last executing test programs:

3m17.608926836s ago: executing program 0 (id=334):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$unix(0x1, 0x1, 0x0)
r2 = socket$kcm(0x11, 0x3, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r3)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084)
sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001740)=@newqdisc={0x6c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r6, {0x5}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x3c, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0xa32, 0x6, 0x1, 0xc, 0x0, 0x4, 0x8, 0x52, 0x68d8, 0x5, 0x4, 0x3, 0x12, 0x6, 0xfffffffd, 0xfffffe01}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40098}, 0x0)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r7 = socket(0x400000000010, 0x3, 0x0)
r8 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000022c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x5, 0xfff1}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0xf7513c36066f8950}, 0x20000010)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000600), 0x56)
sendmsg$kcm(r2, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r10, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200000214000e00002fb96dffff1144ee163cddcb000000800000827600000000000000", 0x26}, {&(0x7f00000004c0)="f0580500", 0x4}], 0x2}, 0x5)

3m14.832380448s ago: executing program 0 (id=340):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNGETFEATURES(r0, 0x800454cf, 0x0)

3m14.630793383s ago: executing program 0 (id=341):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x6)
bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106-gcm-aesni\x00'}, 0x58)
r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000004280), 0x2, 0x0)
prlimit64(r0, 0x2, &(0x7f0000000100)={0x6ff, 0x2}, 0x0)
write$vhost_msg_v2(r3, 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', &(0x7f0000000cc0)=@ethtool_per_queue_op={0x4b, 0xe, [0x9, 0x0, 0xaf, 0x6, 0x3, 0x5, 0xffffff01, 0x1, 0x1, 0x1, 0x4, 0x1, 0x1, 0xf875, 0x200, 0x0, 0x80000000, 0x7000000, 0x2, 0x400, 0x401, 0x7, 0xfffffffe, 0x3, 0x10001, 0x7, 0x0, 0x8001, 0xcc24, 0x7, 0x6, 0x3, 0x8, 0xfffffff3, 0x1, 0x7, 0x18, 0x8, 0x2, 0x7f, 0x7fffffff, 0x5, 0x0, 0xe8, 0x9, 0xfffffffe, 0xe, 0x5, 0xa88b, 0x1, 0x3, 0x4, 0x1, 0x4, 0x25, 0x0, 0x80, 0x774c, 0x91d, 0x9, 0xffffffff, 0x0, 0x5, 0x80000000, 0x1, 0xc48, 0xffff0001, 0xfffffff4, 0xc7, 0xc, 0xebbd, 0xfffff31e, 0x2, 0x7, 0x2, 0x9, 0x81, 0x2, 0x6, 0xa, 0xffff7383, 0x9, 0x80000000, 0x0, 0x334, 0x0, 0xf, 0x10001, 0x7, 0xffff, 0x2, 0xfffffffd, 0x9, 0x8, 0x7, 0x8, 0xc9, 0x20000000, 0x7, 0x4, 0x8, 0x8779, 0x6, 0x10001d, 0x80000000, 0x9, 0x9c8, 0x80, 0x0, 0x305f, 0x3, 0x7f, 0x617a, 0x200, 0x3, 0x401, 0x2, 0xff, 0x7, 0xeaf, 0xf9b9, 0x9, 0x101, 0x9, 0x60000000, 0x1, 0x9, 0xfffeffff], "1c3662c8646b3aaa41098ddd3188216056e09b8a8cd108186ef5e9dac2efe11b0ee46ae3e2e7dbc708b07511d68a2f5fa1829a8fba60471de536bbfe"}})

3m13.594695271s ago: executing program 0 (id=342):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_emit_ethernet(0x3e, &(0x7f0000000300)={@local, @random="41208cb8e5b4", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @private, @loopback}}}}}}, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0)
ioctl$TCXONC(r3, 0x540a, 0x0)
ioctl$TCXONC(r3, 0x540a, 0x1)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0, <r4=>0x0}, &(0x7f0000000200)=0xc)
r5 = socket(0x10, 0x3, 0x0)
getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, <r6=>0x0}, &(0x7f0000cab000)=0xc)
setregid(0xffffffffffffffff, r6)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, <r7=>0x0}, &(0x7f0000cab000)=0xc)
setregid(0xffffffffffffffff, r7)
statx(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x1000, 0x10, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, <r8=>0x0})
getgroups(0x5, &(0x7f0000000280)=[0x0, 0xffffffffffffffff, 0xee01, <r9=>0xee00, 0xffffffffffffffff])
setgroups(0x8, &(0x7f00000005c0)=[0x0, 0x0, r4, r6, r7, r8, r9, 0x0])
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)

3m12.445550389s ago: executing program 0 (id=345):
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x400c000}, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000100)={0x0, 0xfffffffffffffed6, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="fc0000001900010000000000fcdbdf2500000000000000000000000000000000fe8000000000000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000004000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000001000000000000004400050000000000000000000000000000000000000000022b"], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x4000000)
bind$inet(r1, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10)
setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4)
connect$inet(r1, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10)
sendmmsg$inet(r1, &(0x7f0000004d00), 0x7fffffffffffd33, 0x20000890)

3m11.270336632s ago: executing program 0 (id=348):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r0, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mkdir(&(0x7f0000000440)='./file1\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]})
chdir(&(0x7f00000001c0)='./bus\x00')

2m55.699392956s ago: executing program 32 (id=348):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r0, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mkdir(&(0x7f0000000440)='./file1\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]})
chdir(&(0x7f00000001c0)='./bus\x00')

23.209577869s ago: executing program 2 (id=731):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_emit_ethernet(0x3e, &(0x7f0000000300)={@local, @random="41208cb8e5b4", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @private, @loopback}}}}}}, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0)
ioctl$TCXONC(r2, 0x540a, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0, <r3=>0x0}, &(0x7f0000000200)=0xc)
r4 = socket(0x10, 0x3, 0x0)
getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, <r5=>0x0}, &(0x7f0000cab000)=0xc)
setregid(0xffffffffffffffff, 0x0)
setgroups(0x8, &(0x7f00000005c0)=[0x0, 0x0, r3, r5, 0x0, 0x0, 0x0, 0x0])

22.058277636s ago: executing program 2 (id=738):
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
io_getevents(0x0, 0x6, 0x0, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
chdir(0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x240, 0x0)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0xf)
ioctl$TCFLSH(r3, 0x400455c8, 0x4)

11.620064252s ago: executing program 1 (id=763):
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$inet_smc(0x2b, 0x1, 0x0)
listen(r3, 0x4000)

9.411234264s ago: executing program 2 (id=765):
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x800, &(0x7f00000004c0)=ANY=[@ANYBLOB='acl,heartbeat=none,dir_resv_level=00000000000000000003,resv_level=000000006,coherency=full,localflocks,coherency=full,noacl,\x00'/136], 0x1, 0x4421, &(0x7f0000004500)="$eJzs3c9PHGUfAPBnBt63UNsKtYeamLiJTTRqCPSk0kRKaSm0WFNtY7xsF9i26MI2sBgPPeCtiScTD8ZDo4k3Tg0Hr/VP8OKxnpvowYuJSSNmd2eBGXbDSliwzeeTlNl5fu9+d5595jB94kTl9txSbm4pV1jIlWduLp3OfVYuLc8XQ7xPDrp/2tOJOIn9wbly7sIH10+H8NPsL4/X19fXQ1V3aGpoy+s//7g7s/XYEGfqVNtt3tpe+TiEcGLbuKq6Qggf/RhCFEI4m6SNJsfeEMKxUM+7fvfLG7k9Gs2DR8Uz+SdT99aGT02u3l9r/d6jEL4tvfjmrfnfXuka/vX1PeoeAAAAAAAAAAAAAAAAAICn3PjVK9feHxwKD6PQvRptf153PDm2ej52fc+83Pk3CwAAAAAAAAAAAAAAAAAAAP9Rm8//56LjTZ7/H0uOIy3qr7/b+THSORPvXRk7PziU7P8ebct/K0n6/WxX6G+y73t2//ezmfrN93/f3s9uNcbX6LcvRPFA6jyOBwZC+D7Z+P1kdDgulZcqb9wsLy/M7tkwnlrp+Nd3709FJ9nQv934j2ba7/z+/y9s+zZVz2/s3VfsmZaOf1fLcj98EbUV/3OZevsRf3YvHf/uWlrv1gIj9QmgGv+vuneO/1im/U7F/1gIIRdVx5pLzQDVNUw1vdV6hbR0/P9XS0tNnckH2er6/ysT//OZ9g9q/l/J/hDRVDr+/6+l9aRKbF7//fHO1/+FTPsHEf/q+Ff8/rclHf9D9cTuVJHaJ9nu/D+eab9T8b8WJ+M8FqW+AatRPb3V/1dHWjr+PdvyN+//4rbWfxcz9ffr/q/Rb+P+rzH9vxbV7/9oLh3/3pbl2r3+JzL1Oj3/j9TWf+xWOv6Ha2nptXNf7W+78Z/MtN+p+NdWJT2N+G/OJ38fqqd/Z/3XlnT8n6snxltLrNT+1tZ/0c7r/0uZ9g9i/Vcd/0rc2V6fFen4H2lZrhr/n9v4/b+cqdf5+IcwaK2/a+n4H21Zrnb99+wc/6lMvU7H/9VONg4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwFBhNjn0higdS53E8MBDCueT8ZDgcTRdm89Ol8synSyGMJem5cDy6VSpPF0r5uYXybDFfKJXKMyGcT/JPhJ5oqVSu5OcLdy5stNUb3S4WFivTxUIlhDCepL8Ujjbamp6rzBfuhBAubuQ9H5cX79wuLORn5xbfGRwcHAwTG2Poj4qfV4oLlXrv9dwQJjfq9kVbBlfLvrQxliPRJ+XlxYVCqZZ+eUudUnmmUNpSZyrJ+zr0R5XF5YWZQqWYL5VvNfo7SCPJcWzi6odXLw9ty78R1Y+j+zssAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP6lh8NvfxNC6K6fxSGEXJS8iJJ/KQ8eFc/kn0zdWxs+Nbl6f+1xszIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/7ADBwIAAAAAQP6vjVBVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVWFXfpHaSCI4gD8Ziy09BhWy25nu6KIFq4InkCP4WH0KF7CO1ikSJsiBJJZCPsHtkmq72sezI+Z92AeAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAyz2+de+vdROR4mp7GfH7+fd/nD+X+n03ff/iDDNyOk8v3f1D3ZR/T6P8thyt2rxPN+uvj5iovZ/Bngz36WDcZ2hu3+bm6/teR8pVRLQlv0k5V9WytwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAHTtwIAAAAAAA5P/aCFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVXYgWMBAAAAAGH+1lH0bQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPArAAD//z8QH1I=")
r0 = open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x14)
r1 = open(&(0x7f00000000c0)='./file1\x00', 0x14927e, 0x6)
fallocate(r1, 0x0, 0x0, 0x1001f0)
r2 = open(&(0x7f00000001c0)='./file1\x00', 0x101000, 0x4)
copy_file_range(r2, 0x0, r0, 0x0, 0x20000000008, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0)
pwritev2(r3, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0x1}], 0x1, 0x5412, 0x0, 0x14)

7.806836422s ago: executing program 2 (id=767):
r0 = socket$nl_generic(0x11, 0x3, 0x10)
sendmsg(r0, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x36}], 0x2, 0x0, 0x0, 0x11000000}, 0x0)

6.565015283s ago: executing program 3 (id=770):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
syz_emit_ethernet(0x3e, &(0x7f0000000300)={@local, @random="41208cb8e5b4", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @private, @loopback}}}}}}, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0)
ioctl$TCXONC(r3, 0x540a, 0x0)
ioctl$TCXONC(r3, 0x540a, 0x1)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0, <r4=>0x0}, &(0x7f0000000200)=0xc)
r5 = socket(0x10, 0x3, 0x0)
getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, <r6=>0x0}, &(0x7f0000cab000)=0xc)
setregid(0xffffffffffffffff, r6)
r7 = socket(0x10, 0x3, 0x0)
getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, <r8=>0x0}, &(0x7f0000cab000)=0xc)
setregid(0xffffffffffffffff, r8)
statx(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x1000, 0x10, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, <r9=>0x0})
getgroups(0x5, &(0x7f0000000280)=[0x0, 0xffffffffffffffff, 0xee01, <r10=>0xee00, 0xffffffffffffffff])
setgroups(0x8, &(0x7f00000005c0)=[0x0, 0x0, r4, r6, r8, r9, r10, 0x0])
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)

6.360672608s ago: executing program 2 (id=772):
r0 = socket$inet(0x2, 0x2, 0x0)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
getpgrp(0xffffffffffffffff)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
userfaultfd(0x80001)
r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0301, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000001340))
ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, &(0x7f0000000180)=0x6f)
r3 = openat$dsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0)
read$dsp(r3, 0x0, 0x0)
write$dsp(r2, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000)
getsockopt$IPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x41, 0x0, &(0x7f0000000000))
recvmmsg(r0, &(0x7f00000066c0), 0xa0d, 0x0, 0x0)

5.199503953s ago: executing program 3 (id=773):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x4c, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x4c}}, 0x2)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x5c, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90)

5.098503596s ago: executing program 2 (id=775):
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
io_getevents(0x0, 0x6, 0x0, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
chdir(0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x240, 0x0)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0xf)
ioctl$TCFLSH(r3, 0x400455c8, 0x4)

5.052066838s ago: executing program 3 (id=776):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000900)=@newtfilter={0x5c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r3, {0x8, 0x7}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x2c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x10, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5}]}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x100c}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x22044028}, 0x0)

5.044455916s ago: executing program 1 (id=777):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$can_j1939(0x1d, 0x2, 0x7)
bind$can_j1939(r1, &(0x7f0000000340)={0x1d, 0x0, 0x4, {0x0, 0x0, 0x4}, 0xfe}, 0x18)
bind$can_j1939(r1, &(0x7f0000000000)={0x1d, 0x0, 0x3, {0x0, 0xf0, 0x3}, 0x2}, 0x18)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x5f, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000014000780080008400000000008001240ffffffe80500010006000000050005000200000005000400000000000900020073797a31000000000d000300686173683a6e6574"], 0x5c}}, 0x0)
r2 = socket$kcm(0x10, 0x2, 0x4)
r3 = socket$kcm(0x21, 0x2, 0x2)
ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r2, 0x4048587b, 0x0)
setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r5=>0x0})
r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendmsg$kcm(r3, 0x0, 0x0)
setsockopt$inet6_MCAST_LEAVE_GROUP(r6, 0x29, 0x2d, &(0x7f0000000400)={0xfffffffd, {{0xa, 0x4e23, 0x101, @remote, 0xff}}}, 0x88)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0xedbde134798091f0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r7, 0x0, 0x401c404)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000340)={0x0, <r9=>0x0}, &(0x7f00000006c0)=0xc)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000640)={@multicast2, @empty, <r10=>0x0}, &(0x7f0000000680)=0xc)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000001c0), 0xc, &(0x7f0000000540)={&(0x7f0000000f00)=ANY=[@ANYBLOB="5003cd441b00200026bd7000ffdbdf23cef1ac316f518925fe8000000000000000000000000000aaff0200000000000006000000000000014e2100004e230cdc0200403008000000", @ANYRES32=r5, @ANYRES32=r9, @ANYBLOB, @ANYRES32=r10, @ANYRES32=r9, @ANYBLOB="04000000000000000000010000000000900500000000000001000000000000800300000000000000ff0100000000000003000000000000000800000000000000060000000000000002000000000000000100008000000000000000000000000010000000b06b6e000201000100000000ac0003006c7a6a6800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020030000adfa1b18b46663f6d8876d20cf9a721a6ec5d2af4667dba09792d6e5afad3e6c793e68328cbde8e14cceccc82cb898cd90734775847fb75ef19c0a033caa76f0111ca7163e9bc49004b82f58526876657af55f81a3c24717846075c19324d5da30bc39dc10000a0025bd700027bd700008000000"], 0x350}}, 0x8840)

4.246912696s ago: executing program 5 (id=778):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x20000406, &(0x7f0000001d40)={[{@dioread_lock}, {@noblock_validity}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x4}}, {@jqfmt_vfsold}, {@nolazytime}, {@grpjquota, 0x2e}, {@nouid32}, {@resuid}, {@barrier_val={'barrier', 0x3d, 0x1000}}, {@grpid}], [], 0x2c}, 0x84, 0x4f0, &(0x7f0000001e00)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0)
creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x40)
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181d011, 0x0, 0x40, 0x0, &(0x7f0000000140))
r0 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x51)
getdents64(r0, 0x0, 0x0)

4.120483784s ago: executing program 1 (id=779):
r0 = socket$netlink(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mount$fuse(0x0, 0x0, 0x0, 0x2018081, 0x0)
r4 = socket$inet_smc(0x2b, 0x1, 0x0)
listen(r4, 0x4000)
ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xa2, 0x7}}, './file0\x00'})
r5 = syz_open_dev$sg(&(0x7f00000004c0), 0x0, 0x0)
ioctl$SG_GET_VERSION_NUM(r5, 0x2284, &(0x7f0000000080))
sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newtaction={0x14, 0x30, 0x48b}, 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x8000)

4.120035674s ago: executing program 3 (id=780):
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000340)=@file={0x0, './file1\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6)
landlock_restrict_self(0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00')

4.065604794s ago: executing program 4 (id=781):
syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040f04"], 0x7)

3.953131234s ago: executing program 4 (id=782):
syz_mount_image$exfat(&(0x7f0000000000), &(0x7f00000002c0)='./file0\x00', 0x1200082, &(0x7f0000000500)=ANY=[@ANYBLOB="6572726f72733d636f6e74696e75652c6572726f72733d636f6e74696e75652c757466382c756d61736b3d30303030303030303030303030303030303032313632362c696f636861727365743d63703935302c646973636172642c616c6c6f775f7574696d653d3030303030303030352c6572726f72733d72656d6f756e742d726f2c646973636172642c00d50194377d24b5953951fbb0e6d2204f459a2129e54509e955e3ac3e9dd76061aeb341a8ae53564e806289fad8cab1be25d1de2b9d46be57d2e9c2ded432413ab147de643c400dba4f15a90c962bcd8d805d7d5f57"], 0x5, 0x1531, &(0x7f0000002f80)="$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")
r0 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040))
ioctl$XFS_IOC_SCRUB_METADATA(r0, 0xc040583c, &(0x7f0000000300)={0x4, 0x8, 0xd, 0x0, 0x6})
r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r1, 0x8004587d, &(0x7f0000000080)={@id={0x2, 0x0, @auto="a92a17aeb5c9bde0f3363c3c2f66c14f"}})
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='xfs\x00', 0x2208004, 0x0)

2.975182733s ago: executing program 4 (id=783):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
syz_emit_ethernet(0x3e, &(0x7f0000000300)={@local, @random="41208cb8e5b4", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @private, @loopback}}}}}}, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0)
ioctl$TCXONC(r3, 0x540a, 0x0)
ioctl$TCXONC(r3, 0x540a, 0x1)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0, <r4=>0x0}, &(0x7f0000000200)=0xc)
r5 = socket(0x10, 0x3, 0x0)
getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, <r6=>0x0}, &(0x7f0000cab000)=0xc)
setregid(0xffffffffffffffff, r6)
r7 = socket(0x10, 0x3, 0x0)
getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, <r8=>0x0}, &(0x7f0000cab000)=0xc)
setregid(0xffffffffffffffff, r8)
statx(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x1000, 0x10, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, <r9=>0x0})
getgroups(0x5, &(0x7f0000000280)=[0x0, 0xffffffffffffffff, 0xee01, <r10=>0xee00, 0xffffffffffffffff])
setgroups(0x8, &(0x7f00000005c0)=[0x0, 0x0, r4, r6, r8, r9, r10, 0x0])
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)

2.793591001s ago: executing program 1 (id=784):
syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f0000000000)='./file0\x00', 0x10, &(0x7f0000000080)=ANY=[@ANYRES16=0x0, @ANYRESHEX], 0x3, 0x18a, &(0x7f0000002480)="$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")
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
chdir(&(0x7f0000000200)='./file0\x00')
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
getdents64(r0, &(0x7f0000000580)=""/174, 0xff56)

