last executing test programs: 7m53.043959977s ago: executing program 3 (id=6): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x10040c05, &(0x7f0000000300)={0x11, 0x888e, 0x0, 0x1, 0xb, 0x6, @random="0afc8bef4a64"}, 0x14) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20040768, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto(r0, &(0x7f0000000780)='pW', 0x2, 0x24000011, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000700)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba1e9bb7ec30de54e3d82d4e023f9a336ec7e55fefd0d3c8f30eea40e40a6e32d6873837bb90f2fafc91", 0xffffffffffffff29, 0x80, 0x0, 0x0) 7m51.489652842s ago: executing program 3 (id=7): r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000003c0)=@abs, 0x76) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) connect$llc(0xffffffffffffffff, &(0x7f0000000340)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, 0x10) syz_init_net_socket$llc(0x1a, 0x801, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, 0x0) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), r0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)={0x14, r4, 0x301, 0x70bd29, 0x25dfdbfc, {0x24}}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x20004000) 7m48.155969226s ago: executing program 3 (id=9): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket(0x15, 0x5, 0x0) getsockopt(r3, 0x200000000114, 0x2710, &(0x7f000001eec0)=""/102389, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r5 = socket(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) bind$unix(r6, &(0x7f0000000180)=@file={0x1}, 0x6e) socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) gettimeofday(0x0, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) connect$unix(r7, &(0x7f0000000000)=@file={0x1}, 0x6e) close_range(r5, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r4, 0x0, 0x0) 7m46.859341049s ago: executing program 3 (id=11): ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x4) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$userfaultfd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = ioctl$USERFAULTFD_IOC_NEW(r3, 0xaa00) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000240)={0xaa, 0x18}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000001080)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x3}) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000000c0)={0x1fd, 0x1, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @pic={0x8, 0x50, 0x0, 0x1, 0x2, 0x4, 0x6, 0x99, 0xb, 0x4, 0x7, 0x3, 0xd1, 0x5, 0x8, 0x5}}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000000)={[0x6e, 0x0, 0x0, 0x20, 0x3, 0x0, 0x106c, 0x80000001, 0x8000000000000, 0x80000004000080, 0x0, 0x8, 0x0, 0x4, 0x9, 0x8001], 0x1, 0x3c4210}) ioctl$KVM_RUN(r5, 0xae80, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 7m42.0874266s ago: executing program 3 (id=16): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0) mknodat$loop(r1, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000003400), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) truncate(&(0x7f0000000000)='./file0\x00', 0x27) read$FUSE(r2, &(0x7f0000001280)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000001200)={0x50, 0x0, r3, {0x7, 0x2b, 0x4, 0x220c00c0, 0x3, 0x80, 0x0, 0xd8000000, 0x0, 0x0, 0x83}}, 0x50) read$FUSE(r2, &(0x7f0000004340)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r2, &(0x7f0000000200)={0x10, 0xffffffffffffffda, r4}, 0x10) 7m40.240911896s ago: executing program 3 (id=19): socket$can_bcm(0x1d, 0x2, 0x2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'tunl0\x00'}) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x48) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(0xffffffffffffffff, 0x3b87, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0x0, 0xffffffff}, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f00006ef000/0x4000)=nil, 0x4000, 0x9, 0x10, 0xffffffffffffffff, 0x8000000) syz_open_dev$vim2m(&(0x7f0000000200), 0x3, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, r2, 0x1, 0x70bd27, 0x25dfdbfb}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x880) r3 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCGPGRP(r3, 0x540f, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x185802, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendfile(r4, r4, 0x0, 0x200000) 7m24.519668462s ago: executing program 32 (id=19): socket$can_bcm(0x1d, 0x2, 0x2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'tunl0\x00'}) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x48) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(0xffffffffffffffff, 0x3b87, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0x0, 0xffffffff}, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f00006ef000/0x4000)=nil, 0x4000, 0x9, 0x10, 0xffffffffffffffff, 0x8000000) syz_open_dev$vim2m(&(0x7f0000000200), 0x3, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, r2, 0x1, 0x70bd27, 0x25dfdbfb}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x880) r3 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCGPGRP(r3, 0x540f, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x185802, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendfile(r4, r4, 0x0, 0x200000) 6m56.685975176s ago: executing program 2 (id=68): socket(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a44, 0x1700) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r8 = socket$qrtr(0x2a, 0x2, 0x0) getsockopt$bt_hci(r8, 0x0, 0x1, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x44}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x1, 0x803, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newlink={0x44, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x400}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r11}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000) 6m53.536918778s ago: executing program 2 (id=72): openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi4\x00', 0x20082, 0x0) r0 = io_uring_setup(0x1159, &(0x7f0000000440)={0x0, 0x2dd6, 0x40, 0x3, 0x81000117}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000000)=ANY=[], 0x0}, 0x94) io_uring_register$IORING_REGISTER_FILES(r0, 0x1e, &(0x7f0000000000)=[r0], 0x1) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc000}, 0xc010) socket$inet6_udp(0xa, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) getpid() sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000001a40)=""/102392, 0x18ff8) keyctl$chown(0x4, 0x0, 0x0, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents64(r3, 0x0, 0x0) 6m51.228227739s ago: executing program 2 (id=74): kexec_load(0x3, 0x7, &(0x7f00000005c0)=[{&(0x7f0000000000)="6509534a17aa723cba21a9d63c6a556b30b910a580cb50d65e9fab1ed59a7eb00a7109e4a355bed417bce60d6a5baab4bbecc5b2faaf2eba28c331345b612f1f4cbfdfa7bcb9bd2a0fbc8d7786bb68cff61167b98ef0adfbb79545bbb2c409be3adb3b54846920f1b194db5258279e8d06b863d51c0f90cd79ecb1f5ed3c44eb6353c0b451fe3f9b118422addd3f936d8cd5562d6ce55bf378ee8c0d0fc56a4a866c499b04ef61edca4fc06d78b964868e16d82c97be81055b072720c06a8b8b3daad5131e84447a4809d131ce0927ee8ec587e37e0f2df3499327f170b861", 0xdf, 0x5, 0xff}, {&(0x7f0000000100)="047715ac7141c111fab2fcda5de4dc8b278029bcb1bd17524f177856cac105f463c77e2d2ab44d875217dc82baa911f236f959fb9227524d4fe6b621a19823457d04c399283edbac755852623c82f7206d26e918a2981c8f68476969bf8c4bcd37ba24e4ba1683339879a11b854a7478f898805f327af12eaab8ac918c201b7f932e124796f1aba03e031312bd7e67403651abac282b310f420dbcdea31d52854783d6952a2a7b10f3e45715203107f8ce516d99c8c7db918e0989ef123cc524fa8ae0af5c952de542a268179439f62e20fb410df0a4c2e54ec355436d7cf9989fa7b13df2f67b414330e5cff9", 0xed, 0x5, 0xffffffff}, {&(0x7f0000000200)="d8f3aabb28de3faf55566e010b6ef42f8002b91bf54d78caa3135bc4a5d30a8fd06d1e70130a8d2b505e9abe3aef1de2219df6f5f695131fe4fc01630cb7751927628d8d7ec59d998200794f89eea832f53f0f9aa4c91322544bc7f07e8cdf4598c9879e4af2de4daca6cf629d11f9c6ebdccfeca156899a89ed0e61", 0x7c, 0x5, 0x4}, {&(0x7f0000000340), 0x0, 0x100, 0x9}, {0x0, 0x0, 0x7, 0x2}, {0x0, 0x0, 0x2, 0xfffffffffffffffa}, {&(0x7f00000004c0), 0x0, 0x5, 0x6}], 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{0x0}, {0x0}, {0x0}], 0x3}, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000500)="4274aa814c8f6ea8d8db43", 0xb}, {0x0}, {0x0}, {&(0x7f0000000740)="747516464293f8e8eec3ccb7dd473a382a0d368ad8a1242abe3b11d915f3eb582e10ff9b8afa9a3d6fa9075032a573688f84e342bf19f200379d5291489fa5151a46ed483044e784cb8f430cbcd5a6145d72a2d2b2b6aa78add2ab0812de906e5545585d6aadca938d5a62632604101886bd45bc15550815c5dcec420b547b43f88b56489e54d47307371d68817c7eca00a16bce0ea94917082d622301673217c8ca26b5a362745ea01486a2ba576eb6601dfa400bb8", 0xb6}], 0x4}, 0x41) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348092734fe1863473bbce6798a60e9", 0x1d}], 0x2, 0x0, 0x0, 0x10}, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)=0x5, 0x12) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e7", 0x9b}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 6m47.39596683s ago: executing program 2 (id=81): kexec_load(0x3, 0x6, &(0x7f00000005c0)=[{0x0, 0x0, 0x5, 0xffffffff}, {&(0x7f0000000200)="d8f3aabb28de3faf55566e010b6ef42f8002b91bf54d78caa3135bc4a5d30a8fd06d1e70130a8d2b505e9abe3aef1de2219df6f5f6", 0x35, 0x5, 0x4}, {&(0x7f0000000340)="8c4e55be8948c65379def4df90ce301f71e7d4e4921490b3aacd4082ccf6531bb82dbd4d13dbfbeb16dd11b3c041c780b7caed488a35c2a00906fbd0e2fa", 0x3e, 0x100, 0x9}, {0x0, 0x0, 0x7, 0x2}, {0x0, 0x0, 0x2, 0xfffffffffffffffa}, {&(0x7f00000004c0), 0x0, 0x5, 0x6}], 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002840)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x20}, 0x1c, 0x0}}], 0x1, 0x14018891) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000500)="4274aa814c8f6ea8d8db43178dd2f41ef596a3ca46", 0x15}, {&(0x7f0000000280)="da3b7d7035cdbd35bccc23a2f8164fe26ad17c1668bf60cc412d60d7b02fe70f0d4c385a653d469c0888c116c5e9393ca029e477f71c7707c0e59c992ef8bb099330a50fb6", 0x45}, {0x0}, {&(0x7f0000000740)="747516464293f8e8eec3ccb7dd473a382a0d368ad8a1242abe3b11d915f3eb582e10ff9b8afa9a3d6fa9075032a573688f84e342bf19f200379d5291489fa5151a46ed483044e784cb8f430cbcd5a6145d72a2d2b2b6aa78add2ab0812de906e5545585d6aadca938d5a62632604101886bd45bc15550815c5dcec420b547b43f88b56489e54d47307371d68817c7eca00a16bce0ea94917082d62230167", 0x9e}], 0x4}, 0x41) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48001}, 0x4044050) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348092734fe1863473bbce6798a60e9", 0x1d}], 0x2, 0x0, 0x0, 0x10}, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)=0x5, 0x12) r2 = socket$alg(0x26, 0x5, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0xc0400) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="040e33"], 0xd) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 6m40.535384189s ago: executing program 2 (id=87): bpf$MAP_CREATE(0x0, 0x0, 0x50) socketpair$nbd(0x1, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() setrlimit(0x0, &(0x7f0000000180)={0x0, 0x100000000}) sched_setscheduler(r0, 0x2, 0x0) syz_mount_image$jfs(&(0x7f0000000400), &(0x7f00000001c0)='./file2\x00', 0x800c08, &(0x7f0000000540)=ANY=[@ANYBLOB="2c756d61736b3d300004000000000000000000", @ANYRES8=0x0, @ANYRES16=0x0, @ANYRESDEC, @ANYRES8=0x0, @ANYBLOB, @ANYRESDEC, @ANYRES64, @ANYRES8, @ANYRES8=0x0, @ANYBLOB="c49ecfdd8711048bea9eb55574810b5cbc454ccd5a63c7941ba393a86e5b7a8fdcf7b75e9bd7459f7e129fadabeef1e9b084a7568c9ce90014069121b0700a4f948941c59d1e8e3f80ffa601a20f979dd6e1fe150ba283f14999be8b6fe530f67dbac2443da65608409abd01602980fb5227c272180171dfa09978bf40bd650d5c4a54e6cecfcfd2e41e9ec85c6a274e668e7443cdd2c3cba6972ccffb41487a8202816ac3ba65bb5cb3d1323194c102f39aae52e46500849660e484f39210872d958d69f61e1311c51a34b64f81cb8a5cc30bf568185b0bb1f0d438777c833a9b362a10cace728b508eb7642244"], 0x21, 0x627f, &(0x7f0000001600)="$eJzs3UuPHFfZB/Cnr3PxG8fKIsprITRJzCWE+BqMIUCSBSzYsEDeIluTSWThALINciILTzQbFnwIEBJLhFiy4gNkwZYdHwBLNhIoqxSqmXPGNeVp94zt6eqZ8/tJ4+qnTlX3Kf+7prunqvoEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABA//MGPz/Ui4sqv0owTEf8Xg4h+xFJdr0TE0sqJ5jovxWZzvBgRo4WIev3Nf56PeDMiPj0ecf/BndV69vk99uP7f/7HH35y7Ed//9PozH//cmvw1qTlbt/+7X/+evfJtxcAAABKVFVV1Usf809GxDB9tgcAjr78+l8leb567ur1OeuPWq1Wqw9h3VTt7m6ziIj15jr1ewaH4wHgkFmPz7ruAh2Sf9GGEXGs604Ac63XdQc4EPcf3FntpXx7zdeDla32fC7IjvzXe9vXd0yaTtM+x2RWz6+NGMQLE/qzNKM+zJOcf7+d/5Wt9nFa7qDzn5VJ+Y+3Ln0qTs5/0M6/5ejk3981/1Ll/If7yn8gfwAAAAAAmGP57/8nOj7+u/D0m7Injzv+uzKjPgAAAAAAAADAs7bf8f+GrfH/thn/DwAAAOZW/Vm99rvjD+dN+i62ev7lXsRzreWBwqSLZZa77gcAAAAAAAAAAAAAlGS4dQ7v5V7EKCKeW16uqqr+aWrX+/W06x92pW8/lKzrX/IAALDl0+Ota/l7EYsRcTl9199oeXm5qhaXlqvlamkhv58dLyxWS43PtXlaz1sY7+EN8XBc1Xe22Fivadrn5Wnt7furH2tcDfbQsdnoMHAAiIitV6P7XpGOmKp6Prp+l8PhYP8/euz/7EXXz1MAAADg4FVVVfXS13mfTMf8+113CgCYifz63z4uoFar1Wq1+ujVTdXu7jaLiFhvrlO/ZzAcPwAcMuvxWdddoEPyL9owIl7quhPAXOt13QEOxP0Hd1Z7Kd9e8/Ugje+ezwXZkf96b3O9vP5u02na55jM6vm1EYN4YUJ/XpxRH+ZJzr/fzv/KVvs4LXfQ+c/KpPzr7TzRQX+6lvMftPNvOTr593fNv1Q5/+G+8h/IHwAAAAAA5lj++/+JuTr+O37SzZnqccd/Vw7sUQEAAAAAAADgYN1/cGc1X/eaj/9/YZflXP95NOX8e/IvUs6/38r/q63lBo3b9959mP+/H9xZ/eOtf/1/nu4x/4d310vPrF56RvRSU2+Ypk+zdY/aGA3G9SONev3BMJ3zU43ej2txPdbi7I5l++n/42H7uUc2YrTZXg222s/vaB9ut+f1L+xoH6Uznaql3H46VuPncT3e22yv2xambP/ilPZqSnvOf2D/L1LOf9j4qfNfTu291rR275P+I/t9c7rb47xz7Yu/OXvwmzPVRgy2t62p3r5XOujP5v/JsXH88ubajdO3r966deNcpMmOuecjTZ6xnP8o/Wz//n91qz3/om7ur/c+Ge87/3mxEcOJ+b/auF1v72sz7lsXcv7j9JPzfy+1777/H+b8J+//r3fQHwAAAAAAAAAAAAAAAHicqqo2LxF9JyIuput/uro2EwCYrfz6XyV5/qzqwYwfT60+5HVvzvoz0/rz6lnd3zDmYXvU6i7qpmp3bzeLiPhbc536PcOvd7szAGCefR4R/+y6E3RG/gXL3/dXT0913Rlgpm5+9PFPr16/vnbjZtc9AQAAAAAAAACeVB7/c6Ux/vOpqqrutpbbMf7ru7HytON/DvON7QFGJwxUPdj/Nj3ORn886DeGG385Jo3/Pdq+9bjxv4dTHm80pX08pX3h0VlLzWJxyvq7XujRkPN/uTHe+amIONkafr2E8V/bY96XIOf/SuP5XOf/ldZyzfyr3x/m/Ps78j9z68NfnLn50cdvXPvw6gdrH6z97MK5c2cvXLx46dKlM+9fu752duvfDnt8sHL+eexr54GWJeefM5d/WXL+X0q1/MuS8/9yquVflpx/fr8n/7Lk/PNnH/mXJef/WqrlX5ac/9dSLf+y5PxfT7X8y5Lz/3qq5V+WnP8bqZZ/WXL+p1Mt/7Lk/M+keo/5Lx10v5iNnH8+wmX/L0vOP5/ZIP+y5PzPp1r+Zcn5X0i1/MuS838z1fIvS87/G6mWf1ly/hdTLf+y5Py/mWr5lyXnfynV8i9Lzv9bqZZ/WXL+3061/MuS838r1fIvS87/O6mWf1ly/t9NtfzLkvP/XqrlX5ac/9upln9ZHn7/vxtuzPjGyNNvfm90/ZsJAAAAAAAAAAAAAGibxenEXW8jAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA/9iBAwEAAAAAIP/XRqiqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqrCDhwIAAAAAAD5vzZCVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVFfbuNkaOu74D+Nz57nx2IDEQUic1cHZMCImTOz/ED7QpJjw2PAdCoQ/Yru9sDvyEzy6BRrJRoETCqKiibXjRFhAqeYOIKlTRClBeoFZVK0H7gr5BVLS8iKqAAmqltgKu2pn//3+7e3u7e77NeXbm85Hin293dmd2dnbuvud8dwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJptf/XcJ0ayLGv8l/+xJcue0/j7pqkt+WWvuNZbCAAAAKzVz/M/n7khXXC4jxs1LfP3L/72VxcXFxezd2/44/HPLC6mK6aybHxjluXXRU/84D0jzcsEj2STI6NNX4/2WP2GHteP9bh+vMf1Ez2u39jj+ske1y/bActsKn4fk9/ZzvyvW4pdmt2YjefX7exwq0dGNo6Oxt/l5Eby2yyOn8jms1PZXDbTsnyx7Ei+/Ne3N9b1hiyua7RpXdsaR8hPHj4et2Ek7OOdLetaus/oR6/Kpn76k4eP/+WFp2/uNHvuhpb7K7bz9h2N7fxYuKTY1pFsY9oncTtHm7ZzW4fnZEPLdo7kt2v8vX07n+lzOzcsbea6an/OJ7PR/O/fyffTWPOv9dJ+2hYu+59bsyy7vLTZ7cssW1c2mm1uuWR06fmZLI7Ixn00DqXnZ2OrOk6393GcNubsztbjtP01EZ//7eF2YytsQ/PT9KOPTjQ97z9bvJrjNGo86pVeK+3H4KBfK2U5BuNx8Z38QT/a8RjcGR7/w7etfAx2PHY6HIPpcTcdgzt6HYOjExvybR790ua49h0tx+DuluU35GsayedTt3U/BqcvnD43vfDhj9w1f/rYybmTc2f27t49s3f//oMHD06fmD81N1P8edX7u+w2Z6PpNbAj7Lv4GnhZ27LNh+ri5yeWnX+v9nU42eV1uKVt2UG/DsfaH9zI+rwgl47peEnx2nhnY6dPXhnNVniN5c/PHWt/HabH3fQ6HGt6HXb8nrJsm0fy2/R6HTaWOXdHfz+zjDX912kbVv5esLZjcEvTMdj+80j7MTjon0fKcgxOhuPie3es/L1gW9jeR3et9ueRDcuOwfRww7mncUn6eX/yYD46HZe3NK64biK7uDB3/u6Hjl24cH53Fsa6eEHTsdJ+vG5uekzZsuN1dNXH6+H5Fz96S4fLt4R9NXlX44/JFZ+rxjL77u7+XOXf3Trvz5ZL92RhDNh6789O380b+3Miyz77rY8+8I2HP/vqFfdnI29+bHrtP4unXNp0/h1f4fwbc/8vivWlu3pkw/hY8frdkPbOeMv5uPWpGsvPXSP5up+Z7u98PB7+W+/z8Y1dzsdb25Yd9Pl4vP3BxfPxSK/fdqxN+/M5GY6TUzPdz8eNZbbuWe0xOdb1fHxrmCNh/788JIWUi5qOnZWO27SusbHx8LjG4hpaj9O9LcuPh2zWWNfje67uOL391uK+NqRHt2S9jtOptmUHfZym332tdJyO9Prt29Vpfz4nw3Fx497ux2ljmSf3rf3cuSn+tencOdHrGBzfMNHY5vF0EObn+2xxUzwG786OZ2ezU9lsfu1EfjyN5OvadU9/x+BE+G+9z5VbuxyDt7ctO+hjMH0fW+nYGxlb/uAHoP35nAzHxWP3dD8GG8u85sBgf3a9PVySlmn62bX992sr/c7rlrbd9GwdK2NhO791oPvvZhvLnDq42pzZfT/dGS65rsN+an/9rvSams3WZz9tDdv59MGV99OXt2f5Mp851OfxdDjLsksfvC//fW/495W/uvjdr7b8u0unf9O59MH7fvzcE3+3mu0HYPj9ohibi+91Tf8y1c+//wMAAABDIeb+0TAT+R8AAAAqI+b++H+FJ/I/AAAAVEbM/WNhJjXJ/1tf8/T8Ly5lqZm/GMTr0264v1gudlxnwtdTi0sal9/3xbn//ttL/a17NMuyn93/+x2X33p/3K7CVNjOJ17bevkyX72rr3UfffBSWm9zf/1z4f7j4+n3MOhUwZ3JsuzrN3wqX8/Ue67k88n7j+bzgcuPPtJY5plDxdfx9k+9oFj+z0L59/CJYy23fyrshx+GOfPGzvsj3u4rV16+7cC7ltYXbzey4/r8YT/23uJ+4/vkfPqRYvm4n1fa/m988vGvNJZ/6KWdt//SaOftfzzc7xfD/N8XFcs3PweNr+PtPh62P64v3u7uL3yz4/Y/8Yli+XOvK5Y7GmZc/+3h652ve3q+eX89NHKs5XFlry+Wi+uf+e4f5tfH+4v33779k0eutOyP9uPjyX8p7me6bfl4eVxP9Ddt62/cT/PxGdf/+B8cbdnPvdb/xANPvahxv+3rv7NtuXMfvCNf/9L9tb5j059//FMd1xe35/CXz7U8nsNvD6/jsP7H3huOx3D9/z1R3F/7uyscfXvr+Scu/7ktl1oeT/SGnxbrf+KVJ/O5cXLT5uue89zrL7+kse+y7Dsbi/vrtf6Tf3G2Zfs/f1OxP+L1saPfvv6VxPWf/9CuM2cXLs7Ppr368A35e+e8qdieuL03hHNr+9dHzl5439z5qZmpmSybqu5b6F21L4T542Jc7r704rIz6B0Phufzlj/9+ubb/vmT8fJ/fWdx+ZU3Ft+3XhaW+3S4fEt4/la3/uUe235T/voeeTJs4eLy9wtei207//NgXwuGx9/+c0E83s+98H35fmhcl3/fiK/rNW7/92eL+/la2K+L4Z2Zd9y0tL7m5eN7I1x5R/F6X/P+C6e5+Lx+KTzfb/5hcf9xu+Lj/X74OeabW1vPd/H4+Nql0fb7z9/F43I4n2SXi+vjUnF/X3nmpo6bF9+HJLt8c/71H6X7uXlVD3MlCx9emD41f+biQ9MX5hYuTC98+CNHTp+9eObCkfy9PI+8v9ftl85Pm/Pz0+zc/n1ZfrY6W4xn2bXe/nMPHp89MHPb7NyJYxdPXHjw3Nz5k8cXFo7PzS7cduzEibkP9br9/Oy9u/cc2ntgz66T87P3Hjx0aO+hXfNnzjY2o9ioHvbPfGDXmfNH8pss3Lvv0O577tk3s+v02dm5ew/MzOy62Ov2+femXY1b/96u83Onjl2YPz23a2H+I3P37j60f/+enu8GePrciYWp6fMXz0xfXJg7P108lqkL+cWN7329bk81Lfxb8fNsu5Hijfiyt965P70/a8MXP7riXRWLtL2B6NPhvWj+4XnnDvbzdcz942EmNcn/AAAAUAcx90+Emcj/AAAAUBkx928MM5H/AQAAoDJi7p8MM6lJ/q9c/3/rpb7Wr/+v/9+8v/T/a9b/f0fZ+v+N88Vc6nXq/6/NWvv3+v+B/r/+v/6//r/+PwNQtv5/zP2bsqyW+R8AAADqIOb+zWEm8j8AAABURsz914WZyP8AAABQGTH3PyfMpCb5X/9f/1//X/9f/7/z+te3/+/z/wdF/787/f8e9P+ns3r1/y8Pcvv1//vs/0/1uieqpGz9/5j7nxtmUpP8DwAAAHUQc//1YSbyPwAAAFRGzP03hJnI/wAAAFAZMfdvCTOpSf7X/9f/1//X/9f/77x+/f/hpP/fnf5/D/r/Pv9f/9/n/zNQZev/x9z/vDCTmuR/AAAAqJ7lv0yIuf/5YSbyPwAAAJTP2NXdLOb+F4SZLMv/V7kCAAAA4JqLuf/GrK0IXpN//y9X/3/pCdD/L77W/9f/1/8fhv7/hkz/vzz0/7vT/+9B/39t/fnGiVH/X/9f/58mZev/57k/m8xeGGZSk/wPAAAAdRBz/01hJvI/AAAAVEbM/b8UZiL/AwAAQGXE3L81zKQm+b9c/f+m7dL/z+n/D77//+/79P/1/33+f5Xp/3en/9+D/r/P/9f/1/9nMOIPSiXr/8fcf3OYSU3yPwAAANRBzP23hJnI/wAAAFAZMff/cpiJ/A8AAACVEXP/tjCTmuR//f+S9/9jc1T/3+f/6//r/+v/90X/vzv9/x70//X/9f/1/xmohZL1/2Puf1GYSU3yPwAAANRBzP0vDjOR/wEAAKAyYu5/SZiJ/A8AAACVEXP/VJhJTfK//n/J+/9FD37C5//r/+v/6//r//dH/787/f8e9P/1//X/9f8ZqLL1/2Pu3x5mUpP8DwAAAHUQc/+OMBP5HwAAACoj5v5bw0zkfwAAAKiMmPt3hpnUJP/r/w9F/z/T/9f/1//X/9f/74/+f3f6/z3o/+v/6//r/zNQZev/x9z/0jCTmuR/AAAAqIOY+28LM5H/AQAAoDJi7n9ZmIn8DwAAAJURc//tYSY1yf/6//r/+v/6//r/ndev/z+c9P+70//vQf9f/1//X/+fgSpb/z/m/peHmdQk/wMAAEAdxNx/R5iJ/A8AAACVEXP/nWEm8j8AAABURsz9u8JMapL/9f/1//X/9f/1/zuvX/9/OOn/d6f/34P+v/6//r/+PwNVtv5/zP13hZnUJP8DAABAHcTcf3eYifwPAAAAlRFz/3SYifwPAAAAlRFz/0yYSU3yv/6//r/+fyn7//lNStn/f8nS/er/F/T/y0X/v7s++//T+v/6//r/16r/P67/T6WUrf8fc//uMJOa5H8AAACog5j794SZyP8AAABQGTH37w0zkf8BAACgMmLu3xdmUpP8r/+v/6//X8r+f66U/f8m+v8F/f9y0f/vbvCf/x8fov6//r/+v8//1/9nubL1/2PuvyfMpCb5HwAAAOog5v79YSbyPwAAAFRGzP0HwkzkfwAAAKiMmPsPhpnUJP/r/+v/6//r/+v/d16//v9wKmf/f7Tv9Q9f/9/n/w9X//9U12uvdX9+ra719uv/6/+zXNn6/zH3HwozqUn+BwAAgDqIuf8VYSbyPwAAAFRGzP2/EmYi/wMAAEBlxNz/q2EmNcn/+v9l7/+PZvr/+v/6//r/+v/9K2f/v3/6//r/Pv9/eLdf/1//n+XK1v+Puf/eMJOa5H8AAACog5j7fy3MRP4HAACAyoi5/5VhJvI/AAAAVEbM/YfDTGqS/yvW/5/sb83D1P/3+f/XsP//qvb+vf6//r/+f/np/3en/9+D/r/+v/6//j8DVbb+f8z9rwozqUn+BwAAgDqIuf++MBP5HwAAACoj5v5Xh5nI/wAAAFAZMfe/JsykJvm/Yv3/Cn7+v/6/z//X/9f/1/9fDf3/7vT/e9D/1//X/9f/Z6DK1v+Puf+1YSY1yf8AAABQBzH3vy7MaPyabREAAAAwaDH3vz7MxL//AwAAQGXE3P+GMJOa5H/9f/1//X/9f/3/zuvX/x9O+v/d6f/3oP+v/6//r//PQJWt/x9z/6+HmdQk/wMAAEAdxNx/f5iJ/A8AAACVEXP/G8NM5H8AAACojJj73xRmUpP8r/+v/6//r/+v/995/fr/w0n/v7sh6////Ppwuf5/Qf+/3Nu/2v7/WNvXz0r//wcr9f8XN7bfXv+fZ0PZ+v8x9785zKQm+R8AAADqIOb+t4SZyP8AAABQGTH3vzXMRP4HAACAyoi5/21hJjXJ//r/je1Yai/r/+v/5xesS///bf+l/6//n+n/D5z+f3dD1v/3+f9t9P/Lvf0+/1//n+XK1v+Puf/tYSY1yf8AAABQBzH3PxBmIv8DAABAZcTc/44wE/kfAAAAKiPm/neGmdQk/+v/+/x//X+f/6//33n9q+3/dzoPNNP/Xx/6/93p//eg/6//X7b+/3/o/zPcytb/j7n/wTCTmuR/AAAAqIOY+98VZiL/AwAAQGXE3P8bYSbyPwAAAFRGzP3vDjOpSf5fuf//gdYFn6X+/yb9/z77/1P6//r/+v9tj6ds/f9e9P/Xh/5/d/r/Pej/6/+Xrf/v8/8ZcmXr/8fc/54wk/7z/2TfSwIAAADXRMz9vxlmUpN//wcAAIA6iLn/t8JM5H8AAACojJj7fzvMpCb53+f/D0v/3+f/Z/r/w9//H9X/1/9/9q1f/z+eefT/9f/1/yP9f/1//X/ala3/H3P/74SZ1CT/AwAAQB3E3P/eMBP5HwAAAIZCp/8nu13M/UfCTOR/AAAAqIyY+4+GmdQk/+v/16j//9f/WFyp/z8c/f8/2fFP3/v2W47urlL/3+f/6/+vg3X9/P/Gi9/n/+v/6/8n+v/6//r/tCtb/z/m/mNhJjXJ/wAAAFAHMff/bpiJ/A8AAACVEXP/8TAT+R8AAAAqI+b+2TCTmuR//f8a9f99/v9w9f+H+PP/4/7Q/281sP5/POnq/3e0rv3/dy31xPX/V9v/n+h4qf6//v8wb7/+v/4/y5Wt/x9z/1yYSU3yPwAAANRByP2jJ4q5dIX8DwAAAJURc//JMBP5HwAAACoj5v73hZnUJP/r/+v/6//r//v8/87rL23/3+f/d6X/3115+v+d6f/r/w/z9uv/6/+zXNn6/zH3z4eZ1CT/AwAAQB3E3P/+MBP5HwAAACoj5v4PhJnI/wAAAFAZMfefCjOpSf7X/9f/1//X/9f/77x+/f/hpP/fnf5/D/r/+v9Xs/3huNH/1/9nubL1/2PuPx1mUpP8DwD/z96dNFlWl3kcvwlFV2bQ0fSuF73pdfdLYNG97n4B3RG96U1HqAtQcVakcB5xwnnAecYBFHFCxRmcUJxFxHlARRQHxCjDrOd56mbdk/dmFjczz/n/P58FT5GS3FtlBfCrrG8cAIAe5O6/KG6x/wEAAKAZufsvjlvsfwAAAGhG7v4Hxy2d7H/9v/6/2f7/3/X/u72+/l//3zL9/5CL61v6/xX0//p/z//X/7NWY+v/c/c/JG7pZP8DAABAD3L3PzRusf8BAACgGbn7L4lb7H8AAABoRu7+h8Utnez/M/r/jVmf/X9mvPr/lvp/z//f9fX1//r/lh1u/3/53/7JN4H+/zT9/wr6f/2//l//z1qNrf/P3f/wuKWT/Q8AAAA9yN3/iLjF/gcAAIBm5O5/ZNxi/wMAAEAzcvc/Km7pZP97/r/n/+v/9f/6/+HX1/9Pk+f/L9dT/3/JredfdPd1/3z9fl7/4Pv/u3b2/0H/vx5H/f71//p/Fo2t/8/d/+i4pZP9DwAAAD3I3f+YuMX+BwAAgGbk7n9s3GL/AwAAQDNy9z8ubulk/+v/9f/6f/1/fPzkmX/d1Pr/K+Pj+v++6f+X66n/P5vX9/x//b/+X//Peo2t/8/df2nc0sn+BwAAgB7k7n983GL/AwAAQDNy918Wt9j/AAAA0Izc/Sfilk72v/7/4Pv/v+j/9f9xR97/e/6//r8J+v/l9P8r6P/1//p//T9rNbb+P3f/5XFLJ/sfAAAAepC7/wlxi/0PAAAAzcjd/8S4xf4HAACAZuTuf1Lc0sn+1/97/r/+X/+v/x9+ff3/NOn/l9P/r9BX/3/8zA+soZ8/T/+v/9f/M2+f/f+9S/6xvZb+P3f/k+OWTvY/AAAA9CB3/1PiFvsfAAAAmpG7/6lxi/0PAAAAzcjd/7S4pZP9r//X/+v/9f9n3f8v/tTbpv8ftr7+f6v+nvr/Rfr/5UbT/28cG/yw/t/z/6f8/vX/+n8Wje35/7n7nx63dLL/AQAAoAe5+58RtyzZ//v+xXwAAADgSOXuf2bc4uv/AAAAMHlZneXuf1bc0sn+1//r//X/+n/P/x9+/WX9//Vz78/z/8dF/7/caPr/Xej/9f9Tfv/6f/0/i8bW/+fuf3bc0sn+BwAAgB7k7r8ibrH/AQAAoBm5+58Tt9j/AAAA0Izc/c+NWzrZ/8P9/+n/Xf+/N/r/ne9f/z/882Nd/X/+HfX/S/v//2j3+f/6/2X0/8vp/1fQ/++/n5/7Lur/z6b/v7S+NfL+f2vV5+v/GTK2/j93//Pilk72PwAAAPQgd//z4xb7HwAAAJqRu/8FcYv9DwAAAM3I3X9l3NLJ/vf8f/1/9vObE+j/z9X/e/7/SJ7/Pzv0/v+Y/n+P9P/L6f9X0P97/n8bz//PD3n+P0dubP1/7v4Xxi2d7H8AAADoQe7+F8Ut9j8AAABMw/zvHTjzN5SG3P0vjlvsfwAAAGhG7v6XxC2d7H/9v/7f8//1//r/4dcfV//v+f97pf9fTv+/gv7/IPr5Y431/1ft9vlj6P8vO7jn/+v/OSs7+v8bTn/8qPr/3P0vjVs62f8AAADQg9z9L4tb7H8AAABoRu7+l8ct9j8AAAA0I3f/K+KWTvb/gff/W7u/tv5f/6//1//r/0/97NH/r4/+fzn9/wr6f8//b+P5//p/RmNH/z/nqPr/3P2vjFs62f8AAADQg9z9r4pb7H8AAABoRu7+q+IW+x8AAACakbv/1XFLJ/vf8//1//p//b/+f/j1Pf9/mvT/y+n/V9D/z/fzD5zp//X/+n/up7H1/7n7XxO3dLL/AQAAoAe5+18bt9j/AAAA0Izc/a+LW+x/AAAAaEbu/tfHLZ3sf/3/wfb/+XH9v/5/pv/X/+v/D0W3/f/G0L+JFu3S/9/8gBP/tfMj+n/9v+f/6//1/6zBKPr/k6f/6zJ3/xvilk72PwAAAPQgd/8b4xb7HwAAAJqRu/9NcYv9DwAAAM3I3f/muGWf+/8f1/quDo/+3/P/9f/6f/3/8Ovr/6ep2/5/jzz/fwX9v/5f/6//Z61G0f/P/Xnu/rfELb7+DwAAAM3I3f/WuMX+BwAAgGbk7n9b3GL/AwAAQDNy9789bulk/+v/9f/6f/2//n/49fX/0zTF/n/uvz567f+38hv6/7Pq/+/8V/3/KN6//l//z6Kx9f+5+6+OWzrZ/wAAANCD3P3viFvsfwAAAGhG7v53xi32PwAAADTj3uis3rX9Z/3tf/2//l//r//X/w+/vv5/mqbY/8/rtP8vh9L/X7PkDQz1/yePj73/9/z/kbx//b/+n0Vj6/9z9787bulk/wMAAEAPcvdfE7fY/wAAANCM3P3Xxi32PwAAADQjd/974pZO9r/+X/+v/9f/6/+HX3+g/z82/770/+Ok/19O/7/CNJ//r/8fyfvX/+v/WTS2/j93/3vjlk72PwAAAPQgd/91cYv9DwAAAM3I3f++uMX+BwAAgGbk7r8+bulk/+v/9f/6f/2//n/49T3/f5oOrv+f6f/1//r/FfbVzx9fy1s+uvc/QP+v/2fR2Pr/3P3vj1s62f8AAADQg9z9H4hb9rL/ty44qLcFAAAArFHu/g/GLb7+DwAAAM3I3f+huKWT/a//n83OmYuX9f/6/+0P6P/1/+vu/y/Q/x8Wz/9fTv+/gv7f8//1//p/1mps/X/u/g/HLZ3sfwAAAOhB7v4b4hb7HwAAAJpxz/YfN2cfiVvsfwAAAGhG7v6Pxi2d7H/9v+f/7+z/ZzP9v/5f/3/KITz/f3Om/187/f9y+v8V9P9t9v/nzBrq/7d2/Xz9P2M0tv4/d//H4pZO9j8AAAD0IHf/jXGL/Q8AAADNyN3/8bjF/gcAAIBm5O7/RNzSyf7X/+v/Pf9f/6//H379Q+j/60dV/78+B9X//73+f5v+X/+/zGj7f8//1/9zZMbW/+fu/2Tc0sn+BwAAgB7k7v9U3GL/AwAAQDNy9386brH/AQAAoBm5+z8Tt3Sy//X/+n/9v/5f/z/8+vr/afL8/+X0/yvo//X/+n/9P2s1tv4/d/9n45ZO9j8AAAD0IHf/TXGL/Q8AAADNyN1/c9xi/wMAAEAzcvd/Lm7pZP/r//X/+v9p9v+b+n/9v/5/0Fj6/wsv/M9b9P/6f/2//l//r//v3dj6/9z9n49bOtn/AAAA0IPc/V+IW+x/AAAAaEbu/i/GLfY/AAAANCN3/5filk72/2L/f97sVKF6ylD/H42a/n+O/n/n+9f/D//88Px//b/+/+Cd2f8f3+fne/5/0P/r//X/B9v//8vi5+v/adHY+v/c/bfELZ3sfwAAAOhB7v4vxy32PwAAADQjd/9X4hb7HwAAAJqRu//WuKWT/e/5//p//f9h9v8b+n/9v/7/gI3l+f/6/7N7//p//f+U338zz/8/V//P+hx8/78V39pb/5+7/6txSyf7HwAAAHqQu/9rcYv9DwAAAM3I3f/1uMX+BwAAgGbk7v9G3NLJ/tf/6//1/57/r/8ffn39/zTp/5fT/6/QT/+/OfTBo+7n76+jfv/N9P+e/88aje35/7n7vxm3dLL/AQAAoAe5+78Vt+zY//9zyO8KAAAAWKfc/d+OW3z9HwAAAJqRu/87cUsn+1//r/9vv///v0n1/1tzn9dY/39C/6//Pwz6//w3+jD9/wqj6f+H/1/0/P9xv3/9v/6fRWPr/3P33xa3dLL/AQAAoAe5+78bt9j/AAAA0Izc/bfHLfY/AAAANCN3//filk72v/6/r/5/Y9Zj/+/5/yPp/z3/X/9/KPT/y+n/VxhN/3/gz/8fdNT9/BG8//vW+f71//p/Fo2t/8/df8fGsS73PwAAAEzVf//bg27b6197x/YfN2ffj1vsfwAAAGhG7v4fxC32PwAAADQjd/8P45ZO9r/+v6/+v8/n/+v/9f/6/57o/5fT/6+g/++t/1/r+9f/6/9ZNLb+P3f/j+KWueF3bN/fSwAAAGBMcvf/OG7p5Ov/AAAA0IPc/T+JWxb2/8k9/q52AAAAYGxy9/80bunk6/8T7v+Hs4zW+v/ZAfX/8df12v/feOHOHy/9v/5/6PX1/9Ok/1/ufvb/Jzf0//r/JYb7+dv/Qf+v/9f/92ts/X/u/p/FLZ3sfwAAAGjUjl9RyN3/87jF/gcAAIBm5O7/Rdxi/wMAAEAzcvffGbd0sv8n3P/v8h1qrP8/q+f/b9W3PP+/8+f/X7E5+Ppr7//P2/n91f8P0/8fDv3/nM3FD3n+/wr6f8//1//r/1mrsfX/uft/Gbd0sv8BAACgB7n7fxW32P8AAADQjNz9v45b7H8AAABoRu7+u+KWTva//r/F/n8Pz//X//fR/+/y+u08//+fzj9x0//+/7VX6/857TD7//y5MNr+f4D+fwX9v/5f/6//Z63G1v/n7v9N3NLJ/gcAAIAe5O6/O26x/wEAAKAZuft/G7fY/wAAANCM3P2/i1s62f/6f/3/WPr//LE+gv7/xPT6/2yKe+//Pf9f/7/I8/+X0/+voP/X/+v/9f+s1dj6/9z998Qtnex/AAAA6EHu/t/HLbn/N/b9S/cAAADAyOTu/8P2nfs9Wr7+DwAAAM04tfs3Z3+MWzrZ//p//f9Y+v/k+f+nP8/z/0/R/+v/92Py/f/sHP2//l//P9H3r//X/7NobP1/7v4/xS2d7H8AAADoQe7+jbhl5/7/u8N9VwAAAMA63bv9x83Zn+MWX/8HAACAZuTuvy9u6WT/6//1//p//b/+f/j19f/TNPn+3/P/9f/6/8m+f/2//p9FY+v/c/f/NQAA//+VAGrk") unlink(&(0x7f0000000040)='./file1\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8071, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = syz_open_dev$vim2m(0x0, 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) pipe2$watch_queue(0x0, 0x80) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newqdisc={0x28, 0x24, 0xf0b, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0xe, 0xfff1}}, [@TCA_STAB={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000010) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) socket$key(0xf, 0x3, 0x2) ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000cc0)={0x9, @win={{0x2, 0x10, 0x8, 0x4ea}, 0x9, 0x74d, &(0x7f0000000000)={{0x3ff, 0xb0f0, 0x6, 0x80}}, 0xb15f, &(0x7f0000000480)="efdb328a1297ae412881ee9239d3abc83c728f833d9b5f1d986a8a78372dc6c5", 0x8}}) symlink(&(0x7f0000000040)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00') 6m35.509544777s ago: executing program 2 (id=89): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r3, 0x0, 0x0}, 0x10) r4 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f00000000c0)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000000)={@my=0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(0xffffffffffffffff, 0x7a8, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(0xffffffffffffffff, 0x7a4, &(0x7f0000000300)={{@local, 0x2}, 0xfffffffffffffffe, 0x9, 0xffffffff, 0x43}) socket$nl_route(0x10, 0x3, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, 0x0) 6m19.539039962s ago: executing program 33 (id=89): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r3, 0x0, 0x0}, 0x10) r4 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f00000000c0)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000000)={@my=0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(0xffffffffffffffff, 0x7a8, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(0xffffffffffffffff, 0x7a4, &(0x7f0000000300)={{@local, 0x2}, 0xfffffffffffffffe, 0x9, 0xffffffff, 0x43}) socket$nl_route(0x10, 0x3, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, 0x0) 2m58.752211145s ago: executing program 0 (id=381): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) gettimeofday(0x0, &(0x7f0000002980)) 2m58.353368071s ago: executing program 0 (id=382): r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/tcp_sack\x00', 0x1, 0x0) pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f0000000040)='4', 0xf4240}], 0xb, 0x0, 0x0, 0x0) 2m58.280216281s ago: executing program 0 (id=383): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/cpuinfo\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0xfd5e, &(0x7f0000000f80)=[{&(0x7f0000000880)='m', 0x1}], 0x1}, 0x5) setsockopt$sock_attach_bpf(r3, 0x1, 0x10, 0x0, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0xa, &(0x7f0000000180), 0x4) recvmsg$unix(r3, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x2082) unshare(0x62040200) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, 0x0, 0x0) syz_open_procfs(0x0, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000280)={@multicast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x9, 0x6, 'z&-', 0x38, 0x3a, 0x0, @local, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x800, {0x2, 0x6, "bfe431", 0x3f6f, 0xff, 0x0, @mcast1, @loopback, [@fragment={0x84, 0x0, 0xa, 0x0, 0x0, 0x7, 0x65}]}}}}}}}, 0x0) syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file1\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x6, 0x365, &(0x7f0000000700)="$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") mkdirat(0xffffffffffffff9c, 0x0, 0x80) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x0, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x4) umount2(0x0, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000480), 0x2e9, 0x0) unshare(0x2c040000) 2m55.631466315s ago: executing program 0 (id=387): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x3f00, 0x40, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0xa0, 0x2f, 0x0, @private=0xa010101, @empty}}}}) 2m54.631494046s ago: executing program 0 (id=391): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c00000010003df600"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001400030064766d727009000000000000000000001800128008000100707070"], 0x4c}}, 0x0) 2m54.51620641s ago: executing program 0 (id=392): r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x480) ioctl$NBD_CLEAR_QUE(r0, 0xab05) 2m37.934899774s ago: executing program 34 (id=392): r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x480) ioctl$NBD_CLEAR_QUE(r0, 0xab05) 1m30.887833784s ago: executing program 4 (id=765): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000), 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000c90000007b8af8ff00000000b7080000000008007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007d00000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1m29.669404853s ago: executing program 4 (id=772): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e1d, 0x1, @mcast1, 0x6}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000000)=0x28, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x404ad80, &(0x7f00000000c0)={0xa, 0x4e23, 0x5b5, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x8}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000001ec0)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="b3ab706204ee39c9dae21a1718ee351ebc92d2f0d482a863ae5c0b4d768ffe745af2c53a083d9b761b", 0xffe3}], 0x1}}], 0x1, 0x0) 1m29.425874168s ago: executing program 4 (id=773): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000040)={0x1, 0x0, [{0x7, 0x0, 0x2, 0x3, 0xe, 0x66, 0xffffffff}]}) 1m28.175823214s ago: executing program 4 (id=781): syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000600)='./file1\x00', 0x2810012, &(0x7f00000000c0)={[{@nojournal_checksum}]}, 0x0, 0x5bc, &(0x7f0000001440)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000b00)='./file0\x00', 0x1c0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000300)='.\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x2a05004, 0x0) mount$fuseblk(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x24000, 0x0) 1m27.122134371s ago: executing program 4 (id=788): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d032, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) 1m24.578349903s ago: executing program 7 (id=805): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) openat$dir(0xffffffffffffff9c, 0x0, 0xea, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000480)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000240)={r1, 0x2, r0}) 1m23.939417854s ago: executing program 4 (id=808): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x4, @local, 0x1d}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e210e227f000001925aa80020007b00090080007f000006e809000000ff0000f03ac71002000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) 1m23.283284835s ago: executing program 35 (id=808): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x4, @local, 0x1d}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e210e227f000001925aa80020007b00090080007f000006e809000000ff0000f03ac71002000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) 1m23.252796434s ago: executing program 7 (id=809): openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r1, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r0, 0x0}]) 1m22.501965747s ago: executing program 7 (id=817): r0 = socket$key(0xf, 0x3, 0x2) recvmmsg(r0, &(0x7f0000000440), 0x6f5, 0x2000000022, &(0x7f0000000480)={0x77359400}) setsockopt$sock_int(r0, 0x1, 0x4b, &(0x7f00000001c0)=0xfd87, 0x4) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000980)={'filter\x00', 0x7, 0x4, 0x418, 0x220, 0x220, 0x0, 0x330, 0x330, 0x330, 0x4, 0x0, {[{{@arp={@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x21}, 0x1dc23b3fe0c9f3fa, 0x0, 0xc, 0xd, {@mac=@local, {[0xff, 0x0, 0xff, 0xff, 0xff, 0xfa5bc359f51485d6]}}, {@mac=@multicast, {[0xff, 0x0, 0xff, 0xff, 0xff]}}, 0x80, 0x1, 0xfecc, 0x6, 0x4, 0x6, 'virt_wifi0\x00', 'syz_tun\x00', {0xff}, {}, 0x0, 0x53}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x42}, @rand_addr=0x64010102, @remote, 0x8}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @mac=@random="d4006c74b6e6", @dev={0xac, 0x14, 0x14, 0x3c}, @multicast2, 0x8}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @multicast2, @multicast2, 0x4, 0xffffffff}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x468) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0216000002"], 0x10}}, 0x800) 1m20.039832886s ago: executing program 7 (id=821): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) syz_usb_connect(0x2, 0x2d, 0x0, 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x8000, &(0x7f0000001dc0)={0x89, 0x72, 0x20000}, 0x20) 1m18.977046447s ago: executing program 7 (id=829): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x6) fchdir(r1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x14b302, 0x8c) pwritev2(r6, 0x0, 0x0, 0x5412, 0x0, 0x0) read$FUSE(r5, &(0x7f0000003ec0)={0x2020}, 0x2020) sendfile(r5, r5, 0x0, 0x6fecb1) 1m16.832937653s ago: executing program 7 (id=842): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r0, 0x0, 0x0, 0x48000) sendmsg$nl_route_sched(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={0x0}, 0x1, 0x0, 0x0, 0x4000090}, 0x20000810) getsockopt$inet_mreqn(r0, 0x0, 0x24, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f00000004c0)={0x0, @in6={{0xa, 0x4e23, 0xfffffffb, @local, 0x7}}}, 0x84) 7.513194112s ago: executing program 6 (id=1298): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) bind$inet(r0, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10) listen(r0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) setsockopt$sock_int(r1, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) bind$inet(r1, &(0x7f0000000440)={0x2, 0x4e20, @empty=0xe0000002}, 0x10) 7.223757252s ago: executing program 6 (id=1300): bind$inet6(0xffffffffffffffff, 0x0, 0x0) fsopen(0x0, 0x1) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000000)=0x3, 0x4) recvfrom$inet(r0, 0x0, 0x0, 0x720, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) 6.456692443s ago: executing program 6 (id=1307): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_smc(0x2b, 0x1, 0x0) syz_open_dev$sg(0x0, 0x208, 0x2c41) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet6(0xa, 0x80002, 0x0) getsockopt$inet6_buf(r5, 0x29, 0x3d, 0x0, &(0x7f0000000140)) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, &(0x7f00000000c0)={'pcl818\x00', [0x100, 0x6, 0x1, 0xc, 0x11, 0x5, 0x79, 0x3, 0x80008, 0x8, 0x2, 0x1, 0x7, 0x1, 0x1, 0xfd, 0xfffffffb, 0x20000009, 0x3, 0x7fffffff, 0xfffffffc, 0xca9f, 0x0, 0x8, 0xfffffffb, 0xf39e, 0xffffffff, 0x8, 0xa6b5, 0x0, 0xfffffff8]}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020002000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e00000000000000000014000000110001"], 0x80}}, 0x0) socket$inet6(0xa, 0x400000000001, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 4.244750275s ago: executing program 1 (id=1328): getpid() socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x9b}, [@ldst={0x6}]}, 0x0, 0x8000005}, 0x94) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e00000027f0000010000000003"], 0x1c) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f00000008c0)={0x1, {{0x2, 0x0, @multicast2}}}, 0x88) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) 3.485790252s ago: executing program 6 (id=1341): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, 0x0) dup3(0xffffffffffffffff, r0, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) syz_mount_image$hfsplus(&(0x7f0000003000), &(0x7f0000000240)='./bus\x00', 0x208000, &(0x7f0000003f80)=ANY=[@ANYBLOB="6e6c733d63703935302c6e6f626172726965722c666f7263652c756d61736b3d30303030303030303030303030303030303030313030302c00d01280f532b0f4cf3b36fd5c6ef64269a533fc6b052f92ffcac08ca18519d5b3711b97ec291e41355fa65d9c0d15e7c10c63ab0bba736f92ab9d30478ae1452a017be98c2a0507febf295db17e98d0fffc0d349264ce2acdedc0a61ae132d4024d39e11de2dc8679fac7efcb6137aa2e361c5f6cb851e3a60ba05f834666694667f27f0d632cf9a85fe247e27251acbd739ff85088cb201010900132000000000000000000002593d600000000"], 0xfd, 0x693, &(0x7f0000000980)="$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") mknod(0x0, 0x8000, 0x1) syz_mount_image$fuse(0x0, 0x0, 0x2000050, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) getpid() syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaaaa86dd6003000000082cfffe800000000000000000000027bc2ac876df85ea2db6000000bbfe800000000000b8d40daf00000000aa07000000000000"], 0x0) 3.481890164s ago: executing program 1 (id=1342): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r5}, &(0x7f0000000280), &(0x7f0000000240)=r2}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f00000000c0)=r6, 0x4) sendmsg$inet(r4, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 3.239527377s ago: executing program 6 (id=1344): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], 0x1, 0x2bc, &(0x7f00000015c0)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x105042, 0x1c3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4012011, r1, 0x0) pwritev2(r1, &(0x7f0000002880)=[{&(0x7f0000000080)="7fe8", 0x2}], 0x1, 0x7, 0xfffffffa, 0x13) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x10040) syz_emit_ethernet(0x52, &(0x7f00000001c0)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x9, 0x4, 0x0, 0x0, 0x44, 0x67, 0x0, 0x95, 0x6, 0x0, @rand_addr=0x64010101, @local, {[@lsrr={0x83, 0x7, 0xf1, [@remote]}, @timestamp={0x44, 0x8, 0xa1, 0x0, 0x3, [0x80]}]}}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x4, 0x8, 0x0, 0x1000, {[@timestamp={0x8, 0xa, 0x8001, 0x400056}]}}}}}}}, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$KDSKBSENT(r2, 0x4b49, &(0x7f0000000740)={0x4, "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"}) 3.23134473s ago: executing program 1 (id=1345): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x24008004) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) acct(0x0) fdatasync(0xffffffffffffffff) 2.947191488s ago: executing program 1 (id=1348): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) setsockopt(0xffffffffffffffff, 0x84, 0x7f, 0x0, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x7, 0x2, 0x1}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040001}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {0x10}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_cbq={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) 2.238733557s ago: executing program 6 (id=1355): r0 = syz_usb_connect$rtl8150(0x3, 0x3f, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x16) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) r1 = userfaultfd(0x801) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x80}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r1, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) 1.84875457s ago: executing program 1 (id=1360): socket(0x10, 0x3, 0xa4f2) r0 = syz_clone(0x2008400, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r1) mount(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000080)='proc\x00', 0x189, 0x0) r2 = syz_open_procfs(r0, &(0x7f0000000040)='map_files\x00') fchdir(r2) syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./bus\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='nodiscard,background_gc=sync,acl,alloc_mode=reuse,inline_xattr,disable_roll_forward,background_gc=on,nouser_xattr\x00\x00\x00\x00\x00\x00\x00\x00int=disable,user_xattr,fsync_mode=strict,mode=adaptive,jqfmt=vfsold,noinline_dentry,\x00'], 0x1, 0x5505, &(0x7f0000002480)="$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") epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000140)='.