last executing test programs: 31.571409887s ago: executing program 2 (id=157): socket$inet_tcp(0x2, 0x1, 0x0) socket$l2tp6(0xa, 0x2, 0x73) r0 = syz_io_uring_setup(0xbdc, &(0x7f0000001400)={0x0, 0xec25, 0x400, 0x1, 0xd4}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000380)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r0, 0x847ba, 0x0, 0xe, 0x0, 0x0) 29.950469478s ago: executing program 2 (id=163): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x7}, 0x48) r1 = socket$kcm(0x29, 0x2, 0x0) r2 = socket$inet6(0xa, 0x803, 0x6) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000180)={r2, r0}) sendmmsg$inet(r1, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000440)='{', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000640)='&', 0x1}], 0x1}}], 0x2, 0x0) 29.274300162s ago: executing program 2 (id=166): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ff8}]}) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000001040)=[{{&(0x7f0000000180)={0xa, 0x4e23, 0x0, @private1={0xfc, 0x1, '\x00', 0x3}, 0xfff}, 0x1c, &(0x7f0000001740)=[{&(0x7f00000002c0)='`', 0x1}], 0x1}}, {{&(0x7f0000000300)={0xa, 0x4e23, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x5}, 0x1c, &(0x7f0000000f80)=[{&(0x7f0000000580)='q', 0x1}], 0x1}}], 0x2, 0x24008041) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000001540)=@assoc_value={r2, 0x2}, 0x8) 27.356092878s ago: executing program 2 (id=170): syz_mount_image$udf(&(0x7f0000000c40), &(0x7f0000000340)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='noadinicb,nostrict,mode=00000000000000000000004,uid=forget,noadinicb,umask=00000000000000040002000,lastblock=00000000000000000013,undelete,partition=00000000000000000005,\x00'], 0x43, 0xc11, &(0x7f0000000d00)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0) mount$bind(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc11, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x84000, 0x0) 26.639622039s ago: executing program 2 (id=172): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81f782db44b9040a1d08030e000000e8fea4a1180015000600142603600e1208000f1000810401a80016000a0001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x4}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x74}, 0x1, 0x0, 0x0, 0x40000104}, 0x4000841) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0, 0x0, 0x0, 0x5c8}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) 25.804222765s ago: executing program 2 (id=174): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) openat$dir(0xffffffffffffff9c, 0x0, 0xea, 0x0) socket$caif_seqpacket(0x25, 0x5, 0x5) prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000480)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000240)={r1, 0x2, r0}) 25.235047719s ago: executing program 32 (id=174): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) openat$dir(0xffffffffffffff9c, 0x0, 0xea, 0x0) socket$caif_seqpacket(0x25, 0x5, 0x5) prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000480)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000240)={r1, 0x2, r0}) 7.640898977s ago: executing program 0 (id=292): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x1c, r2, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}]}, 0x1c}}, 0x0) write$nci(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="400d0101"], 0x4) 7.369508305s ago: executing program 5 (id=296): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000004c0)='./file0\x00', 0x3000046, &(0x7f0000000140), 0x1, 0x558, &(0x7f0000001600)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x0) sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, 0x0, 0x24008890) unlinkat(0xffffffffffffff9c, &(0x7f0000000c40)='./file1\x00', 0x0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r0, 0x4008af23, 0x0) pwrite64(r0, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) 7.363806824s ago: executing program 6 (id=297): ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000000)={0x7, 0x3ff, 0x9, 0x1a, 0x602, 0x2}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) 7.168046689s ago: executing program 6 (id=299): writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000000)="8724", 0x2}], 0x1) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r0, 0x4010744d, &(0x7f0000000180)) 6.856337933s ago: executing program 6 (id=302): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e20, 0xeef, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x5}}, 0x0, 0x0, 0x7, 0x0, "7422fa1e294dedfcb21f3bbd9676a2c501a89f524d424607e5bd4f82822beb8b585b5d6290893fe97dd3980a04a3d1935bb4f920ff3056dfc0856a99747168d7a4ad5c0654d81873c463e352dbed412a"}, 0xd8) listen(r0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000012c0)={@in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}, 0x0, 0x0, 0x12, 0x0, "0c9e8100000001860b479037073d223b3c1b324debec40e57a050000007eb48821996aff367154e746be4d76062e2700c425a7519cc275d04e6205abd307a0c4fa381300"}, 0xd8) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1) 6.780148773s ago: executing program 5 (id=303): syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x101c08a, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x6, 0x2c1, &(0x7f00000005c0)="$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") quotactl$Q_GETQUOTA(0xffffffff80000702, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x2}, 0x94) r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x101080) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r0, 0x80dc5521, 0xfffffffffffffffe) 6.619545655s ago: executing program 0 (id=305): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r0, 0x0, 0x3}, 0x18) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), r1) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000540)={0x48, r3, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x3}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}]}, 0x48}, 0x1, 0x0, 0x0, 0x48050}, 0x40) 6.428979333s ago: executing program 6 (id=307): syz_mount_image$minix(&(0x7f00000000c0), &(0x7f0000000040)='./file2\x00', 0x1200808, &(0x7f0000000440)=ANY=[@ANYRES64=0x0, @ANYRES64, @ANYRES64, @ANYRESOCT, @ANYRES8, @ANYRES16], 0x1, 0x1e7, &(0x7f0000000640)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000380)='./bus\x00', 0x0, 0x5800, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x2, 0xf4a, 0x0, 0x0, 0x15, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1000000000000000edf1139c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a00400", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204]}) syz_mount_image$fuse(0x0, &(0x7f0000000400)='./file4\x00', 0x1018000, 0x0, 0x1, 0x0, 0x0) 6.315942388s ago: executing program 5 (id=308): sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[@ANYBLOB="24000000020205000000000000000000020000026f8bc0c66e657462696f"], 0x24}, 0x1, 0x0, 0x0, 0x2000c040}, 0x4000) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000000c0)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="00000100000005"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000b80)={0x84, &(0x7f00000006c0)={0x0, 0x7, 0x2, "2692"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000480)=ANY=[@ANYBLOB="001d7d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 6.251732821s ago: executing program 0 (id=309): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f0000000180)={[{@noflush_merge}, {@adaptive_mode}, {@block_mode}, {@alloc_mode_reuse}, {@inline_xattr}, {@disable_roll_forward}, {@discard}, {@nouser_xattr}, {@jqfmt_vfsv1}, {}, {@fsync_mode_strict}, {@age_extent_cache}, {@nocheckpoint_merge}, {@resuid}]}, 0x1, 0x552b, &(0x7f0000005a40)="$eJzs3M2LG2UYAPAn2W6/rYt48NaBIuxCE5rtB3qr2uIHtpSqB0+aTdKQNsksmzRde1HBo3jw7D8hCp48in+CB8/exIPiTahk3ol2q0Jx000/fj+YPDPvvHnyvGEJeWaWBPDEWsl+/7USx+JQRCxFxNGIYr9SboXzKTwXEccjonrXVinH/xrYHxGHI+LYNHnKWSlPfX5ycuLsL2/89u0PB/Yd+fKbHxe3amDRno+IwWbav1UpPm2qs3PXy/HmpFfEwZlJGdOJwY3yOE/xVmdjUMTmbF6ziKe7aX6+eXM0jdf6zdY0dnvXivHNYbeIo0l3lqd4wvXmVnHc7mwUsTfKi9i9neravp0+226PxilPu8z3QZE+xuNZTOOd7U5az+aNIraG43I85c3bne1pnJSxfLlo5f12UcfGbt7ph9ubveHN7WzS2Rr18mF2tt54od44V2ts5e3OuHOm1hy0z53JVrv96bTauNMcnO/mebffqbfywVq22m21ao1Gtnqhs9FrDrNGo366fqp2dq3cO5m9evmdrN/OVqfx5d7w5rjXH2XX8q0sPWMtW6+ffnEtO9HI3rp0Jbty9eLFS1fefu/Cu5dfuvT6K+Wkf5SVra6fWl+vNU7V1htrj+L6q/G/1v9JWXS2+sX3aW/X64ddSV9U7yQfLroagEfCffX/Jf0/MC87+v9Binlqw3fZ/29djXjw/X/o/+dC/7+A9X/88KwfduXeL6oAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwxflr+6rViZyUdHynHnyqHnimPKxFRjYg7/2Ip9u/IuVTmWf6P+cv31PBdJYoM09c4UG6HI+J8uf3x9IN+FwAAAODx9fVHxz9L3Xp6WFl0QeyldNGmevT9OeWrRMTyys9zyladPjw7p2TF3/e+2J5TtuIC1sE5JUuX3PbNK9t9WdoRDt4VKilU97QcAABgT+zsBPa2CwEAAGAvfbroAliMSsxuZc7uBRf/ef/3DcFDO44AAACAR1Bl0QUAAAAAD1zR//v9PwAAAHi8pd//AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIA/2bmf28SBKA7AzwYv7D8tWu19W9kblLEl7HGPEQWkCQrIgbSQBqiB3FJCBBEeh0DEIZLHthJ9n+RMxjI/3iA4zIw0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAECX7qv14vbq93XbnN2+nTyjAQAAAC7ZVutF/c8s9b829783t342/SIiyoi4NHcfxaezzFGTU708f3P6fPWqhruIOuHwHpPm+hIRf5rr8UfXnwIAAAB8XJvlap5m6+nPbOiC6FNatCm//c2UV0RENXvIlFYe8n5lCqu/3+P4nymtXsCaZgpLS27jXGlvUv/cj6t205OmSE158WXHIrONHQAA6NHorOl3FgIAAECf/g1dAMMo4nkr87gVOElNs733+awHAAAAvEPF0AUAAAAAnavn/z2d/7d3/h8AAAAMI53/BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQJe21XqxWa7mbXN2+3byjAYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAntifdxQIgTAIg73rO5O5/2GlQVNTkyoQPv7GYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgze/+8n9iapxJ5l4bS88jydqpsXVq7J0bR38YX78GAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgYn/uTiAEgiAM9v3t6Zts/sFKi8YgQhUIHzOMsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMATvc4v7ys+jS3Jt9PGr+OZZHTV+HfVWHrQWHswj1+Oe18EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAzs79vMZRxQEAfzOzs7VVcY2yh4goeNCL3W5ra2/iQQke/BOEkG5r7NYfbQ62FDEXb5JzL6JHEUGJt/4PPbfQS731sIcKnpU3O5OdJgFXpTOb5POBN++7wzDv+14g5DtvsgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQDR5dxZn8dCbxml57u6jm2uxv7erj25v3V+OLcZJk0kfDC/XPyT99hIBAADg6Miq+j6E8CDfXol92ivq/7y6Jtb83z87jat6fnfdX/VV7R/bb78+fHFnoN50nHjTi+vj0am9qXSe3CwX23P/eEWnWPni2UtW/EDSDzZfmOTFeibf3rnzXrcIjzWRLQDwX5ys+jKo/h6K/bDNxAA4Mjq1wruq/7NeuzkBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANGGyGZ6u4iSEsNyZxdG9RzfX9utvb91frtq5W7e2wteze8Zb5CGEi+vj0alGZ7PYrl2/cXl1PB5dbT54JYTQ1ujvlNO//NEcF4fQyvoc9CAt17j1fKpEFmNZDkrQ0i8kAAAOrbxssa5/kG+vxHPJUgh//fB4/f96LQ5z1v8PPz53tz5Wvf4fNjbDxTfYuPL54Nr1G2+uX1m9NLo0+vSt08O3h2fOnz17flA8Kxl4YgIAAMD/0y1bvf5Pl/bu/5+oxWHO+v+L74Zf1cfK1P/7mm36tZ0JAADA0fb8q3/+kexzPul2w5erGxtXh9PjzufT02MLqf5rx8pWr/+zpbazAgAAAJow2Uwe2/+/UIvDnPv/z/z40s/1e2YhhOPl/v/Jtc/GF5qbzkJr4t+J254jAAAA7Tpetvr+f168/5/uvPKQhhDeeG0al18DOFf9n73/zU/1serv/59pbooLKe1P16Po+yF0+m1nBAAAwGH2VNlisf97vr3yyS8nPux6/x8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgaX8HAAD//6zHQEI=") r0 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) ftruncate(r0, 0x2007ffb) sendfile(r0, r0, 0x0, 0x1000000201005) r1 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) fsync(r1) 5.797274696s ago: executing program 6 (id=312): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x2, 0x28, 0x65, 0x0, 0xf, 0x6, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast}, {{0x4e21, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xffff}}}}}}, 0x0) 5.594203303s ago: executing program 4 (id=314): r0 = syz_open_dev$vim2m(&(0x7f0000000140), 0x3ff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000000)=0x1) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000200)=@mmap={0x1, 0x1, 0x4, 0x1, 0x6, {0x77359400}, {0x1, 0x0, 0x5, 0x9, 0x64, 0xe, "7cf93be8"}, 0xfffffff7, 0x1, {}, 0x2}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 5.348238539s ago: executing program 6 (id=316): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000a00)=ANY=[@ANYBLOB="120100007856bb40da0b53813de20102030109021200010000000009040000000206"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000440)={0x34, &(0x7f0000000140)={0x0, 0x0, 0x4, 'v\x00-p'}, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000380)='dctcp', 0x5) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) 4.864719403s ago: executing program 33 (id=316): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000a00)=ANY=[@ANYBLOB="120100007856bb40da0b53813de20102030109021200010000000009040000000206"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000440)={0x34, &(0x7f0000000140)={0x0, 0x0, 0x4, 'v\x00-p'}, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000380)='dctcp', 0x5) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) 4.847216736s ago: executing program 4 (id=319): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, 0x0) 4.59097961s ago: executing program 4 (id=320): r0 = gettid() timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r1, 0xfffffffd) accept(r1, 0x0, 0x0) 3.664668393s ago: executing program 1 (id=322): memfd_create(&(0x7f0000000000)='\xff\x00l\x1e\xa0,\xc1\x8d\\Rxt\'\xb6\xbf\xc8*\n\xaf\x1b\xec\xfd\xbbY\x99\xb3\x06c\xd6\xf6\xb0\xcd=\xf3\x03`\x93\xff\x05e\xaa$\x00\xeaw\xd9\x10\x0f\x1d\x888\x8cS\x12?R\x99\xda7\xce)\x8f\xcc\x87\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xd32J\xd7\x9f\xea:=\xcc\x17(|L\xda\xc3\x1ca\xe8s\xb6\xebw\xc7\xabS\xd7pJ\xd2\xa1\xcf\xae\x1f2\x9f\x98\xa80\r\x85\xb4\x86\xbc\xd0\xea\xbf\xb1Z\xb7e$\xcf<\ra\x9b\xa5\xdc\v\x1e\xfd\xc7\x91\xf22\xcf\x96\x99\xc1\xbb\xa1j\xe5\xa8\x7f\a\xa9\xa7G\xad\xa3\x8b\xf1\xdb\\]R\x8cf\xac1\xd7V\xaf\xb5\x8e\x10\x95\x9f=2\xd0-\xe1K:\xc3b\x89\x15OS\xa5\x98Ky\x12\xe7Qt#\xeb\x99\a\x10\x1c\xb3N\x85\xeb\x80\x05\x82_\x15\xdc\xbc\xf93\xdd\xf5g\x98\xd4\x8az\xe4`\xa5\x00\x00\x00\x00\xcd\x13\xfc+\xac\xe5\x8bI\f\xd6\x89\xc7HY\xcf\x00O\x88\xe6\x8b\x8bF/\x82u\xffCnG\x02\x82\xfc\xe9Od\x92\x06\xdeg@y\xa6=4\xb1}\xa8Yr\xad9\xb9b)\xec}\x87=\x91:IV\xab\xdf\xa2\xba+6D\x1fuf\xdeJYw$L\xa1\x83NH\xe3\xf2\x91\x8cW\xb7\b\x04\x12\x8b\x8bV\x19\xf1\r\xcb\x94\xa3\xf4\xe4\x97$\x99c\rG\xd7#\xe2\xfd\x80\xadR\x83\xdc\xb8d\x15|\xac\xb8g$\x0f@\xca3\x9f\xb1\xea\xc6vQ\x1b\xdb#\xa3\"\x9f\x9e\xd8\xba\x13d\x9bx\x9a\xbf\xee\xf2kQ\xe0\xc4/~7\xcd\xd1\x06\xe5\x17\x9b\bW|\xbc\x86D\x05\xaf<\xdfy,I2f\xa7G\xe3Qp<\'6 x\n\x94f\xf8\xa2\xea\xf4\xa5\x9eY\xf80C\x91\x7f\x16u\x8c(Xl\x90\xd2\x9f\xa9\xb9kJy[\x93\xfe{\xe5\x1a\xe9\xb7T\x19;\xb9\t\xe7\x0ei\xfaZ\xfbS:\x9b\xc1r\xcbM.\xf8\xb8wR\xb3p~b\xcb\v1-\a-\x8a#\xaa1\xa9\x9a\x88\a\xc5\xb9*\xd3?\xac\n\x9c\xcd\xe2\xc9\xbd\xeb\xb3\xf65\xbdaP\t\xd6\x06\x1c\xeeNg\x92>\x92>\xaf\b3\x05\xfdM\xd2F\v\xbd\xeb\x83 \x9d\x90S\x11w\xefg\\\xca\xe2\xfc~w\xbe\xefh#\x96\xa5h\xec\xbfr\xc8Bi\x90\"(\xf2\xc6\xcc\xfbX\x14{\x9e5\x87\x91\xe2\x9b\xd4\xc6\xc2whk+\x0f\x82\xca\xc1@\xcb~P\xe4\x18\xf9E\'\xab\xc7z\xd7\x05V{\xa1X\xa3\x10\x13.]tlz\x12\xde\xf2\xa43\xee#\x92J~\xda \x9b\xc4\xc0V\xb3\x9dCO\x1fu\x1c4\x1d\v}\x1b\xe5>w\xfbsm\xa3\fI|\x96-p\x86\xd3O\xfa\x9a\x8f\xb2\x8e\x88qGEG', 0x2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'ip6gretap0\x00'}) r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="e0000002ac1414aa0000000003"], 0x1c) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x4, 0x2, 0x0, @private=0xa010101, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x2, 0x0, 0xbf202135}}}}}, 0x0) 3.589074312s ago: executing program 5 (id=323): iopl(0x3) r0 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x0, &(0x7f0000000240)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) mq_timedreceive(r2, &(0x7f0000004600)=""/102381, 0xfffffceb, 0x0, 0x0) 3.134094818s ago: executing program 0 (id=324): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00001b1000/0x4000)=nil, 0x400000, 0x2, 0x2}) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 3.133829222s ago: executing program 4 (id=325): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000002080)='./file0\x00', 0x0, &(0x7f00000020c0)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r1, 0x8004e500, &(0x7f0000000280)=r2) close_range(r0, 0xffffffffffffffff, 0x0) 2.841454186s ago: executing program 4 (id=326): r0 = syz_io_uring_setup(0x8dd, &(0x7f0000000440)={0x0, 0x1b7, 0x80, 0x8, 0x178}, &(0x7f00000000c0)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2b, 0x0, 0x0, 0x204}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x5b20, 0x0, 0x0, 0x0, 0x0) 2.50407041s ago: executing program 1 (id=327): r0 = getpid() syz_open_procfs$userns(r0, 0x0) r1 = syz_pidfd_open(r0, 0x0) r2 = pidfd_getfd(r1, r1, 0x0) setns(r2, 0x66020000) umount2(&(0x7f0000000040)='.