last executing test programs:

5.549630531s ago: executing program 2 (id=354):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendmmsg$inet(r0, &(0x7f0000002980)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000640)="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", 0x28e}], 0x1}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000003c0)="e2df20", 0x3}], 0x1}}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000a00)="449f6aed247d197178d7f0a82e1deae14825b22ab6c0ec1ca0c27cd21d8a486374", 0x21}, {&(0x7f0000000f80)="da272d98f0f8962c15832ad9fc3fe69499698607da01faf3742d6a27555ae47f444bad1ea77509fed4623598addf131c04811469c810db02e91468121899cb0cfaa6d06d1cd876e6a0bee56f2bec7b61a58d4bc82f91da6fefe815e7be6c6a07ebeca051d4a71823d1cbd9ec146680bce11c0b821f7e2636c6a64c", 0x7b}, {&(0x7f0000001040)="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", 0x3a8}], 0x3}}], 0x3, 0x480e0)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4)
sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0)

5.475286511s ago: executing program 2 (id=357):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100))
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x0, &(0x7f0000000240)={@fd, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}, @flat=@weak_handle={0x77682a85, 0x100, 0x2}}, 0x0}, 0xfffffffffffffff0}], 0x0, 0x0, 0x0})

5.444151507s ago: executing program 2 (id=358):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r0, 0x4)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r3, @ANYBLOB="010000000000fbdbdf250100000008000200000000000500050000000000080003000100000048000180050002002000000006000100020000000800060003000000080003"], 0x84}}, 0x20000000)

5.430199903s ago: executing program 0 (id=359):
timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0)
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
bind$bt_hci(r0, &(0x7f0000000000)={0x27}, 0x74)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
sendmmsg$unix(r0, &(0x7f0000000b00)=[{{&(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}, {{&(0x7f0000000e80)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000740)=[{&(0x7f0000001dc0)="bb", 0x1}, {0x0}], 0x2}}, {{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000600)='z', 0x1}], 0x1}}], 0x3, 0x0)

5.062285017s ago: executing program 2 (id=362):
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r0, &(0x7f0000000380)=[{{&(0x7f0000000300)={0xa, 0x4e21, 0x0, @rand_addr=' \x01\x00', 0x10001}, 0x1c, &(0x7f0000000cc0)=[{&(0x7f0000000540)='O', 0x1}], 0x1}}, {{&(0x7f0000000600)={0xa, 0x4e24, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x80000000}, 0x1c, &(0x7f0000001000)=[{&(0x7f00000004c0)="06", 0x1}], 0x1, &(0x7f00000018c0)=ANY=[@ANYBLOB="1400000000000000290000003e000000390d000000000000480000000000000029000000390000003a0601010000000020010000000000000000000000000000fe8000000000000000000000000000aafc0200000000000000000000000000018010"], 0x10e0}}], 0x2, 0x880)
shutdown(r0, 0x1)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, 0x0, 0x0)

4.397277685s ago: executing program 2 (id=365):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x40001e0, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
connect$netrom(r3, &(0x7f0000000380)={{0x6, @null, 0xa}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48)
r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
connect$netrom(r4, &(0x7f0000000300)={{0x6, @rose, 0xffffffff}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0x48)
listen(r3, 0x1ad72f7)

4.28005537s ago: executing program 0 (id=366):
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x141, 0xf2, 0xc5, 0x96, 0x20, 0x16d0, 0x10b8, 0xde8e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x0, 0x2, 0x2, 0x0, 0x83, 0xec, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0x2, 0x0, 0xa}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000040)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="00160c"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, &(0x7f00000007c0)={0x2c, &(0x7f00000004c0)={0x20, 0x0, 0x28, "902cf15733862880168abe2dd8ae9ba168449c7218f8e7909febe67ccff351b3d9b8941b53a83cd7"}, 0x0, 0x0, 0x0, 0x0})

4.015465211s ago: executing program 1 (id=368):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendmmsg$inet(r0, &(0x7f0000002980)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000640)="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", 0x28e}], 0x1}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000003c0)="e2df20", 0x3}], 0x1}}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000a00)="449f6aed247d197178d7f0a82e1deae14825b22ab6c0ec1ca0c27cd21d8a486374", 0x21}, {&(0x7f0000000f80)="da272d98f0f8962c15832ad9fc3fe69499698607da01faf3742d6a27555ae47f444bad1ea77509fed4623598addf131c04811469c810db02e91468121899cb0cfaa6d06d1cd876e6a0bee56f2bec7b61a58d4bc82f91da6fefe815e7be6c6a07ebeca051d4a71823d1cbd9ec146680bce11c0b821f7e2636c6a64c", 0x7b}, {&(0x7f0000001040)="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", 0x3a8}], 0x3}}], 0x3, 0x480e0)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4)
sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0)

3.96196703s ago: executing program 1 (id=369):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100))
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x0, &(0x7f0000000240)={@fd, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}, @flat=@weak_handle={0x77682a85, 0x100, 0x2}}, 0x0}, 0xfffffffffffffff0}], 0x0, 0x0, 0x0})

3.929733544s ago: executing program 1 (id=370):
sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="200000000101010300000000007f000007000d040c00198008000200220ae2"], 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x48044)

3.869305057s ago: executing program 1 (id=371):
syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r0, &(0x7f0000003900)={0x2, 0x4e24, @multicast1}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='sched_switch\x00', r1, 0x0, 0xfff7fffffffffff5}, 0x18)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
setsockopt$inet_tcp_int(r0, 0x6, 0x5, &(0x7f0000000080)=0x7fe00, 0x4)

3.502812224s ago: executing program 2 (id=374):
openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
ioctl$COMEDI_INSNLIST(0xffffffffffffffff, 0x8010640b, &(0x7f0000000180)={0x0, 0x0})
openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x10)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000140)=0x7ef)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_usb_connect$hid(0x6, 0x36, 0x0, 0x0)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000110500000a14000000090a0104000000e5fb22ad20ecdad8a62a6657003ec31b00000000000a00000414000000faff000000"], 0x3c}, 0x1, 0x0, 0x0, 0x4000850}, 0x4040)
r3 = gettid()
timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800e80010000d0428bd7000fcdbff2500008000", @ANYRES32=r2, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002800500190084"], 0x48}}, 0x4084)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4008840)
sendmmsg(r2, 0x0, 0x0, 0x0)
r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)={0x118, 0x28, 0x1, 0x4, 0x25dfdbfc, "", [@nested={0x107, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac08}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2d}}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f8c", @typed={0x4, 0xe9}]}]}, 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0)
kexec_load(0x0, 0x1, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x41000000}], 0x0)
syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000840)="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", 0x2000, &(0x7f0000007080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000040)='./file1\x00', 0x810, &(0x7f0000000140)={[{@acl}, {@space_cache}, {@check_int}, {@noacl}, {@nodatasum}, {@autodefrag}, {@rescue={'rescue', 0x3d, 'usebackuproot'}}, {@noautodefrag}]}, 0x3, 0x510e, &(0x7f000000a240)="$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")
fsync(0xffffffffffffffff)

2.66804901s ago: executing program 3 (id=375):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0)
pipe2$watch_queue(&(0x7f00000008c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x80)
write$cgroup_type(r3, 0x0, 0x0)
sendmsg$NFT_BATCH(r3, 0x0, 0x80800)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x4c}}, 0x8)
syz_mount_image$jfs(&(0x7f00000001c0), &(0x7f00000000c0)='./file2\x00', 0x1c882, &(0x7f0000000ec0)=ANY=[], 0x1, 0x5eea, &(0x7f000000e480)="$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")
quotactl$Q_SETINFO(0xffffffff80000600, &(0x7f0000000c40)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000c00)={0x46, 0x8c76, 0x0, 0x2})

2.667225496s ago: executing program 1 (id=376):
ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000400)={0xc})
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed4040, &(0x7f0000000a00)={[{@noblock_validity}, {@stripe={'stripe', 0x3d, 0x1}}, {@journal_dev={'journal_dev', 0x3d, 0x3}}, {@grpid}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x3}}, {@nolazytime}, {@noload}]}, 0xf5, 0x48b, &(0x7f0000000f40)="$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")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes\x00', 0x26e1, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
syz_open_procfs(0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
fsetxattr$security_capability(r1, 0x0, 0x0, 0xfffffe04, 0x1)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)

2.541938856s ago: executing program 4 (id=377):
timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0)
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
bind$bt_hci(r0, &(0x7f0000000000)={0x27}, 0x74)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
sendmmsg$unix(r0, &(0x7f0000000b00)=[{{&(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}, {{&(0x7f0000000e80)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000740)=[{&(0x7f0000001dc0)="bb", 0x1}, {0x0}], 0x2}}, {{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000600)='z', 0x1}], 0x1}}], 0x3, 0x0)

1.517575005s ago: executing program 3 (id=378):
r0 = syz_io_uring_setup(0x487, &(0x7f00000000c0)={0x0, 0x9010, 0x100, 0x4, 0x165}, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000280)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x60, 0x1, {0x1}})
io_uring_enter(r0, 0x3517, 0x173d, 0x42, 0x0, 0x0)

1.088096373s ago: executing program 3 (id=379):
syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./file0\x00', 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x1, 0x5508, &(0x7f0000002480)="$eJzs3EtvG1UUAODjpOmbEiEW7DpShZRItVWnD8GuQCseolVUYMEKHNux3NqeKHackBULlogF/wSBxIolv4EFa3aIBYgdEshzJ9DwkEBxYtJ8nzQ+c6+vz5xrVZXOTOQATqzF7OcfK3EpzkXEfERcjCjOK+VRuJ3CcxGRRcTcY0elnP994nREnI+IS5PkKWelfOvTq+MrN39446evvjlz6sJnX347u10Ds/Z8RPQ30vl2P8W8k+LDcr4x7haxf2NcxvRG/1E5zlPcbq8VGbYbe+saRbzeSevzja3hJK73Gs1J7HTXi/mNQbrgcNzZy1N84GFjsxi32mtF7A7zInZ2U107u+n/tt3hKOVplfk+KNLHaLQX03x7p532s/GoiM3BqJxPefNWe2cSx2UsLxfNvNcq6lg7yDf9//Zmd7C1k43bm8NuPshu1uov1Oq3qvXNvNUetW9UG/3WrRvZUqc3WVYdtRv925087/TatWbeX86WOs1mtV7Plu6017qNQVav167XrlVvLpdnV7NX77+T9VrZ0iS+3B1sjbq9Ybaeb2bpE8vZSu36i8vZlXr21r3VbPXB3bv3Vt9+786791+69/or5aK/lJUtrVxbWanWr1VX6ssnaP8flUVPcf9wIJVZFwBw/PzX/v+y/h+YgsPr/zcfRBx+/x/6/6k4Vv3vSe//D2H/cCD6fwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAE+u7hc9fK04W0/hCOf9UOfVMOa5ExFxE/Po35uP0vpzzZZ6Ff1i/8Kcavq5EkWFyjTPlcT4ibpfHL08f9rcAAAAAT64vPrz8SerW08virAviKKWbNnMX359SvkpELCx+P6Vsc5OXZ6eUrPj3fSp2ppStuIF1dkrJ0i23U9PK9q/M7wtnHwuVFOaOtBwAAOBI7O8EjrYLAQAA4Ch9POsCmI1K7D3K3HsWXPzl/R8PBM/tGwEAAADHUGXWBQAAAACHruj//f4fAAAAPNnS7/8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD8xs793CYORHEAfjZ4Yf9p0Wrv28reoIwtYY97jCggTVBADqSFNEAN5JYSIojwOAQiDpE8tpXo+yRnMpb58QbBYWakAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoEv31Xpxe/X7um3Obt9OntEAAAAAl2yr9aL+Z5b6X5v735tbP5t+ERFlRFyau4/i01nmqMmpXp6/OX2+elXDXUSdcHiPSXN9iYg/zfX4o+tPAQAAAD6uzXI1T7P19Gc2dEH0KS3alN/+ZsorIqKaPWRKKw95vzKF1d/vcfzPlFYvYE0zhaUlt3GutDepf+7HVbvpSVOkprz4smOR2cYOAAD0aHTW9DsLAQAAoE//hi6AYRTxvJV53AqcpKbZ3vt81gMAAADeoWLoAgAAAIDO1fP/ns7/2zv/DwAAAIaRzv8DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgS9tqvdgsV/O2Obt9O3lGAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8MT+vKNACIRBGOxd35nM/Q8rDZqamlSB8PE3BgMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPDmd3/5PzE1ziRzr42l55Fk7dTYOjX2zo2jP4yvXwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF/vzkgIhEARRMGf876Tvf1hJ0DOIEAENjypq0QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfNHvfvk/MTXOJHOnjaXjkWTtqrF11dh70Dh6MN7+DQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFzv38xpHFQcA/M3MztZWxTXKHiKi4EEvdrutrb2JByV48E8QQrqtsVt/tDnYUsRcvEnOvYgeRQQl3vo/5JxALvGWwx4ieFZmdiY7+QGuv2Y2yecDb953h2He981CyHfeSwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDS6O1JnGSHzjiOi3Obew+Xsn7rUJ95vLY9n7UsjupM+mR4sfoh6jaXCAAAAGdHUtb3IYSddH0h6+NOXv+n5TVZzf/t0+O4rOcP1/1lX9b+Wfvl593n9wfqjMfJbnpzeTi4dDSV1v83y9n2zF9e0cqffP7uJcm/kPi91edGaf48o683Nt5p5+G5OrIFAP6Ji2VfBOXvQ1nfbzIxAM6MVqXwLuv/pNNsTgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB1GK2GJ8s4CiHMtyZxZmvv4dJx/eO17fmyXXv0aC18Oblndos0hHBzeTi4VOtsZtu9+w9uLw6Hg7v1By+FEJoa/a1i+rc/mOLiEBp5PoL/KIiLL3tW8jkZQYM/lAAAOJXSomV1/U66vpCdi+ZC+OO7g/X/q5U4TFn/7354bbM6VrX+79c2w9nXW7nzae/e/QevL99ZvDW4Nfj4jcv9N/tXrl+9er2XvyvpeWMCAADAv9MuWrX+j+eOrv9fqMRhyvr/s2/6X1THStT/x5os+jWdCQAAwNn27Mu//xYdcz5qt8Pniysrd/vj4/7ny+NjA6n+beeKVq3/k7mmswIAAADqMFqNDqz/36jEYcr1/6e+f+HH6j2TEML5Yv3/4tInwxv1TWem1fHnxE3PEQAAgGadL1p1/T/N9//H+1se4hDCa6+M4+LfAE5V/yfvfvVDdazq/v8r9U1xJsXd8fPI+24IrW7TGQEAAHCaPVG0rNj/NV1f+OinC++37f8HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAqNufAQAA//9hGz6T")
syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0x9000e0, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, &(0x7f0000000000))
r0 = open(&(0x7f0000000180)='./bus\x00', 0x14d27e, 0x0)
ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020660b, &(0x7f00000001c0)={0x3403, 0xfffffffffffffffd, 0xfd024, 0x4})