\x00', 0x8000, 0x112) getdents(r3, 0x0, 0x0) 1.483897871s ago: executing program 5 (id=1364): socket(0x10, 0x803, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r0, &(0x7f00000000c0)={&(0x7f00000001c0)={0xa, 0x4e23, 0x80000, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="140000000000000029000000", @ANYRES16=r0], 0x18}, 0x0) 1.325890763s ago: executing program 5 (id=1365): socket(0x80000000000000a, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)) epoll_create1(0x80000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xfffffffffffffee6}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045) r0 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2151, 0xc000, 0x3, 0xce}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1) io_uring_enter(r0, 0x2219, 0xcf74, 0x16, 0x0, 0x0) pipe2(&(0x7f0000000000), 0x80000) 1.21556237s ago: executing program 5 (id=1366): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_smc(0x2b, 0x1, 0x0) syz_open_dev$sg(0x0, 0x208, 0x2c41) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet6(0xa, 0x80002, 0x0) getsockopt$inet6_buf(r5, 0x29, 0x3d, 0x0, &(0x7f0000000140)) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, &(0x7f00000000c0)={'pcl818\x00', [0x100, 0x6, 0x1, 0xc, 0x11, 0x5, 0x79, 0x3, 0x80008, 0x8, 0x2, 0x1, 0x7, 0x1, 0x1, 0xfd, 0xfffffffb, 0x20000009, 0x3, 0x7fffffff, 0xfffffffc, 0xca9f, 0x0, 0x8, 0xfffffffb, 0xf39e, 0xffffffff, 0x8, 0xa6b5, 0x0, 0xfffffff8]}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020002000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e00000000000000000014000000110001"], 0x80}}, 0x0) socket$inet6(0xa, 0x400000000001, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 881.437168ms ago: executing program 5 (id=1367): socket$igmp(0x2, 0x3, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ff1000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff1000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7f, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x0, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0xd}}}, 0x24}}, 0x0) r1 = socket$inet(0x2, 0x80001, 0x84) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000140)="1632800e13", 0x5}], 0x1) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) io_uring_enter(r0, 0x2e56, 0x2c84, 0x36, 0x0, 0x0) 363.351308ms ago: executing program 5 (id=1368): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) close_range(r3, 0xffffffffffffffff, 0x2) dup3(r1, r3, 0x80000) syz_clone(0x80007700, 0x0, 0x0, 0x0, 0x0, 0x0) 113.620156ms ago: executing program 1 (id=1369): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$lock(r1, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) fcntl$lock(r1, 0x26, &(0x7f0000000280)={0x1, 0x0, 0x73f0, 0x9}) fcntl$lock(r1, 0x7, &(0x7f0000000140)={0x1, 0x1, 0x7, 0x5}) fcntl$lock(r1, 0x26, &(0x7f00000000c0)={0x1, 0x2, 0x2, 0x73e9}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 0s ago: executing program 5 (id=1370): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8a}, 0x0) r1 = getpgrp(0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0) read(r2, 0x0, 0x0) kernel console output (not intermixed with test programs): tends beyond EOD, truncated [ 355.265949][ T7091] loop1: p112 start 4093902848 is beyond EOD, truncated [ 355.265973][ T7091] loop1: p113 size 458752 extends beyond EOD, truncated [ 355.305199][ T6028] adutux 1-1:168.0: interrupt endpoints not found [ 355.305698][ T7091] loop1: p114 start 4093902848 is beyond EOD, truncated [ 355.305755][ T7091] loop1: p115 size 458752 extends beyond EOD, truncated [ 355.424659][ T7091] loop1: p116 start 4093902848 is beyond EOD, truncated [ 355.424687][ T7091] loop1: p117 size 458752 extends beyond EOD, truncated [ 355.440440][ T7091] loop1: p118 start 4093902848 is beyond EOD, truncated [ 355.440465][ T7091] loop1: p119 size 458752 extends beyond EOD, truncated [ 355.498012][ T7091] loop1: p120 start 4093902848 is beyond EOD, truncated [ 355.498041][ T7091] loop1: p121 size 458752 extends beyond EOD, truncated [ 355.523370][ T9] usb 1-1: USB disconnect, device number 6 [ 355.543648][ T7091] loop1: p122 start 4093902848 is beyond EOD, truncated [ 355.543674][ T7091] loop1: p123 size 458752 extends beyond EOD, truncated [ 355.600299][ T7091] loop1: p124 start 4093902848 is beyond EOD, truncated [ 355.600328][ T7091] loop1: p125 size 458752 extends beyond EOD, truncated [ 355.614947][ T12] team0 (unregistering): Port device team_slave_1 removed [ 355.626678][ T7091] loop1: p126 start 4093902848 is beyond EOD, truncated [ 355.626704][ T7091] loop1: p127 size 458752 extends beyond EOD, truncated [ 355.676893][ T7091] loop1: p128 start 4093902848 is beyond EOD, truncated [ 355.676922][ T7091] loop1: p129 size 458752 extends beyond EOD, truncated [ 355.706975][ T7091] loop1: p130 start 4093902848 is beyond EOD, truncated [ 355.707004][ T7091] loop1: p131 size 458752 extends beyond EOD, truncated [ 355.736163][ T7091] loop1: p132 start 4093902848 is beyond EOD, truncated [ 355.736190][ T7091] loop1: p133 size 458752 extends beyond EOD, truncated [ 355.754534][ T7091] loop1: p134 start 4093902848 is beyond EOD, truncated [ 355.754569][ T7091] loop1: p135 size 458752 extends beyond EOD, truncated [ 355.778828][ T12] team0 (unregistering): Port device team_slave_0 removed [ 355.816469][ T7091] loop1: p136 start 4093902848 is beyond EOD, truncated [ 355.816511][ T7091] loop1: p137 size 458752 extends beyond EOD, truncated [ 355.847210][ T7091] loop1: p138 start 4093902848 is beyond EOD, truncated [ 355.847237][ T7091] loop1: p139 size 458752 extends beyond EOD, truncated [ 355.884419][ T7091] loop1: p140 start 4093902848 is beyond EOD, truncated [ 355.884448][ T7091] loop1: p141 size 458752 extends beyond EOD, truncated [ 355.908520][ T7091] loop1: p142 start 4093902848 is beyond EOD, truncated [ 355.908562][ T7091] loop1: p143 size 458752 extends beyond EOD, truncated [ 355.914362][ T7091] loop1: p144 start 4093902848 is beyond EOD, truncated [ 355.914386][ T7091] loop1: p145 size 458752 extends beyond EOD, truncated [ 355.947762][ T7091] loop1: p146 start 4093902848 is beyond EOD, truncated [ 355.947792][ T7091] loop1: p147 size 458752 extends beyond EOD, truncated [ 355.975326][ T7091] loop1: p148 start 4093902848 is beyond EOD, truncated [ 355.975360][ T7091] loop1: p149 size 458752 extends beyond EOD, truncated [ 355.981327][ T7091] loop1: p150 start 4093902848 is beyond EOD, truncated [ 355.981355][ T7091] loop1: p151 size 458752 extends beyond EOD, truncated [ 356.021945][ T7091] loop1: p152 start 4093902848 is beyond EOD, truncated [ 356.021974][ T7091] loop1: p153 size 458752 extends beyond EOD, truncated [ 356.050060][ T7091] loop1: p154 start 4093902848 is beyond EOD, truncated [ 356.050087][ T7091] loop1: p155 size 458752 extends beyond EOD, truncated [ 356.054303][ T7091] loop1: p156 start 4093902848 is beyond EOD, truncated [ 356.054332][ T7091] loop1: p157 size 458752 extends beyond EOD, truncated [ 356.104434][ T7091] loop1: p158 start 4093902848 is beyond EOD, truncated [ 356.104465][ T7091] loop1: p159 size 458752 extends beyond EOD, truncated [ 356.131304][ T7091] loop1: p160 start 4093902848 is beyond EOD, truncated [ 356.131334][ T7091] loop1: p161 size 458752 extends beyond EOD, truncated [ 356.149429][ T7091] loop1: p162 start 4093902848 is beyond EOD, truncated [ 356.149458][ T7091] loop1: p163 size 458752 extends beyond EOD, truncated [ 356.161456][ T7091] loop1: p164 start 4093902848 is beyond EOD, truncated [ 356.161531][ T7091] loop1: p165 size 458752 extends beyond EOD, truncated [ 356.189102][ T7091] loop1: p166 start 4093902848 is beyond EOD, truncated [ 356.189135][ T7091] loop1: p167 size 458752 extends beyond EOD, truncated [ 356.238289][ T7091] loop1: p168 start 4093902848 is beyond EOD, truncated [ 356.238319][ T7091] loop1: p169 size 458752 extends beyond EOD, truncated [ 356.256077][ T7091] loop1: p170 start 4093902848 is beyond EOD, truncated [ 356.256152][ T7091] loop1: p171 size 458752 extends beyond EOD, truncated [ 356.355682][ T7091] loop1: p172 start 4093902848 is beyond EOD, truncated [ 356.355715][ T7091] loop1: p173 size 458752 extends beyond EOD, truncated [ 356.377469][ T7091] loop1: p174 start 4093902848 is beyond EOD, truncated [ 356.377500][ T7091] loop1: p175 size 458752 extends beyond EOD, truncated [ 356.420825][ T7091] loop1: p176 start 4093902848 is beyond EOD, truncated [ 356.420855][ T7091] loop1: p177 size 458752 extends beyond EOD, truncated [ 356.440825][ T7091] loop1: p178 start 4093902848 is beyond EOD, truncated [ 356.440892][ T7091] loop1: p179 size 458752 extends beyond EOD, truncated [ 356.467076][ T7091] loop1: p180 start 4093902848 is beyond EOD, truncated [ 356.467105][ T7091] loop1: p181 size 458752 extends beyond EOD, truncated [ 356.488648][ T7091] loop1: p182 start 4093902848 is beyond EOD, truncated [ 356.488676][ T7091] loop1: p183 size 458752 extends beyond EOD, truncated [ 356.523913][ T7091] loop1: p184 start 4093902848 is beyond EOD, truncated [ 356.523941][ T7091] loop1: p185 size 458752 extends beyond EOD, truncated [ 356.539685][ T7091] loop1: p186 start 4093902848 is beyond EOD, truncated [ 356.539713][ T7091] loop1: p187 size 458752 extends beyond EOD, truncated [ 356.574224][ T7091] loop1: p188 start 4093902848 is beyond EOD, truncated [ 356.574253][ T7091] loop1: p189 size 458752 extends beyond EOD, truncated [ 356.584530][ T7091] loop1: p190 start 4093902848 is beyond EOD, truncated [ 356.584559][ T7091] loop1: p191 size 458752 extends beyond EOD, truncated [ 356.591215][ T7091] loop1: p192 start 4093902848 is beyond EOD, truncated [ 356.591242][ T7091] loop1: p193 size 458752 extends beyond EOD, truncated [ 356.632751][ T7091] loop1: p194 start 4093902848 is beyond EOD, truncated [ 356.632791][ T7091] loop1: p195 size 458752 extends beyond EOD, truncated [ 356.674206][ T7091] loop1: p196 start 4093902848 is beyond EOD, truncated [ 356.674235][ T7091] loop1: p197 size 458752 extends beyond EOD, truncated [ 356.821935][ T7091] loop1: p198 start 4093902848 is beyond EOD, truncated [ 356.821965][ T7091] loop1: p199 size 458752 extends beyond EOD, truncated [ 356.900197][ T7091] loop1: p200 start 4093902848 is beyond EOD, truncated [ 356.900225][ T7091] loop1: p201 size 458752 extends beyond EOD, truncated [ 356.917858][ T7091] loop1: p202 start 4093902848 is beyond EOD, truncated [ 356.917887][ T7091] loop1: p203 size 458752 extends beyond EOD, truncated [ 357.538790][ T7091] loop1: p204 start 4093902848 is beyond EOD, truncated [ 357.538819][ T7091] loop1: p205 size 458752 extends beyond EOD, truncated [ 357.542012][ T7091] loop1: p206 start 4093902848 is beyond EOD, truncated [ 357.542038][ T7091] loop1: p207 size 458752 extends beyond EOD, truncated [ 357.550019][ T7091] loop1: p208 start 4093902848 is beyond EOD, truncated [ 357.550043][ T7091] loop1: p209 size 458752 extends beyond EOD, truncated [ 357.554107][ T7091] loop1: p210 start 4093902848 is beyond EOD, truncated [ 357.554133][ T7091] loop1: p211 size 458752 extends beyond EOD, truncated [ 357.597519][ T7091] loop1: p212 start 4093902848 is beyond EOD, truncated [ 357.597592][ T7091] loop1: p213 size 458752 extends beyond EOD, truncated [ 357.671903][ T7091] loop1: p214 start 4093902848 is beyond EOD, truncated [ 357.671935][ T7091] loop1: p215 size 458752 extends beyond EOD, truncated [ 357.675025][ T7091] loop1: p216 start 4093902848 is beyond EOD, truncated [ 357.675050][ T7091] loop1: p217 size 458752 extends beyond EOD, truncated [ 357.681192][ T7091] loop1: p218 start 4093902848 is beyond EOD, truncated [ 357.681219][ T7091] loop1: p219 size 458752 extends beyond EOD, truncated [ 357.687188][ T7091] loop1: p220 start 4093902848 is beyond EOD, truncated [ 357.687213][ T7091] loop1: p221 size 458752 extends beyond EOD, truncated [ 357.693997][ T7091] loop1: p222 start 4093902848 is beyond EOD, truncated [ 357.694025][ T7091] loop1: p223 size 458752 extends beyond EOD, truncated [ 357.700221][ T7091] loop1: p224 start 4093902848 is beyond EOD, truncated [ 357.700247][ T7091] loop1: p225 size 458752 extends beyond EOD, truncated [ 357.706970][ T7091] loop1: p226 start 4093902848 is beyond EOD, truncated [ 357.706997][ T7091] loop1: p227 size 458752 extends beyond EOD, truncated [ 357.715671][ T7091] loop1: p228 start 4093902848 is beyond EOD, truncated [ 357.715698][ T7091] loop1: p229 size 458752 extends beyond EOD, truncated [ 357.725819][ T7091] loop1: p230 start 4093902848 is beyond EOD, truncated [ 357.725848][ T7091] loop1: p231 size 458752 extends beyond EOD, truncated [ 357.733577][ T7091] loop1: p232 start 4093902848 is beyond EOD, truncated [ 357.733605][ T7091] loop1: p233 size 458752 extends beyond EOD, truncated [ 357.742110][ T7091] loop1: p234 start 4093902848 is beyond EOD, truncated [ 357.742138][ T7091] loop1: p235 size 458752 extends beyond EOD, truncated [ 357.748710][ T7091] loop1: p236 start 4093902848 is beyond EOD, truncated [ 357.748745][ T7091] loop1: p237 size 458752 extends beyond EOD, truncated [ 357.757310][ T7091] loop1: p238 start 4093902848 is beyond EOD, truncated [ 357.757339][ T7091] loop1: p239 size 458752 extends beyond EOD, truncated [ 357.762549][ T7091] loop1: p240 start 4093902848 is beyond EOD, truncated [ 357.762577][ T7091] loop1: p241 size 458752 extends beyond EOD, truncated [ 358.026505][ T7091] loop1: p242 start 4093902848 is beyond EOD, truncated [ 358.026550][ T7091] loop1: p243 size 458752 extends beyond EOD, truncated [ 358.032903][ T7091] loop1: p244 start 4093902848 is beyond EOD, truncated [ 358.032930][ T7091] loop1: p245 size 458752 extends beyond EOD, truncated [ 358.071833][ T7091] loop1: p246 start 4093902848 is beyond EOD, truncated [ 358.071860][ T7091] loop1: p247 size 458752 extends beyond EOD, truncated [ 359.355798][ T7091] loop1: p248 start 4093902848 is beyond EOD, truncated [ 359.355828][ T7091] loop1: p249 size 458752 extends beyond EOD, truncated [ 359.889489][ T7091] loop1: p250 start 4093902848 is beyond EOD, truncated [ 359.889519][ T7091] loop1: p251 size 458752 extends beyond EOD, truncated [ 360.008610][ T7091] loop1: p252 start 4093902848 is beyond EOD, truncated [ 360.008640][ T7091] loop1: p253 size 458752 extends beyond EOD, truncated [ 360.040287][ T7091] loop1: p254 start 4093902848 is beyond EOD, truncated [ 360.040314][ T7091] loop1: p255 size 458752 extends beyond EOD, truncated [ 361.357153][ T1547] smbdirect: ib_dev[syz0] removed [ 361.464484][ T5755] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 361.633427][ T5755] usb 5-1: unable to get BOS descriptor or descriptor too short [ 361.634071][ T5755] usb 5-1: not running at top speed; connect to a high speed hub [ 361.653280][ T5755] usb 5-1: config index 0 descriptor too short (expected 1853, got 61) [ 361.653304][ T5755] usb 5-1: config 1 has too many interfaces: 106, using maximum allowed: 32 [ 361.653322][ T5755] usb 5-1: config 1 has an invalid interface number: 212 but max is 105 [ 361.653340][ T5755] usb 5-1: config 1 has an invalid interface number: 226 but max is 105 [ 361.653356][ T5755] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 106 [ 361.653375][ T5755] usb 5-1: config 1 has no interface number 0 [ 361.653389][ T5755] usb 5-1: config 1 has no interface number 1 [ 361.653436][ T5755] usb 5-1: config 1 interface 212 altsetting 9 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 361.653469][ T5755] usb 5-1: config 1 interface 226 altsetting 0 has a duplicate endpoint with address 0x1, skipping [ 361.653489][ T5755] usb 5-1: config 1 interface 226 altsetting 0 endpoint 0x85 has an invalid bInterval 95, changing to 4 [ 361.653511][ T5755] usb 5-1: config 1 interface 226 altsetting 0 endpoint 0x85 has invalid maxpacket 29247, setting to 1023 [ 361.653534][ T5755] usb 5-1: config 1 interface 226 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 361.653553][ T5755] usb 5-1: config 1 interface 226 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 361.653576][ T5755] usb 5-1: config 1 interface 212 has no altsetting 0 [ 361.885665][ T5755] usb 5-1: New USB device found, idVendor=0738, idProduct=4540, bcdDevice=c6.ce [ 361.885699][ T5755] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 361.885720][ T5755] usb 5-1: Product: syz [ 361.885735][ T5755] usb 5-1: Manufacturer: syz [ 361.885750][ T5755] usb 5-1: SerialNumber: syz [ 362.150316][ T12] team0 (unregistering): Port device team_slave_1 removed [ 362.226984][ T5924] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 362.283004][ T12] team0 (unregistering): Port device team_slave_0 removed [ 362.419245][ T5924] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 362.419303][ T5924] usb 1-1: config 1 interface 0 altsetting 8 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 362.419331][ T5924] usb 1-1: config 1 interface 0 has no altsetting 0 [ 362.425302][ T5924] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 362.425334][ T5924] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 362.425354][ T5924] usb 1-1: Product: syz [ 362.425368][ T5924] usb 1-1: Manufacturer: syz [ 362.425382][ T5924] usb 1-1: SerialNumber: syz [ 362.492870][ T5755] usb 5-1: USB disconnect, device number 4 [ 362.655185][ T5924] usb 1-1: No union descriptors [ 362.835443][ T5924] usb 1-1: USB disconnect, device number 7 [ 365.121893][ T99] block nbd0: Possible stuck request ffff888027760000: control (read@0,1024B). Runtime 180 seconds [ 365.121941][ T99] block nbd0: Possible stuck request ffff8880277601c0: control (read@1024,1024B). Runtime 180 seconds [ 365.121973][ T99] block nbd0: Possible stuck request ffff888027760380: control (read@2048,1024B). Runtime 180 seconds [ 365.122004][ T99] block nbd0: Possible stuck request ffff888027760540: control (read@3072,1024B). Runtime 180 seconds [ 365.300925][ T7143] loop0: detected capacity change from 0 to 512 [ 365.571913][ T5280] 8021q: adding VLAN 0 to HW filter on device eth6 [ 365.670885][ T5741] lo speed is unknown, defaulting to 1000 [ 365.670916][ T5741] infiniband syz0: ib_query_port failed (-19) [ 367.188377][ T7143] EXT4-fs (loop0): failed to open journal device unknown-block(0,0) -6 [ 367.670417][ T7160] loop4: detected capacity change from 0 to 4096 [ 367.903531][ T7115] udevd[7115]: inotify_add_watch(7, /dev/loop1p23, 10) failed: No such file or directory [ 367.903806][ T5820] udevd[5820]: inotify_add_watch(7, /dev/loop1p35, 10) failed: No such file or directory [ 367.952627][ T6374] udevd[6374]: inotify_add_watch(7, /dev/loop1p27, 10) failed: No such file or directory [ 367.953259][ T7118] udevd[7118]: inotify_add_watch(7, /dev/loop1p31, 10) failed: No such file or directory [ 367.981089][ T5812] udevd[5812]: inotify_add_watch(7, /dev/loop1p29, 10) failed: No such file or directory [ 368.036200][ T7117] udevd[7117]: inotify_add_watch(7, /dev/loop1p39, 10) failed: No such file or directory [ 368.060742][ T5814] udevd[5814]: inotify_add_watch(7, /dev/loop1p41, 10) failed: No such file or directory [ 368.068180][ T6311] udevd[6311]: inotify_add_watch(7, /dev/loop1p25, 10) failed: No such file or directory [ 368.076165][ T7120] udevd[7120]: inotify_add_watch(7, /dev/loop1p33, 10) failed: No such file or directory [ 368.080185][ T5910] udevd[5910]: inotify_add_watch(7, /dev/loop1p37, 10) failed: No such file or directory [ 368.360959][ T7160] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 368.598197][ T7160] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 4096) [ 368.660353][ T7160] NILFS (loop4): invalid segment: Sequence number mismatch [ 368.660383][ T7160] NILFS (loop4): unable to fall back to spare super block [ 368.660398][ T7160] NILFS (loop4): error -22 while searching super root [ 369.772049][ T7198] loop0: detected capacity change from 0 to 764 [ 369.939235][ T37] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 370.147644][ T37] usb 2-1: Using ep0 maxpacket: 16 [ 370.158535][ T37] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 370.164594][ T37] usb 2-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 370.164642][ T37] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 370.164664][ T37] usb 2-1: Product: syz [ 370.164679][ T37] usb 2-1: Manufacturer: syz [ 370.164694][ T37] usb 2-1: SerialNumber: syz [ 370.304632][ T37] usb 2-1: config 0 descriptor?? [ 370.524770][ T37] asix 2-1:0.0: probe with driver asix failed with error -22 [ 370.678864][ T37] usb 2-1: USB disconnect, device number 4 [ 372.327457][ T7247] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 372.327487][ T7247] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 372.331289][ T7245] loop4: detected capacity change from 0 to 4096 [ 372.445005][ T7247] vhci_hcd vhci_hcd.0: Device attached [ 372.454726][ T7253] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 372.531625][ T7253] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 372.612797][ T7245] ntfs3(loop4): Different NTFS sector size (1024) and media sector size (512). [ 372.723045][ T7251] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(6) [ 372.723074][ T7251] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 372.745401][ T7247] vhci_hcd vhci_hcd.0: pdev(1) rhport(3) sockfd(10) [ 372.745431][ T7247] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 372.745514][ T7247] vhci_hcd vhci_hcd.0: Device attached [ 372.745913][ T7253] vhci_hcd vhci_hcd.0: pdev(1) rhport(5) sockfd(15) [ 372.745935][ T7253] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 372.745987][ T7253] vhci_hcd vhci_hcd.0: Device attached [ 372.750069][ T5755] usb 35-1: new low-speed USB device number 2 using vhci_hcd [ 372.818589][ T7251] vhci_hcd vhci_hcd.0: Device attached [ 373.481138][ T7259] vhci_hcd: connection closed [ 373.496123][ T7254] vhci_hcd: connection closed [ 373.498111][ T7258] vhci_hcd: connection closed [ 373.584096][ T7248] vhci_hcd: connection reset by peer [ 373.593669][ T13] vhci_hcd vhci_hcd.1: stop threads [ 373.596841][ T13] vhci_hcd vhci_hcd.1: release socket [ 373.597303][ T13] vhci_hcd vhci_hcd.1: disconnect device [ 373.597664][ T13] vhci_hcd vhci_hcd.1: stop threads [ 373.597681][ T13] vhci_hcd vhci_hcd.1: release socket [ 373.597718][ T13] vhci_hcd vhci_hcd.1: disconnect device [ 373.603177][ T13] vhci_hcd vhci_hcd.1: stop threads [ 373.603197][ T13] vhci_hcd vhci_hcd.1: release socket [ 373.603262][ T13] vhci_hcd vhci_hcd.1: disconnect device [ 373.606584][ T13] vhci_hcd vhci_hcd.1: stop threads [ 373.606603][ T13] vhci_hcd vhci_hcd.1: release socket [ 373.806722][ T7116] udevd[7116]: inotify_add_watch(7, /dev/loop1p203, 10) failed: No such file or directory [ 373.859289][ T7117] udevd[7117]: inotify_add_watch(7, /dev/loop1p207, 10) failed: No such file or directory [ 373.859999][ T5812] udevd[5812]: inotify_add_watch(7, /dev/loop1p199, 10) failed: No such file or directory [ 373.920559][ T6311] udevd[6311]: inotify_add_watch(7, /dev/loop1p197, 10) failed: No such file or directory [ 373.927393][ T13] vhci_hcd vhci_hcd.1: disconnect device [ 373.958012][ T7118] udevd[7118]: inotify_add_watch(7, /dev/loop1p201, 10) failed: No such file or directory [ 373.973708][ T5910] udevd[5910]: inotify_add_watch(7, /dev/loop1p205, 10) failed: No such file or directory [ 374.020936][ T5812] udevd[5812]: inotify_add_watch(7, /dev/loop1p211, 10) failed: No such file or directory [ 374.052507][ T7115] udevd[7115]: inotify_add_watch(7, /dev/loop1p209, 10) failed: No such file or directory [ 374.082739][ T6311] udevd[6311]: inotify_add_watch(7, /dev/loop1p213, 10) failed: No such file or directory [ 374.142561][ T5812] udevd[5812]: inotify_add_watch(7, /dev/loop1p217, 10) failed: No such file or directory [ 374.343765][ T7245] ntfs3(loop4): Failed to load $Extend (-22). [ 374.343791][ T7245] ntfs3(loop4): Failed to initialize $Extend. [ 374.576008][ T6897] bridge0: port 1(bridge_slave_0) entered blocking state [ 374.576295][ T6897] bridge0: port 1(bridge_slave_0) entered disabled state [ 374.576587][ T6897] bridge_slave_0: entered allmulticast mode [ 374.654446][ T6897] bridge_slave_0: entered promiscuous mode [ 374.988692][ T6897] bridge0: port 2(bridge_slave_1) entered blocking state [ 374.989019][ T6897] bridge0: port 2(bridge_slave_1) entered disabled state [ 374.989500][ T6897] bridge_slave_1: entered allmulticast mode [ 375.031544][ T6897] bridge_slave_1: entered promiscuous mode [ 375.380563][ T32] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 375.540559][ T7273] syz.1.287 (7273): drop_caches: 2 [ 375.580976][ T32] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 375.581020][ T32] usb 1-1: config 0 interface 0 has no altsetting 0 [ 375.603180][ T32] usb 1-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 375.603211][ T32] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 375.603232][ T32] usb 1-1: Product: syz [ 375.603246][ T32] usb 1-1: Manufacturer: syz [ 375.603259][ T32] usb 1-1: SerialNumber: syz [ 375.697885][ T32] usb 1-1: config 0 descriptor?? [ 375.738003][ T32] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 376.025077][ T6897] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 377.357473][ T6937] bridge0: port 1(bridge_slave_0) entered blocking state [ 377.357874][ T6937] bridge0: port 1(bridge_slave_0) entered disabled state [ 377.358225][ T6937] bridge_slave_0: entered allmulticast mode [ 377.391646][ T6937] bridge_slave_0: entered promiscuous mode [ 377.432209][ T32] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 377.448936][ T32] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 377.449103][ T32] usb 1-1: media controller created [ 377.490197][ T6897] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 377.592845][ T6937] bridge0: port 2(bridge_slave_1) entered blocking state [ 377.593148][ T6937] bridge0: port 2(bridge_slave_1) entered disabled state [ 377.593447][ T6937] bridge_slave_1: entered allmulticast mode [ 377.635125][ T6937] bridge_slave_1: entered promiscuous mode [ 377.946475][ T32] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 380.018238][ T5755] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 380.087008][ T32] DVB: Unable to find symbol tda10046_attach() [ 380.087025][ T32] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 380.087193][ T32] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 380.165559][ T32] dvb_usb_m920x 1-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 380.204652][ T12] bridge_slave_1: left allmulticast mode [ 380.204686][ T12] bridge_slave_1: left promiscuous mode [ 380.204970][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 380.229656][ T32] usb 1-1: USB disconnect, device number 8 [ 380.338706][ T7316] program syz.0.303 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 380.420842][ T12] bridge_slave_0: left allmulticast mode [ 380.420878][ T12] bridge_slave_0: left promiscuous mode [ 380.421172][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 381.651373][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 381.651493][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 383.203216][ T12] bridge_slave_0: left allmulticast mode [ 383.203253][ T12] bridge_slave_0: left promiscuous mode [ 383.203529][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 383.506724][ T12] bridge_slave_0: left allmulticast mode [ 383.506762][ T12] bridge_slave_0: left promiscuous mode [ 383.507028][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 385.503280][ T12] bond0 (unregistering): Released all slaves [ 385.815374][ T5639] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 385.845554][ T5639] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 385.848875][ T5639] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 385.850435][ T5639] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 385.851224][ T5639] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 386.011093][ T12] bond0 (unregistering): Released all slaves [ 386.402411][ T12] bond0 (unregistering): Released all slaves [ 386.661690][ T12] bond0 (unregistering): Released all slaves [ 386.758662][ T6897] team0: Port device team_slave_0 added [ 386.932027][ T6937] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 386.971285][ T6937] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 388.397282][ T5639] Bluetooth: hci0: command tx timeout [ 388.587347][ T6937] team0: Port device team_slave_0 added [ 388.623130][ T6937] team0: Port device team_slave_1 added [ 388.931453][ T6937] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 388.931469][ T6937] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 388.931494][ T6937] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 389.015179][ T6937] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 389.015196][ T6937] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 389.015221][ T6937] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 390.849729][ T5632] Bluetooth: hci0: command tx timeout [ 391.478878][ T5639] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 391.516752][ T32] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 391.532334][ T5639] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 391.575444][ T5639] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 391.599777][ T5639] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 391.600481][ T5639] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 391.683263][ T32] usb 2-1: Using ep0 maxpacket: 16 [ 391.709102][ T32] usb 2-1: unable to get BOS descriptor or descriptor too short [ 391.715951][ T32] usb 2-1: config 1 has an invalid interface number: 206 but max is 0 [ 391.715980][ T32] usb 2-1: config 1 has no interface number 0 [ 391.762731][ T32] usb 2-1: New USB device found, idVendor=152d, idProduct=0310, bcdDevice=3b.0a [ 391.762765][ T32] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 391.762785][ T32] usb 2-1: Product: syz [ 391.762801][ T32] usb 2-1: Manufacturer: syz [ 391.762816][ T32] usb 2-1: SerialNumber: syz [ 392.272354][ T7408] atomic_op ffff88802ce9d218 conn xmit_atomic 0000000000000000 [ 392.349999][ T32] uvcvideo 2-1:1.206: probe with driver uvcvideo failed with error -22 [ 392.452799][ T32] usb 2-1: USB disconnect, device number 5 [ 392.725625][ T7414] warning: `syz.4.331' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 393.056037][ T5639] Bluetooth: hci0: command tx timeout [ 393.226710][ T7427] netlink: 'syz.4.334': attribute type 3 has an invalid length. [ 393.226733][ T7427] netlink: 'syz.4.334': attribute type 1 has an invalid length. [ 393.532254][ T7431] block nbd4: NBD_DISCONNECT [ 394.431181][ T5639] Bluetooth: hci6: command tx timeout [ 395.309064][ T5632] Bluetooth: hci0: command tx timeout [ 395.652729][ T5280] 8021q: adding VLAN 0 to HW filter on device eth7 [ 396.695576][ T5632] Bluetooth: hci6: command tx timeout [ 397.000403][ T7455] loop1: detected capacity change from 0 to 128 [ 397.394871][ T5639] Bluetooth: hci4: command 0x0406 tx timeout [ 397.896321][ T99] block nbd0: Possible stuck request ffff888027760000: control (read@0,1024B). Runtime 210 seconds [ 397.896363][ T99] block nbd0: Possible stuck request ffff8880277601c0: control (read@1024,1024B). Runtime 210 seconds [ 397.896388][ T99] block nbd0: Possible stuck request ffff888027760380: control (read@2048,1024B). Runtime 210 seconds [ 397.896412][ T99] block nbd0: Possible stuck request ffff888027760540: control (read@3072,1024B). Runtime 210 seconds [ 398.044691][ T7471] loop1: detected capacity change from 0 to 64 [ 398.953195][ T5632] Bluetooth: hci6: command tx timeout [ 399.445082][ T7493] loop4: detected capacity change from 0 to 2048 [ 399.644170][ T5632] Bluetooth: hci4: command 0x0406 tx timeout [ 399.930023][ T7493] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 400.177007][ T7493] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 400.519233][ T6028] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 400.716924][ T6028] usb 2-1: Using ep0 maxpacket: 8 [ 400.721487][ T6028] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x1 has invalid maxpacket 1536, setting to 64 [ 400.721525][ T6028] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x2 has invalid wMaxPacketSize 0 [ 400.721542][ T6028] usb 2-1: config 0 interface 0 has no altsetting 0 [ 400.723979][ T6028] usb 2-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 400.724014][ T6028] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 400.724030][ T6028] usb 2-1: Product: syz [ 400.724040][ T6028] usb 2-1: Manufacturer: syz [ 400.724051][ T6028] usb 2-1: SerialNumber: syz [ 400.841059][ T6028] usb 2-1: config 0 descriptor?? [ 400.878565][ T6028] snd_usb_toneport 2-1:0.0: Line 6 TonePort UX2 found [ 400.903155][ T7508] comedi comedi4: bad chanlist[0]=0x04000020 chan=32 range length=1 [ 401.082442][ T5280] 8021q: adding VLAN 0 to HW filter on device eth8 [ 401.182475][ T6028] snd_usb_toneport 2-1:0.0: cannot get proper max packet size [ 401.203044][ T5639] Bluetooth: hci6: command tx timeout [ 401.348794][ T6028] snd_usb_toneport 2-1:0.0: Line 6 TonePort UX2 now disconnected [ 401.351774][ T6028] snd_usb_toneport 2-1:0.0: probe with driver snd_usb_toneport failed with error -22 [ 401.511930][ T7512] loop4: detected capacity change from 0 to 128 [ 401.515041][ T6028] usb 2-1: USB disconnect, device number 6 [ 401.515260][ T7515] loop0: detected capacity change from 0 to 256 [ 401.665554][ T7356] bridge0: port 1(bridge_slave_0) entered blocking state [ 401.679148][ T7356] bridge0: port 1(bridge_slave_0) entered disabled state [ 401.679614][ T7356] bridge_slave_0: entered allmulticast mode [ 401.703228][ T7356] bridge_slave_0: entered promiscuous mode [ 401.705990][ T7515] FAT-fs (loop0): Directory bread(block 64) failed [ 401.706017][ T7515] FAT-fs (loop0): Directory bread(block 65) failed [ 401.706096][ T7515] FAT-fs (loop0): Directory bread(block 66) failed [ 401.706115][ T7515] FAT-fs (loop0): Directory bread(block 67) failed [ 401.706215][ T7515] FAT-fs (loop0): Directory bread(block 68) failed [ 401.706235][ T7515] FAT-fs (loop0): Directory bread(block 69) failed [ 401.706313][ T7515] FAT-fs (loop0): Directory bread(block 70) failed [ 401.706333][ T7515] FAT-fs (loop0): Directory bread(block 71) failed [ 401.706410][ T7515] FAT-fs (loop0): Directory bread(block 72) failed [ 401.706429][ T7515] FAT-fs (loop0): Directory bread(block 73) failed [ 401.873750][ T7356] bridge0: port 2(bridge_slave_1) entered blocking state [ 401.874084][ T7356] bridge0: port 2(bridge_slave_1) entered disabled state [ 401.874487][ T7356] bridge_slave_1: entered allmulticast mode [ 401.879151][ T7356] bridge_slave_1: entered promiscuous mode [ 402.582555][ T7356] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 402.610897][ T7356] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 402.958452][ T7356] team0: Port device team_slave_0 added [ 403.272404][ T7529] loop1: detected capacity change from 0 to 512 [ 404.371250][ T7529] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c02c, mo2=0002] [ 404.371396][ T7529] System zones: 1-12 [ 404.426752][ T7356] team0: Port device team_slave_1 added [ 404.543624][ T7529] EXT4-fs error (device loop1): ext4_xattr_inode_iget:446: comm syz.1.363: error while reading EA inode 32 err=-116 [ 404.543662][ T7529] loop1: lost filesystem error report for type 5 error -117 [ 404.544364][ T7529] EXT4-fs (loop1): Remounting filesystem read-only [ 404.544453][ T7529] EXT4-fs warning (device loop1): ext4_evict_inode:270: couldn't mark inode dirty (err -30) [ 404.544545][ T7529] EXT4-fs (loop1): 1 orphan inode deleted [ 404.639318][ T7529] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 404.847875][ T7553] netlink: 8 bytes leftover after parsing attributes in process `syz.0.367'. [ 404.971541][ T5627] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 405.073164][ T7356] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 405.073185][ T7356] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 405.073230][ T7356] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 405.140926][ T7356] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 405.140947][ T7356] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 405.140980][ T7356] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 405.217373][ T7562] capability: warning: `syz.4.372' uses deprecated v2 capabilities in a way that may be insecure [ 405.655300][ T32] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 405.663435][ T7574] loop0: detected capacity change from 0 to 512 [ 405.696900][ T7574] EXT4-fs (loop0): filesystem is read-only [ 405.698968][ T7574] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 405.704483][ T7574] EXT4-fs (loop0): filesystem is read-only [ 405.704506][ T7574] EXT4-fs (loop0): orphan cleanup on readonly fs [ 405.705928][ T7574] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.376: bg 0: block 64: padding at end of block bitmap is not set [ 405.705963][ T7574] loop0: lost filesystem error report for type 5 error -117 [ 405.711451][ C0] EXT4-fs (loop0): initial error at time 1779365213: ext4_validate_block_bitmap:441 [ 405.711483][ C0] EXT4-fs (loop0): last error at time 1779365213: ext4_validate_block_bitmap:441 [ 405.801362][ T7401] bridge0: port 1(bridge_slave_0) entered blocking state [ 405.801610][ T7401] bridge0: port 1(bridge_slave_0) entered disabled state [ 405.801854][ T7401] bridge_slave_0: entered allmulticast mode [ 405.829269][ T32] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 405.829327][ T32] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xC3, changing to 0x83 [ 405.829353][ T32] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 4 [ 405.829382][ T32] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 405.892399][ T7401] bridge_slave_0: entered promiscuous mode [ 405.940233][ T7574] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 405.940262][ T7574] loop0: lost filesystem error report for type 5 error -117 [ 405.955775][ T7574] EXT4-fs (loop0): 1 orphan inode deleted [ 405.976547][ T32] usb 2-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 405.976604][ T32] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=7 [ 405.976625][ T32] usb 2-1: Product: syz [ 405.976641][ T32] usb 2-1: Manufacturer: syz [ 405.976656][ T32] usb 2-1: SerialNumber: syz [ 406.134329][ T7579] netlink: 20 bytes leftover after parsing attributes in process `syz.4.379'. [ 406.175786][ T7574] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 406.180636][ T32] usb 2-1: config 0 descriptor?? [ 406.356299][ T32] usb 2-1: no audio or video endpoints found [ 406.402930][ T5628] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 406.476781][ T32] usb 2-1: USB disconnect, device number 7 [ 406.504368][ T7356] hsr_slave_0: entered promiscuous mode [ 406.506149][ T7356] hsr_slave_1: entered promiscuous mode [ 406.507505][ T7356] debugfs: 'hsr0' already exists in 'hsr' [ 406.507525][ T7356] Cannot create hsr debugfs directory [ 406.508451][ T7401] bridge0: port 2(bridge_slave_1) entered blocking state [ 406.508726][ T7401] bridge0: port 2(bridge_slave_1) entered disabled state [ 406.508934][ T7401] bridge_slave_1: entered allmulticast mode [ 406.562828][ T7401] bridge_slave_1: entered promiscuous mode [ 409.052287][ T7401] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 409.122294][ T7589] loop0: detected capacity change from 0 to 128 [ 409.233237][ T7401] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 409.729652][ T7401] team0: Port device team_slave_0 added [ 409.785909][ T7401] team0: Port device team_slave_1 added [ 410.320611][ T7615] loop4: detected capacity change from 0 to 256 [ 410.458704][ T7617] netlink: 12 bytes leftover after parsing attributes in process `syz.0.391'. [ 410.572619][ T7615] exFAT-fs (loop4): error, no upcase table entry. Please run fsck [ 410.572641][ T7615] exFAT-fs (loop4): Filesystem has been set read-only [ 410.614892][ T7615] exFAT-fs (loop4): failed to test first cluster bit of root dir(5) [ 410.642447][ T12] bridge_slave_1: left allmulticast mode [ 410.642485][ T12] bridge_slave_1: left promiscuous mode [ 410.646049][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 410.878469][ T12] bridge_slave_0: left allmulticast mode [ 410.878509][ T12] bridge_slave_0: left promiscuous mode [ 410.902727][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 411.210477][ T12] bridge_slave_1: left allmulticast mode [ 411.210516][ T12] bridge_slave_1: left promiscuous mode [ 411.210878][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 411.384918][ T12] bridge_slave_0: left allmulticast mode [ 411.384956][ T12] bridge_slave_0: left promiscuous mode [ 411.385184][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 411.704791][ T5639] Bluetooth: hci1: unexpected event for opcode 0x2011 [ 412.149640][ T7642] loop1: detected capacity change from 0 to 256 [ 412.307894][ T7642] FAT-fs (loop1): Directory bread(block 64) failed [ 412.307930][ T7642] FAT-fs (loop1): Directory bread(block 65) failed [ 412.308023][ T7642] FAT-fs (loop1): Directory bread(block 66) failed [ 412.308039][ T7642] FAT-fs (loop1): Directory bread(block 67) failed [ 412.308145][ T7642] FAT-fs (loop1): Directory bread(block 68) failed [ 412.308169][ T7642] FAT-fs (loop1): Directory bread(block 69) failed [ 412.308249][ T7642] FAT-fs (loop1): Directory bread(block 70) failed [ 412.308266][ T7642] FAT-fs (loop1): Directory bread(block 71) failed [ 412.308331][ T7642] FAT-fs (loop1): Directory bread(block 72) failed [ 412.308347][ T7642] FAT-fs (loop1): Directory bread(block 73) failed [ 412.478404][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 412.586785][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 412.684057][ T12] bond0 (unregistering): Released all slaves [ 412.760874][ T7646] loop1: detected capacity change from 0 to 1024 [ 412.812456][ T7646] hfsplus: Bad value for 'gid' [ 413.169360][ T7646] loop1: detected capacity change from 0 to 32768 [ 413.170586][ T7646] JFS: Invalid value of umask [ 413.204202][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 413.312762][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 413.403599][ T12] bond0 (unregistering): Released all slaves [ 413.633580][ T7401] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 413.633600][ T7401] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 413.633631][ T7401] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 413.711627][ T7401] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 413.711645][ T7401] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 413.711678][ T7401] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 414.315575][ T7660] loop4: detected capacity change from 0 to 1024 [ 414.347704][ T7401] hsr_slave_0: entered promiscuous mode [ 414.381072][ T7401] hsr_slave_1: entered promiscuous mode [ 414.400381][ T7401] debugfs: 'hsr0' already exists in 'hsr' [ 414.400408][ T7401] Cannot create hsr debugfs directory [ 415.092789][ T7666] netlink: 40 bytes leftover after parsing attributes in process `syz.1.416'. [ 415.256682][ T7672] loop4: detected capacity change from 0 to 256 [ 415.344963][ T7672] FAT-fs (loop4): Directory bread(block 64) failed [ 415.345001][ T7672] FAT-fs (loop4): Directory bread(block 65) failed [ 415.345141][ T7672] FAT-fs (loop4): Directory bread(block 66) failed [ 415.345165][ T7672] FAT-fs (loop4): Directory bread(block 67) failed [ 415.345272][ T7672] FAT-fs (loop4): Directory bread(block 68) failed [ 415.345295][ T7672] FAT-fs (loop4): Directory bread(block 69) failed [ 415.345394][ T7672] FAT-fs (loop4): Directory bread(block 70) failed [ 415.345417][ T7672] FAT-fs (loop4): Directory bread(block 71) failed [ 415.345522][ T7672] FAT-fs (loop4): Directory bread(block 72) failed [ 415.345545][ T7672] FAT-fs (loop4): Directory bread(block 73) failed [ 415.884200][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 415.913393][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 415.951748][ T7680] loop4: detected capacity change from 0 to 4096 [ 416.112128][ T5639] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 416.113365][ T5639] Bluetooth: hci1: Injecting HCI hardware error event [ 416.137738][ T5632] Bluetooth: hci1: hardware error 0x00 [ 416.643227][ T12] team0 (unregistering): Port device team_slave_1 removed [ 416.804516][ T12] team0 (unregistering): Port device team_slave_0 removed [ 417.071939][ T7707] loop4: detected capacity change from 0 to 256 [ 417.183525][ T7707] FAT-fs (loop4): Directory bread(block 64) failed [ 417.183579][ T7707] FAT-fs (loop4): Directory bread(block 65) failed [ 417.183685][ T7707] FAT-fs (loop4): Directory bread(block 66) failed [ 417.183710][ T7707] FAT-fs (loop4): Directory bread(block 67) failed [ 417.183815][ T7707] FAT-fs (loop4): Directory bread(block 68) failed [ 417.183840][ T7707] FAT-fs (loop4): Directory bread(block 69) failed [ 417.183997][ T7707] FAT-fs (loop4): Directory bread(block 70) failed [ 417.184022][ T7707] FAT-fs (loop4): Directory bread(block 71) failed [ 417.184127][ T7707] FAT-fs (loop4): Directory bread(block 72) failed [ 417.184152][ T7707] FAT-fs (loop4): Directory bread(block 73) failed [ 417.582152][ T12] team0 (unregistering): Port device team_slave_0 removed [ 418.054010][ T5636] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 418.282057][ T5636] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 418.282099][ T5636] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 418.282132][ T5636] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 418.293807][ T5636] usb 5-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 418.293841][ T5636] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 418.293863][ T5636] usb 5-1: Product: syz [ 418.293878][ T5636] usb 5-1: Manufacturer: syz [ 418.293894][ T5636] usb 5-1: SerialNumber: syz [ 418.374320][ T5636] usb 5-1: config 