last executing test programs: 1m37.730627435s ago: executing program 0 (id=1): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) creat(&(0x7f0000000000)='./file0/file0\x00', 0x20) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x880, 0x1ff, 0x0, 0x0, 0x5}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008280)="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", 0x2000, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x90, 0x0, 0x0, {0x1, 0x1, 0x41a, 0x0, 0x0, 0x0, {0x0, 0x0, 0xfffffffffffffffe, 0x40a004fc, 0x0, 0x3, 0xfffffffc, 0x0, 0x0, 0xc000, 0x6, 0x0, 0xee01}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) 1m37.433864977s ago: executing program 0 (id=8): syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000740)='./file0\x00', 0x10042, &(0x7f0000000ac0)={[{@nouid32}, {@min_batch_time={'min_batch_time', 0x3d, 0x401}}]}, 0xfe, 0x26f, &(0x7f0000001c80)="$eJzs3T9oJFUcB/Df7B/jJotGbQTxD4iIBkLsBJvYKAQkBBFBhYiIlSRCTLDLWtlYaK0SEGyC2BktxSbYKIJV1BS55uAuXHHhirtij9nZDZtkw132b9j5fGDZN3nvzXs7yfdNWJiZAHJrOiLmI6IYETMRUY6IpL3BM9lrurm5VdldjqjX37yRNNpl25lWv6mIqEXEyxGlVt3GzrsHt/Zef/7L9fJzP+y8UxnW52t3eLD/xtF3i1/8vPDSxl//XFtMYj6qzbr2z9FPSYeflZKIRwcx2CWRlEY9A+7H0mc//Zvm/rGIeLaR/3IUmpH9au2B38vx4rfn9f36+t9PDHOuQP/V6+X0HFirA7lTiIhqJIXZiMjKhcLsbPY//H/FycLHq2ufzny0ur7yYaMauKyqF2ma7L/268QvU6fyf7WY5R8YX9WI/beWtv9Py0fFUc8GGJj2b9ufzN7S/M+8v/lCyD/kjvxDfsk/5Jf8wxjoMrvyD/nVS/4fHNCcgOFw/ofx83CrUG4Vah3byT/kl/zDmPq+01WnJ8k/5Fd7/gGAfKlPjPoKZGBURr3+AAAAAAAAAAAAAAAAAAAAZ21Vdpdbr2GN+cc3EYevRkSp0/jF5gPHs7uNT95M0mbHkqxbT957uscd9OjHvl19Xemq10NX+jV+d/58ajD7/fzk5rkHZ3MlopY2niuVzv79JT0/8P6Re9SXP+hxgAs6fVfAV94e7vin3dke7fgLexG/pevPXHP9SQ/Q8e+/EI833juvP9X2Wyx36ZPbPe4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAobkbAAD//2SKbDc=") creat(&(0x7f0000000040)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000180)='./bus\x00', 0x0, 0x63d014, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2, 0x28011, r0, 0x0) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x10c040, &(0x7f0000000380), 0x6, 0x24d, &(0x7f0000000440)="$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") creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) 1m36.591760752s ago: executing program 0 (id=15): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x3004000, &(0x7f00000001c0)={[{@errors_remount}, {@resuid}, {@block_validity}, {@min_batch_time={'min_batch_time', 0x3d, 0x7}}, {@nobarrier}, {@noblock_validity}, {@dioread_nolock}]}, 0x1, 0x790, &(0x7f0000001740)="$eJzs3c9rHFUcAPDvTHaT/k4qClZRAx5aEPPLgj9QaMGjiKCevDQkaSnd/qCJYEOEFrEnjwXBiwiCF2+KF0FKT4p46UX6H0ilSBBaxUNkprPJttlNds1upnU/H5jkvXm7+95k+c6bHy/zAuhbo9mPNOJARFxMIoaL9UlEVPNUJeLI3dfdWV6a+Wt5aSaJlZW3/0jy19xeXpqJhvdkdhdv2xER168l8cjA+nrnLyyemq7V5s4X+fGF0+fG5y8sPn/y9PSJuRNzZ6ampl6eOjz54sRU17b1o6d+/uafy29+/Om+G1d+v/7dviSOxJ6irHE7umU0Rlf/Jo0qEfF6tysryUCxPWnDuqRSYoPoSNrwHT4ewzEQa1/ecFz7ttTGAQA9sZItAECfSfT/ANBn6tcBbi8vzdSXcq9IANvl1tHIb9RncX+nWO6WVOJI/ntHPg5g159JNN7WTepjB7Yo+4yv36t+ni3Ro/vwQHMXL+U3/pv0/0ke/yP5KJ718T8QUewftub+fYj4h+2zlfh/qwv1i38AAAAAAADonqtHI+KlZvf/0tXxP9Hk/t9QREx0of7N7/+lN7tQDdDEraMRrxbP9rl3/N/qE11GBorc3oh4LKrJ8ZO1uSz290XEoagOZfnJ5h+f7zLevTz5Q6v6G8f/ZUtWf30sYNGOm5Whe98zO70wvdXtBiJuXYp4otIs/pPV/j9pMf73WJt1fL/01dOtyjaPf6BXVr6IONi0/197cl2y8fP5xvPjgfH6UcF6i8de+7BV/W3F/9q/KQFdlPX/uzaO/5Gk8Xmd853X8cntic9alf3X4//B5J38qaKDxboPphcWzk9GDCZvrF/fvUeIwkOtHg/1eMni/9Czzc//Nzr+r0bEuTbr/PLH6q+tykbzSHX8D2XI4n+2o/6/88TfvzzZclfRXv9/OO/TDxVrXP+DjbUboGW3EwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuimNiD2RpGOr6TQdG4vYHRGPxq60dnZ+4bnjZ98/M5uVRYxENT1+sjY3ERHDd/NJlp/M02v5qfvyL0TE/oi4MrQzz4/NnK3Nlr3xAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFDY3WL+/8xvQ2W3DgDomR1lNwAA2Hb6fwDoP/p/AOg/Hff/P+3tTUMAgG3j/B8A+o/+HwAAAAAAAAAAAAAAAAAAAAAAAAB6av8zV28kEXHxlZ35khksyqqltgzotbTsBgClGSi7AUBpKu28KElWzwmA/w/n+ECySXnrKUJcQQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoH8cPNDu/P9tzRQKPETM3gf9y/z/0L8c1UP/Mv8/YP5/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADY3PyFxVPTtdrceYluJyoPRjMehMRQRDwAzZDoIFH2ngkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIfBvwEAAP//snoPXw==") mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) mount(0x0, &(0x7f0000000000)='.\x00', 0x0, 0x2236824, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYRESOCT], 0x99) truncate(&(0x7f0000000080)='./file1\x00', 0xf000) r0 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) sendfile(r0, r0, 0x0, 0x800000009) 1m34.46609948s ago: executing program 0 (id=23): sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000080)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x20048810}, 0x8000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_mount_image$udf(&(0x7f0000000040), &(0x7f0000000100)='./file1\x00', 0x100c007, &(0x7f00000019c0)=ANY=[@ANYBLOB="deead657c5d64cc1c7971bcc9c2b3fb6c778036b17b5c68c14f17d4117044af6d643726576d4fe5c4abf557b1f8827aec30920ae9975f534f9f24597c558612d6bc5a610d52b4cde173fd932bdd32834ffe0286a26de0d0465d5bd47140fb3488d58b5e7af3b9843063340628567338d78a40d561824ec988aee89a152f6badf3d94a3dc32a7afd3acdc0438df1d1e35c671e30d03a14dd0d733bc6deee38a1768c6843bac8a1165fec9e0f6fdf434737b2a806c4c1544", @ANYRESDEC=0x0, @ANYBLOB="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"], 0xfd, 0xc2f, &(0x7f00000023c0)="$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") r2 = ioctl$KVM_CREATE_VCPU(r1, 0xaece, 0x0) preadv(r2, &(0x7f0000000540), 0x1000000000000084, 0x8, 0x400000) 1m34.193613471s ago: executing program 32 (id=23): sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000080)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x20048810}, 0x8000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_mount_image$udf(&(0x7f0000000040), &(0x7f0000000100)='./file1\x00', 0x100c007, &(0x7f00000019c0)=ANY=[@ANYBLOB="deead657c5d64cc1c7971bcc9c2b3fb6c778036b17b5c68c14f17d4117044af6d643726576d4fe5c4abf557b1f8827aec30920ae9975f534f9f24597c558612d6bc5a610d52b4cde173fd932bdd32834ffe0286a26de0d0465d5bd47140fb3488d58b5e7af3b9843063340628567338d78a40d561824ec988aee89a152f6badf3d94a3dc32a7afd3acdc0438df1d1e35c671e30d03a14dd0d733bc6deee38a1768c6843bac8a1165fec9e0f6fdf434737b2a806c4c1544", @ANYRESDEC=0x0, @ANYBLOB="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"], 0xfd, 0xc2f, &(0x7f00000023c0)="$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") r2 = ioctl$KVM_CREATE_VCPU(r1, 0xaece, 0x0) preadv(r2, &(0x7f0000000540), 0x1000000000000084, 0x8, 0x400000) 1m27.002198248s ago: executing program 3 (id=56): r0 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r0, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000040)=0x1000, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000180)=0x80000039f8, 0x4) sendto$inet6(r0, &(0x7f0000000000)="8d", 0x1, 0x40, 0x0, 0x0) recvmmsg(r0, &(0x7f000000d980)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=""/141, 0x8d}, 0x9}], 0x1, 0x2031, 0x0) 1m26.442013891s ago: executing program 3 (id=61): syz_mount_image$btrfs(&(0x7f00000051c0), &(0x7f0000005200)='./file0\x00', 0x0, &(0x7f0000005240), 0x1, 0x51aa, &(0x7f0000005280)="$eJzs3U9oVdkdB/DzEqOJFpMWEVs3itCdJbho0C4aKtJW0b4aEBSapFJbbRCCC6G7R/8sSqGNlrbpRiSb6iJtpC1101YXKjjizCAjI7OYcXAWrkacf6sZhrx7z8t753rznhmdOPr5SHLfub97zj3vcRfv+8y5LwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEAI4c7RV6ZrvW+PldV3DI3uu3Bg78mZ2fV3p2+u6wuhUt9fyetj3/ne/p+OjO3tjR3Gf5htBwbKhsy6vpU1VrbsnO/X+vPjEEJPMkB3vr3S3dS3kp4gnCgOuKiZoeM3Np7bderM0dqRwb6Hd4pPnXm9yz2B5ZJfV/cWrqXh+u+u5IhGu+nSq7Rcoln/9IL7XJ4EAPBYBqv1TePtaP4Wt9GupfWkPZy0p5J2fIcw1dxYimzclWXz3JTWl2mew1lUWFU6z6Sev/6NdjXtn7STqPEY82w9NI80vWXznEzqyzVPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgGfJL//1678cPvj7/5XVdwyN7rtwYO/Jmdn1d6dvrusLYaC+v5KVK7/47ug3dh/aOXSq+tHt2e3/3tOd94vbFU0Hh9fjg+39IRxuqtyLw95fG0K1tVBvhr8WC8fqD74fCwAAADxPvlr/3dVoZ3Gwp6VdqafJSv1flIXFmaHjNzae23XqzNHakcG+h3eWPl61ZLzhR47XaA8s/FSagnGMv+l4C/V46InCOItLR0zz/Fe+eXXz2D+2bS3rX8j/A4vn//jKyf8AAAB8FvJ/Os7i2uX/iQ/Xrf/byOkvlfUv5P9NLacs5P8445j/u8LS8j8AAAA8y552/h8ujLO4dvn/ty9N/+S/uw/9s6x/If8Pdpb/VzRPO+68ESc80R/CYLupAwAAACXi/7svfLQQ83r2yUGa1ydHj/1hy5aLM2XjFfL/cGf5v+eJPzMAAABgqb7+o9rHO1+9NltWL+T/amf5f9VTnzkAAADQqftbPxi5+IOvXSirF/L/eGf5f3W+zVc+ZJ2uxr9C+GN/CL3zDyazwrUw9e1GAQAAAHhCYk6/deX8O6dre06UHVfI/5OL3/8/3ukgrv9vuf9fYf1/UyG769+33BgAAACAF1FxPX+8PX72zQVl37/f6fr/jbt+fr17//s/Kzt/If/XOsv/3c3bJ/n9fwAAALAEX7Tv/ztYGGdx7e7/f/vyJ69NTL75p7L+hfw/1Vn+j9s1zU/vUnx9ftUfwob5B/ndBM/H000khbmepkL2wic9RmKPvDC3qqlQN5n02NYfwub5B7Wk8OVYmEoKD9bmhbNJ4eVYyK+HRuHvSeFSvNL+vDafblr4TyzkCyzm4gqKNY0lEUmP98p6zBce2eONxskBAABeKDE851m2p7UZ0ig7V2l3wOp2B3S1O6C73QErkgPSA8v2h/HWQtz/8N3L128d+83/Q4lC/j/bWf6PL8XKbFO2/j/E9f/59xo21v+Px8JAUpiLhWp6x4BqPEcWdn8XzzFQzXs82NAoAAAAwHMtfi7QvczzAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4FP27j+2rqs+APixY/vFjmO7tKOhIDDtaNppdRxHNDSLhEuFiloB7pYxja4laeN2XlwSkhTqirVpi6aNqqJZO4HEUF02RGCUhaKOsrE1YzRoI2KsjIrfIxuIQWFVB2qYqqnT873n+b5zfftefjiNu8/nD7/z3vf8vO+H77n3vvMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD+f3jx2e//40cfvnJPVXzD+qvf9Km3vPGdH37gxYc/8OUzekOYmHu8Iwt3zFx69chlb71k/d6JI48/cNFDl/fk5fJ4WFH/05nfeU+s9fsrQ/hMRwhdaeCC/izQnd/vj/W9rD+E08J8oFFisi8rkTYcHu0NYTbMBxpVfbY3hP5CYNNjn3/krnri3t4QXhVCqKVtfKeWtdGbBs7tyQJ9aWB7VxY48mymEXi4MwvAcYtvhsaLfv9Ec4ahhctVvP66T1jHnl/p8JbFxFB1vp9evMidKuhJH5g4rqetVB2LovT2OODdtgTebaXtfLenrbgjle+hPDsfqoXOrZPXbblxend8pDOMjCyrqmmRnudvPPXua48mvWReh7EDQyfkdbhp44Z7vvaF8UMP7r3vyK3ru2eOt5tfL2zSYnqx1UL+mlsyz2M07vNkCbz9SntJw3a6Qgh/Pn7vXb+4Zc3Gqnhp/j/03PP/+HKOt51NuWOtzwxkc/P4SH9MPDmQzc0BAABgyVgKR01/8vQfnvmhlx7+z6r6SvP/4fbO/8dT/vlkPhvtgRDG5xJ3DIawau7xLPCx2Nw1gyG8ci410Ry4OAkcCOElc4nzG1UlJZbHEsNJ4IcDeWA8CRyMgYkk8JEYuDsJvCcG9ieBa2PgQBJ4XQyEqeZx/MpAPo62A70xsDnbiPvjVQg/G4itJdvqW42qAAAATpB8dtjdfLdwrcPxZojTy/29rTLEK7ArM9SSGtIZbGNaVVlDV6saOlvV0Bj3nucefqnmjlY1ly7D6GjO8BdPfH/f+z5908dDhdL8f/S55/+1BTrSUTr/H8IVc39j7s48Mt2Ib55oygAAAAAchyfe9eh57+05531V8dL8f7y96//jMZFlhczhUDwMsW0whNHmQFbtr5UD2VnvFXkAAAAAloLG+fjGufCp/Da7RDudT5fzTxxl/njif3zB/Bev+O3fuGXoveNV/S3N/yfau/6/r/k268TB2It7BkNYXgh8MfayHpgzHAPfe21zIB//wbgB7oxV5RcmNKq6M5bYHAOjSWC2qsRXGiVWNQfyJ6vR+B2NcUzlJQoBAAAAOOni4YB4Xj5e/z/7V89M/2jVS6erypXm/5uP7vr/uXlw6fL+6RUhrOkKYVn6xYBDfdnCgDHQ35En/rYvq2tZWtVtfSFsrA8srepwvv5/V7rG4GO9WVUxsOrsfU+dW0/8WW8Ia4qBx6+8/9X1xO4k0Gj8N3tDeEV9tGnjDy3PGu9OG3//8hBeXgg0qrpmeQj1xnrSqj5fy3/HIK3qL2shnF4INKq6sBbCca8DC8DzJf4r3Vp8cNfMzdu2TE9P7lzERDyG3xuum5qeHLl2+/TWWkWftiZ9blrG6LbymNr95ZtvxyWKrto32E668T3B0WJb+XH80oWD+f24L9Q9N86x7qa769Ihn3dOuYlQ2JOqGnLnIg+5r1jJ/JNYqj/m7wkrwvIbd03uHLlpy+7dO9dmf9vNPpb9jaeZsm21Nt1WfQv1rY2XR+VqWYlj3Vari5Ws2X3DjjW7Zm6+YOqGLddPXj/59rH168deM3bRunUXrqmPajT722KoqxeqOhnqs/e3Oa4TONSzugqVnIxPDQkJiaWW2PKJ37rm8O2/f33Vx09p/r/juef/8VMnfvLn6zNUnf8fiqf58wsQGqf5N8fAbLvn/4eqzuY3LgwYTgJ7YmCP0/wAAAC8MMTDkfFoZjwqfc41s/99+nWdP64qV5r/72nv+/8naP3/xtL1l1Ut839+LDFatf5/usx/Y/3/PVXr/6fL/DfW/599Htb/v7ERSDbJz6z/DwAAvBCcvPX/Wy7vn/5AQClDy+X90x8IKGVouYx/uz8QcNTr/z924aUPTm498vNQoTT/v7u9+b+F+wEAAODU8cFDXVt/effDd1XFS/P/2fbm/yd//b9Qdf3/cFVgomphQOv/AQAAsERVrf/30Rf1Xj+780P9VeVK8//97c3/42UXnU25Y63PDGRr2oV0TbsnBxpfGQAAAICloTOMjHS3mbdpZdSLj73Nb8SlQJ8jXfS/v/ovq4de8+Obquorzf8PtDf/b/pexqaNG+752hfGDz3z4N77jty6vntm/vw/AAAAsHjaPS4BAAAAAAAAAAAAAAA8/z74pdV/d+P2b15UFS99/z9cMfd41ff/4+/+xe8XnNGUO9baev2//P6myz85M7dk4aGBEM4pBrbdvu20kP82/+pi4JGrzj+znrg9LfG5777uB/XE29LAGy540dP1xMYksDkukviSNBB/VfHplUkgLq/41TQQt8f+NNCTB/5oZTaOjnRb/ag/21Yd6bb6Zn8Ig4VAY1t9pj9royMd4L1JoDHAd6SBOMA35YHOtFefXJH1Kgb6Y9H7VmS9AgDglBX3ArvDdVPTk6NxFz7entXVfBs1LVl2W7najjab/3ZcmuyqfYPtpJel+6LzvzXeHWr1Iawt7a4Ws3TMjfLE1NJi051RMeRWq711VpRLHe2m66keUW82opFrt09v7W458HWts4x1tcyytjTZKWbpnNukbdTSRl/aGFGb26aNLsf7nWFkZFmSa0MMDoUmrV4R7X5fv7jOX9WroJjn3bt7n5g64/APq+orzf+H2pv/14rjejr/MYA98Zf17hgMYVWbIwIAAADa9a2/+frY9g/+wSfS24+ffdbEn7zrX/+hqlxp/j/c3vw/HsHKTwVnRzsOxN//b8z/h7LAx2Jz1wyG8Mq51EQskf2g/mWxxGgW+Fg8YHJ+LLF5ormq5TGwPwn8cCAPHEgCB2MgP0qxL+SHcvYOhPDqudQVzSV2xBJDSeDNMTCcBEZiYDQJrIyB8STwk5V5YCIJfCkGwlTztvr0SkdXAACAY5DPs7qb74Z0nre/q1WGjlYZ+lpl6GyVodYqQ9Uo4v0HY4bu5OKVjkKm7rTW3qSWUob4Y/hH3a9ShvCV5pxpwVLT8fqDxvUGHc0Z/mnXhx6+r3/1aKhQmv+Ptjf/72u+zVo/GOf/87//lwW+GLt3T7x0fDgGvvfa5kB+YOBgnOze2ahqIi+Rj+XOWGI8BoaTwI4YGE8Cm6/IA7NnNgfymXaj8TsajU/lJQoBAAAAOOniAYJ4mCbO/3tff94tv/SKvc9WlSvN/8fbm//H9lYUG3tPrPX7K0P4TMd8bxqBC/qzQDyO0R+/Hv+y/hBOKxzgaJSY7MtK9CQNh0d7s2+o96RVfbY3W2Mg3t/02OcfuaueuLc3hFcVjr402vhOLWujNw2c25MF+tLA9q4sEI/8NAIPd2YBOG6No4LxBZVf6tIwtHC5itffC+U3QdPhlY6BLpBvoe9cLZZa+kB+TLXh6J62UnUsitLb44B321J8tw15txV3pPI9lMIeYC10bp28bsuN07vjI8VvspYs0vNc/JZqO+kT8Drcc+y9ba2WdmA0+fioOAe38OuwI1a3aeOGe772hfFDD+6978it67tn2u5GhfhF4S8+9P6hrxc272Krhfw1t+Q+TyZ8nizFfwPDnrYQwsX3f+nKH7zkifav/59ob/7fldzO+Z+4MXcNhnBeYeMeipv/ksHsc7AQyD4lTy8HslPu/zFQ+ckJAAAAJ1rjcEfjeMFUfptdEJ7Ok8v5J44yfzxeMb5g/nb7/Tv//vc//epb+qer4qX5/+bnnv8vT7rp/L/z/ywS5/8XdKofil6ePrDnuA5Fl6pjUTj/v6BT/d3m/P+CnP93/n8hzv+34Pz/gk71p620l7TDTlcI4YGP33Drf/3isg1V8dL8f0d783/r/y28aF9j/b/NVev/7aha/2+P9f8AAIBFVbHQXDrPK63eV8qQrt5XytBygcCWSwxa/++o1//beOfB1feuev27QoXS/H9Pe/P/+HJYUWx9qaz/N3xFRVV3x8AOCwMCAABwKqo6QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDza/aS0w+8+dl/+15VfMP6q9/0qbe88Z0ffuDFhz/w5TN6Q5iae7wjC3fMXHr1yGVvvWT93okjjz9w0UOX1/Jy3fntS5tyx1qfGQhhtvBIf0w8OVC/Mx/YdPknZ7rqiUMDIZxTDGy7fdtp9cRHBkJYXQw8ctX5Z9YTt6clPvfd1/2gnnhbGnjDBS96up7YmAc60u7+6cqsux1pd+9aGcJgIdDo7u+tbK6q0caleaAzbeOj/VkbMdAfi36gP2sjBqZjianlIazpCmFZWtU/1rKqlqVV/XUtq2pZWtUttRA2hhC60qq+25NV1ZWO/J97sqpiYNXZ+546t56Y7QlhTTHw+JX3v7qeeEcSaDT+6z0hvKL+kkkbf7A7a7w7bfze7hBeHkLoSUv8vCsr0ZOWONwVwumFQKPx3+0KYSbwghA/fLYWH9w1c/O2LdPTkzsXMdGTt9Ubrpuanhy5dvv01lrSpyodhfSztx372L/91LuvnUtctW+wnXRXXq57rstj3U13153qvY/96itWMv98lOqP+XvCirD8xl2TO0du2rJ798612d92s49lf5fl0WxbrV0q22p1sZI1u2/YsWbXzM0XTN2w5frJ6yffPrZ+/dhrxi5at+7CNfVRjWZ/T8RQ7z/5Qz2rq1DJyfgAkJCQWGqJzqZPt9FT/YO8tKM/39HuUJv7gC5NK4pZOuZGeSIGffExjDZ31PspLUe0tjRxKGUZa51lXWkyMZ+lN8syt19XmhwWa+qc26TxfmcYGVlWtR2Gmu8WN+9Pj2PzfiNuujbTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD/xw4cCAAAAAAA+b82QlVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVRV24EAAAAAAAMj/tRGqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqsAPHAgAAAADC/K3D6NkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4FAAD//9yY1uM=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x143442, 0x0) write$binfmt_format(r0, &(0x7f0000000040)='-1\x00', 0x3) r1 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc4042, 0x1ff) sendfile(r2, r1, 0x0, 0xfffa83) ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x40309410, 0x0) 1m24.352665347s ago: executing program 3 (id=69): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) shutdown(r0, 0x1) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000004c0)=0x27) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000100)={r2}, 0x8) 1m23.725078893s ago: executing program 3 (id=72): syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./file0\x00', 0x2000414, &(0x7f0000000340)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000"], 0x1, 0x2a1, &(0x7f0000000540)="$eJzs3MFqE18Ux/Hzb/pv0pQ2EURQUA+60c3QxgfQIC2IAaU2RV0IUzvRkDEpM0MlIjYbcetzFJfuBPUFuhE37t0VQXDThTjiTKZN2rSmbdLE9PuBck9y7o+5bdNyUuis3339pFRwjYLpyVBCZUikJhsi6T9V3X/1dSioR6RRTS6P/fhy9s69+zezudz0rOpMdu5KRlUnzr9/+vzNhY/e2PzbiXdxWUs/WP+e+bp2au30+q+5x0VXi66WK56aulCpeOaCbeli0S0Zqrdty3QtLZZdy2nqF+zK0lJVzfLieHLJsVxXzXJVS1ZVvYp6TlXNR2axrIZh6HhSjrfhNvbkV2dnzeyubT/W0ROh60ZbPek42VrrZn71CM4EAAD6zN7zfzjr7z7/5+bDtcPzvwjzf5fUmh79Zf7HQHCcrJms//w2Y/4HAAAAAAAAAAAAAAAAAAAAAOBfsOH7Kd/3U9EafcRFJCEi0eNenxPdccDv/9UeHRcd1vCPewkR+9VyfjkfrmE/W5Ci2GLJpKTkZ/B6qAvrmRu56UkNpOWDvVLPryznYxKP8pF0q/y5E1NhXpvz/0uy8foZScnJ1tfPtMyPyKWLDXlDUvLpoVTElsXgdb2VfzGlev1Wblt+NNgHAAAAAMAgMHTTjvfvQT/YkJCd/TC/j78PbHt/PSxn2rlFJQAAAAAAODS3+qxk2rblHKCIi8gh4oNaxKQvjrGtuCYifXCMoyoSIhI+oweJf9uMt5Xy29gzLCI9/7Lso+j1byYAAAAAnbY19O8j9PllF08EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDx0+79wKL9O1pRY494w+ViR/4JAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAH3kdwAAAP//R8IgDA==") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc11, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x887008, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r0, &(0x7f0000006b40)={0x2020}, 0x206e) 1m23.198111605s ago: executing program 3 (id=73): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000380)={0xa, 0x14e24}, 0x1c) connect$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000005540)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000400)='\f', 0x1}], 0x1}}], 0x1, 0xc8040) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) splice(r1, 0x0, r0, 0x0, 0x7ffff000, 0x6) 1m22.044099422s ago: executing program 3 (id=76): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd2b, 0x4, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0x0, 0xfff1}, {0x7}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x10, 0x1, 0x0, 0x0, {{0x44c, 0x0, 0x4}, "fe"}}]}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) 1m21.760868434s ago: executing program 33 (id=76): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd2b, 0x4, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0x0, 0xfff1}, {0x7}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x10, 0x1, 0x0, 0x0, {{0x44c, 0x0, 0x4}, "fe"}}]}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) 1m18.011061749s ago: executing program 1 (id=92): r0 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x7, 0x587, 0x2, 0x40000, 0xffffffffffffffff, 0x9, '\x00', 0x0, r3, 0x4, 0x5, 0x0, 0x6}, 0x50) sendmsg$kcm(r0, &(0x7f00000001c0)={&(0x7f0000000100)=@l2tp={0x2, 0x0, @private=0xa010101, 0x3}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000080)="c1", 0x1}], 0x1}, 0x5) setsockopt$sock_attach_bpf(r0, 0x84, 0x22, &(0x7f0000000000)=r3, 0x10) 1m16.450011243s ago: executing program 1 (id=97): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000001c0)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000080)={0x0, 0x1, 0x0, &(0x7f00000009c0)=""/251, 0x0, 0x100000}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) ioctl$VHOST_SET_VRING_ENDIAN(r0, 0x4008af13, &(0x7f0000000340)={0x1, 0x3}) 1m16.30673144s ago: executing program 1 (id=99): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc0ed000e, &(0x7f0000000540)={[{@data_err_abort}, {@data_err_abort}, {@dax}, {@noload}, {@mblk_io_submit}, {@commit={'commit', 0x3d, 0x5}}, {@init_itable_val={'init_itable', 0x3d, 0x601}}, {@debug}]}, 0xf6, 0x47a, &(0x7f0000000680)="$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") sched_setscheduler(0x0, 0x1, 0x0) getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x8882, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x7040, 0x0) write$RDMA_USER_CM_CMD_BIND(r0, 0x0, 0x0) 1m15.852551268s ago: executing program 1 (id=101): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x404, &(0x7f0000000340)={[{@nogrpid}, {@resuid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@errors_continue}, {@nombcache}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") rename(&(0x7f0000000000)='./file2\x00', &(0x7f0000000040)='./file1\x00') syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) syz_mount_image$fuse(&(0x7f0000000140), &(0x7f00000001c0)='./file0\x00', 0x40000, &(0x7f0000000380)=ANY=[], 0x1, 0x0, 0x0) setrlimit(0x1, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) truncate(&(0x7f0000000080)='./file1\x00', 0x400000f000) 1m14.926061557s ago: executing program 1 (id=104): socket$inet_udplite(0x2, 0x2, 0x88) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000080)=0x200000000) readv(r1, &(0x7f00000002c0)=[{&(0x7f0000000400)=""/89, 0x59}, {0x0}], 0x2) 1m13.272531164s ago: executing program 1 (id=106): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000080)) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000040)=0xdfe5) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0xa00, 0x18, 0xfa00, {0x100000000000000, 0x0}}, 0xfc36) syz_usb_connect(0x0, 0x0, 0x0, 0x0) 1m13.045163824s ago: executing program 34 (id=106): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000080)) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000040)=0xdfe5) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0xa00, 0x18, 0xfa00, {0x100000000000000, 0x0}}, 0xfc36) syz_usb_connect(0x0, 0x0, 0x0, 0x0) 49.154285331s ago: executing program 6 (id=214): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@newtfilter={0x64, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r3, {0x0, 0xffe0}, {}, {0xfff3, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x34, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x18, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_HWID={0x5, 0x4, 0x2}]}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x100c}]}]}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) 48.648172621s ago: executing program 6 (id=215): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002a00)=@delchain={0x24, 0x66, 0xf31, 0x3, 0x0, {0x0, 0x0, 0x0, r3, {0x9}, {0x0, 0xffe0}, {0x0, 0xfff2}}}, 0x24}}, 0x0) 48.640664092s ago: executing program 6 (id=216): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000440), 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x20, 0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f00000000c0)={0x9, 0xd32f, 0xe, 0x1000, 0x3, 0xe62, 0x5, 0x4}, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1}}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f00000000c0)={0x1, 0xd853, 0x400, 0x0, 0xf}) 48.197715611s ago: executing program 6 (id=220): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000380), 0xfe, 0x571, &(0x7f0000001180)="$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") unlinkat(0xffffffffffffff9c, 0x0, 0x200) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000000c0)='./bus\x00') link(&(0x7f0000000940)='./file1\x00', &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') mknod(&(0x7f0000000400)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1000, 