877.401572ms ago: executing program 0 (id=380):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100))
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x0, &(0x7f0000000240)={@fd, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}, @flat=@weak_handle={0x77682a85, 0x100, 0x2}}, 0x0}, 0xfffffffffffffff0}], 0x0, 0x0, 0x0})

869.571624ms ago: executing program 0 (id=381):
r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0)
ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f00000000c0)=0x10000)
write$binfmt_elf32(r0, 0x0, 0x4cd)
ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000100)=0x1)

668.632855ms ago: executing program 0 (id=382):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="98030000", @ANYRES16=r1, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r3, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c090000560333"], 0x398}}, 0x0)

613.034318ms ago: executing program 4 (id=384):
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000001a00)=ANY=[@ANYBLOB="180000005200012200000000000000001c"], 0x18}, 0x1, 0x0, 0x0, 0x4801c}, 0x0)
setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, 0x0, 0x0)

533.280611ms ago: executing program 0 (id=385):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x40001e0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
connect$netrom(r3, &(0x7f0000000380)={{0x6, @null, 0xa}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48)
r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
connect$netrom(r4, &(0x7f0000000300)={{0x6, @rose, 0xffffffff}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0x48)
listen(r3, 0x1ad72f7)

532.263756ms ago: executing program 4 (id=386):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r0 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4)
setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8)
syz_emit_ethernet(0x3e, &(0x7f0000000040)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x20, 0xfc, 0x2, 0x0, @rand_addr=0x1c, @multicast1=0xe0000300}, @dest_unreach={0x3, 0x6, 0x0, 0x0, 0xfa, 0x9, {0x5, 0x4, 0x0, 0x3d, 0xfff6, 0x65, 0x5, 0x1, 0x89, 0x3, @private=0xa010102, @local}}}}}}, 0x0)
r2 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_MFC_PROXY(r2, 0x0, 0xd2, &(0x7f00000000c0)={@multicast1=0x1c, @empty=0xe0000300, 0x0, "8a79348df081496d0420922f45a71c1daa8b610468cd140526c41efcd3a4a422", 0x3, 0x1, 0x85}, 0x3c)

442.297093ms ago: executing program 3 (id=387):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x88e, &(0x7f00000003c0)={[{@errors_remount}, {@mblk_io_submit}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0xb}}, {@test_dummy_encryption_v1}, {@barrier}, {@mblk_io_submit}, {@nogrpid}]}, 0x3, 0x445, &(0x7f0000000c80)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x22)
ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000140))

190.215519ms ago: executing program 4 (id=388):
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
timer_settime(0x0, 0x0, 0x0, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x21, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe)
write$binfmt_script(r0, &(0x7f0000000cc0), 0xfd45)

112.609352ms ago: executing program 1 (id=389):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x10108c0, &(0x7f0000000180)=ANY=[@ANYBLOB="61636c2c6865617274626561743d6e6f6e652c6572726f72733d72656d6f756e742d726f2c636f686572656e63793d66756c6c2c636f686572656e63793d66756c6c2c6c6f63616c666c6f636b732c696e74722c6e6f61636c2c00598f2f223a0a12f76404ad3bd59a04fbd75d1008c039c51a2a013e63af1c9ed7416faa1e2ea98d0f1c7337a5c81920988a4299a77054cdb12285fd7a0e5b43382d962372b73042593a5bd6b7db4a1b3721c62f11018727c29f3a1bd1e554474ea0d1da2a20b205df342a04a34b65e16a23e8e7811a984963073ebcbead85f9e4332bdef4c1ce54a1c6f7a47b75aa95b9e8cb616be40a0000b1309ee426d1803ef09abb9509846c34b9ac0bf109cedbd12c850effda9ae677566159f9c83da7ff6e247e3ac43c0a663c8c83650692e474bac2c047b238601bd5187d6bed82fe2034512ef11b74a98252198c4402bcf3165561157678e9d50831c27d1094a04d8c7607d7164033cda7a8170482"], 0x1, 0x4444, &(0x7f00000088c0)="$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")
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, 0x0, 0x118)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x101042, 0x40)
symlinkat(&(0x7f0000000000)='.\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00')
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
syz_open_procfs(0x0, &(0x7f0000000540)='net/tcp6\x00')
r3 = getpid()
sched_setaffinity(0x0, 0x4, &(0x7f00000002c0)=0x2)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x9)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
accept4$vsock_stream(r2, &(0x7f0000000400)={0x28, 0x0, 0x2711, @local}, 0x10, 0x80800)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00'}, 0x10)
request_key(&(0x7f0000000180)='user\x00', &(0x7f0000000200)={'syz', 0x3}, &(0x7f0000000280)='\xa9\x1c)\x00', 0xfffffffffffffffd)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, 0x1, 0x0, 0x0)
linkat(0xffffffffffffff9c, &(0x7f00000006c0)='./file2\x00', 0xffffffffffffff9c, &(0x7f0000000700)='./file7\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f0000000b80), 0x200008, &(0x7f0000000380)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@index_on}, {@metacopy_on}]})
ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f00000000c0)={0x0, 0x2904c, 0x1, 0x10003, '\x00', [{0x0, 0x0, 0x0, 0x5}, {0xffffffff, 0x0, 0x2}], ['\x00']})

112.42357ms ago: executing program 4 (id=390):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
r1 = syz_io_uring_setup(0x487, 0x0, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000280)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x0, r0, 0x0, 0x0, 0x0, 0x60, 0x1, {0x1}})
io_uring_enter(r1, 0x3517, 0x173d, 0x42, 0x0, 0x0)

112.163719ms ago: executing program 4 (id=391):
socket(0x10, 0x803, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff6000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
r2 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
shutdown(r2, 0x1)
connect$bt_rfcomm(r2, &(0x7f0000005dc0)={0x1f, @any, 0x15}, 0xa)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
r3 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x2, 0x20002f7})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0xffff}}}, 0x24}}, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, 0x0)
io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0)

112.015849ms ago: executing program 3 (id=392):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100))
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x0, &(0x7f0000000240)={@fd, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}, @flat=@weak_handle={0x77682a85, 0x100, 0x2}}, 0x0}, 0xfffffffffffffff0}], 0x0, 0x0, 0x0})

