluetooth: hci8: command tx timeout [ 363.018759][ T60] Bluetooth: hci8: command tx timeout [ 364.343708][ T5614] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 364.487414][ T5614] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 364.490370][ T5614] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 364.495780][ T5614] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 364.536551][ T5614] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 365.468599][ T5614] Bluetooth: hci8: command tx timeout [ 367.607028][ T4920] Bluetooth: hci8: command tx timeout [ 367.899867][ T5614] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 367.950756][ T5614] Bluetooth: hci9: command tx timeout [ 368.975148][ T5614] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 368.988447][ T5614] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 368.991442][ T5614] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 370.003892][ T5614] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 370.154697][ T4920] Bluetooth: hci9: command tx timeout [ 373.011371][ T4920] Bluetooth: hci9: command tx timeout [ 373.021677][ T5614] Bluetooth: hci10: command tx timeout [ 375.047107][ T4920] Bluetooth: hci9: command tx timeout [ 375.047160][ T5614] Bluetooth: hci10: command tx timeout [ 376.625530][ T7673] syz_tun (unregistering): left allmulticast mode [ 377.270998][ T5614] Bluetooth: hci10: command tx timeout [ 378.738090][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.738186][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.286993][ T5614] Bluetooth: hci10: command tx timeout [ 402.976719][ T1027] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.465080][ T7776] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 410.528360][ T7775] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 410.991148][ T7775] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 411.005168][ T7775] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 411.014940][ T7775] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 411.038199][ T7775] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 411.234730][ T60] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 411.325238][ T60] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 411.378071][ T60] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 411.379942][ T60] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 411.381447][ T60] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 411.607034][ T60] Bluetooth: hci5: command 0x0406 tx timeout [ 411.767027][ T60] Bluetooth: hci6: command 0x0406 tx timeout [ 411.985872][ T60] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 411.995621][ T60] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 412.001588][ T60] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 412.004598][ T60] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 413.210218][ T60] Bluetooth: hci4: command tx timeout [ 413.608369][ T60] Bluetooth: hci12: command tx timeout [ 415.286977][ T4920] Bluetooth: hci4: command tx timeout [ 415.880315][ T5614] Bluetooth: hci12: command tx timeout [ 416.593320][ T5614] Bluetooth: hci11: command tx timeout [ 417.368037][ T5614] Bluetooth: hci4: command tx timeout [ 417.926989][ T5614] Bluetooth: hci12: command tx timeout [ 418.666734][ T5614] Bluetooth: hci11: command tx timeout [ 419.446991][ T5614] Bluetooth: hci4: command tx timeout [ 420.007014][ T5614] Bluetooth: hci12: command tx timeout [ 420.727254][ T5614] Bluetooth: hci11: command tx timeout [ 422.856373][ T5614] Bluetooth: hci11: command tx timeout [ 424.456550][ T4920] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 424.557103][ T4920] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 424.562763][ T4920] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 424.589074][ T4920] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 424.613963][ T4920] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 427.114084][ T5614] Bluetooth: hci2: command 0x0406 tx timeout [ 428.996419][ T60] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 429.065359][ T60] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 429.078113][ T60] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 429.082820][ T60] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 429.083590][ T60] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 431.146769][ T5613] Bluetooth: hci0: command tx timeout [ 432.087251][ T5613] Bluetooth: hci7: command 0x0406 tx timeout [ 433.229576][ T5613] Bluetooth: hci0: command tx timeout [ 435.286936][ T5613] Bluetooth: hci0: command tx timeout [ 437.504133][ T5613] Bluetooth: hci0: command tx timeout [ 440.169952][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.170049][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.286980][ T4920] Bluetooth: hci13: command tx timeout [ 447.233413][ T4920] Bluetooth: hci13: command tx timeout [ 449.670195][ T4920] Bluetooth: hci13: command tx timeout [ 