0 descriptor?? [ 418.379340][ T7714] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 418.379471][ T7714] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 418.403381][ T5636] usb 5-1: ucan: probing device on interface #0 [ 418.539900][ T5632] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 418.651289][ T5636] usb 5-1: ucan: could not read protocol version, ret=-32 [ 418.651316][ T5636] usb 5-1: ucan: probe failed; try to update the device firmware [ 418.708825][ T5636] usb 5-1: USB disconnect, device number 5 [ 418.851553][ T7356] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 418.920301][ T7356] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 418.937890][ T7733] netlink: 8 bytes leftover after parsing attributes in process `syz.1.436'. [ 419.014859][ T7356] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 419.103697][ T7356] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 419.182119][ T7356] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 419.287210][ T7356] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 419.305899][ T7356] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 419.404441][ T7356] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 419.572649][ T32] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 419.750845][ T32] usb 2-1: Using ep0 maxpacket: 32 [ 419.754983][ T32] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 419.755018][ T32] usb 2-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 419.755047][ T32] usb 2-1: config 0 interface 0 has no altsetting 0 [ 419.755083][ T32] usb 2-1: New USB device found, idVendor=046d, idProduct=0a07, bcdDevice= 0.00 [ 419.755110][ T32] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 420.008649][ T32] usb 2-1: config 0 descriptor?? [ 420.233296][ T5924] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 420.458247][ T5924] usb 5-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 420.458283][ T5924] usb 5-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 420.458307][ T5924] usb 5-1: config 0 interface 0 has no altsetting 0 [ 420.458360][ T5924] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 420.458386][ T5924] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 420.567822][ T5924] usb 5-1: config 0 descriptor?? [ 420.604833][ T32] hid (null): unknown global tag 0xa3 [ 420.665760][ T32] lg-g15 0003:046D:0A07.0001: unexpected long global item [ 420.686878][ T32] lg-g15 0003:046D:0A07.0001: probe with driver lg-g15 failed with error -22 [ 420.923599][ T5741] usb 2-1: USB disconnect, device number 8 [ 421.279988][ T5924] lua 0003:1E7D:2C2E.0002: unknown main item tag 0x0 [ 421.280031][ T5924] lua 0003:1E7D:2C2E.0002: unknown main item tag 0x0 [ 421.280058][ T5924] lua 0003:1E7D:2C2E.0002: unknown main item tag 0x0 [ 421.280085][ T5924] lua 0003:1E7D:2C2E.0002: unknown main item tag 0x0 [ 421.280113][ T5924] lua 0003:1E7D:2C2E.0002: unknown main item tag 0x0 [ 421.280139][ T5924] lua 0003:1E7D:2C2E.0002: unknown main item tag 0x0 [ 421.280166][ T5924] lua 0003:1E7D:2C2E.0002: unknown main item tag 0x0 [ 421.280194][ T5924] lua 0003:1E7D:2C2E.0002: unknown main item tag 0x0 [ 421.280231][ T5924] lua 0003:1E7D:2C2E.0002: unknown main item tag 0x0 [ 421.280266][ T5924] lua 0003:1E7D:2C2E.0002: unknown main item tag 0x0 [ 421.378588][ T7401] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 421.428079][ T7401] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 421.440808][ T7401] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 421.735107][ T7401] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 421.761565][ T7401] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 421.769915][ T5924] lua 0003:1E7D:2C2E.0002: hidraw0: USB HID v0.20 Device [HID 1e7d:2c2e] on usb-dummy_hcd.4-1/input0 [ 421.909074][ T7401] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 421.947934][ T7401] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 422.052966][ T7401] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 422.167368][ T5924] usb 5-1: USB disconnect, device number 6 [ 422.366447][ T7772] fido_id[7772]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 422.493602][ T7791] netlink: 'syz.1.444': attribute type 1 has an invalid length. [ 422.585645][ T7356] 8021q: adding VLAN 0 to HW filter on device bond0 [ 422.785193][ T7798] loop4: detected capacity change from 0 to 2048 [ 422.812945][ T7798] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=301129, location=301129 [ 422.977141][ T7798] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 423.508016][ T7356] 8021q: adding VLAN 0 to HW filter on device team0 [ 423.575994][ T3295] bridge0: port 1(bridge_slave_0) entered blocking state [ 423.576217][ T3295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 423.810389][ T3295] bridge0: port 2(bridge_slave_1) entered blocking state [ 423.810566][ T3295] bridge0: port 2(bridge_slave_1) entered forwarding state [ 423.827284][ T7814] loop4: detected capacity change from 0 to 1024 [ 423.850290][ T7814] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 424.158576][ T7816] loop4: detected capacity change from 0 to 4096 [ 424.215423][ T7816] EXT4-fs (loop4): Test dummy encryption mode enabled [ 424.291836][ T7816] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 424.394329][ T5629] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 424.538790][ T7401] 8021q: adding VLAN 0 to HW filter on device bond0 [ 424.919478][ T7401] 8021q: adding VLAN 0 to HW filter on device team0 [ 425.005484][ T69] bridge0: port 1(bridge_slave_0) entered blocking state [ 425.025977][ T69] bridge0: port 1(bridge_slave_0) entered forwarding state [ 425.320218][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 425.321426][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 425.922064][ T7845] loop4: detected capacity change from 0 to 4096 [ 425.947462][ T7848] netlink: 8 bytes leftover after parsing attributes in process `syz.1.465'. [ 425.947497][ T7848] netlink: 8 bytes leftover after parsing attributes in process `syz.1.465'. [ 425.950925][ T7845] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512). [ 426.443257][ T7853] bridge0: port 3(macvlan2) entered blocking state [ 426.443868][ T7853] bridge0: port 3(macvlan2) entered disabled state [ 426.444190][ T7853] macvlan2: entered allmulticast mode [ 426.444208][ T7853] bridge0: entered allmulticast mode [ 426.515921][ T7853] bridge0: entered promiscuous mode [ 426.566218][ T7853] macvlan2: left allmulticast mode [ 426.566242][ T7853] bridge0: left allmulticast mode [ 426.597011][ T7845] ntfs3(loop4): ino=3, ntfs_set_state failed, -22. [ 426.597050][ T7845] ntfs3(loop4): Failed to initialize $Extend/$Reparse. [ 426.620153][ T7845] ntfs3(loop4): ino=3, ntfs_set_label failed, -22. [ 426.751221][ T12] ntfs3(loop4): ino=3, ntfs3_write_inode failed, -22. [ 426.765924][ T5629] ntfs3(loop4): ino=3, ntfs_set_state failed, -22. [ 426.765959][ T5629] ntfs3(loop4): Mark volume as dirty due to NTFS errors [ 426.765978][ T5629] ntfs3(loop4): ino=3, ntfs_set_state failed, -22. [ 426.808626][ T154] ntfs3(loop4): ino=3, ntfs3_write_inode failed, -22. [ 426.811016][ T5608] bridge0: left promiscuous mode [ 426.865937][ T7356] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 427.563477][ T7873] loop4: detected capacity change from 0 to 8 [ 427.828571][ T5639] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 427.896395][ T5639] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 427.900131][ T5639] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 427.929314][ T5639] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 427.935286][ T5639] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 428.601760][ T7401] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 428.730114][ T7356] veth0_vlan: entered promiscuous mode [ 428.949787][ T7897] loop4: detected capacity change from 0 to 512 [ 428.991584][ T7897] EXT4-fs (loop4): orphan cleanup on readonly fs [ 429.034619][ T7897] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.473: bg 0: block 5: invalid block bitmap [ 429.034646][ T7897] loop4: lost filesystem error report for type 5 error -117 [ 429.043412][ C1] EXT4-fs (loop4): initial error at time 1779365235: ext4_validate_block_bitmap:432 [ 429.043447][ C1] EXT4-fs (loop4): last error at time 1779365235: ext4_validate_block_bitmap:432 [ 429.099579][ T7356] veth1_vlan: entered promiscuous mode [ 429.339580][ T7897] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 429.339605][ T7897] loop4: lost filesystem error report for type 5 error -117 [ 429.438193][ T7897] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.473: invalid indirect mapped block 3 (level 2) [ 429.438234][ T7897] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 429.446350][ T7897] EXT4-fs (loop4): 2 truncates cleaned up [ 429.521369][ T7897] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 429.565541][ T7897] EXT4-fs error (device loop4): ext4_inlinedir_to_tree:1332: inode #12: block 7: comm syz.4.473: path /173/file1/file0: bad entry in directory: directory entry overrun - offset=196864, inode=4278190093, rec_len=196860, size=60 fake=0 [ 429.793420][ T7356] veth0_macvtap: entered promiscuous mode [ 429.841441][ T5629] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 429.967075][ T7356] veth1_macvtap: entered promiscuous mode [ 430.172930][ T7356] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 430.185241][ T7401] veth0_vlan: entered promiscuous mode [ 430.203440][ T7356] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 430.235541][ T5639] Bluetooth: hci3: command tx timeout [ 430.284590][ T1188] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.304869][ T1188] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.325703][ T7401] veth1_vlan: entered promiscuous mode [ 430.338228][ T1188] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.358891][ T1188] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.448515][ T99] block nbd0: Possible stuck request ffff888027760000: control (read@0,1024B). Runtime 240 seconds [ 430.448568][ T99] block nbd0: Possible stuck request ffff8880277601c0: control (read@1024,1024B). Runtime 240 seconds [ 430.448600][ T99] block nbd0: Possible stuck request ffff888027760380: control (read@2048,1024B). Runtime 240 seconds [ 430.448632][ T99] block nbd0: Possible stuck request ffff888027760540: control (read@3072,1024B). Runtime 240 seconds [ 431.291388][ T7874] bridge0: port 1(bridge_slave_0) entered blocking state [ 431.291673][ T7874] bridge0: port 1(bridge_slave_0) entered disabled state [ 431.291874][ T7874] bridge_slave_0: entered allmulticast mode [ 431.314005][ T7874] bridge_slave_0: entered promiscuous mode [ 431.340694][ T7874] bridge0: port 2(bridge_slave_1) entered blocking state [ 431.340993][ T7874] bridge0: port 2(bridge_slave_1) entered disabled state [ 431.341325][ T7874] bridge_slave_1: entered allmulticast mode [ 431.387498][ T3341] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 431.387520][ T3341] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 431.396316][ T7874] bridge_slave_1: entered promiscuous mode [ 431.423181][ T7401] veth0_macvtap: entered promiscuous mode [ 431.515842][ T7874] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 431.516917][ T7401] veth1_macvtap: entered promiscuous mode [ 431.555204][ T7874] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 431.609235][ T1119] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 431.609257][ T1119] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 431.699168][ T7874] team0: Port device team_slave_0 added [ 431.728760][ T7874] team0: Port device team_slave_1 added [ 431.917471][ T7874] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 431.917487][ T7874] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 431.917512][ T7874] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 432.030497][ T7916] loop1: detected capacity change from 0 to 16 [ 432.031587][ T7916] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 432.087378][ T7874] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 432.087396][ T7874] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 432.087442][ T7874] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 432.226313][ T7401] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 432.373247][ T7115] udevd[7115]: incorrect cramfs checksum on /dev/loop1 [ 432.479946][ T7401] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 432.484225][ T5639] Bluetooth: hci3: command tx timeout [ 432.557935][ T7115] udevd[7115]: incorrect cramfs checksum on /dev/loop1 [ 432.688396][ T7874] hsr_slave_0: entered promiscuous mode [ 432.708682][ T7874] hsr_slave_1: entered promiscuous mode [ 432.722800][ T7874] debugfs: 'hsr0' already exists in 'hsr' [ 432.722828][ T7874] Cannot create hsr debugfs directory [ 432.760173][ T1119] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.761848][ T1119] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.771718][ T1119] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.867560][ T1119] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.651098][ T7931] loop5: detected capacity change from 0 to 128 [ 434.737050][ T5639] Bluetooth: hci3: command tx timeout [ 435.727282][ T7957] sg_write: data in/out 418782/610 bytes for SCSI command 0x0-- guessing data in; [ 435.727282][ T7957] program syz.5.490 not setting count and/or reply_len properly [ 436.909034][ T7976] loop5: detected capacity change from 0 to 16 [ 436.994398][ T5639] Bluetooth: hci3: command tx timeout [ 437.026413][ T7976] erofs (device loop5): mounted with root inode @ nid 36. [ 437.076361][ T7976] erofs (device loop5): readahead error at folio 2 @ nid 89 [ 437.112610][ T7976] syz.5.498: attempt to access beyond end of device [ 437.112610][ T7976] loop5: rw=524288, sector=524296, nr_sectors = 8 limit=16 [ 437.317700][ T7976] erofs (device loop5): failed to decompress (lz4) corrupted compressed data @ pa 4096 size 4096 => 4096 [ 437.317747][ T7976] erofs (device loop5): read error -117 @ 0 of nid 89 [ 437.341544][ T38] audit: type=1800 audit(1779365242.963:16): pid=7976 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.498" name="file2" dev="loop5" ino=89 res=0 errno=0 [ 438.498818][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 438.498840][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 438.971660][ T8003] loop4: detected capacity change from 0 to 512 [ 439.024332][ T8003] EXT4-fs error (device loop4): ext4_orphan_get:1397: inode #15: comm syz.4.509: inode has both inline data and extents flags [ 439.024372][ T8003] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 439.028977][ C1] EXT4-fs (loop4): initial error at time 1779365244: ext4_orphan_get:1397: inode 15 [ 439.029020][ C1] EXT4-fs (loop4): last error at time 1779365244: ext4_orphan_get:1397: inode 15 [ 439.096735][ T8003] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.509: couldn't read orphan inode 15 (err -117) [ 439.096771][ T8003] loop4: lost filesystem error report for type 5 error -117 [ 439.182522][ T8003] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 439.269476][ T8003] EXT4-fs error (device loop4): ext4_map_blocks:791: inode #2: block 13: comm syz.4.509: lblock 0 mapped to illegal pblock 13 (length 1) [ 439.339263][ T8003] EXT4-fs warning (device loop4): htree_dirblock_to_tree:1051: inode #2: lblock 0: comm syz.4.509: error -117 reading directory block [ 439.489507][ T8009] loop1: detected capacity change from 0 to 256 [ 439.594956][ T8009] FAT-fs (loop1): Directory bread(block 64) failed [ 439.594993][ T8009] FAT-fs (loop1): Directory bread(block 65) failed [ 439.595103][ T8009] FAT-fs (loop1): Directory bread(block 66) failed [ 439.595128][ T8009] FAT-fs (loop1): Directory bread(block 67) failed [ 439.595229][ T8009] FAT-fs (loop1): Directory bread(block 68) failed [ 439.595254][ T8009] FAT-fs (loop1): Directory bread(block 69) failed [ 439.595364][ T8009] FAT-fs (loop1): Directory bread(block 70) failed [ 439.595389][ T8009] FAT-fs (loop1): Directory bread(block 71) failed [ 439.595491][ T8009] FAT-fs (loop1): Directory bread(block 72) failed [ 439.595515][ T8009] FAT-fs (loop1): Directory bread(block 73) failed [ 439.730989][ T5629] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 439.971348][ T3409] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 439.971372][ T3409] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 440.090894][ T7874] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 440.199058][ T7874] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 440.200424][ T7874] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 440.367247][ T7874] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 440.384044][ T7874] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 440.609360][ T7874] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 440.632104][ T7874] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 440.739963][ T7874] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 440.871072][ T8025] loop5: detected capacity change from 0 to 512 [ 440.932502][ T8025] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 441.316070][ T8025] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 442.428052][ T8025] EXT4-fs warning (device loop5): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 443.187622][ T7874] 8021q: adding VLAN 0 to HW filter on device bond0 [ 443.223551][ T7874] 8021q: adding VLAN 0 to HW filter on device team0 [ 443.284778][ T3341] bridge0: port 1(bridge_slave_0) entered blocking state [ 443.285048][ T3341] bridge0: port 1(bridge_slave_0) entered forwarding state [ 443.299375][ T5604] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 443.379557][ T1547] bridge0: port 2(bridge_slave_1) entered blocking state [ 443.379777][ T1547] bridge0: port 2(bridge_slave_1) entered forwarding state [ 443.533414][ T5604] usb 7-1: Using ep0 maxpacket: 16 [ 443.535993][ T5604] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 443.557075][ T5604] usb 7-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 443.557103][ T5604] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 443.557119][ T5604] usb 7-1: Product: syz [ 443.557131][ T5604] usb 7-1: Manufacturer: syz [ 443.557143][ T5604] usb 7-1: SerialNumber: syz [ 443.562293][ T5604] usb 7-1: config 0 descriptor?? [ 443.671719][ T5604] hub 7-1:0.0: bad descriptor, ignoring hub [ 443.671761][ T5604] hub 7-1:0.0: probe with driver hub failed with error -5 [ 443.920464][ T8025] EXT4-fs error (device loop5): ext4_ext_check_inode:521: inode #2: comm syz.5.518: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 444.092646][ T5604] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 444.348684][ T8050] loop1: detected capacity change from 0 to 2048 [ 444.435202][ T7356] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 444.679962][ T8050] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 444.828598][ T8055] loop4: detected capacity change from 0 to 1024 [ 445.720698][ T5636] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 445.753624][ T5604] usb 7-1: USB disconnect, device number 2 [ 445.930307][ T5636] usb 2-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 445.930338][ T5636] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 446.477153][ T5636] usb 2-1: config 0 descriptor?? [ 446.593433][ T5636] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 446.769525][ T5636] gp8psk: usb in 128 operation failed. [ 446.815289][ T8080] loop5: detected capacity change from 0 to 128 [ 446.875974][ T8080] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 446.876800][ T8080] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 446.999398][ T5636] gp8psk: usb in 146 operation failed. [ 446.999417][ T5636] gp8psk: failed to get FW version [ 446.999813][ T5636] gp8psk: usb in 149 operation failed. [ 446.999828][ T5636] gp8psk: failed to get FPGA version [ 447.000204][ T5636] gp8psk: usb in 138 operation failed. [ 447.000218][ T5636] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 447.000252][ T5636] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 447.077131][ T5636] usb 2-1: USB disconnect, device number 9 [ 447.163398][ T7874] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 447.483911][ T8086] loop4: detected capacity change from 0 to 256 [ 447.700449][ T1547] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 447.742337][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 447.742434][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 447.848147][ T8093] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 2621 [ 447.984379][ T8086] FAT-fs (loop4): Directory bread(block 64) failed [ 447.984412][ T8086] FAT-fs (loop4): Directory bread(block 65) failed [ 447.984501][ T8086] FAT-fs (loop4): Directory bread(block 66) failed [ 447.984522][ T8086] FAT-fs (loop4): Directory bread(block 67) failed [ 447.984611][ T8086] FAT-fs (loop4): Directory bread(block 68) failed [ 447.984633][ T8086] FAT-fs (loop4): Directory bread(block 69) failed [ 447.984721][ T8086] FAT-fs (loop4): Directory bread(block 70) failed [ 447.984743][ T8086] FAT-fs (loop4): Directory bread(block 71) failed [ 447.984842][ T8086] FAT-fs (loop4): Directory bread(block 72) failed [ 447.984864][ T8086] FAT-fs (loop4): Directory bread(block 73) failed [ 448.741455][ T8107] loop5: detected capacity change from 0 to 512 [ 448.793433][ T9] hid_parser_main: 26 callbacks suppressed [ 448.793463][ T9] hid-generic 000A:0035:0089.0003: unknown main item tag 0x0 [ 448.793496][ T9] hid-generic 000A:0035:0089.0003: unknown main item tag 0x0 [ 448.793524][ T9] hid-generic 000A:0035:0089.0003: unknown main item tag 0x0 [ 448.793551][ T9] hid-generic 000A:0035:0089.0003: unknown main