0s ago: executing program 3 (id=393):
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="130100002add1e20ef050a023691010203010902240001000000000904000002ea1998000905a6a70000000000090507", @ANYRES32], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.0.127' (ED25519) to the list of known hosts.
[   23.334297][ T6503] cgroup: Unknown subsys name 'net'
[   23.437393][ T6503] cgroup: Unknown subsys name 'cpuset'
[   23.439530][ T6503] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   23.575493][ T6503] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k SS
[   24.623062][ T6532] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   24.625206][ T6532] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   24.633028][ T6532] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   24.641253][ T6532] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   24.653431][ T6535] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   24.662880][ T6535] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   24.667802][ T6543] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   24.669560][ T6543] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   24.672418][ T6543] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   24.672720][ T6543] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   24.672994][ T6543] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   24.673311][ T6543] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   24.674571][ T6543] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   24.675212][ T6532] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   24.675551][ T6532] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   24.681864][ T6532] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   24.685331][ T6543] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   24.685571][ T6543] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   24.688080][ T6532] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   24.690598][ T6532] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   24.691662][ T6532] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   24.692158][ T6543] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   24.692329][ T6543] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   24.694751][ T6126] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   24.694935][ T6126] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   24.841385][ T6531] chnl_net:caif_netlink_parms(): no params data found
[   24.874730][ T6534] chnl_net:caif_netlink_parms(): no params data found
[   24.889657][ T6538] chnl_net:caif_netlink_parms(): no params data found
[   24.927236][ T6537] chnl_net:caif_netlink_parms(): no params data found
[   24.958129][ T6531] bridge0: port 1(bridge_slave_0) entered blocking state
[   24.959766][ T6531] bridge0: port 1(bridge_slave_0) entered disabled state
[   24.961213][ T6531] bridge_slave_0: entered allmulticast mode
[   24.962765][ T6531] bridge_slave_0: entered promiscuous mode
[   24.965912][ T6534] bridge0: port 1(bridge_slave_0) entered blocking state
[   24.965964][ T6534] bridge0: port 1(bridge_slave_0) entered disabled state
[   24.966055][ T6534] bridge_slave_0: entered allmulticast mode
[   24.966492][ T6534] bridge_slave_0: entered promiscuous mode
[   24.967474][ T6534] bridge0: port 2(bridge_slave_1) entered blocking state
[   24.967494][ T6534] bridge0: port 2(bridge_slave_1) entered disabled state
[   24.967542][ T6534] bridge_slave_1: entered allmulticast mode
[   24.968003][ T6534] bridge_slave_1: entered promiscuous mode
[   24.978020][ T6538] bridge0: port 1(bridge_slave_0) entered blocking state
[   24.978120][ T6538] bridge0: port 1(bridge_slave_0) entered disabled state
[   24.978433][ T6538] bridge_slave_0: entered allmulticast mode
[   24.978853][ T6538] bridge_slave_0: entered promiscuous mode
[   24.979570][ T6538] bridge0: port 2(bridge_slave_1) entered blocking state
[   24.979590][ T6538] bridge0: port 2(bridge_slave_1) entered disabled state
[   24.979648][ T6538] bridge_slave_1: entered allmulticast mode
[   24.980060][ T6538] bridge_slave_1: entered promiscuous mode
[   24.986452][ T6531] bridge0: port 2(bridge_slave_1) entered blocking state
[   24.986483][ T6531] bridge0: port 2(bridge_slave_1) entered disabled state
[   24.986561][ T6531] bridge_slave_1: entered allmulticast mode
[   24.987028][ T6531] bridge_slave_1: entered promiscuous mode
[   24.991420][ T6539] chnl_net:caif_netlink_parms(): no params data found
[   25.008772][ T6531] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   25.020749][ T6538] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   25.022028][ T6538] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   25.028421][ T6531] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   25.033565][ T6534] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   25.045823][ T6538] team0: Port device team_slave_0 added
[   25.051728][ T6534] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   25.051845][ T6537] bridge0: port 1(bridge_slave_0) entered blocking state
[   25.051913][ T6537] bridge0: port 1(bridge_slave_0) entered disabled state
[   25.051971][ T6537] bridge_slave_0: entered allmulticast mode
[   25.052383][ T6537] bridge_slave_0: entered promiscuous mode
[   25.053265][ T6537] bridge0: port 2(bridge_slave_1) entered blocking state
[   25.053281][ T6537] bridge0: port 2(bridge_slave_1) entered disabled state
[   25.053328][ T6537] bridge_slave_1: entered allmulticast mode
[   25.053709][ T6537] bridge_slave_1: entered promiscuous mode
[   25.060182][ T6538] team0: Port device team_slave_1 added
[   25.064743][ T6531] team0: Port device team_slave_0 added
[   25.067025][ T6531] team0: Port device team_slave_1 added
[   25.092114][ T6534] team0: Port device team_slave_0 added
[   25.094142][ T6537] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   25.099596][ T6538] batman_adv: batadv0: Adding interface: batadv_slave_0
[   25.099624][ T6538] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   25.099636][ T6538] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   25.100464][ T6538] batman_adv: batadv0: Adding interface: batadv_slave_1
[   25.100471][ T6538] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   25.100485][ T6538] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   25.119122][ T6534] team0: Port device team_slave_1 added
[   25.119827][ T6531] batman_adv: batadv0: Adding interface: batadv_slave_0
[   25.119845][ T6531] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   25.119876][ T6531] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   25.127947][ T6537] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   25.131478][ T6539] bridge0: port 1(bridge_slave_0) entered blocking state
[   25.132751][ T6539] bridge0: port 1(bridge_slave_0) entered disabled state
[   25.134124][ T6539] bridge_slave_0: entered allmulticast mode
[   25.135552][ T6539] bridge_slave_0: entered promiscuous mode
[   25.136610][ T6539] bridge0: port 2(bridge_slave_1) entered blocking state
[   25.136641][ T6539] bridge0: port 2(bridge_slave_1) entered disabled state
[   25.136709][ T6539] bridge_slave_1: entered allmulticast mode
[   25.137441][ T6539] bridge_slave_1: entered promiscuous mode
[   25.143033][ T6538] hsr_slave_0: entered promiscuous mode
[   25.143826][ T6538] hsr_slave_1: entered promiscuous mode
[   25.149906][ T6531] batman_adv: batadv0: Adding interface: batadv_slave_1
[   25.149932][ T6531] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   25.150197][ T6531] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   25.162010][ T6539] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   25.171948][ T6537] team0: Port device team_slave_0 added
[   25.172767][ T6537] team0: Port device team_slave_1 added
[   25.180694][ T6539] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   25.184444][ T6534] batman_adv: batadv0: Adding interface: batadv_slave_0
[   25.187322][ T6534] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   25.187368][ T6534] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   25.200778][ T6537] batman_adv: batadv0: Adding interface: batadv_slave_0
[   25.202065][ T6537] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   25.204892][ T6537] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   25.210728][ T6539] team0: Port device team_slave_0 added
[   25.211590][ T6534] batman_adv: batadv0: Adding interface: batadv_slave_1
[   25.211597][ T6534] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   25.211609][ T6534] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   25.216109][ T6531] hsr_slave_0: entered promiscuous mode
[   25.216399][ T6531] hsr_slave_1: entered promiscuous mode
[   25.216585][ T6531] debugfs: 'hsr0' already exists in 'hsr'
[   25.216631][ T6531] Cannot create hsr debugfs directory
[   25.227758][ T6537] batman_adv: batadv0: Adding interface: batadv_slave_1
[   25.228883][ T6537] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   25.232793][ T6537] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   25.237363][ T6539] team0: Port device team_slave_1 added
[   25.264181][ T6534] hsr_slave_0: entered promiscuous mode
[   25.265873][ T6534] hsr_slave_1: entered promiscuous mode
[   25.267357][ T6534] debugfs: 'hsr0' already exists in 'hsr'
[   25.268499][ T6534] Cannot create hsr debugfs directory
[   25.279133][ T6539] batman_adv: batadv0: Adding interface: batadv_slave_0
[   25.280335][ T6539] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   25.284435][ T6539] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   25.286328][ T6539] batman_adv: batadv0: Adding interface: batadv_slave_1
[   25.287381][ T6539] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   25.291401][ T6539] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   25.328112][ T6537] hsr_slave_0: entered promiscuous mode
[   25.329451][ T6537] hsr_slave_1: entered promiscuous mode
[   25.330894][ T6537] debugfs: 'hsr0' already exists in 'hsr'
[   25.331025][ T6537] Cannot create hsr debugfs directory
[   25.361421][ T6539] hsr_slave_0: entered promiscuous mode
[   25.363098][ T6539] hsr_slave_1: entered promiscuous mode
[   25.364317][ T6539] debugfs: 'hsr0' already exists in 'hsr'
[   25.365283][ T6539] Cannot create hsr debugfs directory
[   25.412595][ T6531] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   25.422287][ T6531] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   25.425685][ T6531] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   25.430551][ T6531] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   25.485433][ T6538] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   25.488007][ T6538] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   25.491677][ T6531] bridge0: port 2(bridge_slave_1) entered blocking state
[   25.491733][ T6531] bridge0: port 2(bridge_slave_1) entered forwarding state
[   25.491889][ T6531] bridge0: port 1(bridge_slave_0) entered blocking state
[   25.491938][ T6531] bridge0: port 1(bridge_slave_0) entered forwarding state
[   25.497844][ T6538] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   25.500467][ T6538] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   25.520650][ T6538] bridge0: port 2(bridge_slave_1) entered blocking state
[   25.520696][ T6538] bridge0: port 2(bridge_slave_1) entered forwarding state
[   25.520769][ T6538] bridge0: port 1(bridge_slave_0) entered blocking state
[   25.520797][ T6538] bridge0: port 1(bridge_slave_0) entered forwarding state
[   25.526979][ T6537] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   25.529196][ T6537] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   25.533824][ T6537] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   25.542092][ T6537] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   25.567456][ T6537] bridge0: port 2(bridge_slave_1) entered blocking state
[   25.567528][ T6537] bridge0: port 2(bridge_slave_1) entered forwarding state
[   25.567620][ T6537] bridge0: port 1(bridge_slave_0) entered blocking state
[   25.567648][ T6537] bridge0: port 1(bridge_slave_0) entered forwarding state
[   25.585448][ T6534] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   25.591941][ T6534] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   25.596653][ T6531] 8021q: adding VLAN 0 to HW filter on device bond0
[   25.600555][ T6534] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   25.605897][ T6534] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   25.621606][   T42] bridge0: port 1(bridge_slave_0) entered disabled state
[   25.623066][   T42] bridge0: port 2(bridge_slave_1) entered disabled state
[   25.625319][   T42] bridge0: port 1(bridge_slave_0) entered disabled state
[   25.626603][   T42] bridge0: port 2(bridge_slave_1) entered disabled state
[   25.629609][   T42] bridge0: port 1(bridge_slave_0) entered disabled state
[   25.631896][   T42] bridge0: port 2(bridge_slave_1) entered disabled state
[   25.645426][ T6531] 8021q: adding VLAN 0 to HW filter on device team0
[   25.648534][ T6537] 8021q: adding VLAN 0 to HW filter on device bond0
[   25.651983][   T42] bridge0: port 1(bridge_slave_0) entered blocking state
[   25.652040][   T42] bridge0: port 1(bridge_slave_0) entered forwarding state
[   25.657021][ T6538] 8021q: adding VLAN 0 to HW filter on device bond0
[   25.662064][ T6538] 8021q: adding VLAN 0 to HW filter on device team0
[   25.668460][ T6537] 8021q: adding VLAN 0 to HW filter on device team0
[   25.678533][   T42] bridge0: port 2(bridge_slave_1) entered blocking state
[   25.678576][   T42] bridge0: port 2(bridge_slave_1) entered forwarding state
[   25.682344][ T6539] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   25.691055][   T42] bridge0: port 1(bridge_slave_0) entered blocking state
[   25.691097][   T42] bridge0: port 1(bridge_slave_0) entered forwarding state
[   25.693774][   T42] bridge0: port 1(bridge_slave_0) entered blocking state
[   25.693809][   T42] bridge0: port 1(bridge_slave_0) entered forwarding state
[   25.696862][ T6539] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   25.699494][ T6539] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   25.701778][ T6539] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   25.713509][ T5927] bridge0: port 2(bridge_slave_1) entered blocking state
[   25.713553][ T5927] bridge0: port 2(bridge_slave_1) entered forwarding state
[   25.714045][ T5927] bridge0: port 2(bridge_slave_1) entered blocking state
[   25.714062][ T5927] bridge0: port 2(bridge_slave_1) entered forwarding state
[   25.739905][ T6537] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   25.801126][ T6539] 8021q: adding VLAN 0 to HW filter on device bond0
[   25.804224][ T6539] 8021q: adding VLAN 0 to HW filter on device team0
[   25.817789][ T6534] 8021q: adding VLAN 0 to HW filter on device bond0
[   25.822773][ T5927] bridge0: port 1(bridge_slave_0) entered blocking state
[   25.822816][ T5927] bridge0: port 1(bridge_slave_0) entered forwarding state
[   25.835616][ T6537] 8021q: adding VLAN 0 to HW filter on device batadv0
[   25.851418][   T14] bridge0: port 2(bridge_slave_1) entered blocking state
[   25.851465][   T14] bridge0: port 2(bridge_slave_1) entered forwarding state
[   25.867620][ T6537] veth0_vlan: entered promiscuous mode
[   25.870756][ T6537] veth1_vlan: entered promiscuous mode
[   25.881481][ T6534] 8021q: adding VLAN 0 to HW filter on device team0
[   25.900444][ T6538] 8021q: adding VLAN 0 to HW filter on device batadv0
[   25.903994][ T6537] veth0_macvtap: entered promiscuous mode
