last executing test programs: 22.517632659s ago: executing program 0 (id=639): socket$inet_sctp(0x2, 0x5, 0x84) r0 = socket$l2tp(0x2, 0x2, 0x73) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) writev(0xffffffffffffffff, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x4000010, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x19, 0x0, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r5, 0x84, 0x1c, 0x0, &(0x7f00000003c0)) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000080)=0xd) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000380)=0x15) 15.133699529s ago: executing program 0 (id=649): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x40000, 0x0, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000003c0)={0x10000100, 0x0, 0x0, 'queue0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3, 0x1, 0xf533, 0x2}, 0x20}) 12.70734587s ago: executing program 0 (id=651): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x800, &(0x7f00000004c0)=ANY=[@ANYBLOB='acl,heartbeat=none,dir_resv_level=00000000000000000003,resv_level=000000006,coherency=full,localflocks,coherency=full,noacl,\x00'/136], 0x1, 0x4421, &(0x7f0000004500)="$eJzs3c9PHGUfAPBnBt63UNsKtYeamLiJTTRqCPSk0kRKaSm0WFNtY7xsF9i26MI2sBgPPeCtiScTD8ZDo4k3Tg0Hr/VP8OKxnpvowYuJSSNmd2eBGXbDSliwzeeTlNl5fu9+d5595jB94kTl9txSbm4pV1jIlWduLp3OfVYuLc8XQ7xPDrp/2tOJOIn9wbly7sIH10+H8NPsL4/X19fXQ1V3aGpoy+s//7g7s/XYEGfqVNtt3tpe+TiEcGLbuKq6Qggf/RhCFEI4m6SNJsfeEMKxUM+7fvfLG7k9Gs2DR8Uz+SdT99aGT02u3l9r/d6jEL4tvfjmrfnfXuka/vX1PeoeAAAAAAAAAAAAAAAAAICn3PjVK9feHxwKD6PQvRptf153PDm2ej52fc+83Pk3CwAAAAAAAAAAAAAAAAAAAP9Rm8//56LjTZ7/H0uOIy3qr7/b+THSORPvXRk7PziU7P8ebct/K0n6/WxX6G+y73t2//ezmfrN93/f3s9uNcbX6LcvRPFA6jyOBwZC+D7Z+P1kdDgulZcqb9wsLy/M7tkwnlrp+Nd3709FJ9nQv934j2ba7/z+/y9s+zZVz2/s3VfsmZaOf1fLcj98EbUV/3OZevsRf3YvHf/uWlrv1gIj9QmgGv+vuneO/1im/U7F/1gIIRdVx5pLzQDVNUw1vdV6hbR0/P9XS0tNnckH2er6/ysT//OZ9g9q/l/J/hDRVDr+/6+l9aRKbF7//fHO1/+FTPsHEf/q+Ff8/rclHf9D9cTuVJHaJ9nu/D+eab9T8b8WJ+M8FqW+AatRPb3V/1dHWjr+PdvyN+//4rbWfxcz9ffr/q/Rb+P+rzH9vxbV7/9oLh3/3pbl2r3+JzL1Oj3/j9TWf+xWOv6Ha2nptXNf7W+78Z/MtN+p+NdWJT2N+G/OJ38fqqd/Z/3XlnT8n6snxltLrNT+1tZ/0c7r/0uZ9g9i/Vcd/0rc2V6fFen4H2lZrhr/n9v4/b+cqdf5+IcwaK2/a+n4H21Zrnb99+wc/6lMvU7H/9VONg4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwFBhNjn0higdS53E8MBDCueT8ZDgcTRdm89Ol8synSyGMJem5cDy6VSpPF0r5uYXybDFfKJXKMyGcT/JPhJ5oqVSu5OcLdy5stNUb3S4WFivTxUIlhDCepL8Ujjbamp6rzBfuhBAubuQ9H5cX79wuLORn5xbfGRwcHAwTG2Poj4qfV4oLlXrv9dwQJjfq9kVbBlfLvrQxliPRJ+XlxYVCqZZ+eUudUnmmUNpSZyrJ+zr0R5XF5YWZQqWYL5VvNfo7SCPJcWzi6odXLw9ty78R1Y+j+zssAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP6lh8NvfxNC6K6fxSGEXJS8iJJ/KQ8eFc/kn0zdWxs+Nbl6f+1xszIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/7ADBwIAAAAAQP6vjVBVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVWFXfpHaSCI4gD8Ziy09BhWy25nu6KIFq4InkCP4WH0KF7CO1ikSJsiBJJZCPsHtkmq72sezI+Z92AeAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAyz2+de+vdROR4mp7GfH7+fd/nD+X+n03ff/iDDNyOk8v3f1D3ZR/T6P8thyt2rxPN+uvj5iovZ/Bngz36WDcZ2hu3+bm6/teR8pVRLQlv0k5V9WytwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAHTtwIAAAAAAA5P/aCFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVXYgWMBAAAAAGH+1lH0bQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPArAAD//z8QH1I=") r0 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ftruncate(r0, 0x2007ffc) truncate(&(0x7f00000001c0)='./file1\x00', 0x401) 11.655287462s ago: executing program 3 (id=654): r0 = socket$netlink(0x10, 0x3, 0x9) syz_io_uring_setup(0xbdc, 0x0, &(0x7f00000006c0)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x114, 0x0, 0x0, 0x4) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x6) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40088a01, 0x0) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x7, 0x1, 0x201, 0x0, 0x0, {0xa, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x814) 10.556549695s ago: executing program 3 (id=655): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_open_procfs(0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000002c0)=@bpf_lsm={0x1d, 0x10, &(0x7f0000000d40)=ANY=[@ANYBLOB="135d493e7fd8943964b02bccac228b9caab8b994792a2082c33fdf6f5c206b6707652e62fe301935727f929454c5cb0e764067ea6d2173f157008d11c6f364d8356137d011742ee86188fe97d94583fa11b8e93c9596b46388ec039488b008776e47432d", @ANYBLOB], 0x0, 0x9, 0x0, 0x0, 0x40f00, 0x22, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[r0], 0x0, 0x10, 0x3}, 0x94) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, 0x0, 0x0) write(r1, &(0x7f0000000240), 0x0) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x708d) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, 0x0, 0x0) openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) add_key(&(0x7f00000000c0)='pkcs7_test\x00', 0x0, &(0x7f0000000200)="100c0608266be7", 0x7, 0xfffffffffffffffc) sendmsg$NL80211_CMD_PROBE_CLIENT(r0, 0x0, 0x40000) 9.939590751s ago: executing program 2 (id=657): socket$inet_sctp(0x2, 0x5, 0x84) r0 = socket$l2tp(0x2, 0x2, 0x73) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) writev(0xffffffffffffffff, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x4000010, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x19, 0x0, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r5, 0x84, 0x1c, 0x0, &(0x7f00000003c0)) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000080)=0xd) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000380)=0x15) 7.761431698s ago: executing program 3 (id=660): r0 = syz_open_dev$vbi(&(0x7f00000028c0), 0x0, 0x2) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000040)={0x0, @bt={0xa00, 0x4640, 0x0, 0x1, 0xd59f83, 0x7, 0x42, 0x19ef, 0x2, 0x2, 0x2803, 0x2802, 0x2, 0xe4, 0x8, 0x0, {0x9, 0xffffffff}, 0xd0, 0x9}}) 7.633501566s ago: executing program 0 (id=662): ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mount$fuse(0x0, &(0x7f0000002540)='./file0\x00', &(0x7f0000000140), 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000000, 0x11, 0xffffffffffffffff, 0x10000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, 0x0) sendfile(r1, r1, 0x0, 0x2000fb) 7.425456407s ago: executing program 1 (id=663): syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000100)='./file0\x00') chmod(&(0x7f0000000180)='./file0\x00', 0x23f) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/dev_mcast\x00') truncate(&(0x7f0000000000)='./bus\x00', 0x9471) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000ac0300000000000085000000330000"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r3}, &(0x7f0000000840), &(0x7f0000000880)=r4}, 0x20) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) accept$inet6(0xffffffffffffffff, &(0x7f00000007c0)={0xa, 0x0, 0x0, @loopback}, 0x0) sendmsg$nl_route(r6, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x8002, &(0x7f0000000040), 0x0, 0x62c, &(0x7f00000000c0)="$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") 6.052387238s ago: executing program 1 (id=664): r0 = socket$netlink(0x10, 0x3, 0x9) syz_io_uring_setup(0xbdc, 0x0, &(0x7f00000006c0)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x114, 0x0, 0x0, 0x4) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40088a01, 0x0) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x7, 0x1, 0x201, 0x0, 0x0, {0xa, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x814) 5.84554241s ago: executing program 2 (id=665): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) unshare(0x22020600) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)) ioctl$TIOCSTI(r0, 0x5412, 0x0) 4.721934405s ago: executing program 2 (id=666): openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f0000000000)={0x0, 0xf00}) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000100)={[0xe43, 0x9, 0xffffffffffffffff, 0x10000000, 0x10000, 0xffffffffffffffff, 0x4002004c2, 0x5, 0x1, 0x8, 0x400, 0x80, 0x88, 0x0, 0x101, 0x8d], 0x41000, 0x240046}) ioctl$KVM_RUN(r1, 0xae80, 0x0) 4.715583686s ago: executing program 3 (id=667): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000840)='./bus\x00', 0x10, &(0x7f0000000540), 0x1, 0x7cc, &(0x7f00000022c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2142, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="620ac4ff0000000071101d00000000009500000000000000"], &(0x7f0000000480)='GPL\x00'}, 0x90) r1 = socket$alg(0x26, 0x5, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000340)={0x1d, r4, 0x0, {0x1, 0xf0, 0x4}, 0xfe}, 0x18) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000007c0)="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", 0x6fa}, {0x0}], 0x2}, 0x24048081) r5 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000200)={0x4, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000000)={[0x38, 0xfff, 0x0, 0x180, 0x4, 0x14, 0xf1, 0x0, 0x7fffffffffffe, 0x5, 0x4003, 0x8, 0x0, 0x45, 0x1, 0xbdb], 0xdddd0000, 0x1c4213}) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), r7) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000080)={0x30000009}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(0xffffffffffffffff, 0xc02c5341, &(0x7f0000000080)) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r7, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="14d4cba2", @ANYRES16=r8, @ANYBLOB="01002abd7000fedbdf251300000008000300", @ANYRES32=r9, @ANYBLOB="040013000a000600ffffffffffff000006001200830000000600b500670600000400ac00"], 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x4804) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-aes-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r10 = accept4(r1, 0x0, 0x0, 0x80800) ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0286405, &(0x7f0000000300)={0x3, 0x200, {0x0}, {0xee01}, 0x8000, 0xd04}) sched_setscheduler(r11, 0x5, &(0x7f0000000340)=0x9) sendto$inet6(r10, &(0x7f0000000080)="29a4", 0x2, 0x4004, 0x0, 0x0) recvmsg(r10, 0x0, 0x200321b1) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r0, 0x0) 4.656578929s ago: executing program 1 (id=668): syz_mount_image$nilfs2(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x1080c, &(0x7f0000000340)=ANY=[@ANYRES64=0x0, @ANYRES8=0x0, @ANYRES8, @ANYBLOB="d1794da8c0ccda034276e28a25c45c8e1eb8b595a37ffdfe7d2a8c3972a6931d2cbb0d8dc920bbde15d8790d46ccb3a5f36ff412236251d86334f17545ccae88", @ANYRES32, @ANYRES32, @ANYBLOB="e5f0986a95b4a041c6140884aa3ee1b8a51a2f195aca4ce79a3b534f3fa12c4e1790181917f9b22d45f7d86339c33c4a5e4f7224ec19", @ANYRESOCT=0x0, @ANYRESDEC=0x0, @ANYRESOCT, @ANYRESOCT], 0x1, 0xa7a, &(0x7f0000000980)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r0, 0x80186e82, 0x0) 4.505573468s ago: executing program 2 (id=669): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_open_procfs(0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000002c0)=@bpf_lsm={0x1d, 0x10, &(0x7f0000000d40)=ANY=[@ANYBLOB="135d493e7fd8943964b02bccac228b9caab8b994792a2082c33fdf6f5c206b6707652e62fe301935727f929454c5cb0e764067ea6d2173f157008d11c6f364d8356137d011742ee86188fe97d94583fa11b8e93c9596b46388ec039488b008776e47432d", @ANYBLOB], 0x0, 0x9, 0x0, 0x0, 0x40f00, 0x22, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[r0], 0x0, 0x10, 0x3}, 0x94) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, 0x0, 0x0) write(r1, &(0x7f0000000240), 0x0) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x708d) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, 0x0, 0x0) openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vcan0\x00'}) add_key(0x0, 0x0, &(0x7f0000000200)="100c0608266be7", 0x7, 0xfffffffffffffffc) sendmsg$NL80211_CMD_PROBE_CLIENT(r0, 0x0, 0x40000) 3.149094587s ago: executing program 2 (id=670): socketpair$unix(0x1, 0x2, 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000080)=0x7, 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) 2.759824829s ago: executing program 3 (id=671): socket$netlink(0x10, 0x3, 0x10) socket$inet6(0xa, 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000c7c4d51400000000000000000000000000000000008735297b4ea2214e6e3dd015ab0fb917fef462b55e688f53e38364bc021f93fd06357e974883df320ce364a84de5c7949fb0963ab4f95235bdb113ad15735fbc4c408fd449a5af5dc9fd566be73e159524d480124999c4330ac2376eb4ae2cdb9c4c1a1c04301a0ae6832bdcbef326a6accfc1ce013420b4d446a67ec8bb3263d14f97b6dda2"], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000002c0)={0x0, &(0x7f0000000480)=""/231, 0x0, &(0x7f0000000240)="970a20e9e0a6cf8fceb895", 0x3, r2}, 0x38) r3 = dup2(r1, r1) write$binfmt_aout(r3, 0x0, 0x720) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x114) mount$fuse(0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0]) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040)) r4 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x8) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x2440, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r5, 0xc0189378, &(0x7f0000000140)={{0x1, 0x1, 0x18, r4, {r4}}, './file0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, 0x0) mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x110c230000, 0x3, 0x2, @thr={0x0, 0x0}}) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x1, 0x7fff, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f00000000c0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) 2.462225177s ago: executing program 3 (id=672): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x800, &(0x7f00000004c0)=ANY=[@ANYBLOB='acl,heartbeat=none,dir_resv_level=00000000000000000003,resv_level=000000006,coherency=full,localflocks,coherency=full,noacl,\x00'/136], 0x1, 0x4421, &(0x7f0000004500)="$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") r0 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ftruncate(r0, 0x2007ffc) truncate(&(0x7f00000001c0)='./file1\x00', 0x401) 2.461232057s ago: executing program 0 (id=680): connect$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20008840, &(0x7f0000000040)={0xa, 0x2, 0x80398, @loopback, 0xfffffffe}, 0x1c) unshare(0x54010800) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) socket(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="180000000000000000000000000000009500"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002d80)={r5, r1, 0x25, 0x8, @void}, 0x10) 2.181236693s ago: executing program 1 (id=673): syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000100)='./file0\x00') chmod(&(0x7f0000000180)='./file0\x00', 0x23f) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/dev_mcast\x00') truncate(&(0x7f0000000000)='./bus\x00', 0x9471) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000ac0300000000000085000000330000"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r3}, &(0x7f0000000840), &(0x7f0000000880)=r4}, 0x20) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) accept$inet6(0xffffffffffffffff, &(0x7f00000007c0)={0xa, 0x0, 0x0, @loopback}, 0x0) sendmsg$nl_route(r6, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x8002, &(0x7f0000000040), 0x0, 0x62c, &(0x7f00000000c0)="$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") 1.305753224s ago: executing program 0 (id=674): syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f00000015c0)='./file0\x00', 0x0, &(0x7f0000001600), 0x0, 0x559e, &(0x7f000000ac40)="$eJzs3X9sVeX9B/BzWwoN+C39jhUYfxAgBoMkyJYtjqB4MQa24eKlgsKcCEQlBivYRDcYqUWSZcaghU4EF5GQaDJjscM/FMywy7CMZfzY5hZjs4JSaZZsAzVrHDG69N77XO49l9tembNOXy/SnvPcz3me+9yT88d9X/qcGwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEAURUcSc9+d0f3i0ZE1X77/Hz+e+OjGn4zfvX/roVvu23T/gjMjbto5a1nf+mlN8zdsbDjS/PS+ObdGUSLdL5Htf9u136q/88bbvlsdBly+MLOtrS31lJmuJzON4QUP9vcr/FkRRVFVbIDK7PbV7E5FwQC53cbiAQf0Tuui6O7J8ya1dT01bklyYU/xS6df9VBPYKhkr6ue89dSMv27InZErp136SUKLtFM//gF96m8CADgY5mZSm9yb0ezb3Fz7eZ4PdZOxtotsXZ4h9CS37gYmXGHl5rnpHh9iOaZzESFESXnGatnz3+unYr3j7VjUeNjzLPw0GykqS41z7Wx+lDNEwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOCzZOzxo2tWtD2y575fdtQceff9OVc+8KWOw22LT4y8eunKHWum/HTWsr7105rmb9jYcKT56X1zbo2i2nS/RKZ74kTL5b9NjZ3fvXfcG427n6vpq8yOG7bD8g6OXg87s0ZH0cq8Sk8Y9q81UZQqLKSb0Y7iwl3pnW+HAgAAAJ8nX0n/rsi1M3GwqqCdSKfJRPpfkAmL77Quiu6ePG9SW9dT45YkF/Zc/HipEuMlLzherl17/ieRF4xD/I2Pd74eDm0sGmdg8RHjef7SMWPefmty/eSvT5v7xA3PjOru+r8nZ2xJ/bGu5oUrru+tf/a6ovxfO3D+D2dO/gcAAOA/If/HxxnYYPn/jqVTt7z+i2Grft3a8MTB+h1/bv3OMzsXneq54Ud9L09N3v7o1UX5f1LBUxbl/zDjkP8roovL/wAAAPBZ9t/O/8micQY2WP5vONM3+wcHX6vr+PucxXt+9dAVi8+e/tv8U7t3DV9zR8v6uoeuLMr/M8vL/8Pypx0e/F2Y8OrRUTSz/JMKAAAAFAj/737+o4WQ1zOfHMTz+rX/vKp5380ffPMbD97zpzff/s2xA7MnrdteN/PgyzfVf1j5ve3dRfk/WV7+r/p0Xi4AAABQhuePrpw773jPucfPvtB18vDu3pMznjyzrqnvdOslLatXbTr2WlH+T5WX/0cMzcsBAAAALuDeO59bsfnVl/oe2H/X2Ck9FVc1XpK4ZduOqU0TPuq8tPfy7VuL8v/y8vL/yOw2u/Ih06kz/BVC6+goqu7fWZspHIparskVAAAAgE9IyOlbP1ixbOzOsb3jj59+rObQG4dn/2Vt55yN13RXdW/uXNZ4WdH9AkJiL3X//3Cng7D+v+D+f0Xr//MKmbv+zXZjAAAAAL6Iitfzh9vjZ765oNT375e7/n9J3cQTiba33lv11XMHzo1ZsP/7129aV9/be8+El37/wz9M/6i6KP83l5f/K/O3n+T3/wEAAMBF+F/7/r+lReMMbLD7/zdV9DWsWrd3+uota7csTCw7UH3qwdV731+w5l9Tb36+qea6A0X5v6W8/B+2o/JfXkc4P5tGR9H4/p3s3QR/Hqa7OlZor8orZE58rMeNoUe20D4ir5C2Ntbja6OjaHL/TnOs8P+h0BIrnK3JFnbFCsdCIXs95Ap7YoWOcKVtq8lON154MRSyCyzawwqKUbklEbEe75Xq0V+4YI+u3JMDAAB8oYTwnM2yVYXNKB5l2xODHTBysAMqBjugcrADhsUOiB9Y6vFoeWEhPH575yMbNjVMSb7y8NzHfvbms40T9j1+WV3v5g9f2XbvxJ3TW6YW5f9d5eX/cCqGZzal1v9HYf1/9nsNc+v/l4dCbazQHgqp+B0DUuE5MmH34fActalsj7PjcwUAAAD4XAufC1QO8TwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/s3evcdJVd0JAj/d9INumqaNE9GMk3TUgGakaWwNw+AoaoxGRZpZddxkNBBoEGmE8FgFURtQZxziZ3ztrJnoCAoiu+qHGFeDwUhcxIw6iWLiA/Cxjq7r+h6VGM2E/XTfOkXVrS67EFDa+X7/6DpVv/O89eg69946FwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/xjuPfjlk4YunP0PHzace8nqqqmL/kfH6Mv+cNW3vvjUPy5b9G9h/i9GnLll3kEXHjd/wbR/6Vi++ogzQmjtKleWFC977oqvPtS613HP3jFw48wbb63fUpWpNxMP/Tr/lGfuXBxbfbF/CHeXhVCRDgypSwKVmft1sb5960LYI2wLZEu01SYl0g2HB2pCWBK2BbJVra4JoS4ncMqG+++7vDNxTU0IXwkhVKfbeKY6aaMmHRhUlQRq04HpFUngt1sT2cBPypMA7LD4Zsi+6Fe15mdo6L5ckddf5U7r2KcrPbw+MdFQPN/rR+3iTuWoSj/QukNPW0F17BIFb4+13m294N1WsJ2v8LTlfpHKfEPZui1UHcontk0aP6d9dnykPDQ19SlW0y56np9+e/6E7Un3mtdh7EDDTnkdXvrYiun9lo2+9OrNvxqz4ayaA3a0m0/lbNLc9K5WHTKvuV7zPEajfJ70grdfwbekRl+6Qghbzz17xtfnTDz7iD63PLnu1QcfrNty9pwFvzhz4nmLLj55w7/Pf6lg/t/w0fP/+HKOt+V5uWOrH9Ync/P4SF1MvFmfzM0BAACg1+gNe01Xnv/6X73+/bWtMxed/u23Dj73w71afz3i/gFVB7yxrqn1/I2ff6Vg/t9Y2vH/eMi/Lne0a0MY1ZVYNCCEvbseTwIrY3e+OyCEL3elWvMDR6UCa0PYpytxULaqVIm+sURjKvByfSYwKhVYHwOtqcDyGLgiFbg4BlalAhNiYG0qcHQMhCn54/hqfWYcJQdqYmBcshFXxbMQ3qmPraW21aZsVQAAADtJZnZYmX8351yHHc0Qp5eranrKEM/ALpqhOlVDegabnVYVraGipxrKe6ohO+6Ojx5+Qc1lPdVccBpGWX6GG9f85X2LXjzsC2P3mvj5xUMvmPKz8eGst++uerx5yYtv7XvEzesK5v/NHz3/r+6mI2UFx/9DGNv1N+Yuz0Tas/FxrXkZAAAAgB1w0R//xR61Lw85oGHT+2X3zl/7xKMrfrl5j1NOf3/c8a//8PCaxnsL5v+jSjv/P+4T6ZOTOTwSd0NMHRBCc34gqXZkYSA56t0vEwAAAIDeIHs8PnssfErmNjlFOz2fLszfup3544H/Ud3m//09/7P2jq3/+mLZBd89d0TNgKX/9GrHhBNOPvqW47/1zj4VB/yyvGD+31ra+f+1+bdJJ9bHXlw9IIS+OYEHYy87A10aY+D5I/MDmfGvjxtgcawqc2JCtqrFscS4GGhOBZYUK/FotsTe+YHMk5VtfFF2HFMyJXICAAAA8ImLuwPicfl4/n/LGSNO++vvzfrbha88eN7qCy75q+Ed80eedP/THzbMvXJp2PTmEQXz/3Hbd/5/1zy44PT+9n4hDK0IoU/6hwGP1CYLA8ZAXVkmcW9tUlefdFULa0MY2TmwdFUvZNb/r0ivMfh4TVJVDOy93y1vD+pMLKsJYWhu4IlvLz2sMzEnFcg2flpNCF/qHG268bv6Jo1Xphu/tm8IX8wJZKua0DeEzsaq0lX9r+rMdQzSVa2qDmHPnEC2quHVIcwNAPRW8X/pxNwHZ82dN3V8e3vbzF2YiDvxa8KkKe1tTROmt0+sLtKniak+561jtKBwTKVe+mZTZo2ixSsnV5aSzv5QsDm3rcyO/IIzBzP345ehyq5xHlKZd7clPeQD9y9sIuR8lSo25PJdPOTa3Eq2PYkF9cf8VaFf6DtnVtvMpvPGz549c1jyt9TshyR/43GmZFsNS2+r2u76VsLLo+hyWSkfd1sNyq1k6OxpM4bOmjtvyJRp4ye3TW47p+XQP2sZMXz410YM7RxUc/K3h5EO6q7m1Ei3Li1xWDtxpF+oyKnkk/jQkJCQ6G2J/f7L5odH77n+nOt/9tqPz+/3zdPu3fvImT889KqpD1Xve/ji24ccWDD/n/HR8//4qRM/+DPrMxQ7/t8QD/Mnj287zD8uBpaUevy/odjR/OyJAY2pQEcMdDjMDwAAwGdD3B0Z92bGndKbb1m/buOSlrk/aHin5dY17Utvuum+U39y58ATvjQ47LXhuhM+VzD/7yjt9/87af3/7NL1JxRb5v+gWKK52Pr/6WX+s+v/dxRb/z+9zH92/f8ln8L6/3OygdQmecf6/wAAwGfBJ7f+f4/L+6cvEFCQocfl/dMXCCjI0OMy/qVeIGC71/9f8+Bff6Wq35g7/qTlN/WXvPZ39xzWeuS6zTP/5Etb10+877qxt6wpmP9fUdr838L9AAAAsPv4z5ddU3H02Xff0bJu6sZxbw5+98m3lgzq80HF0Q+3j3xh4Bu3nlcw/19S2vz/k1//LxQ7/7+xWKC12MKA1v8DAACglyq2/t89Q1sa/zCm/x+eHvab5Q/ePPqnj/z898v3+/mJPyvfZ8Gxz8+8bFLB/H9VafP/eNpFeV7u2JsP65M17UJ6Tbs367M/GQAAAIDeoTw0NVWWmDdvYdSjPn6bT2eWAv2odK7vvXLt2ZtfmH7c46ev+7uaEwbvOWHaBasa/2b4gXd+ftQley7ddGrB/H9tafP/vN9lXPrYiun9lo2+9MOrN/9qzIazag7YdvwfAAAA2HVK3S8BAAAAAAAAAAAAAAB8+s7tWHzhI8uOfe+bt//F/kcseXXwbXcd+Lsh/V664qoHJq1648zJXy/4/X8Y21Wu2O//43X/4u8L/igvd2y15/X/MvdPOfH2uV1LFj5SH8L+uYGpC6fuETLX5h+cG7jvjIMGdiYWpkusefbolzoT30kHjh/yuS2dicNTgXFxkcR90oF4VcUt/VOBuLzi4+lA3B6r0oGqTOCy/sk4ytLb6pW6ZFuVpbfVxroQBuQEstvq7rqkjbL0AK9JBbID/F46EAd4ciZQnu7V7f2SXsVAXSx6Q7+kVwAA7Lbit8DKMGlKe1tz/Aofb79QkX8b5S1ZtqCw2rISm9+UWZps8crJlaWk+6S/i2671nhlqO4cwrCCr6u5Wcq6Rrlzaulh0/1RkSH3tNpbeZFyadu76aqKj6gmGVHThOntEyt7HHhLz1kOqegxy7CCyU5ulvKuTVpCLSX0pYQRlbhtSuhyvF8empr6pHL9eQw2hDw9vSJK/b1+7jp/xV4FuXluO/TKt758zE+f++CfP/9E/2+cVnP7rO+/e+KvX7//wEOOuG5C05otBfP/htLm/9W549qSuRhAR7yy3sgBIYwrcUQAAADw2XfbRbfecfr09a9MWlvx5GOPTS0fc3rl1vl3zp93ycZ7Fx9/2cErdjR+2Fm//f5vBu//b89e9dJPR+7zwA03/58nD3v8z3//8I8eeqduZZ+x7xXM/xtLm//HPViZQ8HJ3o618fr/iwaE0HVp/YYksDIO97sDQvhyV6o1lkguqH9CLNGcBFbGHSYHxRLjWvOr6hsDq1KBl+szgbWpwPoYyOyluCVkduVcWR/CYV2psfklZsQSDanAmBhoTAWaYqA5FegfA6NSgdf6ZwKtqcDDMRCm5G+rH/fPbCsAAIDtkZlnVebfDel53qqKnjKU9ZShtqcM5T1lqO4pQ7FRxPt3xAyVqZNXynIyVaZrrUnVUpAhXgx/u/tVkCE8mp8zXbCg6Xj+QfZ8g7L8DFf+4NlT1w+e/tDqzcd8beBt/zhkz4Obp9e9t+CGp3475pzrnv/TQQXz/+bS5v+1+bdJ6+vj/H/b9f+SwIOxe1fHU8cbY+D5I/MDmR0D6+Nkd3G2qtZMicykfXEsMSoGGlOBGTEwKhUYNzYTWDIwP5CZaWcbX5RtfEqmRE4AAAAAPnFxB0HcTRPn/zce9YOr3x8wccuyeTPvH9vyxMmjv3H1XT+6d/9ld767YvCAce99p2D+P6q0+X9sr19uYxfH3rzYP4S7y7b1JhsYUpcE4n6Muvjz+H3rQtgjZwdHtkRbbVKiKtVweKAm+YV6Vbqq1TXJGgPx/ikb7r/v8s7ENTUhfCVn70u2jWeqkzZq0oFBVUmgNh2YXpEE4p6fbOAn5UkAdlh2r2B8QWVOdclq6L5ckdffZ+WaoOnhFewD7SZfd7+52lWq0w9k9qlmbd/TVlAdu0TB22Otd1tvfLc1eLflfpHKfEPZui1UHcontk0aP6d9dnwk95esBXbR85z7K9VS0jvhddjx8Xvbs+p0B5pTHx/N3Zfr/nVYFqu79LEV0/stG33p1Zt/NWbDWTUHlNyNIuIPhX+05X9XPpWzeXe16pB5zfW6z5NWnye98d9Ao6cthHDZ9cfsu+TdX+/33A3Pnbqu7Maxr/7lrHs2Lf+bysNHrXv/yaGjLy+Y/7eWNv+vSN12+V3cmLMGhHBgzsZ9JG7+YwYkn4M5geRTcs/CQHLI/V/ri35yAgAAwM6W3d2R3V8wJXObnBCenicX5m/dzvxxf8WobvOX2u9j121cedLQN6474G8vOPGNv7/28Kceuv6ysnXL//vYD1avuXzxe08UzP/HffT8v2+qm47/O/7PLuL4f7d2913RfdMPdOzQruiC6tglHP/v1u7+bnP8v1uO/zv+3x3H/3vg+H+3dvenreBb0gxfujonwdff+fPfTbzpg7mN+x180lPPHDrxun+6quXuu0555b+de9601761uWD+P6O0+b/1/7pftC+7/t+4Yuv/zSi2/l+H9f8AAIBdqshCc+l5XsHqfQUZ0qv3FWTocYHAHpcYtP7fdq//t3Dkv1904Q+fb7n2nTvHXb5m07Fnvvr0utXPzFpx3Lnnv9V6112tBfP/jtLm//Hl0C+39d6y/l/j2CJVXREDMywMCAAAwO6o2A4CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPl2HnvbO+5d8/R/aBv1ixc1/f+v/+7/P1q594JvfuGn4L6f86RllazZcM+LMLfMOuvC4+Qum/UvH8tVHnBHClK5yZUnxsueu+OpDrXsd9+wdAzfOvPHW+i3VmXorM7d/nJc7tvphfQhLch6pi4k36zvvbAuccuLtcys6E4/Uh7B/bmDqwql7dCaW14cwODdw3xkHDexMLEyXWPPs0S91Jr6TDhw/5HNbOhOHZwJl6e5e1z/pblm6u5f3D2FATiDb3bP751eVbeO4TKA83caKuqSNGKiLRa+tS9qIgfZYYkrfEIZWhNAnXdU/VydV9UlXdU91UlWfdFUXVYcwMoRQka7quaqkqor0yB+tSqqKgb33u+XtQZ2JpVUhDM0NPPHtpYd1JmamAtnG/1NVCF/qfMmkG/9xZdJ4Zbrx/1oZwhdDCFXpEu9VJCWq0iVeqAhhz5zAto1YEcLcwGdD/PSZmPvgrLnzpo5vb2+buQsTVZm2asKkKe1tTROmt0+sTvWpmLKc9NYFH3/sm96eP6HzdvHKyZWlpCsy5Sq7unxIZd7dlt2997FftbmVbHs+CuqP+atCv9B3zqy2mU3njZ89e+aw5G+p2Q9J/vbJRJNtNay3bKtBuZUMnT1txtBZc+cNmTJt/OS2yW3ntBz6Zy0jhg//2oihnYNqTv7ujJEu/eRH+oWKnEo+ife/hIREb0uU5326Ne/un+MFX/S3dbQyVHd9QBdMK3KzlHWNcmcM+qiPOeKP8zWlxxENK5g4FGQ5pOcsLQWTiW1ZapIsXV/rCiaHuTWVd23SeL88NDX1KbYdGvLv5m7e13dg8z6d2XSlpgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+P/swIEAAAAAAJD/ayNUVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVYQcOBAAAAACA/F8boaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqgo7cCwAAAAAIMzfOoyeDQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4FAAA//8fSxmR") chdir(&(0x7f0000000240)='./file0\x00') r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) fallocate(r0, 0x0, 0x0, 0x1000f4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x140) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ioctl$FITRIM(r1, 0xc4009420, &(0x7f0000000180)={0x5}) ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0xc020660b, 0x0) 407.936146ms ago: executing program 2 (id=675): syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000300)='./file2\x00', 0x400, &(0x7f0000000040)=ANY=[@ANYRES16=0x0], 0x1, 0xabd, &(0x7f0000000e00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000002000/0x1000)=nil, 0x1000, 0xe, 0x11, r0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002680)=@delchain={0x24, 0x65, 0x100, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xc}, {0xffe0, 0xfff5}, {0x56cb810e637be4f2, 0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) read(r0, &(0x7f0000001400)=""/4096, 0x1000) 254.475195ms ago: executing program 1 (id=676): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x400, &(0x7f0000000280)=ANY=[@ANYBLOB='mpol=interleave:']) 0s ago: executing program 1 (id=677): r0 = socket$netlink(0x10, 0x3, 0x9) syz_io_uring_setup(0xbdc, 0x0, &(0x7f00000006c0)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x114, 0x0, 0x0, 0x4) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40088a01, 0x0) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x7, 0x1, 0x201, 0x0, 0x0, {0xa, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x814) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.50' (ED25519) to the list of known hosts. [ 63.603084][ T5752] cgroup: Unknown subsys name 'net' [ 63.737348][ T5752] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 65.157120][ T5752] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 66.687133][ T5772] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 66.695901][ T5772] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 66.703742][ T5772] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 66.711155][ T5771] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 66.711871][ T5772] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 66.726921][ T5772] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 66.727876][ T5776] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 66.734354][ T5772] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 66.742455][ T5771] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 66.761370][ T5772] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 66.768667][ T5776] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 66.790174][ T5778] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 66.796932][ T5768] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 66.804966][ T5778] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 66.805473][ T5768] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 66.813198][ T5778] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 66.821528][ T5772] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 66.827383][ T5778] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 66.834554][ T5772] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 66.847766][ T5772] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 66.848131][ T5778] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 66.890683][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 66.901082][ T51] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 66.908625][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 67.259418][ T5764] chnl_net:caif_netlink_parms(): no params data found [ 67.277038][ T5763] chnl_net:caif_netlink_parms(): no params data found [ 67.379131][ T5765] chnl_net:caif_netlink_parms(): no params data found [ 67.392924][ T5766] chnl_net:caif_netlink_parms(): no params data found [ 67.461658][ T5764] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.469376][ T5764] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.476997][ T5764] bridge_slave_0: entered allmulticast mode [ 67.484454][ T5764] bridge_slave_0: entered promiscuous mode [ 67.499683][ T5764] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.506921][ T5764] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.514130][ T5764] bridge_slave_1: entered allmulticast mode [ 67.521577][ T5764] bridge_slave_1: entered promiscuous mode [ 67.553878][ T5763] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.562736][ T5763] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.569866][ T5763] bridge_slave_0: entered allmulticast mode [ 67.577468][ T5763] bridge_slave_0: entered promiscuous mode [ 67.596412][ T5763] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.606014][ T5763] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.613451][ T5763] bridge_slave_1: entered allmulticast mode [ 67.620516][ T5763] bridge_slave_1: entered promiscuous mode [ 67.636746][ T5764] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.668360][ T5764] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.685926][ T5763] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.697792][ T5763] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.773072][ T5765] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.780392][ T5765] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.787674][ T5765] bridge_slave_0: entered allmulticast mode [ 67.795369][ T5765] bridge_slave_0: entered promiscuous mode [ 67.806247][ T5764] team0: Port device team_slave_0 added [ 67.825204][ T5763] team0: Port device team_slave_0 added [ 67.831713][ T5765] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.838909][ T5765] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.846305][ T5765] bridge_slave_1: entered allmulticast mode [ 67.853287][ T5765] bridge_slave_1: entered promiscuous mode [ 67.877438][ T5764] team0: Port device team_slave_1 added [ 67.886120][ T5766] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.893515][ T5766] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.900787][ T5766] bridge_slave_0: entered allmulticast mode [ 67.907682][ T5766] bridge_slave_0: entered promiscuous mode [ 67.916581][ T5763] team0: Port device team_slave_1 added [ 67.926728][ T5765] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.945695][ T5766] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.953252][ T5766] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.960683][ T5766] bridge_slave_1: entered allmulticast mode [ 67.967572][ T5766] bridge_slave_1: entered promiscuous mode [ 67.994976][ T5765] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.029522][ T5763] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.036770][ T5763] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.063291][ T5763] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.084194][ T5764] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.091390][ T5764] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.117655][ T5764] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.137931][ T5763] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.145101][ T5763] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.171322][ T5763] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.190225][ T5765] team0: Port device team_slave_0 added [ 68.196736][ T5764] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.203857][ T5764] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.229833][ T5764] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.248803][ T5766] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.262496][ T5766] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.292491][ T5765] team0: Port device team_slave_1 added [ 68.312928][ T5766] team0: Port device team_slave_0 added [ 68.348809][ T5765] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.361448][ T5765] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.387905][ T5765] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.401566][ T5766] team0: Port device team_slave_1 added [ 68.424743][ T5765] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.431848][ T5765] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.458131][ T5765] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.481667][ T5764] hsr_slave_0: entered promiscuous mode [ 68.488042][ T5764] hsr_slave_1: entered promiscuous mode [ 68.514597][ T5763] hsr_slave_0: entered promiscuous mode [ 68.521304][ T5763] hsr_slave_1: entered promiscuous mode [ 68.527367][ T5763] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.535886][ T5763] Cannot create hsr debugfs directory [ 68.552526][ T5766] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.559507][ T5766] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.585496][ T5766] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.597717][ T5766] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.604792][ T5766] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.630773][ T5766] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.669949][ T5765] hsr_slave_0: entered promiscuous mode [ 68.676343][ T5765] hsr_slave_1: entered promiscuous mode [ 68.682753][ T5765] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.690503][ T5765] Cannot create hsr debugfs directory [ 68.756853][ T5766] hsr_slave_0: entered promiscuous mode [ 68.763109][ T5766] hsr_slave_1: entered promiscuous mode [ 68.769180][ T5766] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.777328][ T5766] Cannot create hsr debugfs directory [ 68.831011][ T51] Bluetooth: hci0: command tx timeout [ 68.910341][ T51] Bluetooth: hci2: command tx timeout [ 68.914156][ T5775] Bluetooth: hci1: command tx timeout [ 68.992970][ T5775] Bluetooth: hci3: command tx timeout [ 69.139881][ T5763] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 69.162633][ T5763] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 69.178261][ T5763] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 69.195537][ T5763] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 69.225551][ T5764] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 69.236161][ T5764] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 69.246675][ T5764] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 69.263300][ T5764] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 69.339873][ T5765] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 69.354190][ T5765] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 69.364748][ T5765] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 69.379032][ T5765] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 69.466271][ T5766] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 69.486712][ T5766] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 69.498470][ T5766] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 69.508905][ T5766] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 69.620104][ T5764] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.658782][ T5764] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.675859][ T5763] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.710922][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.718320][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.728990][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.736143][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.755633][ T5765] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.775746][ T5763] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.792860][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.800102][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.813426][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.820637][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.877543][ T5765] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.904813][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.911945][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.928186][ T5766] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.963869][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.971060][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.011105][ T5766] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.082694][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.089947][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.119070][ T5765] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 70.135183][ T5765] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 70.161279][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.168462][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.424663][ T5764] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.504059][ T5763] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.559359][ T5764] veth0_vlan: entered promiscuous mode [ 70.596782][ T5765] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.629268][ T5764] veth1_vlan: entered promiscuous mode [ 70.707759][ T5763] veth0_vlan: entered promiscuous mode [ 70.725905][ T5763] veth1_vlan: entered promiscuous mode [ 70.739269][ T5765] veth0_vlan: entered promiscuous mode [ 70.768996][ T5765] veth1_vlan: entered promiscuous mode [ 70.784717][ T5766] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.806794][ T5764] veth0_macvtap: entered promiscuous mode [ 70.819623][ T5763] veth0_macvtap: entered promiscuous mode [ 70.829810][ T5763] veth1_macvtap: entered promiscuous mode [ 70.848020][ T5764] veth1_macvtap: entered promiscuous mode [ 70.893128][ T5764] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.902196][ T5763] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.912968][ T5775] Bluetooth: hci0: command tx timeout [ 70.919268][ T5763] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.937970][ T5763] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.963608][ T5763] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.983033][ T5764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.995037][ T5775] Bluetooth: hci2: command tx timeout [ 70.995088][ T51] Bluetooth: hci1: command tx timeout [ 71.005018][ T5764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.017958][ T5764] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.028508][ T5765] veth0_macvtap: entered promiscuous mode [ 71.038400][ T5763] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.051939][ T5763] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.061382][ T5763] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.070767][ T51] Bluetooth: hci3: command tx timeout [ 71.077258][ T5763] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.094671][ T5766] veth0_vlan: entered promiscuous mode [ 71.117693][ T5764] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.126939][ T5764] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.135779][ T5764] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.144976][ T5764] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.159003][ T5766] veth1_vlan: entered promiscuous mode [ 71.169204][ T5765] veth1_macvtap: entered promiscuous mode [ 71.245107][ T5765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.265237][ T5765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.278822][ T5765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.289420][ T5765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.301383][ T5765] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.329161][ T5765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.340126][ T5765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.349945][ T5765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.360637][ T5765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.373701][ T5765] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.382714][ T5766] veth0_macvtap: entered promiscuous mode [ 71.427539][ T5765] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.436651][ T5765] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.445618][ T5765] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.455062][ T5765] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.491709][ T5766] veth1_macvtap: entered promiscuous mode [ 71.501965][ T5057] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.509971][ T5057] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.512817][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.548849][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.607193][ T5766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.622623][ T5766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.636328][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.636471][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.651290][ T5766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.661789][ T5766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.671741][ T5766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.682889][ T5766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.694012][ T5766] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.705031][ T5766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.716236][ T5766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.726085][ T5766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.736876][ T5766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.746986][ T5766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.757855][ T5766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.769605][ T5766] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.787068][ T5057] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.803911][ T5057] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.814017][ T5766] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.824079][ T5766] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.834068][ T5766] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.843242][ T5766] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.854337][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.863385][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.956671][ T4180] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.978346][ T4180] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.071522][ T2982] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.079386][ T2982] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.133558][ T5057] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.186520][ T5057] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.256300][ T745] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.298145][ T745] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.460589][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 73.107405][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 73.107667][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 73.877860][ T51] Bluetooth: hci0: command tx timeout [ 73.883609][ T5775] Bluetooth: hci1: command tx timeout [ 73.883643][ T5084] Bluetooth: hci3: command tx timeout [ 73.894871][ T5772] Bluetooth: hci2: command tx timeout [ 73.942129][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 74.438095][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 74.541134][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c0!!! [ 74.541436][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 74.549403][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c0!!! [ 74.600227][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 74.608511][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 76.890088][ T5876] syz.2.3[5876]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 76.902907][ T5876] loop2: detected capacity change from 0 to 16 [ 77.316344][ T5772] Bluetooth: hci2: command tx timeout [ 77.321966][ T5772] Bluetooth: hci0: command tx timeout [ 77.327467][ T5772] Bluetooth: hci3: command tx timeout [ 77.333701][ T5772] Bluetooth: hci1: command tx timeout [ 77.344874][ T5876] erofs: (device loop2): mounted with root inode @ nid 36. [ 77.364220][ T5875] erofs: (device loop2): z_erofs_readahead: readahead error at folio 2 @ nid 89 [ 77.373596][ T5875] erofs: (device loop2): z_erofs_readahead: readahead error at folio 1 @ nid 89 [ 77.382753][ T5875] erofs: (device loop2): z_erofs_readahead: readahead error at folio 0 @ nid 89 [ 77.392493][ T5875] erofs: (device loop2): z_erofs_read_folio: read error -117 @ 0 of nid 89 [ 77.404032][ T28] audit: type=1800 audit(1771155481.583:2): pid=5875 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.3" name="file3" dev="loop2" ino=89 res=0 errno=0 [ 77.560857][ T5878] loop3: detected capacity change from 0 to 128 [ 80.313589][ T5903] loop2: detected capacity change from 0 to 1024 [ 80.779214][ T5903] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 80.802837][ T5903] JBD2: no valid journal superblock found [ 80.991998][ T5903] EXT4-fs (loop2): Could not load journal inode [ 81.061983][ T5758] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 81.963152][ T27] cfg80211: failed to load regulatory.db [ 82.297093][ T5901] loop0: detected capacity change from 0 to 32768 [ 82.348994][ T5901] ======================================================= [ 82.348994][ T5901] WARNING: The mand mount option has been deprecated and [ 82.348994][ T5901] and is ignored by this kernel. Remove the mand [ 82.348994][ T5901] option from the mount to silence this warning. [ 82.348994][ T5901] ======================================================= [ 83.661395][ T5901] workqueue: Failed to create a rescuer kthread for wq "ocfs2_wq": -EINTR [ 83.680085][ T5901] (syz.0.16,5901,0):ocfs2_initialize_super:2285 ERROR: status = -12 [ 83.732726][ T5901] (syz.0.16,5901,1):ocfs2_fill_super:1178 ERROR: status = -12 [ 87.132172][ T5934] vim2m vim2m.0: Fourcc format (0x47425247) invalid. [ 87.140528][ T5934] Zero length message leads to an empty skb [ 94.762391][ T5972] vim2m vim2m.0: Fourcc format (0x47425247) invalid. [ 95.372749][ T5977] loop0: detected capacity change from 0 to 2048 [ 95.440695][ T8] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 95.450302][ T5977] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 95.471620][ T5758] udevd[5758]: incorrect nilfs2 checksum on /dev/loop0 [ 95.544080][ T5980] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 96.814903][ T8] usb 3-1: Using ep0 maxpacket: 16 [ 96.860737][ T8] usb 3-1: unable to get BOS descriptor or descriptor too short [ 96.909910][ T8] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 96.928769][ T8] usb 3-1: can't read configurations, error -71 [ 97.932597][ T6000] loop1: detected capacity change from 0 to 16 [ 97.976172][ T6000] erofs: (device loop1): mounted with root inode @ nid 36. [ 98.152124][ T6000] erofs: (device loop1): z_erofs_readahead: readahead error at folio 2 @ nid 89 [ 98.161784][ T6000] erofs: (device loop1): z_erofs_readahead: readahead error at folio 1 @ nid 89 [ 98.172715][ T6000] erofs: (device loop1): z_erofs_readahead: readahead error at folio 0 @ nid 89 [ 98.182257][ T6000] erofs: (device loop1): z_erofs_read_folio: read error -117 @ 0 of nid 89 [ 99.060618][ T28] audit: type=1800 audit(1771155502.373:3): pid=6000 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.45" name="file3" dev="loop1" ino=89 res=0 errno=0 [ 99.270728][ T6002] vim2m vim2m.0: Fourcc format (0x47425247) invalid. [ 100.967033][ T6011] loop2: detected capacity change from 0 to 32768 [ 101.009190][ T6011] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop2 scanned by syz.2.49 (6011) [ 101.629399][ T6011] BTRFS info (device loop2): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 101.640667][ T6011] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 101.649436][ T6011] BTRFS info (device loop2): enabling disk space caching [ 101.656779][ T6011] BTRFS info (device loop2): force clearing of disk cache [ 101.664254][ T6011] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 101.674061][ T6011] BTRFS info (device loop2): use zstd compression, level 3 [ 101.682537][ T6011] BTRFS info (device loop2): disk space caching is enabled [ 103.172080][ T6011] BTRFS info (device loop2): enabling ssd optimizations [ 103.179079][ T6011] BTRFS info (device loop2): auto enabling async discard [ 103.193697][ T6011] BTRFS info (device loop2): rebuilding free space tree [ 103.242917][ T6011] BTRFS info (device loop2): disabling free space tree [ 103.249922][ T6011] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 103.259889][ T6011] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 103.279000][ T6039] netlink: 'syz.1.51': attribute type 1 has an invalid length. [ 103.822661][ T5766] BTRFS info (device loop2): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 108.669670][ T6074] loop0: detected capacity change from 0 to 1024 [ 108.707376][ T6074] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 108.718618][ T6074] JBD2: no valid journal superblock found [ 108.740261][ T6074] EXT4-fs (loop0): Could not load journal inode [ 108.903397][ T5758] udevd: attempt to access beyond end of device [ 108.903397][ T5758] loop0: rw=524288, sector=0, nr_sectors = 8 limit=0 [ 112.987846][ T6101] loop2: detected capacity change from 0 to 32768 [ 113.001134][ T6101] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop2 scanned by syz.2.62 (6101) [ 113.017389][ T6101] BTRFS info (device loop2): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 113.027783][ T6101] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 113.036753][ T6101] BTRFS info (device loop2): enabling disk space caching [ 113.044952][ T6101] BTRFS info (device loop2): force clearing of disk cache [ 113.052172][ T6101] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 113.061604][ T6101] BTRFS info (device loop2): use zstd compression, level 3 [ 113.068827][ T6101] BTRFS info (device loop2): disk space caching is enabled [ 113.105847][ T6101] BTRFS info (device loop2): enabling ssd optimizations [ 113.113108][ T6101] BTRFS info (device loop2): auto enabling async discard [ 113.122127][ T6101] BTRFS info (device loop2): rebuilding free space tree [ 113.142738][ T6101] BTRFS info (device loop2): disabling free space tree [ 113.150669][ T6101] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 113.160882][ T6101] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 113.215090][ T6101] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 113.224336][ T6101] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 113.355857][ T5766] BTRFS info (device loop2): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 114.862839][ T6136] loop2: detected capacity change from 0 to 1024 [ 114.987547][ T6136] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 115.005910][ T6136] JBD2: no valid journal superblock found [ 115.037463][ T6136] EXT4-fs (loop2): Could not load journal inode [ 118.083690][ T6155] vim2m vim2m.0: Fourcc format (0x47425247) invalid. [ 121.357414][ T6173] loop1: detected capacity change from 0 to 32768 [ 121.390682][ T6173] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop1 scanned by syz.1.81 (6173) [ 121.587555][ T6173] BTRFS info (device loop1): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 121.597794][ T6173] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 121.606583][ T6173] BTRFS info (device loop1): enabling disk space caching [ 121.613701][ T6173] BTRFS info (device loop1): force clearing of disk cache [ 121.620963][ T6173] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 121.630396][ T6173] BTRFS info (device loop1): use zstd compression, level 3 [ 121.637734][ T6173] BTRFS info (device loop1): disk space caching is enabled [ 121.770180][ T6177] loop3: detected capacity change from 0 to 1024 [ 121.812103][ T6177] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 121.827443][ T6177] JBD2: no valid journal superblock found [ 121.833835][ T6177] EXT4-fs (loop3): Could not load journal inode [ 122.400023][ T6173] BTRFS info (device loop1): enabling ssd optimizations [ 122.407024][ T6173] BTRFS info (device loop1): auto enabling async discard [ 122.415516][ T6173] BTRFS info (device loop1): rebuilding free space tree [ 122.440923][ T6173] BTRFS info (device loop1): disabling free space tree [ 122.447927][ T6173] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 122.457636][ T6173] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 122.583683][ T6173] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 122.592863][ T6173] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 122.603568][ T6164] loop2: detected capacity change from 0 to 32768 [ 122.643420][ T6164] BTRFS warning: duplicate device /dev/loop2 devid 1 generation 8 scanned by syz.2.84 (6164) [ 122.795082][ T5764] BTRFS info (device loop1): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 123.583665][ T6201] vim2m vim2m.0: Fourcc format (0x47425247) invalid. [ 128.001223][ T6225] loop1: detected capacity change from 0 to 1024 [ 128.583048][ T6225] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 128.597232][ T6225] JBD2: no valid journal superblock found [ 128.613017][ T6225] EXT4-fs (loop1): Could not load journal inode [ 128.925505][ T6229] loop3: detected capacity change from 0 to 32768 [ 128.940248][ T6229] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop3 scanned by syz.3.100 (6229) [ 128.956344][ T6229] BTRFS info (device loop3): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 128.966648][ T6229] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 128.975441][ T6229] BTRFS info (device loop3): enabling disk space caching [ 128.982512][ T6229] BTRFS info (device loop3): force clearing of disk cache [ 128.989618][ T6229] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 128.999022][ T6229] BTRFS info (device loop3): use zstd compression, level 3 [ 129.006249][ T6229] BTRFS info (device loop3): disk space caching is enabled [ 129.110778][ T6229] BTRFS info (device loop3): enabling ssd optimizations [ 129.117758][ T6229] BTRFS info (device loop3): auto enabling async discard [ 129.127253][ T6229] BTRFS info (device loop3): rebuilding free space tree [ 129.154632][ T6229] BTRFS info (device loop3): disabling free space tree [ 129.161636][ T6229] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 129.161682][ T6229] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 129.204738][ T6246] loop1: detected capacity change from 0 to 64 [ 129.218445][ T6229] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 129.228164][ T6229] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 129.931937][ T5765] BTRFS info (device loop3): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 130.499923][ T6252] loop2: detected capacity change from 0 to 2048 [ 130.681454][ T6252] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 132.309581][ T6252] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 132.435755][ T6264] syzkaller0: entered promiscuous mode [ 132.485514][ T6264] syzkaller0: entered allmulticast mode [ 133.831240][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.840971][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.253153][ T5766] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.706984][ T6286] loop1: detected capacity change from 0 to 16 [ 134.746814][ T6286] erofs: (device loop1): mounted with root inode @ nid 36. [ 139.230897][ T6308] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 147.430811][ T6360] sched: RT throttling activated [ 147.507218][ T5767] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 147.662111][ T6363] loop0: detected capacity change from 0 to 1024 [ 147.894468][ T6363] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 147.922257][ T6363] JBD2: no valid journal superblock found [ 148.058949][ T6363] EXT4-fs (loop0): Could not load journal inode [ 148.200516][ T5767] usb 3-1: Using ep0 maxpacket: 16 [ 148.228373][ T5767] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 148.274722][ T5767] usb 3-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 148.315434][ T5767] usb 3-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 148.360367][ T5767] usb 3-1: config 1 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 148.366953][ T6365] loop1: detected capacity change from 0 to 128 [ 148.398880][ T5767] usb 3-1: config 1 interface 0 has no altsetting 0 [ 148.421421][ T6367] loop0: detected capacity change from 0 to 512 [ 148.436181][ T5767] usb 3-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 148.452786][ T6367] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 148.466124][ T5767] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.500838][ T6367] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 148.528920][ T5767] ums-sddr09 3-1:1.0: USB Mass Storage device detected [ 148.569697][ T6367] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2853: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 148.632878][ T6367] EXT4-fs (loop0): 1 truncate cleaned up [ 148.661043][ T6367] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 150.407058][ T5763] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.290348][ T8] usb 3-1: USB disconnect, device number 4 [ 154.005057][ T6400] loop2: detected capacity change from 0 to 64 [ 156.490721][ T6431] loop3: detected capacity change from 0 to 2048 [ 157.403811][ T6431] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 157.455124][ T2955] Bluetooth: (null): Invalid header checksum [ 157.503874][ T2955] Bluetooth: (null): Invalid header checksum [ 157.562438][ T5057] Bluetooth: (null): Invalid header checksum [ 157.610347][ T5852] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 157.682324][ T12] Bluetooth: (null): Invalid header checksum [ 157.760183][ T5852] usb 2-1: device descriptor read/64, error -71 [ 157.801049][ T12] Bluetooth: (null): Invalid header checksum [ 157.900523][ T5057] Bluetooth: (null): Invalid header checksum [ 158.080263][ T5852] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 158.095809][ T5057] Bluetooth: (null): Invalid header checksum [ 158.113707][ T5765] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.191687][ T6460] loop2: detected capacity change from 0 to 1024 [ 158.828284][ T6460] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 158.840382][ T5057] Bluetooth: (null): Invalid header checksum [ 158.859571][ T5057] Bluetooth: (null): Invalid header checksum [ 158.860824][ T6460] JBD2: no valid journal superblock found [ 158.884357][ T6460] EXT4-fs (loop2): Could not load journal inode [ 158.893494][ T5057] Bluetooth: (null): Invalid header checksum [ 158.907990][ T5057] Bluetooth: (null): Invalid header checksum [ 158.952499][ T5057] Bluetooth: (null): Invalid header checksum [ 158.970068][ T5852] usb 2-1: device descriptor read/64, error -71 [ 158.992231][ T5057] Bluetooth: (null): Invalid header checksum [ 159.120120][ T5057] Bluetooth: (null): Invalid header checksum [ 159.127234][ T5057] Bluetooth: (null): Invalid header checksum [ 159.135956][ T5852] usb usb2-port1: attempt power cycle [ 159.150299][ T5057] Bluetooth: (null): Invalid header checksum [ 159.156393][ T5057] Bluetooth: (null): Invalid header checksum [ 159.235003][ T5057] Bluetooth: (null): Invalid header checksum [ 159.340433][ T12] Bluetooth: (null): Invalid header checksum [ 159.450387][ T5057] Bluetooth: (null): Invalid header checksum [ 159.590230][ T4715] Bluetooth: (null): Invalid header checksum [ 159.689608][ T5852] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 159.924370][ T5852] usb 2-1: device descriptor read/8, error -71 [ 159.945907][ T12] Bluetooth: (null): Invalid header checksum [ 160.016462][ T12] Bluetooth: (null): Invalid header checksum [ 160.051657][ T12] Bluetooth: (null): Invalid header checksum [ 160.089182][ T12] Bluetooth: (null): Invalid header checksum [ 160.400300][ T12] Bluetooth: (null): Invalid header checksum [ 160.406387][ T12] Bluetooth: (null): Invalid header checksum [ 160.412597][ T5852] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 160.427222][ T12] Bluetooth: (null): Invalid header checksum [ 160.464274][ T5852] usb 2-1: device descriptor read/8, error -71 [ 160.610952][ T5852] usb usb2-port1: unable to enumerate USB device [ 164.645537][ T6487] loop0: detected capacity change from 0 to 16 [ 164.655320][ T6487] erofs: (device loop0): mounted with root inode @ nid 36. [ 164.665380][ T6487] erofs: (device loop0): z_erofs_readahead: readahead error at folio 2 @ nid 89 [ 164.674578][ T6487] erofs: (device loop0): z_erofs_readahead: readahead error at folio 1 @ nid 89 [ 164.683677][ T6487] erofs: (device loop0): z_erofs_readahead: readahead error at folio 0 @ nid 89 [ 164.692802][ T6487] erofs: (device loop0): z_erofs_read_folio: read error -117 @ 0 of nid 89 [ 165.261218][ T28] audit: type=1800 audit(1771155568.883:4): pid=6487 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.175" name="file3" dev="loop0" ino=89 res=0 errno=0 [ 168.171449][ T2996] Bluetooth: (null): Invalid header checksum [ 168.206788][ T2996] Bluetooth: (null): Invalid header checksum [ 169.516123][ T2996] Bluetooth: (null): Invalid header checksum [ 169.523081][ T2996] Bluetooth: (null): Invalid header checksum [ 169.529948][ T2996] Bluetooth: (null): Invalid header checksum [ 169.536252][ T2996] Bluetooth: (null): Invalid header checksum [ 169.540511][ T787] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 169.543039][ T2996] Bluetooth: (null): Invalid header checksum [ 169.556297][ T2996] Bluetooth: (null): Invalid header checksum [ 169.562972][ T2996] Bluetooth: (null): Invalid header checksum [ 169.570305][ T2996] Bluetooth: (null): Invalid header checksum [ 169.580191][ T2996] Bluetooth: (null): Invalid header checksum [ 169.588812][ T2996] Bluetooth: (null): Invalid header checksum [ 169.597126][ T2996] Bluetooth: (null): Invalid header checksum [ 169.617066][ T2996] Bluetooth: (null): Invalid header checksum [ 169.628566][ T2996] Bluetooth: (null): Invalid header checksum [ 169.710624][ T2996] Bluetooth: (null): Invalid header checksum [ 169.750102][ T787] usb 2-1: device descriptor read/64, error -71 [ 169.833192][ T2996] Bluetooth: (null): Invalid header checksum [ 169.932297][ T4715] Bluetooth: (null): Invalid header checksum [ 170.039836][ T787] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 170.061256][ T4715] Bluetooth: (null): Invalid header checksum [ 170.153220][ T2996] Bluetooth: (null): Invalid header checksum [ 170.220262][ T787] usb 2-1: device descriptor read/64, error -71 [ 170.262794][ T4715] Bluetooth: (null): Invalid header checksum [ 170.371716][ T2996] Bluetooth: (null): Invalid header checksum [ 170.371722][ T787] usb usb2-port1: attempt power cycle [ 170.480413][ T2996] Bluetooth: (null): Invalid header checksum [ 171.786122][ T4715] Bluetooth: (null): Invalid header checksum [ 171.821878][ T787] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 171.830782][ T4715] Bluetooth: (null): Invalid header checksum [ 171.862376][ T4715] Bluetooth: (null): Invalid header checksum [ 171.871859][ T4715] Bluetooth: (null): Invalid header checksum [ 171.896308][ T4715] Bluetooth: (null): Invalid header checksum [ 171.901640][ T787] usb 2-1: device descriptor read/8, error -71 [ 171.910307][ T4715] Bluetooth: (null): Invalid header checksum [ 171.930124][ T4715] Bluetooth: (null): Invalid header checksum [ 171.969651][ T4715] Bluetooth: (null): Invalid header checksum [ 171.989349][ T4715] Bluetooth: (null): Invalid header checksum [ 172.030127][ T4715] Bluetooth: (null): Invalid header checksum [ 172.036315][ T4715] Bluetooth: (null): Invalid header checksum [ 172.290342][ T6521] loop2: detected capacity change from 0 to 32768 [ 172.323778][ T6521] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop2 scanned by syz.2.181 (6521) [ 172.365177][ T6521] BTRFS info (device loop2): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 172.376012][ T6521] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 172.384886][ T6521] BTRFS info (device loop2): enabling disk space caching [ 172.391967][ T6521] BTRFS info (device loop2): force clearing of disk cache [ 172.399090][ T6521] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 172.408578][ T6521] BTRFS info (device loop2): use zstd compression, level 3 [ 172.415813][ T6521] BTRFS info (device loop2): disk space caching is enabled [ 172.500098][ T6521] BTRFS info (device loop2): enabling ssd optimizations [ 172.507140][ T6521] BTRFS info (device loop2): auto enabling async discard [ 172.524755][ T6521] BTRFS info (device loop2): rebuilding free space tree [ 172.631220][ T6521] BTRFS info (device loop2): disabling free space tree [ 172.638230][ T6521] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 172.649116][ T6521] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 173.520130][ T6521] overlayfs: missing 'workdir' [ 173.649278][ T5766] BTRFS info (device loop2): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 176.056385][ T6554] loop2: detected capacity change from 0 to 1024 [ 176.070514][ T6554] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 176.087437][ T6554] JBD2: no valid journal superblock found [ 176.110882][ T6554] EXT4-fs (loop2): Could not load journal inode [ 180.788910][ T6577] loop1: detected capacity change from 0 to 1024 [ 180.816967][ T6577] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 180.866990][ T6577] JBD2: no valid journal superblock found [ 181.546449][ T6577] EXT4-fs (loop1): Could not load journal inode [ 183.601076][ T6589] loop1: detected capacity change from 0 to 1024 [ 183.639468][ T745] Bluetooth: (null): Invalid header checksum [ 183.647046][ T6589] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 183.671256][ T6589] JBD2: no valid journal superblock found [ 183.691402][ T745] Bluetooth: (null): Invalid header checksum [ 183.697494][ T745] Bluetooth: (null): Invalid header checksum [ 183.710216][ T6589] EXT4-fs (loop1): Could not load journal inode [ 183.923857][ T745] Bluetooth: (null): Invalid header checksum [ 183.960220][ T9] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 183.969398][ T745] Bluetooth: (null): Invalid header checksum [ 184.085706][ T6592] loop3: detected capacity change from 0 to 32768 [ 184.108435][ T745] Bluetooth: (null): Invalid header checksum [ 184.114781][ T745] Bluetooth: (null): Invalid header checksum [ 184.126634][ T6592] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop3 scanned by syz.3.194 (6592) [ 184.147849][ T6592] BTRFS info (device loop3): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 184.158086][ T6592] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 184.166875][ T6592] BTRFS info (device loop3): enabling disk space caching [ 184.174040][ T6592] BTRFS info (device loop3): force clearing of disk cache [ 184.181042][ T9] usb 3-1: device descriptor read/64, error -71 [ 184.181223][ T6592] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 184.187896][ T745] Bluetooth: (null): Invalid header checksum [ 184.196889][ T6592] BTRFS info (device loop3): use zstd compression, level 3 [ 184.210876][ T6592] BTRFS info (device loop3): disk space caching is enabled [ 184.282585][ T745] Bluetooth: (null): Invalid header checksum [ 184.376896][ T6599] loop1: detected capacity change from 0 to 1024 [ 184.510219][ T745] Bluetooth: (null): Invalid header checksum [ 184.516314][ T745] Bluetooth: (null): Invalid header checksum [ 185.301102][ T9] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 185.369460][ T745] Bluetooth: (null): Invalid header checksum [ 185.414675][ T745] Bluetooth: (null): Invalid header checksum [ 185.432151][ T6592] BTRFS info (device loop3): enabling ssd optimizations [ 185.440050][ T6592] BTRFS info (device loop3): auto enabling async discard [ 185.464617][ T6592] BTRFS info (device loop3): rebuilding free space tree [ 185.497818][ T6592] BTRFS info (device loop3): disabling free space tree [ 185.504989][ T6592] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 185.514847][ T6592] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 185.667607][ T745] Bluetooth: (null): Invalid header checksum [ 185.679796][ T6592] overlayfs: missing 'workdir' [ 185.707670][ T745] Bluetooth: (null): Invalid header checksum [ 186.008637][ T745] Bluetooth: (null): Invalid header checksum [ 186.024364][ T745] Bluetooth: (null): Invalid header checksum [ 186.039036][ T745] Bluetooth: (null): Invalid header checksum [ 186.077852][ T5765] BTRFS info (device loop3): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 186.500201][ T6625] loop2: detected capacity change from 0 to 16 [ 186.833254][ T6625] erofs: (device loop2): mounted with root inode @ nid 36. [ 186.870680][ T6625] erofs: (device loop2): z_erofs_readahead: readahead error at folio 2 @ nid 89 [ 186.880858][ T6625] erofs: (device loop2): z_erofs_readahead: readahead error at folio 1 @ nid 89 [ 186.890465][ T6625] erofs: (device loop2): z_erofs_readahead: readahead error at folio 0 @ nid 89 [ 186.899797][ T6625] erofs: (device loop2): z_erofs_read_folio: read error -117 @ 0 of nid 89 [ 187.011526][ T28] audit: type=1800 audit(1771155591.093:5): pid=6625 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.202" name="file3" dev="loop2" ino=89 res=0 errno=0 [ 187.358348][ T6627] loop0: detected capacity change from 0 to 2048 [ 187.520752][ T6636] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 188.850337][ T6627] NILFS error (device loop0): nilfs_check_page: bad entry in directory #2: disallowed inode number - offset=0, inode=7, rec_len=16, name_len=1 [ 188.969450][ T6627] Remounting filesystem read-only [ 190.290667][ T12] Bluetooth: (null): Invalid header checksum [ 190.305373][ T6648] loop0: detected capacity change from 0 to 32768 [ 190.317744][ T12] Bluetooth: (null): Invalid header checksum [ 190.323959][ T6648] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz.0.209 (6648) [ 190.357841][ T6648] BTRFS info (device loop0): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 190.368129][ T6648] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 190.376933][ T6648] BTRFS info (device loop0): enabling disk space caching [ 190.384032][ T6648] BTRFS info (device loop0): force clearing of disk cache [ 190.391255][ T6648] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 190.400695][ T6648] BTRFS info (device loop0): use zstd compression, level 3 [ 190.407915][ T6648] BTRFS info (device loop0): disk space caching is enabled [ 190.422766][ T6654] loop2: detected capacity change from 0 to 1024 [ 190.436371][ T2955] Bluetooth: (null): Invalid header checksum [ 190.450229][ T5852] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 190.512964][ T2996] Bluetooth: (null): Invalid header checksum [ 190.584661][ T6666] netlink: 60 bytes leftover after parsing attributes in process `syz.2.212'. [ 190.627658][ T745] Bluetooth: (null): Invalid header checksum [ 190.680216][ T6648] BTRFS info (device loop0): enabling ssd optimizations [ 190.687254][ T6648] BTRFS info (device loop0): auto enabling async discard [ 190.695520][ T6648] BTRFS info (device loop0): rebuilding free space tree [ 190.709307][ T6648] BTRFS info (device loop0): disabling free space tree [ 190.717175][ T6648] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 190.720096][ T5852] usb 2-1: Using ep0 maxpacket: 16 [ 190.726912][ T6648] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 190.750104][ T745] Bluetooth: (null): Invalid header checksum [ 190.848887][ T12] Bluetooth: (null): Invalid header checksum [ 190.867395][ T5852] usb 2-1: unable to get BOS descriptor or descriptor too short [ 190.879941][ T5852] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 190.943837][ T5852] usb 2-1: can't read configurations, error -71 [ 191.399325][ T6677] loop3: detected capacity change from 0 to 1024 [ 192.409451][ T5084] Bluetooth: hci3: command 0x0406 tx timeout [ 192.415567][ T5768] Bluetooth: hci2: command 0x0406 tx timeout [ 192.415625][ T5776] Bluetooth: hci0: command 0x0406 tx timeout [ 192.421743][ T5768] Bluetooth: hci1: command 0x0406 tx timeout [ 192.481613][ T6677] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 192.495083][ T6677] JBD2: no valid journal superblock found [ 192.527817][ T6677] EXT4-fs (loop3): Could not load journal inode [ 192.727475][ T5763] BTRFS info (device loop0): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 194.733274][ T6693] loop3: detected capacity change from 0 to 64 [ 195.821118][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 195.827466][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.875240][ T6693] hfs: get root inode failed [ 195.878930][ T5758] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 13 /dev/loop0 scanned by udevd (5758) [ 195.933627][ T6674] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 196.360101][ T6698] syz.3.220 uses obsolete (PF_INET,SOCK_PACKET) [ 197.765521][ T2982] Bluetooth: (null): Invalid header checksum [ 197.842505][ T2982] Bluetooth: (null): Invalid header checksum [ 197.880088][ T745] Bluetooth: (null): Invalid header checksum [ 197.960106][ T5808] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 198.009368][ T2982] Bluetooth: (null): Invalid header checksum [ 198.090959][ T2982] Bluetooth: (null): Invalid header checksum [ 198.170112][ T5808] usb 1-1: Using ep0 maxpacket: 16 [ 198.403303][ T2982] Bluetooth: (null): Invalid header checksum [ 198.442900][ T5808] usb 1-1: unable to get BOS descriptor or descriptor too short [ 198.534744][ T2982] Bluetooth: (null): Invalid header checksum [ 198.646522][ T5808] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 198.771088][ T5808] usb 1-1: can't read configurations, error -71 [ 198.909171][ T6714] loop3: detected capacity change from 0 to 2048 [ 198.966760][ T6714] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 199.051373][ T787] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 200.420105][ T787] usb 2-1: Using ep0 maxpacket: 16 [ 200.426105][ T787] usb 2-1: too many configurations: 30, using maximum allowed: 8 [ 200.455646][ T787] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 10 [ 200.476032][ T787] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 10 [ 200.494795][ T5765] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.504599][ T787] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 10 [ 200.534322][ T787] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 10 [ 200.551274][ T787] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 10 [ 200.576011][ T787] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 10 [ 200.590376][ T787] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 10 [ 200.610827][ T787] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 10 [ 200.623320][ T787] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 200.640013][ T787] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.648038][ T787] usb 2-1: Product: syz [ 200.670207][ T787] usb 2-1: Manufacturer: syz [ 200.674852][ T787] usb 2-1: SerialNumber: syz [ 200.700719][ T787] r8152-cfgselector 2-1: config 0 descriptor?? [ 200.945480][ T787] r8152-cfgselector 2-1: Unknown version 0x0000 [ 200.975966][ T787] r8152-cfgselector 2-1: USB disconnect, device number 12 [ 201.026076][ T6731] loop3: detected capacity change from 0 to 16 [ 201.175569][ T6731] erofs: (device loop3): mounted with root inode @ nid 36. [ 201.198245][ T6731] erofs: (device loop3): z_erofs_readahead: readahead error at folio 2 @ nid 89 [ 201.207449][ T6731] erofs: (device loop3): z_erofs_readahead: readahead error at folio 1 @ nid 89 [ 201.218116][ T6731] erofs: (device loop3): z_erofs_readahead: readahead error at folio 0 @ nid 89 [ 201.227665][ T6731] erofs: (device loop3): z_erofs_read_folio: read error -117 @ 0 of nid 89 [ 201.253492][ T28] audit: type=1800 audit(1771155605.413:6): pid=6731 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.228" name="file3" dev="loop3" ino=89 res=0 errno=0 [ 205.732851][ T6756] loop0: detected capacity change from 0 to 2048 [ 205.818891][ T6756] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 206.184225][ T6766] ALSA: mixer_oss: invalid OSS volume 'DAGITAL1' [ 207.184291][ T2982] Bluetooth: (null): Invalid header checksum [ 207.210191][ T2982] Bluetooth: (null): Invalid header checksum [ 207.220530][ T2982] Bluetooth: (null): Invalid header checksum [ 207.226711][ T2982] Bluetooth: (null): Invalid header checksum [ 207.234351][ T9] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 207.242521][ T2982] Bluetooth: (null): Invalid header checksum [ 207.244123][ T5763] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 207.249041][ T2982] Bluetooth: (null): Invalid header checksum [ 207.265317][ T2982] Bluetooth: (null): Invalid header checksum [ 207.271562][ T2982] Bluetooth: (null): Invalid header checksum [ 207.277776][ T2982] Bluetooth: (null): Invalid header checksum [ 207.283936][ T2982] Bluetooth: (null): Invalid header checksum [ 207.290436][ T2982] Bluetooth: (null): Invalid header checksum [ 207.296503][ T2982] Bluetooth: (null): Invalid header checksum [ 207.311533][ T2996] Bluetooth: (null): Invalid header checksum [ 207.425107][ T2996] Bluetooth: (null): Invalid header checksum [ 207.460155][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 207.475649][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 207.500324][ T9] usb 3-1: no configurations [ 207.504967][ T9] usb 3-1: can't read configurations, error -22 [ 211.255116][ T6790] loop0: detected capacity change from 0 to 1024 [ 213.338570][ T6790] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 213.350992][ T6790] JBD2: no valid journal superblock found [ 213.380260][ T6790] EXT4-fs (loop0): Could not load journal inode [ 215.404043][ T6805] loop0: detected capacity change from 0 to 2048 [ 215.491999][ T6805] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 215.663059][ T11] Bluetooth: (null): Invalid header checksum [ 215.669270][ T11] Bluetooth: (null): Invalid header checksum [ 215.712326][ T5763] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 215.771827][ T11] Bluetooth: (null): Invalid header checksum [ 215.981900][ T5767] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 215.983721][ T11] Bluetooth: (null): Invalid header checksum [ 216.007297][ T11] Bluetooth: (null): Invalid header checksum [ 216.161459][ T5767] usb 4-1: Using ep0 maxpacket: 16 [ 216.180540][ T12] Bluetooth: (null): Invalid header checksum [ 216.218697][ T5767] usb 4-1: unable to get BOS descriptor or descriptor too short [ 216.308018][ T5767] usb 4-1: no configurations [ 216.391793][ T5767] usb 4-1: can't read configurations, error -22 [ 220.745154][ T6843] loop1: detected capacity change from 0 to 2048 [ 220.851775][ T6843] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 221.147652][ T5764] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 222.587935][ T4715] Bluetooth: (null): Invalid header checksum [ 222.594332][ T4715] Bluetooth: (null): Invalid header checksum [ 222.600856][ T4715] Bluetooth: (null): Invalid header checksum [ 222.659590][ T4715] Bluetooth: (null): Invalid header checksum [ 222.700397][ T4715] Bluetooth: (null): Invalid header checksum [ 222.710518][ T4715] Bluetooth: (null): Invalid header checksum [ 222.754609][ T4715] Bluetooth: (null): Invalid header checksum [ 222.770068][ T8] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 222.790507][ T4715] Bluetooth: (null): Invalid header checksum [ 222.811993][ T4715] Bluetooth: (null): Invalid header checksum [ 223.388331][ T4715] Bluetooth: (null): Invalid header checksum [ 223.529394][ T4715] Bluetooth: (null): Invalid header checksum [ 223.568665][ T4715] Bluetooth: (null): Invalid header checksum [ 223.627982][ T4715] Bluetooth: (null): Invalid header checksum [ 223.711266][ T8] usb 1-1: device descriptor read/64, error -71 [ 223.752491][ T4715] Bluetooth: (null): Invalid header checksum [ 223.829332][ T4715] Bluetooth: (null): Invalid header checksum [ 223.936921][ T4715] Bluetooth: (null): Invalid header checksum [ 224.001438][ T4715] Bluetooth: (null): Invalid header checksum [ 224.078437][ T4715] Bluetooth: (null): Invalid header checksum [ 224.151239][ T4715] Bluetooth: (null): Invalid header checksum [ 224.194817][ T8] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 224.217447][ T4715] Bluetooth: (null): Invalid header checksum [ 224.301041][ T4715] Bluetooth: (null): Invalid header checksum [ 224.347269][ T4715] Bluetooth: (null): Invalid header checksum [ 224.451905][ T4715] Bluetooth: (null): Invalid header checksum [ 224.479718][ T8] usb 1-1: device descriptor read/64, error -71 [ 224.534650][ T4715] Bluetooth: (null): Invalid header checksum [ 224.602339][ T4715] Bluetooth: (null): Invalid header checksum [ 224.622303][ T4715] Bluetooth: (null): Invalid header checksum [ 224.628420][ T4715] Bluetooth: (null): Invalid header checksum [ 224.670230][ T8] usb usb1-port1: attempt power cycle [ 224.731879][ T6878] loop2: detected capacity change from 0 to 2048 [ 225.052323][ T6878] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 225.094282][ T6887] loop1: detected capacity change from 0 to 16 [ 225.102033][ T6887] erofs: (device loop1): mounted with root inode @ nid 36. [ 225.112205][ T6887] erofs: (device loop1): z_erofs_readahead: readahead error at folio 2 @ nid 89 [ 225.121391][ T6887] erofs: (device loop1): z_erofs_readahead: readahead error at folio 1 @ nid 89 [ 225.132668][ T6887] erofs: (device loop1): z_erofs_readahead: readahead error at folio 0 @ nid 89 [ 225.143048][ T6887] erofs: (device loop1): z_erofs_read_folio: read error -117 @ 0 of nid 89 [ 225.276563][ T28] audit: type=1800 audit(1771155629.333:7): pid=6887 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.276" name="file3" dev="loop1" ino=89 res=0 errno=0 [ 227.177576][ T5766] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 229.338114][ T4180] Bluetooth: (null): Invalid header checksum [ 229.363358][ T4180] Bluetooth: (null): Invalid header checksum [ 229.372330][ T4180] Bluetooth: (null): Invalid header checksum [ 230.004890][ T8] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 230.121770][ T4715] Bluetooth: (null): Invalid header checksum [ 230.147089][ T4715] Bluetooth: (null): Invalid header checksum [ 230.168825][ T4715] Bluetooth: (null): Invalid header checksum [ 230.176879][ T4715] Bluetooth: (null): Invalid header checksum [ 230.196096][ T4715] Bluetooth: (null): Invalid header checksum [ 230.208881][ T4715] Bluetooth: (null): Invalid header checksum [ 230.220757][ T4715] Bluetooth: (null): Invalid header checksum [ 230.227043][ T4715] Bluetooth: (null): Invalid header checksum [ 230.437746][ T8] usb 4-1: device descriptor read/64, error -71 [ 230.625608][ T5057] Bluetooth: (null): Invalid header checksum [ 232.158004][ T6930] loop2: detected capacity change from 0 to 1024 [ 232.211560][ T6930] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 232.254111][ T6930] JBD2: no valid journal superblock found [ 232.273541][ T8] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 232.281376][ T5057] Bluetooth: (null): Invalid header checksum [ 232.287429][ T5057] Bluetooth: (null): Invalid header checksum [ 232.330129][ T6930] EXT4-fs (loop2): Could not load journal inode [ 232.395099][ T5057] Bluetooth: (null): Invalid header checksum [ 236.014387][ T788] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 236.220456][ T788] usb 3-1: Using ep0 maxpacket: 16 [ 236.251731][ T788] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 236.270041][ T788] usb 3-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 236.290316][ T788] usb 3-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 236.310953][ T788] usb 3-1: config 1 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 236.530293][ T788] usb 3-1: config 1 interface 0 has no altsetting 0 [ 236.539455][ T788] usb 3-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 236.549467][ T788] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.571208][ T788] ums-sddr09 3-1:1.0: USB Mass Storage device detected [ 237.431025][ T5775] Bluetooth: hci0: unexpected event 0x2f length: 509 > 260 [ 238.177813][ T4715] Bluetooth: (null): Invalid header checksum [ 238.234019][ T4715] Bluetooth: (null): Invalid header checksum [ 238.243578][ T4715] Bluetooth: (null): Invalid header checksum [ 238.252886][ T4715] Bluetooth: (null): Invalid header checksum [ 238.494735][ T4715] Bluetooth: (null): Invalid header checksum [ 238.502624][ T4715] Bluetooth: (null): Invalid header checksum [ 238.508694][ T4715] Bluetooth: (null): Invalid header checksum [ 238.515512][ T4715] Bluetooth: (null): Invalid header checksum [ 238.550171][ T5767] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 238.554053][ T4715] Bluetooth: (null): Invalid header checksum [ 238.564203][ T4715] Bluetooth: (null): Invalid header checksum [ 238.613707][ T4715] Bluetooth: (null): Invalid header checksum [ 239.531612][ T5767] usb 2-1: device descriptor read/64, error -71 [ 239.574202][ T4715] Bluetooth: (null): Invalid header checksum [ 239.610584][ T4715] Bluetooth: (null): Invalid header checksum [ 239.673231][ T787] usb 3-1: USB disconnect, device number 9 [ 239.705354][ T4715] Bluetooth: (null): Invalid header checksum [ 239.727569][ T4715] Bluetooth: (null): Invalid header checksum [ 239.758829][ T4715] Bluetooth: (null): Invalid header checksum [ 239.794032][ T4715] Bluetooth: (null): Invalid header checksum [ 239.826931][ T4715] Bluetooth: (null): Invalid header checksum [ 239.840946][ T5767] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 239.850238][ T4715] Bluetooth: (null): Invalid header checksum [ 239.859053][ T4715] Bluetooth: (null): Invalid header checksum [ 239.866515][ T4715] Bluetooth: (null): Invalid header checksum [ 239.873073][ T4715] Bluetooth: (null): Invalid header checksum [ 239.962574][ T4715] Bluetooth: (null): Invalid header checksum [ 240.040231][ T5767] usb 2-1: device descriptor read/64, error -71 [ 241.336031][ T4180] Bluetooth: (null): Invalid header checksum [ 241.375240][ T4180] Bluetooth: (null): Invalid header checksum [ 241.410160][ T4180] Bluetooth: (null): Invalid header checksum [ 241.417862][ T4180] Bluetooth: (null): Invalid header checksum [ 241.435058][ T4180] Bluetooth: (null): Invalid header checksum [ 241.457532][ T4180] Bluetooth: (null): Invalid header checksum [ 241.466160][ T5767] usb usb2-port1: attempt power cycle [ 241.488697][ T4180] Bluetooth: (null): Invalid header checksum [ 241.530077][ T4180] Bluetooth: (null): Invalid header checksum [ 241.536193][ T4180] Bluetooth: (null): Invalid header checksum [ 241.560279][ T4180] Bluetooth: (null): Invalid header checksum [ 241.566334][ T4180] Bluetooth: (null): Invalid header checksum [ 241.590068][ T4180] Bluetooth: (null): Invalid header checksum [ 242.285580][ T7010] vim2m vim2m.0: Fourcc format (0x47425247) invalid. [ 244.869826][ T7026] loop0: detected capacity change from 0 to 1024 [ 245.981657][ T7026] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 245.997815][ T7026] JBD2: no valid journal superblock found [ 246.020102][ T7026] EXT4-fs (loop0): Could not load journal inode [ 247.605936][ T4180] Bluetooth: (null): Invalid header checksum [ 247.633301][ T4180] Bluetooth: (null): Invalid header checksum [ 247.705255][ T4180] Bluetooth: (null): Invalid header checksum [ 247.760367][ T5808] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 247.894209][ T745] Bluetooth: (null): Invalid header checksum [ 247.929086][ T4180] Bluetooth: (null): Invalid header checksum [ 247.970256][ T5808] usb 1-1: Using ep0 maxpacket: 16 [ 247.995787][ T5808] usb 1-1: unable to get BOS descriptor or descriptor too short [ 248.118375][ T5808] usb 1-1: no configurations [ 248.144488][ T5808] usb 1-1: can't read configurations, error -22 [ 248.903553][ T7046] vim2m vim2m.0: Fourcc format (0x47425247) invalid. [ 252.923759][ T7070] loop3: detected capacity change from 0 to 512 [ 252.933213][ T7070] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 253.001151][ T7070] EXT4-fs (loop3): 1 truncate cleaned up [ 253.011497][ T7070] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 253.305402][ T5765] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 253.543580][ T2982] Bluetooth: (null): Invalid header checksum [ 253.566430][ T2982] Bluetooth: (null): Invalid header checksum [ 253.607538][ T7077] loop1: detected capacity change from 0 to 512 [ 253.624847][ T7077] EXT4-fs: Ignoring removed i_version option [ 253.646661][ T745] Bluetooth: (null): Invalid header checksum [ 253.655075][ T7077] EXT4-fs: Ignoring removed bh option [ 253.700087][ T5852] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 253.736255][ T7068] loop0: detected capacity change from 0 to 32768 [ 253.749265][ T7077] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 253.773355][ T7068] BTRFS info (device loop0): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 253.773781][ T5057] Bluetooth: (null): Invalid header checksum [ 253.784662][ T7077] ext4 filesystem being mounted at /80/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 253.800527][ T7068] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 253.821928][ T7068] BTRFS info (device loop0): enabling disk space caching [ 253.829260][ T7068] BTRFS info (device loop0): force clearing of disk cache [ 253.840808][ T7068] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 253.851587][ T7068] BTRFS info (device loop0): use zstd compression, level 3 [ 253.858832][ T7068] BTRFS info (device loop0): disk space caching is enabled [ 253.870866][ T2982] Bluetooth: (null): Invalid header checksum [ 253.900137][ T5852] usb 4-1: Using ep0 maxpacket: 16 [ 253.911599][ T5852] usb 4-1: unable to get BOS descriptor or descriptor too short [ 253.923961][ T5852] usb 4-1: no configurations [ 254.054242][ T5852] usb 4-1: can't read configurations, error -22 [ 254.145682][ T7097] loop2: detected capacity change from 0 to 16 [ 254.290738][ T7097] erofs: (device loop2): mounted with root inode @ nid 36. [ 254.303723][ T7093] erofs: (device loop2): z_erofs_readahead: readahead error at folio 2 @ nid 89 [ 254.312857][ T7093] erofs: (device loop2): z_erofs_readahead: readahead error at folio 1 @ nid 89 [ 254.321991][ T7093] erofs: (device loop2): z_erofs_readahead: readahead error at folio 0 @ nid 89 [ 254.331161][ T7093] erofs: (device loop2): z_erofs_read_folio: read error -117 @ 0 of nid 89 [ 254.344005][ T28] audit: type=1800 audit(1771155658.513:8): pid=7093 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.330" name="file3" dev="loop2" ino=89 res=0 errno=0 [ 254.723478][ T7068] BTRFS info (device loop0): enabling ssd optimizations [ 254.821891][ T7068] BTRFS info (device loop0): auto enabling async discard [ 254.894635][ T7068] BTRFS info (device loop0): rebuilding free space tree [ 254.983108][ T7068] BTRFS info (device loop0): disabling free space tree [ 255.022683][ T7068] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 255.056827][ T5764] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 255.069385][ T7068] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 255.892221][ T7109] overlayfs: missing 'lowerdir' [ 255.983771][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.991052][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.136817][ T5763] BTRFS info (device