2.723999668s ago: executing program 3 (id=785):
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=<r3=>0x0)
sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x840)
write$nci(r0, &(0x7f0000000340)=@NCI_OP_RF_INTF_ACTIVATED_NTF={0x1, 0x0, 0x3, 0x5, 0xf, @a={0x5, 0x1, 0x1, 0x0, 0x4, 0x7f, 0x2, {0x2, 0x0, "", 0xa, 0x5}, 0x2, 0xd8, 0xf2, 0x8}}, 0x13)

2.359431865s ago: executing program 3 (id=786):
r0 = syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000600)=ANY=[@ANYBLOB="61636c2c6865617274626561743d6e6f6e652c6469725f726573765f6c6576656c3d30303030303030303030303030303030303030332c726573765f6c6576656c3d30303030303030303030303030303030303030362c636f686572656e63793d66756c6c2c6c6f63616c666c6f636b732c636f686572656e63793d66756c6c2c6e6f61636c2c004c98065b85e5b137d63b2211c62c402045083da9bddc3b0d88d44ecd24ba5288d428197284f332858b83349af2c7646f1e07e91120d7f23ce20389bbc031d81d654f1ca08f61c92d90e6ea478843c1ad942c7c257f9ff5348dd038e947775991ad90f8861dada21d5fa2de7042b5e2cbbcd1ada2b568e375812eb0bc448e68eda4c70cf1d5adf566142ed45924fe72a1eb1a914faf754b9d94bf0fdc1f98c708bd89940b5ef96e328240c39559b35bc83c15c15104f3b3fe1945f0278c34e2399dadcd9776ac659afcbb239569140ab408ad87f15b353941"], 0x1, 0x442d, &(0x7f0000004480)="$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")
r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x1c1146, 0xb6)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
sendfile(r1, r2, 0x0, 0xfffe82)
syz_mount_image$ocfs2(&(0x7f00000026c0), &(0x7f0000000240)='./file0\x00', 0xa17820, &(0x7f00000001c0)=ANY=[@ANYRES16=r0], 0x1, 0x4710, &(0x7f0000008f40)="$eJzs212IXFcBB/BzZ1ezmybb/UibpOnHJBFctCybPlXrQ1yrNpo2H9pWU2Wd3Ww3q7M76+6MFgxSgyAKghIEFT+oCqUvtSAG+lKLUPADaRVKRdH6IlKogg8GbaArM3Nvdu6d2d7JTtLS9veDdvaee8+5Z/a/99w590wKseqphdXiwmqxtFSszN6/ekvxc5VybXEuFF4lr/X56c6VyEn2r50j7/vAR+65JYQ/HPvah9bW1tZC3XDo6EDLz+f/fXq29TVRyNSpt9u5taY/1h556edveaUj8pwIIexo61ddXwjhY78IYUsIYSQuG41fB0MI20IIUQjh0d/868cDvXShxdl7X3ju2JnD+85MPf7YMxfmj254YBTCd8u7b55ffHF/323Pv+MynR4AAF7RB48fufvo5IHwZBSGzvW3f17fGb8mn4/vfNun7nq4f33/Gt3pexVDBQAAgIz1+f9w9HKH9bpkZS1ZEnzigRN3PxWt7zexfX07dNeR298/eSBe/43a9t8aF/3zvX2NNdTsum92/XckU7/z+u/6eR7+6rO/XHrr5vuf9C8573CIChOp7UJhYiKEY1PN7V3R1kK5slp95/2V2tLJzZ/3jSKdf3b1fn1Bv9v8RzPV89b/d3/i8z8b7O/lHYyF7F9tfbvY/qdMB+n8Nx7Lf/KlqKv8xzL18vK/4+nt53+1pZd3kD0jlyKdf/NC3Nd6QLE5ANTz/2Z/fv47Mu3n5f/9qXOPntjE93/q48xwVO/rQGoEeDku3+ArTGSk828GkRo641/kRtf//zL5X5NpPy//Oyv/+N3ferj/bzT+j0/10uabRzr/ZhDF1BHr1/9IIf/6vzbTfl7+vz3152c/2dO9uj3/ev/H3f+7ks4/vhGnB8/Gb7Lb8X9npv28/HeN3ffQwib6/eHBuJ9DURhr+dbpufotbGh9vboxpanvXt7ESd4E0vk3f2upS2eo+dK4/ofzx/9dmfbz8n9oz9ffc7qn7/92Hv8njf9dSec/2Ci7lPxfyuS/O9N+Xv4/PP33v9x3mcf/+vZB+Xclnf/Wtv3rz38KXc3/rsvUz3v+s2/0qUf+2sP8P+lfct7k+U/yHGI8aj7/obN0/ldteFy39/89mXp51/+3/vP80/t7Gf+jAU8AepDOf1uzsMMEsNv8r8+0n5f/F+758sf/tIn5X+MT30CSf8v8f0uz/Kjxvyvp/Lc3C1P/GOrBxv8b9/+oPff/ZvK/IdN+Xv4XDk30f+Uy3//r/R/v8Cibdun8hzY8rp7/77u4/9+YqZeX/xf3/vTFm3v6/B/CpLn+pqXzv3rD4xrX/0B+/jdl6uXl/51v/PqJB3vo/9t7qEs2/+a9PnU5xZ/Nu53/FzPt5+X/o/HzZ/dfgfnfre7/XUnn31w1v5T8s/P/vZn28/L/3pEfrPRfgec/d8gfAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgU0bj1+EQFSZS24XCxEQIY/H2rrA1mimdnJ4pV2Y/sxrCjri8GEaj+XJlplSeXliqnJybLpXLldkQron37wgD0Wq5Up1eLC1fe7GtwejUXGmlOjNXqoYQdsbl14ftSVszC9XF0nLj2KTOVVHps7VKtTRRW51bCbsvlm9LyudXKrXl6y62dXWhsrJ8qrQ0fXJh5d2Tk5OTYc/FPo9Ecw9U55aqzd4299brJHWHo5Y309h9Q8v5Pl2prSyVyo3yG1vqlCuzpXJLnZtazlddqS3Nlqpz0+XKfHK+YkvdlvfW2L033jceRlLvL6mbdTB+vf3Q8Y8eP3ygbX8xSue9VFucm9ze+W8CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgDeuJ29717dDCH3NrUII4WDyQxT/l3L23heeO3bm8L4zU48/9syF+aOdjgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg/+zAgQAAAAAAkP9rI1RVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVh535equjiOACfGd/7WiCltBFyGRgiojsJC/pFJJXXyJZtWge1SsigKDCMaFkQBEHtooKgVVD5F0QtXLaqNrVoYRBCxehMXu4o96bQ6J3ngeHMMOOZLwzO3Dmf4QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGwc53fNdyTtlT1bF5fO3hDa033/hxCGo6X1r/vbQlcI4fu3qbNhhTbTVdf/u/GZ0fxZoz9rB0cf3xyO1l5/9rfZeTtDFA/UbO+O4nhgYO39t6p7/S8m+6MQ4qILoRBzI8/OVUIIbUUXQiF+fZ69nNzf/yu6EArR++l+R3L9K00cu47HMxvU9r1feirpbzzK52L1Un/ts7/R/7h7QGt5f/rah9hFLb3X6ft/lC7eB8th+tSxjy+LLoLCTM9MHC+6BgAA4N+60CD/D9uW1h9ejUJXZz73/1GX/3fX9b9y/r/swc5bI1PNhBCr2pEbm0y2Bw+sp8/NrLlBvTN91+++rRjvKSv5f7nJ/8vtb/J/Wo/8v9zk/yWwsPou+T+JN/L/Unp6e9/8q6KLoDDyfwAAKJ8jJ8cmqoNDycv/lp/t+by+J22raZ7+6M5k35OacSP54eZ29MTYocODQ+l1zw8ILs//EC/uXUi/96hvM+N13100mv+h+/nc7I32/BHVJr/fyOrLzmv+BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPjN7tzTMAhGYRj9biuiNloVTVj4SfCBBkYEIIUZDehgwgAMhIACBnLOcm/yLC8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwPP9q7wuvr80RnqtEWkqu+zaP8fT7Gfu22F5nz1u3AoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwMYOHMgAAAAACPO3zqP9AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPBUAAAA//8psMw3")
ioctl$FITRIM(r1, 0x40406f06, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x100})

2.336605661s ago: executing program 5 (id=787):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$inet_smc(0x2b, 0x1, 0x0)
listen(r3, 0x4000)

2.174180452s ago: executing program 1 (id=788):
socket$nl_generic(0x10, 0x3, 0x10)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet_sctp(0x2, 0x5, 0x84)
socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080))
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
socket$inet6_udp(0xa, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0xb)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
memfd_create(&(0x7f0000000180)='\b\x9dF\xd8\b\xb3~u\xa5\"\xdc\xfdq\xf6c\r;\xfcO\x8c=\x81\xb1\x8aWpA\xd4\x98\x85K\x89>N\x8ar\x17O\x0fKR\xe2{mn\xcc\xbf2\xc0\xa7\x14\xd0\xd4\xfe/m\xdf\xb6]\xc2\xaa\x86\xec(\xf7\xcd\xa6\xd9n^.\x13*\xd4\xb8\xe8\xc4\xefb\x14Vx\xc6\xfe\x9e\xee\xe7\xd7E\xe9\t\x83\xdeNX\xec\xe66\x1b\x97$\xee\x84\x14n,B\xd5?\xe5E:+Pm\x1d\xb4\xb8\xeb\xe8Op2\x82\xc7\x0e\x97\x03\xef\x1a\xa5\x00.\x89\b!m\f\xd9\x8b$}\x9f\fX\x81\xa8\xf6\x94\xbc\xed\x80|l]\xe9\xca\xd3\xc9\xa3\x9e\x9cJI\xf1\xa2\xa0\xc4:\x00\x00\x00\x00\x00\x00\b\x00\x00', 0x0)
pipe2(&(0x7f0000000040), 0x80000)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6(0xa, 0x200000000003, 0x87)
socket$netlink(0x10, 0x3, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000004c0)={'bond0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010025bd", @ANYRES32=r1, @ANYBLOB="138000002b9201002400128009000100626f6e6400000000140002800800", @ANYRES64=r0], 0x44}, 0x1, 0x0, 0x0, 0x40448e0}, 0x4000)

1.927505979s ago: executing program 4 (id=789):
r0 = socket$packet(0x11, 0x2, 0x300)
openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0)
syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
shmat(0x0, &(0x7f0000ffc000/0x3000)=nil, 0x4000)
setsockopt$packet_int(r0, 0x107, 0x13, &(0x7f0000000080), 0x4)
r4 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo\x00')
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x2, 0x972, &(0x7f0000000300))
lseek(r4, 0x1, 0x2)
r5 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
bind$802154_raw(r5, &(0x7f00000003c0)={0x24, @none={0x0, 0x2}}, 0x14)

1.110923155s ago: executing program 5 (id=790):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$can_j1939(0x1d, 0x2, 0x7)
bind$can_j1939(r1, &(0x7f0000000340)={0x1d, 0x0, 0x4, {0x0, 0x0, 0x4}, 0xfe}, 0x18)
bind$can_j1939(r1, &(0x7f0000000000)={0x1d, 0x0, 0x3, {0x0, 0xf0, 0x3}, 0x2}, 0x18)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x5f, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000014000780080008400000000008001240ffffffe80500010006000000050005000200000005000400000000000900020073797a31000000000d000300686173683a6e6574"], 0x5c}}, 0x0)
r2 = socket$kcm(0x10, 0x2, 0x4)
r3 = socket$kcm(0x21, 0x2, 0x2)
ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r2, 0x4048587b, 0x0)
setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r5=>0x0})
r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendmsg$kcm(r3, 0x0, 0x0)
setsockopt$inet6_MCAST_LEAVE_GROUP(r6, 0x29, 0x2d, &(0x7f0000000400)={0xfffffffd, {{0xa, 0x4e23, 0x101, @remote, 0xff}}}, 0x88)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0xedbde134798091f0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r7, 0x0, 0x401c404)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000340)={0x0, <r9=>0x0}, &(0x7f00000006c0)=0xc)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000640)={@multicast2, @empty, <r10=>0x0}, &(0x7f0000000680)=0xc)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000001c0), 0xc, &(0x7f0000000540)={&(0x7f0000000f00)=ANY=[@ANYBLOB="5003cd441b00200026bd7000ffdbdf23cef1ac316f518925fe8000000000000000000000000000aaff0200000000000006000000000000014e2100004e230cdc0200403008000000", @ANYRES32=r5, @ANYRES32=r9, @ANYBLOB, @ANYRES32=r10, @ANYRES32=r9, @ANYBLOB="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"], 0x350}}, 0x8840)

1.041383003s ago: executing program 5 (id=791):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0xb, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94)
ioctl$BLKZEROOUT(r0, 0xc0c0128e, &(0x7f0000000240)={0x4000000000002000, 0x2})
ioctl$BLKTRACESTART(r0, 0x1274, 0x0)

963.010179ms ago: executing program 5 (id=792):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, 0x0})
ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000000)={0x1, 0x0, [{0x40000001, 0x4, 0x2, 0x31237648, 0x6, 0x2, 0x80}]})
ioctl$KVM_CAP_HYPERV_ENFORCE_CPUID(r3, 0x4068aea3, &(0x7f00000000c0)={0xc7, 0x0, 0x1})

962.262759ms ago: executing program 4 (id=793):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sm3)\x00'}, 0x58)
accept4$tipc(0xffffffffffffffff, 0x0, 0x0, 0x80800)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c10, &(0x7f0000000400), 0xff, 0x23f, &(0x7f0000000540)="$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")
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0)
r3 = fsmount(r2, 0x1, 0x0)
fchdir(r3)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0)

918.775462ms ago: executing program 1 (id=794):
r0 = socket$netlink(0x10, 0x3, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mount$fuse(0x0, 0x0, 0x0, 0x2018081, 0x0)
r4 = socket$inet_smc(0x2b, 0x1, 0x0)
listen(r4, 0x4000)
ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xa2, 0x7}}, './file0\x00'})
r5 = syz_open_dev$sg(&(0x7f00000004c0), 0x0, 0x0)
ioctl$SG_GET_VERSION_NUM(r5, 0x2284, &(0x7f0000000080))
sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newtaction={0x14, 0x30, 0x48b}, 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x8000)

773.078665ms ago: executing program 33 (id=794):
r0 = socket$netlink(0x10, 0x3, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mount$fuse(0x0, 0x0, 0x0, 0x2018081, 0x0)
r4 = socket$inet_smc(0x2b, 0x1, 0x0)
listen(r4, 0x4000)
ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xa2, 0x7}}, './file0\x00'})
r5 = syz_open_dev$sg(&(0x7f00000004c0), 0x0, 0x0)
ioctl$SG_GET_VERSION_NUM(r5, 0x2284, &(0x7f0000000080))
sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newtaction={0x14, 0x30, 0x48b}, 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x8000)

388.905998ms ago: executing program 5 (id=796):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r2, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000000c0)={[0x800, 0x4, 0x81, 0x4, 0x1, 0x0, 0x3, 0x12, 0x0, 0x0, 0xfffffffffffffffc, 0x7, 0x4, 0x4, 0x100000000001], 0x1000, 0x4fb40})
ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000000)=0x3)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

0s ago: executing program 4 (id=797):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x13, r0, 0x0)
r1 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f00000000c0)={0x806, 0x0, 0x4, 0x7}, 0x10)

kernel console output (not intermixed with test programs):