0x4) 47.640937293s ago: executing program 6 (id=224): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x4000, &(0x7f0000000380)={[{@coherency_buffered}, {@heartbeat_none}, {@coherency_full}, {@err_cont}, {@data_writeback}, {@localflocks}, {@localflocks}, {@dir_resv_level}]}, 0x9, 0x4430, &(0x7f00000088c0)="$eJzs3c9PXNUeAPBzL/QV+to+6OuiL3nJm+Q1MVFDoCuVJlJKS6HFmmob42Y6wLRFB6aBwbjoAndNXJm4MC4aTdyxali4rX+CG5d13agLNyYmjZiZuQNzL4yMhAFbP58Fl3t+D997z5y7uJw4Ubkzt5SbW8oVFnLlmVtLZ3IflEvL88UQ75Nt+z+0f/3Tnk5cJwd97f2dXT1/8a0bZ0L4Zva7J+vr6+uhqjskotBsqOn3X36+N9N8bIhDWrXd0FHvhhBObhlXVVcI4Z2v65/iXJI2mhx7QwjHkk94497HN3N7NJqHj4tn80+n7q8Nn55cfbDW+rNHIXxe+s/Lt+d//H/X8Pcv7lH3AAAAAAAAAAAAAAAAAAA848avXb3+5uBQeBSF7tVo6/u648mx1fux63vmf53/sAAAAAAAAAAAAAAAAAAAAPAXtfn+fy46sc37/2PJcaRF/fXXOz9GOmfijatjFwaHkv3foy35ryRJP53rCv3b7Pue3f/9XKb+9vu/b+1ntxrja/TbF6J4IHUexwMDIXyZbPx+KjoSl8pLlZdulZcXZvdsGM+sdPzru/enopNs6N9u/Ecz7Xd+//9/b7maquc39+4Se66l49/VstxXH0Vtxf98pt5+xJ/dS8e/u5bW21xgpD4BVOP/SffO8R/LtN+p+B8PIeSi6lhzqRmguoapprdar5CWjv+hWlpq6kz+kK3u/18z8b+Qaf+g5v+V7BcR20rH/x+1tJ5Uic37vz/e+f6/mGn/IOJfHf+K7/+2pON/uJ7YnSpS+0u2O/+PZ9pvHf8/WGy04XqcjPN4lLoCVqN6eqv/V0daOv49W/I3n//ittZ/lzL19+v5r9Fv4/mvMf3/ENWf/9heOv69Lcu1e/9PZOp1ev4fqa3/2K10/I/U0tJr577az3bjP5lpv1Pxr61Kehrx35xPfjtcT//C+q8t6fj/s54YN5dYqf2srf+indf/lzPtH8T6rzr+lbizvT4vmuPfFY62LFeN/7dtfP9fydTrfPxDGLTW37X0/X+sZbna/d+zc/ynMvU6Hf8XOtk4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwDNgNDn2hSgeSJ3H8cBACOeT81PhSDRdmM1Pl8oz7y+FMJak58KJ6HapPF0o5ecWyrPFfKFUKs+EcCHJPxl6oqVSuZKfL9y9uNFWb3SnWFisTBcLlRDCeJL+33Cs0db0XGW+cDeEcGkj719xefHuncJCfnZu8bXBwcHBMLExhv6o+GGluFCp917PDWFyo25f1DS4WvbljbEcjd4rLy8uFEq19CtNdUrlmUKpqc5Ukvdp6I8qi8sLM4VKMV8q3270d5BGkuPYxLW3r10Z2pJ/M6ofR/d3WAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD8SY+GX/0shNBdP4tDCCONX6Ltyj98XDybfzp1f2349OTqg7UnrcoBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA7+zAgQAAAAAAkP9rI1RVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVhl45RGgiiMAC/GQu18xhWy25nu6KIFq4InkCP4WH0KF7CO6RIkTZFCCSzEDa7sE1SfV/zYH5m3oN5AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwDxP793HW91EpLjaXEb8ff0vDvOXUn/ux+9fnGFGTuf5tXt4rJvy7+kovytHyzbv0vXq+zNGau93sCfDfdrr+1xPzjW1b1Pz9X1vIuUqItqS36acq2reWwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABbduBAAAAAAADI/7URqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqrADxwIAAAAAwvyto+jbAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPgVAAD//xCzHts=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) fallocate(r0, 0x0, 0x0, 0xffff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101142, 0x0) ioctl$FICLONERANGE(r1, 0x4020940d, &(0x7f00000000c0)={{r1}, 0x0, 0x0, 0x100000}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141142, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r2, 0x40305829, &(0x7f00000000c0)={0x17c04, 0xffffffffffffffff, 0x1, 0x10001, 0x81}) 46.389939524s ago: executing program 6 (id=236): r0 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r0, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000040)=0x1000, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000180)=0x80000039f8, 0x4) sendto$inet6(r0, &(0x7f0000000000)="8d", 0x1, 0x40, 0x0, 0x0) recvmmsg(r0, &(0x7f000000d980)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=""/141, 0x8d}, 0x9}], 0x1, 0x2031, 0x0) 46.153511464s ago: executing program 35 (id=236): r0 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r0, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000040)=0x1000, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000180)=0x80000039f8, 0x4) sendto$inet6(r0, &(0x7f0000000000)="8d", 0x1, 0x40, 0x0, 0x0) recvmmsg(r0, &(0x7f000000d980)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=""/141, 0x8d}, 0x9}], 0x1, 0x2031, 0x0) 43.612220509s ago: executing program 5 (id=256): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000180), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1}}) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f00000083c0)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x5423, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, 0x0) 43.59919696s ago: executing program 5 (id=257): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000051fa7824c74186dc02ec0696c37b64e3b24da3180100000005165c0f63cdc2e82818254950ee03568b8809a1ff4c7c4750eabfafcb9531b31e6a86827d1010c5a909ab98e00e19644a88e95ba26d1c9eecddb2d11c541418ceeb29b9b6829c6e433822bdb3cc85244aab60c1aae1314d7381fcfeb970bea672cf1e926f6a51479343144648a07a975bd89dc398712376610f6254f12495b4658319684387f6f3543205d4bc4ce05b8b961103673dff7f158052e62b20f05fd24108d8363d44fcd0f8f3647899762a17282a1914452d11f557c28f396eebdc858558db0276d14f9035f2b5f703e5be7e4acf8b78c2834ae5805fffee38a9a0033d520bcf6b08ede50899d4b9bdf85c71c5de2503dab358f42a2624c7daa9ed44039aab46419496362e54cfad05a0004ac71a003d7b85d07191bed4e5a890826300214146f7ed569985439baa355c2766dd056f5d79e454f3d873095e7a237bc06d035a8d601f21746d886419f38b34a495040000000071c2f0cce8c93cc17e9afa314fcb2ba15d646c66b0f65021829f87d988b4e2d71753b1549fa734f0b2e56dbd21ed2e09d0cddad721971637f384eed3034597c93e1c52f42cad0ed09c395dc6e9703660fefa1c80f467367c006f25caf0cbcefd13d68839893e39c588eb032905f91cafa4996dbf0c9be9654db05fb918086cc8228d02a3092c0830b8f587a5624515298b2d4eb2bde6f9a2eb83d53f717f13fa7552d92c51dbd32ea50c490ecd085d2811a7555c538cffffff7f00000000dd872244bfa64779e0f43a9c277e2910b7ccdc3d6726d34ad2101033a623ca2a49ad344884289130bc71cee2b7de62bf48129ae1af052a2d46a61625735a9eea7f793946b3229e861d8ea49806b3f7d4295f6b000000000000f337b1ceb2d8a65dcdcd895d7ba37098d2593fdaaef445af5bee02019c00000099b13ecda2a5b37de0519e974cba92ebaf0f701611a9b027ce04340bda4594cc9049c3f101629ab028145e004209ebe71a6fe84af50804000000000000004a27213354964e250a98fe357676f94b6947383e320fbb1118f586d5b9b1b977e1e1a4490ff67703a9b5900f8a6f8a805879dd91ec5ff435b219c53680c0ae04dcc4ef69b98fcb0d6b6a03a8b71a66b4e2876dc4b610444bf10000000000b046b6ae5d68156bcbd6d8793ade9a22ac8fc7857e5bbc14adc4e12b08f350c6789283b9990c72e64372a1f79769a8bdc632fc1a0b3417855d8b7d25ca4d404c23631ad3d2f55dcd385371c86170a4bca58c2b2b4eabc365f45bd10bb45b0c5bc354456a52be18d9b44014d20a3c51c8f013dade83562e73278662829e4f5a9ac00fd91178468c737f0872d97d38d11a176be5a0d7294c51eb161eddcfefa8837c7430721851ec2a107af0df6d43e732bbc01e76c66895eb85d36798d61622773591ee21ad9f6a1b73fa9cf3ffeb8a00b63af800a81d0fb8aa29df8b8ad6fbafefb5802a23cbdeeabceda5bfc5ff2fa5c1d61d04a1324794c6ed000696d9f04010c35474e690545c3d9bd836d4cef2585ba616e01c3d000000000000000000470ebc6f3453ecbf3047e4547d7632d3ad21798e730cb5d1da059b5bdb8107815dff995c0788906790406dfb4f8ee9f24ff94233e2e6e581e6e5de33a5f254c9a8b612547473c3001df3928dac9203b744619082421a8da7c00000000000000000000000000000018a73ef40cca690fb7595c6962984f8276677be6f66cbdbccf1896433808c9c84d74ac4a7c186a04a2250972f7acb156b21f9826b6acb7db32c4e3b3ec8b59fd972975edb1da872d81a35e4fda2f5cbde6b40bea20418c6e9dad30b791eea58f53e80fee4dd7fe08373ea2784fcd3a65261de71eb866458d2c22a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000340)=ANY=[@ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="0200000002"], 0x10) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="0200000002"], 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@cgroup=r0, 0x2, 0x0, 0x7, &(0x7f0000002b00)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) 43.420136357s ago: executing program 5 (id=259): r0 = memfd_create(&(0x7f00000009c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9b5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\\\xb0:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85l\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~7\x16\x02\x00(v\xe6`\"6\xfcgC\xb5\xf0\x13.zj\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1exQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1.E\b1\xcb\xa2\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x82\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x75fa, 0xe475, 0x0, 0x0, 0x0) r4 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r4, 0x75fa, 0xe475, 0x0, 0x0, 0x0) ioctl$TIOCGPGRP(r0, 0x5437, 0x0) 6.896170806s ago: executing program 8 (id=452): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x4800, 0x0, 0x3, 0x0, &(0x7f0000000080)) syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x3c, &(0x7f0000000380)=ANY=[@ANYBLOB="120101000814c910be0632a2f333010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r1, 0x707, &(0x7f00000001c0)={&(0x7f0000000180)=[{0xb4b1, 0x4200, 0x0, 0x0}, {0x9, 0x2f5, 0x0, 0x0}], 0x2}) 4.638939689s ago: executing program 8 (id=458): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000200)=@bpf_ext={0x1c, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x5}}, 0x0, 0x9, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2924d}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x2}, 0x50) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) sendmsg$sock(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@timestamping={{0x14, 0x1, 0x25, 0x2}}], 0x18}, 0x0) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000300)={r0}, 0x3b) close(r1) r2 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x890b, &(0x7f0000000000)={r2}) 4.277089574s ago: executing program 8 (id=461): syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x88, &(0x7f0000000f00), 0x3, 0x441, &(0x7f0000001800)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) creat(&(0x7f0000000340)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f00000003c0)='./bus\x00', 0x84902, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x11, r0, 0x0) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0xa08008, &(0x7f0000000400)={[{@min_batch_time={'min_batch_time', 0x3d, 0x2}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@noblock_validity}, {@grpid}, {@resuid}, {@grpjquota_path={'grpjquota', 0x3d, './file1'}}]}, 0x1, 0x7ad, &(0x7f00000007c0)="$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") unlinkat(0xffffffffffffff9c, &(0x7f0000000c40)='./file1\x00', 0x0) 3.480107856s ago: executing program 8 (id=466): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8c02, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000080)="2e0f01bb00900000a4e80f01c2c2442400b8270000c744240202100000c7442406000000000f011424eac3fbd7e410010f20d835200000000f22d8d8345c66ba4200b879350000ef6665f30fbccfb8010000000f01d9", 0x56}], 0x1, 0x2f, 0x0, 0x0) 3.479452936s ago: executing program 7 (id=467): bpf$MAP_CREATE(0x0, &(0x7f0000001380)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000280)='kfree\x00', r0}, 0x10) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) sendmsg$rds(r1, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x4, @local}, 0x10, 0x0, 0x0, &(0x7f0000000240)=[@rdma_args={0x48, 0x114, 0x1, {{0x5}, {0x0}, &(0x7f0000000300)=[{&(0x7f0000000880)=""/4096, 0x1000}, {&(0x7f0000000500)=""/247, 0xf7}], 0x2}}], 0x48}, 0x0) 3.226817757s ago: executing program 7 (id=469): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x22, 0xf, {[@global=@item_012={0x0, 0x1, 0x5}, @local=@item_4={0x3, 0x2, 0x0, "45501821"}, @global=@item_012={0x1, 0x1, 0x9, "f5"}, @global=@item_012={0x1, 0x1, 0x7, "84"}, @main=@item_4={0x3, 0x0, 0xb, "9e3ce079"}]}}, 0x0}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGREPORT(r1, 0x400c4807, &(0x7f0000000040)={0x3, 0x100, 0x7}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x1, 0x9c, "3c76b5497948c938ecd204efca66fb2fd634138804f387878316f312273322ce3a575d205d397ff312fd3a4b4d6f49f859f1ba8c31dd83f119edeb39fdede39289d464dfa46b7850d3503e57285c585812feb427e9b33a6f1df66d7c15aac1ecde1a461433edb549b876b420d33ed13f3fc04056872d12605cff7fca497c695ff29842e60531dfd6f041258d5b02f55be08261acfbe3eb2d11489776"}, 0x0}) 2.808193394s ago: executing program 2 (id=472): r0 = io_uring_setup(0x18b4, &(0x7f0000000000)={0x0, 0x603b, 0x10, 0x1, 0x2ac}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr, 0xffffffff}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000b80)=@gcm_128={{0x303}, '\x00', "4617a9f6040839230fb7fead776dd8dc", "3f4051c4", "e900"}, 0x28) recvfrom$inet6(r1, &(0x7f00000000c0)=""/104, 0x68, 0x10002, 0x0, 0x0) close(r0) 2.67811447s ago: executing program 8 (id=473): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000200)="67d8902400aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c14498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26d", 0x5a}, {&(0x7f0000000900)="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", 0x3f7}], 0x2}, 0x0) setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, &(0x7f0000000680)=0x1, 0x4) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x40) 2.486380248s ago: executing program 36 (id=473): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000200)="67d8902400aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c14498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26d", 0x5a}, {&(0x7f0000000900)="0f198d5aa5caa1c55b84b414797cbdd4e8c576a921a070fc828060506683fd1106a961ac55b5b8ea3342ca7de5559ca2c14e05e42aed8ba14b2c78cb540f71a817d80fbf1945a046ebda494a8048a106a4d49d7f214735ada53397db3b203885ce39ee48d69465935eade21ce36e61826c52c82f038341d9bab5687c740ed3c18897094e7e1391eb84a4052e03c0c7c39ae86d454938f65e284620b99481c33d9f5e5b7a6c0d7548723f55b213c76be37f40c850c38e265758ebd8238257a146d6eced16fd658a784c928fea7a841db1a7fd6520442dae5fc0d3a3d3a5f16fcf6fe4f062ecdad7d0f3c6cd339339533c0ef28ad1e2729907094c3de93c1b1b00ad6df895d9907e4afb7565d3a8e9eaea020ed173c2179fb03e0944460989240a689c7fe795d310be4e7a6b778a903280dbf426b39c3603c49049980767e31edb997f59785184cbd7b907e0974f1073c745f71db0906cb51780f908fa61634af8ac85d9f04f3dff0a948e81cd3229a59aaeb00995358155343e3239588a0383e4df109d5ca24276d0d83a27d0e9bf681c1bbea12a6f3c20ad50f63430333bb327eb6ae32fe8809065bce26d2dc2fbb2b48d404637d61fd86852e0e1b6ccc6f75b1107aaa5f60ef45f94e953b3f213c3cb4ca4c716565078c666f84e1a99bb4cb5c7190648132f752753c938da6241607a742361d995188b23cb4b8269e98e822585695962620673433748e476f7cc3e37db88639c525ff3a502c82c283b00aecfe7734ab369e1ed7c75e27a5a333641817baa3ea37844e20e6266c5095abf9d47ca5f8ad93f1a4d8795daec222ada00d65cf91425fae7939ceaa8d94ec1ab5082e1d251c27b3132119b350e81771f3733be232ffb90c03a818bf4dee8512f3bac440f5d5e4bed6b897608b01eae26a54433e5f5c74a2ee3c2fc50067be05a677ff52a7dba7010830b879a41b579d44158fb89ea05761d2d369853bea84dfb8081ed7b891dcb3bb3361534fdc5252e4964aed936ad2838e7af14fc65c7c1c6d44c6256f2462ae83cfd6a6b2651da607fe79d345e5080098e9e6e7482cc5c267e00d8d09dcde70b60fe6220fe9530547201664db91cf1885ecc2f106b66cd99131523c99f6102ddd7403791b3a7ac59b256cc4c938fe01740ae4f19b5204ca305b1666b0c2a7e5015d6d530995843adfbac3954306d4cd82257d4d2c3283d45dbae43548fedb679328f114f7c8238ac955391b24614d91be1701ae07c170a9c299fcf3d0ac4cea07e88fbf66b697883af17a06ac3f9954eb2fbd20f101802cd023fc48c5d464c16059cc9dce8558c5322ac7612db0e27252804059094a318c4cdeeddd5793a427628c2c41a21f0d2f3962e32f710bf9e216ff1694e8d88c8a81328744b36d9ef9f08c0ea3ccd4f8729e2f00a048162834a95", 0x3f7}], 0x2}, 0x0) setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, &(0x7f0000000680)=0x1, 0x4) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x40) 1.901820642s ago: executing program 2 (id=476): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000180)=0x1, 0x4) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) connect$can_j1939(r1, &(0x7f00000010c0)={0x1d, r2, 0x0, {0x0, 0x0, 0x4}, 0xff}, 0x18) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r2, {0x2, 0xffeb}, {0xe, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850) 1.272195988s ago: executing program 4 (id=478): ioperm(0x0, 0x2, 0x7e) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 963.062481ms ago: executing program 4 (id=479): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000900)={0x1, &(0x7f00000008c0)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) pipe2(0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r1, &(0x7f0000000340)={0x2, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000000)=[{&(0x7f00000001c0)="580000001500add427323b472545b45602117fffffff81000e224e217f000001925aa80020007b00090080007f000001e809000000ff0000f03ac71033000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) close_range(r0, 0xffffffffffffffff, 0x0) 866.572865ms ago: executing program 2 (id=480): syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x54, r3, 0x1, 0x70bd29, 0x25dfdbfc, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x25}}}, {0x14, 0x2, @in={0x2, 0xfffc, @empty}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x54, r3, 0x4c1dad3e3d6a7499, 0x70bd2b, 0x25dfdbf7, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @broadcast}}, {0x14, 0x2, @in={0x2, 0x4e20, @private=0xa010100}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x40005}, 0x20000000) 800.128288ms ago: executing program 4 (id=481): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000002f40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002080)={0x2c, 0x0, 0x2, 0x70bd2b, 0x25dfdbfc, {}, [@WGDEVICE_A_LISTEN_PORT={0x0, 0x6, 0x4e24}, @WGDEVICE_A_PEERS={0x8, 0x8, 0x0, 0x1, [{0x4}]}, @WGDEVICE_A_LISTEN_PORT={0xfffffffffffffe45, 0x6, 0x4e22}]}, 0xfffffc99}, 0x1, 0x0, 0x0, 0x40001}, 0x4000000) listen(r0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x43) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r2, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r0}, 0x20) sendmmsg$inet6(r0, &(0x7f0000002440)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000600)="e2", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)}}], 0x56, 0x10) 692.119252ms ago: executing program 7 (id=482): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001500)=@newqdisc={0x54, 0x24, 0xe0b, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x24, 0x2, {{0x1ff, 0x6, 0xfffffffd, 0x0, 0xfffffffd, 0x32d}, [@TCA_NETEM_ECN={0x8, 0x7, 0x1}]}}}]}, 0x54}}, 0x0) sendto$packet(r0, &(0x7f0000000580)="44c394f305916c4516999da20800", 0x36, 0x0, &(0x7f0000000440)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}, 0x14) 618.169525ms ago: executing program 4 (id=483): socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x11000) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ptrace(0x10, 0x0) getsockopt(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) 460.201142ms ago: executing program 7 (id=484): openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x40, 0x23) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000002300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000001200)={0x50, 0x0, r1, {0x7, 0x27, 0x0, 0x500000, 0x3}}, 0x50) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@known='system.posix_acl_access\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000004340)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r0, &(0x7f0000000240)={0x10, 0x0, r2}, 0x10) 459.517362ms ago: executing program 2 (id=485): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) lsetxattr$system_posix_acl(0x0, &(0x7f0000000080)='system.posix_acl_access\x00', 0x0, 0x0, 0x3) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x5816, 0x8, 0x7, 0x4000000000000e51, 0x1, 0x5479, 0x103d, 0x200000000006, 0x0, 0x32a, 0xfffffffffffffffe, 0xffffffff, 0x1, 0x200040000000009, 0x8000000000005, 0x800000068], 0x2000, 0x80cd4}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 459.249982ms ago: executing program 4 (id=486): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0x4, 0x7fe4, 0x1}, 0x48) symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f00000017c0)='./file0\x00') r1 = syz_io_uring_setup(0x109, &(0x7f0000000140)={0x0, 0x114df, 0x0, 0x1, 0x89}, &(0x7f00000003c0)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x29c780}) io_uring_enter(r1, 0x3518, 0xaddf, 0x2, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000009c0)='kfree\x00', r4}, 0x10) 396.316414ms ago: executing program 4 (id=487): r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000340)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @empty, 0x4}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0xa4ffffff, @rand_addr=' \x01\x00'}}}, 0x15a) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001400000000120800040043000000a80016000a00014006000d00036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee", 0xd8}], 0x1}, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) syz_open_dev$dri(0x0, 0x1f, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 258.9818ms ago: executing program 7 (id=488): setresuid(0xee01, 0xee00, 0x0) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = io_uring_setup(0x3450, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) mremap(&(0x7f00003eb000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000003000/0x1000)=nil) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000002700)=""/4096, 0x1000}], 0x0, 0xa}, 0x20) 76.197508ms ago: executing program 2 (id=489): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r1 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r1, &(0x7f0000000040), 0x10) listen(r1, 0x0) r2 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r2, &(0x7f0000000080), 0x10) sendmmsg(r2, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094) close_range(r0, 0xffffffffffffffff, 0x0) 27.335339ms ago: executing program 7 (id=490): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa10000000000000701"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000001b00106a05310300000000000109022400010000800009040002010300010009210000000122f8040905810340"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_connect$uac1(0x5, 0x71, &(0x7f00000003c0)=ANY=[@ANYBLOB="12015002000000086b1d010140000102030109025f0003018120bc0904000000010100000a24010d00a002010209040100000102000009040101010102eddb35ea2b92a156ff1951a200"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) 