451.954879][ T4920] Bluetooth: hci13: command tx timeout [ 460.804140][ T7767] bridge0: port 1(bridge_slave_0) entered blocking state [ 460.804415][ T7767] bridge0: port 1(bridge_slave_0) entered disabled state [ 460.804726][ T7767] bridge_slave_0: entered allmulticast mode [ 460.839128][ T7767] bridge_slave_0: entered promiscuous mode [ 460.946259][ T7767] bridge0: port 2(bridge_slave_1) entered blocking state [ 460.946521][ T7767] bridge0: port 2(bridge_slave_1) entered disabled state [ 460.961787][ T7767] bridge_slave_1: entered allmulticast mode [ 460.980612][ T7767] bridge_slave_1: entered promiscuous mode [ 461.381507][ C1] sched: DL replenish lagged too much [ 462.060061][ T7767] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 462.706979][ T7767] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 462.831421][ T7770] bridge0: port 1(bridge_slave_0) entered blocking state [ 462.831681][ T7770] bridge0: port 1(bridge_slave_0) entered disabled state [ 462.832013][ T7770] bridge_slave_0: entered allmulticast mode [ 462.859226][ T7770] bridge_slave_0: entered promiscuous mode [ 466.031914][ T7771] bridge0: port 1(bridge_slave_0) entered blocking state [ 466.032183][ T7771] bridge0: port 1(bridge_slave_0) entered disabled state [ 466.032441][ T7771] bridge_slave_0: entered allmulticast mode [ 466.035470][ T7771] bridge_slave_0: entered promiscuous mode [ 466.091239][ T7770] bridge0: port 2(bridge_slave_1) entered blocking state [ 466.091511][ T7770] bridge0: port 2(bridge_slave_1) entered disabled state [ 466.091827][ T7770] bridge_slave_1: entered allmulticast mode [ 466.133220][ T7770] bridge_slave_1: entered promiscuous mode [ 466.246317][ T7771] bridge0: port 2(bridge_slave_1) entered blocking state [ 466.246608][ T7771] bridge0: port 2(bridge_slave_1) entered disabled state [ 466.261878][ T7771] bridge_slave_1: entered allmulticast mode [ 466.282023][ T7771] bridge_slave_1: entered promiscuous mode [ 466.597949][ T7767] team0: Port device team_slave_0 added [ 466.631473][ T5614] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 466.724361][ T5614] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 466.739215][ T5614] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 466.781762][ T5614] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 466.812823][ T5614] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 467.197709][ T7767] team0: Port device team_slave_1 added [ 469.047045][ T4920] Bluetooth: hci1: command tx timeout [ 469.465624][ T7771] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 471.474371][ T5614] Bluetooth: hci1: command tx timeout [ 472.315937][ T5613] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 474.001673][ T5613] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 474.005974][ T5613] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 474.202188][ T5613] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 474.203338][ T5613] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 474.321162][ T5613] Bluetooth: hci1: command tx timeout [ 476.486994][ T5613] Bluetooth: hci1: command tx timeout [ 478.649030][ T4920] Bluetooth: hci3: command tx timeout [ 479.041237][ T4920] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 479.683271][ T4920] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 480.309427][ T5614] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 480.506446][ T4920] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 480.513764][ T4920] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 480.728686][ T4920] Bluetooth: hci3: command tx timeout [ 482.863200][ T4920] Bluetooth: hci8: command tx timeout [ 482.864078][ T4920] Bluetooth: hci3: command tx timeout [ 485.006968][ T5613] Bluetooth: hci3: command tx timeout [ 485.047079][ T5613] Bluetooth: hci8: command tx timeout [ 485.450273][ T5613] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 485.567531][ T5613] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 485.573108][ T5613] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 485.575876][ T5613] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 485.576655][ T5613] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 487.143245][ T5613] Bluetooth: hci8: command tx timeout [ 488.841265][ T5614] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 489.961929][ T5614] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 489.967485][ T5614] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 490.007959][ T5614] Bluetooth: hci8: command tx timeout [ 490.010408][ T60] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 490.011212][ T60] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 491.001730][ T4920] Bluetooth: hci9: command tx timeout [ 493.191267][ T5614] Bluetooth: hci9: command tx timeout [ 494.111366][ T60] Bluetooth: hci10: command 0x0406 tx timeout [ 495.367089][ T60] Bluetooth: hci11: command tx timeout [ 495.564447][ T60] Bluetooth: hci9: command tx timeout [ 496.248438][ T7811] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 497.447210][ T60] Bluetooth: hci11: command tx timeout [ 498.576062][ T5613] Bluetooth: hci9: command tx timeout [ 499.526996][ T60] Bluetooth: hci11: command tx timeout [ 501.609106][ T60] Bluetooth: hci11: command tx timeout [ 501.610009][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.610101][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 515.975491][ T1027] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 526.639340][ T60] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 526.752215][ T60] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 526.756081][ T60] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 526.847643][ T60] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 526.928194][ T60] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 530.133004][ T5613] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 530.202560][ T5613] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 530.206716][ T5613] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 530.243984][ T5613] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 530.261055][ T5614] Bluetooth: hci0: command tx timeout [ 530.290439][ T5614] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 533.199749][ T5614] Bluetooth: hci4: command tx timeout [ 533.200805][ T5614] Bluetooth: hci0: command tx timeout [ 534.639957][ T5614] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 535.222848][ T4920] Bluetooth: hci4: command tx timeout [ 535.264338][ T5613] Bluetooth: hci0: command tx timeout [ 537.566138][ T4920] Bluetooth: hci4: command tx timeout [ 537.566177][ T4920] Bluetooth: hci0: command tx timeout [ 537.695375][ T5614] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 537.762691][ T5614] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 537.845672][ T5614] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 537.862942][ T5614] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 539.705275][ T60] Bluetooth: hci4: command tx timeout [ 540.557020][ T60] Bluetooth: hci12: command tx timeout [ 542.820329][ T60] Bluetooth: hci12: command tx timeout [ 545.309220][ T60] Bluetooth: hci12: command tx timeout [ 547.420425][ T60] Bluetooth: hci12: command tx timeout [ 551.026606][ T5614] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 551.424126][ T5614] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 551.560185][ T5614] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 551.837752][ T5614] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 551.981710][ T5614] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 554.619695][ T5614] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 554.712599][ T5614] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 554.715557][ T5614] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 554.729014][ T4920] Bluetooth: hci13: command tx timeout [ 554.743454][ T5614] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 554.783225][ T5614] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 556.806851][ T60] Bluetooth: hci13: command tx timeout [ 556.966899][ T60] Bluetooth: hci14: command tx timeout [ 558.886994][ T60] Bluetooth: hci13: command tx timeout [ 559.047062][ T60] Bluetooth: hci14: command tx timeout [ 560.967048][ T60] Bluetooth: hci13: command tx timeout [ 561.164265][ T5614] Bluetooth: hci14: command tx timeout [ 563.065862][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.065957][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.527280][ T60] Bluetooth: hci14: command tx timeout [ 575.505616][ T39] INFO: task syz-executor:7540 blocked for more than 150 seconds. [ 575.505641][ T39] Not tainted syzkaller #0 [ 575.505651][ T39] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 575.505660][ T39] task:syz-executor state:D stack:24896 pid:7540 tgid:7540 ppid:1 task_flags:0x400140 flags:0x00080002 [ 575.505789][ T39] Call Trace: [ 575.505800][ T39] [ 575.505812][ T39] __schedule+0x16f9/0x5500 [ 575.505883][ T39] ? __pfx___schedule+0x10/0x10 [ 575.505924][ T39] rt_mutex_schedule+0x76/0xf0 [ 575.505950][ T39] rt_mutex_slowlock_block+0x508/0x680 [ 575.505992][ T39] rt_mutex_slowlock+0x2dc/0x780 [ 575.506018][ T39] ? rt_mutex_slowlock+0x1fd/0x780 [ 575.506042][ T39] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 575.506076][ T39] ? rcu_barrier+0x4c/0x580 [ 575.506098][ T39] ? rcu_barrier+0x4c/0x580 [ 575.506121][ T39] ? rcu_barrier+0x4c/0x580 [ 575.506136][ T39] mutex_lock_nested+0x168/0x1d0 [ 575.506158][ T39] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 575.506192][ T39] rcu_barrier+0x4c/0x580 [ 575.506220][ T39] netdev_run_todo+0x333/0x1130 [ 575.506252][ T39] ? __pfx_netdev_run_todo+0x10/0x10 [ 575.506274][ T39] ? __pfx_ipmr_free_table+0x10/0x10 [ 575.506298][ T39] ? net_generic+0x1e/0x240 [ 575.506323][ T39] ? net_generic+0x1e/0x240 [ 575.506346][ T39] ? rtnl_is_locked+0x9/0x20 [ 575.506365][ T39] ? nexthop_net_exit_rtnl+0x254/0x2a0 [ 575.506388][ T39] ? ipmr_net_exit_rtnl+0x17d/0x1a0 [ 575.506414][ T39] ops_undo_list+0x3d8/0x940 [ 575.506439][ T39] ? __pfx_ops_undo_list+0x10/0x10 [ 575.506455][ T39] ? ops_init+0x469/0x5c0 [ 575.506489][ T39] setup_net+0x2f0/0x340 [ 575.506516][ T39] ? __pfx_setup_net+0x10/0x10 [ 575.506540][ T39] ? mutex_rt_init_lockdep+0x66/0x80 [ 575.506561][ T39] ? preinit_net+0x4b5/0x7d0 [ 575.506588][ T39] copy_net_ns+0x50e/0x730 [ 575.506616][ T39] create_new_namespaces+0x3e7/0x6a0 [ 575.506654][ T39] ? security_capable+0x7e/0x2c0 [ 575.506683][ T39] unshare_nsproxy_namespaces+0x149/0x190 [ 575.506758][ T39] ksys_unshare+0x57d/0x9f0 [ 575.506789][ T39] ? __pfx_ksys_unshare+0x10/0x10 [ 575.506819][ T39] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 575.506851][ T39] __x64_sys_unshare+0x38/0x50 [ 575.506871][ T39] do_syscall_64+0x174/0x580 [ 575.506890][ T39] ? trace_irq_disable+0x3b/0x140 [ 575.506912][ T39] ? clear_bhb_loop+0x40/0x90 [ 575.506934][ T39] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 575.506953][ T39] RIP: 0033:0x7faa31bde127 [ 575.506970][ T39] RSP: 002b:00007ffee0e297c8 EFLAGS: 00000202 ORIG_RAX: 0000000000000110 [ 575.506991][ T39] RAX: ffffffffffffffda RBX: 00007faa31e55f40 RCX: 00007faa31bde127 [ 575.507004][ T39] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 575.507017][ T39] RBP: 00007faa31e567b8 R08: 0000000000000000 R09: 0000000000000000 [ 575.507028][ T39] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000008 [ 575.507040][ T39] R13: 0000000000000003 R14: 00007ffee0e29a08 R15: 0000000000000000 [ 575.507066][ T39] [ 575.507075][ T39] INFO: task syz-executor:7607 blocked for more than 150 seconds. [ 575.507139][ T39] Not tainted syzkaller #0 [ 575.507151][ T39] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 575.507160][ T39] task:syz-executor state:D stack:23464 pid:7607 tgid:7607 ppid:1 task_flags:0x400140 flags:0x00080002 [ 575.507213][ T39] Call Trace: [ 575.507220][ T39] [ 575.507234][ T39] __schedule+0x16f9/0x5500 [ 575.507296][ T39] ? __pfx___schedule+0x10/0x10 [ 575.507349][ T39] rt_mutex_schedule+0x76/0xf0 [ 575.507375][ T39] rt_mutex_slowlock_block+0x508/0x680 [ 575.507418][ T39] rt_mutex_slowlock+0x2dc/0x780 [ 575.507444][ T39] ? rt_mutex_slowlock+0x1fd/0x780 [ 575.507468][ T39] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 575.507504][ T39] ? rcu_barrier+0x4c/0x580 [ 575.507527][ T39] ? rcu_barrier+0x4c/0x580 [ 575.507549][ T39] ? rcu_barrier+0x4c/0x580 [ 575.507563][ T39] mutex_lock_nested+0x168/0x1d0 [ 575.507584][ T39] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 575.507611][ T39] rcu_barrier+0x4c/0x580 [ 575.507637][ T39] netdev_run_todo+0x333/0x1130 [ 575.507667][ T39] ? __pfx_netdev_run_todo+0x10/0x10 [ 575.507688][ T39] ? __pfx_ipmr_free_table+0x10/0x10 [ 575.507710][ T39] ? net_generic+0x1e/0x240 [ 575.507735][ T39] ? net_generic+0x1e/0x240 [ 575.507759][ T39] ? rtnl_is_locked+0x9/0x20 [ 575.507782][ T39] ? nexthop_net_exit_rtnl+0x254/0x2a0 [ 575.507806][ T39] ? ipmr_net_exit_rtnl+0x17d/0x1a0 [ 575.507855][ T39] ops_undo_list+0x3d8/0x940 [ 575.507880][ T39] ? __pfx_ops_undo_list+0x10/0x10 [ 575.507896][ T39] ? ops_init+0x469/0x5c0 [ 575.507935][ T39] setup_net+0x2f0/0x340 [ 575.507963][ T39] ? __pfx_setup_net+0x10/0x10 [ 575.507988][ T39] ? mutex_rt_init_lockdep+0x66/0x80 [ 575.508010][ T39] ? preinit_net+0x4b5/0x7d0 [ 575.508037][ T39] copy_net_ns+0x50e/0x730 [ 575.508067][ T39] create_new_namespaces+0x3e7/0x6a0 [ 575.508098][ T39] ? security_capable+0x7e/0x2c0 [ 575.508128][ T39] unshare_nsproxy_namespaces+0x149/0x190 [ 575.508159][ T39] ksys_unshare+0x57d/0x9f0 [ 575.508190][ T39] ? __pfx_ksys_unshare+0x10/0x10 [ 575.508221][ T39] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 575.508242][ T39] __x64_sys_unshare+0x38/0x50 [ 575.508263][ T39] do_syscall_64+0x174/0x580 [ 575.508283][ T39] ? trace_irq_disable+0x3b/0x140 [ 575.508304][ T39] ? clear_bhb_loop+0x40/0x90 [ 575.508326][ T39] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 575.508345][ T39] RIP: 0033:0x7f710348e127 [ 575.508361][ T39] RSP: 002b:00007ffd8356fd48 EFLAGS: 00000206 ORIG_RAX: 0000000000000110 [ 575.508382][ T39] RAX: ffffffffffffffda RBX: 00007f7103705f40 RCX: 00007f710348e127 [ 575.508396][ T39] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 575.508409][ T39] RBP: 00007f71037067b8 R08: 0000000000000000 R09: 0000000000000000 [ 575.508421][ T39] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000008 [ 575.508433][ T39] R13: 0000000000000003 R14: 00007ffd8356ff88 R15: 0000000000000000 [ 575.508465][ T39] [ 575.508474][ T39] INFO: task syz-executor:7622 blocked for more than 150 seconds. [ 575.508489][ T39] Not tainted syzkaller #0 [ 575.508499][ T39] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 575.508509][ T39] task:syz-executor state:D stack:23560 pid:7622 tgid:7622 ppid:1 task_flags:0x400140 flags:0x00080002 [ 575.508561][ T39] Call Trace: [ 575.508568][ T39] [ 