[   25.909888][ T6531] 8021q: adding VLAN 0 to HW filter on device batadv0
[   25.912851][  T199] bridge0: port 1(bridge_slave_0) entered blocking state
[   25.912907][  T199] bridge0: port 1(bridge_slave_0) entered forwarding state
[   25.916969][ T6537] veth1_macvtap: entered promiscuous mode
[   25.933853][   T41] bridge0: port 2(bridge_slave_1) entered blocking state
[   25.933906][   T41] bridge0: port 2(bridge_slave_1) entered forwarding state
[   25.939592][ T6537] batman_adv: batadv0: Interface activated: batadv_slave_0
[   25.946128][ T6537] batman_adv: batadv0: Interface activated: batadv_slave_1
[   25.951556][ T5927] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   25.951680][ T5927] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   25.951704][ T5927] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   25.951725][ T5927] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   25.971984][ T6531] veth0_vlan: entered promiscuous mode
[   25.973578][ T6531] veth1_vlan: entered promiscuous mode
[   25.988870][ T6539] 8021q: adding VLAN 0 to HW filter on device batadv0
[   26.029649][   T41] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   26.029693][   T41] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   26.047559][ T6538] veth0_vlan: entered promiscuous mode
[   26.049435][ T6538] veth1_vlan: entered promiscuous mode
[   26.065664][ T6531] veth0_macvtap: entered promiscuous mode
[   26.070316][ T6531] veth1_macvtap: entered promiscuous mode
[   26.088904][ T6531] batman_adv: batadv0: Interface activated: batadv_slave_0
[   26.090579][ T2668] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   26.090595][ T2668] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   26.091127][ T6531] batman_adv: batadv0: Interface activated: batadv_slave_1
[   26.101869][   T42] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   26.103078][   T42] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   26.103103][   T42] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   26.103117][   T42] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   26.129219][ T6538] veth0_macvtap: entered promiscuous mode
[   26.149165][ T6537] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   26.150308][ T6538] veth1_macvtap: entered promiscuous mode
[   26.153973][ T6539] veth0_vlan: entered promiscuous mode
[   26.165276][   T14] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   26.165306][   T14] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   26.174573][ T6538] batman_adv: batadv0: Interface activated: batadv_slave_0
[   26.175751][ T6539] veth1_vlan: entered promiscuous mode
[   26.200626][ T6538] batman_adv: batadv0: Interface activated: batadv_slave_1
[   26.218607][ T2668] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   26.220256][ T2668] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   26.222084][ T2668] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   26.223836][ T2668] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   26.227613][   T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   26.227642][   T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   26.233292][ T6534] 8021q: adding VLAN 0 to HW filter on device batadv0
[   26.238578][ T6539] veth0_macvtap: entered promiscuous mode
[   26.242344][ T6539] veth1_macvtap: entered promiscuous mode
[   26.260568][   T14] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   26.260601][   T14] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   26.272013][ T6539] batman_adv: batadv0: Interface activated: batadv_slave_0
[   26.289447][ T6539] batman_adv: batadv0: Interface activated: batadv_slave_1
[   26.300172][   T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   26.300213][   T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   26.311826][ T6534] veth0_vlan: entered promiscuous mode
[   26.313504][ T6534] veth1_vlan: entered promiscuous mode
[   26.315936][ T2668] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   26.315999][ T2668] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   26.316017][ T2668] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   26.316032][ T2668] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   26.347560][ T6534] veth0_macvtap: entered promiscuous mode
[   26.357034][   T41] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   26.357064][   T41] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   26.363729][ T6534] veth1_macvtap: entered promiscuous mode
[   26.385414][  T199] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   26.385447][  T199] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   26.390978][ T6534] batman_adv: batadv0: Interface activated: batadv_slave_0
[   26.392106][ T6534] batman_adv: batadv0: Interface activated: batadv_slave_1
[   26.394925][ T2668] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   26.397167][ T2668] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   26.397220][ T2668] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   26.397244][ T2668] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   26.524923][  T199] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   26.524953][  T199] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   26.533168][ T2668] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   26.533202][ T2668] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   26.746970][ T6535] Bluetooth: hci0: command tx timeout
[   26.747239][ T6535] Bluetooth: hci4: command tx timeout
[   26.747469][ T6535] Bluetooth: hci3: command tx timeout
[   26.747676][ T6535] Bluetooth: hci1: command tx timeout
[   26.753482][ T6543] Bluetooth: hci2: command tx timeout
[   27.079570][ T6669] binder: BINDER_SET_CONTEXT_MGR already set
[   27.079602][ T6669] binder: 6668:6669 ioctl 4018620d 20004a80 returned -16
[   27.185933][ T6674] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   27.186166][ T6674] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   27.501617][ T6679] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   27.501783][ T6679] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   27.577122][ T6683] loop4: detected capacity change from 0 to 256
[   27.597261][ T6683] exFAT-fs (loop4): bogus fat length
[   27.597312][ T6683] exFAT-fs (loop4): failed to read boot sector
[   27.597325][ T6683] exFAT-fs (loop4): failed to recognize exfat type
[   27.709637][ T6695] loop4: detected capacity change from 0 to 128
[   27.718282][ T6695] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1)
[   27.718335][ T6695] FAT-fs (loop4): bogus number of directory entries (203)
[   27.718345][ T6695] FAT-fs (loop4): Can't find a valid FAT filesystem
[   27.720306][ T6697] binder: 6696:6697 IncRefs 0 refcount change on invalid ref 0 ret -22
[   27.721441][ T6697] binder: 6696:6697 got transaction to invalid handle, 1
[   27.721488][ T6697] binder: 6696:6697 cannot find target node
[   27.721495][ T6697] binder: 6696:6697 transaction call to 0:0 failed 4/29201/-22, code 0 size 72-0 line 3151
[   27.721739][ T6603] binder: undelivered TRANSACTION_ERROR: 29201
[   28.549403][ T6695] loop4: detected capacity change from 0 to 262144
[   28.551046][ T6695] =======================================================
[   28.551046][ T6695] WARNING: The mand mount option has been deprecated and
[   28.551046][ T6695]          and is ignored by this kernel. Remove the mand
[   28.551046][ T6695]          option from the mount to silence this warning.
[   28.551046][ T6695] =======================================================
[   28.552753][ T6695] BTRFS: device fsid 7e32c2af-f87a-45a1-bcba-64dea7c56a53 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.22 (6695)
[   28.564376][ T6695] BTRFS info (device loop4): first mount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53
[   28.564452][ T6695] BTRFS info (device loop4): using xxhash64 (xxhash64-generic) checksum algorithm
[   28.672741][ T6695] BTRFS info (device loop4): enabling ssd optimizations
[   28.672774][ T6695] BTRFS info (device loop4): enabling free space tree
[   28.733366][ T6539] BTRFS info (device loop4): last unmount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53
[   28.824451][ T6541] Bluetooth: hci2: command tx timeout
[   28.824492][ T6541] Bluetooth: hci1: command tx timeout
[   28.824601][ T6541] Bluetooth: hci3: command tx timeout
[   28.824631][ T6541] Bluetooth: hci4: command tx timeout
[   28.824644][ T6541] Bluetooth: hci0: command tx timeout
[   28.858032][ T6735] binder: 6734:6735 IncRefs 0 refcount change on invalid ref 0 ret -22
[   28.860879][ T6735] binder: 6734:6735 got transaction to invalid handle, 1
[   28.862334][ T6735] binder: 6734:6735 cannot find target node
[   28.863411][ T6735] binder: 6734:6735 transaction call to 0:0 failed 7/29201/-22, code 0 size 72-0 line 3151
[   28.867044][ T6642] binder: undelivered TRANSACTION_ERROR: 29201
[   28.910357][ T6737] loop0: detected capacity change from 0 to 1024
[   28.975668][ T6737] hfsplus: bad catalog entry type
[   29.019663][ T6746] loop0: detected capacity change from 0 to 512
[   29.022878][ T6746] EXT4-fs: Ignoring removed mblk_io_submit option
[   29.024499][ T6746] EXT4-fs: Ignoring removed mblk_io_submit option
[   29.030552][ T6746] EXT4-fs (loop0): Test dummy encryption mode enabled
[   29.030586][ T6746] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   29.030592][ T6746] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[   29.042021][ T6746] EXT4-fs (loop0): 1 truncate cleaned up
[   29.045607][ T6746] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   29.087536][ T6531] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   29.793952][ T6762] netlink: 4 bytes leftover after parsing attributes in process `syz.1.43'.
[   29.821780][ T6766] loop2: detected capacity change from 0 to 16
[   29.859738][ T6768] loop1: detected capacity change from 0 to 256
[   29.861553][ T6768] exfat: Deprecated parameter 'utf8'
[   29.862913][ T6768] exfat: Deprecated parameter 'namecase'
[   29.875509][ T6770] binder: 6769:6770 IncRefs 0 refcount change on invalid ref 0 ret -22
[   29.875989][ T6768] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d)
[   29.881286][ T6770] binder: 6769:6770 got transaction to invalid handle, 1
[   29.882987][ T6770] binder: 6769:6770 cannot find target node
[   29.884023][ T6770] binder: 6769:6770 transaction call to 0:0 failed 10/29201/-22, code 0 size 72-0 line 3151
[   29.886716][ T6757] binder: undelivered TRANSACTION_ERROR: 29201
[   30.008544][   T31] audit: type=1326 audit(29.980:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6778 comm="syz.1.50" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffabb5b3a8 code=0x7ffc0000
[   30.012082][   T31] audit: type=1326 audit(29.980:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6778 comm="syz.1.50" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffabb5b3a8 code=0x7ffc0000
[   30.018750][   T31] audit: type=1326 audit(29.990:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6778 comm="syz.1.50" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=237 compat=0 ip=0xffffabb5b3a8 code=0x7ffc0000
[   30.022576][   T31] audit: type=1326 audit(29.990:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6778 comm="syz.1.50" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffabb5b3a8 code=0x7ffc0000
[   30.349375][ T6791] batman_adv: batadv0: Adding interface: dummy0
[   30.349403][ T6791] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   30.349420][ T6791] batman_adv: batadv0: Interface activated: dummy0
[   30.369288][ T6793] loop1: detected capacity change from 0 to 16
[   30.409287][ T6797] binder: 6796:6797 IncRefs 0 refcount change on invalid ref 0 ret -22
[   30.482620][ T6802] netlink: 12 bytes leftover after parsing attributes in process `syz.4.61'.
[   30.779508][ T6807] loop4: detected capacity change from 0 to 256
[   30.781338][ T6807] exfat: Deprecated parameter 'utf8'
[   30.781378][ T6807] exfat: Deprecated parameter 'namecase'
[   30.792725][ T6807] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d)
[   30.803071][ T6809] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   30.808697][ T6809] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   30.895292][ T6543] Bluetooth: hci0: command tx timeout
[   30.896332][ T6543] Bluetooth: hci4: command tx timeout
[   30.896350][ T6543] Bluetooth: hci3: command tx timeout
[   30.896364][ T6543] Bluetooth: hci1: command tx timeout
[   30.896375][ T6543] Bluetooth: hci2: command tx timeout
[   30.946970][ T6817] batman_adv: batadv0: Adding interface: dummy0
[   30.946997][ T6817] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   30.947029][ T6817] batman_adv: batadv0: Interface activated: dummy0
[   30.975906][ T6819] loop4: detected capacity change from 0 to 16
[   30.998559][ T6821] binder: 6820:6821 IncRefs 0 refcount change on invalid ref 0 ret -22
[   31.033510][ T6815] loop0: detected capacity change from 0 to 32768
[   31.037595][ T6815] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.67 (6815)
[   31.050301][ T6815] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   31.050364][ T6815] BTRFS info (device loop0): using crc32c (crc32c-lib) checksum algorithm
[   31.068802][ T6831] netlink: 12 bytes leftover after parsing attributes in process `syz.4.72'.
[   31.175829][ T6815] BTRFS info (device loop0): allowing degraded mounts
[   31.175863][ T6815] BTRFS info (device loop0): enabling ssd optimizations
[   31.175885][ T6815] BTRFS info (device loop0): enabling free space tree
[   31.175900][ T6815] BTRFS info (device loop0): force zlib compression, level 3
[   31.211246][ T6531] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   31.213102][ T6849] loop3: detected capacity change from 0 to 256
[   31.213483][ T6849] exfat: Deprecated parameter 'utf8'
[   31.213497][ T6849] exfat: Deprecated parameter 'namecase'
[   31.238171][ T6849] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d)
[   31.350397][ T6851] loop1: detected capacity change from 0 to 32768
[   31.354383][ T6851] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.77 (6851)
[   31.358516][ T6851] BTRFS info (device loop1): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787
[   31.361097][ T6851] BTRFS info (device loop1): using sha256 (sha256-lib) checksum algorithm
[   31.485970][ T6872] batman_adv: batadv0: Adding interface: dummy0
[   31.488934][ T6872] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   31.488985][ T6872] batman_adv: batadv0: Interface activated: dummy0
[   31.506665][ T6851] BTRFS info (device loop1): turning off barriers
[   31.507871][ T6851] BTRFS info (device loop1): turning on flush-on-commit
[   31.509892][ T6851] BTRFS info (device loop1): turning on sync discard
[   31.509945][ T6851] BTRFS info (device loop1): enabling free space tree
[   31.511901][ T6856] loop2: detected capacity change from 0 to 32768
[   31.516013][ T6856] btrfs: Deprecated parameter 'usebackuproot'
[   31.516108][ T6856] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[   31.519802][ T6856] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.79 (6856)
[   31.526951][ T6856] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   31.527394][ T6856] BTRFS info (device loop2): using crc32c (crc32c-lib) checksum algorithm
[   31.527426][ T6856] BTRFS warning (device loop2): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[   31.548985][ T2668] BTRFS warning (device loop2): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0