item tag 0x0 [ 448.793578][ T9] hid-generic 000A:0035:0089.0003: unknown main item tag 0x0 [ 448.793606][ T9] hid-generic 000A:0035:0089.0003: unknown main item tag 0x0 [ 448.793633][ T9] hid-generic 000A:0035:0089.0003: unknown main item tag 0x0 [ 448.793660][ T9] hid-generic 000A:0035:0089.0003: unknown main item tag 0x0 [ 448.793688][ T9] hid-generic 000A:0035:0089.0003: unknown main item tag 0x0 [ 448.793715][ T9] hid-generic 000A:0035:0089.0003: unknown main item tag 0x0 [ 449.205384][ T7874] veth0_vlan: entered promiscuous mode [ 449.456741][ T8107] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 449.566977][ T7874] veth1_vlan: entered promiscuous mode [ 449.585869][ T9] hid-generic 000A:0035:0089.0003: hidraw0: HID v0.83 Device [syz0] on syz0 [ 449.668468][ T8111] loop6: detected capacity change from 0 to 256 [ 450.002094][ T7874] veth0_macvtap: entered promiscuous mode [ 450.079878][ T7874] veth1_macvtap: entered promiscuous mode [ 450.309787][ T5636] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 450.454771][ T8111] FAT-fs (loop6): Directory bread(block 64) failed [ 450.454807][ T8111] FAT-fs (loop6): Directory bread(block 65) failed [ 450.454915][ T8111] FAT-fs (loop6): Directory bread(block 66) failed [ 450.454941][ T8111] FAT-fs (loop6): Directory bread(block 67) failed [ 450.455046][ T8111] FAT-fs (loop6): Directory bread(block 68) failed [ 450.455071][ T8111] FAT-fs (loop6): Directory bread(block 69) failed [ 450.455188][ T8111] FAT-fs (loop6): Directory bread(block 70) failed [ 450.455212][ T8111] FAT-fs (loop6): Directory bread(block 71) failed [ 450.455314][ T8111] FAT-fs (loop6): Directory bread(block 72) failed [ 450.455339][ T8111] FAT-fs (loop6): Directory bread(block 73) failed [ 450.538009][ T5636] usb 6-1: Using ep0 maxpacket: 16 [ 450.547879][ T5636] usb 6-1: config 0 interface 0 altsetting 252 endpoint 0x81 has an invalid bInterval 254, changing to 11 [ 450.547936][ T5636] usb 6-1: config 0 interface 0 has no altsetting 0 [ 450.547973][ T5636] usb 6-1: New USB device found, idVendor=04b4, idProduct=de61, bcdDevice= 0.00 [ 450.548005][ T5636] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 450.550323][ T7874] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 450.754608][ T5636] usb 6-1: config 0 descriptor?? [ 450.765946][ T8118] netlink: 44 bytes leftover after parsing attributes in process `syz.4.545'. [ 451.113127][ T7874] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 451.315065][ T32] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 451.394202][ T5636] cypress 0003:04B4:DE61.0004: hidraw0: USB HID v0.04 Device [HID 04b4:de61] on usb-dummy_hcd.5-1/input0 [ 451.414504][ T1547] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.428315][ T1547] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.443569][ T1547] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.443620][ T1547] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.506236][ T5636] usb 6-1: USB disconnect, device number 2 [ 451.528283][ T32] usb 5-1: Using ep0 maxpacket: 32 [ 451.539623][ T32] usb 5-1: config index 0 descriptor too short (expected 35577, got 27) [ 451.539655][ T32] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 451.539676][ T32] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 451.539697][ T32] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 451.539718][ T32] usb 5-1: config 1 has no interface number 0 [ 451.539767][ T32] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 451.539791][ T32] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 451.645311][ T8124] loop1: detected capacity change from 0 to 256 [ 451.694805][ T8124] exfat: Deprecated parameter 'utf8' [ 451.749927][ T32] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found [ 451.883102][ T32] snd_usb_pod 5-1:1.1: endpoint not available, using fallback values [ 451.883464][ T32] snd_usb_pod 5-1:1.1: invalid control EP [ 451.883480][ T32] snd_usb_pod 5-1:1.1: cannot start listening: -22 [ 451.935867][ T32] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected [ 451.953392][ T32] snd_usb_pod 5-1:1.1: probe with driver snd_usb_pod failed with error -22 [ 452.149124][ T9] usb 5-1: USB disconnect, device number 7 [ 452.327846][ T8126] fido_id[8126]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 453.927858][ T3409] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 453.927882][ T3409] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 454.098489][ T8153] capability: warning: `syz.6.558' uses 32-bit capabilities (legacy support in use) [ 454.318488][ T1119] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 454.318511][ T1119] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 454.561931][ T8161] loop6: detected capacity change from 0 to 512 [ 454.849582][ T8161] EXT4-fs (loop6): 1 truncate cleaned up [ 454.879092][ T8161] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 455.201646][ T7401] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 455.202229][ T8169] loop7: detected capacity change from 0 to 128 [ 455.608879][ T8169] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 455.668540][ T8169] ext4 filesystem being mounted at /0/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 457.718803][ T7874] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 458.388527][ T8203] loop5: detected capacity change from 0 to 512 [ 458.390453][ T8202] loop1: detected capacity change from 0 to 256 [ 458.428389][ T8203] EXT4-fs error (device loop5): ext4_iget_extra_inode:5128: inode #15: comm syz.5.575: corrupted in-inode xattr: e_value size too large [ 458.428427][ T8203] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 458.429342][ T8203] EXT4-fs error (device loop5): ext4_orphan_get:1402: comm syz.5.575: couldn't read orphan inode 15 (err -117) [ 458.429429][ T8203] loop5: lost filesystem error report for type 5 error -117 [ 458.487728][ T32] usb 8-1: new full-speed USB device number 2 using dummy_hcd [ 458.539645][ T8202] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d) [ 458.567622][ T8203] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 458.678336][ T32] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 458.678388][ T32] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 12 [ 458.678433][ T32] usb 8-1: New USB device found, idVendor=04fc, idProduct=05d8, bcdDevice= 0.00 [ 458.678458][ T32] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 458.907223][ T32] usb 8-1: config 0 descriptor?? [ 459.024647][ T8199] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 459.397408][ T7356] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 459.709976][ T8209] loop4: detected capacity change from 0 to 2048 [ 459.724392][ T32] hid_parser_main: 107 callbacks suppressed [ 459.724418][ T32] sunplus 0003:04FC:05D8.0005: unknown main item tag 0x3 [ 459.724453][ T32] sunplus 0003:04FC:05D8.0005: unknown main item tag 0x0 [ 459.724476][ T32] sunplus 0003:04FC:05D8.0005: unknown main item tag 0x0 [ 459.724501][ T32] sunplus 0003:04FC:05D8.0005: unknown main item tag 0x0 [ 459.724536][ T32] sunplus 0003:04FC:05D8.0005: unknown main item tag 0x0 [ 459.724563][ T32] sunplus 0003:04FC:05D8.0005: unknown main item tag 0x0 [ 459.724589][ T32] sunplus 0003:04FC:05D8.0005: unknown main item tag 0x0 [ 459.724615][ T32] sunplus 0003:04FC:05D8.0005: unknown main item tag 0x0 [ 459.958120][ T8209] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 459.969035][ T32] sunplus 0003:04FC:05D8.0005: hidraw0: USB HID v0.05 Device [HID 04fc:05d8] on usb-dummy_hcd.7-1/input0 [ 460.066413][ T32] usb 8-1: USB disconnect, device number 2 [ 460.262892][ T8219] loop1: detected capacity change from 0 to 512 [ 460.263997][ T8219] EXT4-fs: Ignoring removed orlov option [ 460.472580][ T8220] fido_id[8220]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/8-1/report_descriptor': No such file or directory [ 460.675344][ T5629] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 460.743579][ T8219] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 461.004429][ T9] usb 6-1: new low-speed USB device number 3 using dummy_hcd [ 461.184159][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 461.184197][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 16, setting to 8 [ 461.184224][ T9] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 7 [ 461.184277][ T9] usb 6-1: New USB device found, idVendor=046d, idProduct=c081, bcdDevice= 0.00 [ 461.184303][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 461.354202][ T9] usb 6-1: config 0 descriptor?? [ 461.355749][ T8223] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 461.517839][ T8232] loop6: detected capacity change from 0 to 32768 [ 461.647439][ T5627] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 461.663718][ T8232] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.588 (8232) [ 461.746307][ T8232] BTRFS info (device loop6): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 461.746357][ T8232] BTRFS info (device loop6): using sha256 checksum algorithm [ 461.882630][ T8239] bond0: entered promiscuous mode [ 461.882655][ T8239] bond_slave_0: entered promiscuous mode [ 461.882901][ T8239] bond_slave_1: entered promiscuous mode [ 461.926329][ T8239] batadv0: entered promiscuous mode [ 461.948637][ T8239] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 461.968000][ T9] hid (null): unknown global tag 0xe [ 461.968035][ T9] hid (null): invalid report_count 34581 [ 462.106538][ T9] logitech-hidpp-device 0003:046D:C081.0006: unknown global tag 0xe [ 462.106563][ T9] logitech-hidpp-device 0003:046D:C081.0006: item 0 4 1 14 parsing failed [ 462.107265][ T9] logitech-hidpp-device 0003:046D:C081.0006: hidpp_probe:parse failed [ 462.108707][ T9] logitech-hidpp-device 0003:046D:C081.0006: probe with driver logitech-hidpp-device failed with error -22 [ 462.193535][ T8250] loop1: detected capacity change from 0 to 128 [ 462.313887][ T8239] bond0: left promiscuous mode [ 462.313911][ T8239] bond_slave_0: left promiscuous mode [ 462.314136][ T8239] bond_slave_1: left promiscuous mode [ 462.322013][ T9] usb 6-1: USB disconnect, device number 3 [ 462.345619][ T8248] loop7: detected capacity change from 0 to 2048 [ 462.374560][ T8248] ext4: Unknown parameter 'rootcontext' [ 462.424257][ T8232] BTRFS info (device loop6): rebuilding free space tree [ 462.567430][ T8239] batadv0: left promiscuous mode [ 462.709967][ T8232] BTRFS info (device loop6): disabling free space tree [ 462.710137][ T8232] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 462.710169][ T8232] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 462.961830][ T8232] BTRFS info (device loop6): setting nodatasum [ 462.961858][ T8232] BTRFS info (device loop6): setting nodatacow [ 462.961874][ T8232] BTRFS info (device loop6): turning off barriers [ 462.961891][ T8232] BTRFS info (device loop6): turning on sync discard [ 462.961906][ T8232] BTRFS info (device loop6): force clearing of disk cache [ 463.033055][ T99] block nbd0: Possible stuck request ffff888027760000: control (read@0,1024B). Runtime 270 seconds [ 463.033127][ T99] block nbd0: Possible stuck request ffff8880277601c0: control (read@1024,1024B). Runtime 270 seconds [ 463.033161][ T99] block nbd0: Possible stuck request ffff888027760380: control (read@2048,1024B). Runtime 270 seconds [ 463.033193][ T99] block nbd0: Possible stuck request ffff888027760540: control (read@3072,1024B). Runtime 270 seconds [ 463.112445][ T8248] overlayfs: upper fs does not support tmpfile. [ 463.364139][ T8259] tap0: tun_chr_ioctl cmd 1074025677 [ 463.364453][ T8259] tap0: linktype set to 780 [ 463.525127][ T7401] BTRFS info (device loop6): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 463.996627][ T8270] program syz.4.597 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 464.696034][ T8281] loop4: detected capacity change from 0 to 256 [ 464.960643][ T8281] FAT-fs (loop4): Directory bread(block 64) failed [ 464.960679][ T8281] FAT-fs (loop4): Directory bread(block 65) failed [ 464.960796][ T8281] FAT-fs (loop4): Directory bread(block 66) failed [ 464.960822][ T8281] FAT-fs (loop4): Directory bread(block 67) failed [ 464.960945][ T8281] FAT-fs (loop4): Directory bread(block 68) failed [ 464.960973][ T8281] FAT-fs (loop4): Directory bread(block 69) failed [ 464.961075][ T8281] FAT-fs (loop4): Directory bread(block 70) failed [ 464.961100][ T8281] FAT-fs (loop4): Directory bread(block 71) failed [ 464.961203][ T8281] FAT-fs (loop4): Directory bread(block 72) failed [ 464.961228][ T8281] FAT-fs (loop4): Directory bread(block 73) failed [ 465.460023][ T8294] netlink: 4 bytes leftover after parsing attributes in process `syz.7.606'. [ 466.159014][ T8304] Driver unsupported XDP return value 0 on prog (id 33) dev N/A, expect packet loss! [ 467.411346][ T5924] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 467.571376][ T5924] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 467.571409][ T5924] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 467.597652][ T5924] usb 6-1: config 0 descriptor?? [ 468.045262][ T8334] netlink: 32 bytes leftover after parsing attributes in process `syz.1.622'. [ 468.986778][ T8345] loop6: detected capacity change from 0 to 128 [ 469.022407][ T8348] loop4: detected capacity change from 0 to 512 [ 469.064279][ T8348] EXT4-fs: Ignoring removed mblk_io_submit option [ 469.267965][ T8348] EXT4-fs error (device loop4): ext4_iget_extra_inode:5128: inode #15: comm syz.4.628: corrupted in-inode xattr: e_value size too large [ 469.268005][ T8348] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 469.275623][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 469.275649][ C0] EXT4-fs (loop4): initial error at time 1779365272: ext4_iget_extra_inode:5128: inode 15 [ 469.275682][ C0] EXT4-fs (loop4): last error at time 1779365272: ext4_iget_extra_inode:5128: inode 15 [ 469.346741][ T8348] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.628: couldn't read orphan inode 15 (err -117) [ 469.346790][ T8348] loop4: lost filesystem error report for type 5 error -117 [ 469.393248][ T8348] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 469.534576][ T8345] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 469.534635][ T8345] hpfs: filesystem error: improperly stopped [ 469.534651][ T8345] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 469.534666][ T8345] hpfs: You really don't want any checks? You are crazy... [ 469.645547][ T8345] hpfs: hpfs_map_sector(): read error [ 469.645566][ T8345] hpfs: code page support is disabled [ 469.646016][ T8345] hpfs: hpfs_map_4sectors(): unaligned read [ 469.646191][ T8345] hpfs: hpfs_map_4sectors(): unaligned read [ 469.646203][ T8345] hpfs: filesystem error: unable to find root dir [ 469.861665][ T5629] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 472.209508][ T8368] loop5: detected capacity change from 0 to 4096 [ 472.211208][ T8368] ntfs3: Unknown parameter '\n-6EI4_W6P4jPΠ1-.v%l9VK{p1Txpb >#W^@Q@rrcmDw )Zbu64Q">K' [ 473.681045][ T8395] loop7: detected capacity change from 0 to 1024 [ 473.737700][ T8398] loop5: detected capacity change from 0 to 512 [ 473.836923][ T8398] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 473.860594][ T8403] loop4: detected capacity change from 0 to 512 [ 473.881401][ T8398] EXT4-fs (loop5): 1 truncate cleaned up [ 473.896001][ T8395] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 473.941920][ T8398] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 474.020915][ T8411] loop1: detected capacity change from 0 to 256 [ 474.054327][ T8403] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 474.115726][ T8411] exfat: Deprecated parameter 'namecase' [ 474.115795][ T8411] exfat: Deprecated parameter 'namecase' [ 474.115832][ T8411] exfat: Deprecated parameter 'namecase' [ 474.141155][ T8399] EXT4-fs warning (device loop4): dx_probe:837: inode #2: comm syz.4.645: Unimplemented hash flags: 0x0001 [ 474.141247][ T8399] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.645: Corrupt directory, running e2fsck is recommended [ 474.378211][ T8411] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0x5174a95f, utbl_chksum : 0xe619d30d) [ 474.603205][ T7356] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 474.836885][ T5755] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 474.839911][ T5629] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 475.081795][ T5755] usb 7-1: Using ep0 maxpacket: 32 [ 475.084198][ T5755] usb 7-1: config 0 has an invalid interface number: 184 but max is 0 [ 475.084226][ T5755] usb 7-1: config 0 has no interface number 0 [ 475.084276][ T5755] usb 7-1: config 0 interface 184 has no altsetting 0 [ 475.137730][ T5755] usb 7-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 475.137763][ T5755] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 475.137786][ T5755] usb 7-1: Product: syz [ 475.137801][ T5755] usb 7-1: Manufacturer: syz [ 475.137816][ T5755] usb 7-1: SerialNumber: syz [ 475.370054][ T5755] usb 7-1: config 0 descriptor?? [ 475.489095][ T8425] netlink: 8 bytes leftover after parsing attributes in process `syz.1.654'. [ 475.590855][ T7874] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 476.415053][ T5755] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71 [ 476.415090][ T5755] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 476.418539][ T5755] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 476.418569][ T5755] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 476.418591][ T5755] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 476.418610][ T5755] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 476.418927][ T5755] smsc75xx 7-1:0.184: probe with driver smsc75xx failed with error -71 [ 476.715135][ T8433] loop5: detected capacity change from 0 to 6 [ 476.732030][ T5755] usb 7-1: USB disconnect, device number 3 [ 476.758945][ T5636] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 476.920255][ T8433] Dev loop5: unable to read RDB block 6 [ 476.920347][ T8433] loop5: AHDI p1 p2 [ 476.920783][ T8433] loop5: partition table partially beyond EOD, truncated [ 476.925320][ T8433] loop5: p1 start 1702059890 is beyond EOD, truncated [ 477.129318][ T5636] usb 5-1: Using ep0 maxpacket: 8 [ 477.207511][ T5636] usb 5-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 477.207543][ T5636] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 477.207564][ T5636] usb 5-1: Product: syz [ 477.207579][ T5636] usb 5-1: Manufacturer: syz [ 477.207594][ T5636] usb 5-1: SerialNumber: syz [ 477.260406][ T5636] usb 5-1: config 0 descriptor?? [ 477.344018][ T8442] loop6: detected capacity change from 0 to 128 [ 477.346899][ T5636] gspca_main: se401-2.14.0 probing 047d:5003 [ 477.423835][ T8442] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 477.425152][ T8442] ext4 filesystem being mounted at /35/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 477.621665][ T8446] loop1: detected capacity change from 0 to 1024 [ 477.753977][ T5636] gspca_se401: ExtraFeatures: 117 [ 477.753996][ T5636] gspca_se401: Too many frame sizes [ 478.007684][ T5755] usb 5-1: USB disconnect, device number 8 [ 478.260477][ T7401] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 479.344701][ T8474] loop6: detected capacity change from 0 to 2048 [ 479.386302][ T8474] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 479.713667][ T8480] netlink: 68 bytes leftover after parsing attributes in process `syz.5.673'. [ 481.515381][ T8515] loop7: detected capacity change from 0 to 1024 [ 481.972376][ T8520] pimreg3: entered allmulticast mode [ 482.096724][ T8526] loop1: detected capacity change from 0 to 128 [ 482.104222][ T8519] pimreg3: left allmulticast mode [ 482.646861][ T8531] Bluetooth: MGMT ver 1.23 [ 484.032368][ T8528] bridge0: port 2(bridge_slave_1) entered disabled state [ 484.156432][ T5755] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 484.338550][ T5755] usb 8-1: Using ep0 maxpacket: 32 [ 484.341145][ T5755] usb 8-1: config 3 has an invalid interface number: 160 but max is 0 [ 484.341184][ T5755] usb 8-1: config 3 has no interface number 0 [ 484.341232][ T5755] usb 8-1: config 3 interface 160 altsetting 3 bulk endpoint 0xF has invalid maxpacket 16 [ 484.341261][ T5755] usb 8-1: config 3 interface 160 altsetting 3 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 484.341288][ T5755] usb 8-1: config 3 interface 160 altsetting 3 endpoint 0x8F has invalid wMaxPacketSize 0 [ 484.341312][ T5755] usb 8-1: config 3 interface 160 has no altsetting 0 [ 484.344698][ T5755] usb 8-1: New USB device found, idVendor=16c0, idProduct=05df, bcdDevice=7d.bd [ 484.344727][ T5755] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 484.344748][ T5755] usb 8-1: Product: syz [ 484.344762][ T5755] usb 8-1: Manufacturer: syz [ 484.344784][ T5755] usb 8-1: SerialNumber: syz [ 484.507416][ T8540] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 484.934180][ T5755] usb 8-1: USB disconnect, device number 3 [ 485.229975][ T8560] netlink: 'syz.6.707': attribute type 12 has an invalid length. [ 485.229997][ T8560] netlink: 'syz.6.707': attribute type 29 has an invalid length. [ 485.230010][ T8560] netlink: 148 bytes leftover after parsing attributes in process `syz.6.707'. [ 485.230058][ T8560] netlink: 51 bytes leftover after parsing attributes in process `syz.6.707'. [ 487.272260][ T8591] loop6: detected capacity change from 0 to 764 [ 488.943928][ T8629] loop6: detected capacity change from 0 to 256 [ 489.349835][ T8629] FAT-fs (loop6): Directory bread(block 64) failed [ 489.349885][ T8629] FAT-fs (loop6): Directory bread(block 65) failed [ 489.350051][ T8629] FAT-fs (loop6): Directory bread(block 66) failed [ 489.350202][ T8629] FAT-fs (loop6): Directory bread(block 67) failed [ 