loop0): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 256.213871][ T7116] loop1: detected capacity change from 0 to 1024 [ 257.331156][ T7116] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 257.344515][ T7116] JBD2: no valid journal superblock found [ 257.388020][ T7116] EXT4-fs (loop1): Could not load journal inode [ 257.659461][ T7124] loop3: detected capacity change from 0 to 128 [ 258.937999][ T7124] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 258.956376][ T7124] ext4 filesystem being mounted at /84/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 259.106049][ T7124] fscrypt (loop3, inode 12): Unsupported encryption modes (contents 0, filenames 0) [ 259.251296][ T7134] loop1: detected capacity change from 0 to 16 [ 259.259207][ T7134] erofs: (device loop1): mounted with root inode @ nid 36. [ 259.274978][ T7134] erofs: (device loop1): z_erofs_readahead: readahead error at folio 2 @ nid 89 [ 259.284145][ T7134] erofs: (device loop1): z_erofs_readahead: readahead error at folio 1 @ nid 89 [ 259.293249][ T7134] erofs: (device loop1): z_erofs_readahead: readahead error at folio 0 @ nid 89 [ 259.302449][ T7134] erofs: (device loop1): z_erofs_read_folio: read error -117 @ 0 of nid 89 [ 259.346619][ T28] audit: type=1800 audit(1771155663.503:9): pid=7134 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.340" name="file3" dev="loop1" ino=89 res=0 errno=0 [ 259.503037][ T5765] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 261.808773][ T7144] loop1: detected capacity change from 0 to 32768 [ 261.876768][ T7144] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop1 scanned by syz.1.345 (7144) [ 261.978540][ T7144] BTRFS info (device loop1): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 262.005396][ T7144] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 262.024303][ T4180] Bluetooth: (null): Invalid header checksum [ 262.035076][ T7144] BTRFS info (device loop1): enabling disk space caching [ 262.041150][ T4180] Bluetooth: (null): Invalid header checksum [ 262.060556][ T7144] BTRFS info (device loop1): force clearing of disk cache [ 262.088109][ T7144] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 262.120068][ T7144] BTRFS info (device loop1): use zstd compression, level 3 [ 262.127345][ T7144] BTRFS info (device loop1): disk space caching is enabled [ 262.144573][ T11] Bluetooth: (null): Invalid header checksum [ 262.223100][ T5852] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 262.254285][ T4715] Bluetooth: (null): Invalid header checksum [ 263.500534][ T7144] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 263.505170][ T4180] Bluetooth: (null): Invalid header checksum [ 263.520411][ T7144] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 263.521584][ T7144] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 263.580184][ T4180] Bluetooth: (null): Invalid header checksum [ 263.600662][ T7144] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 263.630383][ T5852] usb 1-1: Using ep0 maxpacket: 16 [ 263.659094][ T4180] Bluetooth: (null): Invalid header checksum [ 263.666865][ T5852] usb 1-1: unable to get BOS descriptor or descriptor too short [ 263.699868][ T4180] Bluetooth: (null): Invalid header checksum [ 263.707502][ T5852] usb 1-1: no configurations [ 263.714630][ T4180] Bluetooth: (null): Invalid header checksum [ 263.725051][ T7144] BTRFS error (device loop1): open_ctree failed: -12 [ 263.732641][ T4180] Bluetooth: (null): Invalid header checksum [ 263.734242][ T5852] usb 1-1: can't read configurations, error -22 [ 263.768854][ T4180] Bluetooth: (null): Invalid header checksum [ 263.792920][ T4180] Bluetooth: (null): Invalid header checksum [ 263.809506][ T4180] Bluetooth: (null): Invalid header checksum [ 263.852831][ T6715] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop1 scanned by udevd (6715) [ 263.870352][ T4180] Bluetooth: (null): Invalid header checksum [ 263.876528][ T4180] Bluetooth: (null): Invalid header checksum [ 264.326443][ T7186] loop3: detected capacity change from 0 to 16 [ 264.336225][ T7186] erofs: (device loop3): mounted with root inode @ nid 36. [ 264.346316][ T7186] erofs: (device loop3): z_erofs_readahead: readahead error at folio 2 @ nid 89 [ 264.355546][ T7186] erofs: (device loop3): z_erofs_readahead: readahead error at folio 1 @ nid 89 [ 264.364793][ T7186] erofs: (device loop3): z_erofs_readahead: readahead error at folio 0 @ nid 89 [ 264.373920][ T7186] erofs: (device loop3): z_erofs_read_folio: read error -117 @ 0 of nid 89 [ 264.480112][ T28] audit: type=1800 audit(1771155668.573:10): pid=7186 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.353" name="file3" dev="loop3" ino=89 res=0 errno=0 [ 266.560223][ T5852] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 266.670315][ T7203] loop3: detected capacity change from 0 to 32768 [ 266.700150][ T7203] BTRFS info (device loop3): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 266.724478][ T7203] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 266.738422][ T7203] BTRFS info (device loop3): enabling disk space caching [ 266.746333][ T5852] usb 3-1: Using ep0 maxpacket: 16 [ 266.755577][ T7203] BTRFS info (device loop3): force clearing of disk cache [ 266.766594][ T5852] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 266.771077][ T7197] loop0: detected capacity change from 0 to 32768 [ 266.777571][ T7203] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 266.796075][ T5852] usb 3-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 266.847449][ T5852] usb 3-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 266.863528][ T7203] BTRFS info (device loop3): use zstd compression, level 3 [ 266.881711][ T5852] usb 3-1: config 1 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 266.894716][ T7203] BTRFS info (device loop3): disk space caching is enabled [ 266.896369][ T5852] usb 3-1: config 1 interface 0 has no altsetting 0 [ 266.902841][ T7197] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 266.909138][ T5852] usb 3-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 266.926934][ T5852] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 266.943896][ T5852] ums-sddr09 3-1:1.0: USB Mass Storage device detected [ 267.060463][ T7203] BTRFS info (device loop3): enabling ssd optimizations [ 267.085442][ T7203] BTRFS info (device loop3): auto enabling async discard [ 267.113449][ T7203] BTRFS info (device loop3): rebuilding free space tree [ 267.138757][ T7197] XFS (loop0): Ending clean mount [ 267.185291][ T7203] BTRFS info (device loop3): disabling free space tree [ 267.220508][ T7203] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 267.258404][ T7203] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 267.314592][ T7203] overlayfs: missing 'lowerdir' [ 267.333700][ T5763] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 267.443608][ T5765] BTRFS info (device loop3): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 268.225171][ T7244] loop1: detected capacity change from 0 to 1024 [ 268.341766][ T7244] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 268.357132][ T7244] JBD2: no valid journal superblock found [ 268.441291][ T7244] EXT4-fs (loop1): Could not load journal inode [ 269.912860][ T787] usb 3-1: USB disconnect, device number 10 [ 269.991681][ T5057] Bluetooth: (null): Invalid header checksum [ 270.014677][ T5057] Bluetooth: (null): Invalid header checksum [ 270.100658][ T4180] Bluetooth: (null): Invalid header checksum [ 270.160041][ T5852] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 270.212578][ T4180] Bluetooth: (null): Invalid header checksum [ 270.320438][ T745] Bluetooth: (null): Invalid header checksum [ 270.374199][ T5852] usb 4-1: Using ep0 maxpacket: 16 [ 270.396197][ T5852] usb 4-1: unable to get BOS descriptor or descriptor too short [ 270.412880][ T5852] usb 4-1: no configurations [ 270.419206][ T5852] usb 4-1: can't read configurations, error -22 [ 271.692073][ T7262] loop1: detected capacity change from 0 to 32768 [ 271.736668][ T7262] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop1 scanned by syz.1.373 (7262) [ 271.980794][ T7273] loop3: detected capacity change from 0 to 16 [ 272.082008][ T7273] erofs: (device loop3): mounted with root inode @ nid 36. [ 272.093814][ T7273] erofs: (device loop3): z_erofs_readahead: readahead error at folio 2 @ nid 89 [ 272.102953][ T7273] erofs: (device loop3): z_erofs_readahead: readahead error at folio 1 @ nid 89 [ 272.112068][ T7273] erofs: (device loop3): z_erofs_readahead: readahead error at folio 0 @ nid 89 [ 272.121198][ T7273] erofs: (device loop3): z_erofs_read_folio: read error -117 @ 0 of nid 89 [ 272.230786][ T28] audit: type=1800 audit(1771155676.303:11): pid=7273 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.377" name="file3" dev="loop3" ino=89 res=0 errno=0 [ 272.258802][ T7262] BTRFS info (device loop1): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 272.270669][ T7262] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 272.280756][ T7262] BTRFS info (device loop1): enabling disk space caching [ 272.287909][ T7262] BTRFS info (device loop1): force clearing of disk cache [ 272.338912][ T7262] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 272.360284][ T7262] BTRFS info (device loop1): use zstd compression, level 3 [ 272.404311][ T7262] BTRFS info (device loop1): disk space caching is enabled [ 272.663320][ T7262] BTRFS info (device loop1): enabling ssd optimizations [ 272.688025][ T7262] BTRFS info (device loop1): auto enabling async discard [ 272.707625][ T7262] BTRFS info (device loop1): rebuilding free space tree [ 272.765670][ T7262] BTRFS info (device loop1): disabling free space tree [ 272.790439][ T7262] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 272.810490][ T7262] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 272.881795][ T7262] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 272.910074][ T7262] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 272.920157][ T5852] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 273.045022][ T5764] BTRFS info (device loop1): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 273.113560][ T5852] usb 1-1: Using ep0 maxpacket: 16 [ 273.126121][ T5852] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 274.251006][ T5852] usb 1-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 274.297398][ T5852] usb 1-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 274.324241][ T5852] usb 1-1: config 1 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 274.381053][ T5852] usb 1-1: config 1 interface 0 has no altsetting 0 [ 274.387729][ T5852] usb 1-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 274.439989][ T5852] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.492281][ T5852] ums-sddr09 1-1:1.0: USB Mass Storage device detected [ 276.530097][ T5852] usb 1-1: USB disconnect, device number 11 [ 281.533992][ T7368] loop1: detected capacity change from 0 to 32768 [ 281.574753][ T7368] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop1 scanned by syz.1.393 (7368) [ 281.654489][ T7368] BTRFS info (device loop1): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 281.721728][ T7368] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 281.760376][ T7368] BTRFS info (device loop1): enabling disk space caching [ 281.828199][ T7368] BTRFS info (device loop1): force clearing of disk cache [ 281.857096][ T7368] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 281.886343][ T7368] BTRFS info (device loop1): use zstd compression, level 3 [ 281.910658][ T7368] BTRFS info (device loop1): disk space caching is enabled [ 282.171423][ T7368] BTRFS info (device loop1): enabling ssd optimizations [ 282.178431][ T7368] BTRFS info (device loop1): auto enabling async discard [ 282.241306][ T7368] BTRFS info (device loop1): rebuilding free space tree [ 282.327240][ T7368] BTRFS info (device loop1): disabling free space tree [ 282.355835][ T7368] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 282.370217][ T7368] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 282.667694][ T7398] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 282.674742][ T7398] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 282.682045][ T7398] comedi comedi3: 8255: I/O port conflict (0xffffffffffffffff,4) [ 282.689913][ T7398] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 282.697035][ T7398] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 282.703646][ T7398] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 282.710325][ T7398] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 282.716810][ T7398] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 282.996195][ T7368] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 283.330784][ T7368] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 283.568102][ T5764] BTRFS info (device loop1): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 285.306746][ T7426] tmpfs: Unknown parameter 'grpquota_block_har' [ 285.593216][ T7431] loop1: detected capacity change from 0 to 1024 [ 285.600750][ T7431] hfsplus: unable to parse mount options [ 286.725936][ T6715] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 287.145837][ T7438] loop1: detected capacity change from 0 to 16 [ 287.160246][ T7438] erofs: (device loop1): mounted with root inode @ nid 36. [ 287.169444][ T7438] erofs: (device loop1): z_erofs_readahead: readahead error at folio 2 @ nid 89 [ 287.178577][ T7438] erofs: (device loop1): z_erofs_readahead: readahead error at folio 1 @ nid 89 [ 287.187673][ T7438] erofs: (device loop1): z_erofs_readahead: readahead error at folio 0 @ nid 89 [ 287.196816][ T7438] erofs: (device loop1): z_erofs_read_folio: read error -117 @ 0 of nid 89 [ 287.207551][ T28] audit: type=1800 audit(1771155691.383:12): pid=7438 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.421" name="file3" dev="loop1" ino=89 res=0 errno=0 [ 289.777835][ T7436] loop0: detected capacity change from 0 to 32768 [ 291.014620][ T7436] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz.0.420 (7436) [ 291.126760][ T7436] BTRFS info (device loop0): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 291.182851][ T7436] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 291.215506][ T7436] BTRFS info (device loop0): enabling disk space caching [ 291.235718][ T7436] BTRFS info (device loop0): force clearing of disk cache [ 291.255477][ T7436] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 291.279799][ T7436] BTRFS info (device loop0): use zstd compression, level 3 [ 291.289345][ T7436] BTRFS info (device loop0): disk space caching is enabled [ 291.326597][ T7436] workqueue: Failed to create a rescuer kthread for wq "btrfs-worker": -EINTR [ 291.346971][ T7436] workqueue: Failed to create a rescuer kthread for wq "btrfs-flush_delalloc": -EINTR [ 291.390659][ T7436] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR [ 291.470415][ T7436] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR [ 291.531073][ T7436] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR [ 291.605446][ T7436] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 291.644438][ T7436] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 291.691988][ T7436] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 291.721431][ T7436] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 291.749208][ T7436] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 291.759742][ T7436] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 291.781074][ T7436] BTRFS error (device loop0): open_ctree failed: -12 [ 292.029445][ T6715] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by udevd (6715) [ 299.942699][ T7516] loop3: detected capacity change from 0 to 16 [ 299.952951][ T7516] erofs: (device loop3): mounted with root inode @ nid 36. [ 299.962577][ T7516] erofs: (device loop3): z_erofs_readahead: readahead error at folio 2 @ nid 89 [ 299.971722][ T7516] erofs: (device loop3): z_erofs_readahead: readahead error at folio 1 @ nid 89 [ 299.980822][ T7516] erofs: (device loop3): z_erofs_readahead: readahead error at folio 0 @ nid 89 [ 299.989894][ T7516] erofs: (device loop3): z_erofs_read_folio: read error -117 @ 0 of nid 89 [ 300.002096][ T28] audit: type=1800 audit(1771155704.173:13): pid=7516 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.442" name="file3" dev="loop3" ino=89 res=0 errno=0 [ 303.500627][ T7529] loop1: detected capacity change from 0 to 1024 [ 304.580116][ T7529] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 304.614022][ T7529] JBD2: no valid journal superblock found [ 304.758277][ T7529] EXT4-fs (loop1): Could not load journal inode [ 313.160324][ T788] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 313.363503][ T788] usb 1-1: Using ep0 maxpacket: 16 [ 313.387118][ T788] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 313.407584][ T788] usb 1-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 313.442546][ T788] usb 1-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 313.461094][ T788] usb 1-1: config 1 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 313.479433][ T7566] loop3: detected capacity change from 0 to 32768 [ 313.502318][ T7576] loop2: detected capacity change from 0 to 1024 [ 313.527292][ T7576] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 313.583896][ T7576] JBD2: no valid journal superblock found [ 313.707265][ T7576] EXT4-fs (loop2): Could not load journal inode [ 313.793876][ T7566] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 313.944148][ T7566] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 314.145844][ T788] usb 1-1: config 1 interface 0 has no altsetting 0 [ 314.160618][ T788] usb 1-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 314.174385][ T788] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 314.194338][ T788] ums-sddr09 1-1:1.0: USB Mass Storage device detected [ 314.282268][ T7566] gfs2: fsid=syz:syz.0: journal 0 mapped with 9 extents in 0ms [ 314.342657][ T27] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 314.378818][ T27] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 