[   31.550992][ T6856] BTRFS error (device loop2): failed to load root extent
[   31.551023][ T6856] BTRFS warning (device loop2): try to load backup roots slot 1
[   31.552802][ T2668] BTRFS warning (device loop2): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0
[   31.553054][ T6856] BTRFS warning (device loop2): couldn't read tree root
[   31.553077][ T6856] BTRFS warning (device loop2): try to load backup roots slot 2
[   31.554359][ T2668] BTRFS error (device loop2): level verify failed on logical 5255168 mirror 1 wanted 0 found 1
[   31.555040][ T6856] BTRFS warning (device loop2): couldn't read tree root
[   31.555057][ T6856] BTRFS warning (device loop2): try to load backup roots slot 3
[   31.566756][ T6534] BTRFS info (device loop1): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787
[   31.572816][ T6856] BTRFS info (device loop2): rebuilding free space tree
[   31.577448][ T6893] binder: 6892:6893 IncRefs 0 refcount change on invalid ref 0 ret -22
[   31.612640][ T6856] BTRFS info (device loop2): disabling free space tree
[   31.612779][ T6856] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[   31.612792][ T6856] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[   31.629081][ T6856] BTRFS info (device loop2): turning off barriers
[   31.629124][ T6856] BTRFS info (device loop2): disabling tree log
[   31.629152][ T6856] BTRFS info (device loop2): enabling disk space caching
[   31.629166][ T6856] BTRFS info (device loop2): force clearing of disk cache
[   31.629176][ T6856] BTRFS info (device loop2): enabling auto defrag
[   31.629185][ T6856] BTRFS info (device loop2): trying to use backup root at mount time
[   31.629193][ T6856] BTRFS info (device loop2): max_inline set to 0
[   31.719127][ T6899] netlink: 12 bytes leftover after parsing attributes in process `syz.3.83'.
[   31.723845][ T6538] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   32.289310][ T6913] loop0: detected capacity change from 0 to 256
[   32.292119][ T6913] exfat: Deprecated parameter 'utf8'
[   32.295016][ T6915] loop2: detected capacity change from 0 to 8
[   32.299722][ T6913] exfat: Deprecated parameter 'namecase'
[   32.545983][ T6913] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d)
[   32.633297][ T6923] batman_adv: batadv0: Adding interface: dummy0
[   32.633343][ T6923] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   32.633369][ T6923] batman_adv: batadv0: Interface activated: dummy0
[   32.669191][ T6927] binder: 6925:6927 IncRefs 0 refcount change on invalid ref 0 ret -22
[   32.685226][ T6931] netlink: 12 bytes leftover after parsing attributes in process `syz.0.95'.
[   32.802086][ T6944] loop2: detected capacity change from 0 to 256
[   32.803663][ T6944] exfat: Deprecated parameter 'utf8'
[   32.804988][ T6944] exfat: Deprecated parameter 'namecase'
[   32.809242][ T6944] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d)
[   32.984440][ T6541] Bluetooth: hci2: command tx timeout
[   32.984525][ T6541] Bluetooth: hci1: command tx timeout
[   32.984606][ T6541] Bluetooth: hci3: command tx timeout
[   32.984663][ T6541] Bluetooth: hci4: command tx timeout
[   32.984719][ T6541] Bluetooth: hci0: command tx timeout
[   33.789837][ T6964] binder: 6963:6964 IncRefs 0 refcount change on invalid ref 0 ret -22
[   33.948969][ T6954] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[   33.950171][ T6954] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[   34.286625][ T6975] binder: 6974:6975 ioctl c0306201 0 returned -14
[   34.288338][ T6975] binder: 6974:6975 ioctl c0306201 0 returned -14
[   34.370573][ T6982] loop1: detected capacity change from 0 to 256
[   34.372195][ T6982] exfat: Deprecated parameter 'utf8'
[   34.374458][ T6982] exfat: Deprecated parameter 'namecase'
[   34.380047][ T6982] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d)
[   34.400827][ T6986] batman_adv: batadv0: Adding interface: dummy0
[   34.400854][ T6986] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   34.400885][ T6986] batman_adv: batadv0: Interface activated: dummy0
[   34.669170][ T6990] binder: 6987:6990 IncRefs 0 refcount change on invalid ref 0 ret -22
[   34.696744][ T6995] binder: 6994:6995 unknown command 0
[   34.696778][ T6995] binder: 6994:6995 ioctl c0306201 20000080 returned -22
[   34.697893][ T6995] binder: 6994:6995 tried to acquire reference to desc 0, got 1 instead
[   34.698063][ T6995] binder: 6994:6995 got transaction with invalid parent offset
[   34.698071][ T6995] binder: 6995:6994 failed to fixup parent
[   34.698162][ T6995] binder: 6994:6995 transaction call to 6994:0 failed 24/29201/-22, code 0 size 104-24 line 3644
[   34.698395][   T24] binder: undelivered TRANSACTION_ERROR: 29201
[   35.292073][ T7006] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   35.296368][ T7006] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   35.524359][ T7017] loop1: detected capacity change from 0 to 64
[   35.858587][ T7002] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[   35.859324][ T7002] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[   36.181691][ T7031] binder: 7029:7031 ioctl 4018620d 0 returned -22
[   36.440291][ T7031] binder: 7029:7031 IncRefs 0 refcount change on invalid ref 0 ret -22
[   36.446781][ T7031] binder: 7029:7031 got transaction to invalid handle, 1
[   36.446814][ T7031] binder: 7029:7031 cannot find target node
[   36.447051][ T7031] binder: 7029:7031 transaction call to 0:0 failed 27/29201/-22, code 0 size 72-0 line 3151
[   36.447587][   T10] binder: undelivered TRANSACTION_ERROR: 29201
[   37.041866][ T7054] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   37.042054][ T7054] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   37.682116][ T7068] binder: 7067:7068 ioctl 4018620d 0 returned -22
[   37.685393][ T7068] binder: 7067:7068 IncRefs 0 refcount change on invalid ref 0 ret -22
[   37.690256][ T7068] binder: 7067:7068 got transaction to invalid handle, 1
[   37.691616][ T7068] binder: 7067:7068 cannot find target node
[   37.692709][ T7068] binder: 7067:7068 transaction call to 0:0 failed 30/29201/-22, code 0 size 72-0 line 3151
[   37.696700][   T24] binder: undelivered TRANSACTION_ERROR: 29201
[   37.805149][ T7059] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[   37.805294][ T7059] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[   37.910756][ T7074] loop2: detected capacity change from 0 to 64
[   38.095984][ T7081] warning: `syz.2.149' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   38.290360][ T7090] loop1: detected capacity change from 0 to 512
[   38.326268][ T7090] EXT4-fs: Ignoring removed mblk_io_submit option
[   38.326322][ T7090] EXT4-fs: Ignoring removed mblk_io_submit option
[   38.334407][ T7090] EXT4-fs (loop1): Test dummy encryption mode enabled
[   38.334446][ T7090] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[   38.412690][ T7090] EXT4-fs (loop1): 1 truncate cleaned up
[   38.413260][ T7090] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   38.435154][ T7090] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.153: bg 0: block 480: padding at end of block bitmap is not set
[   38.442535][ T7090] EXT4-fs (loop1): Remounting filesystem read-only
[   38.831215][ T6534] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   38.917446][ T7101] binder: 7098:7101 ioctl 4018620d 0 returned -22
[   38.921184][ T7101] binder: 7098:7101 IncRefs 0 refcount change on invalid ref 0 ret -22
[   38.932930][ T7101] binder: 7098:7101 got transaction to invalid handle, 1
[   38.934455][ T7101] binder: 7098:7101 cannot find target node
[   39.017134][ T7085] loop3: detected capacity change from 0 to 32768
[   39.727947][ T7085] ocfs2: Mounting device (7,3) on (node local, slot 0) with writeback data mode.
[   39.754165][ T7119] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   39.759884][ T7119] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   39.864455][ T7123] sctp: [Deprecated]: syz.2.163 (pid 7123) Use of struct sctp_assoc_value in delayed_ack socket option.
[   39.864455][ T7123] Use struct sctp_sack_info instead
[   39.964953][ T6537] ocfs2: Unmounting device (7,3) on (node local)
[   40.053603][ T7125] loop2: detected capacity change from 0 to 32768
[   40.111665][ T7125] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[   40.113003][ T7114] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[   40.113094][ T7114] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[   40.879870][ T7140] loop3: detected capacity change from 0 to 32768
[   41.231536][ T7125] XFS (loop2): Ending clean mount
[   41.243608][ T7145] binder: BINDER_SET_CONTEXT_MGR already set
[   41.243639][ T7145] binder: 7144:7145 ioctl 4018620d 20004a80 returned -16
[   41.331657][ T6538] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[   41.550205][ T7146] loop4: detected capacity change from 0 to 40427
[   41.816543][ T7146] F2FS-fs (loop4): invalid crc value
[   41.882227][ T7146] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[   41.889920][ T7146] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[   41.955518][ T7160] loop3: detected capacity change from 0 to 32768
[   41.960296][ T7160] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.173 (7160)
[   41.971948][ T7160] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   41.972031][ T7160] BTRFS info (device loop3): using sha256 (sha256-lib) checksum algorithm
[   42.003403][ T6539] syz-executor: attempt to access beyond end of device
[   42.003403][ T6539] loop4: rw=2049, sector=45096, nr_sectors = 16 limit=40427
[   42.008229][ T6539] CPU: 1 UID: 0 PID: 6539 Comm: syz-executor Not tainted syzkaller #0 PREEMPT 
[   42.008259][ T6539] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025
[   42.008271][ T6539] Call trace:
[   42.008276][ T6539]  show_stack+0x2c/0x3c (C)
[   42.008292][ T6539]  __dump_stack+0x30/0x40
[   42.008300][ T6539]  dump_stack_lvl+0xd8/0x12c
[   42.008306][ T6539]  dump_stack+0x1c/0x28
[   42.008311][ T6539]  f2fs_handle_critical_error+0x34c/0x4b8
[   42.008323][ T6539]  f2fs_stop_checkpoint+0x5c/0x70
[   42.008329][ T6539]  f2fs_write_end_io+0x768/0xa70
[   42.008338][ T6539]  bio_endio+0x858/0x894
[   42.008346][ T6539]  submit_bio_noacct+0x158/0x177c
[   42.008352][ T6539]  submit_bio+0x3b4/0x550
[   42.008358][ T6539]  f2fs_submit_write_bio+0x13c/0x324
[   42.008364][ T6539]  __submit_merged_bio+0x254/0x704
[   42.008370][ T6539]  __submit_merged_write_cond+0x23c/0x4ac
[   42.008376][ T6539]  f2fs_write_data_pages+0x1d28/0x2634
[   42.008383][ T6539]  do_writepages+0x270/0x468
[   42.008392][ T6539]  filemap_fdatawrite+0x14c/0x1f4
[   42.008400][ T6539]  f2fs_sync_dirty_inodes+0x2b8/0x788
[   42.008406][ T6539]  f2fs_write_checkpoint+0x690/0x16a0
[   42.008411][ T6539]  kill_f2fs_super+0x21c/0x584
[   42.008418][ T6539]  deactivate_locked_super+0xc4/0x12c
[   42.008424][ T6539]  deactivate_super+0xe0/0x100
[   42.008429][ T6539]  cleanup_mnt+0x31c/0x3ac
[   42.008435][ T6539]  __cleanup_mnt+0x20/0x30
[   42.008440][ T6539]  task_work_run+0x1dc/0x260
[   42.008446][ T6539]  exit_to_user_mode_loop+0xfc/0x168
[   42.008453][ T6539]  el0_svc+0x170/0x254
[   42.008462][ T6539]  el0t_64_sync_handler+0x84/0x12c
[   42.008469][ T6539]  el0t_64_sync+0x198/0x19c
[   42.014704][ T6539] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[   42.014824][ T6539] CPU: 0 UID: 0 PID: 6539 Comm: syz-executor Not tainted syzkaller #0 PREEMPT 
[   42.014834][ T6539] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025
[   42.014838][ T6539] Call trace:
[   42.014841][ T6539]  show_stack+0x2c/0x3c (C)
[   42.014856][ T6539]  __dump_stack+0x30/0x40
[   42.014863][ T6539]  dump_stack_lvl+0xd8/0x12c
[   42.014868][ T6539]  dump_stack+0x1c/0x28
[   42.014873][ T6539]  f2fs_handle_critical_error+0x34c/0x4b8
[   42.014883][ T6539]  f2fs_stop_checkpoint+0x5c/0x70
[   42.014889][ T6539]  f2fs_write_end_io+0x768/0xa70
[   42.014897][ T6539]  bio_endio+0x858/0x894
[   42.014912][ T6539]  submit_bio_noacct+0x158/0x177c
[   42.014918][ T6539]  submit_bio+0x3b4/0x550
[   42.014923][ T6539]  f2fs_submit_write_bio+0x13c/0x324
[   42.014930][ T6539]  __submit_merged_bio+0x254/0x704
[   42.014936][ T6539]  __submit_merged_write_cond+0x23c/0x4ac
[   42.014942][ T6539]  f2fs_write_data_pages+0x1d28/0x2634
[   42.014949][ T6539]  do_writepages+0x270/0x468
[   42.014957][ T6539]  filemap_fdatawrite+0x14c/0x1f4
[   42.014965][ T6539]  f2fs_sync_dirty_inodes+0x2b8/0x788
[   42.014971][ T6539]  f2fs_write_checkpoint+0x690/0x16a0
[   42.014976][ T6539]  kill_f2fs_super+0x21c/0x584
[   42.014983][ T6539]  deactivate_locked_super+0xc4/0x12c
[   42.014989][ T6539]  deactivate_super+0xe0/0x100
[   42.014993][ T6539]  cleanup_mnt+0x31c/0x3ac
[   42.014999][ T6539]  __cleanup_mnt+0x20/0x30
[   42.015004][ T6539]  task_work_run+0x1dc/0x260
[   42.015011][ T6539]  exit_to_user_mode_loop+0xfc/0x168
[   42.015018][ T6539]  el0_svc+0x170/0x254
[   42.015026][ T6539]  el0t_64_sync_handler+0x84/0x12c
[   42.015033][ T6539]  el0t_64_sync+0x198/0x19c
[   42.015040][ T6539] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[   42.111056][ T7160] BTRFS info (device loop3): enabling ssd optimizations
[   42.111089][ T7160] BTRFS info (device loop3): enabling free space tree
[   42.153824][ T7160] BTRFS info (device loop3): resizing devid 73709551615
[   42.153866][ T7160] BTRFS info (device loop3): resizer unable to find device 73709551615
[   42.230195][ T6537] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   42.659818][ T7197] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   42.660005][ T7197] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   42.707969][ T7199] binder: BINDER_SET_CONTEXT_MGR already set
[   42.707997][ T7199] binder: 7198:7199 ioctl 4018620d 20004a80 returned -16
[   43.002061][ T7188] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[   43.002186][ T7188] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[   43.031087][   T31] audit: type=1326 audit(42.930:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7189 comm="syz.2.178" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb155b3a8 code=0x7ffc0000
[   43.031177][   T31] audit: type=1326 audit(42.930:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7189 comm="syz.2.178" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=85 compat=0 ip=0xffffb155b3a8 code=0x7ffc0000
[   43.031237][   T31] audit: type=1326 audit(42.930:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7189 comm="syz.2.178" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb155b3a8 code=0x7ffc0000
[   43.031277][   T31] audit: type=1326 audit(42.930:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7189 comm="syz.2.178" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb155b3a8 code=0x7ffc0000
[   43.031310][   T31] audit: type=1326 audit(42.930:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7189 comm="syz.2.178" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=87 compat=0 ip=0xffffb155b3a8 code=0x7ffc0000
[   43.031333][   T31] audit: type=1326 audit(42.930:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7189 comm="syz.2.178" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb155b3a8 code=0x7ffc0000
[   43.031358][   T31] audit: type=1326 audit(42.930:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7189 comm="syz.2.178" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb155b3a8 code=0x7ffc0000
[   43.031377][   T31] audit: type=1326 audit(42.930:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7189 comm="syz.2.178" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=262 compat=0 ip=0xffffb155b3a8 code=0x7ffc0000