0s ago: executing program 2 (id=491): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x20081e, &(0x7f0000000100), 0x1, 0x502, &(0x7f0000000a00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x107042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x187842, 0x3) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) fallocate(r2, 0x0, 0x0, 0x8000c62) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0) pwritev2(r3, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000080)={0x3920e, r0, 0x2, 0x0, 0x2}) kernel console output (not intermixed with test programs): [ T1234] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.080602][ T4888] team0: Port device team_slave_0 added [ 106.115764][ T4888] team0: Port device team_slave_1 added [ 106.148557][ T4935] ocfs2: Mounting device (7,2) on (node local, slot 0) with writeback data mode. [ 106.285612][ T4888] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 106.333829][ T4888] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 106.416316][ T4888] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 106.478613][ T4888] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 106.510311][ T4888] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 106.511603][ T21] Bluetooth: hci1: command 0x041b tx timeout [ 106.567707][ T4970] loop5: detected capacity change from 0 to 32768 [ 106.579611][ T4888] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 106.690714][ T4970] debugfs: Directory 'B1DE653C5FFC4D88B33B244AAB9EB3E9' with parent 'ocfs2' already present! [ 106.729747][ T4169] ocfs2: Unmounting device (7,2) on (node local) [ 106.739347][ T4970] ocfs2: Mounting device (7,5) on (node local, slot 0) with writeback data mode. [ 106.777133][ T162] (kworker/u4:3,162,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #72: rec_len % 4 != 0 - offset=16, inode=66, rec_len=491, name_len=2 [ 106.949075][ T4888] device hsr_slave_0 entered promiscuous mode [ 106.983377][ T4888] device hsr_slave_1 entered promiscuous mode [ 107.029034][ T4888] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 107.057812][ T4888] Cannot create hsr debugfs directory [ 107.145244][ T4380] ocfs2: Unmounting device (7,5) on (node local) [ 107.152845][ T4980] loop4: detected capacity change from 0 to 32768 [ 107.230696][ T4980] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.124 (4980) [ 107.317299][ T4980] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 107.357679][ T4980] BTRFS info (device loop4): using free space tree [ 107.383790][ T4980] BTRFS info (device loop4): has skinny extents [ 107.608714][ T4983] loop6: detected capacity change from 0 to 32768 [ 107.661947][ T4983] XFS: ikeep mount option is deprecated. [ 107.717446][ T5016] loop5: detected capacity change from 0 to 128 [ 107.785738][ T4983] XFS (loop6): Mounting V5 Filesystem [ 107.807200][ T4980] BTRFS info (device loop4): enabling ssd optimizations [ 107.902654][ T5016] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 107.904680][ T4888] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 107.979025][ T5016] ext4 filesystem being mounted at /15/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 107.991581][ T4983] XFS (loop6): Ending clean mount [ 108.032815][ T4983] XFS (loop6): Quotacheck needed: Please wait. [ 108.064564][ T4888] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 108.139412][ T4888] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 108.230716][ T4983] XFS (loop6): Quotacheck: Done. [ 108.283717][ T4888] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 108.459256][ T5041] loop2: detected capacity change from 0 to 4096 [ 108.485146][ T4714] XFS (loop6): Unmounting Filesystem [ 108.600608][ T5041] ntfs3: loop2: Different NTFS' sector size (2048) and media sector size (512) [ 108.825711][ T4230] Bluetooth: hci1: command 0x040f tx timeout [ 108.929213][ T4888] 8021q: adding VLAN 0 to HW filter on device bond0 [ 109.056634][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 109.086684][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 109.119822][ T4888] 8021q: adding VLAN 0 to HW filter on device team0 [ 109.284886][ T162] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 109.302327][ T162] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 109.341353][ T162] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.348600][ T162] bridge0: port 1(bridge_slave_0) entered forwarding state [ 109.439547][ T162] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 109.466022][ T162] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 109.516929][ T162] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 109.547972][ T162] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.555198][ T162] bridge0: port 2(bridge_slave_1) entered forwarding state [ 109.638698][ T162] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 109.691837][ T162] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 109.713649][ T162] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 109.751497][ T162] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 109.849950][ T162] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 109.885860][ T162] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 109.931783][ T162] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 109.952343][ T162] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 109.996157][ T162] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 110.008703][ T162] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 110.047023][ T162] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 110.378492][ T1234] device hsr_slave_0 left promiscuous mode [ 110.442810][ T1234] device hsr_slave_1 left promiscuous mode [ 110.471133][ T1234] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 110.509917][ T1234] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 110.542827][ T1234] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 110.579332][ T1234] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 110.599002][ T1234] device bridge_slave_1 left promiscuous mode [ 110.629296][ T1234] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.653816][ T154] Bluetooth: hci5: Frame reassembly failed (-84) [ 110.706276][ T1234] device bridge_slave_0 left promiscuous mode [ 110.746952][ T1234] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.799843][ T1234] device veth1_macvtap left promiscuous mode [ 110.815824][ T1234] device veth0_macvtap left promiscuous mode [ 110.822698][ T1234] device veth1_vlan left promiscuous mode [ 110.828894][ T1234] device veth0_vlan left promiscuous mode [ 110.901286][ T4667] Bluetooth: hci1: command 0x0419 tx timeout [ 111.081068][ T4667] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 111.294012][ T1234] team0 (unregistering): Port device team_slave_1 removed [ 111.314049][ T1234] team0 (unregistering): Port device team_slave_0 removed [ 111.329952][ T1234] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 111.346398][ T1234] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 111.356123][ T4667] usb 5-1: Using ep0 maxpacket: 8 [ 111.447600][ T1234] bond0 (unregistering): Released all slaves [ 111.483079][ T4667] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 111.501092][ T4245] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 111.534360][ T5097] netlink: 'syz.2.141': attribute type 1 has an invalid length. [ 111.598523][ T4667] usb 5-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 111.628167][ T4667] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105 [ 111.655147][ T4667] usb 5-1: SerialNumber: syz [ 111.679187][ T4667] usb 5-1: config 0 descriptor?? [ 111.725369][ T4888] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 111.743757][ T4667] usb 5-1: Found UVC 0.00 device (05ac:8501) [ 111.750856][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 111.758408][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 111.776928][ T5128] loop2: detected capacity change from 0 to 4096 [ 111.784507][ T4667] usb 5-1: Failed to create links for entity 255 [ 111.792325][ T4667] usb 5-1: Failed to register entities (-22). [ 111.861394][ T4245] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 111.881048][ T4245] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 111.907484][ T4245] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 111.916811][ T5134] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 111.936023][ T4245] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 111.948127][ T4245] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 111.959361][ T26] audit: type=1800 audit(1751442070.026:6): pid=5128 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.149" name="bus" dev="loop2" ino=18 res=0 errno=0 [ 111.989601][ T4499] usb 5-1: USB disconnect, device number 6 [ 112.101392][ T4245] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 112.117043][ T4245] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 112.138330][ T4245] usb 6-1: Product: syz [ 112.150878][ T4245] usb 6-1: Manufacturer: syz [ 112.236633][ T4245] cdc_wdm 6-1:1.0: skipping garbage [ 112.250344][ T4245] cdc_wdm 6-1:1.0: skipping garbage [ 112.287252][ T4245] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 112.317925][ T4245] cdc_wdm 6-1:1.0: Unknown control protocol [ 112.396801][ T162] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 112.409669][ T162] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 112.473990][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 112.485109][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 112.495752][ T4888] device veth0_vlan entered promiscuous mode [ 112.506161][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 112.569940][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 112.574685][ T21] usb 6-1: USB disconnect, device number 2 [ 112.577707][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 112.590080][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 112.596221][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 112.661226][ T4245] Bluetooth: hci5: command 0x1003 tx timeout [ 112.678968][ T4888] device veth1_vlan entered promiscuous mode [ 112.685936][ T4174] Bluetooth: hci5: sending frame failed (-49) [ 112.722879][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 112.769570][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 112.801631][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 112.843846][ T4888] device veth0_macvtap entered promiscuous mode [ 112.882905][ T4888] device veth1_macvtap entered promiscuous mode [ 112.960652][ T4888] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 113.010817][ T4888] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.020682][ T4888] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 113.080462][ T4888] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.110823][ T4888] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 113.130814][ T4888] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.155204][ T4888] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 113.180575][ T4888] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.202484][ T4888] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 113.215406][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 113.238312][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 113.295372][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 113.314883][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 113.338959][ T4888] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 113.400910][ T4888] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.426167][ T4888] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 113.474182][ T4888] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.500899][ T4888] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 113.528547][ T4888] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.549635][ T4888] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 113.581235][ T4888] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.607153][ T4888] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 113.631410][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 113.640418][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 113.685497][ T4888] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.713881][ T4888] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.721226][ T5166] loop2: detected capacity change from 0 to 32768 [ 113.744371][ T4888] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.756451][ T5166] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.155 (5166) [ 113.772085][ T4888] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.825620][ T5166] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 113.864089][ T5164] loop4: detected capacity change from 0 to 32768 [ 113.875318][ T5166] BTRFS info (device loop2): force clearing of disk cache [ 113.937625][ T5164] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.154 (5164) [ 113.944060][ T5166] BTRFS info (device loop2): enabling auto defrag [ 113.994438][ T5166] BTRFS info (device loop2): max_inline at 0 [ 114.017395][ T5164] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 114.032949][ T4261] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.051102][ T5166] BTRFS info (device loop2): enabling disk space caching [ 114.057030][ T5164] BTRFS info (device loop4): setting nodatacow, compression disabled [ 114.070937][ T5164] BTRFS info (device loop4): max_inline at 0 [ 114.077000][ T5164] BTRFS info (device loop4): enabling disk space caching [ 114.094561][ T4261] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.104800][ T5166] BTRFS info (device loop2): disk space caching is enabled [ 114.139481][ T5166] BTRFS info (device loop2): has skinny extents [ 114.148961][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 114.164274][ T5164] BTRFS info (device loop4): turning off barriers [ 114.184681][ T4261] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.199208][ T5164] BTRFS info (device loop4): turning on flush-on-commit [ 114.207882][ T4261] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.220278][ T5164] BTRFS info (device loop4): doing ref verification [ 114.230891][ T5164] BTRFS info (device loop4): force clearing of disk cache [ 114.239175][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 114.263828][ T5164] BTRFS info (device loop4): enabling ssd optimizations [ 114.277302][ T5164] BTRFS info (device loop4): max_inline at 4096 [ 114.283730][ T5164] BTRFS info (device loop4): disk space caching is enabled [ 114.301207][ T5164] BTRFS info (device loop4): has skinny extents [ 114.553119][ T5166] BTRFS info (device loop2): enabling ssd optimizations [ 114.562737][ T5164] BTRFS info (device loop4): clearing free space tree [ 114.570492][ T5164] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 114.593064][ T5166] BTRFS info (device loop2): clearing free space tree [ 114.600490][ T5166] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 114.630752][ T5164] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 114.635815][ T4216] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 114.642966][ T5166] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 114.741288][ T4388] Bluetooth: hci5: command 0x1001 tx timeout [ 114.761470][ T4174] Bluetooth: hci5: sending frame failed (-49) [ 114.884879][ T26] audit: type=1800 audit(1751442072.956:7): pid=5164 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.154" name="file1" dev="loop4" ino=260 res=0 errno=0 [ 114.968324][ T5066] BTRFS info (device loop2): qgroup scan completed (inconsistency flag cleared) [ 115.001817][ T4216] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 115.010549][ T4216] usb 6-1: config 0 has no interface number 0 [ 115.037517][ T4216] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 115.052375][ T4216] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.090970][ T4216] usb 6-1: config 0 descriptor?? [ 115.135315][ T4216] cp210x 6-1:0.1: cp210x converter detected [ 115.384895][ T5216] loop7: detected capacity change from 0 to 32768 [ 115.561103][ T4216] cp210x 6-1:0.1: failed to get vendor val 0x000e size 3: -32 [ 115.592199][ T5216] XFS (loop7): Mounting V5 Filesystem [ 115.852652][ T4216] usb 6-1: cp210x converter now attached to ttyUSB0 [ 115.968939][ T5216] XFS (loop7): Ending clean mount [ 115.982849][ T5216] XFS (loop7): Quotacheck needed: Please wait. [ 116.057580][ T4388] usb 6-1: USB disconnect, device number 3 [ 116.086619][ T5216] XFS (loop7): Quotacheck: Done. [ 116.121593][ T4388] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 116.211725][ T4388] cp210x 6-1:0.1: device disconnected [ 116.232152][ T26] audit: type=1804 audit(1751442074.296:8): pid=5216 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.7.108" name="/newroot/0/file0/file1" dev="loop7" ino=9286 res=1 errno=0 [ 116.360717][ T4888] XFS (loop7): Unmounting Filesystem [ 116.821474][ T4388] Bluetooth: hci5: command 0x1009 tx timeout [ 116.894804][ T5263] loop5: detected capacity change from 0 to 1024 [ 117.239963][ T5270] loop7: detected capacity change from 0 to 4096 [ 117.361333][ T5275] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 117.419741][ T5273] loop5: detected capacity change from 0 to 8192 [ 117.424660][ T5251] loop2: detected capacity change from 0 to 32768 [ 117.441696][ T26] audit: type=1800 audit(1751442075.516:9): pid=5270 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.160" name="bus" dev="loop7" ino=18 res=0 errno=0 [ 117.530911][ T5273] REISERFS (device loop5): found reiserfs format "3.5" with non-standard journal [ 117.626797][ T5251] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.161 (5251) [ 117.661209][ T5273] REISERFS (device loop5): using ordered data mode [ 117.668833][ T5273] reiserfs: using flush barriers [ 117.729270][ T5273] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 117.771606][ T5251] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 117.791661][ T5273] REISERFS (device loop5): checking transaction log (loop5) [ 117.813937][ T5251] BTRFS info (device loop2): using free space tree [ 117.854624][ T5273] REISERFS (device loop5): Using r5 hash to sort names [ 117.857044][ T5251] BTRFS info (device loop2): has skinny extents [ 117.980042][ T5273] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage. [ 118.162378][ T5273] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 4 0(1) DIR], item_len 35, item_location 221, free_space(entry_count) 2 [ 118.228095][ T5251] BTRFS info (device loop2): enabling ssd optimizations [ 118.292715][ T5273] REISERFS error (device loop5): vs-5150 search_by_key: invalid format found in block 532. Fsck? [ 118.321346][ T5273] REISERFS (device loop5): Remounting filesystem read-only [ 118.328605][ T5273] REISERFS error (device loop5): vs-13050 reiserfs_update_sd_size: i/o failure occurred trying to update [2 4 0x0 SD] stat data [ 118.362482][ T26] audit: type=1800 audit(1751442076.436:10): pid=5312 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.161" name="file1" dev="loop2" ino=260 res=0 errno=0 [ 118.388485][ T5310] syz.4.167 uses obsolete (PF_INET,SOCK_PACKET) [ 118.459494][ T5273] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 4 0(1) DIR], item_len 35, item_location 221, free_space(entry_count) 2 [ 118.510051][ T5273] REISERFS error (device loop5): vs-5150 search_by_key: invalid format found in block 532. Fsck? [ 118.567034][ T5273] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 4 0(1) DIR], item_len 35, item_location 221, free_space(entry_count) 2 [ 118.646932][ T5273] REISERFS error (device loop5): vs-5150 search_by_key: invalid format found in block 532. Fsck? [ 118.676643][ T5273] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 4 0(1) DIR], item_len 35, item_location 221, free_space(entry_count) 2 [ 118.724516][ T4261] BTRFS info (device loop2): qgroup scan completed (inconsistency flag cleared) [ 118.763411][ T5273] REISERFS error (device loop5): vs-5150 search_by_key: invalid format found in block 532. Fsck? [ 118.801838][ T5273] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 4 0(1) DIR], item_len 35, item_location 221, free_space(entry_count) 2 [ 118.817939][ T5273] REISERFS error (device loop5): vs-5150 search_by_key: invalid format found in block 532. Fsck? [ 118.829718][ T5273] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 4 0(1) DIR], item_len 35, item_location 221, free_space(entry_count) 2 [ 118.885309][ T5273] REISERFS error (device loop5): vs-5150 search_by_key: invalid format found in block 532. Fsck? [ 118.919214][ T5273] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 4 0(1) DIR], item_len 35, item_location 221, free_space(entry_count) 2 [ 118.945190][ T5273] REISERFS error (device loop5): vs-5150 search_by_key: invalid format found in block 532. Fsck? [ 118.988095][ T5273] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 4 0(1) DIR], item_len 35, item_location 221, free_space(entry_count) 2 [ 119.071021][ T5273] REISERFS error (device loop5): vs-5150 search_by_key: invalid format found in block 532. Fsck? [ 119.138963][ T5273] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 4 0(1) DIR], item_len 35, item_location 221, free_space(entry_count) 2 [ 119.221307][ T5273] REISERFS error (device loop5): vs-5150 search_by_key: invalid format found in block 532. Fsck? [ 119.273590][ T5273] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 