  120.054595][ T4911] vivid-004: =================  START STATUS  =================
[  120.063280][ T4911] vivid-004: Radio HW Seek Mode: Bounded
[  120.069698][ T4911] vivid-004: Radio Programmable HW Seek: false
[  120.075990][ T4911] vivid-004: RDS Rx I/O Mode: Block I/O
[  120.081596][ T4911] vivid-004: Generate RBDS Instead of RDS: false
[  120.088062][ T4911] vivid-004: RDS Reception: true
[  120.093160][ T4911] vivid-004: RDS Program Type: 0 inactive
[  120.098996][ T4911] vivid-004: RDS PS Name:  inactive
[  120.104643][ T4911] vivid-004: RDS Radio Text:  inactive
[  120.110348][ T4911] vivid-004: RDS Traffic Announcement: false inactive
[  120.118105][ T4911] vivid-004: RDS Traffic Program: false inactive
[  120.124780][ T4911] vivid-004: RDS Music: false inactive
[  120.131243][ T4911] vivid-004: ==================  END STATUS  ==================
[  120.175936][   T26] audit: type=1800 audit(1773337568.364:32): pid=4909 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.138" name="file1" dev="loop4" ino=15 res=0 errno=0
[  121.465371][ T4921] loop2: detected capacity change from 0 to 4096
[  121.983810][ T4915] input: syz0 as /devices/virtual/input/input5
[  122.082009][ T4921] ntfs3: loop2: Mark volume as dirty due to NTFS errors
[  122.854553][ T4930] loop4: detected capacity change from 0 to 1024
[  122.865653][ T4931] ntfs3: loop2: ino=0, "file1" failed to extend initialized size to 100003.
[  122.947042][ T4930] EXT4-fs error (device loop4): ext4_ext_check_inode:501: inode #4: comm syz.4.146: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0)
[  122.970471][ T4930] EXT4-fs error (device loop4): ext4_quota_enable:6445: comm syz.4.146: Bad quota inode: 4, type: 1
[  123.041865][ T4930] EXT4-fs warning (device loop4): ext4_enable_quotas:6486: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  123.104553][ T4930] EXT4-fs (loop4): mount failed
[  123.136046][ T4373] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  125.393197][ T4955] loop4: detected capacity change from 0 to 2048
[  125.477416][ T4373] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[  125.533748][ T4373] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  125.667883][ T4955] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  125.688826][ T4373] usb 4-1: Product: syz
[  125.749205][ T4373] usb 4-1: Manufacturer: syz
[  125.811127][ T4373] usb 4-1: SerialNumber: syz
[  125.828776][ T4955] ext4 filesystem being mounted at /26/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  126.066416][ T4373] usb 4-1: config 0 descriptor??
[  127.505382][ T4373] usb 4-1: can't set config #0, error -71
[  127.520318][ T4373] usb 4-1: USB disconnect, device number 3
[  127.883250][ T4973] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  128.092762][ T4979] vivid-004: =================  START STATUS  =================
[  128.102025][ T4979] vivid-004: Radio HW Seek Mode: Bounded
[  128.109254][ T4979] vivid-004: Radio Programmable HW Seek: false
[  128.120061][ T4979] vivid-004: RDS Rx I/O Mode: Block I/O
[  128.127134][ T4979] vivid-004: Generate RBDS Instead of RDS: false
[  128.136042][ T4979] vivid-004: RDS Reception: true
[  128.142421][ T4979] vivid-004: RDS Program Type: 0 inactive
[  128.149918][ T4979] vivid-004: RDS PS Name:  inactive
[  128.157088][ T4979] vivid-004: RDS Radio Text:  inactive
[  128.163065][ T4979] vivid-004: RDS Traffic Announcement: false inactive
[  128.172205][ T4979] vivid-004: RDS Traffic Program: false inactive
[  128.180655][ T4979] vivid-004: RDS Music: false inactive
[  128.192405][ T4979] vivid-004: ==================  END STATUS  ==================
[  128.368255][ T4982] hub 9-0:1.0: USB hub found
[  128.377494][ T4982] hub 9-0:1.0: 1 port detected
[  129.183528][ T4970] loop3: detected capacity change from 0 to 32768
[  129.192425][ T4987] loop2: detected capacity change from 0 to 128
[  129.329678][ T4987] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  129.352026][ T4987] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  129.922499][ T4970] XFS (loop3): Mounting V5 Filesystem
[  130.008048][ T4970] XFS (loop3): Ending clean mount
[  130.246281][ T4970] XFS (loop3): User initiated shutdown received.
[  130.294975][ T4970] XFS (loop3): Metadata I/O Error (0x4) detected at xfs_fs_goingdown+0x6d/0x150 (fs/xfs/xfs_fsops.c:491).  Shutting down filesystem.
[  130.391440][ T4970] XFS (loop3): Please unmount the filesystem and rectify the problem(s)
[  130.536179][ T4190] XFS (loop3): Unmounting Filesystem
[  134.841253][ T1425] ieee802154 phy0 wpan0: encryption failed: -22
[  134.847636][ T1425] ieee802154 phy1 wpan1: encryption failed: -22
[  135.304592][ T5035] loop0: detected capacity change from 0 to 16
[  136.265408][ T5035] erofs: (device loop0): erofs_read_inode: unsupported datalayout 6 of nid 36
[  137.357467][   T26] audit: type=1326 audit(1773337585.094:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5042 comm="syz.4.174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e14e4d799 code=0x7ffc0000
[  138.748787][   T26] audit: type=1326 audit(1773337585.114:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5042 comm="syz.4.174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e14e4d799 code=0x7ffc0000
[  138.869676][ T5062] loop0: detected capacity change from 0 to 512
[  138.875206][   T26] audit: type=1326 audit(1773337585.194:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5042 comm="syz.4.174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7f4e14e4d799 code=0x7ffc0000
[  138.909062][   T26] audit: type=1326 audit(1773337585.204:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5042 comm="syz.4.174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e14e4d799 code=0x7ffc0000
[  138.992894][ T5062] EXT4-fs warning (device loop0): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  139.025925][ T4558] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  139.085850][   T26] audit: type=1326 audit(1773337585.214:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5042 comm="syz.4.174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e14e4d799 code=0x7ffc0000
[  139.109984][ T5062] EXT4-fs warning (device loop0): dx_probe:881: Enable large directory feature to access it
[  139.161494][ T5062] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.178: Corrupt directory, running e2fsck is recommended
[  139.198721][ T5068] netlink: 44 bytes leftover after parsing attributes in process `syz.3.180'.
[  139.249574][   T26] audit: type=1326 audit(1773337585.224:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5042 comm="syz.4.174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4e14e4d799 code=0x7ffc0000
[  139.284314][ T5062] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -117
[  139.324710][ T5062] EXT4-fs error (device loop0): ext4_iget_extra_inode:4566: inode #15: comm syz.0.178: corrupted in-inode xattr
[  139.402299][ T5066] loop2: detected capacity change from 0 to 32768
[  139.412136][   T26] audit: type=1326 audit(1773337585.444:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5042 comm="syz.4.174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e14e4d799 code=0x7ffc0000
[  139.414859][ T5062] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.178: couldn't read orphan inode 15 (err -117)
[  139.434685][   T26] audit: type=1326 audit(1773337585.454:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5042 comm="syz.4.174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e14e4d799 code=0x7ffc0000
[  139.434723][   T26] audit: type=1326 audit(1773337585.494:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5042 comm="syz.4.174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4e14e4d799 code=0x7ffc0000
[  139.499339][ T5062] EXT4-fs (loop0): mounted filesystem without journal. Opts: dioread_lock,noblock_validity,auto_da_alloc=0x0000000000000004,jqfmt=vfsold,bsddf,grpjquota=.dax,resuid=0x0000000000000000,lazytime,grpid,,,errors=continue. Quota mode: writeback.
[  139.535880][ T4558] usb 5-1: Using ep0 maxpacket: 8
[  139.580527][   T26] audit: type=1326 audit(1773337585.524:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5042 comm="syz.4.174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e14e4d799 code=0x7ffc0000
[  139.619858][ T5062] EXT4-fs warning (device loop0): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  139.739256][ T5062] EXT4-fs warning (device loop0): dx_probe:881: Enable large directory feature to access it
[  139.782881][ T5062] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.178: Corrupt directory, running e2fsck is recommended
[  139.818130][ T5066] XFS (loop2): Mounting V5 Filesystem
[  139.826926][ T4558] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  139.847325][ T4558] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xF9, skipping
[  139.857943][ T4558] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  139.868826][ T4558] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  140.126621][ T5081] EXT4-fs warning (device loop0): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  140.156322][ T5066] XFS (loop2): Ending clean mount
[  140.293966][ T5066] XFS (loop2): Quotacheck needed: Please wait.
[  140.476155][ T5081] EXT4-fs warning (device loop0): dx_probe:881: Enable large directory feature to access it
[  140.555527][ T5081] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.178: Corrupt directory, running e2fsck is recommended
[  140.639432][ T5066] XFS (loop2): Quotacheck: Done.
[  140.784505][ T4558] usb 5-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8
[  140.952908][ T4558] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  140.962062][ T4558] usb 5-1: Product: syz
[  140.966368][ T4558] usb 5-1: Manufacturer: syz
[  141.054109][ T4558] usb 5-1: SerialNumber: syz
[  141.336859][ T5084] netlink: 64 bytes leftover after parsing attributes in process `syz.3.182'.
[  141.347993][ T4558] usb 5-1: config 0 descriptor??
[  141.376188][ T5059] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  141.401064][ T4198] XFS (loop2): Unmounting Filesystem
[  141.418780][ T4558] ati_remote_probe: Unexpected desc.bNumEndpoints
[  141.482742][ T4176] usb 5-1: USB disconnect, device number 2
[  141.594625][ T5092] loop4: detected capacity change from 0 to 1024
[  141.733901][ T5092] EXT4-fs (loop4): Ignoring removed orlov option
[  141.748289][ T5092] EXT4-fs (loop4): Invalid want_extra_isize 9
[  143.106288][   T26] kauditd_printk_skb: 1 callbacks suppressed
[  143.106432][   T26] audit: type=1326 audit(1773337591.244:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5101 comm="syz.1.188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdd0f57799 code=0x7ffc0000
[  143.572153][   T26] audit: type=1326 audit(1773337591.244:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5101 comm="syz.1.188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdd0f57799 code=0x7ffc0000
[  143.650544][   T26] audit: type=1326 audit(1773337591.254:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5101 comm="syz.1.188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7fbdd0f57799 code=0x7ffc0000
[  143.676115][ T4176] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  143.683274][ T5110] netlink: 44 bytes leftover after parsing attributes in process `syz.4.191'.
[  144.136613][ T4176] usb 4-1: unable to get BOS descriptor or descriptor too short
[  144.213121][   T26] audit: type=1326 audit(1773337591.254:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5101 comm="syz.1.188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdd0f57799 code=0x7ffc0000
[  144.297077][ T4176] usb 4-1: config 63 has an invalid interface number: 66 but max is 0
[  144.387967][ T4176] usb 4-1: config 63 has an invalid descriptor of length 0, skipping remainder of the config
[  144.413157][   T26] audit: type=1326 audit(1773337591.254:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5101 comm="syz.1.188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdd0f57799 code=0x7ffc0000
[  144.436172][   T26] audit: type=1326 audit(1773337591.254:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5101 comm="syz.1.188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fbdd0f57799 code=0x7ffc0000
[  144.494154][   T26] audit: type=1326 audit(1773337591.264:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5101 comm="syz.1.188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdd0f57799 code=0x7ffc0000
[  144.497996][ T4176] usb 4-1: config 63 has no interface number 0
[  144.545908][   T26] audit: type=1326 audit(1773337591.274:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5101 comm="syz.1.188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdd0f57799 code=0x7ffc0000
[  144.617194][ T4176] usb 4-1: config 63 interface 66 has no altsetting 0
[  144.634350][   T26] audit: type=1326 audit(1773337591.274:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5101 comm="syz.1.188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fbdd0f57799 code=0x7ffc0000
[  144.727019][   T26] audit: type=1326 audit(1773337591.274:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5101 comm="syz.1.188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdd0f57799 code=0x7ffc0000
[  144.987031][ T4176] usb 4-1: string descriptor 0 read error: -22
[  145.009670][ T4176] usb 4-1: New USB device found, idVendor=174f, idProduct=8acf, bcdDevice=39.f4
[  145.320929][ T4176] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  145.538544][ T4176] usb 4-1: Found UVC 0.07 device <unnamed> (174f:8acf)
[  145.559003][ T5127] device syzkaller0 entered promiscuous mode
[  145.605690][ T4176] usb 4-1: No valid video chain found.
[  145.765423][ T4176] usb 4-1: USB disconnect, device number 4
[  145.857631][ T5132] loop2: detected capacity change from 0 to 32768
[  145.941672][ T5132] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.195 (5132)
[  146.065920][ T4558] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  146.231143][ T5132] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm
[  146.243354][ T5132] BTRFS info (device loop2): using free space tree
[  146.257042][ T5132] BTRFS info (device loop2): has skinny extents
[  146.527127][ T4558] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  146.550699][ T4558] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  146.579756][ T4558] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  146.673746][ T5155] netlink: 64 bytes leftover after parsing attributes in process `syz.0.197'.
[  147.843290][ T5132] BTRFS info (device loop2): enabling ssd optimizations
[  147.855582][ T4558] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  148.026275][ T5133] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[  148.935851][ T4558] usb 5-1: USB disconnect, device number 3
[  150.429112][ T4630] udevd[4630]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  150.437607][ T5171] netlink: 44 bytes leftover after parsing attributes in process `syz.3.203'.
[  151.139226][   T26] kauditd_printk_skb: 1 callbacks suppressed
[  151.139608][   T26] audit: type=1326 audit(1773337599.184:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5174 comm="syz.4.205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e14e4d799 code=0x7ffc0000
[  152.349252][ T5183] device syzkaller0 entered promiscuous mode
[  152.380101][ T5185] loop0: detected capacity change from 0 to 512
[  152.408576][   T26] audit: type=1326 audit(1773337599.184:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5174 comm="syz.4.205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e14e4d799 code=0x7ffc0000
[  152.450297][ T5185] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=684ec018, mo2=0002]
[  152.460009][ T5185] System zones: 0-2, 18-18, 34-34
[  152.478165][ T5185] EXT4-fs (loop0): orphan cleanup on readonly fs
[  152.495077][   T26] audit: type=1326 audit(1773337599.204:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5174 comm="syz.4.205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7f4e14e4d799 code=0x7ffc0000
[  152.527033][ T5185] EXT4-fs error (device loop0): ext4_orphan_get:1426: comm syz.0.206: bad orphan inode 13
[  152.697525][ T5185] ext4_test_bit(bit=12, block=18) = 1
[  152.745844][   T26] audit: type=1326 audit(1773337599.204:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5174 comm="syz.4.205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e14e4d799 code=0x7ffc0000
[  152.781623][ T5185] is_bad_inode(inode)=0
[  152.785904][ T5185] NEXT_ORPHAN(inode)=2130706432
[  152.791850][ T5185] max_ino=32
[  152.795088][ T5185] i_nlink=1
[  152.800688][ T5185] EXT4-fs (loop0): mounted filesystem without journal. Opts: debug,discard,usrquota,noinit_itable,data_err=ignore,,errors=continue. Quota mode: writeback.
[  152.827551][   T26] audit: type=1326 audit(1773337599.204:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5174 comm="syz.4.205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e14e4d799 code=0x7ffc0000
[  153.014460][ T5196] process 'syz.1.209' launched './file0' with NULL argv: empty string added
[  153.389923][ T5198] netlink: 168 bytes leftover after parsing attributes in process `syz.0.206'.
[  153.836222][   T26] audit: type=1326 audit(1773337599.314:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5174 comm="syz.4.205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4e14e4d799 code=0x7ffc0000
[  154.016971][   T26] audit: type=1326 audit(1773337599.324:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5174 comm="syz.4.205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e14e4d799 code=0x7ffc0000
[  154.048790][   T26] audit: type=1326 audit(1773337599.324:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5174 comm="syz.4.205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e14e4d799 code=0x7ffc0000
[  154.106235][ T5186] device syzkaller0 entered promiscuous mode
[  154.124900][   T26] audit: type=1326 audit(1773337599.324:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5174 comm="syz.4.205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4e14e4d799 code=0x7ffc0000
[  154.785084][   T26] audit: type=1326 audit(1773337599.324:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5174 comm="syz.4.205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e14e4d799 code=0x7ffc0000
[  158.149872][   T26] kauditd_printk_skb: 1 callbacks suppressed
[  158.149891][   T26] audit: type=1326 audit(1773337606.374:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5227 comm="syz.0.218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f846156d799 code=0x7ffc0000
[  158.898517][   T26] audit: type=1326 audit(1773337606.374:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5227 comm="syz.0.218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f846156d799 code=0x7ffc0000
[  158.924494][   T26] audit: type=1326 audit(1773337606.374:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5227 comm="syz.0.218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7f846156d799 code=0x7ffc0000
[  159.049604][   T26] audit: type=1326 audit(1773337606.384:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5227 comm="syz.0.218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f846156d799 code=0x7ffc0000
[  159.142829][ T5254] device syzkaller0 entered promiscuous mode
[  159.147398][   T26] audit: type=1326 audit(1773337606.384:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5227 comm="syz.0.218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f846156d799 code=0x7ffc0000
[  159.412664][   T26] audit: type=1326 audit(1773337606.384:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5227 comm="syz.0.218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f846156d799 code=0x7ffc0000
[  159.961505][   T26] audit: type=1326 audit(1773337606.384:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5227 comm="syz.0.218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f846156d799 code=0x7ffc0000
[  160.233393][   T26] audit: type=1326 audit(1773337606.384:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5227 comm="syz.0.218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f846156d799 code=0x7ffc0000
[  160.255482][    C0] vkms_vblank_simulate: vblank timer overrun
[  160.298780][   T26] audit: type=1326 audit(1773337606.384:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5227 comm="syz.0.218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f846156d799 code=0x7ffc0000
[  160.320786][    C0] vkms_vblank_simulate: vblank timer overrun
[  160.795225][ T5278] infiniband syz1: set active
[  160.800802][ T5278] infiniband syz1: added syz_tun
[  160.888323][ T5278] RDS/IB: syz1: added
[  160.894180][ T5278] smc: adding ib device syz1 with port count 1
[  160.902258][ T5278] smc:    ib device syz1 port 1 has pnetid 
[  163.535256][   T26] audit: type=1326 audit(1773337606.384:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5227 comm="syz.0.218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f846156d799 code=0x7ffc0000
[  163.653590][   T26] audit: type=1326 audit(1773337606.384:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5227 comm="syz.0.218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f846156d799 code=0x7ffc0000
[  163.664697][ T5302] loop1: detected capacity change from 0 to 2048
[  163.823793][ T5302] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  165.610985][ T5313] netlink: 64 bytes leftover after parsing attributes in process `syz.4.237'.
[  166.905116][ T5317] device syzkaller0 entered promiscuous mode
[  167.274389][ T5323] sd 0:0:1:0: device reset
[  167.803382][ T5325] netlink: 64 bytes leftover after parsing attributes in process `syz.0.250'.
[  168.218027][ T5335] netlink: 12 bytes leftover after parsing attributes in process `syz.3.241'.
[  168.244108][ T5333] device syzkaller0 entered promiscuous mode
[  170.177223][ T5346] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000)
[  171.090546][ T5355] syz.2.248 (5355): drop_caches: 2
[  172.033559][ T5363] sd 0:0:1:0: device reset
[  173.475243][ T5375] device syzkaller0 entered promiscuous mode