[   43.031395][   T31] audit: type=1326 audit(42.930:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7189 comm="syz.2.178" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb155b3a8 code=0x7ffc0000
[   43.031411][   T31] audit: type=1326 audit(42.930:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7189 comm="syz.2.178" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb155b3a8 code=0x7ffc0000
[   43.280741][ T7209] loop0: detected capacity change from 0 to 32768
[   43.387241][ T7213] loop4: detected capacity change from 0 to 1024
[   43.407000][ T7215] Bluetooth: MGMT ver 1.23
[   43.519938][ T7221] loop2: detected capacity change from 0 to 2048
[   43.535458][ T7221] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024)
[   43.552378][ T6522] udevd[6522]: incorrect nilfs2 checksum on /dev/loop2
[   43.576477][ T7226] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   43.579922][ T7221] syz.2.189: attempt to access beyond end of device
[   43.579922][ T7221] loop2: rw=524288, sector=65534, nr_sectors = 2 limit=2048
[   43.627359][ T7231] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   43.627564][ T7231] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   43.987310][ T7241] loop1: detected capacity change from 0 to 1024
[   44.015567][ T5927] hfsplus: b-tree write err: -5, ino 4
[   44.462628][ T7258] loop1: detected capacity change from 0 to 24
[   44.463050][ T7258] MTD: Attempt to mount non-MTD device "/dev/loop1"
[   44.472673][ T7258] romfs: Mounting image 'rom 637cf1fa' through the block layer
[   44.754662][ T7242] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[   44.754810][ T7242] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[   45.379948][ T7268] loop1: detected capacity change from 0 to 40427
[   45.390487][ T7268] F2FS-fs (loop1): invalid crc value
[   45.455087][ T6541] Bluetooth: hci0: command 0x0000 tx timeout
[   45.659212][ T7268] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[   45.667214][ T7268] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[   45.685473][ T7286] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   45.685660][ T7286] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   45.707831][ T6534] syz-executor: attempt to access beyond end of device
[   45.707831][ T6534] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[   45.707904][ T6534] CPU: 0 UID: 0 PID: 6534 Comm: syz-executor Not tainted syzkaller #0 PREEMPT 
[   45.707914][ T6534] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025
[   45.707919][ T6534] Call trace:
[   45.707922][ T6534]  show_stack+0x2c/0x3c (C)
[   45.707937][ T6534]  __dump_stack+0x30/0x40
[   45.707943][ T6534]  dump_stack_lvl+0xd8/0x12c
[   45.707949][ T6534]  dump_stack+0x1c/0x28
[   45.707954][ T6534]  f2fs_handle_critical_error+0x34c/0x4b8
[   45.707963][ T6534]  f2fs_stop_checkpoint+0x5c/0x70
[   45.707968][ T6534]  f2fs_write_end_io+0x768/0xa70
[   45.707975][ T6534]  bio_endio+0x858/0x894
[   45.707983][ T6534]  submit_bio_noacct+0x158/0x177c
[   45.707989][ T6534]  submit_bio+0x3b4/0x550
[   45.707994][ T6534]  f2fs_submit_write_bio+0x13c/0x324
[   45.708001][ T6534]  __submit_merged_bio+0x254/0x704
[   45.708007][ T6534]  __submit_merged_write_cond+0x23c/0x4ac
[   45.708013][ T6534]  f2fs_write_data_pages+0x1d28/0x2634
[   45.708019][ T6534]  do_writepages+0x270/0x468
[   45.708027][ T6534]  filemap_fdatawrite+0x14c/0x1f4
[   45.708034][ T6534]  f2fs_sync_dirty_inodes+0x2b8/0x788
[   45.708040][ T6534]  f2fs_write_checkpoint+0x690/0x16a0
[   45.708045][ T6534]  kill_f2fs_super+0x21c/0x584
[   45.708052][ T6534]  deactivate_locked_super+0xc4/0x12c
[   45.708057][ T6534]  deactivate_super+0xe0/0x100
[   45.708062][ T6534]  cleanup_mnt+0x31c/0x3ac
[   45.708068][ T6534]  __cleanup_mnt+0x20/0x30
[   45.708073][ T6534]  task_work_run+0x1dc/0x260
[   45.708080][ T6534]  exit_to_user_mode_loop+0xfc/0x168
[   45.708086][ T6534]  el0_svc+0x170/0x254
[   45.708095][ T6534]  el0t_64_sync_handler+0x84/0x12c
[   45.708102][ T6534]  el0t_64_sync+0x198/0x19c
[   45.708109][ T6534] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[   45.894789][ T6593] usb 1-1: new full-speed USB device number 2 using dummy_hcd
[   46.462037][ T6593] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   46.462079][ T6593] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[   46.466487][ T6593] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00
[   46.466509][ T6593] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[   46.466529][ T6593] usb 1-1: SerialNumber: syz
[   46.487525][ T6593] usb 1-1: 0:2 : does not exist
[   46.493995][ T7298] loop4: detected capacity change from 0 to 128
[   46.630060][ T7293] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[   46.630171][ T7293] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[   46.665168][ T7301] loop4: detected capacity change from 0 to 32768
[   46.668924][ T7301] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.216 (7301)
[   46.701696][ T6757] usb 1-1: USB disconnect, device number 2
[   46.766296][ T7303] loop2: detected capacity change from 0 to 40427
[   46.770598][ T7303] F2FS-fs (loop2): Invalid Fs Meta Ino: node(0) meta(2) root(0)
[   46.770639][ T7303] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[   46.770905][ T7301] BTRFS info (device loop4): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787
[   46.770960][ T7301] BTRFS info (device loop4): using sha256 (sha256-lib) checksum algorithm
[   46.771783][ T7303] F2FS-fs (loop2): invalid crc value
[   46.774399][ T7305] netlink: 32 bytes leftover after parsing attributes in process `syz.1.218'.
[   46.791806][ T7303] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[   46.796677][ T7303] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[   46.796717][ T7303] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4
[   46.829658][ T7301] BTRFS info (device loop4): turning off barriers
[   46.831178][ T7301] BTRFS info (device loop4): turning on flush-on-commit
[   46.832852][ T7301] BTRFS info (device loop4): turning on sync discard
[   46.835570][ T7301] BTRFS info (device loop4): enabling free space tree
[   47.207776][ T7331] syz.2.217: attempt to access beyond end of device
[   47.207776][ T7331] loop2: rw=2051, sector=36912, nr_sectors = 8152 limit=40427
[   47.207890][ T7331] syz.2.217: attempt to access beyond end of device
[   47.207890][ T7331] loop2: rw=2051, sector=45096, nr_sectors = 85976 limit=40427
[   47.234595][ T7331] F2FS-fs (loop2): Issue discard(4614, 4614, 1019) failed, ret: -5
[   47.234634][ T7331] F2FS-fs (loop2): Issue discard(5637, 5637, 10747) failed, ret: -5
[   47.251216][ T6539] BTRFS info (device loop4): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787
[   47.532584][ T7333] loop3: detected capacity change from 0 to 64
[   47.666439][ T7341] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   47.666611][ T7341] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   47.744948][ T7344] loop1: detected capacity change from 0 to 4096
[   48.068157][ T7351] loop2: detected capacity change from 0 to 8
[   49.402820][ T7362] loop0: detected capacity change from 0 to 4096
[   49.407569][ T7362] nilfs2: Unknown parameter 'p�'L7�S#L7�a��r�a��.��	�mv�nbM�֗?�6�S�a������k���ٕ��K>�S;vu�k�(��>'
[   49.412015][ T7365] loop3: detected capacity change from 0 to 1024
[   49.441863][ T7365] EXT4-fs: Ignoring removed orlov option
[   49.442989][ T7365] EXT4-fs: Ignoring removed mblk_io_submit option
[   49.444712][ T7365] EXT4-fs (loop3): stripe (2) is not aligned with cluster size (16), stripe is disabled
[   49.453582][ T7371] loop2: detected capacity change from 0 to 512
[   49.549593][ T7371] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[   49.558679][ T7365] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   49.558818][ T7371] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck.
[   49.586358][ T7371] EXT4-fs (loop2): 1 truncate cleaned up
[   49.586802][ T7371] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   49.589737][ T7371] EXT4-fs warning (device loop2): verify_group_input:156: Last group not full
[   49.797091][ T6538] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   49.870593][ T7385] loop0: detected capacity change from 0 to 32768
[   49.935384][ T7385] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.234 (7385)
[   49.946056][ T7385] BTRFS info (device loop0): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[   49.946131][ T7385] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm
[   49.973971][ T7385] BTRFS info (device loop0): enabling ssd optimizations
[   49.974002][ T7385] BTRFS info (device loop0): enabling free space tree
[   50.268889][ T6531] BTRFS info (device loop0): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[   50.390167][ T7413] input: syz0 as /devices/virtual/input/input2
[   51.677691][ T7443] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   51.683410][ T7443] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   51.726584][ T7442] loop2: detected capacity change from 0 to 4096
[   51.727053][ T7442] nilfs2: Unknown parameter 'p�'L7�S#L7�a��r�a��.��	�mv�nbM�֗?�6�S�a������k���ٕ��K>�S;vu�k�(��>'
[   51.747226][ T7449] loop0: detected capacity change from 0 to 512
[   51.787386][ T7449] EXT4-fs error (device loop0): ext4_orphan_get:1392: inode #15: comm syz.0.247: iget: bad i_size value: 38620345925642
[   51.804884][ T7449] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.247: couldn't read orphan inode 15 (err -117)
[   51.812983][ T7449] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   51.840719][ T6537] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   51.949393][ T7472] capability: warning: `syz.2.249' uses 32-bit capabilities (legacy support in use)
[   52.668612][   T41] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm kworker/u8:2: bg 0: block 5: invalid block bitmap
[   52.673784][   T41] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28
[   52.677370][   T41] EXT4-fs (loop0): This should not happen!! Data will be lost
[   52.677370][   T41] 
[   52.679456][   T41] EXT4-fs (loop0): Total free blocks count 0
[   52.679498][   T41] EXT4-fs (loop0): Free/Dirty block details
[   52.679532][   T41] EXT4-fs (loop0): free_blocks=0
[   52.679552][   T41] EXT4-fs (loop0): dirty_blocks=9604
[   52.679564][   T41] EXT4-fs (loop0): Block reservation details
[   52.679574][   T41] EXT4-fs (loop0): i_reserved_data_blocks=9604
[   52.700516][   T41] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 2048 with error 28
[   53.222453][ T6543] Bluetooth: hci0: command 0x0000 tx timeout
[   53.224326][   T24] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[   53.224369][   T24] Bluetooth: hci0: Error when powering off device on rfkill (-110)
[   53.243789][ T7505] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   53.245719][ T7505] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   54.215667][ T7530] loop1: detected capacity change from 0 to 4096
[   54.217745][ T7530] nilfs2: Unknown parameter 'p�'L7�S#L7�a��r�a��.��	�mv�nbM�֗?�6�S�a������k���ٕ��K>�S;vu�k�(��>'
[   54.609457][ T7539] loop3: detected capacity change from 0 to 40427
[   54.612593][ T7539] F2FS-fs (loop3): Image doesn't support compression
[   54.612635][ T7539] F2FS-fs (loop3): build fault injection rate: 690
[   54.623458][ T7526] loop2: detected capacity change from 0 to 32768
[   54.628731][ T7539] F2FS-fs (loop3): invalid crc value
[   54.633116][ T7526] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.258 (7526)
[   54.664486][ T7526] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   54.664573][ T7526] BTRFS info (device loop2): using sha256 (sha256-lib) checksum algorithm
[   54.724463][   T26] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[   54.752537][ T7539] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[   54.760296][ T7539] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[   54.873889][ T7526] BTRFS info (device loop2): enabling ssd optimizations
[   54.881079][ T7526] BTRFS info (device loop2): enabling free space tree
[   54.889235][   T26] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e
[   54.889292][   T26] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   54.933448][   T26] usb 1-1: config 0 descriptor??
[   54.953628][ T6537] syz-executor: attempt to access beyond end of device
[   54.953628][ T6537] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[   54.953685][ T6537] CPU: 1 UID: 0 PID: 6537 Comm: syz-executor Not tainted syzkaller #0 PREEMPT 
[   54.953700][ T6537] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025
[   54.953705][ T6537] Call trace:
[   54.953708][ T6537]  show_stack+0x2c/0x3c (C)
[   54.953723][ T6537]  __dump_stack+0x30/0x40
[   54.953731][ T6537]  dump_stack_lvl+0xd8/0x12c
[   54.953738][ T6537]  dump_stack+0x1c/0x28
[   54.953743][ T6537]  f2fs_handle_critical_error+0x34c/0x4b8
[   54.953751][ T6537]  f2fs_stop_checkpoint+0x5c/0x70
[   54.953756][ T6537]  f2fs_write_end_io+0x768/0xa70
[   54.953763][ T6537]  bio_endio+0x858/0x894
[   54.953771][ T6537]  submit_bio_noacct+0x158/0x177c
[   54.953777][ T6537]  submit_bio+0x3b4/0x550
[   54.953782][ T6537]  f2fs_submit_write_bio+0x13c/0x324
[   54.953788][ T6537]  __submit_merged_bio+0x254/0x704
[   54.953794][ T6537]  __submit_merged_write_cond+0x23c/0x4ac
[   54.953800][ T6537]  f2fs_write_data_pages+0x1d28/0x2634
[   54.953807][ T6537]  do_writepages+0x270/0x468
[   54.953814][ T6537]  filemap_fdatawrite+0x14c/0x1f4
[   54.953821][ T6537]  f2fs_sync_dirty_inodes+0x2b8/0x788
[   54.953827][ T6537]  f2fs_write_checkpoint+0x690/0x16a0
[   54.953832][ T6537]  kill_f2fs_super+0x21c/0x584
[   54.953839][ T6537]  deactivate_locked_super+0xc4/0x12c
[   54.953845][ T6537]  deactivate_super+0xe0/0x100
[   54.953849][ T6537]  cleanup_mnt+0x31c/0x3ac
[   54.953855][ T6537]  __cleanup_mnt+0x20/0x30
[   54.953860][ T6537]  task_work_run+0x1dc/0x260
[   54.953867][ T6537]  exit_to_user_mode_loop+0xfc/0x168
[   54.953873][ T6537]  el0_svc+0x170/0x254
[   54.953881][ T6537]  el0t_64_sync_handler+0x84/0x12c
[   54.953888][ T6537]  el0t_64_sync+0x198/0x19c
[   54.953909][ T6537] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[   55.051136][ T6538] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   55.083352][ T7584] Zero length message leads to an empty skb
[   55.454348][ T6543] Bluetooth: hci1: command 0x0c1a tx timeout
[   55.678536][   T24] Bluetooth: hci1: Opcode 0x0c1a failed: -110
[   55.678566][   T24] Bluetooth: hci1: Error when powering off device on rfkill (-110)
[   55.814878][   T26] ath6kl: Failed to read usb control message: -71
[   55.819222][   T26] ath6kl: Unable to read the bmi data from the device: -71
[   55.820916][   T26] ath6kl: Unable to recv target info: -71
[   55.839466][   T26] ath6kl: Failed to init ath6kl core: -71
[   55.842197][   T26] ath6kl_usb 1-1:0.0: probe with driver ath6kl_usb failed with error -71
[   55.856857][   T26] usb 1-1: USB disconnect, device number 3
[   56.876335][ T7626] netlink: 6 bytes leftover after parsing attributes in process `syz.2.274'.
[   57.291956][ T7624] syz_tun: entered allmulticast mode
[   57.300393][ T7624] pimreg: entered allmulticast mode
[   57.316373][ T7623] syz_tun: left allmulticast mode
[   57.623443][ T7628] loop2: detected capacity change from 0 to 32768
[   57.665447][ T7628] JBD2: Ignoring recovery information on journal
[   57.705251][ T7628] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[   57.752892][ T6538] ocfs2: Unmounting device (7,2) on (node local)