4 0(1) DIR], item_len 35, item_location 221, free_space(entry_count) 2 [ 119.330254][ T5273] REISERFS error (device loop5): vs-5150 search_by_key: invalid format found in block 532. Fsck? [ 119.362399][ T5273] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 4 0(1) DIR], item_len 35, item_location 221, free_space(entry_count) 2 [ 119.404701][ T5273] REISERFS error (device loop5): vs-5150 search_by_key: invalid format found in block 532. Fsck? [ 119.417578][ T5273] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 4 0(1) DIR], item_len 35, item_location 221, free_space(entry_count) 2 [ 119.441970][ T5273] REISERFS error (device loop5): vs-5150 search_by_key: invalid format found in block 532. Fsck? [ 119.459147][ T5273] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 4 0(1) DIR], item_len 35, item_location 221, free_space(entry_count) 2 [ 119.538415][ T5273] REISERFS error (device loop5): vs-5150 search_by_key: invalid format found in block 532. Fsck? [ 119.589407][ T5273] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 4 0(1) DIR], item_len 35, item_location 221, free_space(entry_count) 2 [ 119.631112][ T5273] REISERFS error (device loop5): vs-5150 search_by_key: invalid format found in block 532. Fsck? [ 119.699406][ T5273] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 4 0(1) DIR], item_len 35, item_location 221, free_space(entry_count) 2 [ 119.745214][ T5273] REISERFS error (device loop5): vs-5150 search_by_key: invalid format found in block 532. Fsck? [ 119.801012][ T5273] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 4 0(1) DIR], item_len 35, item_location 221, free_space(entry_count) 2 [ 119.837167][ T5273] REISERFS error (device loop5): vs-5150 search_by_key: invalid format found in block 532. Fsck? [ 119.868247][ T5273] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 4 0(1) DIR], item_len 35, item_location 221, free_space(entry_count) 2 [ 119.940838][ T5273] REISERFS error (device loop5): vs-5150 search_by_key: invalid format found in block 532. Fsck? [ 119.982302][ T5273] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 4 0(1) DIR], item_len 35, item_location 221, free_space(entry_count) 2 [ 120.070960][ T5273] REISERFS error (device loop5): vs-5150 search_by_key: invalid format found in block 532. Fsck? [ 120.180469][ T5358] loop4: detected capacity change from 0 to 4096 [ 120.246318][ T26] audit: type=1326 audit(1751442078.316:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5366 comm="syz.7.180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf14a70929 code=0x7ffc0000 [ 120.345163][ T26] audit: type=1326 audit(1751442078.316:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5366 comm="syz.7.180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf14a70929 code=0x7ffc0000 [ 120.369558][ T5371] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 120.466015][ T26] audit: type=1326 audit(1751442078.356:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5366 comm="syz.7.180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbf14a70929 code=0x7ffc0000 [ 120.608278][ T26] audit: type=1326 audit(1751442078.356:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5366 comm="syz.7.180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf14a70929 code=0x7ffc0000 [ 120.744172][ T5380] loop7: detected capacity change from 0 to 1024 [ 120.839387][ T26] audit: type=1326 audit(1751442078.356:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5366 comm="syz.7.180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf14a70929 code=0x7ffc0000 [ 120.908455][ T5387] loop6: detected capacity change from 0 to 128 [ 120.962817][ T5380] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 121.101711][ T26] audit: type=1326 audit(1751442078.376:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5366 comm="syz.7.180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbf14a70929 code=0x7ffc0000 [ 121.134594][ T5380] EXT4-fs warning (device loop7): ext4_rmdir:3243: inode #11: comm syz.7.183: empty directory 'file1' has too many links (111) [ 121.167190][ T5387] EXT4-fs (loop6): Ignoring removed bh option [ 121.199552][ T5387] EXT4-fs (loop6): Invalid want_extra_isize 2 [ 121.261151][ T26] audit: type=1326 audit(1751442078.376:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5366 comm="syz.7.180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf14a70929 code=0x7ffc0000 [ 121.323070][ T26] audit: type=1326 audit(1751442078.376:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5366 comm="syz.7.180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf14a70929 code=0x7ffc0000 [ 121.453727][ T5408] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 121.949033][ T5379] loop5: detected capacity change from 0 to 32768 [ 121.958525][ T5424] 9pnet: bogus RWRITE count (2 > 1) [ 122.094668][ T5379] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 scanned by syz.5.181 (5379) [ 122.170987][ T5379] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 122.193812][ T5379] BTRFS info (device loop5): using free space tree [ 122.217062][ T5379] BTRFS info (device loop5): has skinny extents [ 122.449013][ T5456] loop2: detected capacity change from 0 to 2048 [ 122.620490][ T5379] BTRFS info (device loop5): enabling ssd optimizations [ 122.643168][ T5456] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 122.663386][ T5456] ext4 filesystem being mounted at /46/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 122.856059][ T26] kauditd_printk_skb: 6 callbacks suppressed [ 122.856073][ T26] audit: type=1800 audit(1751442082.924:25): pid=5456 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.198" name="file0" dev="loop2" ino=13 res=0 errno=0 [ 122.857928][ T5456] fs-verity: sha512 using implementation "sha512-avx2" [ 122.900574][ T26] audit: type=1800 audit(1751442082.964:26): pid=5379 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.181" name="file1" dev="loop5" ino=260 res=0 errno=0 [ 123.038108][ T154] BTRFS info (device loop5): qgroup scan completed (inconsistency flag cleared) [ 123.298096][ T5456] fs-verity (loop2, inode 13): Error -4 building Merkle tree [ 123.431805][ T4161] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 12 /dev/loop5 scanned by udevd (4161) [ 123.795562][ T5475] loop6: detected capacity change from 0 to 32768 [ 123.837584][ T5475] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 scanned by syz.6.199 (5475) [ 123.991063][ T5475] BTRFS info (device loop6): using crc32c (crc32c-intel) checksum algorithm [ 123.999838][ T5475] BTRFS info (device loop6): turning off barriers [ 124.041209][ T5475] BTRFS info (device loop6): setting nodatasum [ 124.058358][ T5475] BTRFS info (device loop6): setting incompat feature flag for COMPRESS_LZO (0x8) [ 124.176774][ T5475] BTRFS info (device loop6): use lzo compression, level 0 [ 124.224445][ T5475] BTRFS info (device loop6): using free space tree [ 124.260576][ T5475] BTRFS info (device loop6): has skinny extents [ 124.438027][ T5531] netlink: 4 bytes leftover after parsing attributes in process `syz.2.209'. [ 124.661601][ T4388] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 124.691342][ T5546] loop2: detected capacity change from 0 to 256 [ 124.784069][ T5546] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x09066d1f, utbl_chksum : 0xe619d30d) [ 124.901028][ T4388] usb 5-1: Using ep0 maxpacket: 16 [ 124.934331][ T5546] exFAT-fs (loop2): hint_cluster is invalid (1) [ 125.021063][ T4388] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 125.042615][ T4388] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 125.054235][ T5546] exFAT-fs (loop2): error, invalid access to exfat cache (entry 0x00000000) [ 125.066422][ T4388] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 125.082571][ T4388] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 125.094657][ T5546] exFAT-fs (loop2): Filesystem has been set read-only [ 125.101392][ T4388] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.131401][ T5546] exFAT-fs (loop2): error, failed to bmap (inode : ffff88805a038e60 iblock : 9, err : -5) [ 125.163669][ T5546] exFAT-fs (loop2): error, tried to truncate zeroed cluster. [ 125.197233][ T4388] usb 5-1: config 0 descriptor?? [ 125.218794][ T5546] exFAT-fs (loop2): error, tried to truncate zeroed cluster. [ 125.684515][ T4388] HID 045e:07da: Invalid code 65791 type 1 [ 125.716037][ T4388] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.0002/input/input7 [ 125.800471][ T4388] microsoft 0003:045E:07DA.0002: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 126.098771][ T5507] loop5: detected capacity change from 0 to 32768 [ 126.284358][ T5565] loop7: detected capacity change from 0 to 32768 [ 126.289442][ T5581] loop2: detected capacity change from 0 to 32768 [ 126.314824][ T5507] XFS (loop5): Mounting V5 Filesystem [ 126.509137][ T4384] usb 5-1: USB disconnect, device number 7 [ 126.540229][ T5507] XFS (loop5): Ending clean mount [ 126.675562][ T5598] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 126.969297][ T5605] loop6: detected capacity change from 0 to 1024 [ 127.130123][ T5605] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 127.219944][ T4380] XFS (loop5): Unmounting Filesystem [ 127.249804][ T5619] input: syz0 as /devices/virtual/input/input8 [ 127.394936][ T4714] EXT4-fs warning (device loop6): ext4_rmdir:3243: inode #11: comm syz-executor: empty directory 'lost+found' has too many links (111) [ 127.498139][ T4714] EXT4-fs error (device loop6): ext4_empty_dir:3136: inode #11: comm syz-executor: invalid size [ 127.576630][ T4714] EXT4-fs error (device loop6): ext4_empty_dir:3136: inode #11: comm syz-executor: invalid size [ 127.604433][ T4714] EXT4-fs error (device loop6): ext4_empty_dir:3136: inode #11: comm syz-executor: invalid size [ 127.646405][ T4714] EXT4-fs error (device loop6): ext4_empty_dir:3136: inode #11: comm syz-executor: invalid size [ 127.696624][ T4714] EXT4-fs error (device loop6): ext4_empty_dir:3136: inode #11: comm syz-executor: invalid size [ 127.713173][ T4714] EXT4-fs error (device loop6): ext4_empty_dir:3136: inode #11: comm syz-executor: invalid size [ 127.736730][ T5629] process 'syz.7.225' launched '/dev/fd/3' with NULL argv: empty string added [ 127.746855][ T4714] EXT4-fs error (device loop6): ext4_empty_dir:3136: inode #11: comm syz-executor: invalid size [ 127.778917][ T4714] EXT4-fs error (device loop6): ext4_empty_dir:3136: inode #11: comm syz-executor: invalid size [ 127.813250][ T4714] EXT4-fs error (device loop6): ext4_empty_dir:3136: inode #11: comm syz-executor: invalid size [ 127.845134][ T4714] EXT4-fs error (device loop6): ext4_empty_dir:3136: inode #11: comm syz-executor: invalid size [ 128.154193][ T4388] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 128.428733][ T5659] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 128.534318][ T4388] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 128.576595][ T4388] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 128.628287][ T5668] libceph: resolve '4..' (ret=-3): failed [ 128.644292][ T4388] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 128.658321][ T4388] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.682900][ T4388] usb 3-1: config 0 descriptor?? [ 128.777982][ T5066] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.880345][ T5066] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.016219][ T5066] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.111377][ T5066] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.391258][ T4388] usb 3-1: language id specifier not provided by device, defaulting to English [ 130.076092][ T5718] sch_fq: defrate 0 ignored. [ 130.123106][ T4388] uclogic 0003:256C:006D.0003: v1 buttonpad probing failed: -71 [ 130.143320][ T4388] uclogic 0003:256C:006D.0003: failed probing parameters: -71 [ 130.160151][ T4388] uclogic: probe of 0003:256C:006D.0003 failed with error -71 [ 130.237489][ T4388] usb 3-1: USB disconnect, device number 6 [ 130.675809][ T5687] chnl_net:caif_netlink_parms(): no params data found [ 130.763434][ T5742] device macvlan2 entered promiscuous mode [ 130.783237][ T5742] device bond0 entered promiscuous mode [ 130.810453][ T5742] device bond_slave_0 entered promiscuous mode [ 130.856308][ T5742] device bond_slave_1 entered promiscuous mode [ 130.873612][ T5742] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 130.897891][ T5742] device bond0 left promiscuous mode [ 130.919965][ T5742] device bond_slave_0 left promiscuous mode [ 130.936878][ T5742] device bond_slave_1 left promiscuous mode [ 130.967947][ T5721] loop4: detected capacity change from 0 to 32768 [ 131.099589][ T5721] XFS (loop4): Mounting V5 Filesystem [ 131.206291][ T5760] loop7: detected capacity change from 0 to 1024 [ 131.281261][ T5721] XFS (loop4): Ending clean mount [ 131.383725][ T21] Bluetooth: hci4: command 0x0409 tx timeout [ 131.421097][ T5760] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 131.491275][ T5760] ext4 filesystem being mounted at /31/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 131.621767][ T5687] bridge0: port 1(bridge_slave_0) entered blocking state [ 131.624534][ T5760] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1152: group 0, [ 131.629072][ T5687] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.641118][ T5687] device bridge_slave_0 entered promiscuous mode [ 131.644839][ T5760] block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 131.681832][ T4177] XFS (loop4): Unmounting Filesystem [ 131.695335][ T5066] device hsr_slave_0 left promiscuous mode [ 131.757445][ T5066] device hsr_slave_1 left promiscuous mode [ 131.773854][ T5066] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 131.796241][ T5066] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 131.862233][ T5782] loop2: detected capacity change from 0 to 2048 [ 131.891961][ T5066] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 131.902986][ T5066] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 131.934442][ T5066] device bridge_slave_1 left promiscuous mode [ 131.946015][ T5066] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.982351][ T4186] loop2: p1 < > p3 [ 132.044101][ T4186] loop2: p3 size 134217728 extends beyond EOD, truncated [ 132.058208][ T5066] device bridge_slave_0 left promiscuous mode [ 132.070964][ T5066] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.128513][ T5782] loop2: p1 < > p3 [ 132.133264][ T5066] device veth1_macvtap left promiscuous mode [ 132.139419][ T5066] device veth0_macvtap left promiscuous mode [ 132.148364][ T5782] loop2: p3 size 134217728 extends beyond EOD, truncated [ 132.178719][ T5066] device veth1_vlan left promiscuous mode [ 132.188104][ T5066] device veth0_vlan left promiscuous mode [ 132.515181][ T4186] udevd[4186]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 132.559660][ T4161] udevd[4161]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 132.634534][ T4186] udevd[4186]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 132.652807][ T4161] udevd[4161]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 132.827254][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.838902][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.042015][ T5066] team0 (unregistering): Port device team_slave_1 removed [ 133.059922][ T5066] team0 (unregistering): Port device team_slave_0 removed [ 133.106459][ T5066] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 133.144965][ T5066] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 133.355368][ T5066] bond0 (unregistering): Released all slaves [ 133.415668][ T5687] bridge0: port 2(bridge_slave_1) entered blocking state [ 133.424318][ T5687] bridge0: port 2(bridge_slave_1) entered disabled state [ 133.452595][ T5687] device bridge_slave_1 entered promiscuous mode [ 133.462504][ T5055] Bluetooth: hci4: command 0x041b tx timeout [ 133.739166][ T5687] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 133.759699][ T5687] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 133.931018][ T5687] team0: Port device team_slave_0 added [ 133.983864][ T5687] team0: Port device team_slave_1 added [ 134.010977][ T4285] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 134.097248][ T5687] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 134.144486][ T5824] loop2: detected capacity change from 0 to 16 [ 134.150924][ T5687] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 134.177058][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 134.190829][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 134.200819][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 134.210985][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 134.220868][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 134.229885][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 134.238889][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 134.247917][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 134.257009][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 134.261378][ T4285] usb 8-1: Using ep0 maxpacket: 32 [ 134.347066][ T5824] erofs: (device loop2): mounted with root inode @ nid 36. [ 134.398773][ T5687] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 134.422583][ T4285] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 134.468947][ T4285] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 134.500200][ T5687] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 134.523145][ T5687] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 134.530103][ T4285] usb 8-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 134.549099][ C0] vkms_vblank_simulate: vblank timer overrun [ 134.646892][ T5687] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 134.668172][ T4285] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.772202][ T4285] usb 8-1: config 0 descriptor?? [ 134.822096][ T4285] hub 8-1:0.0: USB hub found [ 135.032866][ T5687] device hsr_slave_0 entered promiscuous mode [ 135.041121][ T4285] hub 8-1:0.0: 1 port detected [ 135.048278][ T5687] device hsr_slave_1 entered promiscuous mode [ 135.096767][ T5687] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 135.126000][ T5687] Cannot create hsr debugfs directory [ 135.541221][ T5055] Bluetooth: hci4: command 0x040f tx timeout [ 135.677489][ T5856] loop2: detected capacity change from 0 to 128 [ 135.701538][ T5687] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 135.711272][ T5055] hub 8-1:0.0: activate --> -90 [ 135.751727][ T5687] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 135.763836][ T5687] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 135.800407][ T5856] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a802c018, mo2=0002] [ 135.811205][ T5687] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 135.831195][ T5856] System zones: 1-3, 19-19, 35-36 [ 135.839893][ T5856] EXT4-fs (loop2): mounted filesystem without journal. Opts: debug,,errors=continue. Quota mode: none. [ 135.892319][ T5856] ext4 filesystem being mounted at /64/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 135.920192][ T5856] EXT4-fs warning (device loop2): ext4_group_extend:1823: can't shrink FS - resize aborted [ 135.985936][ T5834] chnl_net:caif_netlink_parms(): no params data found [ 136.011054][ T5055] usb 8-1-port1: config error [ 136.212442][ T13] usb 8-1: USB disconnect, device number 2 [ 136.446393][ T5834] bridge0: port 1(bridge_slave_0) entered blocking state [ 136.482144][ T5834] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.541328][ T5834] device bridge_slave_0 entered promiscuous mode [ 136.572282][ T5834] bridge0: port 2(bridge_slave_1) entered blocking state [ 136.628945][ T5834] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.649817][ T5834] device bridge_slave_1 entered promiscuous mode [ 136.692187][ T5888] loop2: detected capacity change from 0 to 1764 [ 136.819614][ T5834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 136.829204][ T5055] Bluetooth: hci2: command 0x0409 tx timeout [ 136.973358][ T5834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 137.032066][ T5687] 8021q: adding VLAN 0 to HW filter on device bond0 [ 137.169579][ T5834] team0: Port device team_slave_0 added [ 137.204748][ T5834] team0: Port device team_slave_1 added [ 137.236082][ T5899] loop4: detected capacity change from 0 to 512 [ 137.278949][ T5687] 8021q: adding VLAN 0 to HW filter on device team0 [ 137.326798][ T5899] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 137.410080][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 137.434183][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 137.435727][ T5899] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2228: inode #15: comm syz.4.290: corrupted in-inode xattr [ 137.463935][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 137.490474][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 137.600956][ T5834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 137.601172][ T5899] EXT4-fs (loop4): 1 truncate cleaned up [ 137.618990][ T162] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 137.630814][ T4285] Bluetooth: hci4: command 0x0419 tx timeout [ 137.652301][ T5904] dccp_close: ABORT with 32 bytes unread [ 137.668544][ T162] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 137.676677][ T5899] EXT4-fs (loop4): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000001,resuid=0x000000000000ee01,debug_want_extra_isize=0x0000000000000068,max_batch_time=0x0000000006000000,journal_dev=0x000000007fffffff,noload,,errors=continue. Quota