\x00', 0x2) 2.497333561s ago: executing program 5 (id=328): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ff9}]}) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) mlock2(&(0x7f0000781000/0x4000)=nil, 0x4000, 0x1) 2.01254394s ago: executing program 1 (id=329): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) timer_create(0x4, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, 0x0) 1.985252585s ago: executing program 5 (id=330): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x5}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) 1.729151067s ago: executing program 4 (id=331): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x1010000, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x1, 0x6210, &(0x7f0000012d40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x143041, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) write$uinput_user_dev(r0, &(0x7f00000007c0)={'syz1\x00', {0xf4, 0x4, 0x4, 0xa5}, 0x4, [0x800, 0xfffffffe, 0x2, 0x400, 0x24, 0x5c, 0xfffff826, 0x8, 0x1, 0x4613, 0x8, 0xe, 0x2, 0x2, 0x9, 0x4, 0xfffffff7, 0x1, 0x280000, 0x9, 0x8000, 0x7ad, 0x9, 0x6, 0x3, 0x6, 0xfffffff8, 0x5, 0x56, 0x7, 0x4, 0x3ff, 0x0, 0x0, 0x8, 0x3, 0x1, 0x5, 0x9, 0x4000, 0x2, 0x1, 0xd8, 0x0, 0x7fff, 0x8, 0xfffffffd, 0x10001, 0x4, 0x4, 0xf33, 0x81, 0x2, 0x7, 0x2, 0x8, 0x6, 0x3, 0x3, 0x0, 0x200, 0xfff, 0x49fa6641], [0x5, 0x5, 0x2, 0xc4f, 0x5, 0x9, 0x5, 0x6, 0xffffffff, 0x9, 0x8, 0x7f, 0x5, 0x1, 0x3, 0x6, 0x6, 0x5, 0x3, 0xe5c, 0x6, 0x3, 0x8ee, 0x4, 0x8, 0x1, 0x48, 0x0, 0x5, 0x2, 0xe, 0x7, 0x9, 0x0, 0x7f, 0x468e, 0xe0f, 0x8, 0x7, 0x2, 0x2, 0x3ff, 0x80000000, 0x400, 0x1, 0x3, 0x7, 0xfffffff9, 0x8, 0x1000, 0x2, 0x4, 0x7, 0x8, 0x7fffffff, 0x4, 0x10, 0x0, 0x6, 0xbae, 0x2, 0xd03, 0x7, 0x200], [0x4, 0x0, 0x4, 0xa, 0x5, 0x8, 0xd, 0x6, 0xc, 0xf6d9, 0x40, 0x9, 0x1, 0x8, 0x1, 0x9, 0xfffffffb, 0x5, 0xfff, 0x6, 0x2, 0x6, 0x0, 0x0, 0xc5, 0x9, 0x10000, 0x200, 0x80000000, 0x9, 0xfff, 0xffff8000, 0x9, 0xb6f8, 0x4, 0x6, 0x800, 0xfffff001, 0x1, 0x3, 0x0, 0x8000, 0x2, 0x400, 0xfffff1fc, 0x10001, 0x10000, 0x2, 0x4, 0xd, 0x2, 0x5, 0xd4, 0x4, 0x8, 0x4, 0x88, 0x42f, 0x7, 0x2f95, 0x1, 0x5, 0xfffffff4, 0x1000], [0x4, 0x9, 0x7, 0x0, 0x81, 0xe, 0x81, 0x90000000, 0x3, 0x5, 0x2400000, 0x6800000, 0x18000000, 0x7, 0x432, 0x1899, 0x4, 0x2, 0x3, 0xd88, 0x4, 0xf9, 0x9, 0x7a000000, 0x9, 0x9, 0x7, 0x0, 0x7, 0x7, 0x8, 0x1, 0xe, 0x3ff, 0xfffffff0, 0x4, 0x0, 0x2e0000, 0x9, 0x6, 0x8, 0x2, 0x7ff, 0x3, 0xfffffff9, 0x7, 0xa86f, 0x5, 0x483, 0x6, 0xa41d, 0x31f9, 0x7, 0xe, 0x8, 0x8, 0x1, 0x1, 0xa, 0x4, 0xb3, 0x1, 0x9, 0x1]}, 0x45c) 1.710040025s ago: executing program 1 (id=333): r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000001140)={{0x12, 0x1, 0x0, 0xbd, 0xf7, 0x13, 0x8, 0x2770, 0x930c, 0x8d6a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2a, 0xc5, 0x98}}]}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 1.697839933s ago: executing program 3 (id=334): syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x101c08a, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x6, 0x2c1, &(0x7f00000005c0)="$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") quotactl$Q_GETQUOTA(0xffffffff80000702, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x2}, 0x94) r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x101080) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r0, 0x80dc5521, 0xfffffffffffffffe) 1.254583283s ago: executing program 3 (id=335): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(gcm(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d374c90c200", 0x24) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg$qrtr(r1, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000700)=""/192, 0xc0}], 0x1, 0x0, 0x0, 0x10000}, 0x38, 0x2) 919.748177ms ago: executing program 1 (id=336): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000850000002300000095"], 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="ff000000000000000708400009"], 0x50) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890b, &(0x7f0000000000)) r1 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r1, &(0x7f0000002c80)={&(0x7f0000000180)={0x2, 0x4e22, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000002bc0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x41}, @remote}}}], 0x20}, 0x20000004) 872.276869ms ago: executing program 3 (id=337): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0a00000004000000dd0000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c250000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0x3, 0x0, 0x0}, 0x94) 684.819272ms ago: executing program 3 (id=338): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x15) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00', {0x0, 0x10, 0x2}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x20, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x296, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x5f1], [0x0, 0x0, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8000081, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x400, 0x0, 0x200, 0x0, 0x2, 0x0, 0x0, 0xeae2, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x80, 0xfffffffd, 0x0, 0x8, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xffff], [0x4, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0xfffffffd, 0xffffffff, 0x0, 0x0, 0x9fa, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x6, 0x0, 0x0, 0xbda6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfff, 0x71f, 0x0, 0x0, 0x0, 0x0, 0x8], [0x40000000, 0x0, 0x74e2, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x40, 0x0, 0x0, 0xbd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x79, 0x0, 0x0, 0x101, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcaa, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x75, 0x3, 0x0, 0x0, 0x0, 0x4]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) 388.817873ms ago: executing program 0 (id=339): r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x141101) r1 = dup(r0) r2 = syz_io_uring_setup(0x235, &(0x7f0000000500)={0x0, 0x4533, 0x10100, 0x0, 0x24c, 0x0, r1}, &(0x7f00000001c0)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x201}}) io_uring_enter(r2, 0x234f, 0xb1e6, 0x1, 0x0, 0x0) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000140)="be", 0x1}], 0x1) 388.222961ms ago: executing program 1 (id=340): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-aes-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f00000021c0)=[{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000100)="a92e81d0991808e33c2330164cf023df", 0x10}, {&(0x7f0000000140)="47db71b2791cc73adff20f2c45ab3cd3e2cf090ae141f3", 0x17}, {&(0x7f0000001040)="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", 0xfda}], 0x3, 0x0, 0x0, 0x880}], 0x1, 0x80001) recvmmsg(r1, &(0x7f0000000c00)=[{{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000200)=""/23, 0x54000}], 0x1}, 0x10000}], 0x1, 0x102, 0x0) 387.478709ms ago: executing program 3 (id=341): ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000000)={0x400, 0x802, 0xff, 0x15, 0x402, 0x1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) 216.813639ms ago: executing program 3 (id=342): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000002c40), 0x80100, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000280)={'veth1_to_bridge\x00', 0x400}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000340)={'bridge_slave_1\x00', 0x200}) 0s ago: executing program 0 (id=343): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-aes-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x20000010}], 0x1, 0x40408c0) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.28' (ED25519) to the list of known hosts. [ 94.104364][ T5813] cgroup: Unknown subsys name 'net' [ 94.214323][ T5813] cgroup: Unknown subsys name 'cpuset' [ 94.223879][ T5813] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 95.916851][ T5813] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 100.538533][ T5844] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 100.546734][ T5844] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 100.546949][ T5842] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 100.554298][ T5844] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 100.565202][ T5843] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 100.568582][ T5844] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 100.580401][ T5842] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 100.582667][ T5845] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 100.596814][ T5842] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 100.597077][ T5845] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 100.613432][ T5844] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 100.620686][ T5842] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 100.621369][ T5844] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 100.634989][ T5845] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 100.642043][ T5847] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 100.649908][ T5842] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 100.650975][ T5844] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 100.659699][ T5842] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 100.670582][ T5844] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 100.682902][ T5843] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 100.690334][ T5842] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 100.691979][ T5844] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 100.706066][ T5843] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 100.709938][ T5841] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 100.723594][ T5843] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 100.723696][ T5842] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 100.723964][ T5844] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 100.747090][ T5842] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 100.747440][ T5841] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 100.755978][ T5842] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 101.402842][ T975] cfg80211: failed to load regulatory.db [ 101.723579][ T5829] chnl_net:caif_netlink_parms(): no params data found [ 101.739383][ T5824] chnl_net:caif_netlink_parms(): no params data found [ 101.826582][ T5825] chnl_net:caif_netlink_parms(): no params data found [ 101.840445][ T5827] chnl_net:caif_netlink_parms(): no params data found [ 102.046151][ T5826] chnl_net:caif_netlink_parms(): no params data found [ 102.127592][ T5824] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.135266][ T5824] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.142872][ T5824] bridge_slave_0: entered allmulticast mode [ 102.150913][ T5824] bridge_slave_0: entered promiscuous mode [ 102.217650][ T5824] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.226558][ T5824] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.234315][ T5824] bridge_slave_1: entered allmulticast mode [ 102.242094][ T5824] bridge_slave_1: entered promiscuous mode [ 102.355854][ T5828] chnl_net:caif_netlink_parms(): no params data found [ 102.374847][ T5825] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.382464][ T5825] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.389702][ T5825] bridge_slave_0: entered allmulticast mode [ 102.397297][ T5825] bridge_slave_0: entered promiscuous mode [ 102.420788][ T5829] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.427925][ T5829] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.435478][ T5829] bridge_slave_0: entered allmulticast mode [ 102.443434][ T5829] bridge_slave_0: entered promiscuous mode [ 102.480031][ T5825] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.487218][ T5825] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.494716][ T5825] bridge_slave_1: entered allmulticast mode [ 102.503010][ T5825] bridge_slave_1: entered promiscuous mode [ 102.513150][ T5824] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 102.524069][ T5829] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.531528][ T5829] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.538727][ T5829] bridge_slave_1: entered allmulticast mode [ 102.546446][ T5829] bridge_slave_1: entered promiscuous mode [ 102.569147][ T5827] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.576713][ T5827] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.584404][ T5827] bridge_slave_0: entered allmulticast mode [ 102.592187][ T5827] bridge_slave_0: entered promiscuous mode [ 102.658366][ T5824] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.696579][ T5827] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.703785][ T5827] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.711332][ T5827] bridge_slave_1: entered allmulticast mode [ 102.718818][ T5827] bridge_slave_1: entered promiscuous mode [ 102.760376][ T5844] Bluetooth: hci4: command tx timeout [ 102.760380][ T5842] Bluetooth: hci3: command tx timeout [ 102.763290][ T5826] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.778571][ T5826] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.785891][ T5826] bridge_slave_0: entered allmulticast mode [ 102.794280][ T5826] bridge_slave_0: entered promiscuous mode [ 102.834672][ T5829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 102.841279][ T5844] Bluetooth: hci5: command tx timeout [ 102.847961][ T5829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.849397][ T5844] Bluetooth: hci0: command tx timeout [ 102.863941][ T5842] Bluetooth: hci2: command tx timeout [ 102.863964][ T5143] Bluetooth: hci1: command tx timeout [ 102.903303][ T5826] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.910917][ T5826] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.918660][ T5826] bridge_slave_1: entered allmulticast mode [ 102.927296][ T5826] bridge_slave_1: entered promiscuous mode [ 102.937039][ T5825] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 102.948648][ T5824] team0: Port device team_slave_0 added [ 102.972595][ T5827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 103.017000][ T5825] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 103.044297][ T5824] team0: Port device team_slave_1 added [ 103.053197][ T5829] team0: Port device team_slave_0 added [ 103.062248][ T5827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 103.131404][ T5829] team0: Port device team_slave_1 added [ 103.184584][ T5826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 103.196704][ T5825] team0: Port device team_slave_0 added [ 103.217918][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 103.224995][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.251405][ T5824] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.277663][ T5828] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.284932][ T5828] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.292407][ T5828] bridge_slave_0: entered allmulticast mode [ 103.300019][ T5828] bridge_slave_0: entered promiscuous mode [ 103.310813][ T5826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 103.336729][ T5825] team0: Port device team_slave_1 added [ 103.357868][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 103.365116][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.391577][ T5824] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.404814][ T5827] team0: Port device team_slave_0 added [ 