[   57.823557][ T7637] loop4: detected capacity change from 0 to 32768
[   57.827518][ T7637] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.277 (7637)
[   57.832668][ T7637] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   57.832735][ T7637] BTRFS info (device loop4): using sha256 (sha256-lib) checksum algorithm
[   57.882724][ T7645] loop2: detected capacity change from 0 to 32768
[   57.923361][ T7645] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[   57.939567][ T7642] loop1: detected capacity change from 0 to 32768
[   57.941393][ T7637] BTRFS info (device loop4): enabling ssd optimizations
[   57.941420][ T7637] BTRFS info (device loop4): enabling free space tree
[   57.945430][ T7642] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.279 (7642)
[   57.968239][ T7642] BTRFS info (device loop1): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[   57.968306][ T7642] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm
[   58.006189][ T7642] BTRFS info (device loop1): enabling ssd optimizations
[   58.006227][ T7642] BTRFS info (device loop1): enabling free space tree
[   58.007021][ T7642] BTRFS info (device loop1): use zstd compression, level 3
[   58.010868][ T6539] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   58.014383][   T24] Bluetooth: hci3: Opcode 0x0c1a failed: -110
[   58.014435][   T24] Bluetooth: hci3: Error when powering off device on rfkill (-110)
[   58.014474][ T6543] Bluetooth: hci3: command 0x0c1a tx timeout
[   58.027871][ T6538] ocfs2: Unmounting device (7,2) on (node local)
[   58.832613][ T7685] loop2: detected capacity change from 0 to 40427
[   58.833815][ T7696] loop0: detected capacity change from 0 to 32768
[   58.837189][ T7696] lmLogInit: exit(-22)
[   58.837221][ T7696] lmLogOpen: exit(-22)
[   58.837236][ T7696] jfs_mount_rw failed, return code = -22
[   58.838616][ T7685] F2FS-fs (loop2): Image doesn't support compression
[   58.838631][ T7685] F2FS-fs (loop2): build fault injection rate: 690
[   58.839400][ T7685] F2FS-fs (loop2): invalid crc value
[   58.890718][ T7685] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[   58.892623][ T7685] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[   58.920127][ T7702] loop3: detected capacity change from 0 to 512
[   58.928293][ T7702] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem
[   58.940608][ T6538] syz-executor: attempt to access beyond end of device
[   58.940608][ T6538] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[   58.940667][ T6538] CPU: 0 UID: 0 PID: 6538 Comm: syz-executor Not tainted syzkaller #0 PREEMPT 
[   58.940682][ T6538] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025
[   58.940691][ T6538] Call trace:
[   58.940695][ T6538]  show_stack+0x2c/0x3c (C)
[   58.940710][ T6538]  __dump_stack+0x30/0x40
[   58.940717][ T6538]  dump_stack_lvl+0xd8/0x12c
[   58.940722][ T6538]  dump_stack+0x1c/0x28
[   58.940727][ T6538]  f2fs_handle_critical_error+0x34c/0x4b8
[   58.940736][ T6538]  f2fs_stop_checkpoint+0x5c/0x70
[   58.940741][ T6538]  f2fs_write_end_io+0x768/0xa70
[   58.940748][ T6538]  bio_endio+0x858/0x894
[   58.940756][ T6538]  submit_bio_noacct+0x158/0x177c
[   58.940762][ T6538]  submit_bio+0x3b4/0x550
[   58.940767][ T6538]  f2fs_submit_write_bio+0x13c/0x324
[   58.940773][ T6538]  __submit_merged_bio+0x254/0x704
[   58.940780][ T6538]  __submit_merged_write_cond+0x23c/0x4ac
[   58.940786][ T6538]  f2fs_write_data_pages+0x1d28/0x2634
[   58.940793][ T6538]  do_writepages+0x270/0x468
[   58.940800][ T6538]  filemap_fdatawrite+0x14c/0x1f4
[   58.940807][ T6538]  f2fs_sync_dirty_inodes+0x2b8/0x788
[   58.940813][ T6538]  f2fs_write_checkpoint+0x690/0x16a0
[   58.940819][ T6538]  kill_f2fs_super+0x21c/0x584
[   58.940825][ T6538]  deactivate_locked_super+0xc4/0x12c
[   58.940831][ T6538]  deactivate_super+0xe0/0x100
[   58.940836][ T6538]  cleanup_mnt+0x31c/0x3ac
[   58.940841][ T6538]  __cleanup_mnt+0x20/0x30
[   58.940847][ T6538]  task_work_run+0x1dc/0x260
[   58.940854][ T6538]  exit_to_user_mode_loop+0xfc/0x168
[   58.940860][ T6538]  el0_svc+0x170/0x254
[   58.940868][ T6538]  el0t_64_sync_handler+0x84/0x12c
[   58.940875][ T6538]  el0t_64_sync+0x198/0x19c
[   58.940883][ T6538] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[   59.004418][ T7702] EXT4-fs error (device loop3): ext4_orphan_get:1392: inode #15: comm syz.3.288: iget: bogus i_mode (5)
[   59.014469][ T7702] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.288: couldn't read orphan inode 15 (err -117)
[   59.018093][ T7702] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   59.927219][ T6537] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   59.964108][ T6534] BTRFS info (device loop1): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[   60.056593][ T7725] loop3: detected capacity change from 0 to 4096
[   60.059810][ T7708] loop0: detected capacity change from 0 to 40427
[   60.066217][ T7708] F2FS-fs (loop0): invalid crc value
[   60.082844][ T7725] nilfs2: Unknown parameter 'p�'L7�S#L7�a��r�a��.��	�mv�nbM�֗?�6�S�a������k���ٕ��K>�S;vu�k�(��>'
[   60.339844][ T7708] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[   60.359485][ T7708] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[   60.379264][ T7722] loop4: detected capacity change from 0 to 32768
[   60.381321][ T7722] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.294 (7722)
[   60.386332][ T7722] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   60.386398][ T7722] BTRFS info (device loop4): using sha256 (sha256-lib) checksum algorithm
[   60.422798][ T7747] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   60.425207][ T7747] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   60.483319][ T7722] BTRFS info (device loop4): enabling ssd optimizations
[   60.485685][ T7722] BTRFS info (device loop4): enabling free space tree
[   60.503251][ T6539] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   60.661343][   T24] Bluetooth: hci2: Opcode 0x0c1a failed: -110
[   60.663977][   T24] Bluetooth: hci2: Error when powering off device on rfkill (-110)
[   60.669867][ T6543] Bluetooth: hci2: command 0x0c1a tx timeout
[   61.275874][ T6531] syz-executor: attempt to access beyond end of device
[   61.275874][ T6531] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[   61.277460][ T6531] CPU: 0 UID: 0 PID: 6531 Comm: syz-executor Not tainted syzkaller #0 PREEMPT 
[   61.277485][ T6531] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025
[   61.277497][ T6531] Call trace:
[   61.277503][ T6531]  show_stack+0x2c/0x3c (C)
[   61.277525][ T6531]  __dump_stack+0x30/0x40
[   61.277533][ T6531]  dump_stack_lvl+0xd8/0x12c
[   61.277539][ T6531]  dump_stack+0x1c/0x28
[   61.277544][ T6531]  f2fs_handle_critical_error+0x34c/0x4b8
[   61.277553][ T6531]  f2fs_stop_checkpoint+0x5c/0x70
[   61.277564][ T6531]  f2fs_write_end_io+0x768/0xa70
[   61.277571][ T6531]  bio_endio+0x858/0x894
[   61.277579][ T6531]  submit_bio_noacct+0x158/0x177c
[   61.277585][ T6531]  submit_bio+0x3b4/0x550
[   61.277591][ T6531]  f2fs_submit_write_bio+0x13c/0x324
[   61.277597][ T6531]  __submit_merged_bio+0x254/0x704
[   61.277604][ T6531]  __submit_merged_write_cond+0x23c/0x4ac
[   61.277610][ T6531]  f2fs_write_data_pages+0x1d28/0x2634
[   61.277617][ T6531]  do_writepages+0x270/0x468
[   61.277624][ T6531]  filemap_fdatawrite+0x14c/0x1f4
[   61.277632][ T6531]  f2fs_sync_dirty_inodes+0x2b8/0x788
[   61.277637][ T6531]  f2fs_write_checkpoint+0x690/0x16a0
[   61.277642][ T6531]  kill_f2fs_super+0x21c/0x584
[   61.277649][ T6531]  deactivate_locked_super+0xc4/0x12c
[   61.277655][ T6531]  deactivate_super+0xe0/0x100
[   61.277660][ T6531]  cleanup_mnt+0x31c/0x3ac
[   61.277665][ T6531]  __cleanup_mnt+0x20/0x30
[   61.277670][ T6531]  task_work_run+0x1dc/0x260
[   61.277677][ T6531]  exit_to_user_mode_loop+0xfc/0x168
[   61.277684][ T6531]  el0_svc+0x170/0x254
[   61.277692][ T6531]  el0t_64_sync_handler+0x84/0x12c
[   61.277699][ T6531]  el0t_64_sync+0x198/0x19c
[   61.277776][ T6531] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[   61.361569][ T7756] loop2: detected capacity change from 0 to 40427
[   61.377454][ T7756] F2FS-fs (loop2): Image doesn't support compression
[   61.377490][ T7756] F2FS-fs (loop2): build fault injection rate: 690
[   61.380975][ T7756] F2FS-fs (loop2): invalid crc value
[   61.418622][ T7756] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[   61.421306][ T7756] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[   61.650967][ T6538] syz-executor: attempt to access beyond end of device
[   61.650967][ T6538] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[   61.651033][ T6538] CPU: 0 UID: 0 PID: 6538 Comm: syz-executor Not tainted syzkaller #0 PREEMPT 
[   61.651046][ T6538] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025
[   61.651051][ T6538] Call trace:
[   61.651054][ T6538]  show_stack+0x2c/0x3c (C)
[   61.651066][ T6538]  __dump_stack+0x30/0x40
[   61.651073][ T6538]  dump_stack_lvl+0xd8/0x12c
[   61.651078][ T6538]  dump_stack+0x1c/0x28
[   61.651082][ T6538]  f2fs_handle_critical_error+0x34c/0x4b8
[   61.651091][ T6538]  f2fs_stop_checkpoint+0x5c/0x70
[   61.651096][ T6538]  f2fs_write_end_io+0x768/0xa70
[   61.651103][ T6538]  bio_endio+0x858/0x894
[   61.651110][ T6538]  submit_bio_noacct+0x158/0x177c
[   61.651115][ T6538]  submit_bio+0x3b4/0x550
[   61.651120][ T6538]  f2fs_submit_write_bio+0x13c/0x324
[   61.651126][ T6538]  __submit_merged_bio+0x254/0x704
[   61.651132][ T6538]  __submit_merged_write_cond+0x23c/0x4ac
[   61.651138][ T6538]  f2fs_write_data_pages+0x1d28/0x2634
[   61.651144][ T6538]  do_writepages+0x270/0x468
[   61.651152][ T6538]  filemap_fdatawrite+0x14c/0x1f4
[   61.651158][ T6538]  f2fs_sync_dirty_inodes+0x2b8/0x788
[   61.651164][ T6538]  f2fs_write_checkpoint+0x690/0x16a0
[   61.651169][ T6538]  kill_f2fs_super+0x21c/0x584
[   61.651175][ T6538]  deactivate_locked_super+0xc4/0x12c
[   61.651181][ T6538]  deactivate_super+0xe0/0x100
[   61.651185][ T6538]  cleanup_mnt+0x31c/0x3ac
[   61.651190][ T6538]  __cleanup_mnt+0x20/0x30
[   61.651195][ T6538]  task_work_run+0x1dc/0x260
[   61.651202][ T6538]  exit_to_user_mode_loop+0xfc/0x168
[   61.651208][ T6538]  el0_svc+0x170/0x254
[   61.651216][ T6538]  el0t_64_sync_handler+0x84/0x12c
[   61.651223][ T6538]  el0t_64_sync+0x198/0x19c
[   61.651230][ T6538] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[   61.727718][ T7780] loop4: detected capacity change from 0 to 128
[   61.758632][   T31] kauditd_printk_skb: 20 callbacks suppressed
[   61.758675][   T31] audit: type=1326 audit(61.720:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7773 comm="syz.3.304" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff81f5b3a8 code=0x7ffc0000
[   61.758705][   T31] audit: type=1326 audit(61.720:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7773 comm="syz.3.304" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff81f5b3a8 code=0x7ffc0000
[   61.758723][   T31] audit: type=1326 audit(61.720:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7773 comm="syz.3.304" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=85 compat=0 ip=0xffff81f5b3a8 code=0x7ffc0000
[   61.758740][   T31] audit: type=1326 audit(61.720:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7773 comm="syz.3.304" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff81f5b3a8 code=0x7ffc0000
[   61.758757][   T31] audit: type=1326 audit(61.720:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7773 comm="syz.3.304" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff81f5b3a8 code=0x7ffc0000
[   61.758772][   T31] audit: type=1326 audit(61.720:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7773 comm="syz.3.304" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=87 compat=0 ip=0xffff81f5b3a8 code=0x7ffc0000
[   61.758787][   T31] audit: type=1326 audit(61.720:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7773 comm="syz.3.304" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff81f5b3a8 code=0x7ffc0000
[   61.758802][   T31] audit: type=1326 audit(61.720:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7773 comm="syz.3.304" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff81f5b3a8 code=0x7ffc0000
[   61.758817][   T31] audit: type=1326 audit(61.720:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7773 comm="syz.3.304" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=262 compat=0 ip=0xffff81f5b3a8 code=0x7ffc0000
[   61.758831][   T31] audit: type=1326 audit(61.720:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7773 comm="syz.3.304" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff81f5b3a8 code=0x7ffc0000
[   61.809733][ T7780] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   62.131534][ T7780] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-ce"
[   62.135085][ T7780] fscrypt: AES-256-XTS using implementation "xts-aes-ce"
[   62.226764][ T6539] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   62.270157][ T7787] loop1: detected capacity change from 0 to 4096
[   62.270744][ T7787] nilfs2: Unknown parameter 'p�'L7�S#L7�a��r�a��.��	�mv�nbM�֗?�6�S�a������k���ٕ��K>�S;vu�k�(��>'
[   62.389420][ T7793] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   62.389618][ T7793] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   62.500919][ T7796] netlink: 'syz.2.309': attribute type 3 has an invalid length.
[   62.500950][ T7796] netlink: 8 bytes leftover after parsing attributes in process `syz.2.309'.
[   62.511864][ T7789] loop4: detected capacity change from 0 to 32768
[   62.517517][ T7789] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.308 (7789)
[   62.521445][ T7789] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   62.521504][ T7789] BTRFS info (device loop4): using sha256 (sha256-lib) checksum algorithm
[   62.641460][ T7795] loop1: detected capacity change from 0 to 32768
[   62.643430][ T7789] BTRFS info (device loop4): enabling ssd optimizations
[   62.643442][ T7789] BTRFS info (device loop4): enabling free space tree
[   62.727827][ T6539] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   62.974734][   T24] Bluetooth: hci4: Opcode 0x0c1a failed: -110
[   62.976064][   T24] Bluetooth: hci4: Error when powering off device on rfkill (-110)
[   62.997914][ T6543] Bluetooth: hci4: command 0x0c1a tx timeout
[   63.455850][ T7818] loop0: detected capacity change from 0 to 40427
[   63.459603][ T7818] F2FS-fs (loop0): Image doesn't support compression
[   63.459651][ T7818] F2FS-fs (loop0): build fault injection rate: 690
[   63.460476][ T7818] F2FS-fs (loop0): invalid crc value
[   63.544021][ T7818] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[   63.549040][ T7818] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[   63.667213][ T6531] syz-executor: attempt to access beyond end of device
[   63.667213][ T6531] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[   63.667267][ T6531] CPU: 0 UID: 0 PID: 6531 Comm: syz-executor Not tainted syzkaller #0 PREEMPT 
[   63.667278][ T6531] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025
[   63.667284][ T6531] Call trace:
[   63.667287][ T6531]  show_stack+0x2c/0x3c (C)
[   63.667305][ T6531]  __dump_stack+0x30/0x40
[   63.667313][ T6531]  dump_stack_lvl+0xd8/0x12c
[   63.667320][ T6531]  dump_stack+0x1c/0x28
[   63.667326][ T6531]  f2fs_handle_critical_error+0x34c/0x4b8
[   63.667334][ T6531]  f2fs_stop_checkpoint+0x5c/0x70
[   63.667340][ T6531]  f2fs_write_end_io+0x768/0xa70
[   63.667347][ T6531]  bio_endio+0x858/0x894