mode: none. [ 137.721667][ T162] bridge0: port 1(bridge_slave_0) entered blocking state [ 137.728781][ T162] bridge0: port 1(bridge_slave_0) entered forwarding state [ 137.777443][ T162] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 137.804701][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 137.820475][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 137.888531][ T5834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 137.904860][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 137.930352][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 137.967124][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 137.974316][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 138.170640][ T5917] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 138.215908][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 138.285641][ T5834] device hsr_slave_0 entered promiscuous mode [ 138.328831][ T5834] device hsr_slave_1 entered promiscuous mode [ 138.342828][ T5834] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 138.362715][ T5834] Cannot create hsr debugfs directory [ 138.369051][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 138.395485][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 138.405371][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 138.429804][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 138.456124][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 138.488918][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 138.567122][ T162] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 138.593580][ T162] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 138.633069][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 138.650263][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 138.711643][ T5687] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 138.901126][ T5055] Bluetooth: hci2: command 0x041b tx timeout [ 138.967730][ T26] audit: type=1326 audit(1751442099.034:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5932 comm="syz.2.302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e76efb929 code=0x7ffc0000 [ 139.034564][ T26] audit: type=1326 audit(1751442099.074:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5932 comm="syz.2.302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e76efb929 code=0x7ffc0000 [ 139.048847][ T5933] loop2: detected capacity change from 0 to 1024 [ 139.094235][ T5928] loop7: detected capacity change from 0 to 4096 [ 139.110196][ T5834] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.136871][ T26] audit: type=1326 audit(1751442099.074:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5932 comm="syz.2.302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f1e76efb929 code=0x7ffc0000 [ 139.175426][ T5933] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 139.194726][ T5933] ext4 filesystem being mounted at /74/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 139.262435][ T26] audit: type=1326 audit(1751442099.094:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5932 comm="syz.2.302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e76efb929 code=0x7ffc0000 [ 139.360330][ T5834] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.408626][ T26] audit: type=1326 audit(1751442099.094:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5932 comm="syz.2.302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f1e76efb929 code=0x7ffc0000 [ 139.448112][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 139.458358][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 139.471466][ T26] audit: type=1326 audit(1751442099.094:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5932 comm="syz.2.302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f1e76efb963 code=0x7ffc0000 [ 139.516127][ T26] audit: type=1326 audit(1751442099.094:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5932 comm="syz.2.302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f1e76efa3df code=0x7ffc0000 [ 139.588409][ T5834] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.599326][ T26] audit: type=1326 audit(1751442099.104:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5932 comm="syz.2.302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f1e76efb9b7 code=0x7ffc0000 [ 139.654801][ T5687] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 139.726055][ T26] audit: type=1326 audit(1751442099.104:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5932 comm="syz.2.302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1e76efa290 code=0x7ffc0000 [ 139.758203][ T26] audit: type=1326 audit(1751442099.104:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5932 comm="syz.2.302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1e76efb52b code=0x7ffc0000 [ 139.761979][ T5834] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.930274][ T5949] netlink: 24 bytes leftover after parsing attributes in process `syz.4.305'. [ 140.355539][ T5964] loop4: detected capacity change from 0 to 1024 [ 140.376096][ T5834] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 140.427897][ T5834] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 140.491701][ T5834] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 140.522833][ T5834] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 140.542244][ T5964] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 140.627156][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 140.648524][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 140.753300][ T5971] netlink: 14528 bytes leftover after parsing attributes in process `syz.7.311'. [ 140.837279][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 140.878457][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 140.910026][ T5687] device veth0_vlan entered promiscuous mode [ 140.983140][ T4389] Bluetooth: hci2: command 0x040f tx timeout [ 141.049980][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 141.067834][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 141.078616][ T5983] loop7: detected capacity change from 0 to 8192 [ 141.093350][ T5989] netlink: 28 bytes leftover after parsing attributes in process `syz.4.315'. [ 141.115112][ T5989] netlink: 'syz.4.315': attribute type 7 has an invalid length. [ 141.163378][ T5989] netlink: 4 bytes leftover after parsing attributes in process `syz.4.315'. [ 141.175740][ T5992] loop2: detected capacity change from 0 to 256 [ 141.209772][ T5983] REISERFS (device loop7): found reiserfs format "3.6" with non-standard journal [ 141.241750][ T5983] REISERFS (device loop7): using ordered data mode [ 141.251170][ T5983] reiserfs: using flush barriers [ 141.258373][ T5983] REISERFS (device loop7): journal params: device loop7, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 141.278092][ T5983] REISERFS (device loop7): checking transaction log (loop7) [ 141.291588][ T5687] device veth1_vlan entered promiscuous mode [ 141.298531][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 141.495423][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 141.516787][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 141.557264][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 141.576306][ T5687] device veth0_macvtap entered promiscuous mode [ 141.604267][ T5994] netlink: 12 bytes leftover after parsing attributes in process `syz.4.317'. [ 141.642406][ T5983] REISERFS (device loop7): Using tea hash to sort names [ 141.650080][ T5983] REISERFS (device loop7): Created .reiserfs_priv - reserved for xattr storage. [ 141.667891][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 141.679141][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 141.697619][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 141.737524][ T5687] device veth1_macvtap entered promiscuous mode [ 141.765560][ T5834] 8021q: adding VLAN 0 to HW filter on device team0 [ 141.809633][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 141.842355][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 141.881543][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 141.923931][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 141.931179][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 142.009409][ T5687] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 142.045896][ T5687] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.058063][ T5687] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 142.072660][ T5687] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.083638][ T5687] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 142.124404][ T5687] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.136358][ T5687] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 142.158040][ T5687] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.191443][ T5687] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 142.204731][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 142.217888][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 142.257949][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 142.287433][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 142.294568][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 142.302678][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 142.312097][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 142.332982][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 142.364689][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 142.439083][ T5066] device hsr_slave_0 left promiscuous mode [ 142.453332][ T5066] device hsr_slave_1 left promiscuous mode [ 142.470315][ T5066] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 142.487960][ T5066] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 142.517295][ T5066] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 142.530183][ T5066] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 142.544298][ T6016] loop4: detected capacity change from 0 to 512 [ 142.551774][ T5066] device bridge_slave_1 left promiscuous mode [ 142.563872][ T5066] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.609470][ T5066] device bridge_slave_0 left promiscuous mode [ 142.616817][ T5066] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.647518][ T5066] device veth1_macvtap left promiscuous mode [ 142.661307][ T5066] device veth0_macvtap left promiscuous mode [ 142.666135][ T6016] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 142.667549][ T5066] device veth1_vlan left promiscuous mode [ 142.690062][ T6016] ext4 filesystem being mounted at /89/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 142.712778][ T5066] device veth0_vlan left promiscuous mode [ 143.063122][ T13] Bluetooth: hci2: command 0x0419 tx timeout [ 143.262278][ T5066] team0 (unregistering): Port device team_slave_1 removed [ 143.282595][ T6026] sd 0:0:1:0: PR command failed: 2 [ 143.287823][ T6026] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 143.311110][ T6026] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 143.333512][ T5066] team0 (unregistering): Port device team_slave_0 removed [ 143.391196][ T5066] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 143.435071][ T5066] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 143.669766][ T5066] bond0 (unregistering): Released all slaves [ 143.685098][ T6034] loop7: detected capacity change from 0 to 512 [ 143.735224][ T6034] EXT4-fs (loop7): Ignoring removed nomblk_io_submit option [ 143.820830][ T6034] EXT4-fs (loop7): mounted filesystem without journal. Opts: commit=0x0000000000000005,inode_readahead_blks=0x0000000000000800,usrjquota=,nomblk_io_submit,,errors=continue. Quota mode: writeback. [ 143.841333][ T6034] ext4 filesystem being mounted at /46/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 143.874273][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 143.931142][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 143.976737][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 144.012793][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 144.032100][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 144.066082][ T5687] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 144.097779][ T5687] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.115135][ T5687] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 144.126874][ T5687] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.137173][ T5687] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 144.149554][ T5687] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.164642][ T5687] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 144.207196][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 144.233608][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 144.248754][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 144.288205][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 144.304208][ T5834] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 144.331874][ T5834] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 144.354428][ T5687] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.380931][ T5687] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.405095][ T5687] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.433719][ T5687] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.475432][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 144.503894][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 144.837175][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 144.859620][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 144.888840][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 144.907761][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 144.928207][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 145.062252][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 145.110339][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 145.145533][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 145.157098][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 145.485609][ T6083] loop4: detected capacity change from 0 to 1024 [ 145.652963][ T6083] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 145.792739][ T6083] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 145.827686][ T6086] loop8: detected capacity change from 0 to 32768 [ 145.887035][ T6086] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop8 scanned by syz.8.344 (6086) [ 145.912509][ T6086] BTRFS info (device loop8): using crc32c (crc32c-intel) checksum algorithm [ 145.921623][ T6086] BTRFS info (device loop8): max_inline at 0 [ 145.927850][ T6086] BTRFS info (device loop8): enabling disk space caching [ 145.935395][ T6086] BTRFS info (device loop8): setting nodatasum [ 145.941864][ T6086] BTRFS info (device loop8): turning off barriers [ 145.948337][ T6086] BTRFS info (device loop8): turning on flush-on-commit [ 145.955372][ T6086] BTRFS info (device loop8): doing ref verification [ 145.962433][ T6086] BTRFS info (device loop8): force clearing of disk cache [ 145.969907][ T6086] BTRFS warning (device loop8): excessive commit interval 2147483647 [ 145.978099][ T6086] BTRFS info (device loop8): enabling ssd optimizations [ 145.985150][ T6086] BTRFS info (device loop8): max_inline at 4096 [ 145.991490][ T6086] BTRFS info (device loop8): disk space caching is enabled [ 145.998813][ T6086] BTRFS info (device loop8): has skinny extents [ 146.044514][ T6086] BTRFS info (device loop8): clearing free space tree [ 146.051460][ T6086] BTRFS info (device loop8): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 146.061394][ T6086] BTRFS info (device loop8): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 146.107580][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 146.119560][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 146.140917][ T21] usb 8-1: new full-speed USB device number 3 using dummy_hcd [ 146.260561][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 146.269821][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 146.278948][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 146.289395][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 146.344701][ T5834] device veth0_vlan entered promiscuous mode [ 146.454210][ T5834] device veth1_vlan entered promiscuous mode [ 146.504021][ T21] usb 8-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 146.524592][ T21] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.571876][ T21] usb 8-1: config 0 descriptor?? [ 146.598149][ T5834] device veth0_macvtap entered promiscuous mode [ 146.661617][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 146.680326][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 146.712586][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 146.766127][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 146.796888][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 146.833827][ T5834] device veth1_macvtap entered promiscuous mode [ 146.901608][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 146.940923][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.976567][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 147.026701][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.051726][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 147.074360][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.094840][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 147.122376][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.163901][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 147.184201][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 147.199784][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 147.302214][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 147.472777][ T6112] loop4: detected capacity change from 0 to 32768 [ 147.544085][ T6115] loop8: detected capacity change from 0 to 40427 [ 147.561922][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 147.573319][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.586990][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 147.598162][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.608096][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 147.618800][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.641563][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 147.672973][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.675006][ T6112] XFS (loop4): Mounting V5 Filesystem [ 147.730867][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 147.749590][ T6115] F2FS-fs (loop8): Invalid log_blocksize (268), supports only 12 [ 147.757505][ T6115] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock [ 147.777573][ T6115] F2FS-fs (loop8): invalid crc value [ 147.814809][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 147.825075][ T6112] XFS (loop4): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 147.829558][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 147.856586][ T6115] F2FS-fs (loop8): Found nat_bits in checkpoint [ 147.910741][ T5834] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.919568][ T5834] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.926027][ T6112] XFS (loop4): Starting recovery (logdev: internal) [ 147.940477][ T6115] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0 [ 147.948258][ T6115] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 147.957035][ T5834] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.965894][ T5834] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.059770][ T6112] XFS (loop4): Ending recovery (logdev: internal) [ 148.232653][ T1234] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 148.297076][ T1234] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 148.350935][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 148.384059][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 148.391225][ T21] pegasus 8-1:0.0: can't reset MAC [ 148.401972][ T4177] XFS (loop4): Unmounting Filesystem [ 148.411992][ T21] pegasus: probe of 8-1:0.0 failed with error -5 [ 148.419200][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 148.486873][ T21] usb 8-1: USB disconnect, device number 3 [ 148.501363][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 148.871937][ T26] kauditd_printk_skb: 12 callbacks suppressed [ 148.871954][ T26] audit: type=1326 audit(1751442108.944:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6129 comm="syz.8.348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bfdfe6929 code=0x7ffc0000 [ 149.025418][ T26] audit: type=1326 audit(1751442108.984:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6129 comm="syz.8.348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2bfdfe6929 code=0x7ffc0000 [ 149.126642][ T26] audit: type=1326 audit(1751442108.984:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6129 comm="syz.8.348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bfdfe6929 code=0x7ffc0000 [ 149.196325][ T6130] loop8: detected capacity change from 0 to 8192 [ 149.224637][ T26] audit: type=1326 audit(1751442108.984:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6129 comm="syz.8.348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2bfdfe6929 code=0x7ffc0000 [ 149.247714][ T26] audit: type=1326 audit(1751442108.984:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6129 comm="syz.8.348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bfdfe6929 code=0x7ffc0000 [ 149.288429][ T6130] loop8: p4 < > [ 149.426747][ T26] audit: type=1326 audit(1751442108.984:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6129 