[  173.704490][ T5380] netlink: 64 bytes leftover after parsing attributes in process `syz.4.256'.
[  175.079517][ T5385] loop0: detected capacity change from 0 to 32768
[  175.143980][ T5385] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.260 (5385)
[  175.181373][ T5385] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm
[  175.190519][ T5385] BTRFS info (device loop0): using free space tree
[  175.197193][ T5385] BTRFS info (device loop0): has skinny extents
[  175.287685][ T5387] device syzkaller0 entered promiscuous mode
[  175.299573][ T5391] rdma_rxe: rxe_register_device failed with error -23
[  175.308233][ T5391] rdma_rxe: failed to add syz_tun
[  175.645954][ T5385] BTRFS info (device loop0): enabling ssd optimizations
[  175.801238][ T5366] loop1: detected capacity change from 0 to 32768
[  175.881968][ T5366] BTRFS warning: duplicate device /dev/loop1 devid 1 generation 8 scanned by syz.1.253 (5366)
[  175.896769][   T13] Bluetooth: hci0: command 0x0406 tx timeout
[  175.902917][   T13] Bluetooth: hci2: command 0x0406 tx timeout
[  175.911924][ T4547] Bluetooth: hci1: command 0x0406 tx timeout
[  175.921951][ T4547] Bluetooth: hci4: command 0x0406 tx timeout
[  177.706510][ T5423] sd 0:0:1:0: device reset
[  178.186084][   T13] Bluetooth: hci3: command 0x0406 tx timeout
[  179.207338][ T5434] device syzkaller0 entered promiscuous mode
[  179.520343][ T5191] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by udevd (5191)
[  179.818098][ T5441] loop0: detected capacity change from 0 to 4096
[  180.028978][ T5441] ntfs3: loop0: Mark volume as dirty due to NTFS errors
[  180.171936][ T5441] ntfs3: loop0: Failed to load $Extend.
[  180.252474][   T26] audit: type=1800 audit(1773337628.484:77): pid=5441 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.266" name=2E02 dev="loop0" ino=33 res=0 errno=0
[  180.304631][ T5447] Unsupported ieee802154 address type: 0
[  183.256534][ T5466] sd 0:0:1:0: device reset
[  185.234933][ T5473] device syzkaller0 entered promiscuous mode
[  185.424821][ T5479] loop0: detected capacity change from 0 to 64
[  185.487883][ T5479] hfs: dir_umask requires a value
[  185.493325][ T5479] hfs: unable to parse mount options
[  185.547718][ T5475] batman_adv: batadv0: Adding interface: gretap1
[  185.554107][ T5475] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  185.581013][ T5475] batman_adv: batadv0: Interface activated: gretap1
[  186.964287][ T5503] bridge0: port 1(syz_tun) entered blocking state
[  187.096753][ T5503] bridge0: port 1(syz_tun) entered disabled state
[  187.975335][ T5503] device syz_tun entered promiscuous mode
[  188.672873][ T5503] bridge0: port 1(syz_tun) entered blocking state
[  188.680125][ T5503] bridge0: port 1(syz_tun) entered forwarding state
[  189.101375][ T5518] loop1: detected capacity change from 0 to 32768
[  189.956018][ T5518] XFS (loop1): Mounting V5 Filesystem
[  190.696823][ T5518] XFS (loop1): Ending clean mount
[  190.713525][ T5518] XFS (loop1): Quotacheck needed: Please wait.
[  190.923147][ T5536] device syzkaller0 entered promiscuous mode
[  191.021435][ T5518] XFS (loop1): Quotacheck: Done.
[  191.533042][ T4201] XFS (loop1): Unmounting Filesystem
[  191.862731][ T5524] loop2: detected capacity change from 0 to 32768
[  192.004864][ T5548] fuse: Bad value for 'fd'
[  194.426609][ T1425] ieee802154 phy0 wpan0: encryption failed: -22
[  194.434878][ T1425] ieee802154 phy1 wpan1: encryption failed: -22
[  197.175023][ T5585] device syzkaller0 entered promiscuous mode
[  197.440435][ T5571] loop3: detected capacity change from 0 to 32768
[  197.743417][ T5571] XFS (loop3): Mounting V5 Filesystem
[  198.958270][ T5571] XFS (loop3): Ending clean mount
[  200.627836][ T5624] loop4: detected capacity change from 0 to 128
[  200.736516][ T4190] XFS (loop3): Unmounting Filesystem
[  200.758655][ T5626] device syzkaller0 entered promiscuous mode
[  201.056867][ T5624] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  201.176038][ T5624] ext4 filesystem being mounted at /67/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  201.599595][ T5622] overlayfs: failed to clone upperpath
[  201.668841][ T5620] loop0: detected capacity change from 0 to 32768
[  201.726589][ T5620] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm
[  201.761550][ T5620] BTRFS info (device loop0): force clearing of disk cache
[  201.791460][ T5620] BTRFS info (device loop0): metadata ratio 0
[  201.812867][ T5620] BTRFS info (device loop0): enabling ssd optimizations
[  201.836090][ T1108] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  201.844559][ T5620] BTRFS info (device loop0): using spread ssd allocation scheme
[  201.891184][ T5620] BTRFS info (device loop0): using free space tree
[  201.921443][ T5620] BTRFS info (device loop0): has skinny extents
[  202.105875][ T1108] usb 2-1: Using ep0 maxpacket: 16
[  202.140001][ T5646] loop3: detected capacity change from 0 to 64
[  202.357426][ T1108] usb 2-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  202.395325][ T1108] usb 2-1: config 0 interface 0 has no altsetting 0
[  202.404404][ T1108] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[  202.417128][ T1108] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  202.461613][ T1108] usb 2-1: config 0 descriptor??
[  202.467303][ T4190] hfs: node 4:3 still has 1 user(s)!
[  202.559392][ T5620] BTRFS info (device loop0): clearing free space tree
[  202.585504][ T5620] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  202.659147][ T5620] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  203.574785][ T1108] mcp2221 0003:04D8:00DD.0001: USB HID v0.01 Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0
[  203.682191][ T5620] BTRFS info (device loop0): creating free space tree
[  203.728186][ T5620] BTRFS info (device loop0): setting compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  203.762915][ T5620] BTRFS info (device loop0): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  204.445019][ T1108] usb 2-1: USB disconnect, device number 4
[  205.967672][ T5675] loop2: detected capacity change from 0 to 32768
[  206.581380][ T5675] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.331 (5675)
[  206.957961][ T5697] device syzkaller0 entered promiscuous mode
[  207.408971][ T5675] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm
[  207.454545][ T5675] BTRFS info (device loop2): using free space tree
[  207.489131][ T5675] BTRFS info (device loop2): has skinny extents
[  208.592687][ T5675] BTRFS error (device loop2): open_ctree failed: -12
[  210.040884][ T5741] loop2: detected capacity change from 0 to 32768
[  210.231459][ T5741] XFS (loop2): Mounting V5 Filesystem
[  210.289618][ T5741] XFS (loop2): Ending clean mount
[  210.300995][ T5741] XFS (loop2): Quotacheck needed: Please wait.
[  210.426894][ T5741] XFS (loop2): Quotacheck: Done.
[  210.791019][ T5752] loop4: detected capacity change from 0 to 512
[  210.962367][ T4198] XFS (loop2): Unmounting Filesystem
[  211.128789][ T5752] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=684ec018, mo2=0002]
[  211.183059][ T5752] System zones: 0-2, 18-18, 34-34
[  211.286930][ T5752] EXT4-fs (loop4): orphan cleanup on readonly fs
[  211.316402][ T5752] EXT4-fs error (device loop4): ext4_orphan_get:1426: comm syz.4.346: bad orphan inode 13
[  211.387921][ T5752] ext4_test_bit(bit=12, block=18) = 1
[  211.406289][ T5752] is_bad_inode(inode)=0
[  211.410572][ T5752] NEXT_ORPHAN(inode)=2130706432
[  211.465876][ T5752] max_ino=32
[  211.481049][ T5752] i_nlink=1
[  211.496054][ T5752] EXT4-fs (loop4): mounted filesystem without journal. Opts: debug,discard,usrquota,noinit_itable,data_err=ignore,,errors=continue. Quota mode: writeback.
[  211.872512][ T5764] netlink: 168 bytes leftover after parsing attributes in process `syz.4.346'.
[  213.865467][ T5778] netlink: 64 bytes leftover after parsing attributes in process `syz.2.352'.
[  217.282709][ T5799] loop4: detected capacity change from 0 to 32768
[  217.841437][ T5799] XFS (loop4): Mounting V5 Filesystem
[  219.105915][    T7] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  219.149265][ T5799] XFS (loop4): Ending clean mount
[  219.157105][ T5799] XFS (loop4): Quotacheck needed: Please wait.
[  219.281632][ T5799] XFS (loop4): Quotacheck: Done.
[  220.021415][    T7] usb 4-1: Using ep0 maxpacket: 16
[  220.042662][ T4194] XFS (loop4): Unmounting Filesystem
[  220.201550][    T7] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  220.216165][    T7] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  220.244344][    T7] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  220.298518][    T7] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  220.345921][    T7] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  220.426999][    T7] usb 4-1: config 0 descriptor??
[  220.453017][    T7] usb 4-1: can't set config #0, error -71
[  220.474343][    T7] usb 4-1: USB disconnect, device number 5
[  222.741269][ T5849] loop1: detected capacity change from 0 to 512
[  222.969759][ T5851] loop3: detected capacity change from 0 to 32768
[  222.979184][ T5849] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=684ec018, mo2=0002]
[  223.005913][ T5849] System zones: 0-2, 18-18, 34-34
[  223.012214][ T5849] EXT4-fs (loop1): orphan cleanup on readonly fs
[  223.147197][ T5849] EXT4-fs error (device loop1): ext4_orphan_get:1426: comm syz.1.372: bad orphan inode 13
[  223.187339][ T5849] ext4_test_bit(bit=12, block=18) = 1
[  223.192939][ T5849] is_bad_inode(inode)=0
[  223.219284][ T5851] XFS (loop3): Mounting V5 Filesystem
[  223.245911][ T5849] NEXT_ORPHAN(inode)=2130706432
[  223.250804][ T5849] max_ino=32
[  223.254002][ T5849] i_nlink=1
[  223.326233][ T5849] EXT4-fs (loop1): mounted filesystem without journal. Opts: debug,discard,usrquota,noinit_itable,data_err=ignore,,errors=continue. Quota mode: writeback.
[  223.381692][ T5851] XFS (loop3): Ending clean mount
[  223.391139][ T5851] XFS (loop3): Quotacheck needed: Please wait.
[  223.550958][ T5851] XFS (loop3): Quotacheck: Done.
[  223.730953][ T5867] netlink: 168 bytes leftover after parsing attributes in process `syz.1.372'.
[  225.483151][ T4190] XFS (loop3): Unmounting Filesystem
[  225.539901][ T5857] loop4: detected capacity change from 0 to 32768
[  225.705723][ T5857] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.363 (5857)
[  225.795061][ T5857] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm
[  225.816028][ T5857] BTRFS warning (device loop4): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  225.885888][ T5857] BTRFS info (device loop4): trying to use backup root at mount time
[  225.894675][ T5857] BTRFS info (device loop4): setting nodatasum
[  225.935937][ T5857] BTRFS info (device loop4): enabling ssd optimizations
[  225.943038][ T5857] BTRFS info (device loop4): using spread ssd allocation scheme
[  225.975886][ T5857] BTRFS info (device loop4): turning on flush-on-commit
[  225.983094][ T5857] BTRFS info (device loop4): force zlib compression, level 3
[  226.005868][ T5857] BTRFS info (device loop4): using free space tree
[  226.012527][ T5857] BTRFS info (device loop4): has skinny extents
[  226.145951][ T4886] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[  226.478012][ T5857] BTRFS error (device loop4): open_ctree failed: -12
[  226.487141][ T4181] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by udevd (4181)
[  226.566074][ T4886] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  226.581129][ T4886] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  226.612089][ T4886] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  226.632044][ T4886] usb 3-1: config 1 has no interface number 1
[  226.638496][ T4886] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  226.662216][ T4886] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x6 has invalid wMaxPacketSize 0
[  227.759748][ T4886] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  227.769744][ T4886] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  227.778044][ T4886] usb 3-1: Product: syz
[  227.782841][ T4886] usb 3-1: Manufacturer: syz
[  227.788150][ T4886] usb 3-1: SerialNumber: syz
[  227.882185][ T5908] sd 0:0:1:0: device reset
[  228.706048][ T4886] usb 3-1: MIDIStreaming interface descriptor not found
[  228.880254][ T4886] usb 3-1: USB disconnect, device number 2
[  229.015175][ T5892] loop3: detected capacity change from 0 to 32768
[  229.156949][ T5892] (syz.3.375,5892,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  230.044151][ T5892] (syz.3.375,5892,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  230.106594][ T5926] loop1: detected capacity change from 0 to 512
[  230.118136][ T5192] udevd[5192]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  230.214809][ T5892] (syz.3.375,5892,0):ocfs2_initialize_super:2313 ERROR: status = -12
[  230.243710][ T5892] (syz.3.375,5892,1):ocfs2_fill_super:1177 ERROR: status = -12
[  230.312019][ T5926] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=684ec018, mo2=0002]
[  230.466027][ T5926] System zones: 0-2, 18-18, 34-34
[  230.472350][ T5926] EXT4-fs (loop1): orphan cleanup on readonly fs
[  230.569065][ T5926] EXT4-fs error (device loop1): ext4_orphan_get:1426: comm syz.1.384: bad orphan inode 13
[  230.646709][ T5926] ext4_test_bit(bit=12, block=18) = 1
[  230.652473][ T5926] is_bad_inode(inode)=0
[  230.722304][ T5926] NEXT_ORPHAN(inode)=2130706432
[  230.759344][ T5926] max_ino=32
[  230.762598][ T5926] i_nlink=1
[  230.765955][ T4554] Bluetooth: hci5: command 0x0409 tx timeout
[  230.806009][ T5926] EXT4-fs (loop1): mounted filesystem without journal. Opts: debug,discard,usrquota,noinit_itable,data_err=ignore,,errors=continue. Quota mode: writeback.
[  231.248073][ T5943] netlink: 168 bytes leftover after parsing attributes in process `syz.1.384'.
[  231.859722][ T5909] chnl_net:caif_netlink_parms(): no params data found
[  232.112606][ T5937] loop3: detected capacity change from 0 to 32768
[  232.275822][ T5953] Unsupported ieee802154 address type: 0
[  232.537299][ T5955] sd 0:0:1:0: device reset
[  232.866338][ T4554] Bluetooth: hci5: command 0x041b tx timeout
[  232.918633][ T5909] bridge0: port 1(bridge_slave_0) entered blocking state
[  232.926824][ T5909] bridge0: port 1(bridge_slave_0) entered disabled state
[  232.935230][ T5909] device bridge_slave_0 entered promiscuous mode
[  232.944045][ T5909] bridge0: port 2(bridge_slave_1) entered blocking state
[  232.951240][ T5909] bridge0: port 2(bridge_slave_1) entered disabled state
[  232.960044][ T5909] device bridge_slave_1 entered promiscuous mode
[  234.431150][ T5973] loop1: detected capacity change from 0 to 512
[  234.488162][ T5909] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  234.503034][ T5975] loop2: detected capacity change from 0 to 1024
[  234.539858][ T5909] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  234.626285][ T5909] team0: Port device team_slave_0 added
[  234.634087][ T5973] EXT4-fs (loop1): 1 truncate cleaned up
[  234.654952][ T5909] team0: Port device team_slave_1 added
[  234.665080][ T5973] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  234.688910][ T5909] batman_adv: batadv0: Adding interface: batadv_slave_0
[  234.700639][ T5909] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  234.857790][ T5909] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  234.860760][    T9] hfsplus: b-tree write err: -5, ino 25
[  234.882863][ T5982] loop4: detected capacity change from 0 to 512
[  234.925923][   T21] Bluetooth: hci5: command 0x040f tx timeout
[  234.948487][ T5909] batman_adv: batadv0: Adding interface: batadv_slave_1
[  234.955472][ T5909] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  234.961198][    T9] hfsplus: b-tree write err: -5, ino 4
[  235.002509][ T5986] loop1: detected capacity change from 0 to 128
[  235.069704][ T5986] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  235.132496][    T9] hfsplus: b-tree write err: -5, ino 2
[  235.144221][    T9] hfsplus: b-tree write err: -5, ino 26
[  235.152019][ T5909] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  235.173759][ T5986] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  235.259000][ T5982] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=684ec018, mo2=0002]
[  235.269433][ T5982] System zones: 0-2, 18-18, 34-34
[  235.401196][ T5982] EXT4-fs (loop4): orphan cleanup on readonly fs
[  235.413336][ T5982] EXT4-fs error (device loop4): ext4_orphan_get:1426: comm syz.4.400: bad orphan inode 13
[  235.432653][ T5982] ext4_test_bit(bit=12, block=18) = 1
[  235.448574][ T5982] is_bad_inode(inode)=0
[  235.458095][ T5986] device gretap0 left promiscuous mode
[  235.466289][ T5986] bridge0: port 3(gretap0) entered disabled state
[  235.628958][ T5982] NEXT_ORPHAN(inode)=2130706432
[  235.633101][ T5909] device hsr_slave_0 entered promiscuous mode
[  235.858274][ T5982] max_ino=32
[  235.864866][ T5982] i_nlink=1
[  235.870488][ T5982] EXT4-fs (loop4): mounted filesystem without journal. Opts: debug,discard,usrquota,noinit_itable,data_err=ignore,,errors=continue. Quota mode: writeback.
[  236.064229][ T5909] device hsr_slave_1 entered promiscuous mode
[  236.090072][ T5909] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  236.596019][ T5999] netlink: 168 bytes leftover after parsing attributes in process `syz.4.400'.
[  236.910434][ T5909] Cannot create hsr debugfs directory
[  237.127437][ T6002] sd 0:0:1:0: device reset
[  237.434191][ T4554] Bluetooth: hci5: command 0x0419 tx timeout
[  237.637819][ T5909] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  237.705714][ T5909] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  237.730854][ T6005] loop3: detected capacity change from 0 to 32768
[  237.753575][ T5909] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  237.953357][ T5909] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  239.227245][ T6020] loop4: detected capacity change from 0 to 4096
[  239.262018][ T6005] XFS (loop3): Mounting V5 Filesystem
[  239.424020][ T5909] 8021q: adding VLAN 0 to HW filter on device bond0
[  239.475959][ T4399] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  239.494601][ T4399] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  239.518399][ T5909] 8021q: adding VLAN 0 to HW filter on device team0
[  239.553208][ T4399] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  239.564073][ T4399] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  239.607045][ T6020] ntfs3: Unknown parameter 'windows_names'
[  239.844020][ T4399] bridge0: port 1(bridge_slave_0) entered blocking state
[  239.851853][ T4399] bridge0: port 1(bridge_slave_0) entered forwarding state
[  239.863690][ T6005] XFS (loop3): Ending clean mount
[  239.908061][ T6005] XFS (loop3): Quotacheck needed: Please wait.
[  240.684631][ T6037] netlink: 64 bytes leftover after parsing attributes in process `syz.4.411'.
[  240.864597][ T6005] XFS (loop3): Quotacheck: Done.
[  240.891894][ T4399] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  240.906254][ T4190] XFS (loop3): Unmounting Filesystem
[  240.936954][ T6041] loop4: detected capacity change from 0 to 128
[  240.956362][ T6041] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  240.998757][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  241.016560][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  241.016726][ T6041] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  241.032288][ T4312] bridge0: port 2(bridge_slave_1) entered blocking state
[  241.041764][ T4312] bridge0: port 2(bridge_slave_1) entered forwarding state
[  241.103323][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  242.431270][ T6043] loop1: detected capacity change from 0 to 40427
[  242.532037][ T6043] F2FS-fs (loop1): Corrupted extension count (64 + 1 > 64)
[  242.539898][ T6043] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  242.566806][ T6043] F2FS-fs (loop1): build fault injection attr: rate: 0, type: 0x216
[  242.599818][ T6043] F2FS-fs (loop1): invalid crc value
[  242.811738][ T6043] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109)
[  243.029857][ T6043] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  243.037128][ T6043] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  243.960218][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  243.999617][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  244.032136][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  244.041748][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  244.059631][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  244.162683][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  244.200697][ T6041] bridge0: port 2(gretap0) entered blocking state
[  244.207450][ T6041] bridge0: port 2(gretap0) entered disabled state
[  244.214997][ T6041] device gretap0 entered promiscuous mode
[  244.222482][ T6041] bridge0: port 2(gretap0) entered blocking state
[  244.229086][ T6041] bridge0: port 2(gretap0) entered forwarding state
[  244.239511][ T6047] device gretap0 left promiscuous mode
[  244.245324][ T6047] bridge0: port 2(gretap0) entered disabled state
[  244.408542][ T4376] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  244.605647][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  245.267587][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  245.339547][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  245.349078][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  245.400372][ T4376] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  246.122655][ T4376] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  246.583240][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  246.601259][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  246.658735][ T5909] 8021q: adding VLAN 0 to HW filter on device batadv0
[  246.988563][ T4376] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  247.064848][ T6082] Unsupported ieee802154 address type: 0