489.350331][ T8629] FAT-fs (loop6): Directory bread(block 68) failed [ 489.350356][ T8629] FAT-fs (loop6): Directory bread(block 69) failed [ 489.350493][ T8629] FAT-fs (loop6): Directory bread(block 70) failed [ 489.350519][ T8629] FAT-fs (loop6): Directory bread(block 71) failed [ 489.350630][ T8629] FAT-fs (loop6): Directory bread(block 72) failed [ 489.350656][ T8629] FAT-fs (loop6): Directory bread(block 73) failed [ 489.746752][ T8642] loop7: detected capacity change from 0 to 164 [ 490.148100][ T8642] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 490.327161][ T8648] loop6: detected capacity change from 0 to 512 [ 490.365320][ T8648] EXT4-fs: Ignoring removed mblk_io_submit option [ 490.503589][ T8648] EXT4-fs (loop6): orphan cleanup on readonly fs [ 490.503691][ T8648] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -13 [ 490.730872][ T8648] EXT4-fs error (device loop6): ext4_clear_blocks:876: inode #13: comm syz.6.744: attempt to clear invalid blocks 2 len 1 [ 490.730910][ T8648] loop6: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 490.737896][ C1] EXT4-fs (loop6): initial error at time 1779365292: ext4_clear_blocks:876: inode 13 [ 490.737940][ C1] EXT4-fs (loop6): last error at time 1779365292: ext4_clear_blocks:876: inode 13 [ 491.082707][ T8648] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 491.172604][ T8648] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #13: comm syz.6.744: invalid indirect mapped block 1819239214 (level 0) [ 491.172650][ T8648] loop6: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 491.188027][ T5754] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 491.367933][ T5754] usb 8-1: Using ep0 maxpacket: 8 [ 491.375640][ T5754] usb 8-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 491.375673][ T5754] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 491.375694][ T5754] usb 8-1: Product: syz [ 491.375709][ T5754] usb 8-1: Manufacturer: syz [ 491.375725][ T5754] usb 8-1: SerialNumber: syz [ 491.441950][ T5754] usb 8-1: config 0 descriptor?? [ 491.568887][ T8648] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #13: comm syz.6.744: invalid indirect mapped block 1819239214 (level 1) [ 491.568933][ T8648] loop6: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 491.735698][ T5754] usb 8-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 492.176031][ T8670] loop4: detected capacity change from 0 to 512 [ 492.194174][ T5754] usb write operation failed. (-71) [ 492.217359][ T8670] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 492.442254][ T5754] usb 8-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 492.494702][ T5754] dvbdev: DVB: registering new adapter (Terratec H7) [ 492.494771][ T5754] usb 8-1: media controller created [ 492.495226][ T5754] usb read operation failed. (-71) [ 492.498976][ T5754] usb write operation failed. (-71) [ 492.688043][ T5754] dvb_usb_az6007 8-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 492.705879][ T5754] usb 8-1: USB disconnect, device number 4 [ 492.721345][ T8648] EXT4-fs (loop6): 1 truncate cleaned up [ 492.772445][ T8648] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 492.938399][ T8670] EXT4-fs (loop4): 1 truncate cleaned up [ 492.992677][ T8648] EXT4-fs: Can't set or change test_dummy_encryption on remount [ 493.050879][ T8670] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 493.129035][ T7401] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 493.514505][ T38] audit: type=1800 audit(1779365294.708:17): pid=8670 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.753" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 493.941684][ T8693] loop6: detected capacity change from 0 to 32768 [ 493.942958][ T8693] btrfs: Deprecated parameter 'usebackuproot' [ 493.942999][ T8693] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 493.949816][ T8693] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.759 (8693) [ 494.013097][ T8693] BTRFS info (device loop6): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 494.013131][ T8693] BTRFS info (device loop6): using crc32c checksum algorithm [ 494.131562][ T5629] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 494.356500][ T1547] BTRFS warning (device loop6): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 494.356685][ T8693] BTRFS error (device loop6): failed to load root extent [ 494.356727][ T8693] BTRFS warning (device loop6): try to load backup roots slot 1 [ 494.372192][ T3310] BTRFS warning (device loop6): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 494.372362][ T8693] BTRFS warning (device loop6): couldn't read tree root [ 494.372385][ T8693] BTRFS warning (device loop6): try to load backup roots slot 2 [ 494.454782][ T154] BTRFS error (device loop6): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 494.511149][ T8693] BTRFS warning (device loop6): couldn't read tree root [ 494.511178][ T8693] BTRFS warning (device loop6): try to load backup roots slot 3 [ 494.557786][ T8693] BTRFS info (device loop6): rebuilding free space tree [ 494.752054][ T8693] BTRFS info (device loop6): checking UUID tree [ 494.763783][ T8693] BTRFS info (device loop6): enabling ssd optimizations [ 494.763856][ T8693] BTRFS info (device loop6): turning on async discard [ 494.763908][ T8693] BTRFS info (device loop6): enabling free space tree [ 494.763953][ T8693] BTRFS info (device loop6): force clearing of disk cache [ 494.763998][ T8693] BTRFS info (device loop6): enabling auto defrag [ 494.764035][ T8693] BTRFS info (device loop6): trying to use backup root at mount time [ 494.764103][ T8693] BTRFS info (device loop6): use zstd compression, level 3 [ 495.615049][ T99] block nbd0: Possible stuck request ffff888027760000: control (read@0,1024B). Runtime 300 seconds [ 495.615107][ T99] block nbd0: Possible stuck request ffff8880277601c0: control (read@1024,1024B). Runtime 300 seconds [ 495.615141][ T99] block nbd0: Possible stuck request ffff888027760380: control (read@2048,1024B). Runtime 300 seconds [ 495.615174][ T99] block nbd0: Possible stuck request ffff888027760540: control (read@3072,1024B). Runtime 300 seconds [ 496.072758][ T8741] loop1: detected capacity change from 0 to 128 [ 496.318102][ T8741] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 496.323386][ T8741] ext4 filesystem being mounted at /214/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 497.082586][ T8756] loop4: detected capacity change from 0 to 512 [ 497.434890][ T7401] BTRFS info (device loop6): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 497.456746][ T8756] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 497.654643][ T5627] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 498.511329][ T8777] netlink: 60 bytes leftover after parsing attributes in process `syz.7.790'. [ 498.884749][ T8577] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 499.145537][ T8785] process 'syz.7.793' launched './file0' with NULL argv: empty string added [ 499.163533][ T8785] Invalid argument reading file caps for ./file0 [ 499.555818][ T8790] loop6: detected capacity change from 0 to 1024 [ 499.583252][ T8790] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 499.583379][ T8790] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 499.913621][ T8790] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 500.049429][ T8790] EXT4-fs (loop6): Online resizing not supported with sparse_super2 [ 500.126014][ T7401] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 500.371201][ T9] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 500.543670][ T9] usb 2-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 500.543726][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 500.705085][ T9] usb 2-1: config 0 descriptor?? [ 500.738843][ T8813] loop6: detected capacity change from 0 to 128 [ 500.772208][ T9] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 501.045608][ T9] gp8psk: usb in 128 operation failed. [ 501.056726][ T8813] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 501.057264][ T8813] ext4 filesystem being mounted at /55/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 501.280702][ T9] gp8psk: usb in 146 operation failed. [ 501.280720][ T9] gp8psk: failed to get FW version [ 501.283461][ T9] gp8psk: FPGA Version = 35 [ 501.413430][ T38] audit: type=1326 audit(1779365302.094:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8807 comm="syz.7.805" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f904bdece59 code=0x7fc00000 [ 501.520837][ T9] gp8psk: usb in 138 operation failed. [ 501.520877][ T9] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 501.520920][ T9] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 501.571013][ T9] usb 2-1: USB disconnect, device number 10 [ 501.760795][ T7401] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 504.993862][ T5632] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 505.105439][ T5632] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 505.107950][ T5632] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 505.113891][ T5632] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 505.165725][ T5632] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 505.561508][ T8858] netlink: 64 bytes leftover after parsing attributes in process `syz.6.823'. [ 506.822523][ T154] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 507.105171][ T8884] atomic_op ffff8880623fda18 conn xmit_atomic 0000000000000000 [ 507.527452][ T5632] Bluetooth: hci4: command tx timeout [ 508.924737][ T154] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 509.721707][ T5639] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 509.789176][ T60] Bluetooth: hci4: command tx timeout [ 509.813862][ T5639] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 509.822940][ T5639] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 509.840596][ T5639] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 509.860227][ T5639] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 510.574361][ T154] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 512.041656][ T5632] Bluetooth: hci4: command tx timeout [ 512.209654][ T5632] Bluetooth: hci3: command tx timeout [ 512.697587][ T154] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 513.037591][ T8956] loop1: detected capacity change from 0 to 256 [ 513.057144][ T8956] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 514.003299][ T8967] atomic_op ffff8880386de218 conn xmit_atomic 0000000000000000 [ 514.290922][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 514.291035][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 514.353323][ T5632] Bluetooth: hci4: command tx timeout [ 514.459994][ T5632] Bluetooth: hci3: command tx timeout [ 515.357081][ T8986] loop6: detected capacity change from 0 to 128 [ 515.545708][ T8986] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 515.551946][ T8986] ext4 filesystem being mounted at /68/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 515.975480][ T7401] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 516.712794][ T5632] Bluetooth: hci3: command tx timeout [ 518.479595][ T154] erspan0: left allmulticast mode [ 518.479631][ T154] erspan0: left promiscuous mode [ 518.479930][ T154] bridge0: port 3(erspan0) entered disabled state [ 518.758403][ T154] bridge_slave_1: left allmulticast mode [ 518.758435][ T154] bridge_slave_1: left promiscuous mode [ 518.797904][ T154] bridge0: port 2(bridge_slave_1) entered disabled state [ 518.966201][ T5632] Bluetooth: hci3: command tx timeout [ 519.058120][ T154] bridge_slave_0: left allmulticast mode [ 519.058164][ T154] bridge_slave_0: left promiscuous mode [ 519.058433][ T154] bridge0: port 1(bridge_slave_0) entered disabled state [ 522.100704][ T5639] Bluetooth: hci0: command 0x0406 tx timeout [ 525.108369][ T154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 525.227468][ T154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 525.308867][ T154] bond0 (unregistering): Released all slaves [ 525.637619][ T8847] bridge0: port 1(bridge_slave_0) entered blocking state [ 525.637940][ T8847] bridge0: port 1(bridge_slave_0) entered disabled state [ 525.655999][ T8847] bridge_slave_0: entered allmulticast mode [ 525.672522][ T8847] bridge_slave_0: entered promiscuous mode [ 525.796948][ T5280] 8021q: adding VLAN 0 to HW filter on device eth9 [ 525.817620][ T8847] bridge0: port 2(bridge_slave_1) entered blocking state [ 525.817942][ T8847] bridge0: port 2(bridge_slave_1) entered disabled state [ 525.818284][ T8847] bridge_slave_1: entered allmulticast mode [ 525.852465][ T8847] bridge_slave_1: entered promiscuous mode [ 526.848678][ T8847] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 527.647020][ T5639] Bluetooth: hci6: command 0x0406 tx timeout [ 527.990327][ T8847] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 528.194705][ T99] block nbd0: Possible stuck request ffff888027760000: control (read@0,1024B). Runtime 330 seconds [ 528.194756][ T99] block nbd0: Possible stuck request ffff8880277601c0: control (read@1024,1024B). Runtime 330 seconds [ 528.194795][ T99] block nbd0: Possible stuck request ffff888027760380: control (read@2048,1024B). Runtime 330 seconds [ 528.194828][ T99] block nbd0: Possible stuck request ffff888027760540: control (read@3072,1024B). Runtime 330 seconds [ 528.867108][ T8847] team0: Port device team_slave_0 added [ 531.235043][ T8847] team0: Port device team_slave_1 added [ 531.957843][ T8916] bridge0: port 1(bridge_slave_0) entered blocking state [ 531.958160][ T8916] bridge0: port 1(bridge_slave_0) entered disabled state [ 531.958515][ T8916] bridge_slave_0: entered allmulticast mode [ 532.066807][ T8916] bridge_slave_0: entered promiscuous mode [ 532.204684][ T8916] bridge0: port 2(bridge_slave_1) entered blocking state [ 532.205003][ T8916] bridge0: port 2(bridge_slave_1) entered disabled state [ 532.205336][ T8916] bridge_slave_1: entered allmulticast mode [ 532.217326][ T8916] bridge_slave_1: entered promiscuous mode [ 532.258346][ T8847] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 532.258371][ T8847] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 532.258407][ T8847] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 533.248525][ T154] hsr_slave_0: left promiscuous mode [ 533.303730][ T154] hsr_slave_1: left promiscuous mode [ 533.306743][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 533.306771][ T154] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 533.356258][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 533.356288][ T154] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 533.992946][ T154] veth1_macvtap: left promiscuous mode [ 533.993052][ T154] veth0_macvtap: left promiscuous mode [ 534.058278][ T154] veth1_vlan: left promiscuous mode [ 534.058506][ T154] veth0_vlan: left promiscuous mode [ 534.397638][ T9190] loop6: detected capacity change from 0 to 256 [ 535.672965][ T9232] netlink: 36 bytes leftover after parsing attributes in process `syz.6.966'. [ 535.672989][ T9232] netlink: 8 bytes leftover after parsing attributes in process `syz.6.966'. [ 535.746781][ T9234] loop1: detected capacity change from 0 to 1024 [ 535.797152][ T9234] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 537.745573][ T154] team0 (unregistering): Port device team_slave_1 removed [ 537.978931][ T154] team0 (unregistering): Port device team_slave_0 removed [ 538.118961][ T9283] netlink: 44 bytes leftover after parsing attributes in process `syz.6.989'. [ 538.200976][ T9284] netlink: 44 bytes leftover after parsing attributes in process `syz.6.989'. [ 538.582681][ T8847] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 538.582700][ T8847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 538.582732][ T8847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 538.996222][ T9283] bridge0: port 2(bridge_slave_1) entered disabled state [ 539.045142][ T9283] bridge0: port 1(bridge_slave_0) entered disabled state [ 539.967855][ T8916] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 540.052396][ T8916] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 540.417743][ T9321] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1000'. [ 541.145798][ T8916] team0: Port device team_slave_0 added [ 541.186455][ T8847] hsr_slave_0: entered promiscuous mode [ 541.298535][ T8847] hsr_slave_1: entered promiscuous mode [ 541.349361][ T8916] team0: Port device team_slave_1 added [ 541.368795][ T5280] 8021q: adding VLAN 0 to HW filter on device eth10 [ 541.949334][ T8916] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 541.949354][ T8916] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 541.949520][ T8916] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 542.542886][ T8916] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 542.542904][ T8916] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 542.542937][ T8916] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 542.919620][ T9379] loop6: detected capacity change from 0 to 32768 [ 543.858329][ T9386] loop1: detected capacity change from 0 to 128 [ 543.945953][ T9386] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 543.949121][ T9386] ext4 filesystem being mounted at /250/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 544.304673][ T8916] hsr_slave_0: entered promiscuous mode [ 544.327877][ T8916] hsr_slave_1: entered promiscuous mode [ 544.347824][ T8916] debugfs: 'hsr0' already exists in 'hsr' [ 544.347855][ T8916] Cannot create hsr debugfs directory [ 544.720849][ T5627] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 547.027505][ T9455] atomic_op ffff888063825218 conn xmit_atomic 0000000000000000 [ 547.499100][ T154] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 548.259624][ T5280] 8021q: adding VLAN 0 to HW filter on device eth11 [ 549.527014][ T154] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 549.594808][ T9503] netlink: 'syz.6.1069': attribute type 15 has an invalid length. [ 549.594833][ T9503] netlink: 'syz.6.1069': attribute type 7 has an invalid length. [ 549.594847][ T9503] netlink: 52 bytes leftover after parsing attributes in process `syz.6.1069'. [ 549.633466][ T9483] bridge0: port 2(bridge_slave_1) entered disabled state [ 549.684550][ T9483] bridge0: port 1(bridge_slave_0) entered disabled state [ 550.616863][ T154] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 553.562021][ T154] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 553.998646][ T9590] loop1: detected capacity change from 0 to 256 [ 554.013457][ T9590] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 554.013519][ T9590] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 554.109601][ T9590] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 554.111646][ T9590] exFAT-fs (loop1): failed to load alloc-bitmap [ 554.111663][ T9590] exFAT-fs (loop1): failed to recognize exfat type [ 556.690392][ T5924] ath6kl: Failed to submit usb control message: -71 [ 556.690446][ T5924] ath6kl: unable to send the bmi data to the device: -71 [ 556.690462][ T5924] ath6kl: Unable to send get target info: -71 [ 556.754524][ T5924] ath6kl: Failed to init ath6kl core: -71 [ 556.757425][ T5924] ath6kl_usb 6-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 556.814555][ T5924] usb 6-1: USB disconnect, device number 4 [ 557.276724][ T8847] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 557.336072][ T8847] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 557.337303][ T8847] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 557.653897][ T8847] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 557.665616][ T8847] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 557.847854][ T8847] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 557.866140][ T8847] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 557.970193][ T8847] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 558.277528][ T1252] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 558.463675][ T1252] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 558.463706][ T1252] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 558.490802][ T1252] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 558.490833][ T1252] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 558.490854][ T1252] usb 2-1: SerialNumber: syz [ 558.908707][ T1252] usb 2-1: 0:2 : does not exist [ 559.867315][ T1252] usb 2-1: USB disconnect, device number 11 [ 560.234606][ T9620] Set syz1 is full, maxelem 6117 reached [ 560.335077][ T154] bridge_slave_1: left allmulticast mode [ 560.335113][ T154] bridge_slave_1: left promiscuous mode [ 560.342976][ T154] bridge0: port 2(bridge_slave_1) entered disabled state [ 560.472069][ T7115] udevd[7115]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 560.546088][ T9676] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 560.692847][ T154] bridge_slave_0: left allmulticast mode [ 560.692898][ T154] bridge_slave_0: left promiscuous mode [ 560.693105][ T154] bridge0: port 1(bridge_slave_0) entered disabled state [ 560.777159][ T99] block nbd0: Possible stuck request ffff888027760000: control (read@0,1024B). Runtime 360 seconds [ 560.777211][ T99] block nbd0: Possible stuck request ffff8880277601c0: control (read@1024,1024B). Runtime 360 seconds [ 560.777245][ T99] block nbd0: Possible stuck request ffff888027760380: control (read@2048,1024B). Runtime 360 seconds [ 560.777278][ T99] block nbd0: Possible stuck request ffff888027760540: control (read@3072,1024B). Runtime 360 seconds [ 561.377680][ T9704] loop6: detected capacity change from 0 to 16 [ 561.458909][ T9704] erofs (device loop6): mounted with root inode @ nid 36. [ 561.514117][ T9704] syz.6.1152: attempt to access beyond end of device [ 561.514117][ T9704] loop6: rw=524288, sector=8, nr_sectors = 24 limit=16 [ 561.517870][ T9704] erofs (device loop6): failed to decompress (lz4) corrupted compressed data @ pa 4096 size 4096 => 4096 [ 561.517910][ T9704] erofs (device loop6): read error -117 @ 0 of nid 89 [ 561.585285][ T38] audit: type=1800 audit(1779365357.689:19): pid=9704 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1152" name="file2" dev="loop6" ino=89 res=0 errno=0 [ 562.480246][ T154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 562.565410][ T154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 562.611972][ T154] bond0 (unregistering): Released all slaves [ 562.676381][ T5280] 8021q: adding VLAN 0 to HW filter on device eth12 [ 563.454105][ T8847] 8021q: adding VLAN 0 to HW filter on device bond0 [ 563.762562][ T9770] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1183'. [ 564.531084][ T9791] loop1: detected capacity change from 0 to 512 [ 564.676754][ T9791] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1190: bg 0: block 288: padding at end of block bitmap is not set [ 564.676793][ T9791] loop1: lost filesystem error report for type 5 error -117 [ 564.697973][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 564.698001][ C1] EXT4-fs (loop1): initial error at time 1779365360: ext4_validate_block_bitmap:441 [ 564.698028][ C1] EXT4-fs (loop1): last error at time 1779365360: ext4_validate_block_bitmap:441 [ 564.745970][ T9791] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 564.746000][ T9791] loop1: lost filesystem error report for type 5 error -117 [ 564.831189][ T9791] EXT4-fs error (device loop1): ext4_clear_blocks:876: inode #13: comm syz.1.1190: attempt to clear invalid blocks 1024 len 1 [ 564.831230][ T9791] loop1: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 564.891154][ T9791] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.1190: invalid indirect mapped block 1819239214 (level 0) [ 564.891198][ T9791] loop1: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 564.892339][ T9791] EXT4-fs (loop1): 1 truncate cleaned up [ 564.960161][ T9791] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 565.097533][ T9800] loop6: detected capacity change from 0 to 8 [ 565.182124][ T9800] SQUASHFS error: zlib decompression failed, data probably corrupt [ 565.182157][ T9800] SQUASHFS error: Failed to read block 0x9b: -5 [ 565.182175][ T9800] SQUASHFS error: Unable to read metadata cache entry [99] [ 565.182192][ T9800] SQUASHFS error: Unable to read inode 0x127 [ 565.389830][ T5627] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 565.446255][ T8847] 8021q: adding VLAN 0 to HW filter on device team0 [ 566.024825][ T9814] loop1: detected capacity change from 0 to 32768 [ 568.082113][ T5639] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 568.158724][ T5639] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 568.162517][ T5639] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 568.236949][ T5639] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 568.263566][ T5639] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 569.630984][ T154] hsr_slave_0: left promiscuous mode [ 569.699433][ T9870] uprobe: syz.6.1215:9870 failed to unregister, leaking uprobe [ 569.801468][ T154] hsr_slave_1: left promiscuous mode [ 569.802764][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 569.802789][ T154] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 569.941920][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 569.941949][ T154] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 570.165606][ T154] veth1_macvtap: left promiscuous mode [ 570.165712][ T154] veth0_macvtap: left promiscuous mode [ 570.166079][ T154] veth1_vlan: left promiscuous mode [ 570.166295][ T154] veth0_vlan: left promiscuous mode [ 570.612453][ T5632] Bluetooth: hci5: command tx timeout [ 570.616067][ T9899] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1228'. [ 570.681129][ T9902] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1228'. [ 571.795875][ T154] team0 (unregistering): Port device team_slave_1 removed [ 571.901992][ T154] team0 (unregistering): Port device team_slave_0 removed [ 572.865921][ T5632] Bluetooth: hci5: command tx timeout [ 573.157513][ T9902] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1228'. [ 573.270553][ T1547] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 573.323087][ T1547] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 573.324777][ T1547] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 573.775508][ T1547] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 575.137621][ T5632] Bluetooth: hci5: command tx timeout [ 575.204541][ T5639] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 575.256691][ T5639] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 575.276281][ T5639] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 575.317248][ T5639] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 575.320451][ T5639] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 575.983187][T10025] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1280'. [ 576.858041][T10054] loop1: detected capacity change from 0 to 512 [ 577.373833][ T5639] Bluetooth: hci5: command tx timeout [ 578.065378][ T5639] Bluetooth: hci4: command tx timeout [ 579.807889][ T38] audit: type=1326 audit(1779365374.501:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10134 comm="syz.1.1317" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f174e17ce59 code=0x0 [ 580.317940][ T5639] Bluetooth: hci4: command tx timeout [ 580.843016][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 580.843131][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 581.027385][T10162] netlink: 'syz.1.1328': attribute type 4 has an invalid length. [ 581.564996][T10191] binder: 10190:10191 ioctl 4018620d 0 returned -22 [ 581.613273][T10191] loop6: detected capacity change from 0 to 1024 [ 582.143554][T10202] loop6: detected capacity change from 0 to 256 [ 582.177483][T10202] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 582.282096][ T38] audit: type=1800 audit(1779365376.799:21): pid=10202 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1344" name="file1" dev="loop6" ino=1048748 res=0 errno=0 [ 582.585284][ T5639] Bluetooth: hci4: command tx timeout [ 583.156314][ T5755] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 583.378203][ T5755] usb 7-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 583.378240][ T5755] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 583.378255][ T5755] usb 7-1: Product: syz [ 583.378267][ T5755] usb 7-1: Manufacturer: syz [ 583.378279][ T5755] usb 7-1: SerialNumber: syz [ 583.862173][ T9842] bridge0: port 1(bridge_slave_0) entered blocking state [ 583.864932][ T9842] bridge0: port 1(bridge_slave_0) entered disabled state [ 583.938013][ T9842] bridge_slave_0: entered allmulticast mode [ 583.960562][ T9842] bridge_slave_0: entered promiscuous mode [ 584.199856][ T9842] bridge0: port 2(bridge_slave_1) entered blocking state [ 584.200382][ T9842] bridge0: port 2(bridge_slave_1) entered disabled state [ 584.202420][ T9842] bridge_slave_1: entered allmulticast mode [ 584.356441][ T9842] bridge_slave_1: entered promiscuous mode [ 584.493177][T10250] loop1: detected capacity change from 0 to 40427 [ 584.827420][ T5639] Bluetooth: hci4: command tx timeout [ 585.014184][ T39] INFO: task syz.0.392:7619 blocked for more than 143 seconds. [ 585.014215][ T39] Tainted: G L syzkaller #0 [ 585.014228][ T39] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 585.014239][ T39] task:syz.0.392 state:D stack:27832 pid:7619 tgid:7618 ppid:5628 task_flags:0x400040 flags:0x00080002 [ 585.014400][ T39] Call Trace: [ 585.014413][ T39] [ 585.014428][ T39] __schedule+0x16f9/0x5500 [ 585.014565][ T39] ? __pfx___schedule+0x10/0x10 [ 585.014590][ T39] ? rt_mutex_slowlock_block+0x2e9/0x680 [ 585.014710][ T39] rt_mutex_schedule+0x76/0xf0 [ 585.014746][ T39] rt_mutex_slowlock_block+0x508/0x680 [ 585.014794][ T39] ? rt_mutex_slowlock_block+0x2e9/0x680 [ 585.014886][ T39] rt_mutex_slowlock+0x2dc/0x780 [ 585.014923][ T39] ? rt_mutex_slowlock+0x1fd/0x780 [ 585.014957][ T39] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 585.015065][ T39] ? bdev_open+0xe0/0xcc0 [ 585.015104][ T39] ? bdev_open+0xe0/0xcc0 [ 585.015142][ T39] ? bdev_open+0xe0/0xcc0 [ 585.015227][ T39] mutex_lock_nested+0x168/0x1d0 [ 585.015268][ T39] bdev_open+0xe0/0xcc0 [ 585.015303][ T39] blkdev_open+0x485/0x620 [ 585.015323][ T39] ? __pfx_blkdev_open+0x10/0x10 [ 585.015388][ T39] do_dentry_open+0x83d/0x13e0 [ 585.015425][ T39] vfs_open+0x3b/0x350 [ 585.015446][ T39] ? path_openat+0x2ed3/0x3960 [ 585.015466][ T39] path_openat+0x2eea/0x3960 [ 585.015579][ T39] ? __pfx_path_openat+0x10/0x10 [ 585.015603][ T39] ? kasan_save_track+0x4f/0x80 [ 585.015632][ T39] ? kasan_save_track+0x3e/0x80 [ 585.015658][ T39] ? __kasan_slab_alloc+0x6c/0x80 [ 585.015737][ T39] ? do_raw_spin_lock+0x12b/0x2f0 [ 585.015764][ T39] do_file_open+0x23e/0x4a0 [ 585.015783][ T39] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 585.015807][ T39] ? __pfx_do_file_open+0x10/0x10 [ 585.015824][ T39] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 585.015921][ T39] ? alloc_fd+0x679/0x6f0 [ 585.015960][ T39] do_sys_openat2+0x115/0x200 [ 585.015989][ T39] ? __pfx_do_sys_openat2+0x10/0x10 [ 585.016078][ T39] ? exc_page_fault+0x6a/0xc0 [ 585.016105][ T39] ? do_user_addr_fault+0xc6f/0x1340 [ 585.016133][ T39] __x64_sys_openat+0x138/0x170 [ 585.016164][ T39] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 585.016244][ T39] do_syscall_64+0x15f/0x560 [ 585.016267][ T39] ? trace_irq_disable+0x3b/0x140 [ 585.016288][ T39] ? clear_bhb_loop+0x40/0x90 [ 585.016311][ T39] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 585.016329][ T39] RIP: 0033:0x7f5f8431d68e [ 585.016345][ T39] RSP: 002b:00007f5f825adb28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 585.016418][ T39] RAX: ffffffffffffffda RBX: 00007f5f825ae6c0 RCX: 00007f5f8431d68e [ 585.016431][ T39] RDX: 0000000000000480 RSI: 00007f5f825adc00 RDI: ffffffffffffff9c [ 585.016442][ T39] RBP: 00007f5f825adc00 R08: 0000000000000000 R09: 0000000000000000 [ 585.016452][ T39] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 585.016463][ T39] R13: 00007f5f845d6038 R14: 00007f5f845d5fa0 R15: 00007fff99c080d8 [ 585.016490][ T39] [ 585.016594][ T39] [ 585.016594][ T39] Showing all locks held in the system: [ 585.016605][ T39] 1 lock held by khungtaskd/39: [ 585.016616][ T39] #0: ffffffff8dfca240 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 585.016672][ T39] 3 locks held by kworker/u8:5/69: [ 585.016681][ T39] #0: ffff888032c11138 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x897/0x1630 [ 585.016796][ T39] #1: ffffc9000154fc40 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630 [ 585.016843][ T39] #2: ffffffff8f37b3b8 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x124/0x1680 [ 585.016952][ T39] 6 locks held by kworker/u8:6/154: [ 585.016963][ T39] #0: ffff88801b68e138 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x897/0x1630 [ 585.017012][ T39] #1: ffffc9000394fc40 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630 [ 585.017139][ T39] #2: ffffffff8f36be80 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf4/0x800 [ 585.017183][ T39] #3: ffff888037e62160 (&dev->mutex){....}-{4:4}, at: devlink_pernet_pre_exit+0x129/0x420 [ 585.017297][ T39] #4: ffff8880349dc310 (&devlink->lock_key#9){+.+.}-{4:4}, at: devlink_pernet_pre_exit+0x142/0x420 [ 585.017350][ T39] #5: ffffffff8f37b3b8 (rtnl_mutex){+.+.}-{4:4}, at: register_netdevice_notifier_net+0x1a/0xa0 [ 585.017462][ T39] 3 locks held by kworker/0:2/1252: [ 585.017473][ T39] #0: ffff88813fe47938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x897/0x1630 [ 585.017521][ T39] #1: ffffc90006307c40 ((work_completion)(&data->fib_event_work)){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630 [ 585.017632][ T39] #2: ffff88802afda280 (&data->fib_lock){+.+.}-{4:4}, at: nsim_fib_event_work+0x222/0x3e0 [ 585.017701][ T39] 2 locks held by getty/5374: [ 585.017757][ T39] #0: ffff888036d1c0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 585.017799][ T39] #1: ffffc90003cb62e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x462/0x13a0 [ 585.017853][ T39] 5 locks held by kworker/1:6/5755: [ 585.017920][ T39] #0: ffff88801ab1ed38 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x897/0x1630 [ 585.017968][ T39] #1: ffffc90004e2fc40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630 [ 585.018014][ T39] #2: ffff88802a9ec210 (&dev->mutex){....}-{4:4}, at: hub_event+0x17c/0x4f60 [ 585.018121][ T39] #3: ffff88803e484210 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 585.018165][ T39] #4: ffff888029a6d1d8 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 585.018269][ T39] 1 lock held by udevd/5912: [ 585.018280][ T39] #0: ffff8880276a04c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xcc0 [ 585.018349][ T39] 1 lock held by udevd/6311: [ 585.018360][ T39] #0: ffff888037710480 (sb_writers#5){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 585.018462][ T39] 4 locks held by udevd/7115: [ 585.018473][ T39] #0: ffff88803c582608 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xb8/0xe20 [ 585.018668][ T39] #1: ffff88806325e878 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x5c/0x420 [ 585.018716][ T39] #2: ffff88805cb70c38 (kn->active#31){.+.+}-{0:0}, at: kernfs_seq_start+0xb2/0x420 [ 585.018817][ T39] #3: ffff88803e484210 (&dev->mutex){....}-{4:4}, at: manufacturer_show+0x26/0xa0 [ 585.018865][ T39] 4 locks held by syz-executor/7356: [ 585.018875][ T39] #0: ffffffff8e09c6f0 (dup_mmap_sem){++++}-{0:0}, at: copy_mm+0x130/0x4a0 [ 585.018963][ T39] #1: ffff88803963ebb0 (&mm->mmap_lock){++++}-{4:4}, at: dup_mmap+0x184/0x1d70 [ 585.019007][ T39] #2: ffff8880350bb7b0 (&mm->mmap_lock/1){+.+.}-{4:4}, at: dup_mmap+0x272/0x1d70 [ 585.019054][ T39] #3: ffffffff8dfca240 (rcu_read_lock){....}-{1:3}, at: rt_spin_trylock+0x10c/0x2b0 [ 585.019171][ T39] 1 lock held by syz.0.392/7619: [ 585.019182][ T39] #0: ffff8880276a04c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xcc0 [ 585.019233][ T39] 7 locks held by syz-executor/9842: [ 585.019295][ T39] #0: ffffffff8eadf0c8 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 585.019359][ T39] #1: ffffffff8f37b3b8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x883/0x1bb0 [ 585.019401][ T39] #2: ffff88803a7d8628 (&idev->mc_lock){+.+.}-{4:4}, at: __ipv6_dev_mc_inc+0x4e/0xa50 [ 585.019498][ T39] #3: ffffffff8e110110 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 585.019555][ T39] #4: ffffffff8dfca240 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0xa6/0x2550 [ 585.019696][ T39] #5: ffff8880b863b860 (&rq->__lock){-...}-{2:2}, at: finish_task_switch+0x15f/0xbe0 [ 585.019744][ T39] #6: ffff8880b8628418 (hrtimer_bases.lock){-...}-{2:2}, at: __hrtimer_rearm_deferred+0x99/0x460 [ 585.019850][ T39] 2 locks held by syz-executor/10015: [ 585.019862][ T39] #0: ffffffff8f8d5870 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 585.020014][ T39] #1: ffffffff8f37b3b8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x883/0x1bb0 [ 585.020066][ T39] 6 locks held by syz-executor/10267: [ 585.020078][ T39] #0: ffff88803514a948 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x1d1/0x500 [ 585.020184][ T39] #1: ffffffff8dfca240 (rcu_read_lock){....}-{1:3}, at: do_pte_missing+0x12b5/0x2940 [ 585.020237][ T39] #2: ffffffff8dfca240 (rcu_read_lock){....}-{1:3}, at: filemap_map_pages+0x1db/0x1c50 [ 585.020348][ T39] #3: ffffffff8dfca240 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x200 [ 585.020427][ T39] #4: ffff888041ebb298 (ptlock_ptr(ptdesc)#2){+.+.}-{3:3}, at: pte_offset_map_lock+0x13d/0x210 [ 585.020565][ T39] #5: ffffffff8dfca240 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400 [ 585.020632][ T39] 6 locks held by dhcpcd-run-hook/10268: [ 585.020645][ T39] #0: ffff88803fabdbc8 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x1d1/0x500 [ 585.020769][ T39] #1: ffffffff8dfca240 (rcu_read_lock){....}-{1:3}, at: do_pte_missing+0x12b5/0x2940 [ 585.020825][ T39] #2: ffffffff8dfca240 (rcu_read_lock){....}-{1:3}, at: rt_mutex_slowunlock+0xbf/0x8b0 [ 585.020959][ T39] #3: ffffffff8dfca240 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x200 [ 585.021080][ T39] #4: ffff88803257ce58 (_T->lock){....}-{2:2}, at: page_table_check_set+0x126/0x510 [ 585.021136][ T39] #5: ffffffff8dfca240 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400 [ 585.021258][ T39] [ 585.021265][ T39] ============================================= [ 585.021265][ T39] [ 585.021284][ T39] NMI backtrace for cpu 1 [ 585.021312][ T39] CPU: 1 UID: 0 PID: 39 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 585.021341][ T39] Tainted: [L]=SOFTLOCKUP [ 585.021349][ T39] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 585.021365][ T39] Call Trace: [ 585.021373][ T39] [ 585.021382][ T39] dump_stack_lvl+0xe8/0x150 [ 585.021411][ T39] nmi_cpu_backtrace+0x274/0x2d0 [ 585.021446][ T39] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 585.021479][ T39] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 585.021534][ T39] sys_info+0x135/0x170 [ 585.021564][ T39] watchdog+0xfd3/0x1030 [ 585.021593][ T39] ? watchdog+0x1c9/0x1030 [ 585.021621][ T39] kthread+0x389/0x470 [ 585.021647][ T39] ? __pfx_watchdog+0x10/0x10 [ 585.021665][ T39] ? __pfx_kthread+0x10/0x10 [ 585.021692][ T39] ret_from_fork+0x514/0xb70 [ 585.021722][ T39] ? __pfx_ret_from_fork+0x10/0x10 [ 585.021749][ T39] ? __switch_to+0xc79/0x1410 [ 585.021775][ T39] ? __pfx_kthread+0x10/0x10 [ 585.021802][ T39] ret_from_fork_asm+0x1a/0x30 [ 585.021849][ T39] [ 585.021873][ T39] Sending NMI from CPU 1 to CPUs 0: [ 585.021908][ C0] NMI backtrace for cpu 0 [ 585.021926][ C0] CPU: 0 UID: 0 PID: 5627 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 585.021951][ C0] Tainted: [L]=SOFTLOCKUP [ 585.021957][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 585.021968][ C0] RIP: 0010:hrtimer_try_to_cancel+0x82/0x670 [ 585.021996][ C0] Code: 1c 24 48 8b 44 24 18 42 80 3c 30 00 74 08 48 89 df e8 22 e8 7d 00 4c 8b 23 49 8d 5c 24 10 49 89 df 49 c1 ef 03 43 0f b6 04 37 <84> c0 0f 85 b2 00 00 00 8b 2b 89 ee 83 e6 01 31 ff e8 28 9e 13 00 [ 585.022011][ C0] RSP: 0018:ffffc900048ffb78 EFLAGS: 00000a02 [ 585.022033][ C0] RAX: 0000000000000000 RBX: ffff8880b8628750 RCX: 1ffff9200091ffaf [ 585.022046][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 585.022057][ C0] RBP: ffffc900048ffcf0 R08: ffffffff8f8b9d37 R09: 1ffffffff1f173a6 [ 585.022071][ C0] R10: dffffc0000000000 R11: fffffbfff1f173a7 R12: ffff8880b8628740 [ 585.022084][ C0] R13: ffffc900048ffd90 R14: dffffc0000000000 R15: 1ffff110170c50ea [ 585.022098][ C0] FS: 0000555557574500(0000) GS:ffff888125efc000(0000) knlGS:0000000000000000 [ 585.022114][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 585.022125][ C0] CR2: 00007fcb31a90943 CR3: 0000000054558000 CR4: 00000000003526f0 [ 585.022141][ C0] Call Trace: [ 585.022148][ C0] [ 585.022159][ C0] do_nanosleep+0x28f/0x730 [ 585.022180][ C0] ? do_nanosleep+0x8a/0x730 [ 585.022199][ C0] ? __pfx_do_nanosleep+0x10/0x10 [ 585.022215][ C0] ? __asan_memset+0x22/0x50 [ 585.022240][ C0] ? __hrtimer_setup+0x1c2/0x260 [ 585.022263][ C0] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 585.022281][ C0] hrtimer_nanosleep+0x217/0x450 [ 585.022308][ C0] ? __pfx_hrtimer_nanosleep+0x10/0x10 [ 585.022337][ C0] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 585.022359][ C0] __se_sys_clock_nanosleep+0x35b/0x3b0 [ 585.022390][ C0] ? __pfx___se_sys_clock_nanosleep+0x10/0x10 [ 585.022421][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 585.022442][ C0] do_syscall_64+0x15f/0x560 [ 585.022463][ C0] ? trace_irq_disable+0x3b/0x140 [ 585.022484][ C0] ? clear_bhb_loop+0x40/0x90 [ 585.022505][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 585.022523][ C0] RIP: 0033:0x7f174e13d68e [ 585.022538][ C0] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 585.022553][ C0] RSP: 002b:00007ffe6a81d4b8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e6 [ 585.022571][ C0] RAX: ffffffffffffffda RBX: 0000555557574500 RCX: 00007f174e13d68e [ 585.022584][ C0] RDX: 00007ffe6a81d510 RSI: 0000000000000000 RDI: 0000000000000000 [ 585.022596][ C0] RBP: 00007ffe6a81d57c R08: 0000000000000000 R09: 0000000000000000 [ 585.022607][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000126 [ 585.022617][ C0] R13: 00000000000927c0 R14: 000000000008a4d7 R15: 00007ffe6a81d5d0 [ 585.022640][ C0] [ 585.022960][ T39] Kernel panic - not syncing: hung_task: blocked tasks [ 585.022985][ T39] CPU: 1 UID: 0 PID: 39 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 585.023014][ T39] Tainted: [L]=SOFTLOCKUP [ 585.023022][ T39] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 585.023035][ T39] Call Trace: [ 585.023044][ T39] [ 585.023055][ T39] vpanic+0x56c/0xa60 [ 585.023089][ T39] ? __pfx___schedule+0x10/0x10 [ 585.023110][ T39] ? __pfx_vpanic+0x10/0x10 [ 585.023151][ T39] panic+0xc5/0xd0 [ 585.023180][ T39] ? __pfx_panic+0x10/0x10 [ 585.023212][ T39] ? preempt_schedule_thunk+0x16/0x40 [ 585.023241][ T39] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 585.023279][ T39] watchdog+0x102c/0x1030 [ 585.023327][ T39] ? watchdog+0x1c9/0x1030 [ 585.023356][ T39] kthread+0x389/0x470 [ 585.023394][ T39] ? __pfx_watchdog+0x10/0x10 [ 585.023415][ T39] ? __pfx_kthread+0x10/0x10 [ 585.023443][ T39] ret_from_fork+0x514/0xb70 [ 585.023476][ T39] ? __pfx_ret_from_fork+0x10/0x10 [ 585.023506][ T39] ? __switch_to+0xc79/0x1410 [ 585.023561][ T39] ? __pfx_kthread+0x10/0x10 [ 585.023589][ T39] ret_from_fork_asm+0x1a/0x30 [ 585.023646][ T39] [ 585.023839][ T39] Kernel Offset: disabled