575.508580][ T39] __schedule+0x16f9/0x5500 [ 575.508638][ T39] ? __pfx___schedule+0x10/0x10 [ 575.508681][ T39] rt_mutex_schedule+0x76/0xf0 [ 575.508706][ T39] rt_mutex_slowlock_block+0x508/0x680 [ 575.508748][ T39] rt_mutex_slowlock+0x2dc/0x780 [ 575.508773][ T39] ? rt_mutex_slowlock+0x1fd/0x780 [ 575.508798][ T39] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 575.508844][ T39] ? rcu_barrier+0x4c/0x580 [ 575.508868][ T39] ? rcu_barrier+0x4c/0x580 [ 575.508884][ T39] mutex_lock_nested+0x168/0x1d0 [ 575.508907][ T39] ? rt_spin_unlock+0x14f/0x200 [ 575.508935][ T39] rcu_barrier+0x4c/0x580 [ 575.508952][ T39] ? rt_spin_unlock+0x160/0x200 [ 575.508979][ T39] ? sunrpc_destroy_cache_detail+0x159/0x190 [ 575.509007][ T39] nfsd_export_shutdown+0x9b/0x120 [ 575.509039][ T39] ops_undo_list+0x49f/0x940 [ 575.509064][ T39] ? __pfx_ops_undo_list+0x10/0x10 [ 575.509080][ T39] ? ops_init+0x469/0x5c0 [ 575.509117][ T39] setup_net+0x2f0/0x340 [ 575.509145][ T39] ? __pfx_setup_net+0x10/0x10 [ 575.509170][ T39] ? mutex_rt_init_lockdep+0x66/0x80 [ 575.509191][ T39] ? preinit_net+0x4b5/0x7d0 [ 575.509218][ T39] copy_net_ns+0x50e/0x730 [ 575.509248][ T39] create_new_namespaces+0x3e7/0x6a0 [ 575.509278][ T39] ? security_capable+0x7e/0x2c0 [ 575.509306][ T39] unshare_nsproxy_namespaces+0x149/0x190 [ 575.509335][ T39] ksys_unshare+0x57d/0x9f0 [ 575.509363][ T39] ? __pfx_ksys_unshare+0x10/0x10 [ 575.509393][ T39] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 575.509414][ T39] __x64_sys_unshare+0x38/0x50 [ 575.509434][ T39] do_syscall_64+0x174/0x580 [ 575.509452][ T39] ? trace_irq_disable+0x3b/0x140 [ 575.509473][ T39] ? clear_bhb_loop+0x40/0x90 [ 575.509496][ T39] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 575.509514][ T39] RIP: 0033:0x7f9c5422e127 [ 575.509530][ T39] RSP: 002b:00007fffe5287e78 EFLAGS: 00000206 ORIG_RAX: 0000000000000110 [ 575.509549][ T39] RAX: ffffffffffffffda RBX: 00007f9c544a5f40 RCX: 00007f9c5422e127 [ 575.509563][ T39] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 575.509575][ T39] RBP: 00007f9c544a67b8 R08: 0000000000000000 R09: 0000000000000000 [ 575.509587][ T39] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000008 [ 575.509599][ T39] R13: 0000000000000003 R14: 00007fffe52880b8 R15: 0000000000000000 [ 575.509628][ T39] [ 575.509672][ T39] [ 575.509672][ T39] Showing all locks held in the system: [ 575.509680][ T39] 11 locks held by kworker/u8:1/13: [ 575.509692][ T39] #0: ffff88813fe8c138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x897/0x1630 [ 575.509746][ T39] #1: ffffc90000127c40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630 [ 575.509796][ T39] #2: ffff88805ff2c310 (&devlink->lock_key#4){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xbd0 [ 575.509856][ T39] #3: ffff88803c603520 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1ad/0xbd0 [ 575.509897][ T39] #4: ffffffff8dfcacc0 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400 [ 575.509942][ T39] #5: ffffffff8dfcacc0 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420 [ 575.509982][ T39] #6: ffffffff8dfcacc0 (rcu_read_lock){....}-{1:3}, at: process_backlog+0x271/0xc60 [ 575.510024][ T39] #7: ffffffff8dfcacc0 (rcu_read_lock){....}-{1:3}, at: NF_HOOK+0x9e/0x3c0 [ 575.510069][ T39] #8: ffffffff8dfcacc0 (rcu_read_lock){....}-{1:3}, at: ip_output+0x5b/0x450 [ 575.510110][ T39] #9: ffffffff8dfcacc0 (rcu_read_lock){....}-{1:3}, at: ip_finish_output2+0x3c2/0x10b0 [ 575.510166][ T39] #10: ffffffff8de61640 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420 [ 575.510209][ T39] 1 lock held by rcub/0/19: [ 575.510219][ T39] #0: ffffffff8dfd0888 (rcu_state){+.+.}-{0:0}, at: rcu_boost_kthread+0x2fb/0x4b0 [ 575.510276][ T39] 2 locks held by ktimers/1/30: [ 575.510285][ T39] #0: ffffffff8de61640 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420 [ 575.510329][ T39] #1: ffffffff8dfcacc0 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420 [ 575.510361][ T39] 3 locks held by ksoftirqd/1/31: [ 575.510369][ T39] #0: ffffffff8de61640 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420 [ 575.510399][ T39] #1: ffffffff8dfcacc0 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420 [ 575.510427][ T39] #2: ffffffff8dfcacc0 (rcu_read_lock){....