comm="syz.8.348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f2bfdfe6929 code=0x7ffc0000 [ 149.475010][ T3547] loop8: p4 < > [ 149.531256][ T26] audit: type=1326 audit(1751442108.984:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6129 comm="syz.8.348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f2bfdfe6963 code=0x7ffc0000 [ 149.657304][ T26] audit: type=1326 audit(1751442109.084:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6129 comm="syz.8.348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f2bfdfe53df code=0x7ffc0000 [ 149.754279][ T6137] device syzkaller1 entered promiscuous mode [ 149.788389][ T26] audit: type=1326 audit(1751442109.264:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6129 comm="syz.8.348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f2bfdfe69b7 code=0x7ffc0000 [ 149.900936][ T26] audit: type=1326 audit(1751442109.264:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6129 comm="syz.8.348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2bfdfe5290 code=0x7ffc0000 [ 149.945532][ T4161] udevd[4161]: inotify_add_watch(7, /dev/loop8p4, 10) failed: No such file or directory [ 150.080494][ T4161] udevd[4161]: inotify_add_watch(7, /dev/loop8p4, 10) failed: No such file or directory [ 150.629203][ T6160] loop4: detected capacity change from 0 to 4096 [ 150.698441][ T6160] ntfs3: loop4: Different NTFS' sector size (2048) and media sector size (512) [ 151.003166][ T6160] overlayfs: failed to resolve './file0': -2 [ 151.515198][ T6194] binder: BINDER_SET_CONTEXT_MGR already set [ 151.527007][ T6194] binder: 6193:6194 ioctl 4018620d 200000000040 returned -16 [ 151.700342][ T5066] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.760414][ T6159] chnl_net:caif_netlink_parms(): no params data found [ 151.795477][ T5066] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.834649][ T4384] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 151.881429][ T5066] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.016591][ T5066] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.096393][ T6159] bridge0: port 1(bridge_slave_0) entered blocking state [ 152.111132][ T4384] usb 8-1: Using ep0 maxpacket: 32 [ 152.113021][ T6189] loop4: detected capacity change from 0 to 32768 [ 152.125097][ T6159] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.140948][ T6189] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop4 scanned by syz.4.372 (6189) [ 152.181284][ T6159] device bridge_slave_0 entered promiscuous mode [ 152.213614][ T6189] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 152.229740][ T6159] bridge0: port 2(bridge_slave_1) entered blocking state [ 152.241052][ T4384] usb 8-1: config 0 has an invalid interface number: 152 but max is 0 [ 152.249279][ T4384] usb 8-1: config 0 has no interface number 0 [ 152.281632][ T6159] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.291185][ T6189] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_LZO (0x8) [ 152.300957][ T4384] usb 8-1: config 0 interface 152 has no altsetting 0 [ 152.324466][ T6159] device bridge_slave_1 entered promiscuous mode [ 152.331449][ T6189] BTRFS info (device loop4): use lzo compression, level 0 [ 152.338641][ T6189] BTRFS info (device loop4): using free space tree [ 152.377301][ T6192] loop2: detected capacity change from 0 to 32768 [ 152.388607][ T6189] BTRFS info (device loop4): has skinny extents [ 152.410600][ T6159] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 152.432832][ T4389] Bluetooth: hci2: command 0x0409 tx timeout [ 152.469606][ T6159] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 152.491499][ T4384] usb 8-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 152.500564][ T4384] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.557082][ T4384] usb 8-1: Product: syz [ 152.568971][ T4384] usb 8-1: Manufacturer: syz [ 152.580549][ T4384] usb 8-1: SerialNumber: syz [ 152.607239][ T4384] usb 8-1: config 0 descriptor?? [ 152.635351][ T6192] XFS (loop2): Mounting V5 Filesystem [ 152.669666][ T6189] BTRFS info (device loop4): enabling ssd optimizations [ 152.682172][ T4384] smsc75xx v1.0.0 [ 152.705502][ T6159] team0: Port device team_slave_0 added [ 152.786287][ T6159] team0: Port device team_slave_1 added [ 152.855110][ T6192] XFS (loop2): Ending clean mount [ 152.987730][ T6159] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 153.020890][ T6159] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 153.055828][ T6159] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 153.075624][ T4169] XFS (loop2): Unmounting Filesystem [ 153.172130][ T6159] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 153.179135][ T6159] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 153.308392][ T6159] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 153.371001][ T4384] smsc75xx 8-1:0.152 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 153.398497][ T4384] smsc75xx 8-1:0.152 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 153.833150][ T6159] device hsr_slave_0 entered promiscuous mode [ 153.840026][ T6159] device hsr_slave_1 entered promiscuous mode [ 153.847652][ T6159] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 153.856199][ T6159] Cannot create hsr debugfs directory [ 153.958435][ T5231] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 154.048039][ T6249] loop2: detected capacity change from 0 to 1024 [ 154.081205][ T4388] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 154.144399][ T6249] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 154.332197][ T4384] smsc75xx 8-1:0.152 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -71 [ 154.344634][ T5231] usb 9-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 154.350839][ T4384] smsc75xx 8-1:0.152 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -71 [ 154.374705][ T5231] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 154.396326][ T5231] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 154.396745][ T4384] smsc75xx 8-1:0.152 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 154.420434][ T5231] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 154.425235][ T4384] smsc75xx: probe of 8-1:0.152 failed with error -71 [ 154.479680][ T4384] usb 8-1: USB disconnect, device number 4 [ 154.492888][ T6256] loop2: detected capacity change from 0 to 8 [ 154.500965][ T21] Bluetooth: hci2: command 0x041b tx timeout [ 154.501177][ T4388] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 154.528911][ T4388] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 154.531391][ T5231] usb 9-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 154.558972][ T5231] usb 9-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 154.567253][ T5231] usb 9-1: Manufacturer: syz [ 154.587524][ T5231] usb 9-1: config 0 descriptor?? [ 154.632221][ T6256] SQUASHFS error: zlib decompression failed, data probably corrupt [ 154.649193][ T6256] SQUASHFS error: Failed to read block 0x9b: -5 [ 154.657202][ T6256] SQUASHFS error: Unable to read metadata cache entry [99] [ 154.673757][ T6256] SQUASHFS error: Unable to read inode 0x127 [ 154.759125][ T4388] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 154.771646][ T6159] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 154.785711][ T4388] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.794064][ T4388] usb 5-1: Product: syz [ 154.799186][ T4388] usb 5-1: Manufacturer: syz [ 154.804149][ T4388] usb 5-1: SerialNumber: syz [ 154.817222][ T6159] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 154.831548][ T6256] loop2: detected capacity change from 0 to 512 [ 154.851764][ T4388] cdc_acm: probe of 5-1:1.0 failed with error -22 [ 154.875399][ T6159] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 154.927452][ T6159] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 154.956069][ T6256] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,auto_da_alloc,minixdf,,errors=continue. Quota mode: writeback. [ 155.012141][ T5066] device hsr_slave_0 left promiscuous mode [ 155.031256][ T6256] ext4 filesystem being mounted at /95/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 155.047299][ T5066] device hsr_slave_1 left promiscuous mode [ 155.054749][ T5066] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 155.062953][ T5066] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 155.071264][ T5066] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 155.079191][ T5066] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 155.087512][ T5066] device bridge_slave_1 left promiscuous mode [ 155.094231][ T5066] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.103421][ T5066] device bridge_slave_0 left promiscuous mode [ 155.109794][ T5066] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.161105][ T13] usb 5-1: USB disconnect, device number 8 [ 155.178431][ T5066] device veth1_macvtap left promiscuous mode [ 155.193422][ T5066] device veth0_macvtap left promiscuous mode [ 155.210591][ T5066] device veth1_vlan left promiscuous mode [ 155.237849][ T5066] device veth0_vlan left promiscuous mode [ 155.666795][ T5066] team0 (unregistering): Port device team_slave_1 removed [ 155.756953][ T5066] team0 (unregistering): Port device team_slave_0 removed [ 155.810894][ T5066] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 155.921953][ T5066] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 155.990774][ C1] sched: RT throttling activated [ 155.993469][ T5231] appleir 0003:05AC:8243.0004: unknown main item tag 0x0 [ 156.007888][ T5231] appleir 0003:05AC:8243.0004: No inputs registered, leaving [ 156.032601][ T6269] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 156.414471][ T5066] bond0 (unregistering): Released all slaves [ 156.907601][ T6265] loop7: detected capacity change from 0 to 262144 [ 156.927655][ T4246] Bluetooth: hci2: command 0x040f tx timeout [ 156.937747][ T5231] appleir 0003:05AC:8243.0004: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.8-1/input0 [ 156.954966][ T5231] usb 9-1: USB disconnect, device number 2 [ 156.961020][ T6265] BTRFS: device fsid 7e32c2af-f87a-45a1-bcba-64dea7c56a53 devid 1 transid 8 /dev/loop7 scanned by syz.7.386 (6265) [ 156.983228][ T6265] BTRFS info (device loop7): using xxhash64 (xxhash64-generic) checksum algorithm [ 156.993014][ T6265] BTRFS info (device loop7): using free space tree [ 156.999773][ T6265] BTRFS info (device loop7): has skinny extents [ 157.006301][ T6265] BTRFS info (device loop7): flagging fs with big metadata feature [ 157.419154][ T6159] 8021q: adding VLAN 0 to HW filter on device bond0 [ 157.441214][ T6265] BTRFS info (device loop7): enabling ssd optimizations [ 157.510600][ T6292] fido_id[6292]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/report_descriptor': No such file or directory [ 157.554090][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 157.578379][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 157.650230][ T6159] 8021q: adding VLAN 0 to HW filter on device team0 [ 157.711460][ T4498] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 157.715716][ T6314] loop4: detected capacity change from 0 to 2048 [ 157.764039][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 157.817632][ T6314] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 157.847259][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 157.925985][ T1234] bridge0: port 1(bridge_slave_0) entered blocking state [ 157.933158][ T1234] bridge0: port 1(bridge_slave_0) entered forwarding state [ 158.010862][ T4498] usb 3-1: Using ep0 maxpacket: 8 [ 158.027402][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 158.093616][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 158.114952][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 158.128129][ T1234] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.135305][ T1234] bridge0: port 2(bridge_slave_1) entered forwarding state [ 158.148642][ T4498] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 158.157749][ T4498] usb 3-1: config 0 has no interface number 0 [ 158.165460][ T4498] usb 3-1: config 0 interface 1 has no altsetting 0 [ 158.174524][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 158.185300][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 158.210278][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 158.285360][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 158.350041][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 158.361273][ T4498] usb 3-1: New USB device found, idVendor=10c4, idProduct=eac1, bcdDevice=70.2f [ 158.377194][ T4498] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.389445][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 158.395673][ T4498] usb 3-1: Product: syz [ 158.409008][ T4498] usb 3-1: Manufacturer: syz [ 158.418227][ T4498] usb 3-1: SerialNumber: syz [ 158.427231][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 158.466206][ T4498] usb 3-1: config 0 descriptor?? [ 158.476320][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 158.490728][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 158.516141][ T6159] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 158.565183][ T6159] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 158.613221][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 158.638587][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 158.746025][ T6327] nbd4: detected capacity change from 0 to 12 [ 158.775220][ T264] block nbd4: Send control failed (result -89) [ 158.776487][ T4498] i2c-cp2615: probe of 3-1:0.1 failed with error -71 [ 158.782589][ T264] block nbd4: Request send failed, requeueing [ 158.790106][ T6329] block nbd4: NBD_DISCONNECT [ 158.799445][ T4181] block nbd4: Receive control failed (result -32) [ 158.805826][ T264] block nbd4: Dead connection, failed to find a fallback [ 158.813119][ T264] block nbd4: shutting down sockets [ 158.819557][ T264] blk_update_request: I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 158.831654][ T264] Buffer I/O error on dev nbd4, logical block 0, async page read [ 158.838119][ T4498] usb 3-1: USB disconnect, device number 7 [ 158.846263][ T150] blk_update_request: I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 158.857195][ T150] Buffer I/O error on dev nbd4, logical block 0, async page read [ 158.865805][ T150] blk_update_request: I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 158.876886][ T150] Buffer I/O error on dev nbd4, logical block 0, async page read [ 158.879330][ T6329] block nbd4: Send disconnect failed -89 [ 158.943445][ T150] blk_update_request: I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 158.954533][ T150] Buffer I/O error on dev nbd4, logical block 0, async page read [ 158.963280][ T150] blk_update_request: I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 158.974216][ T150] Buffer I/O error on dev nbd4, logical block 0, async page read [ 158.982437][ T150] blk_update_request: I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 158.993423][ T150] Buffer I/O error on dev nbd4, logical block 0, async page read [ 159.001519][ T150] blk_update_request: I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 159.012415][ T150] Buffer I/O error on dev nbd4, logical block 0, async page read [ 159.020410][ T150] blk_update_request: I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 159.031713][ T150] Buffer I/O error on dev nbd4, logical block 0, async page read [ 159.042366][ T4163] ldm_validate_partition_table(): Disk read failed. [ 159.049509][ T150] blk_update_request: I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 159.060419][ T150] Buffer I/O error on dev nbd4, logical block 0, async page read [ 159.083429][ T264] blk_update_request: I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 159.094759][ T264] Buffer I/O error on dev nbd4, logical block 0, async page read [ 159.112690][ T4163] Dev nbd4: unable to read RDB block 0 [ 159.120459][ T6332] Bluetooth: hci2: command 0x0419 tx timeout [ 159.166592][ T4163] nbd4: unable to read partition table [ 159.195278][ T4163] nbd4: partition table beyond EOD, truncated [ 159.227760][ T6330] ldm_validate_partition_table(): Disk read failed. [ 159.256654][ T6330] Dev nbd4: unable to read RDB block 0 [ 159.278573][ T6330] nbd4: unable to read partition table [ 159.293096][ T6330] nbd4: partition table beyond EOD, truncated [ 159.312050][ T4163] ldm_validate_partition_table(): Disk read failed. [ 159.330694][ T4163] Dev nbd4: unable to read RDB block 0 [ 159.344666][ T4163] nbd4: unable to read partition table [ 159.364148][ T4163] nbd4: partition table beyond EOD, truncated [ 159.417684][ T6344] loop7: detected capacity change from 0 to 512 [ 159.458908][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 159.481741][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 159.530793][ T6159] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 159.553902][ T6344] EXT4-fs error (device loop7): ext4_orphan_get:1401: inode #15: comm syz.7.405: casefold flag without casefold feature [ 159.645042][ T6344] EXT4-fs error (device loop7): ext4_orphan_get:1406: comm syz.7.405: couldn't read orphan inode 15 (err -117) [ 159.683729][ T6344] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 159.881310][ T4384] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 160.134201][ T4384] usb 5-1: Using ep0 maxpacket: 16 [ 160.341057][ T4384] usb 5-1: unable to get BOS descriptor or descriptor too short [ 160.353040][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 160.377275][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 160.441278][ T4384] usb 5-1: config 11 has an invalid interface number: 10 but max is 0 [ 160.449593][ T4384] usb 5-1: config 11 has no interface number 0 [ 160.461573][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 160.471103][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 160.479709][ T4384] usb 5-1: config 11 interface 10 has no altsetting 0 [ 160.503643][ T6159] device veth0_vlan entered promiscuous mode [ 160.512192][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 160.531109][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 160.557080][ T6159] device veth1_vlan entered promiscuous mode [ 160.603288][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 160.622282][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 160.636137][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 160.661723][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 160.678988][ T4384] usb 5-1: New USB device found, idVendor=0f3d, idProduct=68a3, bcdDevice=f9.72 [ 160.703188][ T6159] device veth0_macvtap entered promiscuous mode [ 160.709805][ T4384] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.740059][ T4384] usb 5-1: Product: syz [ 160.751076][ T6159] device veth1_macvtap entered promiscuous mode [ 160.758749][ T4384] usb 5-1: Manufacturer: syz [ 160.773404][ T4384] usb 5-1: SerialNumber: syz [ 160.810479][ T6159] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 160.854725][ T6159] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.881902][ T6159] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 160.920844][ T6159] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.950812][ T6159] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 160.983768][ T6159] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.011259][ T6159] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 161.048295][ T6159] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.082537][ T6159] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 161.101984][ T162] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 161.136306][ T162] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 161.161704][ T6375] loop8: detected capacity change from 0 to 8 [ 161.172021][ T4384] usb 5-1: Expected 3 endpoints, found: 0 [ 161.173495][ T162] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 161.201697][ T4384] usb 5-1: USB disconnect, device number 9 [ 161.216484][ T162] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 161.247807][ T6377] TCP: request_sock_subflow_v6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 161.270115][ T6159] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 161.305848][ T6159] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.341341][ T6159] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 161.368161][ T6159] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.392280][ T6159] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 161.403904][ T6159] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.414396][ T6159] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 161.425607][ T6159] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.429511][ T6375] SQUASHFS error: Unable to read directory block [631:72] [ 161.438209][ T6159] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 161.452301][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 161.461724][ T6375] SQUASHFS error: Unable to read directory block [631:72] [ 161.471605][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 161.503561][ T6159] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.531036][ T6159] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.539809][ T6159] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.571044][ T6159] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.646374][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805ea9b000: rx timeout, send abort [ 