[  247.765891][   T21] usb 2-1: new full-speed USB device number 5 using dummy_hcd
[  248.010804][ T6084] loop2: detected capacity change from 0 to 32768
[  248.140602][ T6091] netlink: 64 bytes leftover after parsing attributes in process `syz.4.423'.
[  248.254038][ T6084] XFS (loop2): Mounting V5 Filesystem
[  248.336195][   T21] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config
[  248.563774][ T6090] netlink: 36 bytes leftover after parsing attributes in process `syz.3.424'.
[  248.656440][   T21] usb 2-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b
[  248.703205][   T21] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  248.813206][   T21] usb 2-1: Product: syz
[  248.871384][   T21] usb 2-1: Manufacturer: syz
[  248.946047][   T21] usb 2-1: SerialNumber: syz
[  249.114235][ T6084] XFS (loop2): Ending clean mount
[  249.127196][ T6084] XFS (loop2): Quotacheck needed: Please wait.
[  249.202023][   T21] usb 2-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state
[  249.277730][ T6084] XFS (loop2): Quotacheck: Done.
[  250.212252][   T21] usb 2-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter)
[  250.432067][ T4198] XFS (loop2): Unmounting Filesystem
[  250.487983][ T6113] loop4: detected capacity change from 0 to 128
[  250.571418][ T6113] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  250.591910][   T21] usb 2-1: USB disconnect, device number 5
[  250.674647][ T6113] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  250.985287][ T6118] bridge0: port 2(gretap0) entered blocking state
[  250.991976][ T6118] bridge0: port 2(gretap0) entered disabled state
[  250.999691][ T6118] device gretap0 entered promiscuous mode
[  251.006430][ T6118] bridge0: port 2(gretap0) entered blocking state
[  251.013059][ T6118] bridge0: port 2(gretap0) entered forwarding state
[  251.022801][ T6118] device gretap0 left promiscuous mode
[  251.028462][ T6118] bridge0: port 2(gretap0) entered disabled state
[  251.305375][ T6121] device syzkaller0 entered promiscuous mode
[  251.385740][ T5051] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  251.407436][ T5051] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  251.563399][ T5909] device veth0_vlan entered promiscuous mode
[  253.001030][ T5909] device veth1_vlan entered promiscuous mode
[  253.262412][ T5051] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  253.282222][ T5051] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  253.314590][ T5051] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  253.413463][ T5051] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  253.422930][ T5051] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  253.464590][ T6146] netlink: 36 bytes leftover after parsing attributes in process `syz.3.435'.
[  253.519085][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  253.540945][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  253.611333][ T5909] device veth0_macvtap entered promiscuous mode
[  253.638901][ T5909] device veth1_macvtap entered promiscuous mode
[  253.776196][ T6154] loop3: detected capacity change from 0 to 32768
[  254.406105][ T5051] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  254.417021][ T5051] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  254.466794][ T5909] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  254.478932][ T6154] XFS (loop3): Mounting V5 Filesystem
[  254.478975][ T5909] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  254.495538][ T5909] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  254.506824][ T5909] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  254.517342][ T5909] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  254.565986][ T5909] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  254.578086][ T5909] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  254.589010][ T5909] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  254.602120][ T5909] batman_adv: batadv0: Interface activated: batadv_slave_0
[  254.611153][ T4968] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  254.657109][ T6154] XFS (loop3): Ending clean mount
[  254.665679][ T6154] XFS (loop3): Quotacheck needed: Please wait.
[  254.783436][ T6154] XFS (loop3): Quotacheck: Done.
[  255.079374][ T4968] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  256.273091][ T1425] ieee802154 phy0 wpan0: encryption failed: -22
[  256.279474][ T1425] ieee802154 phy1 wpan1: encryption failed: -22
[  256.293191][ T4190] XFS (loop3): Unmounting Filesystem
[  256.359064][ T5909] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  256.406289][ T5909] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  256.442940][ T5909] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  256.460268][ T5909] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  256.472692][ T5909] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  256.490257][ T5909] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  256.502341][ T5909] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  256.520448][ T5909] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  256.603784][ T5909] batman_adv: batadv0: Interface activated: batadv_slave_1
[  256.651425][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  256.794057][ T1267] Bluetooth: hci0: Frame reassembly failed (-84)
[  258.062272][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  258.485433][ T5909] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  258.523052][ T5909] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  258.536815][ T5909] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  258.545582][ T5909] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  258.856101][ T4228] Bluetooth: hci0: command 0x1003 tx timeout
[  258.864124][ T4197] Bluetooth: hci0: sending frame failed (-49)
[  259.782459][ T6206] netlink: 36 bytes leftover after parsing attributes in process `syz.1.448'.
[  259.827307][ T1245] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  259.925835][ T6211] input: syz0 as /devices/virtual/input/input6
[  260.061966][ T1245] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  260.330443][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  260.773271][ T4322] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  260.801742][ T4322] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  260.870150][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  260.926112][ T4556] Bluetooth: hci0: command 0x1001 tx timeout
[  260.934420][ T4197] Bluetooth: hci0: sending frame failed (-49)
[  261.489771][ T4376] device hsr_slave_0 left promiscuous mode
[  261.559624][ T4376] device hsr_slave_1 left promiscuous mode
[  261.590895][ T4376] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  261.786178][ T4376] batman_adv: batadv0: Removing interface: batadv_slave_0
[  261.864405][ T6231] loop5: detected capacity change from 0 to 32768
[  261.865025][ T4376] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  262.016500][ T4376] batman_adv: batadv0: Removing interface: batadv_slave_1
[  262.722576][ T6244] loop1: detected capacity change from 0 to 512
[  262.751906][ T6231] XFS (loop5): Mounting V5 Filesystem
[  262.793586][ T4376] device bridge_slave_1 left promiscuous mode
[  262.822263][ T4376] bridge0: port 2(bridge_slave_1) entered disabled state
[  262.850322][ T6231] XFS (loop5): Ending clean mount
[  262.860007][ T6231] XFS (loop5): Quotacheck needed: Please wait.
[  262.924792][ T6244] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=684ec018, mo2=0002]
[  263.046615][ T6244] System zones: 0-2, 18-18, 34-34
[  263.052846][ T6244] EXT4-fs (loop1): orphan cleanup on readonly fs
[  263.094110][ T4556] Bluetooth: hci0: command 0x1009 tx timeout
[  263.105212][ T4376] device bridge_slave_0 left promiscuous mode
[  263.112041][ T4376] bridge0: port 1(bridge_slave_0) entered disabled state
[  263.126942][ T6244] EXT4-fs error (device loop1): ext4_orphan_get:1426: comm syz.1.455: bad orphan inode 13
[  263.136947][ T6231] XFS (loop5): Quotacheck: Done.
[  263.156685][ T6244] ext4_test_bit(bit=12, block=18) = 1
[  263.162103][ T6244] is_bad_inode(inode)=0
[  263.175877][ T6244] NEXT_ORPHAN(inode)=2130706432
[  263.408713][ T6244] max_ino=32
[  263.476365][ T6244] i_nlink=1
[  264.096073][ T6244] EXT4-fs (loop1): mounted filesystem without journal. Opts: debug,discard,usrquota,noinit_itable,data_err=ignore,,errors=continue. Quota mode: writeback.
[  264.257121][ T5909] XFS (loop5): Unmounting Filesystem
[  264.524312][ T6266] netlink: 168 bytes leftover after parsing attributes in process `syz.1.455'.
[  265.806450][ T4376] device veth1_macvtap left promiscuous mode
[  265.813084][ T4376] device veth0_macvtap left promiscuous mode
[  265.834354][ T4376] device veth1_vlan left promiscuous mode
[  265.843381][ T4376] device veth0_vlan left promiscuous mode
[  266.259377][ T4376] team0 (unregistering): Port device team_slave_1 removed
[  266.272264][ T4376] team0 (unregistering): Port device team_slave_0 removed
[  266.289722][ T4376] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  266.305374][ T4376] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  266.398169][ T4376] bond0 (unregistering): Released all slaves
[  266.781212][ T6279] device syzkaller0 entered promiscuous mode
[  268.004485][ T6310] Unsupported ieee802154 address type: 0
[  268.920908][ T6316] loop1: detected capacity change from 0 to 32768
[  269.225839][ T6334] loop3: detected capacity change from 0 to 512
[  269.331174][ T6334] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=684ec018, mo2=0002]
[  269.358400][ T6316] XFS (loop1): Mounting V5 Filesystem
[  269.378831][ T6334] System zones: 0-2, 18-18
[  269.536385][   T26] audit: type=1326 audit(1773337717.684:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6328 comm="syz.4.472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e14e4d799 code=0x7ffc0000
[  269.576732][ T6334] , 34-34
[  269.592919][ T4336] Bluetooth: hci0: Frame reassembly failed (-84)
[  269.728808][ T4336] Bluetooth: hci0: Frame reassembly failed (-84)
[  270.018715][ T6334] EXT4-fs (loop3): orphan cleanup on readonly fs
[  270.042726][   T26] audit: type=1326 audit(1773337717.684:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6328 comm="syz.4.472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e14e4d799 code=0x7ffc0000
[  270.074270][ T6334] EXT4-fs error (device loop3): ext4_orphan_get:1426: comm syz.3.473: bad orphan inode 13
[  270.078502][ T6298] loop2: detected capacity change from 0 to 40427
[  270.092094][   T26] audit: type=1326 audit(1773337717.694:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6328 comm="syz.4.472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7f4e14e4d799 code=0x7ffc0000
[  270.131445][ T6334] ext4_test_bit(bit=12, block=18) = 1
[  270.152474][ T6316] XFS (loop1): Ending clean mount
[  270.161975][ T6316] XFS (loop1): Quotacheck needed: Please wait.
[  270.186872][ T6334] is_bad_inode(inode)=0
[  270.207739][ T6334] NEXT_ORPHAN(inode)=2130706432
[  270.212653][ T6334] max_ino=32
[  270.212669][ T6298] F2FS-fs (loop2): Mismatch start address, segment0(3623879168) cp_blkaddr(15)
[  270.245922][ T6334] i_nlink=1
[  270.248586][ T6316] XFS (loop1): Quotacheck: Done.
[  270.249230][ T6334] EXT4-fs (loop3): mounted filesystem without journal. Opts: debug,discard,usrquota,noinit_itable,data_err=ignore,,errors=continue. Quota mode: writeback.
[  270.255117][   T26] audit: type=1326 audit(1773337717.694:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6328 comm="syz.4.472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e14e4d799 code=0x7ffc0000
[  270.325098][ T6298] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  270.494670][ T6298] F2FS-fs (loop2): invalid crc value
[  270.529994][   T26] audit: type=1326 audit(1773337717.694:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6328 comm="syz.4.472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e14e4d799 code=0x7ffc0000
[  270.678777][   T26] audit: type=1326 audit(1773337717.694:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6328 comm="syz.4.472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4e14e4d799 code=0x7ffc0000
[  270.699617][ T6298] F2FS-fs (loop2): Failed to start F2FS issue_checkpoint_thread (-12)
[  270.706380][   T26] audit: type=1326 audit(1773337717.714:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6328 comm="syz.4.472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e14e4d799 code=0x7ffc0000
[  270.740744][ T6352] netlink: 168 bytes leftover after parsing attributes in process `syz.3.473'.
[  270.752984][ T4201] XFS (loop1): Unmounting Filesystem
[  270.865943][   T26] audit: type=1326 audit(1773337717.714:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6328 comm="syz.4.472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e14e4d799 code=0x7ffc0000
[  270.947165][   T26] audit: type=1326 audit(1773337717.714:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6328 comm="syz.4.472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4e14e4d799 code=0x7ffc0000
[  270.970353][   T26] audit: type=1326 audit(1773337717.714:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6328 comm="syz.4.472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e14e4d799 code=0x7ffc0000
[  272.142327][ T4228] Bluetooth: hci0: command 0x1003 tx timeout
[  272.148614][ T4197] Bluetooth: hci0: sending frame failed (-49)
[  272.278523][ T6369] netlink: 36 bytes leftover after parsing attributes in process `syz.2.479'.
[  272.755591][ T6378] Unsupported ieee802154 address type: 0
[  274.220746][ T4557] Bluetooth: hci0: command 0x1001 tx timeout
[  274.268032][ T4197] Bluetooth: hci0: sending frame failed (-49)
[  274.554803][ T6403] loop5: detected capacity change from 0 to 32768
[  274.701229][ T6410] loop2: detected capacity change from 0 to 128
[  274.752041][ T6403] XFS (loop5): Mounting V5 Filesystem
[  274.825883][ T5191] udevd[5191]: incorrect jbd checksum on /dev/loop2
[  274.871252][ T6410] EXT4-fs warning (device loop2): ext4_fill_super:4022: metadata_csum and uninit_bg are redundant flags; please run fsck.
[  274.923293][ T6403] XFS (loop5): Ending clean mount
[  274.931214][ T6403] XFS (loop5): Quotacheck needed: Please wait.
[  274.987043][ T6410] EXT4-fs (loop2): VFS: Found ext4 filesystem with invalid superblock checksum.  Run e2fsck?
[  275.063254][ T6403] XFS (loop5): Quotacheck: Done.
[  275.599047][   T26] kauditd_printk_skb: 4 callbacks suppressed
[  275.599418][   T26] audit: type=1326 audit(1773337723.724:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6406 comm="syz.2.487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5260989799 code=0x7ffc0000
[  275.679947][ T5909] XFS (loop5): Unmounting Filesystem
[  275.946101][   T26] audit: type=1326 audit(1773337723.724:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6406 comm="syz.2.487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=99 compat=0 ip=0x7f5260989799 code=0x7ffc0000
[  275.968605][   T26] audit: type=1326 audit(1773337723.724:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6406 comm="syz.2.487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5260989799 code=0x7ffc0000
[  276.010556][   T26] audit: type=1326 audit(1773337723.734:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6406 comm="syz.2.487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5260989799 code=0x7ffc0000
[  276.145886][   T26] audit: type=1326 audit(1773337723.734:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6406 comm="syz.2.487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5260989799 code=0x7ffc0000
[  276.255905][   T26] audit: type=1326 audit(1773337723.734:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6406 comm="syz.2.487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=116 compat=0 ip=0x7f5260989799 code=0x7ffc0000
[  276.291638][ T1108] Bluetooth: hci0: command 0x1009 tx timeout
[  276.410743][ T6443] netlink: 20 bytes leftover after parsing attributes in process `syz.3.492'.
[  276.425844][   T26] audit: type=1326 audit(1773337723.734:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6406 comm="syz.2.487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5260989799 code=0x7ffc0000
[  276.709263][   T26] audit: type=1326 audit(1773337723.734:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6406 comm="syz.2.487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=323 compat=0 ip=0x7f5260989799 code=0x7ffc0000
[  277.534371][   T26] audit: type=1326 audit(1773337723.734:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6406 comm="syz.2.487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5260989799 code=0x7ffc0000
[  277.646471][ T6454] Unsupported ieee802154 address type: 0
[  278.249042][   T26] audit: type=1326 audit(1773337723.734:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6406 comm="syz.2.487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5260989799 code=0x7ffc0000
[  278.299310][ T6456] loop2: detected capacity change from 0 to 512
[  279.091994][ T6471] loop5: detected capacity change from 0 to 32768
[  279.357017][ T6471] XFS (loop5): Mounting V5 Filesystem
[  279.497411][ T6471] XFS (loop5): Ending clean mount
[  279.506587][ T6471] XFS (loop5): Quotacheck needed: Please wait.
[  279.600089][ T6471] XFS (loop5): Quotacheck: Done.
[  280.051128][ T5909] XFS (loop5): Unmounting Filesystem
[  281.201681][ T6521] loop4: detected capacity change from 0 to 256
[  281.282414][ T6521] exfat: Deprecated parameter 'utf8'
[  281.421549][ T6521] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe3865569, utbl_chksum : 0xe619d30d)
[  281.580161][ T6501] loop1: detected capacity change from 0 to 32768
[  281.704310][ T6501] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm
[  281.733981][ T6501] BTRFS info (device loop1): setting nodatacow, compression disabled
[  281.746001][ T6501] BTRFS info (device loop1): turning on flush-on-commit
[  281.753126][ T6501] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_LZO (0x8)
[  281.844050][ T6501] BTRFS info (device loop1): use lzo compression, level 0
[  282.096406][ T6501] BTRFS info (device loop1): setting nodatasum
[  282.183745][ T6501] BTRFS info (device loop1): use no compression
[  282.231416][ T6501] BTRFS info (device loop1): trying to use backup root at mount time
[  282.280079][ T6501] BTRFS info (device loop1): max_inline at 0
[  282.286681][ T6501] BTRFS info (device loop1): using free space tree
[  282.293557][ T6501] BTRFS info (device loop1): has skinny extents
[  282.613289][ T4282] BTRFS warning (device loop1): checksum verify failed on 5332992 wanted 0x0a5e5d25 found 0xcee3a718 level 0
[  282.634141][ T6501] BTRFS warning (device loop1): couldn't read tree root
[  282.647117][  T145] BTRFS warning (device loop1): checksum verify failed on 5324800 wanted 0x9f73850b found 0xe06dfc66 level 0
[  282.700782][ T6562] loop4: detected capacity change from 0 to 164
[  282.721005][ T6501] BTRFS warning (device loop1): couldn't read tree root
[  282.740262][ T6501] BTRFS error (device loop1): parent transid verify failed on 5255168 wanted 5 found 7
[  282.801162][ T6501] BTRFS warning (device loop1): couldn't read tree root
[  283.304703][ T6501] BTRFS error (device loop1): open_ctree failed: -22
[  283.680027][ T6569] Unsupported NM flag settings (240)
[  283.751101][ T6573] loop3: detected capacity change from 0 to 512
[  283.886455][ T6573] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=684ec018, mo2=0002]
[  283.937835][ T6573] System zones: 0-2, 18-18, 34-34
[  283.944035][ T6573] EXT4-fs (loop3): orphan cleanup on readonly fs
[  284.031495][ T6573] EXT4-fs error (device loop3): ext4_orphan_get:1426: comm syz.3.511: bad orphan inode 13
[  284.055663][ T6573] ext4_test_bit(bit=12, block=18) = 1
[  284.194248][ T6573] is_bad_inode(inode)=0
[  284.206391][ T6573] NEXT_ORPHAN(inode)=2130706432
[  284.245501][ T6573] max_ino=32
[  284.252324][ T6573] i_nlink=1
[  284.272713][ T6573] EXT4-fs (loop3): mounted filesystem without journal. Opts: debug,discard,usrquota,noinit_itable,data_err=ignore,,errors=continue. Quota mode: writeback.
[  285.420321][ T6590] netlink: 168 bytes leftover after parsing attributes in process `syz.3.511'.
[  285.572149][ T6589] loop4: detected capacity change from 0 to 32768
[  285.796452][ T6601] sd 0:0:1:0: device reset
[  285.993744][ T6589] XFS (loop4): Mounting V5 Filesystem
[  286.248665][ T6589] XFS (loop4): Ending clean mount
[  286.256003][ T6589] XFS (loop4): Quotacheck needed: Please wait.
[  286.521083][ T6589] XFS (loop4): Quotacheck: Done.
[  286.887053][ T4194] XFS (loop4): Unmounting Filesystem
[  288.036438][ T6637] Unsupported ieee802154 address type: 0
[  289.036478][   T26] kauditd_printk_skb: 14 callbacks suppressed
[  289.036496][   T26] audit: type=1326 audit(1773337737.264:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6638 comm="syz.2.524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5260989799 code=0x7ffc0000
[  289.274621][ T4336] Bluetooth: hci0: Frame reassembly failed (-84)
[  289.517543][   T26] audit: type=1326 audit(1773337737.264:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6638 comm="syz.2.524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5260989799 code=0x7ffc0000
[  289.881325][   T26] audit: type=1326 audit(1773337737.264:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6638 comm="syz.2.524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7f5260989799 code=0x7ffc0000
[  289.915945][   T26] audit: type=1326 audit(1773337737.264:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6638 comm="syz.2.524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5260989799 code=0x7ffc0000
[  290.019479][   T26] audit: type=1326 audit(1773337737.264:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6638 comm="syz.2.524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5260989799 code=0x7ffc0000
[  290.131945][   T26] audit: type=1326 audit(1773337737.264:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6638 comm="syz.2.524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5260989799 code=0x7ffc0000