315.445644][ T27] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 1066ms [ 315.468639][ T27] gfs2: fsid=syz:syz.0: jid=0: Done [ 315.493137][ T7566] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 315.530252][ T7566] gfs2: fsid=syz:syz.0: can't create logd thread: -4 [ 316.940240][ T5895] usb 1-1: USB disconnect, device number 12 [ 317.426051][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.433127][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.642611][ T7612] netlink: 80 bytes leftover after parsing attributes in process `syz.3.467'. [ 322.621202][ T5852] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 322.840351][ T5852] usb 4-1: Using ep0 maxpacket: 16 [ 322.916535][ T5852] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 322.925675][ T5852] usb 4-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 322.945222][ T5852] usb 4-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 322.973486][ T7630] netlink: 24 bytes leftover after parsing attributes in process `syz.1.470'. [ 322.982478][ T5852] usb 4-1: config 1 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 323.021041][ T5852] usb 4-1: config 1 interface 0 has no altsetting 0 [ 323.146942][ T5852] usb 4-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 323.163015][ T5852] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 323.194540][ T5852] ums-sddr09 4-1:1.0: USB Mass Storage device detected [ 325.455602][ T787] usb 4-1: USB disconnect, device number 10 [ 325.543366][ T7646] process 'syz.1.475' launched '/dev/fd/-1' with NULL argv: empty string added [ 326.118513][ T7653] loop3: detected capacity change from 0 to 1024 [ 326.173503][ T7653] EXT4-fs: Ignoring removed orlov option [ 326.179169][ T7653] EXT4-fs: inline encryption not supported [ 326.254685][ T7653] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 327.543257][ T7653] capability: warning: `syz.3.479' uses deprecated v2 capabilities in a way that may be insecure [ 327.741540][ T5765] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 329.093702][ T7669] loop3: detected capacity change from 0 to 16 [ 329.230403][ T7669] erofs: (device loop3): mounted with root inode @ nid 36. [ 329.276357][ T7669] erofs: (device loop3): z_erofs_readahead: readahead error at folio 2 @ nid 89 [ 329.370964][ T7669] erofs: (device loop3): z_erofs_readahead: readahead error at folio 1 @ nid 89 [ 329.380598][ T7669] erofs: (device loop3): z_erofs_readahead: readahead error at folio 0 @ nid 89 [ 329.400042][ T7669] erofs: (device loop3): z_erofs_read_folio: read error -117 @ 0 of nid 89 [ 329.577666][ T28] audit: type=1800 audit(1771155733.753:14): pid=7669 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.482" name="file3" dev="loop3" ino=89 res=0 errno=0 [ 330.528398][ T7683] loop1: detected capacity change from 0 to 1024 [ 331.586378][ T7683] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 331.597892][ T7683] JBD2: no valid journal superblock found [ 331.630026][ T7683] EXT4-fs (loop1): Could not load journal inode [ 333.230159][ T27] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 333.541611][ T27] usb 3-1: Using ep0 maxpacket: 16 [ 333.551270][ T27] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 333.560299][ T27] usb 3-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 333.570039][ T27] usb 3-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 333.579688][ T27] usb 3-1: config 1 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 333.620630][ T27] usb 3-1: config 1 interface 0 has no altsetting 0 [ 333.627742][ T27] usb 3-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 333.653548][ T27] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 334.891449][ T27] ums-sddr09 3-1:1.0: USB Mass Storage device detected [ 336.288091][ T7705] loop1: detected capacity change from 0 to 131072 [ 336.300975][ T7705] F2FS-fs (loop1): invalid crc value [ 336.333773][ T7705] F2FS-fs (loop1): Found nat_bits in checkpoint [ 336.559480][ T7705] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 337.522654][ T27] usb 3-1: USB disconnect, device number 11 [ 338.092850][ T7724] loop2: detected capacity change from 0 to 1024 [ 338.258547][ T7724] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 338.272884][ T7724] JBD2: no valid journal superblock found [ 338.289404][ T7724] EXT4-fs (loop2): Could not load journal inode [ 338.759568][ T6674] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 339.391969][ T7731] loop3: detected capacity change from 0 to 16 [ 339.495729][ T7719] loop0: detected capacity change from 0 to 32768 [ 339.517763][ T7731] erofs: (device loop3): mounted with root inode @ nid 36. [ 340.377229][ T7731] erofs: (device loop3): z_erofs_readahead: readahead error at folio 2 @ nid 89 [ 340.404093][ T7719] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 340.455794][ T7731] erofs: (device loop3): z_erofs_readahead: readahead error at folio 1 @ nid 89 [ 340.490092][ T7731] erofs: (device loop3): z_erofs_readahead: readahead error at folio 0 @ nid 89 [ 340.499296][ T7731] erofs: (device loop3): z_erofs_read_folio: read error -117 @ 0 of nid 89 [ 340.510543][ T28] audit: type=1800 audit(1771155744.693:15): pid=7731 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.497" name="file3" dev="loop3" ino=89 res=0 errno=0 [ 340.664166][ T7719] XFS (loop0): Ending clean mount [ 340.765614][ T5763] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 345.560317][ T5829] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 345.750279][ T5829] usb 1-1: Using ep0 maxpacket: 16 [ 345.761993][ T5829] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 345.907700][ T5829] usb 1-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 345.917739][ T5829] usb 1-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 345.927797][ T5829] usb 1-1: config 1 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 345.943999][ T5829] usb 1-1: config 1 interface 0 has no altsetting 0 [ 346.794841][ T5829] usb 1-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 346.805666][ T5829] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 346.828377][ T5829] ums-sddr09 1-1:1.0: USB Mass Storage device detected [ 347.200502][ T7780] loop2: detected capacity change from 0 to 1024 [ 347.243994][ T7780] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 348.140845][ T7780] JBD2: no valid journal superblock found [ 348.189142][ T7780] EXT4-fs (loop2): Could not load journal inode [ 349.410962][ T5895] usb 1-1: USB disconnect, device number 13 [ 351.140276][ T7796] netlink: 24 bytes leftover after parsing attributes in process `syz.2.513'. [ 352.691224][ T7804] loop2: detected capacity change from 0 to 16 [ 352.771416][ T7804] erofs: (device loop2): mounted with root inode @ nid 36. [ 352.807522][ T7804] erofs: (device loop2): z_erofs_readahead: readahead error at folio 2 @ nid 89 [ 354.034349][ T7804] erofs: (device loop2): z_erofs_readahead: readahead error at folio 1 @ nid 89 [ 354.043518][ T7804] erofs: (device loop2): z_erofs_readahead: readahead error at folio 0 @ nid 89 [ 354.052872][ T7804] erofs: (device loop2): z_erofs_read_folio: read error -117 @ 0 of nid 89 [ 354.067652][ T28] audit: type=1800 audit(1771155758.253:16): pid=7804 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.514" name="file3" dev="loop2" ino=89 res=0 errno=0 [ 354.343965][ T5808] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 354.552557][ T5808] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 354.589987][ T5808] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 354.628033][ T5808] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 354.669989][ T5808] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 354.684266][ T7816] loop0: detected capacity change from 0 to 2048 [ 354.714606][ T5808] usb 2-1: config 0 descriptor?? [ 354.764286][ T7816] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 355.120831][ T7825] loop3: detected capacity change from 0 to 1024 [ 355.191479][ T7825] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 355.206259][ T7825] JBD2: no valid journal superblock found [ 355.341287][ T7825] EXT4-fs (loop3): Could not load journal inode [ 355.663143][ T5895] usb 2-1: USB disconnect, device number 16 [ 355.789296][ T5763] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 358.394513][ T7842] loop1: detected capacity change from 0 to 128 [ 358.527677][ T7841] loop0: detected capacity change from 0 to 4096 [ 360.019405][ T7844] loop1: detected capacity change from 0 to 32768 [ 360.047708][ T7844] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.526 (7844) [ 360.136568][ T7859] loop0: detected capacity change from 0 to 1024 [ 361.233346][ T7859] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 361.245445][ T7859] JBD2: no valid journal superblock found [ 361.272102][ T7844] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 361.308660][ T7859] EXT4-fs (loop0): Could not load journal inode [ 361.359156][ T7844] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 361.434504][ T7844] BTRFS info (device loop1): using free space tree [ 361.499564][ T7862] loop2: detected capacity change from 0 to 32768 [ 361.514298][ T7862] BTRFS info (device loop2): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 361.524524][ T7862] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 361.533384][ T7862] BTRFS info (device loop2): enabling disk space caching [ 361.540484][ T7862] BTRFS info (device loop2): force clearing of disk cache [ 361.547615][ T7862] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 361.557126][ T7862] BTRFS info (device loop2): use zstd compression, level 3 [ 361.564381][ T7862] BTRFS info (device loop2): disk space caching is enabled [ 361.763651][ T7862] BTRFS info (device loop2): enabling ssd optimizations [ 361.774286][ T7862] BTRFS info (device loop2): auto enabling async discard [ 361.782629][ T7844] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 361.783280][ T7844] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 361.802232][ T7862] BTRFS info (device loop2): rebuilding free space tree [ 361.833856][ T7862] BTRFS info (device loop2): disabling free space tree [ 361.841193][ T7862] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 361.851244][ T7862] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 361.901375][ T7844] BTRFS error (device loop1): open_ctree failed: -12 [ 362.014908][ T7900] loop3: detected capacity change from 0 to 16 [ 362.096753][ T7900] erofs: (device loop3): mounted with root inode @ nid 36. [ 362.205602][ T7900] erofs: (device loop3): z_erofs_readahead: readahead error at folio 2 @ nid 89 [ 362.637157][ T7900] erofs: (device loop3): z_erofs_readahead: readahead error at folio 1 @ nid 89 [ 362.810383][ T7900] erofs: (device loop3): z_erofs_readahead: readahead error at folio 0 @ nid 89 [ 362.840142][ T7900] erofs: (device loop3): z_erofs_read_folio: read error -117 @ 0 of nid 89 [ 362.881225][ T28] audit: type=1800 audit(1771155767.023:17): pid=7900 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.531" name="file3" dev="loop3" ino=89 res=0 errno=0 [ 363.076754][ T5766] BTRFS info (device loop2): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 364.343808][ T7926] loop1: detected capacity change from 0 to 32768 [ 365.305118][ T7934] loop0: detected capacity change from 0 to 1024 [ 365.873825][ T7934] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 366.432956][ T7934] JBD2: no valid journal superblock found [ 366.460457][ T7934] EXT4-fs (loop0): Could not load journal inode [ 368.612228][ T7953] loop1: detected capacity change from 0 to 32768 [ 368.646498][ T7953] (syz.1.549,7953,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 368.730937][ T7953] (syz.1.549,7953,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 368.953423][ T7953] JBD2: Ignoring recovery information on journal [ 369.874824][ T7953] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 370.293593][ T7980] loop3: detected capacity change from 0 to 1024 [ 370.363420][ T7980] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 370.379394][ T7980] JBD2: no valid journal superblock found [ 370.413615][ T7980] EXT4-fs (loop3): Could not load journal inode [ 371.234280][ T5764] ocfs2: Unmounting device (7,1) on (node local) [ 371.266757][ T7989] loop0: detected capacity change from 0 to 256 [ 371.331104][ T7989] exfat: Deprecated parameter 'namecase' [ 371.389061][ T7993] loop2: detected capacity change from 0 to 16 [ 371.562538][ T7989] exfat: Deprecated parameter 'namecase' [ 371.571105][ T7993] erofs: (device loop2): mounted with root inode @ nid 36. [ 371.586509][ T7990] erofs: (device loop2): z_erofs_readahead: readahead error at folio 2 @ nid 89 [ 371.595595][ T7990] erofs: (device loop2): z_erofs_readahead: readahead error at folio 1 @ nid 89 [ 371.605020][ T7990] erofs: (device loop2): z_erofs_readahead: readahead error at folio 0 @ nid 89 [ 371.614153][ T7990] erofs: (device loop2): z_erofs_read_folio: read error -117 @ 0 of nid 89 [ 371.623287][ T28] audit: type=1800 audit(1771155775.803:18): pid=7990 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.554" name="file3" dev="loop2" ino=89 res=0 errno=0 [ 371.820053][ T7989] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 371.827150][ T7995] loop3: detected capacity change from 0 to 4096 [ 373.755059][ T8013] loop1: detected capacity change from 0 to 1024 [ 374.868801][ T8013] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 374.886328][ T8013] JBD2: no valid journal superblock found [ 374.903043][ T8013] EXT4-fs (loop1): Could not load journal inode [ 375.545750][ T8025] loop1: detected capacity change from 0 to 32768 [ 375.573396][ T8025] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.570 (8025) [ 375.590715][ T8025] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 375.601446][ T8025] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 375.610171][ T8025] BTRFS info (device loop1): setting nodatacow, compression disabled [ 375.618223][ T8025] BTRFS info (device loop1): enabling auto defrag [ 375.624688][ T8025] BTRFS info (device loop1): max_inline at 0 [ 375.630686][ T8025] BTRFS info (device loop1): using free space tree [ 375.788227][ T8025] BTRFS info (device loop1): auto enabling async discard [ 376.255709][ T8048] autofs4:pid:8048:autofs_fill_super: called with bogus options [ 378.837794][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.844279][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.381082][ T5764] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 379.849709][ T8066] loop3: detected capacity change from 0 to 1024 [ 380.282410][ T8066] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 380.296760][ T8066] JBD2: no valid journal superblock found [ 380.324936][ T8066] EXT4-fs (loop3): Could not load journal inode [ 382.278891][ T8073] netlink: 36 bytes leftover after parsing attributes in process `syz.3.579'. [ 385.915246][ T8088] loop2: detected capacity change from 0 to 2048 [ 385.998286][ T8088] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 386.531063][ T5766] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 386.795867][ T8099] loop1: detected capacity change from 0 to 16 [ 386.811974][ T8099] erofs: (device loop1): mounted with root inode @ nid 36. [ 386.821967][ T8099] erofs: (device loop1): z_erofs_readahead: readahead error at folio 2 @ nid 89 [ 386.831228][ T8099] erofs: (device loop1): z_erofs_readahead: readahead error at folio 1 @ nid 89 [ 386.840357][ T8099] erofs: (device loop1): z_erofs_readahead: readahead error at folio 0 @ nid 89 [ 386.849486][ T8099] erofs: (device loop1): z_erofs_read_folio: read error -117 @ 0 of nid 89 [ 386.858325][ T28] audit: type=1800 audit(1771155791.033:19): pid=8099 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.583" name="file3" dev="loop1" ino=89 res=0 errno=0 [ 389.324176][ T8111] loop2: detected capacity change from 0 to 256 [ 389.459395][ T8111] FAT-fs (loop2): Directory bread(block 64) failed [ 389.480218][ T8111] FAT-fs (loop2): Directory bread(block 65) failed [ 389.486939][ T8111] FAT-fs (loop2): Directory bread(block 66) failed [ 389.524838][ T8111] FAT-fs (loop2): Directory bread(block 67) failed [ 389.555629][ T8111] FAT-fs (loop2): Directory bread(block 68) failed [ 390.776648][ T8111] FAT-fs (loop2): Directory bread(block 69) failed [ 390.784585][ T8111] FAT-fs (loop2): Directory bread(block 70) failed [ 391.924591][ T8111] FAT-fs (loop2): Directory bread(block 71) failed [ 392.111218][ T8111] FAT-fs (loop2): Directory bread(block 72) failed [ 392.117851][ T8111] FAT-fs (loop2): Directory bread(block 73) failed [ 392.268063][ T8127] loop1: detected capacity change from 0 to 2048 [ 392.393323][ T8127] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 394.248885][ T5764] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 394.773174][ T8138] loop3: detected capacity change from 0 to 32768 [ 396.084873][ T8138] overlayfs: missing 'lowerdir' [ 396.206543][ T28] audit: type=1326 audit(1771155800.383:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8146 comm="syz.1.599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd191d9bf79 code=0x7ffc0000 [ 396.301987][ T28] audit: type=1326 audit(1771155800.433:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8146 comm="syz.1.599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd191d9bf79 code=0x7ffc0000 [ 396.410975][ T28] audit: type=1326 audit(1771155800.593:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8146 comm="syz.1.599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd191d9bf79 code=0x7ffc0000 [ 396.443052][ T28] audit: type=1326 audit(1771155800.593:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8146 comm="syz.1.599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd191d9bf79 code=0x7ffc0000 [ 396.468018][ T28] audit: type=1326 audit(1771155800.593:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8146 comm="syz.1.599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd191d9bf79 code=0x7ffc0000 [ 396.549121][ T28] audit: type=1326 