103.411293][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.418415][ T5828] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.425800][ T5828] bridge_slave_1: entered allmulticast mode [ 103.434046][ T5828] bridge_slave_1: entered promiscuous mode [ 103.471241][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 103.478211][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.504257][ T5829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.525528][ T5827] team0: Port device team_slave_1 added [ 103.549167][ T5826] team0: Port device team_slave_0 added [ 103.570618][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 103.577567][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.603665][ T5829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.659128][ T5826] team0: Port device team_slave_1 added [ 103.666001][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 103.673023][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.699438][ T5825] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.737505][ T5828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 103.762614][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 103.769571][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.796311][ T5825] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.846779][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 103.853856][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.880765][ T5827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.895205][ T5828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 103.958608][ T5824] hsr_slave_0: entered promiscuous mode [ 103.965494][ T5824] hsr_slave_1: entered promiscuous mode [ 103.973140][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 103.980311][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 104.006396][ T5827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 104.035490][ T5828] team0: Port device team_slave_0 added [ 104.042347][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 104.049298][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 104.075497][ T5826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 104.128141][ T5828] team0: Port device team_slave_1 added [ 104.135145][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 104.142352][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 104.168735][ T5826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 104.200351][ T5829] hsr_slave_0: entered promiscuous mode [ 104.206863][ T5829] hsr_slave_1: entered promiscuous mode [ 104.213213][ T5829] debugfs: 'hsr0' already exists in 'hsr' [ 104.218981][ T5829] Cannot create hsr debugfs directory [ 104.340494][ T5825] hsr_slave_0: entered promiscuous mode [ 104.347020][ T5825] hsr_slave_1: entered promiscuous mode [ 104.353548][ T5825] debugfs: 'hsr0' already exists in 'hsr' [ 104.359265][ T5825] Cannot create hsr debugfs directory [ 104.368974][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 104.376150][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 104.402226][ T5828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 104.449047][ T5827] hsr_slave_0: entered promiscuous mode [ 104.455783][ T5827] hsr_slave_1: entered promiscuous mode [ 104.462940][ T5827] debugfs: 'hsr0' already exists in 'hsr' [ 104.468670][ T5827] Cannot create hsr debugfs directory [ 104.508301][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 104.515324][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 104.558567][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 104.711741][ T5826] hsr_slave_0: entered promiscuous mode [ 104.718281][ T5826] hsr_slave_1: entered promiscuous mode [ 104.724820][ T5826] debugfs: 'hsr0' already exists in 'hsr' [ 104.730567][ T5826] Cannot create hsr debugfs directory [ 104.839791][ T5843] Bluetooth: hci4: command tx timeout [ 104.848806][ T5143] Bluetooth: hci3: command tx timeout [ 104.897340][ T5828] hsr_slave_0: entered promiscuous mode [ 104.903910][ T5828] hsr_slave_1: entered promiscuous mode [ 104.910358][ T5828] debugfs: 'hsr0' already exists in 'hsr' [ 104.916094][ T5828] Cannot create hsr debugfs directory [ 104.921634][ T5143] Bluetooth: hci1: command tx timeout [ 104.930140][ T5843] Bluetooth: hci2: command tx timeout [ 104.935548][ T5843] Bluetooth: hci5: command tx timeout [ 104.941492][ T5143] Bluetooth: hci0: command tx timeout [ 105.384259][ T5824] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 105.426668][ T5824] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 105.461654][ T5824] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 105.479271][ T5824] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 105.544925][ T5829] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 105.561465][ T5829] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 105.573959][ T5829] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 105.586278][ T5829] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 105.688535][ T5825] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 105.702330][ T5825] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 105.716384][ T5825] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 105.727763][ T5825] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 105.893291][ T5829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.903193][ T5827] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 105.918284][ T5827] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 105.930525][ T5827] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 105.944905][ T5827] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 106.049573][ T5829] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.085603][ T5824] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.114275][ T5828] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 106.131158][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.138413][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.150482][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.157599][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.192286][ T5828] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 106.213604][ T5824] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.240246][ T5828] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 106.252826][ T5828] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 106.287177][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.294348][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.326387][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.333580][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.353466][ T5825] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.378422][ T5826] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 106.391832][ T5826] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 106.427194][ T5826] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 106.461557][ T5826] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 106.494252][ T5829] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 106.524484][ T5825] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.575483][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.582683][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.592912][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.600162][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.920868][ T5843] Bluetooth: hci3: command tx timeout [ 106.926312][ T5843] Bluetooth: hci4: command tx timeout [ 106.954810][ T5827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.988752][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.004493][ T5843] Bluetooth: hci2: command tx timeout [ 107.010223][ T5143] Bluetooth: hci5: command tx timeout [ 107.010248][ T5844] Bluetooth: hci0: command tx timeout [ 107.015620][ T5143] Bluetooth: hci1: command tx timeout [ 107.065314][ T5827] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.104359][ T5826] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.142922][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.156296][ T1317] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.163490][ T1317] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.215184][ T5828] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.238002][ T5826] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.253311][ T1317] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.260490][ T1317] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.303512][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.310703][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.325499][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.332627][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.366701][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.373859][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.407925][ T1317] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.415067][ T1317] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.430422][ T5825] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.461882][ T5824] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.680316][ T5829] veth0_vlan: entered promiscuous mode [ 107.742001][ T5829] veth1_vlan: entered promiscuous mode [ 107.909552][ T5829] veth0_macvtap: entered promiscuous mode [ 107.976079][ T5829] veth1_macvtap: entered promiscuous mode [ 108.048750][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.096025][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.190880][ T77] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.241106][ T50] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.285269][ T50] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.319760][ T50] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.449797][ T5826] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.478120][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.598347][ T5825] veth0_vlan: entered promiscuous mode [ 108.608041][ T77] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.614897][ T5825] veth1_vlan: entered promiscuous mode [ 108.630052][ T77] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.651758][ T5827] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.713092][ T5826] veth0_vlan: entered promiscuous mode [ 108.734232][ T1097] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.745752][ T5826] veth1_vlan: entered promiscuous mode [ 108.752502][ T1097] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.754245][ T5824] veth0_vlan: entered promiscuous mode [ 108.801181][ T5824] veth1_vlan: entered promiscuous mode [ 108.853090][ T5825] veth0_macvtap: entered promiscuous mode [ 108.866708][ T5825] veth1_macvtap: entered promiscuous mode [ 108.866822][ T5829] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 108.894683][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.902083][ T5828] veth0_vlan: entered promiscuous mode [ 108.934272][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.952058][ T5828] veth1_vlan: entered promiscuous mode [ 108.978812][ T5827] veth0_vlan: entered promiscuous mode [ 108.996977][ T1319] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.007149][ T5143] Bluetooth: hci4: command tx timeout [ 109.012586][ T5843] Bluetooth: hci3: command tx timeout [ 109.046956][ T1319] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.063884][ T1319] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.080164][ T5143] Bluetooth: hci0: command tx timeout [ 109.085605][ T5143] Bluetooth: hci5: command tx timeout [ 109.091083][ T5843] Bluetooth: hci1: command tx timeout [ 109.091135][ T5844] Bluetooth: hci2: command tx timeout [ 109.101003][ T5827] veth1_vlan: entered promiscuous mode [ 109.114046][ T5826] veth0_macvtap: entered promiscuous mode [ 109.125377][ T1319] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.145046][ T5824] veth0_macvtap: entered promiscuous mode [ 109.203992][ T5826] veth1_macvtap: entered promiscuous mode [ 109.230746][ T5824] veth1_macvtap: entered promiscuous mode [ 109.257843][ T5828] veth0_macvtap: entered promiscuous mode [ 109.287639][ T5827] veth0_macvtap: entered promiscuous mode [ 109.362812][ T5828] veth1_macvtap: entered promiscuous mode [ 109.405698][ T1319] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.425852][ T5827] veth1_macvtap: entered promiscuous mode [ 109.431607][ T1319] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.453433][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.504707][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.563131][ T50] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.572877][ T50] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.589134][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.597256][ T50] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.599765][ T1319] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.614108][ T50] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.619816][ T1319] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.635328][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.684206][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.698729][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.731776][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.742592][ T5983] loop1: detected capacity change from 0 to 1024 [ 109.761621][ T5983] ======================================================= [ 109.761621][ T5983] WARNING: The mand mount option has been deprecated and [ 109.761621][ T5983] and is ignored by this kernel. Remove the mand [ 109.761621][ T5983] option from the mount to silence this warning. [ 109.761621][ T5983] ======================================================= [ 109.801368][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.816526][ T3015] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.826592][ T5983] EXT4-fs: Ignoring removed bh option [ 109.840776][ T3015] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.892834][ T3015] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.903185][ T5983] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 109.904099][ T3015] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.967539][ T3015] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.985633][ T3015] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.016762][ T5983] EXT4-fs error (device loop1): ext4_xattr_set_entry:1665: inode #15: comm syz.1.10: corrupted xattr entries [ 110.039530][ T3015] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.050412][ T5983] EXT4-fs (loop1): Remounting filesystem read-only [ 110.057011][ T5983] EXT4-fs warning (device loop1): ext4_xattr_block_set:2194: inode #19: comm syz.1.10: dec ref error=-30 [ 110.060585][ T3015] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.108822][ T3015] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.172971][ T3015] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.187981][ T3015] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.261466][ T5829] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.328021][ T3015] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.527453][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.557056][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.610713][ T3015] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.618649][ T3015] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.690611][ T1097] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.698465][ T1097] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.777374][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.799997][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.884157][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.895625][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.970644][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.004364][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.206044][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.234047][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.318696][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.359875][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.606483][ T6011] input: syz1 as /devices/virtual/input/input5 [ 112.473374][ T6026] loop1: detected capacity change from 0 to 4096 [ 113.380006][ T5908] usb 4-1: new low-speed USB device number 2 using dummy_hcd [ 113.544203][ T5908] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 113.563500][ T5908] usb 4-1: config 0 has no interface number 0 [ 113.575453][ T5908] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 114.202969][ T5844] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 114.539881][ T5908] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 114.550813][ T5908] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 114.559894][ T5908] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.582684][ T5908] usb 4-1: config 0 descriptor?? [ 114.589847][ T6022] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 115.020685][ T6031] loop0: detected capacity change from 0 to 262144 [ 115.034829][ T6031] BTRFS: device fsid 7e32c2af-f87a-45a1-bcba-64dea7c56a53 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.22 (6031) [ 115.059503][ T5908] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 115.076326][ T6031] BTRFS info (device loop0): first mount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53 [ 115.090858][ T6031] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 115.139842][ T5908] usb 4-1: USB disconnect, device number 2 [ 115.419722][ T6031] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR [ 115.420761][ T6031] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 115.430081][ T6031] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 115.439795][ T6031] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 115.448802][ T6031] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 115.459027][ T6031] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 115.525207][ T6031] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 115.538166][ T6031] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 115.584556][ T6031] BTRFS error (device loop0): open_ctree failed: -12 [ 116.253024][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 116.650040][ T5930] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 116.682341][ T6079] loop4: detected capacity change from 0 to 16 [ 116.715257][ T6079] erofs (device loop4): mounted with root inode @ nid 36. [ 116.760889][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 116.773661][ T0] NOHZ tick-stop error: local softirq work is pending, handler #41!!! [ 116.875804][ T5930] usb 4-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 116.896631][ T5930] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.074277][ T5930] usb 4-1: Product: syz [ 117.078499][ T5930] usb 4-1: Manufacturer: syz [ 117.100032][ T5930] usb 4-1: SerialNumber: syz [ 117.118333][ T5930] usb 4-1: config 0 descriptor?? [ 117.373297][ T6082] netlink: 4 bytes leftover after parsing attributes in process `syz.2.37'. [ 117.469919][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 117.629005][ T5930] airspy 4-1:0.0: Board ID: 00 [ 117.659526][ T5930] airspy 4-1:0.0: Firmware version: [ 117.678056][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 117.686865][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 117.698016][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 117.706807][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 117.730132][ T0] NOHZ tick-stop error: local softirq work is pending, handler #300!!! [ 117.760152][ T0] NOHZ tick-stop error: local softirq work is pending, handler #300!!! [ 117.796509][ T6044] syz.5.28 (6044): drop_caches: 2 [ 118.468308][ T5930] airspy 4-1:0.0: usb_control_msg() failed -71 request 0f [ 118.484879][ T5930] airspy 4-1:0.0: Registered as swradio24 [ 118.498841][ T5930] airspy 4-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 118.567208][ T5930] usb 4-1: USB disconnect, device number 3 [ 118.789704][ T5929] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 119.006296][ T5929] usb 1-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 119.036845][ T5929] usb 1-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 119.092648][ T5929] usb 1-1: Product: syz [ 119.096859][ T5929] usb 1-1: Manufacturer: syz [ 119.133672][ T5929] usb 1-1: SerialNumber: syz [ 119.165108][ T5929] usb 1-1: config 0 descriptor?? [ 119.198856][ T5929] ch341 1-1:0.0: ch341-uart converter detected [ 119.458396][ T6130] netlink: 24 bytes leftover after parsing attributes in process `syz.3.56'. [ 119.519869][ T6130] netlink: 'syz.3.56': attribute type 1 has an invalid length. [ 119.560474][ T6130] netlink: 28 bytes leftover after parsing attributes in process `syz.3.56'. [ 120.262222][ T5929] ch341-uart ttyUSB0: break control not supported, using simulated break [ 120.282302][ T5929] usb 1-1: ch341-uart converter now attached to ttyUSB0 [ 120.333034][ T6147] loop3: detected capacity change from 0 to 128 [ 120.360813][ T5929] usb 1-1: USB disconnect, device number 2 [ 120.412109][ T5921] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 120.419879][ T5929] ch341-uart ttyUSB0: ch341-uart converter now disconnected from ttyUSB0 [ 120.425212][ T6147] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 120.440590][ T5929] ch341 1-1:0.0: device disconnected [ 120.520930][ T6147] ext4 filesystem being mounted at /5/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 120.652351][ T5921] usb 5-1: Using ep0 maxpacket: 8 [ 120.680691][ T5921] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 120.708230][ T5921] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.793320][ T5921] pvrusb2: Hardware description: Terratec Grabster AV400 [ 120.822084][ T5921] pvrusb2: ********** [ 120.828379][ T5921] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 120.842978][ T5921] pvrusb2: Important functionality might not be entirely working. [ 120.852119][ T5921] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 120.863739][ T5921] pvrusb2: ********** [ 121.019990][ T2340] pvrusb2: Invalid write control endpoint [ 121.135485][ T6160] Invalid source name [ 121.157286][ T5828] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 121.167536][ T6160] UBIFS error (pid: 6160): cannot open "./file0", error -22 [ 121.234574][ T6144] pvrusb2: Invalid write control endpoint [ 121.293158][ T2340] pvrusb2: Invalid write control endpoint [ 121.318343][ T5930] usb 5-1: USB disconnect, device number 2 [ 121.328343][ T2340] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 121.339861][ T5921] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 121.364297][ T2340] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 121.392854][ T2340] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 121.423367][ T2340] pvrusb2: Device being rendered inoperable [ 121.471524][ T2340] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 121.478870][ T2340] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 121.549372][ T2340] pvrusb2: Attached sub-driver cx25840 [ 121.554292][ T5921] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 121.571666][ T2340] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 121.599684][ T5921] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 121.615038][ T2340] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 121.630867][ T5921] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 121.666885][ T5921] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.728224][ T5921] usb 6-1: config 0 descriptor?? [ 121.736340][ T60] Bluetooth: hci6: Frame reassembly failed (-84) [ 122.231337][ T5921] pyra 0003:1E7D:2CF6.0001: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.5-1/input0 [ 122.352852][ T5922] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 122.571482][ T5922] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 122.610710][ T5922] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 122.651639][ T5922] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 122.689665][ T5922] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 122.720374][ T5922] usb 5-1: SerialNumber: syz [ 122.965990][ T5922] usb 5-1: 0:2 : does not exist [ 122.995310][ T5921] pyra 0003:1E7D:2CF6.0001: couldn't init struct pyra_device [ 123.022049][ T5921] pyra 0003:1E7D:2CF6.0001: couldn't install mouse [ 123.063865][ T5921] pyra 0003:1E7D:2CF6.0001: probe with driver pyra failed with error -71 [ 123.091815][ T5922] usb 5-1: USB disconnect, device number 3 [ 123.138544][ T5921] usb 6-1: USB disconnect, device number 2 [ 123.214209][ T5994] udevd[5994]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 123.477186][ T6206] evm: overlay not supported [ 123.805276][ T5143] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 123.811691][ T5844] Bluetooth: hci6: command 0x1003 tx timeout [ 124.113436][ T6221] Bluetooth: MGMT ver 1.23 [ 124.173495][ T6222] syz.1.91 uses obsolete (PF_INET,SOCK_PACKET) [ 124.363355][ T6224] macvtap1: entered promiscuous mode [ 124.369567][ T6224] macvtap1: entered allmulticast mode [ 124.386470][ T6224] veth1_vlan: entered allmulticast mode [ 124.481900][ T6229] macvtap2: entered promiscuous mode [ 124.508513][ T6229] macvtap2: entered allmulticast mode [ 124.526480][ T5922] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 124.539820][ T6230] loop5: detected capacity change from 0 to 4096 [ 124.556613][ T6230] ntfs3(loop5): Different NTFS sector size (2048) and media sector size (512). [ 124.661854][ T6229] Zero length message leads to an empty skb [ 124.678608][ T6230] ntfs3(loop5): Failed to initialize $Extend/$ObjId. [ 124.699691][ T5922] usb 1-1: Using ep0 maxpacket: 8 [ 124.729293][ T5922] usb 1-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 124.762856][ T5922] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.817172][ T5922] usb 1-1: Product: syz [ 124.834210][ T5922] usb 1-1: Manufacturer: syz [ 124.889811][ T5922] usb 1-1: SerialNumber: syz [ 124.961052][ T5922] usb 1-1: config 0 descriptor?? [ 125.008340][ T5922] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 125.036175][ T6241] loop4: detected capacity change from 0 to 1024 [ 125.074659][ T6241] EXT4-fs: Ignoring removed orlov option [ 125.148639][ T6241] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a002c118, mo2=0002] [ 125.204944][ T6241] System zones: 0-1, 3-12 [ 125.253180][ T6241] EXT4-fs (loop4): mounted filesystem 00000000-0500-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 125.560891][ T6251] loop5: detected capacity change from 0 to 4096 [ 125.591089][ T5824] EXT4-fs (loop4): unmounting filesystem 00000000-0500-0000-0000-000000000000. [ 125.762769][ T6259] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 125.964149][ T6251] syz.5.99 (6251) used greatest stack depth: 19944 bytes left [ 125.984828][ T6263] netlink: 'syz.4.102': attribute type 1 has an invalid length. [ 126.001309][ T6261] loop1: detected capacity change from 0 to 2048 [ 126.030437][ T6263] netlink: 4 bytes leftover after parsing attributes in process `syz.4.102'. [ 126.079061][ T6261] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 126.172594][ T6263] netlink: 'syz.4.102': attribute type 1 has an invalid length. [ 126.181946][ T12] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 126.200495][ T6263] netlink: 4 bytes leftover after parsing attributes in process `syz.4.102'. [ 126.212659][ T12] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 126.251879][ T12] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 126.288342][ T5922] gspca_sonixj: reg_w1 err -71 [ 126.299874][ T5861] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 126.312769][ T12] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 126.387004][ T5922] sonixj 1-1:0.0: probe with driver sonixj failed with error -71 [ 126.443434][ T5922] usb 1-1: USB disconnect, device number 3 [ 126.489419][ T5861] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 126.523209][ T5861] usb 3-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 126.539863][ T5861] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 126.570716][ T5861] usb 3-1: config 220 has no interface number 2 [ 126.579925][ T5861] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 126.627583][ T5861] usb 3-1: config 220 interface 0 has no altsetting 0 [ 126.655934][ T5861] usb 3-1: config 220 interface 76 has no altsetting 0 [ 126.681193][ T5861] usb 3-1: config 220 interface 1 has no altsetting 0 [ 126.718426][ T5861] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 126.729745][ T9] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 126.743616][ T5861] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.745262][ T6250] loop3: detected capacity change from 0 to 32768 [ 126.776139][ T5861] usb 3-1: Product: syz [ 126.786905][ T5861] usb 3-1: Manufacturer: syz [ 126.798968][ T5861] usb 3-1: SerialNumber: syz [ 126.859050][ T6250] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 126.933736][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 126.991408][ T9] usb 6-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 127.044245][ T6250] XFS (loop3): Ending clean mount [ 127.053322][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.095326][ T6250] XFS (loop3): Quotacheck needed: Please wait. [ 127.102479][ T5861] usb 3-1: selecting invalid altsetting 0 [ 127.110483][ T9] usb 6-1: Product: syz [ 127.114686][ T9] usb 6-1: Manufacturer: syz [ 127.119288][ T9] usb 6-1: SerialNumber: syz [ 127.134292][ T5861] uvcvideo 3-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 127.157388][ T6292] loop4: detected capacity change from 0 to 128 [ 127.186041][ T5861] uvcvideo 3-1:220.0: No valid video chain found. [ 127.214484][ T9] usb 6-1: config 0 descriptor?? [ 127.284732][ T5861] usb 3-1: selecting invalid altsetting 0 [ 127.292688][ T9] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 127.302353][ T5861] usbtest 3-1:220.1: probe with driver usbtest failed with error -22 [ 127.338665][ T6250] XFS (loop3): Quotacheck: Done. [ 127.430221][ T5861] usb 3-1: USB disconnect, device number 2 [ 127.872897][ T5828] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 128.585596][ T9] gspca_stk1135: reg_w 0xd err -71 [ 128.612497][ T9] gspca_stk1135: serial bus timeout: status=0x00 [ 128.618865][ T9] gspca_stk1135: Sensor write failed [ 128.646167][ T9] gspca_stk1135: serial bus timeout: status=0x00 [ 128.672628][ T9] gspca_stk1135: Sensor write failed [ 128.703899][ T9] gspca_stk1135: serial bus timeout: status=0x00 [ 128.722581][ T9] gspca_stk1135: Sensor read failed [ 128.726379][ T6323] team0: entered promiscuous mode [ 128.732854][ T9] gspca_stk1135: serial bus timeout: status=0x00 [ 128.732875][ T9] gspca_stk1135: Sensor read failed [ 128.732888][ T9] gspca_stk1135: Detected sensor type unknown (0x0) [ 128.732958][ T9] gspca_stk1135: serial bus timeout: status=0x00 [ 128.732975][ T9] gspca_stk1135: Sensor read failed [ 128.733039][ T9] gspca_stk1135: serial bus timeout: status=0x00 [ 128.733056][ T9] gspca_stk1135: Sensor read failed [ 128.733118][ T9] gspca_stk1135: serial bus timeout: status=0x00 [ 128.733135][ T9] gspca_stk1135: Sensor write failed [ 128.733198][ T9] gspca_stk1135: serial bus timeout: status=0x00 [ 128.792998][ T6323] team_slave_0: entered promiscuous mode [ 128.842948][ T6323] team_slave_1: entered promiscuous mode [ 128.891568][ T6323] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 128.931163][ T9] gspca_stk1135: Sensor write failed [ 128.938969][ T9] stk1135 6-1:0.0: probe with driver stk1135 failed with error -71 [ 128.952600][ T9] usb 6-1: USB disconnect, device number 3 [ 128.967084][ T6323] bond0: (slave