}-{1:3}, at: sched_balance_domains+0xf9/0x900 [ 575.510462][ T39] 1 lock held by khungtaskd/39: [ 575.510469][ T39] #0: ffffffff8dfcacc0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 575.510509][ T39] 3 locks held by kworker/u8:6/85: [ 575.510516][ T39] #0: ffff888032500138 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x897/0x1630 [ 575.510553][ T39] #1: ffffc90002b2fc40 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630 [ 575.510588][ T39] #2: ffffffff8f38d0f8 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30 [ 575.510621][ T39] 3 locks held by kworker/u8:8/164: [ 575.510629][ T39] #0: ffff88813fe8c138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x897/0x1630 [ 575.510665][ T39] #1: ffffc900039d7c40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630 [ 575.510700][ T39] #2: ffffffff8f38d0f8 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 575.510734][ T39] 3 locks held by kworker/1:2/823: [ 575.510742][ T39] #0: ffff88813fe4b938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x897/0x1630 [ 575.510777][ T39] #1: ffffc900051a7c40 ((fqdir_free_work).work){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630 [ 575.510812][ T39] #2: ffffffff8dfd0eb0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 575.510854][ T39] 6 locks held by kworker/u8:9/1027: [ 575.510861][ T39] #0: ffff88801b696138 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x897/0x1630 [ 575.510897][ T39] #1: ffffc90005b3fc40 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630 [ 575.510932][ T39] #2: ffffffff8f37dbe0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf4/0x800 [ 575.510962][ T39] #3: ffff88802892e160 (&dev->mutex){....}-{4:4}, at: devlink_pernet_pre_exit+0x129/0x420 [ 575.510994][ T39] #4: ffff88803e4d2310 (&devlink->lock_key#5){+.+.}-{4:4}, at: devlink_pernet_pre_exit+0x142/0x420 [ 575.511029][ T39] #5: ffffffff8dfd0eb0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 575.511078][ T39] 2 locks held by getty/5362: [ 575.511086][ T39] #0: ffff88803627c0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 575.511123][ T39] #1: ffffc90003cbe2e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x462/0x13a0 [ 575.511161][ T39] 3 locks held by kworker/0:6/5737: [ 575.511168][ T39] #0: ffff88813fe4a538 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_one_work+0x897/0x1630 [ 575.511204][ T39] #1: ffffc900059ffc40 ((work_completion)(&(&gc_work->dwork)->work)){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630 [ 575.511239][ T39] #2: ffffffff8dfcacc0 (rcu_read_lock){....}-{1:3}, at: gc_worker+0x265/0x12e0 [ 575.511271][ T39] 3 locks held by kworker/1:6/5794: [ 575.511278][ T39] #0: ffff88813fe4b938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x897/0x1630 [ 575.511314][ T39] #1: ffffc90005b5fc40 (deferred_process_work){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630 [ 575.511349][ T39] #2: ffffffff8f38d0f8 (rtnl_mutex){+.+.}-{4:4}, at: switchdev_deferred_process_work+0xe/0x20 [ 575.511387][ T39] 1 lock held by syz-executor/7229: [ 575.511394][ T39] #0: ffffffff8dfd0eb0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 575.511425][ T39] 2 locks held by syz-executor/7514: [ 575.511433][ T39] #0: ffffffff8f37dbe0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x4f7/0x730 [ 575.511467][ T39] #1: ffffffff8dfd0eb0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 575.511497][ T39] 2 locks held by syz-executor/7540: [ 575.511505][ T39] #0: ffffffff8f37dbe0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x4f7/0x730 [ 575.511538][ T39] #1: ffffffff8dfd0eb0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 575.511568][ T39] 2 locks held by syz-executor/7607: [ 575.511575][ T39] #0: ffffffff8f37dbe0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x4f7/0x730 [ 575.511609][ T39] #1: ffffffff8dfd0eb0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 575.511639][ T39] 2 locks held by syz-executor/7622: [ 575.511645][ T39] #0: ffffffff8f37dbe0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x4f7/0x730 [ 575.511680][ T39] #1: ffffffff8dfd0eb0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 575.511710][ T39] 2 locks held by syz-executor/7742: [ 575.511718][ T39] #0: ffffffff8f37dbe0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x4f7/0x730 [ 575.511751][ T39] #1: ffffffff8dfd0eb0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 575.511780][ T39] 1 lock held by syz-executor/7767: [ 575.511787][ T39] #0: ffffffff8dfd0eb0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 575.511816][ T39] 1 lock held by syz-executor/7770: [ 575.511847][ T39] #0: ffffffff8dfd0eb0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 575.511877][ T39] 1 lock held by syz-executor/7771: [ 575.511884][ T39] #0: ffffffff8dfd0eb0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 575.511914][ T39] 1 lock held by syz-executor/7811: [ 575.511921][ T39] #0: ffffffff8f38d0f8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x41/0x1c0 [ 575.511953][ T39] 1 lock held by syz-executor/7818: [ 575.511960][ T39] #0: ffffffff8dfd0eb0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 575.511992][ T39] 1 lock held by syz-executor/7865: [ 575.512000][ T39] #0: ffffffff8f38d0f8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x404/0x1ad0 [ 575.512034][ T39] 1 lock held by syz-executor/7874: [ 575.512041][ T39] #0: ffffffff8f38d0f8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x883/0x1bb0 [ 575.512077][ T39] 1 lock held by syz-executor/7880: [ 575.512085][ T39] #0: ffffffff8f38d0f8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x883/0x1bb0 [ 575.512121][ T39] 1 lock held by syz-executor/7887: [ 