161.666978][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88805ea9b000: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 161.794000][ T6386] loop4: detected capacity change from 0 to 128 [ 161.808578][ T6382] loop7: detected capacity change from 0 to 4096 [ 161.838717][ T162] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 161.856717][ T6386] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 161.880384][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 161.899979][ T162] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 161.913996][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 161.970124][ T162] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 161.998547][ T6388] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 162.049790][ T162] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 162.104346][ T6389] UDF-fs: error (device loop4): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 162.187765][ T6386] UDF-fs: error (device loop4): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 162.537002][ T6399] loop4: detected capacity change from 0 to 512 [ 162.609976][ T6402] netlink: 24 bytes leftover after parsing attributes in process `syz.7.421'. [ 162.997914][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805ea98400: rx timeout, send abort [ 163.006508][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88805ea98400: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 163.298464][ T5066] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.600978][ T21] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 163.733913][ T5066] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.850844][ T21] usb 3-1: Using ep0 maxpacket: 16 [ 163.971292][ T21] usb 3-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 163.980570][ T21] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.027474][ T21] usb 3-1: config 0 descriptor?? [ 164.036242][ T5066] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.093371][ T21] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 164.138394][ T5066] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.146026][ T6433] loop4: detected capacity change from 0 to 32768 [ 164.185884][ T6433] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.434 (6433) [ 164.199562][ T6429] loop8: detected capacity change from 0 to 32768 [ 164.277698][ T6433] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 164.358264][ T6433] BTRFS info (device loop4): setting nodatacow, compression disabled [ 164.371212][ T6433] BTRFS info (device loop4): turning on flush-on-commit [ 164.378236][ T6433] BTRFS info (device loop4): setting datacow [ 164.421675][ T6433] BTRFS info (device loop4): doing ref verification [ 164.435265][ T6433] BTRFS info (device loop4): force clearing of disk cache [ 164.488532][ T6433] BTRFS info (device loop4): turning off barriers [ 164.500203][ T6435] chnl_net:caif_netlink_parms(): no params data found [ 164.526974][ T6433] BTRFS info (device loop4): enabling ssd optimizations [ 164.550977][ T6433] BTRFS info (device loop4): using spread ssd allocation scheme [ 164.589307][ T6433] BTRFS info (device loop4): not using ssd optimizations [ 164.617714][ T6433] BTRFS info (device loop4): not using spread ssd allocation scheme [ 164.678139][ T6433] BTRFS info (device loop4): using free space tree [ 164.735161][ T6433] BTRFS info (device loop4): has skinny extents [ 164.968735][ T6433] BTRFS info (device loop4): clearing free space tree [ 165.021755][ T6433] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 165.050572][ T6433] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 165.051315][ T6435] bridge0: port 1(bridge_slave_0) entered blocking state [ 165.068249][ T6435] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.076996][ T6435] device bridge_slave_0 entered promiscuous mode [ 165.112769][ T6433] BTRFS info (device loop4): creating free space tree [ 165.126219][ T6433] BTRFS info (device loop4): setting compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 165.139274][ T6435] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.147461][ T6433] BTRFS info (device loop4): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 165.158261][ T6435] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.167272][ T6435] device bridge_slave_1 entered promiscuous mode [ 165.237061][ T6444] loop8: detected capacity change from 0 to 40427 [ 165.276002][ T26] kauditd_printk_skb: 16 callbacks suppressed [ 165.276019][ T26] audit: type=1804 audit(1751442125.344:75): pid=6433 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.434" name="/newroot/120/bus/bus" dev="loop4" ino=263 res=1 errno=0 [ 165.316481][ T6435] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 165.385300][ T6435] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 165.408755][ T6444] F2FS-fs (loop8): Found nat_bits in checkpoint [ 165.594474][ T6444] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 165.701160][ T5056] Bluetooth: hci2: command 0x0409 tx timeout [ 165.746574][ T6440] loop7: detected capacity change from 0 to 65536 [ 165.891243][ T21] gspca_sonixj: i2c_w8 err -71 [ 165.922441][ T21] sonixj: probe of 3-1:0.0 failed with error -71 [ 165.936637][ T21] usb 3-1: USB disconnect, device number 8 [ 166.027671][ T6435] team0: Port device team_slave_0 added [ 166.065697][ T6444] overlayfs: failed to resolve './file0': -2 [ 166.079947][ T6435] team0: Port device team_slave_1 added [ 166.106254][ T6440] XFS (loop7): Mounting V5 Filesystem [ 166.213926][ T5687] attempt to access beyond end of device [ 166.213926][ T5687] loop8: rw=2049, want=45112, limit=40427 [ 166.230724][ T6435] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 166.258744][ T6440] XFS (loop7): Ending clean mount [ 166.272517][ T6440] XFS (loop7): Quotacheck needed: Please wait. [ 166.290818][ T6435] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 166.316972][ C0] vkms_vblank_simulate: vblank timer overrun [ 166.380587][ T6440] XFS (loop7): Quotacheck: Done. [ 166.410692][ T6435] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 166.445587][ T26] audit: type=1800 audit(1751442126.514:76): pid=6440 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.437" name="file1" dev="loop7" ino=43 res=0 errno=0 [ 166.585240][ T6435] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 166.611219][ T6435] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 166.722609][ T6435] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 166.739958][ T4888] XFS (loop7): Unmounting Filesystem [ 166.986997][ T6435] device hsr_slave_0 entered promiscuous mode [ 167.003638][ T6435] device hsr_slave_1 entered promiscuous mode [ 167.019910][ T6435] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 167.029954][ T6435] Cannot create hsr debugfs directory [ 167.725918][ T5066] device hsr_slave_0 left promiscuous mode [ 167.740640][ T5066] device hsr_slave_1 left promiscuous mode [ 167.777323][ T5066] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 167.785604][ T5056] Bluetooth: hci2: command 0x041b tx timeout [ 167.829218][ T5066] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 167.841693][ T5066] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 167.867323][ T5066] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 167.884107][ T5066] device bridge_slave_1 left promiscuous mode [ 167.890609][ T5066] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.963511][ T5066] device bridge_slave_0 left promiscuous mode [ 167.976988][ T4667] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 167.995644][ T5066] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.075377][ T5066] device veth1_macvtap left promiscuous mode [ 168.091255][ T5066] device veth0_macvtap left promiscuous mode [ 168.114458][ T5066] device veth1_vlan left promiscuous mode [ 168.151641][ T5066] device veth0_vlan left promiscuous mode [ 168.350933][ T4667] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 168.377872][ T4667] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 168.388921][ T4667] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 168.400871][ T4388] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 168.405786][ T4667] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.430972][ T4667] usb 3-1: config 0 descriptor?? [ 168.495574][ T6510] loop4: detected capacity change from 0 to 40427 [ 168.558923][ T6510] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 168.578197][ T6510] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 168.615996][ T6510] F2FS-fs (loop4): Found nat_bits in checkpoint [ 168.661275][ T4388] usb 9-1: Using ep0 maxpacket: 16 [ 168.685585][ T6510] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 168.693155][ T6510] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 168.767978][ T5066] team0 (unregistering): Port device team_slave_1 removed [ 168.827457][ T5066] team0 (unregistering): Port device team_slave_0 removed [ 168.856160][ T5066] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 168.917774][ T5066] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 169.013689][ T4388] usb 9-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 169.026086][ T4388] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.036055][ T4388] usb 9-1: Product: syz [ 169.046131][ T4388] usb 9-1: Manufacturer: syz [ 169.053523][ T4388] usb 9-1: SerialNumber: syz [ 169.079832][ T4388] usb 9-1: config 0 descriptor?? [ 169.124812][ T5066] bond0 (unregistering): Released all slaves [ 169.164652][ T4177] attempt to access beyond end of device [ 169.164652][ T4177] loop4: rw=2051, want=53248, limit=40427 [ 169.186222][ T4177] attempt to access beyond end of device [ 169.186222][ T4177] loop4: rw=2051, want=73728, limit=40427 [ 169.199070][ T4177] F2FS-fs (loop4): Issue discard(6144, 6144, 512) failed, ret: -5 [ 169.199122][ T4177] F2FS-fs (loop4): Issue discard(7168, 7168, 2048) failed, ret: -5 [ 169.220177][ T6519] netlink: 'syz.7.453': attribute type 2 has an invalid length. [ 169.246014][ T6519] netlink: 'syz.7.453': attribute type 4 has an invalid length. [ 169.259719][ T6519] netlink: 'syz.7.453': attribute type 8 has an invalid length. [ 169.271056][ T6519] netlink: 'syz.7.453': attribute type 9 has an invalid length. [ 169.278930][ T6519] netlink: 'syz.7.453': attribute type 10 has an invalid length. [ 169.293634][ T6519] netlink: 4 bytes leftover after parsing attributes in process `syz.7.453'. [ 169.552862][ T4388] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 169.632703][ T4388] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 169.662586][ T6435] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 169.704239][ T4388] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 169.722762][ T6435] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 169.744356][ T4388] usb 9-1: media controller created [ 169.753645][ T6517] dtv5100: wlen = 0, aborting. [ 169.762737][ T6533] loop7: detected capacity change from 0 to 2048 [ 169.783148][ T4388] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 169.802897][ T6435] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 169.833958][ T6435] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 169.854143][ T4667] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.0005/input/input9 [ 169.885905][ T5056] Bluetooth: hci2: command 0x040f tx timeout [ 169.901191][ T4388] zl10353_read_register: readreg error (reg=127, ret==0) [ 169.919238][ T6533] EXT4-fs (loop7): mounted filesystem without journal. Opts: min_batch_time=0x000000000000000d,mb_optimize_scan=0x0000000000000001,noblock_validity,,errors=continue. Quota mode: none. [ 169.930657][ T4388] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 169.952755][ T21] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 169.953512][ T4388] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 169.974700][ T4667] uclogic 0003:256C:006D.0005: input,hidraw0: USB HID v0.00 Device [HID 256c:006d] on usb-dummy_hcd.2-1/input0 [ 170.050997][ T4667] usb 3-1: USB disconnect, device number 9 [ 170.065944][ T4388] usb 9-1: USB disconnect, device number 3 [ 170.101343][ T6533] loop_set_status: loop7 () has still dirty pages (nrpages=2) [ 170.239780][ T4388] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 170.240593][ T6435] 8021q: adding VLAN 0 to HW filter on device bond0 [ 170.257164][ T6543] fido_id[6543]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 170.272294][ T6533] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 170.312409][ T21] usb 5-1: config 135 has an invalid interface number: 230 but max is 0 [ 170.351471][ T21] usb 5-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config [ 170.371232][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 170.387908][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 170.406721][ T21] usb 5-1: config 135 has no interface number 0 [ 170.449756][ T6435] 8021q: adding VLAN 0 to HW filter on device team0 [ 170.459688][ T21] usb 5-1: config 135 interface 230 has no altsetting 0 [ 170.496981][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 170.516983][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 170.537501][ T4261] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.544686][ T4261] bridge0: port 1(bridge_slave_0) entered forwarding state [ 170.579728][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 170.629995][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 170.655084][ T21] usb 5-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a [ 170.691885][ T21] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.702085][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 170.730563][ T21] usb 5-1: Product: syz [ 170.741626][ T1234] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.748782][ T1234] bridge0: port 2(bridge_slave_1) entered forwarding state [ 170.766510][ T21] usb 5-1: Manufacturer: syz [ 170.780494][ T21] usb 5-1: SerialNumber: syz [ 170.790538][ T6553] loop8: detected capacity change from 0 to 512 [ 170.820628][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 170.837273][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 170.867010][ T6553] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 170.893764][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 170.931990][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 170.955079][ T6553] EXT4-fs (loop8): 1 truncate cleaned up [ 170.977819][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 170.989963][ T6553] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 171.041416][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 171.114470][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 171.165577][ T6562] loop2: detected capacity change from 0 to 64 [ 171.182896][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 171.242492][ T6435] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 171.278220][ T6553] EXT4-fs error (device loop8): ext4_map_blocks:629: inode #2: block 13: comm syz.8.461: lblock 0 mapped to illegal pblock 13 (length 1) [ 171.292493][ T6435] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 171.330562][ T4285] usb 5-1: USB disconnect, device number 10 [ 171.340669][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 171.363285][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 171.385848][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 171.446490][ T6562] MINIX-fs: bad superblock or unable to read bitmaps [ 171.457757][ T5687] EXT4-fs error (device loop8): ext4_map_blocks:629: inode #2: block 13: comm syz-executor: lblock 0 mapped to illegal pblock 13 (length 1) [ 171.574079][ T5687] EXT4-fs warning (device loop8): htree_dirblock_to_tree:1083: inode #2: lblock 0: comm syz-executor: error -117 reading directory block [ 171.652052][ T5687] EXT4-fs error (device loop8): __ext4_get_inode_loc:4321: comm syz-executor: Invalid inode table block 4097309278 in block_group 0 [ 171.709669][ T5687] EXT4-fs error (device loop8) in ext4_reserve_inode_write:5836: Corrupt filesystem [ 171.730156][ T5687] EXT4-fs error (device loop8): ext4_dirty_inode:6040: inode #2: comm syz-executor: mark_inode_dirty error [ 171.818265][ T4319] EXT4-fs error (device loop8): __ext4_get_inode_loc:4321: comm kworker/u4:6: Invalid inode table block 4097309278 in block_group 0 [ 171.915211][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 171.941238][ T4285] Bluetooth: hci2: command 0x0419 tx timeout [ 171.948462][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 171.985894][ T6435] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 172.010556][ T6581] netlink: 24 bytes leftover after parsing attributes in process `syz.2.470'. [ 172.110967][ T4499] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 172.413543][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 172.428491][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 172.479781][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 172.496213][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 172.515158][ C1] af_packet: tpacket_rcv: packet too big, clamped from 28 to 4294967272. macoff=96 [ 172.531188][ T4499] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 172.554436][ T4499] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 172.576522][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 172.595407][ T4499] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 172.607331][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 172.626249][ T6435] device veth0_vlan entered promiscuous mode [ 172.638207][ T4499] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 172.657894][ T6435] device veth1_vlan entered promiscuous mode [ 172.669267][ T4499] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.707071][ T4499] usb 8-1: config 0 descriptor?? [ 172.716892][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 172.729864][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 172.755316][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 172.773324][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 172.794232][ T6435] device veth0_macvtap entered promiscuous mode [ 172.812827][ T6435] device veth1_macvtap entered promiscuous mode [ 172.868408][ T6435] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 172.924757][ T6598] loop4: detected capacity change from 0 to 2048 [ 172.961479][ T6435] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.976489][ T6435] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 172.988109][ T6435] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.998604][ T6435] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 173.009668][ T6435] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.020648][ T6435] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 173.034557][ T6435] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.047399][ T6435] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 173.101314][ T6598] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 173.118872][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 173.138793][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 173.164024][ T6600] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 173.189917][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 173.205207][ T4499] plantronics 0003:047F:FFFF.0006: No inputs registered, leaving [ 173.213429][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 173.231188][ T6435] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 173.247196][ T4499] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0 [ 173.266296][ T6435] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.278997][ T6435] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 173.293976][ T6435] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.310289][ T6435] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 173.326594][ T6435] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.340219][ T6435] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 173.351519][ T6435] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.364078][ T6435] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 173.372140][ T6601] netlink: 4 bytes leftover after parsing attributes in process `syz.2.476'. [ 173.420340][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 173.438735][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 173.462575][ T6435] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.488598][ T6435] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.520695][ T6435] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.558655][ T6435] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.568839][ C0] plantronics 0003:047F:FFFF.0006: hid_field_extract() called with n (132) > 32! (syz-executor) [ 173.783569][ T4496] usb 8-1: USB disconnect, device number 5 [ 173.805253][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 173.843133][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 173.927778][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 173.954765][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 173.986077][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 174.016657][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 174.187458][ T6614] tipc: Started in network mode [ 174.206380][ T6614] tipc: Node identity ac141425, cluster identity 4711 [ 174.243440][ T6614] tipc: New replicast peer: 0.0.0.0 [ 174.254393][ T6614] tipc: Enabled bearer , priority 10 [ 174.404199][ T154] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.434214][ T6616] tipc: New replicast peer: 10.1.1.0 [ 174.441062][ T6619] netlink: 12 bytes leftover after parsing attributes in process `syz.7.482'. [ 174.579465][ T154] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.752220][ T6632] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 174.784381][ T26] audit: type=1326 audit(1751442134.854:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6631 comm="syz.4.487" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1c07dbc929 code=0x0 [ 174.836345][ T6632] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 174.906230][ T154] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.942867][ T6595] chnl_net:caif_netlink_parms(): no params data found [ 174.981179][ T5056] Bluetooth: hci4: command 0x0409 tx timeout [ 175.044103][ T154] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.074342][ T6646] loop2: detected capacity change from 0 to 512 [ 175.149965][ T6595] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.162815][ T6595] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.166191][ T6646] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 175.176269][ T6595] device bridge_slave_0 entered promiscuous mode [ 175.189915][ T6646] ext4 filesystem being mounted at /116/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 175.213800][ T6595] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.231059][ T26] audit: type=1800 audit(1751442135.304:78): pid=6646 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.491" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 175.243465][ T6595] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.266115][ T26] audit: type=1800 audit(1751442135.324:79): pid=6646 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.491" name="file2" dev="loop2" ino=16 res=0 errno=0 [ 175.266495][ T6646] [ 175.289232][ T6646] ====================================================== [ 175.296716][ T6646] WARNING: possible circular locking dependency detected [ 175.304368][ T6646] 5.15.186-syzkaller #0 Not tainted [ 175.309899][ T6646] ------------------------------------------------------ [ 175.317029][ T6646] syz.2.491/6646 is trying to acquire lock: [ 175.322936][ T6646] ffff888074b1c268 (&dquot->dq_lock){+.