macvlan2): Enslaving as an active interface with an up link [ 129.576049][ T6347] loop2: detected capacity change from 0 to 8 [ 129.701699][ T6349] loop5: detected capacity change from 0 to 512 [ 129.779784][ T6349] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 129.828190][ T6349] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 129.841710][ T6308] loop4: detected capacity change from 0 to 32768 [ 129.897373][ T6308] XFS (loop4): Mounting V5 Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 129.970169][ T6349] EXT4-fs warning (device loop5): ext4_expand_extra_isize_ea:2852: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 130.009677][ T30] audit: type=1326 audit(1759942468.742:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6364 comm="syz.3.134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f393738eec9 code=0x7ffc0000 [ 130.031705][ C1] vkms_vblank_simulate: vblank timer overrun [ 130.101845][ T6349] EXT4-fs (loop5): 1 truncate cleaned up [ 130.135484][ T6349] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 130.150700][ T30] audit: type=1326 audit(1759942468.742:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6364 comm="syz.3.134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f393738eec9 code=0x7ffc0000 [ 130.210391][ T6308] XFS (loop4): Ending clean mount [ 130.404272][ T6375] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 130.458931][ T6349] EXT4-fs (loop5): shut down requested (2) [ 130.502573][ T6372] loop2: detected capacity change from 0 to 32768 [ 130.520760][ T30] audit: type=1326 audit(1759942468.742:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6364 comm="syz.3.134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f393738eec9 code=0x7ffc0000 [ 130.545217][ T30] audit: type=1326 audit(1759942468.742:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6364 comm="syz.3.134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f393738eec9 code=0x7ffc0000 [ 130.551018][ T6377] syz.5.129 (pid 6377) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 130.567221][ C1] vkms_vblank_simulate: vblank timer overrun [ 130.570292][ T30] audit: type=1326 audit(1759942468.742:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6364 comm="syz.3.134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f393738eec9 code=0x7ffc0000 [ 130.607999][ T30] audit: type=1326 audit(1759942468.752:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6364 comm="syz.3.134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f393738eec9 code=0x7ffc0000 [ 130.638152][ T30] audit: type=1326 audit(1759942468.752:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6364 comm="syz.3.134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f393738eec9 code=0x7ffc0000 [ 130.669937][ T6372] JBD2: Ignoring recovery information on journal [ 130.724756][ T30] audit: type=1326 audit(1759942468.752:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6364 comm="syz.3.134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f393738eec9 code=0x7ffc0000 [ 130.749113][ T30] audit: type=1326 audit(1759942468.752:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6364 comm="syz.3.134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f393738eec9 code=0x7ffc0000 [ 130.772866][ T30] audit: type=1326 audit(1759942468.752:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6364 comm="syz.3.134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f393738eec9 code=0x7ffc0000 [ 130.827101][ T6372] (syz.2.133,6372,1):ocfs2_load_local_alloc:334 ERROR: inconsistent detected, clean journal with unrecovered local alloc, please run fsck.ocfs2! [ 130.827101][ T6372] found = 1, set = 0, taken = 0, off = 0 [ 130.847967][ T6372] (syz.2.133,6372,1):ocfs2_load_local_alloc:356 ERROR: status = -22 [ 130.857766][ T6372] (syz.2.133,6372,1):ocfs2_check_volume:2404 ERROR: status = -22 [ 130.865603][ T6372] (syz.2.133,6372,1):ocfs2_check_volume:2432 ERROR: status = -22 [ 130.873377][ T6372] (syz.2.133,6372,1):ocfs2_mount_volume:1764 ERROR: status = -22 [ 130.895278][ T6372] (syz.2.133,6372,1):ocfs2_fill_super:1177 ERROR: status = -22 [ 131.009189][ T5824] XFS (loop4): Unmounting Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 131.117545][ T5825] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.131074][ T6383] netlink: 24 bytes leftover after parsing attributes in process `syz.0.138'. [ 131.619121][ T6397] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 131.930352][ T6404] F2FS-fs (loop9): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 131.964530][ T6404] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock [ 132.010634][ T6404] F2FS-fs (loop9): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 132.043528][ T6404] F2FS-fs (loop9): Can't find valid F2FS filesystem in 2th superblock [ 132.114798][ T6407] loop3: detected capacity change from 0 to 256 [ 132.151364][ T6407] exfat: Deprecated parameter 'utf8' [ 132.156748][ T6407] exfat: Deprecated parameter 'namecase' [ 132.239840][ T6407] exfat: Deprecated parameter 'namecase' [ 132.246457][ T6407] exfat: Deprecated parameter 'utf8' [ 132.409039][ T6407] exFAT-fs (loop3): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffc20, utbl_chksum : 0xe619d30d) [ 132.533628][ T6414] loop1: detected capacity change from 0 to 4096 [ 132.566723][ T6414] ntfs3(loop1): Different NTFS sector size (1024) and media sector size (512). [ 132.953395][ T6414] ntfs3(loop1): ino=1e, "file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" ni_find_attr [ 133.031804][ T6427] ntfs3(loop1): ino=1e, "file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" ni_find_attr [ 133.950889][ T6409] loop0: detected capacity change from 0 to 40427 [ 134.006518][ T6409] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 134.055959][ T6409] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 134.145552][ T6409] F2FS-fs (loop0): invalid crc value [ 134.772395][ T6429] loop3: detected capacity change from 0 to 32768 [ 134.985166][ T6409] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 135.019784][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 135.019806][ T30] audit: type=1800 audit(1759942473.782:14): pid=6429 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.156" name="file1" dev="loop3" ino=4 res=0 errno=0 [ 135.219984][ T6409] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 135.240469][ T6409] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 135.509719][ T5861] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 136.308196][ T6461] loop5: detected capacity change from 0 to 131072 [ 136.339821][ T6461] F2FS-fs (loop5): Test dummy encryption mode enabled [ 136.349160][ T6461] F2FS-fs (loop5): invalid crc value [ 136.506032][ T6461] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 136.516950][ T6461] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 136.547437][ T30] audit: type=1326 audit(1759942475.312:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6464 comm="syz.2.166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d9b38eec9 code=0x7ffc0000 [ 136.585970][ T5861] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 136.638636][ T30] audit: type=1326 audit(1759942475.352:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6464 comm="syz.2.166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d9b38eec9 code=0x7ffc0000 [ 136.664298][ T5861] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 136.711967][ T5861] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 136.731204][ T5861] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.737995][ T6461] fscrypt: AES-256-XTS using implementation "xts-aes-vaes-avx2" [ 136.779821][ T30] audit: type=1326 audit(1759942475.372:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6464 comm="syz.2.166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9d9b38eec9 code=0x7ffc0000 [ 136.804297][ T30] audit: type=1326 audit(1759942475.372:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6464 comm="syz.2.166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d9b38eec9 code=0x7ffc0000 [ 136.828680][ T30] audit: type=1326 audit(1759942475.372:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6464 comm="syz.2.166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d9b38eec9 code=0x7ffc0000 [ 136.851105][ T30] audit: type=1326 audit(1759942475.432:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6464 comm="syz.2.166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f9d9b38eec9 code=0x7ffc0000 [ 136.852272][ T5861] usb 5-1: config 0 descriptor?? [ 136.885794][ T30] audit: type=1800 audit(1759942475.542:21): pid=6461 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.165" name="file1" dev="loop5" ino=10 res=0 errno=0 [ 136.949912][ T30] audit: type=1326 audit(1759942475.652:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6464 comm="syz.2.166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d9b38eec9 code=0x7ffc0000 [ 136.980074][ T30] audit: type=1326 audit(1759942475.652:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6464 comm="syz.2.166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d9b38eec9 code=0x7ffc0000 [ 137.515908][ T6470] loop2: detected capacity change from 0 to 2048 [ 137.588136][ T6470] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 137.725968][ T5861] usb 5-1: language id specifier not provided by device, defaulting to English [ 137.989418][ T6472] loop3: detected capacity change from 0 to 64 [ 138.132459][ T5861] uclogic 0003:256C:006D.0002: failed retrieving string descriptor #200: -71 [ 138.153539][ T5861] uclogic 0003:256C:006D.0002: failed retrieving pen parameters: -71 [ 138.169738][ T5861] uclogic 0003:256C:006D.0002: failed probing pen v2 parameters: -71 [ 138.189446][ T5861] uclogic 0003:256C:006D.0002: failed probing parameters: -71 [ 138.229473][ T5861] uclogic 0003:256C:006D.0002: probe with driver uclogic failed with error -71 [ 138.299569][ T5861] usb 5-1: USB disconnect, device number 4 [ 138.806964][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.183809][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.451504][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.645598][ T6480] loop3: detected capacity change from 0 to 32768 [ 139.677641][ T6479] loop0: detected capacity change from 0 to 32768 [ 139.696050][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.736296][ T6479] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 140.014833][ T5844] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 140.034468][ T5844] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 140.058614][ T5844] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 140.102809][ T5844] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 140.111308][ T5844] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 140.299075][ T6479] XFS (loop0): Ending clean mount [ 140.334976][ T6479] XFS (loop0): Quotacheck needed: Please wait. [ 140.350838][ T6509] loop4: detected capacity change from 0 to 1024 [ 140.462585][ T6479] XFS (loop0): Quotacheck: Done. [ 140.574279][ T12] bridge_slave_1: left allmulticast mode [ 140.591996][ T12] bridge_slave_1: left promiscuous mode [ 140.598858][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.670282][ T12] bridge_slave_0: left allmulticast mode [ 140.689904][ T12] bridge_slave_0: left promiscuous mode [ 140.695895][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.844873][ T5827] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 141.020927][ T5930] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 141.194138][ T5930] usb 6-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 141.214773][ T5930] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.236061][ T6520] loop1: detected capacity change from 0 to 4096 [ 141.259302][ T5930] usb 6-1: config 0 descriptor?? [ 141.332427][ T6523] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 141.495166][ T9] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 141.665076][ T5930] IPVS: starting estimator thread 0... [ 141.683925][ T6531] IPVS: lc: FWM 3 0x00000003 - no destination available [ 141.700495][ C1] IPVS: lc: FWM 3 0x00000003 - no destination available [ 141.701941][ T9] usb 5-1: config 0 has an invalid interface number: 111 but max is 0 [ 141.762534][ T9] usb 5-1: config 0 has no interface number 0 [ 141.785407][ T6532] IPVS: using max 22 ests per chain, 52800 per kthread [ 141.824890][ T9] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 141.862235][ T6537] loop3: detected capacity change from 0 to 512 [ 141.870605][ T6537] EXT4-fs (loop3): bad geometry: block count 3825205504 exceeds size of device (256 blocks) [ 141.883054][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.915969][ T9] usb 5-1: config 0 descriptor?? [ 141.937531][ T9] cp210x 5-1:0.111: cp210x converter detected [ 141.946901][ T24] usb 6-1: USB disconnect, device number 4 [ 142.010246][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 142.029135][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 142.044815][ T12] bond0 (unregistering): Released all slaves [ 142.114346][ T6544] vivid-007: ================= START STATUS ================= [ 142.169698][ T5930] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 142.200533][ T5844] Bluetooth: hci2: command tx timeout [ 142.208345][ T6544] vivid-007: Enable Output Cropping: true grabbed [ 142.260624][ T6544] vivid-007: Enable Output Composing: true grabbed [ 142.267221][ T6544] vivid-007: Enable Output Scaler: true grabbed [ 142.307637][ T6544] vivid-007: Tx RGB Quantization Range: Automatic grabbed [ 142.315666][ T6544] vivid-007: Transmit Mode: HDMI grabbed [ 142.322853][ T6544] vivid-007: Hotplug Present: 0x00000000 [ 142.328526][ T6544] vivid-007: RxSense Present: 0x00000000 [ 142.334797][ T6544] vivid-007: EDID Present: 0x00000000 [ 142.340509][ T6544] vivid-007: ================== END STATUS ================== [ 142.345766][ T9] cp210x 5-1:0.111: failed to get vendor val 0x000e size 3: -32 [ 142.370860][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 142.373374][ T5930] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 142.381799][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 142.387262][ T5930] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.412576][ T5930] usb 4-1: config 0 descriptor?? [ 142.421798][ T5930] cp210x 4-1:0.0: cp210x converter detected [ 142.611445][ T9] cp210x 5-1:0.111: GPIO initialisation failed: -19 [ 142.642087][ T9] usb 5-1: cp210x converter now attached to ttyUSB0 [ 142.666605][ T6504] chnl_net:caif_netlink_parms(): no params data found [ 142.788501][ T12] hsr_slave_0: left promiscuous mode [ 142.794832][ T12] hsr_slave_1: left promiscuous mode [ 142.802453][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 142.810063][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 142.820242][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 142.829282][ T5930] cp210x 4-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 142.844105][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 142.855488][ T5930] usb 4-1: cp210x converter now attached to ttyUSB1 [ 142.859379][ T9] usb 5-1: USB disconnect, device number 5 [ 142.892950][ T12] veth1_macvtap: left promiscuous mode [ 142.899131][ T9] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 142.899149][ T12] veth0_macvtap: left promiscuous mode [ 142.915459][ T9] cp210x 5-1:0.111: device disconnected [ 142.920617][ T12] veth1_vlan: left promiscuous mode [ 142.926841][ T12] veth0_vlan: left promiscuous mode [ 143.113253][ T5930] usb 4-1: USB disconnect, device number 4 [ 143.124024][ T5930] cp210x ttyUSB1: cp210x converter now disconnected from ttyUSB1 [ 143.221864][ T5930] cp210x 4-1:0.0: device disconnected [ 143.522638][ T6564] loop1: detected capacity change from 0 to 256 [ 143.541054][ T6564] exFAT-fs (loop1): bogus number of FAT structure [ 143.557087][ T6564] exFAT-fs (loop1): failed to read boot sector [ 143.580075][ T6564] exFAT-fs (loop1): failed to recognize exfat type [ 143.651869][ T6564] loop1: detected capacity change from 0 to 8 [ 144.281557][ T5844] Bluetooth: hci2: command tx timeout [ 144.445803][ T12] team0 (unregistering): Port device team_slave_1 removed [ 144.528631][ T12] team0 (unregistering): Port device team_slave_0 removed [ 145.847785][ T6504] bridge0: port 1(bridge_slave_0) entered blocking state [ 145.856330][ T6593] loop3: detected capacity change from 0 to 131072 [ 145.864712][ T6504] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.872875][ T6593] F2FS-fs (loop3): Test dummy encryption mode enabled [ 145.882054][ T6504] bridge_slave_0: entered allmulticast mode [ 145.890596][ T6504] bridge_slave_0: entered promiscuous mode [ 145.896692][ T6593] F2FS-fs (loop3): invalid crc value [ 145.909168][ T6504] bridge0: port 2(bridge_slave_1) entered blocking state [ 145.917698][ T6504] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.926066][ T6504] bridge_slave_1: entered allmulticast mode [ 145.973226][ T6504] bridge_slave_1: entered promiscuous mode [ 146.010879][ T6593] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 146.022707][ T6593] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 146.152989][ T6504] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 146.209322][ T6504] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 146.359753][ T5844] Bluetooth: hci2: command tx timeout [ 146.431570][ T6504] team0: Port device team_slave_0 added [ 146.478126][ T6504] team0: Port device team_slave_1 added [ 146.598982][ T6504] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 146.641906][ T6504] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 146.735512][ T6504] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 146.817322][ T6603] loop4: detected capacity change from 0 to 40427 [ 146.846570][ T6603] F2FS-fs (loop4): Wrong segment_count / block_count (31 > 0) [ 146.870293][ T6607] loop5: detected capacity change from 0 to 40427 [ 146.876833][ T6603] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 146.889698][ T6607] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 146.908103][ T6603] F2FS-fs (loop4): invalid crc value [ 146.914420][ T6607] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 146.944726][ T6607] F2FS-fs (loop5): invalid crc value [ 147.017131][ T6504] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 147.035549][ T6504] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 147.119783][ T6504] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 147.175335][ T6603] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 147.221231][ T6603] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0 [ 147.244129][ T6603] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 147.282168][ T6607] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 147.303822][ T6504] hsr_slave_0: entered promiscuous mode [ 147.342563][ T6504] hsr_slave_1: entered promiscuous mode [ 147.342744][ T6607] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 147.349015][ T6504] debugfs: 'hsr0' already exists in 'hsr' [ 147.382179][ T6603] syz.4.211: attempt to access beyond end of device [ 147.382179][ T6603] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 147.390949][ T6627] loop1: detected capacity change from 0 to 2048 [ 147.396618][ T6607] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 147.402543][ T6504] Cannot create hsr debugfs directory [ 147.446523][ T6603] syz.4.211: attempt to access beyond end of device [ 147.446523][ T6603] loop4: rw=2049, sector=45128, nr_sectors = 24 limit=40427 [ 147.488471][ T6627] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 147.496313][ T6629] syz.4.211: attempt to access beyond end of device [ 147.496313][ T6629] loop4: rw=2049, sector=45184, nr_sectors = 16 limit=40427 [ 147.531126][ T6629] CPU: 0 UID: 0 PID: 6629 Comm: syz.4.211 Not tainted syzkaller #0 PREEMPT(full) [ 147.531171][ T6629] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 147.531193][ T6629] Call Trace: [ 147.531212][ T6629] [ 147.531225][ T6629] dump_stack_lvl+0x16c/0x1f0 [ 147.531272][ T6629] f2fs_handle_critical_error+0x624/0x9f0 [ 147.531337][ T6629] ? srso_alias_return_thunk+0x5/0xfbef5 [ 147.531382][ T6629] ? f2fs_build_fault_attr+0x53/0x1f0 [ 147.531447][ T6629] f2fs_write_end_io+0x958/0xcf0 [ 147.531493][ T6629] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 147.531539][ T6629] ? srso_alias_return_thunk+0x5/0xfbef5 [ 147.531596][ T6629] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 147.531633][ T6629] bio_endio+0x713/0x860 [ 147.531684][ T6629] submit_bio_noacct+0x306/0x1f60 [ 147.531758][ T6629] __submit_merged_bio+0x33c/0x770 [ 147.531804][ T6629] __submit_merged_write_cond+0x319/0x3f0 [ 147.531858][ T6629] f2fs_write_cache_pages+0x2067/0x2570 [ 147.531938][ T6629] ? __pfx_f2fs_write_cache_pages+0x10/0x10 [ 147.532035][ T6629] ? srso_alias_return_thunk+0x5/0xfbef5 [ 147.532079][ T6629] ? check_irq_usage+0x188/0x920 [ 147.532161][ T6629] ? check_path.constprop.0+0x24/0x50 [ 147.532273][ T6629] ? check_path.constprop.0+0x24/0x50 [ 147.532328][ T6629] ? srso_alias_return_thunk+0x5/0xfbef5 [ 147.532381][ T6629] f2fs_write_data_pages+0x4ad/0xd90 [ 147.532438][ T6629] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 147.532502][ T6629] ? srso_alias_return_thunk+0x5/0xfbef5 [ 147.532547][ T6629] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 147.532597][ T6629] do_writepages+0x27a/0x600 [ 147.532641][ T6629] ? __pfx_do_writepages+0x10/0x10 [ 147.532675][ T6629] ? do_raw_spin_unlock+0x172/0x230 [ 147.532718][ T6629] ? srso_alias_return_thunk+0x5/0xfbef5 [ 147.532761][ T6629] ? _raw_spin_unlock+0x28/0x50 [ 147.532803][ T6629] filemap_fdatawrite_wbc+0x104/0x160 [ 147.532845][ T6629] __filemap_fdatawrite_range+0xb9/0x100 [ 147.532894][ T6629] ? __pfx___filemap_fdatawrite_range+0x10/0x10 [ 147.532942][ T6629] ? check_path.constprop.0+0x24/0x50 [ 147.533065][ T6629] ? find_held_lock+0x2b/0x80 [ 147.533114][ T6629] ? srso_alias_return_thunk+0x5/0xfbef5 [ 147.533158][ T6629] ? do_raw_spin_unlock+0x172/0x230 [ 147.533200][ T6629] ? srso_alias_return_thunk+0x5/0xfbef5 [ 147.533260][ T6629] f2fs_sync_dirty_inodes+0x2a2/0x980 [ 147.533332][ T6629] block_operations+0x2b0/0xfe0 [ 147.533395][ T6629] ? __pfx_block_operations+0x10/0x10 [ 147.533509][ T6629] ? srso_alias_return_thunk+0x5/0xfbef5 [ 147.533557][ T6629] ? ktime_get+0x200/0x310 [ 147.533609][ T6629] ? srso_alias_return_thunk+0x5/0xfbef5 [ 147.533652][ T6629] ? lockdep_hardirqs_on+0x7c/0x110 [ 147.533695][ T6629] ? srso_alias_return_thunk+0x5/0xfbef5 [ 147.533738][ T6629] ? rcu_is_watching+0x12/0xc0 [ 147.533793][ T6629] f2fs_write_checkpoint+0x32b/0x5300 [ 147.533849][ T6629] ? srso_alias_return_thunk+0x5/0xfbef5 [ 147.533897][ T6629] ? srso_alias_return_thunk+0x5/0xfbef5 [ 147.533940][ T6629] ? down_write+0x14d/0x200 [ 147.533987][ T6629] ? __pfx_down_write+0x10/0x10 [ 147.534033][ T6629] ? look_up_lock_class+0x6b/0x150 [ 147.534076][ T6629] ? srso_alias_return_thunk+0x5/0xfbef5 [ 147.534119][ T6629] ? register_lock_class+0x41/0x4c0 [ 147.534161][ T6629] f2fs_issue_checkpoint+0x17b/0x5a0 [ 147.534221][ T6629] ? __pfx_f2fs_issue_checkpoint+0x10/0x10 [ 147.534270][ T6629] ? __lock_acquire+0xb97/0x1ce0 [ 147.534381][ T6629] ? down_read+0x13d/0x480 [ 147.534426][ T6629] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 147.534466][ T6629] ? __pfx___up_read+0x10/0x10 [ 147.534515][ T6629] f2fs_sync_fs+0x22b/0x400 [ 147.534567][ T6629] f2fs_do_sync_file+0xc5d/0x1c50 [ 147.534643][ T6629] ? __pfx_f2fs_do_sync_file+0x10/0x10 [ 147.534771][ T6629] ? srso_alias_return_thunk+0x5/0xfbef5 [ 147.534815][ T6629] ? find_held_lock+0x2b/0x80 [ 147.534863][ T6629] ? srso_alias_return_thunk+0x5/0xfbef5 [ 147.534920][ T6629] f2fs_sync_file+0x13a/0x1a0 [ 147.534957][ T6629] ? __pfx_f2fs_sync_file+0x10/0x10 [ 147.534988][ T6629] vfs_fsync_range+0x139/0x220 [ 147.535055][ T6629] do_fsync+0x4b/0xa0 [ 147.535113][ T6629] __x64_sys_fsync+0x32/0x50 [ 147.535145][ T6629] do_syscall_64+0xcd/0xfa0 [ 147.535192][ T6629] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.535235][ T6629] RIP: 0033:0x7fc3f578eec9 [ 147.535262][ T6629] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 147.535297][ T6629] RSP: 002b:00007fc3f66b0038 EFLAGS: 00000246 ORIG_RAX: 000000000000004a [ 147.535331][ T6629] RAX: ffffffffffffffda RBX: 00007fc3f59e6090 RCX: 00007fc3f578eec9 [ 147.535355][ T6629] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 147.535377][ T6629] RBP: 00007fc3f5811f91 R08: 0000000000000000 R09: 0000000000000000 [ 147.535399][ T6629] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 147.535421][ T6629] R13: 00007fc3f59e6128 R14: 00007fc3f59e6090 R15: 00007ffd13a5e2a8 [ 147.535477][ T6629] [ 147.535490][ T6629] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 147.797662][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 147.797685][ T30] audit: type=1800 audit(1759942486.532:25): pid=6627 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.218" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 147.815370][ T6603] syz.4.211: attempt to access beyond end of device [ 147.815370][ T6603] loop4: rw=2049, sector=45216, nr_sectors = 8 limit=40427 [ 147.854639][ T30] audit: type=1800 audit(1759942486.582:26): pid=6633 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.218" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 148.124266][ T5829] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.172668][ T6621] loop0: detected capacity change from 0 to 32768 [ 148.236836][ T6621] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 148.372625][ T5825] F2FS-fs (loop5): invalid namelen(0), ino:0, run fsck to fix. [ 148.390411][ T5825] F2FS-fs (loop5): invalid namelen(0), ino:0, run fsck to fix. [ 148.398001][ T5825] F2FS-fs (loop5): invalid namelen(0), ino:0, run fsck to fix. [ 148.411054][ T6621] XFS (loop0): Ending clean mount [ 148.424444][ T6621] XFS (loop0): Quotacheck needed: Please wait. [ 148.433630][ T5825] F2FS-fs (loop5): invalid namelen(0), ino:0, run fsck to fix. [ 148.445511][ T5844] Bluetooth: hci2: command tx timeout [ 148.468695][ T5825] F2FS-fs (loop5): invalid namelen(0), ino:0, run fsck to fix. [ 148.506100][ T5825] F2FS-fs (loop5): invalid namelen(0), ino:0, run fsck to fix. [ 148.518436][ T6621] XFS (loop0): Quotacheck: Done. [ 148.540125][ T5825] F2FS-fs (loop5): invalid namelen(0), ino:0, run fsck to fix. [ 148.743521][ T6504] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 148.792461][ T6504] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 148.864344][ T6504] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 148.880965][ T5827] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 148.898381][ T6504] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 149.120118][ T6504] 8021q: adding VLAN 0 to HW filter on device bond0 [ 149.174689][ T6504] 8021q: adding VLAN 0 to HW filter on device team0 [ 149.212725][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.219907][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 149.261820][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 149.268967][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 149.319841][ T24] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 149.499765][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 149.517962][ T24] usb 4-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 149.527488][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.556969][ T24] usb 4-1: Product: syz [ 149.569731][ T24] usb 4-1: Manufacturer: syz [ 149.579926][ T24] usb 4-1: SerialNumber: syz [ 149.604159][ T24] usb 4-1: config 0 descriptor?? [ 149.632419][ T24] ssu100 4-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 149.995780][ T6504] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 150.764654][ T6504] veth0_vlan: entered promiscuous mode [ 150.840114][ T6504] veth1_vlan: entered promiscuous mode [ 150.887348][ T24] ssu100 4-1:0.0: probe with driver ssu100 failed with error -71 [ 150.899056][ T24] usb 4-1: USB disconnect, device number 5 [ 150.974300][ T6504] veth0_macvtap: entered promiscuous mode [ 151.019656][ T6504] veth1_macvtap: entered promiscuous mode [ 151.085658][ T6504] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 151.135084][ T6504] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 151.229180][ T3015] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.281489][ T3015] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.304244][ T3015] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.335918][ T3015] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.685622][ T1319] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 151.731422][ T1319] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 151.832649][ T6715] loop1: detected capacity change from 0 to 32768 [ 151.857002][ T6715] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 151.866043][ T6715] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 151.916581][ T77] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 151.940098][ T77] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 151.954760][ T6715] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms [ 151.965548][ T5930] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 151.981680][ T5930] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 152.115362][ T5930] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 133ms [ 152.133549][ T5930] gfs2: fsid=syz:syz.0: jid=0: Done [ 152.146343][ T6715] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 152.222599][ T6733] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 152.536635][ T6740] process 'syz.6.249' launched './file1' with NULL argv: empty string added [ 152.835982][ T5929] libceph: connect (1)[c::]:6789 error -101 [ 152.843372][ T5929] libceph: mon0 (1)[c::]:6789 connect error [ 152.846273][ T6751] netlink: 212 bytes leftover after parsing attributes in process `syz.6.255'. [ 152.879549][ T5929] libceph: connect (1)[c::]:6789 error -101 [ 152.885662][ T5929] libceph: mon0 (1)[c::]:6789 connect error [ 153.002323][ T5908] libceph: connect (1)[c::]:6789 error -101 [ 153.008440][ T5908] libceph: mon0 (1)[c::]:6789 connect error [ 153.040416][ T6757] loop4: detected capacity change from 0 to 128 [ 153.059543][ T6757] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 153.072313][ T6757] ext4 filesystem being mounted at /41/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 153.161992][ T24] libceph: connect (1)[c::]:6789 error -101 [ 153.168145][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 153.247656][ T6751] netdevsim netdevsim6 netdevsim0: entered promiscuous mode [ 153.281807][ T5908] libceph: connect (1)[c::]:6789 error -101 [ 153.288026][ T5908] libceph: mon0 (1)[c::]:6789 connect error [ 153.324696][ T5824] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 153.537230][ T6767] loop0: detected capacity change from 0 to 2048 [ 153.596174][ T6767] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 153.616064][ T6753] ceph: No mds server is up or the cluster is laggy [ 153.616068][ T6748] ceph: No mds server is up or the cluster is laggy [ 153.680338][ T5929] libceph: connect (1)[c::]:6789 error -101 [ 153.692962][ T5929] libceph: mon0 (1)[c::]:6789 connect error [ 154.081877][ T6780] netlink: 4 bytes leftover after parsing attributes in process `syz.4.265'. [ 154.310098][ T5930] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 154.489899][ T5930] usb 1-1: Using ep0 maxpacket: 16 [ 154.497464][ T5930] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 154.519547][ T5930] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 154.540292][ T6794] Illegal XDP return value 86 on prog (id 51) dev syz_tun, expect packet loss! [ 154.561875][ T5930] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 154.585074][ T5930] usb 1-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 154.615902][ T5930] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.670988][ T5930] usb 1-1: config 0 descriptor?? [ 155.124499][ T5930] shield 0003:0955:7214.0003: unknown main item tag 0x0 [ 155.142047][ T5930] shield 0003:0955:7214.0003: unknown main item tag 0x0 [ 155.149066][ T5930] shield 0003:0955:7214.0003: unknown main item tag 0x0 [ 155.164147][ T5930] shield 0003:0955:7214.0003: unknown main item tag 0x0 [ 155.179672][ T5930] shield 0003:0955:7214.0003: unknown main item tag 0x0 [ 155.207942][ T5930] input: HID 0955:7214 Haptics as /devices/virtual/input/input6 [ 155.292292][ T5930] shield 0003:0955:7214.0003: Registered Thunderstrike controller [ 155.302860][ T5930] shield 0003:0955:7214.0003: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.0-1/input0 [ 155.322368][ T6781] netlink: 'syz.0.263': attribute type 2 has an invalid length. [ 155.341824][ T6781] netlink: 228 bytes leftover after parsing attributes in process `syz.0.263'. [ 155.432134][ T24] shield 0003:0955:7214.0003: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 155.445106][ T5930] usb 1-1: USB disconnect, device number 4 [ 155.469767][ T24] shield 0003:0955:7214.0003: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 155.511466][ T24] shield 0003:0955:7214.0003: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 155.576950][ T24] shield 0003:0955:7214.0003: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 155.936870][ T6802] loop3: detected capacity change from 0 to 32768 [ 156.029623][ T6802] ocfs2: Mounting device (7,3) on (node local, slot 0) with writeback data mode. [ 156.120522][ T30] audit: type=1800 audit(1759942494.872:27): pid=6802 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.273" name="file1" dev="loop3" ino=17058 res=0 errno=0 [ 156.160119][ T6821] netlink: 4 bytes leftover after parsing attributes in process `syz.6.280'. [ 156.337691][ T5828] ocfs2: Unmounting device (7,3) on (node local) [ 156.401643][ T6826] loop5: detected capacity change from 0 to 256 [ 156.485690][ T6826] exFAT-fs (loop5): bogus allocation bitmap size(need : 2, cur : 256) [ 156.667613][ T6832] netlink: 8 bytes leftover after parsing attributes in process `syz.6.286'. [ 157.012511][ T6842] Bluetooth: hci0: Opcode 0x0401 failed: -112 [ 157.026140][ T6852] netlink: 276 bytes leftover after parsing attributes in process `syz.5.293'. [ 157.053547][ T6852] netlink: 276 bytes leftover after parsing attributes in process `syz.5.293'. [ 157.114522][ T77] nci: nci_rsp_packet: unknown rsp opcode 0xd [ 157.310018][ T6862] loop5: detected capacity change from 0 to 1024 [ 157.396839][ T6862] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 157.409237][ T5929] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 157.534533][ T6862] EXT4-fs error (device loop5): mb_free_blocks:2014: group 0, inode 15: block 177:freeing already freed block (bit 11); block bitmap corrupt. [ 157.584300][ T5929] usb 2-1: Using ep0 maxpacket: 16 [ 157.632102][ T5929] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 157.659697][ T5929] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 157.669466][ T5929] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 157.690820][ T5929] usb 2-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 157.729683][ T5929] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.781501][ T5929] usb 2-1: config 0 descriptor?? [ 157.798523][ T5825] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.048522][ T6884] loop5: detected capacity change from 0 to 256 [ 158.230942][ T5929] shield 0003:0955:7214.0004: unknown main item tag 0x0 [ 158.261113][ T5929] shield 0003:0955:7214.0004: unknown main item tag 0x0 [ 158.278320][ T5929] shield 0003:0955:7214.0004: unknown main item tag 0x0 [ 158.302174][ T5929] shield 0003:0955:7214.0004: unknown main item tag 0x0 [ 158.316460][ T6889] loop6: detected capacity change from 0 to 64 [ 158.323329][ T5929] shield 0003:0955:7214.0004: unknown main item tag 0x0 [ 158.360341][ T5929] input: HID 0955:7214 Haptics as /devices/virtual/input/input7 [ 158.418732][ T6859] netlink: 'syz.1.295': attribute type 2 has an invalid length. [ 158.445841][ T6859] netlink: 228 bytes leftover after parsing attributes in process `syz.1.295'. [ 158.472438][ T5929] shield 0003:0955:7214.0004: Registered Thunderstrike controller [ 158.499915][ T5929] shield 0003:0955:7214.0004: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.1-1/input0 [ 158.569728][ T6889] loop6: detected capacity change from 64 to 7 [ 158.580114][ T6895] Unable to read inode block [ 158.592950][ T6895] Unable to read inode block [ 158.593512][ T5929] usb 2-1: USB disconnect, device number 2 [ 158.607072][ T24] shield 0003:0955:7214.0004: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 158.639386][ T24] shield 0003:0955:7214.0004: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 158.668565][ T24] shield 0003:0955:7214.0004: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 158.690853][ T24] shield 0003:0955:7214.0004: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 158.766720][ T6504] syz-executor: attempt to access beyond end of device [ 158.766720][ T6504] loop6: rw=2049, sector=12, nr_sectors = 2 limit=7 [ 158.799735][ T5908] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 158.975876][ T5908] usb 6-1: config 0 has an invalid interface number: 111 but max is 0 [ 158.995972][ T5908] usb 6-1: config 0 has no interface number 0 [ 159.002515][ T5143] Bluetooth: hci0: command 0x0401 tx timeout [ 159.006109][ T5908] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 159.019647][ T5844] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 159.026433][ T5908] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.041291][ T5908] usb 6-1: config 0 descriptor?? [ 159.059153][ T5908] cp210x 6-1:0.111: cp210x converter detected [ 159.158644][ T3015] Unable to read inode block [ 159.158842][ T3015] Unable to read inode block [ 159.355112][ T77] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.451790][ T77] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.489003][ T5908] cp210x 6-1:0.111: failed to get vendor val 0x000e size 3: -32 [ 159.567165][ T6893] loop0: detected capacity change from 0 to 40427 [ 159.577468][ T77] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.580767][ T6893] F2FS-fs (loop0): Wrong segment_count / block_count (31 > 0) [ 159.580802][ T6893] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 159.596016][ T6893] F2FS-fs (loop0): invalid crc value [ 159.652692][ T77] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.696663][ T5908] cp210x 6-1:0.111: GPIO initialisation failed: -19 [ 159.709969][ T5908] usb 6-1: cp210x converter now attached to ttyUSB0 [ 159.868563][ T6893] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 159.904038][ T6893] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0 [ 159.931471][ T6893] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 159.946438][ T24] usb 6-1: USB disconnect, device number 5 [ 159.950687][ T24] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 159.951117][ T24] cp210x 6-1:0.111: device disconnected [ 160.066980][ T6893] syz.0.309: attempt to access beyond end of device [ 160.066980][ T6893] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 160.113134][ T77] bridge_slave_1: left allmulticast mode [ 160.118803][ T77] bridge_slave_1: left promiscuous mode [ 160.143092][ T77] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.161413][ T6893] syz.0.309: attempt to access beyond end of device [ 160.161413][ T6893] loop0: rw=2049, sector=45136, nr_sectors = 8 limit=40427 [ 160.190856][ T77] bridge_slave_0: left allmulticast mode [ 160.196512][ T77] bridge_slave_0: left promiscuous mode [ 160.212776][ T77] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.213805][ T6918] loop1: detected capacity change from 0 to 1024 [ 160.231727][ T6893] syz.0.309: attempt to access beyond end of device [ 160.231727][ T6893] loop0: rw=2049, sector=45160, nr_sectors = 16 limit=40427 [ 160.310371][ T6893] syz.0.309: attempt to access beyond end of device [ 160.310371][ T6893] loop0: rw=2049, sector=45208, nr_sectors = 32 limit=40427 [ 160.393732][ T6893] syz.0.309: attempt to access beyond end of device [ 160.393732][ T6893] loop0: rw=2049, sector=45264, nr_sectors = 8 limit=40427 [ 160.463722][ T6915] syz.0.309: attempt to access beyond end of device [ 160.463722][ T6915] loop0: rw=2049, sector=45304, nr_sectors = 8 limit=40427 [ 160.543386][ T6915] syz.0.309: attempt to access beyond end of device [ 160.543386][ T6915] loop0: rw=2049, sector=45344, nr_sectors = 16 limit=40427 [ 160.620075][ T6915] CPU: 1 UID: 0 PID: 6915 Comm: syz.0.309 Not tainted syzkaller #0 PREEMPT(full) [ 160.620123][ T6915] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 160.620145][ T6915] Call Trace: [ 160.620156][ T6915] [ 160.620169][ T6915] dump_stack_lvl+0x16c/0x1f0 [ 160.620222][ T6915] f2fs_handle_critical_error+0x624/0x9f0 [ 160.620286][ T6915] ? srso_alias_return_thunk+0x5/0xfbef5 [ 160.620330][ T6915] ? f2fs_build_fault_attr+0x53/0x1f0 [ 160.620393][ T6915] f2fs_write_end_io+0x958/0xcf0 [ 160.620435][ T6915] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 160.620479][ T6915] ? srso_alias_return_thunk+0x5/0xfbef5 [ 160.620532][ T6915] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 160.620568][ T6915] bio_endio+0x713/0x860 [ 160.620617][ T6915] submit_bio_noacct+0x306/0x1f60 [ 160.620688][ T6915] __submit_merged_bio+0x33c/0x770 [ 160.620732][ T6915] __submit_merged_write_cond+0x319/0x3f0 [ 160.620785][ T6915] f2fs_write_cache_pages+0x2067/0x2570 [ 160.620860][ T6915] ? __pfx_f2fs_write_cache_pages+0x10/0x10 [ 160.620913][ T6915] ? srso_alias_return_thunk+0x5/0xfbef5 [ 160.620956][ T6915] ? srso_alias_return_thunk+0x5/0xfbef5 [ 160.621028][ T6915] ? srso_alias_return_thunk+0x5/0xfbef5 [ 160.621098][ T6915] ? __pfx_css_rstat_updated+0x10/0x10 [ 160.621197][ T6915] ? srso_alias_return_thunk+0x5/0xfbef5 [ 160.621247][ T6915] ? srso_alias_return_thunk+0x5/0xfbef5 [ 160.621298][ T6915] f2fs_write_data_pages+0x4ad/0xd90 [ 160.621351][ T6915] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 160.621412][ T6915] ? srso_alias_return_thunk+0x5/0xfbef5 [ 160.621456][ T6915] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 160.621504][ T6915] do_writepages+0x27a/0x600 [ 160.621546][ T6915] ? __pfx_do_writepages+0x10/0x10 [ 160.621579][ T6915] ? do_raw_spin_unlock+0x172/0x230 [ 160.621621][ T6915] ? srso_alias_return_thunk+0x5/0xfbef5 [ 160.621663][ T6915] ? _raw_spin_unlock+0x28/0x50 [ 160.621704][ T6915] filemap_fdatawrite_wbc+0x104/0x160 [ 160.621743][ T6915] __filemap_fdatawrite_range+0xb9/0x100 [ 160.621792][ T6915] ? __pfx___filemap_fdatawrite_range+0x10/0x10 [ 160.621839][ T6915] ? srso_alias_return_thunk+0x5/0xfbef5 [ 160.621882][ T6915] ? do_raw_spin_lock+0x12c/0x2b0 [ 160.621975][ T6915] ? find_held_lock+0x2b/0x80 [ 160.622023][ T6915] ? srso_alias_return_thunk+0x5/0xfbef5 [ 160.622066][ T6915] ? do_raw_spin_unlock+0x172/0x230 [ 160.622108][ T6915] ? srso_alias_return_thunk+0x5/0xfbef5 [ 160.622157][ T6915] f2fs_sync_dirty_inodes+0x2a2/0x980 [ 160.622229][ T6915] block_operations+0x2b0/0xfe0 [ 160.622288][ T6915] ? __pfx_block_operations+0x10/0x10 [ 160.622333][ T6915] ? srso_alias_return_thunk+0x5/0xfbef5 [ 160.622431][ T6915] ? srso_alias_return_thunk+0x5/0xfbef5 [ 160.622477][ T6915] ? ktime_get+0x200/0x310 [ 160.622529][ T6915] ? srso_alias_return_thunk+0x5/0xfbef5 [ 160.622571][ T6915] ? lockdep_hardirqs_on+0x7c/0x110 [ 160.622613][ T6915] ? srso_alias_return_thunk+0x5/0xfbef5 [ 160.622655][ T6915] ? rcu_is_watching+0x12/0xc0 [ 160.622708][ T6915] f2fs_write_checkpoint+0x32b/0x5300 [ 160.622761][ T6915] ? srso_alias_return_thunk+0x5/0xfbef5 [ 160.622807][ T6915] ? srso_alias_return_thunk+0x5/0xfbef5 [ 160.622850][ T6915] ? down_write+0x14d/0x200 [ 160.622895][ T6915] ? __pfx_down_write+0x10/0x10 [ 160.622940][ T6915] ? look_up_lock_class+0x6b/0x150 [ 160.622982][ T6915] ? srso_alias_return_thunk+0x5/0xfbef5 [ 160.623025][ T6915] ? register_lock_class+0x41/0x4c0 [ 160.623066][ T6915] f2fs_issue_checkpoint+0x17b/0x5a0 [ 160.623119][ T6915] ? __pfx_f2fs_issue_checkpoint+0x10/0x10 [ 160.623160][ T6915] ? __lock_acquire+0xb97/0x1ce0 [ 160.623242][ T6915] ? down_read+0x13d/0x480 [ 160.623278][ T6915] ? __pfx___up_read+0x10/0x10 [ 160.623313][ T6915] f2fs_sync_fs+0x22b/0x400 [ 160.623352][ T6915] f2fs_do_sync_file+0xc5d/0x1c50 [ 160.623406][ T6915] ? __pfx_f2fs_do_sync_file+0x10/0x10 [ 160.623451][ T6915] ? srso_alias_return_thunk+0x5/0xfbef5 [ 160.623526][ T6915] ? srso_alias_return_thunk+0x5/0xfbef5 [ 160.623558][ T6915] ? find_held_lock+0x2b/0x80 [ 160.623593][ T6915] ? srso_alias_return_thunk+0x5/0xfbef5 [ 160.623634][ T6915] f2fs_sync_file+0x13a/0x1a0 [ 160.623661][ T6915] ? __pfx_f2fs_sync_file+0x10/0x10 [ 160.623684][ T6915] vfs_fsync_range+0x139/0x220 [ 160.623733][ T6915] do_fsync+0x4b/0xa0 [ 160.623775][ T6915] __x64_sys_fsync+0x32/0x50 [ 160.623799][ T6915] do_syscall_64+0xcd/0xfa0 [ 160.623833][ T6915] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.623860][ T6915] RIP: 0033:0x7f90dd18eec9 [ 160.623882][ T6915] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 160.623908][ T6915] RSP: 002b:00007f90db3f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000004a [ 160.623933][ T6915] RAX: ffffffffffffffda RBX: 00007f90dd3e6090 RCX: 00007f90dd18eec9 [ 160.623951][ T6915] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 160.623967][ T6915] RBP: 00007f90dd211f91 R08: 0000000000000000 R09: 0000000000000000 [ 160.623983][ T6915] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 160.623999][ T6915] R13: 00007f90dd3e6128 R14: 00007f90dd3e6090 R15: 00007ffd9fcf6388 [ 160.624037][ T6915] [ 160.624763][ T6915] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 161.089126][ T5844] Bluetooth: hci0: command 0x0401 tx timeout [ 161.265327][ T5143] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 161.280084][ T5143] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 161.289080][ T5143] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 161.308724][ T5143] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 161.324845][ T5143] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 161.800292][ T77] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 161.821895][ T77] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 161.867565][ T77] bond0 (unregistering): Released all slaves [ 162.196150][ T30] audit: type=1326 audit(1759942500.962:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6935 comm="syz.5.328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4edf8eec9 code=0x7ffc0000 [ 162.283429][ T30] audit: type=1326 audit(1759942500.962:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6935 comm="syz.5.328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4edf8eec9 code=0x7ffc0000 [ 162.355149][ T30] audit: type=1326 audit(1759942501.002:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6935 comm="syz.5.328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd4edf8eec9 code=0x7ffc0000 [ 162.438267][ T30] audit: type=1326 audit(1759942501.002:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6935 comm="syz.5.328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4edf8eec9 code=0x7ffc0000 [ 162.514720][ T30] audit: type=1326 audit(1759942501.002:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6935 comm="syz.5.328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4edf8eec9 code=0x7ffc0000 [ 162.606443][ T30] audit: type=1326 