[  290.202918][   T26] audit: type=1326 audit(1773337737.264:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6638 comm="syz.2.524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5260989799 code=0x7ffc0000
[  290.301039][   T26] audit: type=1326 audit(1773337737.264:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6638 comm="syz.2.524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5260989799 code=0x7ffc0000
[  290.485201][   T26] audit: type=1326 audit(1773337737.264:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6638 comm="syz.2.524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5260989799 code=0x7ffc0000
[  290.507089][ T6654] loop5: detected capacity change from 0 to 256
[  290.540146][   T26] audit: type=1326 audit(1773337737.264:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6638 comm="syz.2.524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5260989799 code=0x7ffc0000
[  290.575286][ T6654] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3ec, utbl_chksum : 0xe619d30d)
[  291.057325][ T6669] sd 0:0:1:0: device reset
[  291.100989][ T6672] loop5: detected capacity change from 0 to 7
[  291.142703][ T4181] Dev loop5: unable to read RDB block 7
[  291.182086][ T4181]  loop5: unable to read partition table
[  291.212617][ T4181] loop5: partition table beyond EOD, truncated
[  291.246422][ T4233] Bluetooth: hci0: command 0x1003 tx timeout
[  291.252838][ T4197] Bluetooth: hci0: sending frame failed (-49)
[  291.359975][ T6672] Dev loop5: unable to read RDB block 7
[  291.374749][ T6672]  loop5: unable to read partition table
[  291.394471][ T6672] loop5: partition table beyond EOD, truncated
[  291.405890][ T6672] loop_reread_partitions: partition scan of loop5 (úùƒWå¡™‰ü�¾Ã½¸*‹ºÐ	œëÜ%õ«µ4FLQkÝŠ5) failed (rc=-5)
[  291.426193][ T4229] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  291.644244][ T3563] Dev loop5: unable to read RDB block 7
[  291.658246][ T3563]  loop5: unable to read partition table
[  291.682104][ T3563] loop5: partition table beyond EOD, truncated
[  291.796219][ T4229] usb 5-1: config 0 has no interfaces?
[  293.015965][ T6693] Unsupported ieee802154 address type: 0
[  293.046088][ T4229] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  293.636036][ T3563] Dev loop5: unable to read RDB block 7
[  293.642457][ T3563]  loop5: unable to read partition table
[  293.667353][ T3563] loop5: partition table beyond EOD, truncated
[  294.026940][ T4229] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  294.035080][ T4229] usb 5-1: Product: syz
[  294.039309][ T4229] usb 5-1: Manufacturer: syz
[  294.043911][ T4229] usb 5-1: SerialNumber: syz
[  294.051249][ T3563] Dev loop5: unable to read RDB block 7
[  294.051805][ T4887] Bluetooth: hci0: command 0x1001 tx timeout
[  294.063018][ T3563]  loop5: unable to read partition table
[  294.071880][ T3563] loop5: partition table beyond EOD, truncated
[  294.405060][ T4229] usb 5-1: config 0 descriptor??
[  294.410646][ T4197] Bluetooth: hci0: sending frame failed (-49)
[  294.425932][ T4229] usb 5-1: can't set config #0, error -71
[  294.434004][ T4229] usb 5-1: USB disconnect, device number 4
[  295.939732][ T6709] loop4: detected capacity change from 0 to 256
[  296.098664][ T6709] FAT-fs (loop4): Directory bread(block 64) failed
[  296.160844][ T6709] FAT-fs (loop4): Directory bread(block 65) failed
[  296.178157][ T6709] FAT-fs (loop4): Directory bread(block 66) failed
[  296.184998][ T6709] FAT-fs (loop4): Directory bread(block 67) failed
[  296.286702][ T6709] FAT-fs (loop4): Directory bread(block 68) failed
[  296.293863][ T6709] FAT-fs (loop4): Directory bread(block 69) failed
[  296.374786][ T6709] FAT-fs (loop4): Directory bread(block 70) failed
[  296.382062][ T6709] FAT-fs (loop4): Directory bread(block 71) failed
[  296.391306][ T6709] FAT-fs (loop4): Directory bread(block 72) failed
[  296.399981][ T6709] FAT-fs (loop4): Directory bread(block 73) failed
[  296.447454][ T4229] Bluetooth: hci0: command 0x1009 tx timeout
[  296.631271][ T6725] device syzkaller0 entered promiscuous mode
[  296.859941][ T6700] loop3: detected capacity change from 0 to 32768
[  296.922604][ T6700] (syz.3.537,6700,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  297.001491][ T6700] (syz.3.537,6700,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  297.041585][ T6700] JBD2: Ignoring recovery information on journal
[  297.149934][ T6700] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  297.340415][ T6749] Unsupported ieee802154 address type: 0
[  297.935519][ T6700] syz.3.537 (6700) used greatest stack depth: 20408 bytes left
[  298.021840][ T6751] autofs4:pid:6751:autofs_fill_super: called with bogus options
[  298.121305][ T4190] ocfs2: Unmounting device (7,3) on (node local)
[  302.038378][ T6770] netlink: 20 bytes leftover after parsing attributes in process `syz.5.552'.
[  302.070258][ T6777] loop3: detected capacity change from 0 to 128
[  302.141974][ T6777] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  302.277954][ T6782] device syzkaller0 entered promiscuous mode
[  302.336160][ T6777] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  303.154975][ T6793] netlink: 64 bytes leftover after parsing attributes in process `syz.5.556'.
[  303.982992][ T6777] device gretap0 left promiscuous mode
[  303.989338][ T6777] bridge0: port 3(gretap0) entered disabled state
[  304.364556][ T6805] tipc: Started in network mode
[  304.376417][ T6805] tipc: Node identity 6a43f8ac5d18, cluster identity 4711
[  304.384888][ T6805] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  304.475442][ T6805] device syzkaller0 entered promiscuous mode
[  304.586195][   T26] kauditd_printk_skb: 4 callbacks suppressed
[  304.586305][   T26] audit: type=1326 audit(1773337752.784:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6801 comm="syz.1.560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdd0f57799 code=0x7ffc0000
[  304.616449][    C1] vkms_vblank_simulate: vblank timer overrun
[  304.651195][ T4312] Bluetooth: hci0: Frame reassembly failed (-84)
[  305.250991][ T6805] tipc: Resetting bearer <eth:syzkaller0>
[  305.326615][ T6804] tipc: Resetting bearer <eth:syzkaller0>
[  305.346681][   T26] audit: type=1326 audit(1773337752.784:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6801 comm="syz.1.560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdd0f57799 code=0x7ffc0000
[  305.369650][    C1] vkms_vblank_simulate: vblank timer overrun
[  305.399669][ T6804] tipc: Disabling bearer <eth:syzkaller0>
[  305.419510][   T26] audit: type=1326 audit(1773337752.784:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6801 comm="syz.1.560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7fbdd0f57799 code=0x7ffc0000
[  306.341675][   T26] audit: type=1326 audit(1773337752.784:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6801 comm="syz.1.560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdd0f57799 code=0x7ffc0000
[  306.503406][   T26] audit: type=1326 audit(1773337752.784:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6801 comm="syz.1.560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdd0f57799 code=0x7ffc0000
[  307.317229][ T4553] Bluetooth: hci0: command 0x1003 tx timeout
[  307.323789][ T4197] Bluetooth: hci0: sending frame failed (-49)
[  307.343611][   T26] audit: type=1326 audit(1773337752.784:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6801 comm="syz.1.560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fbdd0f57799 code=0x7ffc0000
[  307.366600][    C1] vkms_vblank_simulate: vblank timer overrun
[  307.376419][   T26] audit: type=1326 audit(1773337752.784:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6801 comm="syz.1.560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdd0f57799 code=0x7ffc0000
[  307.401717][    C1] vkms_vblank_simulate: vblank timer overrun
[  307.410953][   T26] audit: type=1326 audit(1773337752.784:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6801 comm="syz.1.560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdd0f57799 code=0x7ffc0000
[  307.435838][    C1] vkms_vblank_simulate: vblank timer overrun
[  307.516024][   T26] audit: type=1326 audit(1773337752.784:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6801 comm="syz.1.560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fbdd0f57799 code=0x7ffc0000
[  307.616568][   T26] audit: type=1326 audit(1773337752.784:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6801 comm="syz.1.560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdd0f57799 code=0x7ffc0000
[  307.885550][ T6841] tipc: New replicast peer: 255.255.255.255
[  307.894211][ T6841] tipc: Enabled bearer <udp:syz2>, priority 10
[  307.909628][ T6841] netlink: 8 bytes leftover after parsing attributes in process `syz.3.568'.
[  308.788661][ T6847] device syzkaller0 entered promiscuous mode
[  308.978118][   T21] tipc: Node number set to 928774316
[  309.415852][   T21] Bluetooth: hci0: command 0x1001 tx timeout
[  309.423482][ T4197] Bluetooth: hci0: sending frame failed (-49)
[  310.140019][ T6866] sd 0:0:1:0: device reset
[  311.357761][ T6881] loop2: detected capacity change from 0 to 512
[  311.452953][ T6881] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=684ec018, mo2=0002]
[  311.466012][ T6881] System zones: 0-2, 18-18, 34-34
[  311.472185][ T6881] EXT4-fs (loop2): orphan cleanup on readonly fs
[  311.486636][ T4553] Bluetooth: hci0: command 0x1009 tx timeout
[  311.571987][ T6881] EXT4-fs error (device loop2): ext4_orphan_get:1426: comm syz.2.577: bad orphan inode 13
[  311.671484][ T6881] ext4_test_bit(bit=12, block=18) = 1
[  311.702071][ T6881] is_bad_inode(inode)=0
[  311.732527][ T6881] NEXT_ORPHAN(inode)=2130706432
[  311.753708][ T6881] max_ino=32
[  311.757463][ T6881] i_nlink=1
[  311.760746][ T6881] EXT4-fs (loop2): mounted filesystem without journal. Opts: debug,discard,usrquota,noinit_itable,data_err=ignore,,errors=continue. Quota mode: writeback.
[  312.102590][ T6897] netlink: 168 bytes leftover after parsing attributes in process `syz.2.577'.
[  312.475439][ T6900] loop2: detected capacity change from 0 to 736
[  312.535061][ T6872] loop3: detected capacity change from 0 to 32768
[  312.590914][ T6872] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 scanned by syz.3.574 (6872)
[  312.661579][ T6872] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm
[  312.692240][ T6872] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  312.721433][ T6904] device syzkaller0 entered promiscuous mode
[  312.730730][ T6872] BTRFS info (device loop3): use zstd compression, level 3
[  312.750321][ T6872] BTRFS info (device loop3): using free space tree
[  312.785240][ T6872] BTRFS info (device loop3): has skinny extents
[  313.184960][ T6924] Unsupported ieee802154 address type: 0
[  315.195665][ T6872] BTRFS error (device loop3): open_ctree failed: -12
[  315.202348][ T5191] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 scanned by udevd (5191)
[  315.656331][   T26] kauditd_printk_skb: 4 callbacks suppressed
[  315.666702][ T4553] usb 5-1: new full-speed USB device number 5 using dummy_hcd
[  315.682171][   T26] audit: type=1326 audit(1773337763.884:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6944 comm="syz.1.588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdd0f57799 code=0x7ffc0000
[  316.009924][    T9] Bluetooth: hci0: Frame reassembly failed (-84)
[  316.288827][   T26] audit: type=1326 audit(1773337763.884:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6944 comm="syz.1.588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdd0f57799 code=0x7ffc0000
[  316.430687][   T26] audit: type=1326 audit(1773337763.884:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6944 comm="syz.1.588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7fbdd0f57799 code=0x7ffc0000
[  316.504160][   T26] audit: type=1326 audit(1773337763.884:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6944 comm="syz.1.588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdd0f57799 code=0x7ffc0000
[  316.650814][   T26] audit: type=1326 audit(1773337763.884:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6944 comm="syz.1.588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdd0f57799 code=0x7ffc0000
[  316.719486][   T26] audit: type=1326 audit(1773337763.884:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6944 comm="syz.1.588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fbdd0f57799 code=0x7ffc0000
[  316.745653][ T4553] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  316.767335][ T4553] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  316.776827][ T4553] usb 5-1: Product: syz
[  316.781098][ T4553] usb 5-1: Manufacturer: syz
[  316.814535][ T6970] device syzkaller0 entered promiscuous mode
[  316.819951][   T26] audit: type=1326 audit(1773337763.884:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6944 comm="syz.1.588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdd0f57799 code=0x7ffc0000
[  316.843588][   T21] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  316.851606][ T4553] usb 5-1: SerialNumber: syz
[  316.901674][ T4553] usb 5-1: config 0 descriptor??
[  316.938546][   T26] audit: type=1326 audit(1773337763.884:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6944 comm="syz.1.588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdd0f57799 code=0x7ffc0000
[  317.005859][   T26] audit: type=1326 audit(1773337763.884:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6944 comm="syz.1.588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fbdd0f57799 code=0x7ffc0000
[  317.081351][   T26] audit: type=1326 audit(1773337763.884:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6944 comm="syz.1.588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdd0f57799 code=0x7ffc0000
[  317.146012][   T21] usb 3-1: Using ep0 maxpacket: 16
[  317.167775][ T1425] ieee802154 phy0 wpan0: encryption failed: -22
[  317.185573][ T4553] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  317.210136][ T1425] ieee802154 phy1 wpan1: encryption failed: -22
[  317.445986][   T21] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  317.462017][   T21] usb 3-1: config 0 has no interfaces?
[  317.470674][   T21] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  317.490605][   T21] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  317.529667][   T21] usb 3-1: config 0 descriptor??
[  317.727619][ T4232] Bluetooth: hci0: command 0x1003 tx timeout
[  317.736173][ T4197] Bluetooth: hci0: sending frame failed (-49)
[  317.801382][ T4229] usb 3-1: USB disconnect, device number 3
[  318.325203][ T7008] Unsupported ieee802154 address type: 0
[  320.556080][ T1286] Bluetooth: hci6: Frame reassembly failed (-84)
[  320.600126][ T1286] Bluetooth: hci6: Frame reassembly failed (-84)
[  321.022207][ T1108] Bluetooth: hci0: command 0x1001 tx timeout
[  321.035392][ T4193] Bluetooth: hci0: sending frame failed (-49)
[  321.094738][ T7029] loop5: detected capacity change from 0 to 128
[  321.147415][ T7029] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  321.180649][ T7029] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  321.446023][ T4553] dvb_usb_rtl28xxu: probe of 5-1:0.0 failed with error -71
[  321.519886][ T7036] bridge0: port 3(gretap0) entered blocking state
[  321.526824][ T7036] bridge0: port 3(gretap0) entered disabled state
[  321.540521][ T7036] device gretap0 entered promiscuous mode
[  321.548023][ T7036] bridge0: port 3(gretap0) entered blocking state
[  321.554616][ T7036] bridge0: port 3(gretap0) entered forwarding state
[  321.579453][ T7036] device gretap0 left promiscuous mode
[  321.585825][ T7036] bridge0: port 3(gretap0) entered disabled state
[  321.611300][ T4553] usb 5-1: USB disconnect, device number 5
[  322.442572][ T7027] loop4: detected capacity change from 0 to 32768
[  322.616324][ T4229] Bluetooth: hci6: command 0x1003 tx timeout
[  322.697828][ T4193] Bluetooth: hci6: sending frame failed (-49)
[  323.206288][ T4229] Bluetooth: hci0: command 0x1009 tx timeout
[  323.319232][ T7027] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm
[  323.345902][ T7027] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  323.355320][ T7027] BTRFS info (device loop4): use zstd compression, level 3
[  323.370603][ T7050] device syzkaller0 entered promiscuous mode
[  323.411620][ T7027] BTRFS info (device loop4): using free space tree
[  323.461193][ T7027] BTRFS info (device loop4): has skinny extents
[  323.718406][ T7027] BTRFS info (device loop4): enabling ssd optimizations
[  323.916930][ T7075] netlink: 64 bytes leftover after parsing attributes in process `syz.5.604'.
[  326.438367][ T1338] Bluetooth: hci6: command 0x1001 tx timeout
[  326.444647][ T4191] Bluetooth: hci6: sending frame failed (-49)
[  329.357317][ T5201] Bluetooth: hci6: command 0x1009 tx timeout
[  329.373134][ T7101] loop1: detected capacity change from 0 to 128
[  329.432590][ T7101] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  329.456110][ T7101] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  330.184798][ T7109] bridge0: port 3(gretap0) entered blocking state
[  330.191547][ T7109] bridge0: port 3(gretap0) entered disabled state
[  330.203975][ T7109] device gretap0 entered promiscuous mode
[  330.211884][ T7109] bridge0: port 3(gretap0) entered blocking state
[  330.218403][ T7109] bridge0: port 3(gretap0) entered forwarding state
[  330.242182][ T7109] device gretap0 left promiscuous mode
[  330.248671][ T7109] bridge0: port 3(gretap0) entered disabled state
[  331.008096][ T7113] device syzkaller0 entered promiscuous mode
[  331.094745][ T7117] loop4: detected capacity change from 0 to 512
[  331.542176][ T7117] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpjquota=,max_dir_size_kb=0x0000000000000a30,nojournal_checksum,,errors=continue. Quota mode: writeback.
[  331.897129][   T26] kauditd_printk_skb: 18 callbacks suppressed
[  331.897211][   T26] audit: type=1326 audit(1773337780.114:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7120 comm="syz.5.618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78ccbe1799 code=0x7ffc0000
[  331.990171][ T1267] Bluetooth: hci0: Frame reassembly failed (-84)
[  332.353425][ T7117] ext4 filesystem being mounted at /124/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  332.499849][   T26] audit: type=1326 audit(1773337780.114:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7120 comm="syz.5.618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78ccbe1799 code=0x7ffc0000
[  332.522677][   T26] audit: type=1326 audit(1773337780.114:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7120 comm="syz.5.618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7f78ccbe1799 code=0x7ffc0000
[  332.570264][   T26] audit: type=1326 audit(1773337780.114:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7120 comm="syz.5.618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78ccbe1799 code=0x7ffc0000
[  332.690929][   T26] audit: type=1326 audit(1773337780.114:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7120 comm="syz.5.618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78ccbe1799 code=0x7ffc0000
[  332.798230][   T26] audit: type=1326 audit(1773337780.114:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7120 comm="syz.5.618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f78ccbe1799 code=0x7ffc0000
[  332.871134][   T26] audit: type=1326 audit(1773337780.114:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7120 comm="syz.5.618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78ccbe1799 code=0x7ffc0000
[  332.970812][   T26] audit: type=1326 audit(1773337780.114:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7120 comm="syz.5.618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78ccbe1799 code=0x7ffc0000
[  333.055916][   T26] audit: type=1326 audit(1773337780.114:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7120 comm="syz.5.618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f78ccbe1799 code=0x7ffc0000
[  333.139121][   T26] audit: type=1326 audit(1773337780.114:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7120 comm="syz.5.618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78ccbe1799 code=0x7ffc0000
[  333.966403][ T4256] Bluetooth: hci0: command 0x1003 tx timeout
[  333.980045][ T4191] Bluetooth: hci0: sending frame failed (-49)
[  334.309622][ T7164] loop3: detected capacity change from 0 to 128
[  334.478136][ T7164] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  334.720709][ T4284] Bluetooth: hci6: Frame reassembly failed (-84)
[  334.807747][ T4284] Bluetooth: hci6: Frame reassembly failed (-84)
[  334.814660][ T4284] Bluetooth: hci6: Frame reassembly failed (-84)
[  334.861490][ T7164] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  335.603349][ T7180] bridge0: port 3(gretap0) entered blocking state
[  335.610105][ T7180] bridge0: port 3(gretap0) entered disabled state
[  335.622499][ T7180] device gretap0 entered promiscuous mode
[  335.630139][ T7180] bridge0: port 3(gretap0) entered blocking state
[  335.636713][ T7180] bridge0: port 3(gretap0) entered forwarding state
[  335.659642][ T7180] device gretap0 left promiscuous mode
[  335.665893][ T7180] bridge0: port 3(gretap0) entered disabled state
[  336.054455][ T4256] Bluetooth: hci0: command 0x1001 tx timeout
[  336.062758][ T4193] Bluetooth: hci0: sending frame failed (-49)
[  336.523573][ T7185] device syzkaller0 entered promiscuous mode
[  336.914304][ T4886] Bluetooth: hci6: command 0x1003 tx timeout
[  336.921068][ T4193] Bluetooth: hci6: sending frame failed (-49)
[  338.126001][ T4886] Bluetooth: hci0: command 0x1009 tx timeout
[  338.141361][ T7218] loop4: detected capacity change from 0 to 1024
[  338.284111][ T5051] hfsplus: b-tree write err: -5, ino 25
[  338.300142][ T5051] hfsplus: b-tree write err: -5, ino 4
[  338.325294][ T5051] hfsplus: b-tree write err: -5, ino 2
[  339.005989][ T4887] Bluetooth: hci6: command 0x1001 tx timeout