+.}-{3:3}, at: dquot_commit+0x5a/0x410 [ 175.332058][ T6646] [ 175.332058][ T6646] but task is already holding lock: [ 175.339457][ T6646] ffff88805fb95c30 (&ei->i_data_sem/2){++++}-{3:3}, at: ext4_map_blocks+0x8b2/0x1b30 [ 175.348998][ T6646] [ 175.348998][ T6646] which lock already depends on the new lock. [ 175.348998][ T6646] [ 175.354040][ T6595] device bridge_slave_1 entered promiscuous mode [ 175.359519][ T6646] [ 175.359519][ T6646] the existing dependency chain (in reverse order) is: [ 175.359529][ T6646] [ 175.359529][ T6646] -> #2 (&ei->i_data_sem/2){++++}-{3:3} [ 175.367542][ T5056] tipc: Node number set to 2886997029 [ 175.375367][ T6646] : [ 175.375377][ T6646] down_read+0x44/0x2e0 [ 175.375404][ T6646] ext4_map_blocks+0x32f/0x1b30 [ 175.375425][ T6646] ext4_getblk+0x16d/0x630 [ 175.375443][ T6646] ext4_bread+0x26/0x180 [ 175.375459][ T6646] ext4_quota_write+0x230/0x570 [ 175.375479][ T6646] get_free_dqblk+0x387/0x7d0 [ 175.375496][ T6646] do_insert_tree+0x214/0x1970 [ 175.375513][ T6646] do_insert_tree+0x5b1/0x1970 [ 175.375529][ T6646] do_insert_tree+0x5b1/0x1970 [ 175.375545][ T6646] do_insert_tree+0x5b1/0x1970 [ 175.375561][ T6646] qtree_write_dquot+0x361/0x4b0 [ 175.375577][ T6646] v2_write_dquot+0x108/0x190 [ 175.375593][ T6646] dquot_acquire+0x2d5/0x520 [ 175.375613][ T6646] ext4_acquire_dquot+0x2d9/0x4a0 [ 175.375634][ T6646] dqget+0x778/0xeb0 [ 175.375653][ T6646] __dquot_initialize+0x328/0xcb0 [ 175.375674][ T6646] add_dquot_ref+0x2b4/0x380 [ 175.375695][ T6646] dquot_load_quota_sb+0x875/0xac0 [ 175.375717][ T6646] dquot_load_quota_inode+0x2d8/0x5d0 [ 175.375739][ T6646] ext4_enable_quotas+0x4ab/0xb50 [ 175.375758][ T6646] ext4_remount+0x1a10/0x2690 [ 175.375779][ T6646] reconfigure_super+0x219/0x880 [ 175.375800][ T6646] vfs_fsconfig_locked+0x18d/0x3f0 [ 175.375817][ T6646] __se_sys_fsconfig+0x61b/0x750 [ 175.375835][ T6646] do_syscall_64+0x4c/0xa0 [ 175.375854][ T6646] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 175.533258][ T6646] [ 175.533258][ T6646] -> #1 (&s->s_dquot.dqio_sem){++++}-{3:3}: [ 175.541347][ T6646] down_read+0x44/0x2e0 [ 175.546384][ T6646] v2_read_dquot+0x4a/0x110 [ 175.551547][ T6646] dquot_acquire+0x152/0x520 [ 175.556794][ T6646] ext4_acquire_dquot+0x2d9/0x4a0 [ 175.562478][ T6646] dqget+0x778/0xeb0 [ 175.567059][ T6646] __dquot_initialize+0x3b6/0xcb0 [ 175.572647][ T6646] ext4_create+0x8c/0x460 [ 175.577537][ T6646] path_openat+0x11e1/0x2f30 [ 175.582695][ T6646] do_filp_open+0x1b3/0x3e0 [ 175.587761][ T6646] do_sys_openat2+0x142/0x4a0 [ 175.592988][ T6646] __x64_sys_creat+0x8c/0xb0 [ 175.598121][ T6646] do_syscall_64+0x4c/0xa0 [ 175.603077][ T6646] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 175.609600][ T6646] [ 175.609600][ T6646] -> #0 (&dquot->dq_lock){+.+.}-{3:3}: [ 175.617485][ T6646] __lock_acquire+0x2c33/0x7c60 [ 175.623141][ T6646] lock_acquire+0x197/0x3f0 [ 175.628195][ T6646] __mutex_lock_common+0x1eb/0x2390 [ 175.633933][ T6646] mutex_lock_nested+0x17/0x20 [ 175.639291][ T6646] dquot_commit+0x5a/0x410 [ 175.644257][ T6646] ext4_write_dquot+0x1f0/0x360 [ 175.649641][ T6646] mark_all_dquot_dirty+0xf9/0x400 [ 175.655282][ T6646] __dquot_alloc_space+0x5d0/0xe20 [ 175.660928][ T6646] ext4_mb_new_blocks+0xf68/0x4940 [ 175.667465][ T6646] ext4_ext_map_blocks+0x146f/0x64e0 [ 175.673300][ T6646] ext4_map_blocks+0x981/0x1b30 [ 175.678681][ T6646] ext4_alloc_file_blocks+0x370/0xb50 [ 175.684585][ T6646] ext4_fallocate+0x999/0x1ee0 [ 175.689985][ T6646] vfs_fallocate+0x587/0x6f0 [ 175.695107][ T6646] __x64_sys_fallocate+0xbd/0x100 [ 175.700661][ T6646] do_syscall_64+0x4c/0xa0 [ 175.705607][ T6646] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 175.712120][ T6646] [ 175.712120][ T6646] other info that might help us debug this: [ 175.712120][ T6646] [ 175.722347][ T6646] Chain exists of: [ 175.722347][ T6646] &dquot->dq_lock --> &s->s_dquot.dqio_sem --> &ei->i_data_sem/2 [ 175.722347][ T6646] [ 175.736089][ T6646] Possible unsafe locking scenario: [ 175.736089][ T6646] [ 175.743631][ T6646] CPU0 CPU1 [ 175.749147][ T6646] ---- ---- [ 175.754618][ T6646] lock(&ei->i_data_sem/2); [ 175.759245][ T6646] lock(&s->s_dquot.dqio_sem); [ 175.766891][ T6646] lock(&ei->i_data_sem/2); [ 175.774069][ T6646] lock(&dquot->dq_lock); [ 175.778503][ T6646] [ 175.778503][ T6646] *** DEADLOCK *** [ 175.778503][ T6646] [ 175.786652][ T6646] 4 locks held by syz.2.491/6646: [ 175.791938][ T6646] #0: ffff888062cc2460 (sb_writers#5){.+.+}-{0:0}, at: vfs_fallocate+0x4f4/0x6f0 [ 175.801264][ T6646] #1: ffff88805fb95da8 (&sb->s_type->i_mutex_key#9){++++}-{3:3}, at: ext4_fallocate+0x21c/0x1ee0 [ 175.812034][ T6646] #2: ffff88805fb95c30 (&ei->i_data_sem/2){++++}-{3:3}, at: ext4_map_blocks+0x8b2/0x1b30 [ 175.822242][ T6646] #3: ffffffff8c23fd98 (dquot_srcu){....}-{0:0}, at: rcu_lock_acquire+0x5/0x30 [ 175.831718][ T6646] [ 175.831718][ T6646] stack backtrace: [ 175.837834][ T6646] CPU: 0 PID: 6646 Comm: syz.2.491 Not tainted 5.15.186-syzkaller #0 [ 175.846442][ T6646] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 175.856701][ T6646] Call Trace: [ 175.860006][ T6646] [ 175.862956][ T6646] dump_stack_lvl+0x168/0x230 [ 175.867672][ T6646] ? load_image+0x3b0/0x3b0 [ 175.872202][ T6646] ? show_regs_print_info+0x20/0x20 [ 175.877550][ T6646] ? print_circular_bug+0x12b/0x1a0 [ 175.882766][ T6646] check_noncircular+0x274/0x310 [ 175.887721][ T6646] ? add_chain_block+0x940/0x940 [ 175.892883][ T6646] ? lockdep_lock+0xdc/0x1e0 [ 175.897623][ T6646] ? mark_lock+0x94/0x320 [ 175.902049][ T6646] __lock_acquire+0x2c33/0x7c60 [ 175.907521][ T6646] ? hlock_conflict+0x59/0x1f0 [ 175.912411][ T6646] ? check_noncircular+0x16f/0x310 [ 175.918072][ T6646] ? add_chain_block+0x940/0x940 [ 175.923029][ T6646] ? lockdep_lock+0xdc/0x1e0 [ 175.927637][ T6646] ? verify_lock_unused+0x140/0x140 [ 175.932965][ T6646] ? lockdep_unlock+0x134/0x2d0 [ 175.937836][ T6646] ? lockdep_lock+0x1e0/0x1e0 [ 175.942526][ T6646] ? check_noncircular+0x16f/0x310 [ 175.947679][ T6646] ? mark_lock+0x94/0x320 [ 175.952593][ T6646] ? __lock_acquire+0x13ad/0x7c60 [ 175.957672][ T6646] lock_acquire+0x197/0x3f0 [ 175.962227][ T6646] ? dquot_commit+0x5a/0x410 [ 175.966845][ T6646] ? __might_sleep+0xf0/0xf0 [ 175.971460][ T6646] ? read_lock_is_recursive+0x10/0x10 [ 175.976990][ T6646] ? __lock_acquire+0x289d/0x7c60 [ 175.982036][ T6646] ? dquot_commit+0x5a/0x410 [ 175.986861][ T6646] __mutex_lock_common+0x1eb/0x2390 [ 175.992104][ T6646] ? dquot_commit+0x5a/0x410 [ 175.996733][ T6646] ? __might_sleep+0xf0/0xf0 [ 176.001416][ T6646] ? mutex_lock_io_nested+0x60/0x60 [ 176.006718][ T6646] mutex_lock_nested+0x17/0x20 [ 176.011495][ T6646] dquot_commit+0x5a/0x410 [ 176.015942][ T6646] ? __ext4_journal_start_sb+0x1bd/0x360 [ 176.021775][ T6646] ext4_write_dquot+0x1f0/0x360 [ 176.026658][ T6646] mark_all_dquot_dirty+0xf9/0x400 [ 176.031787][ T6646] __dquot_alloc_space+0x5d0/0xe20 [ 176.037029][ T6646] ext4_mb_new_blocks+0xf68/0x4940 [ 176.042262][ T6646] ? _raw_write_unlock+0x24/0x40 [ 176.047368][ T6646] ? ext4_mb_pa_callback+0xd0/0xd0 [ 176.052510][ T6646] ? ext4_ext_check_overlap+0x31c/0x560 [ 176.058351][ T6646] ? ext4_ext_find_goal+0xed/0x1d0 [ 176.063477][ T6646] ext4_ext_map_blocks+0x146f/0x64e0 [ 176.068982][ T6646] ? ext4_ext_release+0x10/0x10 [ 176.074601][ T6646] ? rwsem_write_trylock+0x12f/0x1b0 [ 176.080448][ T6646] ext4_map_blocks+0x981/0x1b30 [ 176.085474][ T6646] ? __might_sleep+0xf0/0xf0 [ 176.091425][ T6646] ? ext4_issue_zeroout+0x250/0x250 [ 176.097111][ T6646] ? ext4_journal_check_start+0x180/0x250 [ 176.103934][ T6646] ? __ext4_journal_start_sb+0x1bd/0x360 [ 176.109669][ T6646] ? __ext4_journal_stop+0x30/0x190 [ 176.115247][ T6646] ext4_alloc_file_blocks+0x370/0xb50 [ 176.121259][ T6646] ? trace_ext4_fallocate_enter+0x1d0/0x1d0 [ 176.127278][ T6646] ? file_update_time+0x3a2/0x400 [ 176.132814][ T6646] ? file_remove_privs+0x590/0x590 [ 176.138491][ T6646] ? rcu_is_watching+0x11/0xa0 [ 176.143341][ T6646] ext4_fallocate+0x999/0x1ee0 [ 176.148330][ T6646] vfs_fallocate+0x587/0x6f0 [ 176.154582][ T6646] __x64_sys_fallocate+0xbd/0x100 [ 176.159804][ T6646] do_syscall_64+0x4c/0xa0 [ 176.164343][ T6646] ? clear_bhb_loop+0x30/0x80 [ 176.169307][ T6646] ? clear_bhb_loop+0x30/0x80 [ 176.174035][ T6646] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 176.179986][ T6646] RIP: 0033:0x7f1e76efb929 [ 176.184533][ T6646] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 176.204353][ T6646] RSP: 002b:00007f1e74d63038 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 176.212881][ T6646] RAX: ffffffffffffffda RBX: 00007f1e77122fa0 RCX: 00007f1e76efb929 [ 176.220886][ T6646] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006 [ 176.229136][ T6646] RBP: 00007f1e76f7db39 R08: 0000000000000000 R09: 0000000000000000 [ 176.237113][ T6646] R10: 0000000008000c62 R11: 0000000000000246 R12: 0000000000000000 [ 176.245114][ T6646] R13: 0000000000000000 R14: 00007f1e77122fa0 R15: 00007ffdd6ab7f28 [ 176.253274][ T6646] [ 176.256874][ C0] vkms_vblank_simulate: vblank timer overrun [ 176.269558][ T4499] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 176.343525][ T6657] syz.4.492 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 176.343939][ T6595] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 176.375686][ T6595] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 176.442511][ T6595] team0: Port device team_slave_0 added [ 176.459092][ T6595] team0: Port device team_slave_1 added [ 176.478118][ T6595] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 176.485557][ T6595] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 176.512133][ T6595] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 176.528995][ T6595] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 176.537278][ T6595] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 176.563668][ T6595] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 176.571255][ T4499] usb 8-1: Using ep0 maxpacket: 16 [ 176.597118][ T6595] device hsr_slave_0 entered promiscuous mode [ 176.604467][ T6595] device hsr_slave_1 entered promiscuous mode [ 176.611515][ T6595] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 176.619091][ T6595] Cannot create hsr debugfs directory [ 176.701108][ T4499] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 176.712895][ T4499] usb 8-1: config 0 interface 0 has no altsetting 0 [ 176.719574][ T4499] usb 8-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 176.732152][ T6595] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 176.732858][ T4499] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.751799][ T4499] usb 8-1: config 0 descriptor?? [ 176.757131][ T6595] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 176.772428][ T6595] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 176.782638][ T6595] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 176.928785][ T6595] 8021q: adding VLAN 0 to HW filter on device bond0 [ 176.949477][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 176.973443][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 176.991675][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 177.018006][ T6595] 8021q: adding VLAN 0 to HW filter on device team0 [ 177.030602][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 177.051482][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 177.061379][ T4667] Bluetooth: hci4: command 0x041b tx timeout [ 177.068074][ T4319] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.075219][ T4319] bridge0: port 1(bridge_slave_0) entered forwarding state [ 177.086733][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 177.125838][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 177.136130][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 177.149345][ T1234] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.156625][ T1234] bridge0: port 2(bridge_slave_1) entered forwarding state [ 177.169226][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 177.203676][ T5066] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 177.214489][ T6644] udc-core: couldn't find an available UDC or it's busy [ 177.231911][ T5066] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 177.240138][ T6644] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 177.249995][ T5066] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 177.274606][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 177.306358][ T6595] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 177.341737][ T6595] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 177.361655][ T5066] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 177.408032][ T154] device hsr_slave_0 left promiscuous mode [ 177.421272][ T154] device hsr_slave_1 left promiscuous mode [ 177.427954][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 177.438811][ T154] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 177.447609][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 177.458863][ T154] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 177.469060][ T154] device bridge_slave_1 left promiscuous mode [ 177.481889][ T4216] usb 8-1: USB disconnect, device number 6 [ 177.496094][ T154] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.510624][ T154] device bridge_slave_0 left promiscuous mode [ 177.517590][ T154] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.533564][ T154] device veth1_macvtap left promiscuous mode [ 177.539725][ T154] device veth0_macvtap left promiscuous mode [ 177.546725][ T154] device veth1_vlan left promiscuous mode [ 177.553586][ T154] device veth0_vlan left promiscuous mode [ 177.735886][ T154] team0 (unregistering): Port device team_slave_1 removed [ 177.754012][ T154] team0 (unregistering): Port device team_slave_0 removed [ 177.766594][ T154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 177.782879][ T154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 177.872050][ T154] bond0 (unregistering): Released all slaves [ 178.059512][ T5066] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 178.068347][ T5066] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 178.098652][ T6595] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 178.402387][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 178.415248][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 178.445474][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 178.455154][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 178.466144][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 178.474321][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 178.487376][ T6595] device veth0_vlan entered promiscuous mode [ 178.529389][ T6595] device veth1_vlan entered promiscuous mode [ 178.557309][ T5066] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 178.570153][ T5066] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 178.579613][ T5066] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 178.593155][ T5066] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 178.606883][ T6595] device veth0_macvtap entered promiscuous mode [ 178.619499][ T6595] device veth1_macvtap entered promiscuous mode [ 178.640717][ T6595] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 178.656996][ T6595] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.673334][ T6595] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 178.684897][ T6595] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.697624][ T6595] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 178.709688][ T6595] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.723291][ T6595] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 178.750014][ T6595] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.773726][ T6595] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 178.804433][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 178.813495][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 178.841411][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 178.854663][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 178.886142][ T6595] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 178.921124][ T6595] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.951102][ T6595] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 178.980924][ T6595] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.000830][ T6595] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 179.030907][ T6595] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.050890][ T6595] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 179.083014][ T6595] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.094671][ T6595] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 179.110351][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 179.120430][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 179.132023][ T6595] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.141658][ T4245] Bluetooth: hci4: command 0x040f tx timeout [ 179.148549][ T6595] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.157947][ T6595] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.169824][ T6595] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.230019][ T6595] ieee80211 phy27: Selected rate control algorithm 'minstrel_ht' [ 179.277592][ T4319] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 179.291247][ T4319] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 179.299179][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 179.316773][ T6595] ieee80211 phy28: Selected rate control algorithm 'minstrel_ht' [ 179.349161][ T1234] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 179.359554][ T1234] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 179.368238][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 179.390381][ T154] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.448352][ T154] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.506455][ T154] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.565521][ T154] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.472163][ T154] device hsr_slave_0 left promiscuous mode [ 180.479134][ T154] device hsr_slave_1 left promiscuous mode [ 180.489490][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 180.497443][ T154] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 180.510198][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 180.518422][ T154] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 180.532471][ T154] device bridge_slave_1 left promiscuous mode [ 180.538720][ T154] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.551535][ T154] device bridge_slave_0 left promiscuous mode [ 180.557780][ T154] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.572298][ T154] device veth1_macvtap left promiscuous mode [ 180.578606][ T154] device veth0_macvtap left promiscuous mode [ 180.588241][ T154] device veth1_vlan left promiscuous mode [ 180.595216][ T154] device veth0_vlan left promiscuous mode [ 180.822953][ T154] team0 (unregistering): Port device team_slave_1 removed [ 180.838916][ T154] team0 (unregistering): Port device team_slave_0 removed [ 180.858442][ T154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 180.873283][ T154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 180.957761][ T154] bond0 (unregistering): Released all slaves [ 181.232897][ T4216] Bluetooth: hci4: command 0x0419 tx timeout