575.512128][ T39] #0: ffffffff8f38d0f8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x883/0x1bb0 [ 575.512162][ T39] 1 lock held by syz-executor/7893: [ 575.512169][ T39] #0: ffffffff8f38d0f8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x883/0x1bb0 [ 575.512205][ T39] 1 lock held by syz-executor/7919: [ 575.512212][ T39] #0: ffffffff8f38d0f8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x404/0x1ad0 [ 575.512246][ T39] 1 lock held by syz-executor/7926: [ 575.512254][ T39] #0: ffffffff8f38d0f8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x404/0x1ad0 [ 575.512287][ T39] 1 lock held by syz-executor/7931: [ 575.512295][ T39] #0: ffffffff8f38d0f8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x404/0x1ad0 [ 575.512329][ T39] 1 lock held by syz-executor/7941: [ 575.512336][ T39] #0: ffffffff8f38d0f8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x404/0x1ad0 [ 575.512369][ T39] 1 lock held by syz-executor/7947: [ 575.512377][ T39] #0: ffffffff8f38d0f8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x404/0x1ad0 [ 575.512409][ T39] [ 575.512412][ T39] ============================================= [ 575.512412][ T39] [ 575.512433][ T39] NMI backtrace for cpu 1 [ 575.512449][ T39] CPU: 1 UID: 0 PID: 39 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 575.512464][ T39] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 575.512471][ T39] Call Trace: [ 575.512478][ T39] [ 575.512485][ T39] dump_stack_lvl+0xe8/0x150 [ 575.512504][ T39] nmi_cpu_backtrace+0x274/0x2d0 [ 575.512523][ T39] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 575.512542][ T39] nmi_trigger_cpumask_backtrace+0x17a/0x380 [ 575.512562][ T39] sys_info+0x135/0x170 [ 575.512578][ T39] watchdog+0xfd3/0x1030 [ 575.512598][ T39] ? watchdog+0x1c9/0x1030 [ 575.512616][ T39] kthread+0x388/0x470 [ 575.512631][ T39] ? __pfx_watchdog+0x10/0x10 [ 575.512644][ T39] ? __pfx_kthread+0x10/0x10 [ 575.512659][ T39] ret_from_fork+0x514/0xb70 [ 575.512679][ T39] ? __pfx_ret_from_fork+0x10/0x10 [ 575.512694][ T39] ? __switch_to+0xc79/0x1410 [ 575.512711][ T39] ? __pfx_kthread+0x10/0x10 [ 575.512728][ T39] ret_from_fork_asm+0x1a/0x30 [ 575.512756][ T39] [ 575.512762][ T39] Sending NMI from CPU 1 to CPUs 0: [ 575.512793][ C0] NMI backtrace for cpu 0 [ 575.512815][ C0] CPU: 0 UID: 0 PID: 13 Comm: kworker/u8:1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 575.512832][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 575.512842][ C0] Workqueue: events_unbound nsim_dev_trap_report_work [ 575.512866][ C0] RIP: 0010:__lock_acquire+0x1821/0x2d10 [ 575.512887][ C0] Code: 00 0f 83 8a 01 00 00 4e 8b 24 fd a0 d9 7c 95 ff c0 25 ff 0f 00 00 89 05 bd 5b dc 13 4d 85 e4 0f 84 b2 01 00 00 49 8b 44 24 10 <48> 85 c0 0f 84 3c 0d 00 00 8b 0d a8 5b dc 13 39 48 5c 0f 84 67 ff [ 575.512900][ C0] RSP: 0018:ffffc90000126330 EFLAGS: 00000086 [ 575.512913][ C0] RAX: ffffffff93286730 RBX: 00000000000003cd RCX: ffffffff96292a48 [ 575.512924][ C0] RDX: ffffffff93259968 RSI: ffff88801d686ae0 RDI: 00000000000003cd [ 575.512934][ C0] RBP: 443569dc536c3dd5 R08: ffffc900001262f8 R09: 0000000000000020 [ 575.512945][ C0] R10: dffffc0000000000 R11: ffffffff81a15060 R12: ffffffff96292a48 [ 575.512956][ C0] R13: ffff88801d686ae0 R14: ffff88801d685d00 R15: 00000000000002c6 [ 575.512967][ C0] FS: 0000000000000000(0000) GS:ffff888125ed7000(0000) knlGS:0000000000000000 [ 575.512979][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 575.512990][ C0] CR2: 00007f884884fa22 CR3: 000000000ddb8000 CR4: 00000000003526f0 [ 575.513003][ C0] Call Trace: [ 575.513009][ C0] [ 575.513025][ C0] ? ktime_get+0x45/0x220 [ 575.513042][ C0] lock_acquire+0x106/0x350 [ 575.513059][ C0] ? ktime_get+0x45/0x220 [ 575.513075][ C0] ? finish_task_switch+0x15f/0xbe0 [ 575.513102][ C0] ? lock_acquire+0x106/0x350 [ 575.513118][ C0] ? finish_task_switch+0x15f/0xbe0 [ 575.513137][ C0] ? ktime_get+0x45/0x220 [ 575.513152][ C0] seqcount_lockdep_reader_access+0x55/0x100 [ 575.513169][ C0] ? ktime_get+0x45/0x220 [ 575.513185][ C0] ktime_get+0x45/0x220 [ 575.513201][ C0] finish_task_switch+0x312/0xbe0 [ 575.513223][ C0] __schedule+0x1701/0x5500 [ 575.513245][ C0] ? ktime_get+0x45/0x220 [ 575.513262][ C0] ? ktime_get+0x1f5/0x220 [ 575.513278][ C0] ? lapic_next_event+0x11/0x20 [ 575.513297][ C0] ? __hrtimer_rearm_deferred+0x99/0x460 [ 575.513312][ C0] ? stack_trace_save+0xa9/0x100 [ 575.513331][ C0] ? __pfx___schedule+0x10/0x10 [ 575.513351][ C0] ? lockdep_hardirqs_on+0x7a/0x110 [ 575.513366][ C0] ? irqentry_exit+0x218/0x8b0 [ 575.513384][ C0] ? __local_bh_enable_ip+0x8c/0x2b0 [ 575.513398][ C0] preempt_schedule_notrace+0x57/0x90 [ 575.513413][ C0] preempt_schedule_notrace_thunk+0x16/0x30 [ 575.513431][ C0] rcu_is_watching+0x7f/0xb0 [ 575.513452][ C0] lock_release+0x4b/0x3c0 [ 575.513472][ C0] __local_bh_enable_ip+0x98/0x2b0 [ 575.513486][ C0] ? __dev_queue_xmit+0x2b3/0x3900 [ 575.513504][ C0] __dev_queue_xmit+0x1eaf/0x3900 [ 575.513525][ C0] ? __dev_queue_xmit+0x2b3/0x3900 [ 575.513541][ C0] ? __asan_memset+0x22/0x50 [ 575.513561][ C0] ? __pfx___dev_queue_xmit+0x10/0x10 [ 575.513578][ C0] ? __pfx_nf_confirm+0x10/0x10 [ 575.513596][ C0] ? nf_hook+0xa1/0x3a0 [ 575.513619][ C0] ? ip_output+0x29f/0x450 [ 575.513637][ C0] ? ip_output+0x29f/0x450 [ 575.513659][ C0] ? ip_finish_output2+0x3c2/0x10b0 [ 575.513679][ C0] ip_finish_output2+0xcab/0x10b0 [ 575.513700][ C0] ? ip_finish_output2+0x3c2/0x10b0 [ 575.513723][ C0] ip_output+0x29f/0x450 [ 575.513741][ C0] ? ip_output+0x5b/0x450 [ 575.513760][ C0] synproxy_send_client_synack+0x8c1/0xe30 [ 575.513785][ C0] ? __pfx_synproxy_send_client_synack+0x10/0x10 [ 575.513804][ C0] ? nft_jhash_dump+0x3c8/0x440 [ 575.513822][ C0] ? synproxy_pernet+0x45/0x270 [ 575.513843][ C0] nft_synproxy_eval_v4+0x34a/0x4e0 [ 575.513865][ C0] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 575.513885][ C0] ? nf_ip_checksum+0x13c/0x510 [ 575.513908][ C0] nft_synproxy_do_eval+0x305/0x580 [ 575.513927][ C0] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 575.513947][ C0] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 575.513965][ C0] ? lock_acquire+0x106/0x350 [ 575.513988][ C0] nft_do_chain+0x48d/0x1ae0 [ 575.514012][ C0] ? __pfx_nft_do_chain+0x10/0x10 [ 575.514033][ C0] ? __pfx_nft_do_chain+0x10/0x10 [ 575.514060][ C0] ? __lock_acquire+0x6b5/0x2d10 [ 575.514079][ C0] ? __lock_acquire+0x6b5/0x2d10 [ 575.514104][ C0] nft_do_chain_inet+0x360/0x4b0 [ 575.514126][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 575.514149][ C0] ? NF_HOOK+0x9e/0x3c0 [ 575.514165][ C0] ? NF_HOOK+0x9e/0x3c0 [ 575.514179][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 575.514200][ C0] nf_hook_slow+0xc5/0x220 [ 575.514219][ C0] NF_HOOK+0x21f/0x3c0 [ 575.514235][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 575.514252][ C0] ? NF_HOOK+0x9e/0x3c0 [ 575.514266][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 575.514280][ C0] ? ip_rcv_finish_core+0xda3/0x1c00 [ 575.514297][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 575.514316][ C0] ? ip_local_deliver+0x12a/0x1b0 [ 575.514333][ C0] NF_HOOK+0x336/0x3c0 [ 575.514347][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 575.514363][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 575.514378][ C0] ? NF_HOOK+0x9e/0x3c0 [ 575.514393][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 575.514409][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 575.514426][ C0] ? __pfx_ip_rcv+0x10/0x10 [ 575.514441][ C0] ? process_backlog+0x271/0xc60 [ 575.514460][ C0] ? __pfx_ip_rcv+0x10/0x10 [ 575.514476][ C0] process_backlog+0x569/0xc60 [ 575.514502][ C0] __napi_poll+0xab/0x550 [ 575.514522][ C0] net_rx_action+0x696/0xe00 [ 575.514547][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 575.514565][ C0] ? kvm_sched_clock_read+0x11/0x20 [ 575.514582][ C0] ? __pfx_sched_clock_cpu+0x10/0x10 [ 575.514604][ C0] ? lockdep_hardirqs_on+0x7a/0x110 [ 575.514622][ C0] handle_softirqs+0x1de/0x6d0 [ 575.514640][ C0] __local_bh_enable_ip+0x170/0x2b0 [ 575.514654][ C0] ? nsim_dev_trap_report_work+0x73d/0xbd0 [ 575.514674][ C0] nsim_dev_trap_report_work+0x801/0xbd0 [ 575.514701][ C0] ? process_one_work+0x8be/0x1630 [ 575.514721][ C0] process_one_work+0x98b/0x1630 [ 575.514750][ C0] ? __pfx_process_one_work+0x10/0x10 [ 575.514769][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 575.514791][ C0] worker_thread+0xb49/0x1140 [ 575.514815][ C0] kthread+0x388/0x470 [ 575.514831][ C0] ? __pfx_worker_thread+0x10/0x10 [ 575.514844][ C0] ? __pfx_kthread+0x10/0x10 [ 575.514860][ C0] ret_from_fork+0x514/0xb70 [ 575.514879][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 575.514896][ C0] ? __switch_to+0xc79/0x1410 [ 575.514912][ C0] ? __pfx_kthread+0x10/0x10 [ 575.514929][ C0] ret_from_fork_asm+0x1a/0x30 [ 575.514954][ C0] [ 575.515801][ T39] Kernel panic - not syncing: hung_task: blocked tasks [ 575.515817][ T39] CPU: 1 UID: 0 PID: 39 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 575.515843][ T39] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 575.515851][ T39] Call Trace: [ 575.515857][ T39] [ 575.515863][ T39] vpanic+0x56c/0xa60 [ 575.515888][ T39] ? __pfx_vpanic+0x10/0x10 [ 575.515912][ T39] panic+0xc5/0xd0 [ 575.515929][ T39] ? __pfx_panic+0x10/0x10 [ 575.515944][ T39] ? __x2apic_send_IPI_mask+0x158/0x190 [ 575.515962][ T39] ? wq_watchdog_touch+0xf9/0x160 [ 575.515982][ T39] ? nmi_trigger_cpumask_backtrace+0x247/0x380 [ 575.516004][ T39] watchdog+0x102c/0x1030 [ 575.516025][ T39] ? watchdog+0x1c9/0x1030 [ 575.516044][ T39] kthread+0x388/0x470 [ 575.516059][ T39] ? __pfx_watchdog+0x10/0x10 [ 575.516072][ T39] ? __pfx_kthread+0x10/0x10 [ 575.516090][ T39] ret_from_fork+0x514/0xb70 [ 575.516109][ T39] ? __pfx_ret_from_fork+0x10/0x10 [ 575.516125][ T39] ? __switch_to+0xc79/0x1410 [ 575.516141][ T39] ? __pfx_kthread+0x10/0x10 [ 575.516157][ T39] ret_from_fork_asm+0x1a/0x30 [ 575.516187][ T39] [ 575.519427][ T39] Kernel Offset: disabled