[  339.012996][ T4193] Bluetooth: hci6: sending frame failed (-49)
[  339.031282][ T7233] Unsupported ieee802154 address type: 0
[  340.933406][ T7247] loop3: detected capacity change from 0 to 512
[  340.939628][ T7249] device syzkaller0 entered promiscuous mode
[  341.005276][ T7247] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=684ec018, mo2=0002]
[  341.029219][ T7247] System zones: 0-2, 18-18, 34-34
[  341.036622][ T7247] EXT4-fs (loop3): orphan cleanup on readonly fs
[  341.045609][ T7247] EXT4-fs error (device loop3): ext4_orphan_get:1426: comm syz.3.640: bad orphan inode 13
[  341.056921][ T7247] ext4_test_bit(bit=12, block=18) = 1
[  341.062450][ T7247] is_bad_inode(inode)=0
[  341.068166][ T7247] NEXT_ORPHAN(inode)=2130706432
[  341.076816][ T7247] max_ino=32
[  341.080503][ T7247] i_nlink=1
[  341.084365][ T7247] EXT4-fs (loop3): mounted filesystem without journal. Opts: debug,discard,usrquota,noinit_itable,data_err=ignore,,errors=continue. Quota mode: writeback.
[  341.283512][ T4176] Bluetooth: hci6: command 0x1009 tx timeout
[  341.292359][ T7247] netlink: 168 bytes leftover after parsing attributes in process `syz.3.640'.
[  341.400835][ T7258] tipc: Started in network mode
[  341.405751][ T7258] tipc: Node identity 3a68f769663b, cluster identity 4711
[  341.435067][ T7258] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  341.522101][ T7260] device syzkaller0 entered promiscuous mode
[  341.609721][ T7258] tipc: Resetting bearer <eth:syzkaller0>
[  341.656435][ T7257] tipc: Resetting bearer <eth:syzkaller0>
[  341.711770][ T7257] tipc: Disabling bearer <eth:syzkaller0>
[  344.205256][ T7298] Unsupported ieee802154 address type: 0
[  346.252110][ T7313] Unsupported ieee802154 address type: 0
[  346.361910][ T7311] device syzkaller0 entered promiscuous mode
[  346.964676][ T7317] tipc: Started in network mode
[  347.055876][ T7317] tipc: Node identity 3ac44521ef1, cluster identity 4711
[  347.063332][ T7317] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  347.136377][ T7317] device syzkaller0 entered promiscuous mode
[  347.258471][ T7320] tipc: Resetting bearer <eth:syzkaller0>
[  347.326238][ T7316] tipc: Resetting bearer <eth:syzkaller0>
[  347.422586][ T7316] tipc: Disabling bearer <eth:syzkaller0>
[  348.316093][ T7344] loop5: detected capacity change from 0 to 256
[  348.386408][ T7344] exfat: Deprecated parameter 'utf8'
[  348.595590][ T7344] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xe3865569, utbl_chksum : 0xe619d30d)
[  348.609616][ T7349] loop3: detected capacity change from 0 to 256
[  348.716581][ T7349] exfat: Deprecated parameter 'namecase'
[  348.722845][ T7349] exfat: Deprecated parameter 'namecase'
[  350.200031][ T7349] exFAT-fs (loop3): failed to load upcase table (idx : 0x00012bfb, chksum : 0xa9baea1a, utbl_chksum : 0xe619d30d)
[  351.048526][ T6775] Bluetooth: hci0: Frame reassembly failed (-84)
[  351.187870][   T26] kauditd_printk_skb: 18 callbacks suppressed
[  351.187940][   T26] audit: type=1326 audit(1773337799.034:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7352 comm="syz.2.664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5260989799 code=0x7ffc0000
[  351.486414][   T26] audit: type=1326 audit(1773337799.034:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7352 comm="syz.2.664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5260989799 code=0x7ffc0000
[  351.511029][   T26] audit: type=1326 audit(1773337799.034:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7352 comm="syz.2.664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7f5260989799 code=0x7ffc0000
[  351.694629][   T26] audit: type=1326 audit(1773337799.034:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7352 comm="syz.2.664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5260989799 code=0x7ffc0000
[  351.702957][ T7367] binder: 7360:7367 ioctl c0306201 0 returned -14
[  352.856297][   T26] audit: type=1326 audit(1773337799.044:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7352 comm="syz.2.664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5260989799 code=0x7ffc0000
[  352.879173][   T26] audit: type=1326 audit(1773337799.044:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7352 comm="syz.2.664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5260989799 code=0x7ffc0000
[  353.010237][   T26] audit: type=1326 audit(1773337799.044:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7352 comm="syz.2.664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5260989799 code=0x7ffc0000
[  353.051406][ T4229] Bluetooth: hci0: command 0x1003 tx timeout
[  353.057658][ T4197] Bluetooth: hci0: sending frame failed (-49)
[  353.146162][ T7380] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  353.191928][ T7380] device syzkaller0 entered promiscuous mode
[  353.245356][ T7380] tipc: Resetting bearer <eth:syzkaller0>
[  353.330501][ T7384] Unsupported ieee802154 address type: 0
[  353.385862][ T7378] tipc: Resetting bearer <eth:syzkaller0>
[  353.437598][   T26] audit: type=1326 audit(1773337799.044:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7352 comm="syz.2.664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5260989799 code=0x7ffc0000
[  353.516532][ T7378] tipc: Disabling bearer <eth:syzkaller0>
[  353.911307][   T26] audit: type=1326 audit(1773337799.044:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7352 comm="syz.2.664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5260989799 code=0x7ffc0000
[  354.054293][   T26] audit: type=1326 audit(1773337799.044:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7352 comm="syz.2.664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5260989799 code=0x7ffc0000
[  354.219750][ T7386] device syzkaller0 entered promiscuous mode
[  355.578234][ T4886] Bluetooth: hci0: command 0x1001 tx timeout
[  355.584667][ T4197] Bluetooth: hci0: sending frame failed (-49)
[  355.591363][ T4886] Bluetooth: hci5: command 0x0406 tx timeout
[  355.866795][ T4886] usb 6-1: new full-speed USB device number 2 using dummy_hcd
[  356.613276][ T7411] loop3: detected capacity change from 0 to 1024
[  356.870491][ T7411] EXT4-fs (loop3): mounted filesystem without journal. Opts: dioread_lock,noquota,errors=remount-ro,grpquota,. Quota mode: writeback.
[  356.956050][ T4886] usb 6-1: config 5 has an invalid interface number: 230 but max is 0
[  356.964264][ T4886] usb 6-1: config 5 has no interface number 0
[  356.988913][ T4886] usb 6-1: config 5 interface 230 altsetting 60 endpoint 0x6 has invalid maxpacket 512, setting to 64
[  357.071562][ T4886] usb 6-1: config 5 interface 230 has no altsetting 0
[  357.236124][ T4886] usb 6-1: New USB device found, idVendor=0424, idProduct=7801, bcdDevice=e0.9e
[  357.303549][ T7407] loop4: detected capacity change from 0 to 32768
[  357.435680][ T7407] JBD2: Ignoring recovery information on journal
[  357.544810][ T7407] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  357.589586][ T4886] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  357.600220][ T4886] usb 6-1: Product: syz
[  357.604936][ T4886] usb 6-1: Manufacturer: syz
[  357.609817][ T4886] usb 6-1: SerialNumber: syz
[  357.646249][ T7400] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  357.653320][ T4233] Bluetooth: hci0: command 0x1009 tx timeout
[  357.702833][   T26] kauditd_printk_skb: 28 callbacks suppressed
[  357.702848][   T26] audit: type=1800 audit(1773337805.934:238): pid=7407 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.677" name="file1" dev="loop4" ino=17058 res=0 errno=0
[  357.721966][ T7425] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  357.751865][ T7425] device syzkaller0 entered promiscuous mode
[  357.772293][ T7425] tipc: Resetting bearer <eth:syzkaller0>
[  357.779842][ T7424] tipc: Resetting bearer <eth:syzkaller0>
[  357.792055][ T7424] tipc: Disabling bearer <eth:syzkaller0>
[  357.804636][ T7407] syz.4.677 (7407) used greatest stack depth: 18744 bytes left
[  357.825571][ T4194] ocfs2: Unmounting device (7,4) on (node local)
[  358.150356][ T7432] Unsupported ieee802154 address type: 0
[  358.631327][ T4886] usb 6-1: USB disconnect, device number 2
[  358.926472][ T7441] loop5: detected capacity change from 0 to 1024
[  358.979942][ T7441] EXT4-fs (loop5): Ignoring removed oldalloc option
[  358.992439][ T7441] EXT4-fs (loop5): Ignoring removed bh option
[  359.004731][ T7441] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  359.021384][ T7447] device syzkaller0 entered promiscuous mode
[  359.076838][ T7441] EXT4-fs (loop5): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,usrquota,data_err=ignore,nobarrier,oldalloc,grpquota,noload,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback.
[  359.152430][   T26] audit: type=1804 audit(1773337807.384:239): pid=7441 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.686" name="/newroot/46/file1/bus" dev="loop5" ino=18 res=1 errno=0
[  361.455934][ T4233] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  362.592922][ T4233] usb 6-1: unable to get BOS descriptor or descriptor too short
[  362.705987][ T4233] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  362.771785][ T4233] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  363.031861][ T7481] Unsupported ieee802154 address type: 0
[  363.716014][ T4233] usb 6-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40
[  363.725193][ T4233] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  363.755900][ T4233] usb 6-1: Product: syz
[  363.760273][ T4233] usb 6-1: Manufacturer: syz
[  363.761692][ T7483] bridge0: port 3(syz_tun) entered blocking state
[  363.764874][ T4233] usb 6-1: SerialNumber: syz
[  363.819261][ T7483] bridge0: port 3(syz_tun) entered disabled state
[  363.850213][ T7483] rdma_rxe: ignoring netdev event = 20 for syz_tun
[  364.062450][ T7483] rdma_rxe: ignoring netdev event = 26 for syz_tun
[  364.176438][ T4233] usb 6-1: cannot get ctl value: req = 0x81, wValue = 0x100, wIndex = 0x300, type = 0
[  364.400654][ T4233] usb 6-1: unit 13 not found!
[  364.435809][ T7483] rdma_rxe: ignoring netdev event = 21 for syz_tun
[  364.473606][ T7483] device syz_tun entered promiscuous mode
[  364.516772][ T7483] bridge0: port 3(syz_tun) entered blocking state
[  364.523621][ T7483] bridge0: port 3(syz_tun) entered forwarding state
[  364.604605][ T4233] usb 6-1: USB disconnect, device number 3
[  365.412183][   T26] audit: type=1326 audit(1773337813.454:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7496 comm="syz.4.703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e14e4d799 code=0x7ffc0000
[  366.693753][   T26] audit: type=1326 audit(1773337813.454:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7496 comm="syz.4.703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e14e4d799 code=0x7ffc0000
[  366.930777][   T26] audit: type=1326 audit(1773337813.524:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7496 comm="syz.4.703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7f4e14e4d799 code=0x7ffc0000
[  367.041454][   T26] audit: type=1326 audit(1773337813.524:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7496 comm="syz.4.703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e14e4d799 code=0x7ffc0000
[  367.554521][   T26] audit: type=1326 audit(1773337813.524:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7496 comm="syz.4.703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e14e4d799 code=0x7ffc0000
[  367.578654][ T4176] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  367.780091][   T26] audit: type=1326 audit(1773337813.584:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7496 comm="syz.4.703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4e14e4d799 code=0x7ffc0000
[  367.811136][   T26] audit: type=1326 audit(1773337813.584:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7496 comm="syz.4.703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e14e4d799 code=0x7ffc0000
[  367.889518][   T26] audit: type=1326 audit(1773337813.584:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7496 comm="syz.4.703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e14e4d799 code=0x7ffc0000
[  367.984241][   T26] audit: type=1326 audit(1773337813.594:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7496 comm="syz.4.703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4e14e4d799 code=0x7ffc0000
[  368.007542][ T4176] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7
[  368.038163][ T4176] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  368.053466][ T4176] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7
[  368.080693][   T26] audit: type=1326 audit(1773337813.594:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7496 comm="syz.4.703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e14e4d799 code=0x7ffc0000
[  368.110382][ T4176] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0
[  368.336119][ T4176] usb 2-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13
[  368.349621][ T4176] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  368.366384][ T4176] usb 2-1: Product: syz
[  368.385080][ T4176] usb 2-1: Manufacturer: syz
[  368.407115][ T4176] usb 2-1: SerialNumber: syz
[  368.425267][ T4176] usb 2-1: config 0 descriptor??
[  369.238087][ T4232] Bluetooth: hci0: command 0x1003 tx timeout
[  369.244294][ T4197] Bluetooth: hci0: sending frame failed (-49)
[  369.479988][ T7531] loop5: detected capacity change from 0 to 32768
[  369.784060][ T7531] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 scanned by syz.5.712 (7531)
[  369.849854][ T4176] adutux 2-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0
[  369.890034][ T7533] device syzkaller0 entered promiscuous mode
[  369.934624][ T7531] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm
[  369.943611][ T7531] BTRFS info (device loop5): using free space tree
[  369.950221][ T7531] BTRFS info (device loop5): has skinny extents
[  370.128346][ T4176] usb 2-1: USB disconnect, device number 6
[  370.319154][ T7531] BTRFS info (device loop5): enabling ssd optimizations
[  372.040013][ T4546] Bluetooth: hci0: command 0x1001 tx timeout
[  372.055922][ T4197] Bluetooth: hci0: sending frame failed (-49)
[  372.407120][ T4181] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 10 /dev/loop5 scanned by udevd (4181)
[  375.027014][ T1338] Bluetooth: hci0: command 0x1009 tx timeout
[  376.544465][ T7590] DRBG: could not allocate CTR cipher TFM handle: ctr(aes)
[  377.095393][ T7604] loop4: detected capacity change from 0 to 32768
[  377.410541][ T1338] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  377.727179][ T7604] XFS (loop4): Mounting V5 Filesystem
[  377.991955][ T7604] XFS (loop4): Ending clean mount
[  377.999139][ T7604] XFS (loop4): Quotacheck needed: Please wait.
[  378.046590][ T1338] usb 2-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d
[  378.056605][ T7595] loop5: detected capacity change from 0 to 32768
[  378.069973][ T1338] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  378.127722][ T7595] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 scanned by syz.5.725 (7595)
[  378.155597][ T7618] loop2: detected capacity change from 0 to 128
[  378.167111][ T1338] usb 2-1: config 0 descriptor??
[  378.216358][ T7604] XFS (loop4): Quotacheck: Done.
[  378.251506][ T7618] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem
[  378.388188][ T7595] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm
[  378.416886][ T7618] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  378.435967][ T7595] BTRFS info (device loop5): enabling auto defrag
[  378.439548][ T7618] ext2 filesystem being mounted at /154/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  378.448360][ T7595] BTRFS info (device loop5): use no compression
[  378.888983][ T1425] ieee802154 phy0 wpan0: encryption failed: -22
[  378.897635][ T7595] BTRFS info (device loop5): max_inline at 4096
[  378.905197][ T1425] ieee802154 phy1 wpan1: encryption failed: -22
[  378.916880][ T1338] hackrf 2-1:0.0: Board ID: 00
[  378.933468][ T1338] hackrf 2-1:0.0: Firmware version: 
[  378.951534][ T7595] BTRFS info (device loop5): using free space tree
[  378.975119][ T4194] XFS (loop4): Unmounting Filesystem
[  378.982779][ T7595] BTRFS info (device loop5): has skinny extents
[  379.021234][ T1338] hackrf 2-1:0.0: Registered as swradio24
[  379.037177][ T1338] hackrf 2-1:0.0: Registered as swradio25
[  379.059122][ T1338] hackrf 2-1:0.0: SDR API is still slightly experimental and functionality changes may follow
[  379.152525][ T4256] usb 2-1: USB disconnect, device number 7
[  379.477689][ T7651] netlink: 8 bytes leftover after parsing attributes in process `syz.3.733'.
[  379.664347][ T7595] BTRFS error (device loop5): open_ctree failed: -12
[  380.768861][ T7667] sd 0:0:1:0: device reset
[  382.193118][   T26] kauditd_printk_skb: 4 callbacks suppressed
[  382.193138][   T26] audit: type=1326 audit(1773337830.414:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7664 comm="syz.2.738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5260989799 code=0x7ffc0000
[  382.282634][ T1267] Bluetooth: hci0: Frame reassembly failed (-84)
[  382.289543][ T1267] Bluetooth: hci0: Frame reassembly failed (-84)
[  382.296461][   T26] audit: type=1326 audit(1773337830.414:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7664 comm="syz.2.738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5260989799 code=0x7ffc0000
[  382.319475][   T26] audit: type=1326 audit(1773337830.424:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7664 comm="syz.2.738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7f5260989799 code=0x7ffc0000
[  382.342288][   T26] audit: type=1326 audit(1773337830.424:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7664 comm="syz.2.738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5260989799 code=0x7ffc0000
[  382.365649][   T26] audit: type=1326 audit(1773337830.424:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7664 comm="syz.2.738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5260989799 code=0x7ffc0000
[  382.940864][   T26] audit: type=1326 audit(1773337830.424:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7664 comm="syz.2.738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5260989799 code=0x7ffc0000
[  383.179944][   T26] audit: type=1326 audit(1773337830.424:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7664 comm="syz.2.738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5260989799 code=0x7ffc0000
[  383.321892][   T26] audit: type=1326 audit(1773337830.424:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7664 comm="syz.2.738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5260989799 code=0x7ffc0000
[  383.651142][   T26] audit: type=1326 audit(1773337830.424:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7664 comm="syz.2.738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5260989799 code=0x7ffc0000
[  383.781719][   T26] audit: type=1326 audit(1773337830.424:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7664 comm="syz.2.738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5260989799 code=0x7ffc0000
[  385.039019][ T7688] loop1: detected capacity change from 0 to 64
[  385.045845][ T4886] Bluetooth: hci0: command 0x1003 tx timeout
[  385.058542][ T4197] Bluetooth: hci0: sending frame failed (-49)
[  386.921270][ T7699] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  386.936596][ T7699] device syzkaller0 entered promiscuous mode
[  386.990143][ T7699] tipc: Resetting bearer <eth:syzkaller0>
[  387.056128][ T7698] tipc: Resetting bearer <eth:syzkaller0>
[  387.116574][ T7698] tipc: Disabling bearer <eth:syzkaller0>
[  387.746600][ T4886] Bluetooth: hci0: command 0x1001 tx timeout
[  387.769689][ T4197] Bluetooth: hci0: sending frame failed (-49)
[  387.983758][ T7716] loop3: detected capacity change from 0 to 32768
[  388.025147][ T7716] JBD2: Ignoring recovery information on journal
[  388.105493][ T7716] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  388.189225][ T4190] ocfs2: Unmounting device (7,3) on (node local)
[  388.557957][ T7729] loop3: detected capacity change from 0 to 4096
[  389.857417][ T4229] Bluetooth: hci0: command 0x1009 tx timeout
[  390.330444][ T4190] ntfs3: loop3: ntfs_evict_inode r=5 failed, -22.
[  390.454725][ T4190] ntfs3: loop3: Mark volume as dirty due to NTFS errors
[  390.821162][ T7756] loop5: detected capacity change from 0 to 128
[  393.728547][ T7764] loop2: detected capacity change from 0 to 32768
[  393.869237][ T7764] JBD2: Ignoring recovery information on journal
[  393.925886][ T1338] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  394.080404][ T7764] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  394.205904][ T1338] usb 6-1: Using ep0 maxpacket: 32
[  394.290454][   T26] kauditd_printk_skb: 4 callbacks suppressed
[  394.290472][   T26] audit: type=1804 audit(1773337842.524:268): pid=7774 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.765" name="/newroot/157/file1/file1" dev="loop2" ino=17059 res=1 errno=0
[  394.346118][ T1338] usb 6-1: config 0 has no interfaces?
[  394.425850][   T26] audit: type=1804 audit(1773337842.574:269): pid=7764 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.765" name="/newroot/157/file1/file1" dev="loop2" ino=17059 res=1 errno=0
[  394.516439][ T4198] ocfs2: Unmounting device (7,2) on (node local)
[  394.546164][ T1338] usb 6-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b
[  394.572086][ T1338] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  394.586042][ T1338] usb 6-1: Product: syz
[  394.606526][ T1338] usb 6-1: Manufacturer: syz
[  394.617474][ T1338] usb 6-1: SerialNumber: syz
[  394.651063][ T1338] usb 6-1: config 0 descriptor??
[  397.942721][   T26] audit: type=1326 audit(1773337845.834:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7801 comm="syz.2.775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5260989799 code=0x7ffc0000
[  398.004660][ T4886] usb 6-1: USB disconnect, device number 4