audit(1759942501.022:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6935 comm="syz.5.328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd4edf8eec9 code=0x7ffc0000 [ 162.695074][ T30] audit: type=1326 audit(1759942501.022:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6935 comm="syz.5.328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4edf8eec9 code=0x7ffc0000 [ 162.769438][ T30] audit: type=1326 audit(1759942501.032:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6935 comm="syz.5.328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4edf8eec9 code=0x7ffc0000 [ 162.866948][ T30] audit: type=1326 audit(1759942501.032:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6935 comm="syz.5.328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd4edf8eec9 code=0x7ffc0000 [ 162.954455][ T30] audit: type=1326 audit(1759942501.042:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6935 comm="syz.5.328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4edf8eec9 code=0x7ffc0000 [ 163.048470][ T6949] loop3: detected capacity change from 0 to 256 [ 163.156739][ T77] hsr_slave_0: left promiscuous mode [ 163.200327][ T77] hsr_slave_1: left promiscuous mode [ 163.206450][ T77] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 163.294238][ T77] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 163.380665][ T77] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 163.388077][ T77] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 163.439697][ T5143] Bluetooth: hci2: command tx timeout [ 163.538979][ T77] veth1_macvtap: left promiscuous mode [ 163.557929][ T77] veth0_macvtap: left promiscuous mode [ 163.563915][ T77] veth1_vlan: left promiscuous mode [ 163.569341][ T77] veth0_vlan: left promiscuous mode [ 164.213841][ T6945] loop4: detected capacity change from 0 to 32768 [ 164.273948][ T6945] [ 164.273948][ T6945] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 164.273948][ T6945] [ 164.328732][ T6945] ERROR: (device loop4): diWrite: ixpxd invalid [ 164.328732][ T6945] [ 164.375654][ T6969] txLock: trying to lock locked page! [ 164.375703][ T6969] ip: ffff88807bba28d0: 00088000 00000000 00000000 00000020 [ 164.388651][ T6969] ip: ffff88807bba28e0: ffffffff ffffffff ffffffff ffffffff [ 164.396014][ T6969] ip: ffff88807bba28f0: 8b9fe480 ffffffff 2542e000 ffff8880 [ 164.403397][ T6969] ip: ffff88807bba2900: 7bba2af0 ffff8880 275d78c0 ffff8880 [ 164.411095][ T6969] ip: ffff88807bba2910: 00000010 00000000 00000001 00000000 [ 164.418527][ T6969] ip: ffff88807bba2920: 00002000 00000000 637cf1f0 00000000 [ 164.425886][ T6969] ip: ffff88807bba2930: 637cf1f0 00000000 637cf1f0 00000000 [ 164.433410][ T6969] ip: ffff88807bba2940: 00000000 00000000 00000000 00000001 [ 164.441466][ T6969] ip: ffff88807bba2950: 00000000 dead4ead ffffffff 00000000 [ 164.448769][ T6969] ip: ffff88807bba2960: ffffffff ffffffff 8e9a8888 ffffffff [ 164.456782][ T6969] ip: ffff88807bba2970: 95b3ce38 ffffffff 00000000 00000000 [ 164.464190][ T6969] ip: ffff88807bba2980: 8b9fd800 ffffffff 00000300 00000000 [ 164.471685][ T6969] ip: ffff88807bba2990: 000c0000 00000000 00000010 00000000 [ 164.478988][ T6969] ip: ffff88807bba29a0: 00000040 00000000 00000000 00000000 [ 164.486336][ T6969] ip: ffff88807bba29b0: 00000000 00000000 00000000 00000000 [ 164.493698][ T6969] ip: ffff88807bba29c0: 00000000 dead4ead ffffffff 00000000 [ 164.501037][ T6969] ip: ffff88807bba29d0: ffffffff ffffffff 93aac4c0 ffffffff [ 164.508333][ T6969] ip: ffff88807bba29e0: 00000000 00000000 00000000 00000000 [ 164.515716][ T6969] ip: ffff88807bba29f0: 8b8d7f40 ffffffff 00000200 00000000 [ 164.523066][ T6969] ip: ffff88807bba2a00: 7bba2a00 ffff8880 7bba2a00 ffff8880 [ 164.530392][ T6969] ip: ffff88807bba2a10: 7bba29a8 ffff8880 8e9a8898 ffffffff [ 164.537685][ T6969] ip: ffff88807bba2a20: 00000000 00000000 00000000 00000000 [ 164.545802][ T6969] ip: ffff88807bba2a30: 8b9fd880 ffffffff 00000400 00000000 [ 164.553813][ T6969] ip: ffff88807bba2a40: ffffca94 00000000 00000000 00000000 [ 164.561763][ T6969] ip: ffff88807bba2a50: 00000000 00000000 7bba2a50 ffff8880 [ 164.569337][ T6969] ip: ffff88807bba2a60: 240e6f70 ffff8880 7bba3388 ffff8880 [ 164.576704][ T6969] ip: ffff88807bba2a70: 42f52068 ffff8881 00000000 00000000 [ 164.584087][ T6969] ip: ffff88807bba2a80: 7bba2a80 ffff8880 7bba2a80 ffff8880 [ 164.591387][ T6969] ip: ffff88807bba2a90: 7bba2168 ffff8880 7bba33b8 ffff8880 [ 164.598660][ T6969] ip: ffff88807bba2aa0: 7bba2aa0 ffff8880 7bba2aa0 ffff8880 [ 164.605993][ T6969] ip: ffff88807bba2ab0: 00000000 00000000 00000000 00000000 [ 164.613298][ T6969] ip: ffff88807bba2ac0: 00000000 00000000 00000000 00000000 [ 164.620613][ T6969] ip: ffff88807bba2ad0: 00000001 00000000 00000000 00000000 [ 164.627885][ T6969] ip: ffff88807bba2ae0: 8b9fe320 ffffffff 00000000 00000000 [ 164.635192][ T6969] ip: ffff88807bba2af0: 7bba28d0 ffff8880 00000000 dead4ead [ 164.642515][ T6969] ip: ffff88807bba2b00: ffffffff 00000000 ffffffff ffffffff [ 164.650608][ T6969] ip: ffff88807bba2b10: 9ab6bf40 ffffffff 95ad1840 ffffffff [ 164.657897][ T6969] ip: ffff88807bba2b20: 00000000 00000000 8b9fd6c0 ffffffff [ 164.665677][ T6969] ip: ffff88807bba2b30: 00000300 00000000 04000021 00000000 [ 164.673048][ T6969] ip: ffff88807bba2b40: 52ab6102 ffff8880 00000000 00000000 [ 164.680357][ T6969] ip: ffff88807bba2b50: 00000000 00000000 00000000 00000000 [ 164.687636][ T6969] ip: ffff88807bba2b60: 00000000 dead4ead ffffffff 00000000 [ 164.694935][ T6969] ip: ffff88807bba2b70: ffffffff ffffffff 93aac4c0 ffffffff [ 164.702253][ T6969] ip: ffff88807bba2b80: 00000000 00000000 00000000 00000000 [ 164.709526][ T6969] ip: ffff88807bba2b90: 8b8d7f40 ffffffff 00000200 00000000 [ 164.716818][ T6969] ip: ffff88807bba2ba0: 7bba2ba0 ffff8880 7bba2ba0 ffff8880 [ 164.724122][ T6969] ip: ffff88807bba2bb0: 7bba2b48 ffff8880 8e9a88a8 ffffffff [ 164.731425][ T6969] ip: ffff88807bba2bc0: 00000000 00000000 00000000 00000000 [ 164.738697][ T6969] ip: ffff88807bba2bd0: 8b9fd900 ffffffff 00000400 00000000 [ 164.746010][ T6969] ip: ffff88807bba2be0: 00000c40 00000000 00000000 00000000 [ 164.753890][ T6969] ip: ffff88807bba2bf0: 00000000 00000000 00000000 00000000 [ 164.762390][ T6969] ip: ffff88807bba2c00: 00000002 00000000 00000000 00000000 [ 164.769770][ T6969] ip: ffff88807bba2c10: 8bcea3c0 ffffffff 00000000 00000000 [ 164.777343][ T6969] ip: ffff88807bba2c20: 00000000 00000000 00000000 dead4ead [ 164.784671][ T6969] ip: ffff88807bba2c30: ffffffff 00000000 ffffffff ffffffff [ 164.791968][ T6969] ip: ffff88807bba2c40: 9ab6bf80 ffffffff 00000000 00000000 [ 164.799266][ T6969] ip: ffff88807bba2c50: 00000000 00000000 8b9fd740 ffffffff [ 164.806589][ T6969] ip: ffff88807bba2c60: 00000300 00000000 7bba2c68 ffff8880 [ 164.813886][ T6969] ip: ffff88807bba2c70: 7bba2c68 ffff8880 00000000 00000000 [ 164.821288][ T6969] ip: ffff88807bba2c80: 00000000 00000000 00000000 00000000 [ 164.828571][ T6969] ip: ffff88807bba2c90: 00000000 dead4ead ffffffff 00000000 [ 164.835864][ T6969] ip: ffff88807bba2ca0: ffffffff ffffffff 93aac4c0 ffffffff [ 164.843252][ T6969] ip: ffff88807bba2cb0: 00000000 00000000 00000000 00000000 [ 164.851282][ T6969] ip: ffff88807bba2cc0: 8b8d7f40 ffffffff 00000200 00000000 [ 164.858564][ T6969] ip: ffff88807bba2cd0: 7bba2cd0 ffff8880 7bba2cd0 ffff8880 [ 164.866356][ T6969] ip: ffff88807bba2ce0: 7bba2c78 ffff8880 9ab6bfc0 ffffffff [ 164.873653][ T6969] ip: ffff88807bba2cf0: 00000000 00000000 00000000 00000000 [ 164.880977][ T6969] ip: ffff88807bba2d00: 8b9fd700 ffffffff 00000400 00000000 [ 164.888250][ T6969] ip: ffff88807bba2d10: 00000000 00000000 7bba2d18 ffff8880 [ 164.895550][ T6969] ip: ffff88807bba2d20: 7bba2d18 ffff8880 00000000 00000000 [ 164.902851][ T6969] ip: ffff88807bba2d30: 00000000 00000000 00000000 00000000 [ 164.910156][ T6969] ip: ffff88807bba2d40: 00000000 00000000 [ 164.915870][ T6969] mp: ffff88803130ec98: 00001000 00000000 00000000 00000000 [ 164.923204][ T6969] mp: ffff88803130eca8: 00000000 00000000 00000000 00000000 [ 164.930517][ T6969] mp: ffff88803130ecb8: 00000005 00000000 00000001 00000000 [ 164.937792][ T6969] mp: ffff88803130ecc8: 7da46000 ffff8880 0000001c 00000000 [ 164.945115][ T6969] mp: ffff88803130ecd8: 00000000 dead4ead ffffffff 00000000 [ 164.953190][ T6969] mp: ffff88803130ece8: ffffffff ffffffff 9ac39280 ffffffff [ 164.961097][ T6969] mp: ffff88803130ecf8: 95b3c668 ffffffff 00000000 00000000 [ 164.968382][ T6969] mp: ffff88803130ed08: 8bcea2e0 ffffffff 00000300 00000000 [ 164.975728][ T6969] mp: ffff88803130ed18: 3130ed18 ffff8880 3130ed18 ffff8880 [ 164.983041][ T6969] mp: ffff88803130ed28: 01f69180 ffffea00 2542e000 ffff8880 [ 164.990340][ T6969] mp: ffff88803130ed38: 00001000 00000000 00000001 00000000 [ 164.997613][ T6969] mp: ffff88803130ed48: 00000000 00000000 [ 165.003392][ T6969] Locker's tblock: ffffc900026c9110: 00000001 00000000 00000000 00000000 [ 165.011818][ T6969] Locker's tblock: ffffc900026c9120: 00000100 dead0000 00000122 dead0000 [ 165.020262][ T6969] Locker's tblock: ffffc900026c9130: 2542e000 ffff8880 00000000 00000000 [ 165.028670][ T6969] Locker's tblock: ffffc900026c9140: 00000000 dead4ead ffffffff 00000000 [ 165.037133][ T6969] Locker's tblock: ffffc900026c9150: ffffffff ffffffff 9ac396c0 ffffffff [ 165.045574][ T6969] Locker's tblock: ffffc900026c9160: 95b3ddd8 ffffffff 00000000 00000000 [ 165.054013][ T6969] Locker's tblock: ffffc900026c9170: 8bcebc00 ffffffff 00000300 00000000 [ 165.063065][ T6969] Locker's tblock: ffffc900026c9180: 026c9180 ffffc900 026c9180 ffffc900 [ 165.071966][ T6969] Locker's tblock: ffffc900026c9190: 00000002 00000000 00000100 dead0000 [ 165.080406][ T6969] Locker's tblock: ffffc900026c91a0: 00000122 dead0000 0000420c 00000000 [ 165.088808][ T6969] Locker's tblock: ffffc900026c91b0: 34088000 ffff8880 00000004 0000020c [ 165.097266][ T6969] Locker's tblock: ffffc900026c91c0: 00000000 dead4ead ffffffff 00000000 [ 165.105705][ T6969] Locker's tblock: ffffc900026c91d0: ffffffff ffffffff 9ac39700 ffffffff [ 165.114140][ T6969] Locker's tblock: ffffc900026c91e0: 95b3e288 ffffffff 00000000 00000000 [ 165.122593][ T6969] Locker's tblock: ffffc900026c91f0: 8bcebbc0 ffffffff 00000300 00000000 [ 165.131028][ T6969] Locker's tblock: ffffc900026c9200: 026c9200 ffffc900 026c9200 ffffc900 [ 165.139451][ T6969] Locker's tblock: ffffc900026c9210: 7bba4448 ffff8880 00000000 00000000 [ 165.147890][ T6969] Tlock: ffffc900028ea1f8: 00030000 80018000 3130ec98 ffff8880 [ 165.155462][ T6969] Tlock: ffffc900028ea208: 7bba28d0 ffff8880 01140000 07002000 [ 165.163783][ T6969] Tlock: ffffc900028ea218: 0110011c 00000108 00000000 00000000 [ 165.171817][ T6969] Tlock: ffffc900028ea228: 00000000 00000000 00000000 00000000 [ 165.179354][ T6969] Tlock: ffffc900028ea238: 00000000 00000000 [ 165.185798][ T6969] ------------[ cut here ]------------ [ 165.191259][ T6969] kernel BUG at fs/jfs/jfs_txnmgr.c:835! [ 165.196888][ T6969] Oops: invalid opcode: 0000 [#1] SMP KASAN NOPTI [ 165.203290][ T6969] CPU: 1 UID: 0 PID: 6969 Comm: syz.4.331 Not tainted syzkaller #0 PREEMPT(full) [ 165.212476][ T6969] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 165.222516][ T6969] RIP: 0010:txLock+0x1b33/0x1cb0 [ 165.227447][ T6969] Code: 89 e9 41 b8 04 00 00 00 b9 10 00 00 00 6a 00 ba 01 00 00 00 48 c7 c6 c0 c3 ce 8b 48 c7 c7 00 c3 ce 8b 6a 48 e8 de 80 59 01 90 <0f> 0b e8 36 de d3 fe e9 e9 e6 ff ff e8 5c de d3 fe e9 d5 e7 ff ff [ 165.247042][ T6969] RSP: 0018:ffffc9000a9b7870 EFLAGS: 00010282 [ 165.253098][ T6969] RAX: 0000000000000000 RBX: ffffffff8e9a87a0 RCX: ffffc9000cccf000 [ 165.261057][ T6969] RDX: fffff52001536ee3 RSI: ffffffff84a98a92 RDI: 0000000000000006 [ 165.269014][ T6969] RBP: ffff88807bba28d0 R08: 0000000000000006 R09: 0000000000000050 [ 165.276969][ T6969] R10: 0000000000000048 R11: 0000000000000000 R12: 0000000000000007 [ 165.284929][ T6969] R13: ffffc900028ea1f8 R14: 0000000000000002 R15: ffff88803130ec98 [ 165.292888][ T6969] FS: 00007fc3f66b06c0(0000) GS:ffff888124ae0000(0000) knlGS:0000000000000000 [ 165.301806][ T6969] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 165.308374][ T6969] CR2: 00007fc3f66aff98 CR3: 000000007ee6c000 CR4: 0000000000350ef0 [ 165.316332][ T6969] Call Trace: [ 165.319595][ T6969] [ 165.322525][ T6969] ? __pfx_txLock+0x10/0x10 [ 165.327021][ T6969] ? do_read_cache_folio+0xd2/0x5c0 [ 165.332226][ T6969] ? __pfx_metapage_read_folio+0x10/0x10 [ 165.337863][ T6969] ? srso_alias_return_thunk+0x5/0xfbef5 [ 165.343491][ T6969] ? srso_alias_return_thunk+0x5/0xfbef5 [ 165.349122][ T6969] ? folio_unlock+0x7d/0xd0 [ 165.353617][ T6969] ? srso_alias_return_thunk+0x5/0xfbef5 [ 165.359264][ T6969] ? __get_metapage+0x43a/0x1080 [ 165.364210][ T6969] diWrite+0x349/0x1ba0 [ 165.368363][ T6969] ? __pfx___might_resched+0x10/0x10 [ 165.373650][ T6969] txCommit+0x6d5/0x4d40 [ 165.377891][ T6969] ? srso_alias_return_thunk+0x5/0xfbef5 [ 165.383519][ T6969] ? _raw_spin_unlock+0x28/0x50 [ 165.388359][ T6969] ? srso_alias_return_thunk+0x5/0xfbef5 [ 165.393989][ T6969] ? __pfx_txCommit+0x10/0x10 [ 165.398663][ T6969] ? srso_alias_return_thunk+0x5/0xfbef5 [ 165.404300][ T6969] jfs_commit_inode+0x450/0x570 [ 165.409245][ T6969] ? __pfx_jfs_commit_inode+0x10/0x10 [ 165.414622][ T6969] jfs_fsync+0x12a/0x210 [ 165.418866][ T6969] ? __pfx_jfs_fsync+0x10/0x10 [ 165.423627][ T6969] vfs_fsync_range+0x139/0x220 [ 165.428435][ T6969] generic_file_write_iter+0x305/0x3c0 [ 165.433901][ T6969] vfs_write+0x7d3/0x11d0 [ 165.438234][ T6969] ? __pfx_generic_file_write_iter+0x10/0x10 [ 165.444220][ T6969] ? __pfx___mutex_lock+0x10/0x10 [ 165.449245][ T6969] ? __pfx_vfs_write+0x10/0x10 [ 165.454021][ T6969] ksys_write+0x12a/0x250 [ 165.458353][ T6969] ? __pfx_ksys_write+0x10/0x10 [ 165.463203][ T6969] ? srso_alias_return_thunk+0x5/0xfbef5 [ 165.468840][ T6969] do_syscall_64+0xcd/0xfa0 [ 165.473344][ T6969] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.479231][ T6969] RIP: 0033:0x7fc3f578eec9 [ 165.483636][ T6969] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 165.503255][ T6969] RSP: 002b:00007fc3f66b0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 165.511658][ T6969] RAX: ffffffffffffffda RBX: 00007fc3f59e6090 RCX: 00007fc3f578eec9 [ 165.519704][ T6969] RDX: 000000000000045c RSI: 00002000000007c0 RDI: 0000000000000004 [ 165.527664][ T6969] RBP: 00007fc3f5811f91 R08: 0000000000000000 R09: 0000000000000000 [ 165.535618][ T6969] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 165.543574][ T6969] R13: 00007fc3f59e6128 R14: 00007fc3f59e6090 R15: 00007ffd13a5e2a8 [ 165.551541][ T6969] [ 165.554547][ T6969] Modules linked in: [ 165.559680][ T6969] ---[ end trace 0000000000000000 ]--- [ 165.565132][ T6969] RIP: 0010:txLock+0x1b33/0x1cb0 [ 165.571429][ T6969] Code: 89 e9 41 b8 04 00 00 00 b9 10 00 00 00 6a 00 ba 01 00 00 00 48 c7 c6 c0 c3 ce 8b 48 c7 c7 00 c3 ce 8b 6a 48 e8 de 80 59 01 90 <0f> 0b e8 36 de d3 fe e9 e9 e6 ff ff e8 5c de d3 fe e9 d5 e7 ff ff [ 165.591386][ T6969] RSP: 0018:ffffc9000a9b7870 EFLAGS: 00010282 [ 165.597469][ T6969] RAX: 0000000000000000 RBX: ffffffff8e9a87a0 RCX: ffffc9000cccf000 [ 165.605443][ T6969] RDX: fffff52001536ee3 RSI: ffffffff84a98a92 RDI: 0000000000000006 [ 165.613428][ T6969] RBP: ffff88807bba28d0 R08: 0000000000000006 R09: 0000000000000050 [ 165.621414][ T6969] R10: 0000000000000048 R11: 0000000000000000 R12: 0000000000000007 [ 165.629373][ T6969] R13: ffffc900028ea1f8 R14: 0000000000000002 R15: ffff88803130ec98 [ 165.637439][ T6969] FS: 00007fc3f66b06c0(0000) GS:ffff888124ae0000(0000) knlGS:0000000000000000 [ 165.646375][ T6969] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 165.652991][ T6969] CR2: 00007fc3f66aff98 CR3: 000000007ee6c000 CR4: 0000000000350ef0 [ 165.660975][ T6969] Kernel panic - not syncing: Fatal exception [ 165.667236][ T6969] Kernel Offset: disabled [ 165.671553][ T6969] Rebooting in 86400 seconds..