audit(1771155800.723:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8146 comm="syz.1.599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fd191d9bf79 code=0x7ffc0000 [ 396.600659][ T28] audit: type=1326 audit(1771155800.723:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8146 comm="syz.1.599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fd191d9bce2 code=0x7ffc0000 [ 396.885847][ T28] audit: type=1326 audit(1771155801.063:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8146 comm="syz.1.599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fd191d5c84e code=0x7ffc0000 [ 396.935981][ T8156] netlink: 32 bytes leftover after parsing attributes in process `syz.2.601'. [ 401.514143][ T8172] loop3: detected capacity change from 0 to 2048 [ 401.643934][ T8172] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 402.665494][ T8183] loop2: detected capacity change from 0 to 1024 [ 402.970073][ T8183] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 403.021799][ T8183] JBD2: no valid journal superblock found [ 403.390806][ T5765] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 403.410455][ T8183] EXT4-fs (loop2): Could not load journal inode [ 403.823962][ T8191] loop3: detected capacity change from 0 to 8 [ 404.571167][ T8191] SQUASHFS error: zlib decompression failed, data probably corrupt [ 404.588792][ T8191] SQUASHFS error: Failed to read block 0x9b: -5 [ 404.595240][ T8191] SQUASHFS error: Unable to read metadata cache entry [99] [ 404.602673][ T8191] SQUASHFS error: Unable to read inode 0x127 [ 406.453712][ T8206] loop2: detected capacity change from 0 to 64 [ 406.735451][ T8209] netlink: 16 bytes leftover after parsing attributes in process `syz.2.613'. [ 406.745579][ T8209] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 407.633539][ T8215] loop1: detected capacity change from 0 to 2048 [ 407.677967][ T8215] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 407.817674][ T8211] loop2: detected capacity change from 0 to 8192 [ 407.911548][ T8211] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found [ 407.950744][ T8211] UDF-fs: Scanning with blocksize 512 failed [ 408.000451][ T8211] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found [ 408.007910][ T8211] UDF-fs: Scanning with blocksize 1024 failed [ 408.674590][ T8211] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found [ 408.688566][ T5764] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 408.751315][ T8211] UDF-fs: Scanning with blocksize 2048 failed [ 409.674337][ T8211] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 409.862390][ T8227] loop1: detected capacity change from 0 to 736 [ 412.468843][ T8246] loop1: detected capacity change from 0 to 2048 [ 412.763633][ T8249] netlink: 32 bytes leftover after parsing attributes in process `syz.0.620'. [ 413.514177][ T8246] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 414.646615][ T5764] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 415.782224][ T8251] loop2: detected capacity change from 0 to 1024 [ 415.823129][ T2996] hfsplus: b-tree write err: -5, ino 4 [ 422.098738][ T8310] loop2: detected capacity change from 0 to 16 [ 423.214201][ T8310] erofs: (device loop2): mounted with root inode @ nid 36. [ 423.227589][ T8307] erofs: (device loop2): z_erofs_readahead: readahead error at folio 2 @ nid 89 [ 423.236848][ T8307] erofs: (device loop2): z_erofs_readahead: readahead error at folio 1 @ nid 89 [ 423.245954][ T8307] erofs: (device loop2): z_erofs_readahead: readahead error at folio 0 @ nid 89 [ 423.255649][ T8307] erofs: (device loop2): z_erofs_read_folio: read error -117 @ 0 of nid 89 [ 423.279577][ T28] audit: type=1800 audit(1771155827.443:28): pid=8307 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.638" name="file3" dev="loop2" ino=89 res=0 errno=0 [ 430.514080][ T8338] syz.3.646 (8338): drop_caches: 2 [ 430.973497][ T8352] loop1: detected capacity change from 0 to 164 [ 431.082174][ T8352] iso9660: Corrupted directory entry in block 2 of inode 1792 [ 433.024371][ T8368] loop1: detected capacity change from 0 to 2048 [ 433.110311][ T8368] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 433.511868][ T5764] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 435.615265][ T8391] loop1: detected capacity change from 0 to 1024 [ 436.390133][ T8391] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 436.402155][ T8391] JBD2: no valid journal superblock found [ 436.437733][ T8391] EXT4-fs (loop1): Could not load journal inode [ 438.158626][ T8401] loop3: detected capacity change from 0 to 2048 [ 438.251550][ T8401] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 439.929379][ T5765] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 440.197568][ T8415] loop1: detected capacity change from 0 to 2048 [ 440.221160][ T8415] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 440.280441][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.287123][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.330286][ T8418] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 441.624558][ T8430] loop1: detected capacity change from 0 to 1024 [ 441.766552][ T8430] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 441.781007][ T8430] JBD2: no valid journal superblock found [ 441.803768][ T8430] EXT4-fs (loop1): Could not load journal inode [ 442.277360][ T8420] loop3: detected capacity change from 0 to 32768 [ 442.339688][ T8420] JBD2: Ignoring recovery information on journal [ 442.438852][ T8432] loop2: detected capacity change from 0 to 2048 [ 442.508976][ T8420] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 442.509398][ T8436] tmpfs: Bad value for 'mpol' [ 442.564337][ T8437] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 442.646166][ T28] audit: type=1800 audit(1771155846.823:29): pid=8432 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.675" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 442.730774][ T28] audit: type=1800 audit(1771155846.823:30): pid=8432 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.675" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 442.750769][ T8420] [ 442.753383][ T8420] ====================================================== [ 442.760397][ T8420] WARNING: possible circular locking dependency detected [ 442.767412][ T8420] syzkaller #0 Not tainted [ 442.771814][ T8420] ------------------------------------------------------ [ 442.778823][ T8420] syz.3.672/8420 is trying to acquire lock: [ 442.784718][ T8420] ffff88805957dbe0 (&oi->ip_alloc_sem){+.+.}-{3:3}, at: ocfs2_try_remove_refcount_tree+0xb7/0x340 [ 442.795389][ T8420] [ 442.795389][ T8420] but task is already holding lock: [ 442.802754][ T8420] ffff88805957dc78 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_try_remove_refcount_tree+0xa5/0x340 [ 442.813363][ T8420] [ 442.813363][ T8420] which lock already depends on the new lock. [ 442.813363][ T8420] [ 442.823754][ T8420] [ 442.823754][ T8420] the existing dependency chain (in reverse order) is: [ 442.832754][ T8420] [ 442.832754][ T8420] -> #3 (&oi->ip_xattr_sem){++++}-{3:3}: [ 442.840561][ T8420] down_read+0x46/0x2e0 [ 442.845231][ T8420] ocfs2_init_acl+0x30a/0x770 [ 442.850414][ T8420] ocfs2_mknod+0x140f/0x2300 [ 442.855610][ T8420] ocfs2_create+0x196/0x430 [ 442.860633][ T8420] path_openat+0x12a0/0x3230 [ 442.865735][ T8420] do_filp_open+0x1f5/0x430 [ 442.870760][ T8420] do_sys_openat2+0x134/0x1d0 [ 442.875955][ T8420] __x64_sys_openat+0x139/0x160 [ 442.881319][ T8420] do_syscall_64+0x55/0xa0 [ 442.886247][ T8420] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 442.892648][ T8420] [ 442.892648][ T8420] -> #2 (&journal->j_trans_barrier){.+.+}-{3:3}: [ 442.901152][ T8420] down_read+0x46/0x2e0 [ 442.905832][ T8420] ocfs2_start_trans+0x3a8/0x6f0 [ 442.911282][ T8420] ocfs2_modify_bh+0xe4/0x4c0 [ 442.916465][ T8420] ocfs2_local_read_info+0x1445/0x1800 [ 442.922439][ T8420] dquot_load_quota_sb+0x757/0xb80 [ 442.928058][ T8420] dquot_load_quota_inode+0x2dc/0x5d0 [ 442.933939][ T8420] ocfs2_enable_quotas+0x1c9/0x490 [ 442.939588][ T8420] ocfs2_fill_super+0x417d/0x5010 [ 442.945121][ T8420] mount_bdev+0x221/0x2d0 [ 442.949956][ T8420] legacy_get_tree+0xea/0x180 [ 442.955141][ T8420] vfs_get_tree+0x8c/0x280 [ 442.960059][ T8420] do_new_mount+0x24b/0xa40 [ 442.965064][ T8420] __se_sys_mount+0x2e7/0x3d0 [ 442.970247][ T8420] do_syscall_64+0x55/0xa0 [ 442.975178][ T8420] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 442.981600][ T8420] [ 442.981600][ T8420] -> #1 (sb_internal#4){.+.+}-{0:0}: [ 442.989060][ T8420] ocfs2_start_trans+0x2a9/0x6f0 [ 442.994502][ T8420] ocfs2_setattr+0xc72/0x1bc0 [ 442.999687][ T8420] notify_change+0xb0d/0xe10 [ 443.004783][ T8420] do_truncate+0x1b0/0x240 [ 443.009708][ T8420] do_sys_ftruncate+0x325/0x3d0 [ 443.015070][ T8420] do_syscall_64+0x55/0xa0 [ 443.019993][ T8420] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 443.026391][ T8420] [ 443.026391][ T8420] -> #0 (&oi->ip_alloc_sem){+.+.}-{3:3}: [ 443.034193][ T8420] __lock_acquire+0x2df1/0x7d40 [ 443.039554][ T8420] lock_acquire+0x19e/0x420 [ 443.044565][ T8420] down_write+0x97/0x200 [ 443.049315][ T8420] ocfs2_try_remove_refcount_tree+0xb7/0x340 [ 443.055803][ T8420] ocfs2_truncate_file+0xde5/0x1440 [ 443.061508][ T8420] ocfs2_setattr+0x158d/0x1bc0 [ 443.066774][ T8420] notify_change+0xb0d/0xe10 [ 443.071869][ T8420] do_truncate+0x1b0/0x240 [ 443.076792][ T8420] vfs_truncate+0x266/0x300 [ 443.081799][ T8420] do_sys_truncate+0xf6/0x1c0 [ 443.086978][ T8420] do_syscall_64+0x55/0xa0 [ 443.091903][ T8420] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 443.098300][ T8420] [ 443.098300][ T8420] other info that might help us debug this: [ 443.098300][ T8420] [ 443.108505][ T8420] Chain exists of: [ 443.108505][ T8420] &oi->ip_alloc_sem --> &journal->j_trans_barrier --> &oi->ip_xattr_sem [ 443.108505][ T8420] [ 443.122741][ T8420] Possible unsafe locking scenario: [ 443.122741][ T8420] [ 443.130167][ T8420] CPU0 CPU1 [ 443.135511][ T8420] ---- ---- [ 443.140855][ T8420] lock(&oi->ip_xattr_sem); [ 443.145427][ T8420] lock(&journal->j_trans_barrier); [ 443.153210][ T8420] lock(&oi->ip_xattr_sem); [ 443.160300][ T8420] lock(&oi->ip_alloc_sem); [ 443.164869][ T8420] [ 443.164869][ T8420] *** DEADLOCK *** [ 443.164869][ T8420] [ 443.172989][ T8420] 3 locks held by syz.3.672/8420: [ 443.177992][ T8420] #0: ffff888030a5c418 (sb_writers#26){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 443.187211][ T8420] #1: ffff88805957df58 (&sb->s_type->i_mutex_key#34){+.+.}-{3:3}, at: do_truncate+0x19c/0x240 [ 443.197549][ T8420] #2: ffff88805957dc78 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_try_remove_refcount_tree+0xa5/0x340 [ 443.208578][ T8420] [ 443.208578][ T8420] stack backtrace: [ 443.214462][ T8420] CPU: 1 PID: 8420 Comm: syz.3.672 Not tainted syzkaller #0 [ 443.221760][ T8420] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 443.231813][ T8420] Call Trace: [ 443.235084][ T8420] [ 443.237998][ T8420] dump_stack_lvl+0x18c/0x250 [ 443.242669][ T8420] ? load_image+0x400/0x400 [ 443.247157][ T8420] ? show_regs_print_info+0x20/0x20 [ 443.252345][ T8420] ? print_circular_bug+0x12b/0x1a0 [ 443.257526][ T8420] check_noncircular+0x2fc/0x400 [ 443.262449][ T8420] ? print_deadlock_bug+0x5d0/0x5d0 [ 443.267637][ T8420] ? lockdep_lock+0xf5/0x230 [ 443.272211][ T8420] ? lockdep_unlock+0x146/0x2e0 [ 443.277047][ T8420] ? _find_first_zero_bit+0xd3/0x100 [ 443.282321][ T8420] __lock_acquire+0x2df1/0x7d40 [ 443.287176][ T8420] ? verify_lock_unused+0x140/0x140 [ 443.292368][ T8420] lock_acquire+0x19e/0x420 [ 443.296856][ T8420] ? ocfs2_try_remove_refcount_tree+0xb7/0x340 [ 443.302999][ T8420] ? __might_sleep+0xe0/0xe0 [ 443.307575][ T8420] ? read_lock_is_recursive+0x20/0x20 [ 443.312933][ T8420] down_write+0x97/0x200 [ 443.317162][ T8420] ? ocfs2_try_remove_refcount_tree+0xb7/0x340 [ 443.323300][ T8420] ? down_read_killable+0x340/0x340 [ 443.328490][ T8420] ? ocfs2_truncate_file+0xd0b/0x1440 [ 443.335081][ T8420] ? __lock_acquire+0x7d40/0x7d40 [ 443.340106][ T8420] ocfs2_try_remove_refcount_tree+0xb7/0x340 [ 443.346093][ T8420] ? ocfs2_remove_refcount_tree+0xe50/0xe50 [ 443.351989][ T8420] ? up_write+0x1c3/0x410 [ 443.356315][ T8420] ocfs2_truncate_file+0xde5/0x1440 [ 443.361521][ T8420] ? ocfs2_simple_size_update+0x4a0/0x4a0 [ 443.367242][ T8420] ? do_raw_spin_unlock+0x121/0x230 [ 443.372445][ T8420] ? _raw_spin_unlock+0x28/0x40 [ 443.377295][ T8420] ? ocfs2_inode_lock_tracker+0x437/0x700 [ 443.383008][ T8420] ? ocfs2_inode_lock_atime+0x530/0x530 [ 443.388548][ T8420] ? ocfs2_rw_lock+0x138/0x250 [ 443.393306][ T8420] ? dquot_initialize+0x20/0x20 [ 443.398151][ T8420] ? ocfs2_create_new_inode_locks+0x690/0x690 [ 443.404207][ T8420] ? setattr_prepare+0x1e6/0xac0 [ 443.409134][ T8420] ? jbd2_journal_begin_ordered_truncate+0xbb/0x150 [ 443.415717][ T8420] ocfs2_setattr+0x158d/0x1bc0 [ 443.420478][ T8420] ? ocfs2_extend_allocation+0x1840/0x1840 [ 443.426277][ T8420] ? ktime_get_coarse_real_ts64+0x3a/0x120 [ 443.432071][ T8420] ? seqcount_lockdep_reader_access+0x191/0x1d0 [ 443.438302][ T8420] ? ktime_get_coarse_real_ts64+0x110/0x120 [ 443.444183][ T8420] ? current_time+0x195/0x280 [ 443.448845][ T8420] ? inode_set_ctime_current+0x2e0/0x2e0 [ 443.454466][ T8420] ? evm_inode_setattr+0x94/0x6a0 [ 443.459480][ T8420] ? bpf_lsm_inode_setattr+0x9/0x10 [ 443.464663][ T8420] ? try_break_deleg+0x79/0x120 [ 443.469500][ T8420] ? ocfs2_extend_allocation+0x1840/0x1840 [ 443.475297][ T8420] notify_change+0xb0d/0xe10 [ 443.479881][ T8420] do_truncate+0x1b0/0x240 [ 443.484292][ T8420] ? put_page_bootmem+0x2c0/0x2c0 [ 443.489307][ T8420] ? HAS_UNMAPPED_ID+0x11a/0x180 [ 443.494239][ T8420] ? bpf_lsm_path_truncate+0x9/0x10 [ 443.499425][ T8420] vfs_truncate+0x266/0x300 [ 443.503917][ T8420] do_sys_truncate+0xf6/0x1c0 [ 443.508579][ T8420] ? lock_chain_count+0x20/0x20 [ 443.513417][ T8420] ? break_lease+0xd0/0xd0 [ 443.517819][ T8420] ? lockdep_hardirqs_on+0x98/0x150 [ 443.523005][ T8420] do_syscall_64+0x55/0xa0 [ 443.527412][ T8420] ? clear_bhb_loop+0x40/0x90 [ 443.532078][ T8420] ? clear_bhb_loop+0x40/0x90 [ 443.536747][ T8420] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 443.542626][ T8420] RIP: 0033:0x7f34fd19bf79 [ 443.547036][ T8420] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 443.566632][ T8420] RSP: 002b:00007f34fdf94028 EFLAGS: 00000246 ORIG_RAX: 000000000000004c [ 443.575030][ T8420] RAX: ffffffffffffffda RBX: 00007f34fd415fa0 RCX: 00007f34fd19bf79 [ 443.582987][ T8420] RDX: 0000000000000000 RSI: 0000000000000401 RDI: 00002000000001c0 [ 443.590944][ T8420] RBP: 00007f34fd2327e0 R08: 0000000000000000 R09: 0000000000000000 [ 443.598907][ T8420] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 443.606865][ T8420] R13: 00007f34fd416038 R14: 00007f34fd415fa0 R15: 00007ffe39e79d68 [ 443.614828][ T8420] [ 444.168910][ T28] audit: type=1800 audit(1771155846.903:31): pid=8420 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.672" name="file1" dev="loop3" ino=17058 res=0 errno=0 [ 444.212884][ T8427] loop0: detected capacity change from 0 to 32768 [ 444.229296][ T8427] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.674 (8427) [ 444.243784][ T8427] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 444.254144][ T8437] NILFS (loop2): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 444.254942][ T8427] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 444.276498][ T8437] NILFS error (device loop2): nilfs_bmap_propagate: broken bmap (inode number=4) [ 444.286274][ T8437] Remounting filesystem read-only [ 444.292630][ T8427] BTRFS info (device loop0): using free space tree [ 444.293222][ T49] NILFS (loop2): discard dirty page: offset=0, ino=15 [ 444.324568][ T49] NILFS (loop2): discard dirty block: blocknr=22, size=1024 [ 444.332385][ T49] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 444.351180][ T49] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 444.360514][ T5765] ocfs2: Unmounting device (7,3) on (node local) [ 444.378191][ T49] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 444.421962][ T49] NILFS (loop2): discard dirty page: offset=0, ino=5 [ 444.432905][ T49] NILFS (loop2): discard dirty block: blocknr=41, size=1024 [ 444.463825][ T49] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 444.477351][ T8427] BTRFS error (device loop0): open_ctree failed: -4 [ 444.511308][ T49] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 444.542121][ T49] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 444.570178][ T49] NILFS (loop2): discard dirty page: offset=0, ino=3 [ 444.576893][ T49] NILFS (loop2): discard dirty block: blocknr=42, size=1024 [ 444.600262][ T49] NILFS (loop2): discard dirty block: blocknr=43, size=1024 [ 444.607582][ T49] NILFS (loop2): discard dirty block: blocknr=44, size=1024 [ 444.629891][ T49] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 444.638785][ T49] NILFS (loop2): discard dirty page: offset=229376, ino=3 [ 444.660019][ T49] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 444.668901][ T49] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 444.699921][ T49] NILFS (loop2): discard dirty block: blocknr=50, size=1024 [ 444.707253][ T49] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 444.730753][ T49] NILFS (loop2): discard dirty page: offset=0, ino=4 [ 444.737480][ T49] NILFS (loop2): discard dirty block: blocknr=40, size=1024 [ 444.759962][ T49] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 444.768938][ T49] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 444.800084][ T49] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 444.809198][ T5766] NILFS (loop2): disposed unprocessed dirty file(s) when stopping log writer [ 444.820453][ T5766] NILFS (loop2): discard dirty page: offset=0, ino=6 [ 444.827154][ T5766] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 444.850103][ T5766] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 444.870353][ T5766] NILFS (loop2): discard dirty block: blocknr=37, size=1024 [ 444.877689][ T5766] NILFS (loop2): discard dirty block: blocknr=38, size=1024