[  398.005973][ T4929] Bluetooth: hci0: Frame reassembly failed (-84)
[  398.044617][   T26] audit: type=1326 audit(1773337846.174:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7801 comm="syz.2.775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5260989799 code=0x7ffc0000
[  398.067530][ T7812] loop5: detected capacity change from 0 to 512
[  398.075286][   T26] audit: type=1326 audit(1773337846.174:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7801 comm="syz.2.775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7f5260989799 code=0x7ffc0000
[  398.107353][   T26] audit: type=1326 audit(1773337846.174:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7801 comm="syz.2.775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5260989799 code=0x7ffc0000
[  398.207264][   T26] audit: type=1326 audit(1773337846.174:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7801 comm="syz.2.775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5260989799 code=0x7ffc0000
[  398.275169][   T26] audit: type=1326 audit(1773337846.174:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7801 comm="syz.2.775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5260989799 code=0x7ffc0000
[  398.345981][ T7812] EXT4-fs warning (device loop5): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  398.397574][ T7822] loop4: detected capacity change from 0 to 256
[  398.404088][ T7812] EXT4-fs warning (device loop5): dx_probe:881: Enable large directory feature to access it
[  398.470124][ T7822] exfat: Deprecated parameter 'utf8'
[  398.486152][   T26] audit: type=1326 audit(1773337846.174:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7801 comm="syz.2.775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5260989799 code=0x7ffc0000
[  398.505955][ T7812] EXT4-fs warning (device loop5): dx_probe:966: inode #2: comm syz.5.778: Corrupt directory, running e2fsck is recommended
[  398.553513][   T26] audit: type=1326 audit(1773337846.174:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7801 comm="syz.2.775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5260989799 code=0x7ffc0000
[  398.582246][ T7822] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe3865569, utbl_chksum : 0xe619d30d)
[  398.583954][ T7812] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -117
[  398.653959][ T7812] EXT4-fs error (device loop5): ext4_iget_extra_inode:4566: inode #15: comm syz.5.778: corrupted in-inode xattr
[  398.705299][ T7812] EXT4-fs error (device loop5): ext4_orphan_get:1405: comm syz.5.778: couldn't read orphan inode 15 (err -117)
[  398.753572][ T7812] EXT4-fs (loop5): mounted filesystem without journal. Opts: dioread_lock,noblock_validity,auto_da_alloc=0x0000000000000004,jqfmt=vfsold,nolazytime,grpjquota=.nouid32,resuid=0x0000000000000000,barrier=0x0000000000001000,grpid,,,errors=continue. Quota mode: writeback.
[  398.916555][ T7812] EXT4-fs warning (device loop5): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  398.942218][ T7812] EXT4-fs warning (device loop5): dx_probe:881: Enable large directory feature to access it
[  398.961505][ T7812] EXT4-fs warning (device loop5): dx_probe:966: inode #2: comm syz.5.778: Corrupt directory, running e2fsck is recommended
[  398.983878][ T7812] EXT4-fs warning (device loop5): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  398.998575][ T7812] EXT4-fs warning (device loop5): dx_probe:881: Enable large directory feature to access it
[  399.020645][ T7812] EXT4-fs warning (device loop5): dx_probe:966: inode #2: comm syz.5.778: Corrupt directory, running e2fsck is recommended
[  399.064525][ T7826] sd 0:0:1:0: device reset
[  399.084687][ T7827] EXT4-fs warning (device loop5): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  399.123200][ T7827] EXT4-fs warning (device loop5): dx_probe:881: Enable large directory feature to access it
[  399.195944][ T7827] EXT4-fs warning (device loop5): dx_probe:966: inode #2: comm syz.5.778: Corrupt directory, running e2fsck is recommended
[  399.422092][   T26] kauditd_printk_skb: 29 callbacks suppressed
[  399.422108][   T26] audit: type=1326 audit(1773337847.634:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7811 comm="syz.5.778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f78ccbe1799 code=0x7ffc0000
[  399.452462][ T7812] EXT4-fs warning (device loop5): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  399.501573][ T7831] loop1: detected capacity change from 0 to 8
[  399.519191][   T26] audit: type=1326 audit(1773337847.684:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7811 comm="syz.5.778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78ccbe1799 code=0x7ffc0000
[  399.526280][ T7812] EXT4-fs error (device loop5): ext4_readdir:263: inode #2: block 3: comm syz.5.778: path /67/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4294967295, rec_len=17, size=1024 fake=0
[  399.549311][   T26] audit: type=1326 audit(1773337847.684:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7811 comm="syz.5.778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78ccbe1799 code=0x7ffc0000
[  399.587407][   T26] audit: type=1326 audit(1773337847.684:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7811 comm="syz.5.778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=217 compat=0 ip=0x7f78ccbe1799 code=0x7ffc0000
[  399.620847][ T7812] EXT4-fs error (device loop5): ext4_readdir:263: inode #2: block 22: comm syz.5.778: path /67/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=65535, size=1024 fake=0
[  399.670629][ T7812] EXT4-fs error (device loop5): ext4_readdir:263: inode #2: block 8: comm syz.5.778: path /67/file0: bad entry in directory: inode out of bounds - offset=0, inode=16810477, rec_len=1024, size=1024 fake=0
[  399.708794][   T26] audit: type=1326 audit(1773337847.944:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7811 comm="syz.5.778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78ccbe1799 code=0x7ffc0000
[  399.774816][ T7831] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  399.838011][ T7831] SQUASHFS error: Unable to read directory block [1d0:22]
[  399.868101][ T7831] SQUASHFS error: Unable to read directory block [1d0:22]
[  399.900227][   T26] audit: type=1326 audit(1773337847.944:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7811 comm="syz.5.778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78ccbe1799 code=0x7ffc0000
[  399.911482][ T7831] SQUASHFS error: Unable to read directory block [1d0:0]
[  399.973811][ T7831] overlayfs: failed to look up (syzcgroup) for ino (-5)
[  400.070111][ T4886] Bluetooth: hci0: command 0x1003 tx timeout
[  400.082827][ T4197] Bluetooth: hci0: sending frame failed (-49)
[  400.124618][ T4201] SQUASHFS error: Unable to read directory block [1d0:22]
[  400.176384][ T4201] SQUASHFS error: Unable to read directory block [1d0:22]
[  400.621956][ T7840] loop3: detected capacity change from 0 to 32768
[  400.665028][ T7845] Unsupported ieee802154 address type: 0
[  400.683564][ T7840] JBD2: Ignoring recovery information on journal
[  400.789380][ T7840] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  401.377879][ T7856] loop4: detected capacity change from 0 to 128
[  401.516417][ T7856] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  401.527798][ T7856] ext4 filesystem being mounted at /159/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  402.192326][ T4886] Bluetooth: hci0: command 0x1001 tx timeout
[  402.202057][ T4197] Bluetooth: hci0: sending frame failed (-49)
[  402.299554][ T4886] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0
[  402.308548][ T4886] Bluetooth: hci2: Injecting HCI hardware error event
[  402.318828][ T4197] Bluetooth: hci2: hardware error 0x00
[  402.466998][ T7850] 
[  402.469451][ T7850] ======================================================
[  402.476474][ T7850] WARNING: possible circular locking dependency detected
[  402.483515][ T7850] syzkaller #0 Not tainted
[  402.487940][ T7850] ------------------------------------------------------
[  402.494964][ T7850] syz.3.786/7850 is trying to acquire lock:
[  402.500868][ T7850] ffff8880598489c8 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#5){+.+.}-{3:3}, at: __ocfs2_move_extents_range+0x1a5f/0x35d0
[  402.514151][ T7850] 
[  402.514151][ T7850] but task is already holding lock:
[  402.521520][ T7850] ffff888074283488 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#6){+.+.}-{3:3}, at: __ocfs2_move_extents_range+0x137d/0x35d0
[  402.534912][ T7850] 
[  402.534912][ T7850] which lock already depends on the new lock.
[  402.534912][ T7850] 
[  402.545314][ T7850] 
[  402.545314][ T7850] the existing dependency chain (in reverse order) is:
[  402.554318][ T7850] 
[  402.554318][ T7850] -> #1 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#6){+.+.}-{3:3}:
[  402.564834][ T7850]        down_write+0x38/0x60
[  402.569608][ T7850]        __ocfs2_flush_truncate_log+0x357/0x1110
[  402.575923][ T7850]        ocfs2_flush_truncate_log+0x4b/0x60
[  402.581805][ T7850]        ocfs2_sync_fs+0x119/0x330
[  402.586899][ T7850]        sync_filesystem+0x1be/0x220
[  402.592201][ T7850]        generic_shutdown_super+0x6b/0x300
[  402.598031][ T7850]        kill_block_super+0x7c/0xe0
[  402.603245][ T7850]        deactivate_locked_super+0x93/0xf0
[  402.609050][ T7850]        cleanup_mnt+0x42d/0x4e0
[  402.613979][ T7850]        task_work_run+0x125/0x1a0
[  402.619086][ T7850]        exit_to_user_mode_loop+0x10f/0x130
[  402.624998][ T7850]        exit_to_user_mode_prepare+0xee/0x180
[  402.631052][ T7850]        syscall_exit_to_user_mode+0x16/0x40
[  402.637026][ T7850]        do_syscall_64+0x58/0xa0
[  402.641955][ T7850]        entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  402.648362][ T7850] 
[  402.648362][ T7850] -> #0 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#5){+.+.}-{3:3}:
[  402.658863][ T7850]        __lock_acquire+0x2c42/0x7d10
[  402.664233][ T7850]        lock_acquire+0x19e/0x400
[  402.669244][ T7850]        down_write+0x38/0x60
[  402.673915][ T7850]        __ocfs2_move_extents_range+0x1a5f/0x35d0
[  402.680322][ T7850]        ocfs2_move_extents+0x3ad/0x9c0
[  402.685861][ T7850]        ocfs2_ioctl_move_extents+0x523/0x6c0
[  402.691914][ T7850]        ocfs2_ioctl+0x31f/0x7a0
[  402.696833][ T7850]        __se_sys_ioctl+0xfa/0x170
[  402.701937][ T7850]        do_syscall_64+0x4c/0xa0
[  402.706859][ T7850]        entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  402.713358][ T7850] 
[  402.713358][ T7850] other info that might help us debug this:
[  402.713358][ T7850] 
[  402.723664][ T7850]  Possible unsafe locking scenario:
[  402.723664][ T7850] 
[  402.731100][ T7850]        CPU0                    CPU1
[  402.736543][ T7850]        ----                    ----
[  402.741906][ T7850]   lock(&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#6);
[  402.749206][ T7850]                                lock(&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#5);
[  402.759034][ T7850]                                lock(&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#6);
[  402.768831][ T7850]   lock(&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#5);
[  402.776124][ T7850] 
[  402.776124][ T7850]  *** DEADLOCK ***
[  402.776124][ T7850] 
[  402.784251][ T7850] 5 locks held by syz.3.786/7850:
[  402.789260][ T7850]  #0: ffff88802b77c460 (sb_writers#17){.+.+}-{0:0}, at: mnt_want_write_file+0x5c/0x200
[  402.799001][ T7850]  #1: ffff888059849808 (&sb->s_type->i_mutex_key#25){+.+.}-{3:3}, at: ocfs2_move_extents+0x19e/0x9c0
[  402.810005][ T7850]  #2: ffff8880598494a0 (&oi->ip_alloc_sem){++++}-{3:3}, at: ocfs2_move_extents+0x3a0/0x9c0
[  402.820121][ T7850]  #3: ffff88805f57df48 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#3){+.+.}-{3:3}, at: ocfs2_reserve_suballoc_bits+0x16a/0x44d0
[  402.833802][ T7850]  #4: ffff888074283488 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#6){+.+.}-{3:3}, at: __ocfs2_move_extents_range+0x137d/0x35d0
[  402.847541][ T7850] 
[  402.847541][ T7850] stack backtrace:
[  402.853423][ T7850] CPU: 0 PID: 7850 Comm: syz.3.786 Not tainted syzkaller #0
[  402.860691][ T7850] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  402.870735][ T7850] Call Trace:
[  402.874051][ T7850]  <TASK>
[  402.876987][ T7850]  dump_stack_lvl+0x188/0x250
[  402.881662][ T7850]  ? load_image+0x400/0x400
[  402.886160][ T7850]  ? show_regs_print_info+0x20/0x20
[  402.891352][ T7850]  ? print_circular_bug+0x12b/0x1a0
[  402.896533][ T7850]  check_noncircular+0x296/0x330
[  402.901453][ T7850]  ? look_up_lock_class+0x71/0x110
[  402.906552][ T7850]  ? add_chain_block+0x940/0x940
[  402.911472][ T7850]  ? lockdep_lock+0xf1/0x1f0
[  402.916055][ T7850]  ? mark_lock+0x94/0x320
[  402.920369][ T7850]  __lock_acquire+0x2c42/0x7d10
[  402.925234][ T7850]  ? ocfs2_read_inode_block+0x120/0x190
[  402.930768][ T7850]  ? ocfs2_read_inode_block_full+0x1a0/0x1a0
[  402.936732][ T7850]  ? verify_lock_unused+0x140/0x140
[  402.941933][ T7850]  ? ocfs2_inode_lock_full_nested+0xcdb/0x1bb0
[  402.948113][ T7850]  ? __rwlock_init+0x140/0x140
[  402.952869][ T7850]  lock_acquire+0x19e/0x400
[  402.957390][ T7850]  ? __ocfs2_move_extents_range+0x1a5f/0x35d0
[  402.963474][ T7850]  ? __might_sleep+0xf0/0xf0
[  402.968178][ T7850]  ? read_lock_is_recursive+0x10/0x10
[  402.973536][ T7850]  ? rwsem_write_trylock+0x135/0x1c0
[  402.978806][ T7850]  ? clear_nonspinnable+0x60/0x60
[  402.983821][ T7850]  down_write+0x38/0x60
[  402.987969][ T7850]  ? __ocfs2_move_extents_range+0x1a5f/0x35d0
[  402.994028][ T7850]  __ocfs2_move_extents_range+0x1a5f/0x35d0
[  402.999923][ T7850]  ? __getblk_gfp+0x52/0xb60
[  403.004513][ T7850]  ? ocfs2_find_victim_alloc_group+0x960/0x960
[  403.010651][ T7850]  ? mark_lock+0x94/0x320
[  403.014967][ T7850]  ? __lock_acquire+0x13bc/0x7d10
[  403.019990][ T7850]  ? ocfs2_read_inode_block+0x120/0x190
[  403.025521][ T7850]  ? ocfs2_read_inode_block_full+0x1a0/0x1a0
[  403.031491][ T7850]  ? verify_lock_unused+0x140/0x140
[  403.036685][ T7850]  ? ocfs2_inode_lock_full_nested+0xcdb/0x1bb0
[  403.042833][ T7850]  ? lockdep_hardirqs_on+0x94/0x140
[  403.048020][ T7850]  ? rwsem_down_write_slowpath+0xe56/0x1260
[  403.053961][ T7850]  ? rwsem_write_trylock+0x135/0x1c0
[  403.059235][ T7850]  ? clear_nonspinnable+0x60/0x60
[  403.064250][ T7850]  ? ocfs2_create_new_inode_locks+0x690/0x690
[  403.070309][ T7850]  ocfs2_move_extents+0x3ad/0x9c0
[  403.075343][ T7850]  ? ocfs2_validate_and_adjust_move_goal+0x460/0x460
[  403.082019][ T7850]  ? __lock_acquire+0x7d10/0x7d10
[  403.087036][ T7850]  ? __brelse+0x55/0x90
[  403.091176][ T7850]  ? ocfs2_validate_and_adjust_move_goal+0x324/0x460
[  403.097880][ T7850]  ocfs2_ioctl_move_extents+0x523/0x6c0
[  403.103427][ T7850]  ? ocfs2_dump_resv+0x560/0x560
[  403.108430][ T7850]  ? tomoyo_path_number_perm+0x5b4/0x660
[  403.114072][ T7850]  ? tomoyo_check_path_acl+0x1c0/0x1c0
[  403.119542][ T7850]  ocfs2_ioctl+0x31f/0x7a0
[  403.123963][ T7850]  ? ocfs2_fileattr_set+0x800/0x800
[  403.129160][ T7850]  ? bpf_lsm_file_ioctl+0x5/0x10
[  403.134084][ T7850]  ? security_file_ioctl+0x7c/0xa0
[  403.139185][ T7850]  ? ocfs2_fileattr_set+0x800/0x800
[  403.144371][ T7850]  __se_sys_ioctl+0xfa/0x170
[  403.148955][ T7850]  do_syscall_64+0x4c/0xa0
[  403.153362][ T7850]  ? clear_bhb_loop+0x30/0x80
[  403.158025][ T7850]  ? clear_bhb_loop+0x30/0x80
[  403.162779][ T7850]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  403.168675][ T7850] RIP: 0033:0x7f9a7f255799
[  403.173081][ T7850] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  403.192769][ T7850] RSP: 002b:00007f9a7d48e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  403.201174][ T7850] RAX: ffffffffffffffda RBX: 00007f9a7f4cf090 RCX: 00007f9a7f255799
[  403.209258][ T7850] RDX: 00002000000000c0 RSI: 0000000040406f06 RDI: 0000000000000004
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  403.217320][ T7850] RBP: 00007f9a7f2ebc99 R08: 0000000000000000 R09: 0000000000000000
[  403.225294][ T7850] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  403.233281][ T7850] R13: 00007f9a7f4cf128 R14: 00007f9a7f4cf090 R15: 00007ffde90f9f68
[  403.241270][ T7850]  </TASK>
[  403.559812][ T7840] ocfs2: Unmounting device (7,3) on (node local)
[  403.703359][ T7840] rdma_rxe: ignoring netdev event = 10 for syz_tun
[  403.711949][ T7840] bridge0: port 3(syz_tun) entered disabled state
[  403.728235][ T7840] infiniband syz1: set down
[  403.734153][ T7840] device syz_tun left promiscuous mode
[  403.739929][ T7840] bridge0: port 3(syz_tun) entered disabled state
[  403.748065][ T7840] rdma_rxe: ignoring netdev event = 26 for syz_tun
[  403.754790][ T7840] rdma_rxe: ignoring netdev event = 21 for syz_tun
[  403.761930][ T5051] smc: removing ib device syz1
[  403.768447][ T1338] infiniband syz1: ib_query_port failed (-19)
[  404.285926][ T1338] Bluetooth: hci0: command 0x1009 tx timeout
[  404.440385][ T4399] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  404.498564][ T4399] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  404.569249][ T4399] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  404.628788][ T4399] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  404.721043][ T4399] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  404.769474][ T4399] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  404.821572][ T4399] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  404.858981][ T4399] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  404.960838][ T4399] tipc: Disabling bearer <udp:syz2>
[  404.966746][ T4399] tipc: Left network mode
[  404.971777][ T4399] tipc: Left network mode
[  405.717005][ T4399] device hsr_slave_0 left promiscuous mode
[  405.723303][ T4399] device hsr_slave_1 left promiscuous mode
[  405.729969][ T4399] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  405.737705][ T4399] batman_adv: batadv0: Removing interface: batadv_slave_0
[  405.745332][ T4399] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  405.753752][ T4399] batman_adv: batadv0: Removing interface: batadv_slave_1
[  405.761599][ T4399] device bridge_slave_1 left promiscuous mode
[  405.768109][ T4399] bridge0: port 2(bridge_slave_1) entered disabled state
[  405.776462][ T4399] device bridge_slave_0 left promiscuous mode
[  405.782671][ T4399] bridge0: port 1(bridge_slave_0) entered disabled state
[  405.793694][ T4399] device hsr_slave_0 left promiscuous mode
[  405.801057][ T4399] device hsr_slave_1 left promiscuous mode
[  405.807776][ T4399] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  405.815211][ T4399] batman_adv: batadv0: Removing interface: batadv_slave_0
[  405.823239][ T4399] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  405.830954][ T4399] batman_adv: batadv0: Removing interface: batadv_slave_1
[  405.838888][ T4399] device bridge_slave_1 left promiscuous mode
[  405.845066][ T4399] bridge0: port 2(bridge_slave_1) entered disabled state
[  405.853590][ T4399] device bridge_slave_0 left promiscuous mode
[  405.860196][ T4399] bridge0: port 1(bridge_slave_0) entered disabled state
[  405.871918][ T4399] device veth1_macvtap left promiscuous mode
[  405.878031][ T4399] device veth0_macvtap left promiscuous mode
[  405.884083][ T4399] device veth1_vlan left promiscuous mode
[  405.890271][ T4399] device veth0_vlan left promiscuous mode
[  405.898109][ T4399] device veth1_macvtap left promiscuous mode
[  405.904150][ T4399] device veth0_macvtap left promiscuous mode
[  405.910524][ T4399] device veth1_vlan left promiscuous mode
[  405.917575][ T4399] device veth0_vlan left promiscuous mode
[  406.021765][ T4399] team0 (unregistering): Port device team_slave_1 removed
[  406.032628][ T4399] team0 (unregistering): Port device team_slave_0 removed
[  406.044036][ T4399] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  406.055941][ T4399] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  406.095258][ T4399] bond0 (unregistering): Released all slaves
[  406.179043][ T4399] team0 (unregistering): Port device team_slave_1 removed
[  406.189237][ T4399] team0 (unregistering): Port device team_slave_0 removed
[  406.198888][ T4399] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  406.212169][ T4399] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  406.254465][ T4399] bond0 (unregistering): Released all slaves
[  408.380505][ T4399] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  408.450138][ T4399] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  408.518795][ T4399] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  408.579064][ T4399] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  408.670319][ T4399] tipc: Left network mode
[  409.234841][ T4399] device hsr_slave_0 left promiscuous mode
[  409.241197][ T4399] device hsr_slave_1 left promiscuous mode
[  409.248825][ T4399] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  409.257308][ T4399] batman_adv: batadv0: Removing interface: batadv_slave_0
[  409.264962][ T4399] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  409.274222][ T4399] batman_adv: batadv0: Removing interface: batadv_slave_1
[  409.283156][ T4399] device bridge_slave_1 left promiscuous mode
[  409.289661][ T4399] bridge0: port 2(bridge_slave_1) entered disabled state
[  409.297759][ T4399] device bridge_slave_0 left promiscuous mode
[  409.303916][ T4399] bridge0: port 1(bridge_slave_0) entered disabled state
[  409.318254][ T4399] device veth1_macvtap left promiscuous mode
[  409.324265][ T4399] device veth0_macvtap left promiscuous mode
[  409.330825][ T4399] device veth1_vlan left promiscuous mode
[  409.336781][ T4399] device veth0_vlan left promiscuous mode
[  409.409274][ T4399] team0 (unregistering): Port device team_slave_1 removed
[  409.420852][ T4399] team0 (unregistering): Port device team_slave_0 removed
[  409.430724][ T4399] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  409.442648][ T4399] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  409.483489][ T4399] bond0 (unregistering): Released all slaves