[   63.667354][ T6531]  submit_bio_noacct+0x158/0x177c
[   63.667360][ T6531]  submit_bio+0x3b4/0x550
[   63.667365][ T6531]  f2fs_submit_write_bio+0x13c/0x324
[   63.667371][ T6531]  __submit_merged_bio+0x254/0x704
[   63.667377][ T6531]  __submit_merged_write_cond+0x23c/0x4ac
[   63.667383][ T6531]  f2fs_write_data_pages+0x1d28/0x2634
[   63.667390][ T6531]  do_writepages+0x270/0x468
[   63.667398][ T6531]  filemap_fdatawrite+0x14c/0x1f4
[   63.667405][ T6531]  f2fs_sync_dirty_inodes+0x2b8/0x788
[   63.667410][ T6531]  f2fs_write_checkpoint+0x690/0x16a0
[   63.667415][ T6531]  kill_f2fs_super+0x21c/0x584
[   63.667421][ T6531]  deactivate_locked_super+0xc4/0x12c
[   63.667427][ T6531]  deactivate_super+0xe0/0x100
[   63.667431][ T6531]  cleanup_mnt+0x31c/0x3ac
[   63.667437][ T6531]  __cleanup_mnt+0x20/0x30
[   63.667442][ T6531]  task_work_run+0x1dc/0x260
[   63.667448][ T6531]  exit_to_user_mode_loop+0xfc/0x168
[   63.667455][ T6531]  el0_svc+0x170/0x254
[   63.667463][ T6531]  el0t_64_sync_handler+0x84/0x12c
[   63.667470][ T6531]  el0t_64_sync+0x198/0x19c
[   63.668610][ T6531] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[   64.054676][ T7845] loop4: detected capacity change from 0 to 4096
[   64.056612][ T7845] nilfs2: Unknown parameter 'p�'L7�S#L7�a��r�a��.��	�mv�nbM�֗?�6�S�a������k���ٕ��K>�S;vu�k�(��>'
[   64.232637][ T7851] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   64.238020][ T7851] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   64.497233][ T2411] ieee802154 phy0 wpan0: encryption failed: -22
[   64.497297][ T2411] ieee802154 phy1 wpan1: encryption failed: -22
[   64.508492][ T1817] cfg80211: failed to load regulatory.db
[   64.704437][ T7857] loop3: detected capacity change from 0 to 32768
[   64.708287][ T7857] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.324 (7857)
[   64.712983][ T7857] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   64.713035][ T7857] BTRFS info (device loop3): using sha256 (sha256-lib) checksum algorithm
[   64.743645][ T7857] BTRFS info (device loop3): enabling ssd optimizations
[   64.743680][ T7857] BTRFS info (device loop3): enabling free space tree
[   64.778931][ T6537] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   64.948490][ T7840] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   65.237852][ T7878] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   65.238036][ T7878] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   65.263861][ T7883] loop1: detected capacity change from 0 to 40427
[   65.268813][ T7883] F2FS-fs (loop1): Image doesn't support compression
[   65.270011][ T7883] F2FS-fs (loop1): build fault injection rate: 690
[   65.273728][ T7883] F2FS-fs (loop1): invalid crc value
[   65.292479][ T7883] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[   65.298157][ T7883] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[   65.568920][ T7896] loop0: detected capacity change from 0 to 4096
[   65.569281][ T7896] nilfs2: Unknown parameter 'p�'L7�S#L7�a��r�a��.��	�mv�nbM�֗?�6�S�a������k���ٕ��K>�S;vu�k�(��>'
[   66.323615][ T7909] binder: 7908:7909 ioctl c0306201 0 returned -14
[   66.326148][ T7909] binder: 7908:7909 got transaction to invalid handle, 1
[   66.326401][ T7909] binder_debug: 2 callbacks suppressed
[   66.326414][ T7909] binder: 7908:7909 cannot find target node
[   66.326427][ T7909] binder: 7908:7909 transaction call to 0:0 failed 39/29201/-22, code 0 size 72-0 line 3151
[   66.327409][   T24] binder: undelivered TRANSACTION_ERROR: 29201
[   66.361920][ T7911] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   66.365588][ T7911] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   66.936815][ T7923] loop4: detected capacity change from 0 to 64
[   66.946227][ T7923] hfs: filesystem was not cleanly unmounted, running fsck.hfs is recommended.  mounting read-only.
[   66.946251][ T7923] hfs: filesystem is marked locked, mounting read-only.
[   66.956088][ T7923] iommufd_mock iommufd_mock0: Adding to iommu group 0
[   67.008673][ T7921] loop1: detected capacity change from 0 to 40427
[   67.013741][ T7921] F2FS-fs (loop1): Image doesn't support compression
[   67.013798][ T7921] F2FS-fs (loop1): build fault injection rate: 690
[   67.019721][ T7921] F2FS-fs (loop1): invalid crc value
[   67.044111][ T7921] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[   67.048109][ T7921] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[   67.235341][ T7932] loop0: detected capacity change from 0 to 40427
[   67.237911][ T7932] F2FS-fs (loop0): Invalid Fs Meta Ino: node(0) meta(2) root(0)
[   67.237930][ T7932] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[   67.241552][ T7932] F2FS-fs (loop0): invalid crc value
[   67.258494][ T7932] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[   67.262136][ T7930] loop4: detected capacity change from 0 to 32768
[   67.271118][ T7932] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[   67.271160][ T7932] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4
[   67.400835][ T7939] binder: 7938:7939 ioctl c0306201 0 returned -14
[   67.401117][ T7939] binder: 7938:7939 got transaction to invalid handle, 1
[   67.401130][ T7939] binder: 7938:7939 cannot find target node
[   67.401138][ T7939] binder: 7938:7939 transaction call to 0:0 failed 43/29201/-22, code 0 size 72-0 line 3151
[   67.401345][   T24] binder: undelivered TRANSACTION_ERROR: 29201
[   67.744586][ T7942] syz.0.344: attempt to access beyond end of device
[   67.744586][ T7942] loop0: rw=2051, sector=36912, nr_sectors = 8152 limit=40427
[   67.744954][ T7942] syz.0.344: attempt to access beyond end of device
[   67.744954][ T7942] loop0: rw=2051, sector=45096, nr_sectors = 85976 limit=40427
[   68.105018][ T7942] F2FS-fs (loop0): Issue discard(4614, 4614, 1019) failed, ret: -5
[   68.105059][ T7942] F2FS-fs (loop0): Issue discard(5637, 5637, 10747) failed, ret: -5
[   68.151945][ T7945] loop1: detected capacity change from 0 to 4096
[   68.172736][ T7945] nilfs2: Unknown parameter 'p�'L7�S#L7�a��r�a��.��	�mv�nbM�֗?�6�S�a������k���ٕ��K>�S;vu�k�(��>'
[   69.199080][ T7975] binder: 7972:7975 got transaction to invalid handle, 1
[   69.200409][ T7975] binder: 7972:7975 cannot find target node
[   69.201683][ T7975] binder: 7972:7975 transaction call to 0:0 failed 47/29201/-22, code 0 size 72-0 line 3151
[   69.203957][    T9] binder: undelivered TRANSACTION_ERROR: 29201
[   69.238122][ T7978] netlink: 36 bytes leftover after parsing attributes in process `syz.2.358'.
[   69.240349][ T7978] netlink: 16 bytes leftover after parsing attributes in process `syz.2.358'.
[   69.242132][ T7978] netlink: 36 bytes leftover after parsing attributes in process `syz.2.358'.
[   69.244357][ T7978] netlink: 36 bytes leftover after parsing attributes in process `syz.2.358'.
[   69.557363][ T7983] loop3: detected capacity change from 0 to 4096
[   69.559112][ T7983] nilfs2: Unknown parameter 'p�'L7�S#L7�a��r�a��.��	�mv�nbM�֗?�6�S�a������k���ٕ��K>�S;vu�k�(��>'
[   70.208523][ T7993] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   70.211016][ T7993] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   70.674548][ T6593] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[   70.717491][ T8009] binder: 8008:8009 got transaction to invalid handle, 1
[   70.717526][ T8009] binder: 8008:8009 cannot find target node
[   70.824791][ T6593] usb 1-1: Using ep0 maxpacket: 32
[   70.826095][ T6593] usb 1-1: config 0 interface 0 has no altsetting 0
[   70.828353][ T6593] usb 1-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e
[   70.828374][ T6593] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   70.828579][ T6593] usb 1-1: Product: syz
[   70.828591][ T6593] usb 1-1: Manufacturer: syz
[   70.828602][ T6593] usb 1-1: SerialNumber: syz
[   70.830460][ T6593] usb 1-1: config 0 descriptor??
[   71.094385][ T8020] loop4: detected capacity change from 0 to 512
[   71.096486][ T8020] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem
[   71.100313][ T8020] EXT4-fs error (device loop4): ext4_orphan_get:1392: inode #15: comm syz.4.373: iget: bogus i_mode (5)
[   71.103408][ T8020] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.373: couldn't read orphan inode 15 (err -117)
[   71.165724][ T8020] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   71.260262][ T6593] gs_usb 1-1:0.0: Configuring for 1 interfaces
[   71.974530][ T8033] netlink: 228 bytes leftover after parsing attributes in process `syz.2.374'.
[   72.865920][ T8039] loop3: detected capacity change from 0 to 32768
[   72.954801][ T6593] gs_usb 1-1:0.0: Disabling termination support for channel 0 (-EPROTO)
[   73.047420][ T6539] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   73.054231][ T8038] loop1: detected capacity change from 0 to 512
[   73.091237][ T6593] usb 1-1: USB disconnect, device number 4
[   73.096125][ T8038] EXT4-fs error (device loop1): ext4_orphan_get:1418: comm syz.1.376: bad orphan inode 15
[   73.097950][ T8038] ext4_test_bit(bit=14, block=5) = 0
[   73.098411][ T8038] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   73.103350][ T8038] EXT4-fs error (device loop1): __ext4_new_inode:1073: comm syz.1.376: reserved inode found cleared - inode=1
[   73.643090][ T8037] loop2: detected capacity change from 0 to 32768
[   73.643876][ T8037] btrfs: Unknown parameter 'check_int'
[   73.766211][ T8052] binder: 8051:8052 got transaction to invalid handle, 1
[   73.766244][ T8052] binder_debug: 2 callbacks suppressed
[   73.766264][ T8052] binder: 8051:8052 cannot find target node
[   73.766277][ T8052] binder: 8051:8052 transaction call to 0:0 failed 55/29201/-22, code 0 size 72-0 line 3151
[   73.767305][ T1817] binder: undelivered TRANSACTION_ERROR: 29201
[   74.009408][ T8048] loop3: detected capacity change from 0 to 40427
[   74.013463][ T8048] F2FS-fs (loop3): Fix alignment : internally, start(4096) end(16896) block(12288)
[   74.035734][ T8057] netlink: 4 bytes leftover after parsing attributes in process `syz.0.382'.
[   74.051535][ T8048] F2FS-fs (loop3): invalid crc value
[   74.093083][ T8048] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[   74.108596][ T8048] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[   74.186793][ T8048] F2FS-fs (loop3): Try to recover all the superblocks, ret: 0
[   74.385301][ T8067] syz_tun: entered allmulticast mode
[   74.391397][ T8066] syz_tun: left allmulticast mode
[   74.473972][ T8071] loop3: detected capacity change from 0 to 512
[   74.477980][ T8071] EXT4-fs: Ignoring removed mblk_io_submit option
[   74.480996][ T8071] EXT4-fs: Ignoring removed mblk_io_submit option
[   74.482536][ T8071] EXT4-fs (loop3): Test dummy encryption mode enabled
[   74.485656][ T8071] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[   74.497530][ T8071] EXT4-fs (loop3): 1 truncate cleaned up
[   74.498017][ T8071] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   74.517477][ T6534] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   74.551300][ T6537] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   74.600404][ T8082] binder: 8081:8082 got transaction to invalid handle, 1
[   74.600435][ T8082] binder: 8081:8082 cannot find target node
[   74.600463][ T8082] binder: 8081:8082 transaction call to 0:0 failed 59/29201/-22, code 0 size 72-0 line 3151
[   74.601029][ T6603] binder: undelivered TRANSACTION_ERROR: 29201
[   74.675239][ T8084] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   74.675430][ T8084] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   74.715545][ T8078] loop1: detected capacity change from 0 to 32768
[   74.729601][ T8078] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[   74.752517][ T8078] 
[   74.752986][ T8078] ======================================================
[   74.754084][ T8078] WARNING: possible circular locking dependency detected
[   74.755191][ T8078] syzkaller #0 Not tainted
[   74.755903][ T8078] ------------------------------------------------------
[   74.757073][ T8078] syz.1.389/8078 is trying to acquire lock:
[   74.758011][ T8078] ffff0000f7a59538 (&oi->ip_xattr_sem){+.+.}-{4:4}, at: ocfs2_xattr_set_handle+0x2a8/0x5e4
[   74.759638][ T8078] 
[   74.759638][ T8078] but task is already holding lock:
[   74.760846][ T8078] ffff0000d4604950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0xe4c/0x10dc
[   74.762318][ T8078] 
[   74.762318][ T8078] which lock already depends on the new lock.
[   74.762318][ T8078] 
[   74.763963][ T8078] 
[   74.763963][ T8078] the existing dependency chain (in reverse order) is:
[   74.765334][ T8078] 
[   74.765334][ T8078] -> #4 (jbd2_handle){++++}-{0:0}:
[   74.766408][ T8078]        start_this_handle+0xe74/0x10dc
[   74.767159][ T8078]        jbd2__journal_start+0x288/0x51c
[   74.767952][ T8078]        jbd2_journal_start+0x3c/0x4c
[   74.768737][ T8078]        ocfs2_start_trans+0x368/0x6b0
[   74.769505][ T8078]        ocfs2_shutdown_local_alloc+0x1ac/0x7e4
[   74.770400][ T8078]        ocfs2_dismount_volume+0x1ec/0x8cc
[   74.771239][ T8078]        ocfs2_put_super+0xec/0x320
[   74.771978][ T8078]        generic_shutdown_super+0x12c/0x2b8
[   74.772834][ T8078]        kill_block_super+0x44/0x90
[   74.773499][ T8078]        deactivate_locked_super+0xc4/0x12c
[   74.774305][ T8078]        deactivate_super+0xe0/0x100
[   74.775022][ T8078]        cleanup_mnt+0x31c/0x3ac
[   74.775825][ T8078]        __cleanup_mnt+0x20/0x30
[   74.776704][ T8078]        task_work_run+0x1dc/0x260
[   74.777522][ T8078]        exit_to_user_mode_loop+0xfc/0x168
[   74.778466][ T8078]        el0_svc+0x170/0x254
[   74.779271][ T8078]        el0t_64_sync_handler+0x84/0x12c
[   74.780182][ T8078]        el0t_64_sync+0x198/0x19c
[   74.781022][ T8078] 
[   74.781022][ T8078] -> #3 (&journal->j_trans_barrier){.+.+}-{4:4}:
[   74.782388][ T8078]        down_read+0x58/0x2f8
[   74.783135][ T8078]        ocfs2_start_trans+0x35c/0x6b0
[   74.783966][ T8078]        ocfs2_shutdown_local_alloc+0x1ac/0x7e4
[   74.785043][ T8078]        ocfs2_dismount_volume+0x1ec/0x8cc
[   74.786062][ T8078]        ocfs2_put_super+0xec/0x320
[   74.786914][ T8078]        generic_shutdown_super+0x12c/0x2b8
[   74.787757][ T8078]        kill_block_super+0x44/0x90
[   74.788528][ T8078]        deactivate_locked_super+0xc4/0x12c
[   74.789508][ T8078]        deactivate_super+0xe0/0x100
[   74.790285][ T8078]        cleanup_mnt+0x31c/0x3ac
[   74.791150][ T8078]        __cleanup_mnt+0x20/0x30
[   74.792064][ T8078]        task_work_run+0x1dc/0x260
[   74.792875][ T8078]        exit_to_user_mode_loop+0xfc/0x168
[   74.793858][ T8078]        el0_svc+0x170/0x254
[   74.794577][ T8078]        el0t_64_sync_handler+0x84/0x12c
[   74.795440][ T8078]        el0t_64_sync+0x198/0x19c
[   74.796210][ T8078] 
[   74.796210][ T8078] -> #2 (sb_internal#3){.+.+}-{0:0}:
[   74.797304][ T8078]        ocfs2_start_trans+0x1f4/0x6b0
[   74.798145][ T8078]        ocfs2_xattr_set+0xac4/0xe9c
[   74.798935][ T8078]        ocfs2_set_acl+0x574/0x628
[   74.799695][ T8078]        ocfs2_iop_set_acl+0x190/0x25c
[   74.800541][ T8078]        vfs_set_acl+0x70c/0x974
[   74.801401][ T8078]        do_set_acl+0xe0/0x1a8
[   74.802156][ T8078]        file_setxattr+0x210/0x294
[   74.803008][ T8078]        path_setxattrat+0x2ac/0x320
[   74.803836][ T8078]        __arm64_sys_fsetxattr+0xc0/0xdc
[   74.804715][ T8078]        invoke_syscall+0x98/0x254
[   74.805587][ T8078]        el0_svc_common+0x130/0x23c
[   74.806442][ T8078]        do_el0_svc+0x48/0x58
[   74.807187][ T8078]        el0_svc+0x5c/0x254
[   74.807981][ T8078]        el0t_64_sync_handler+0x84/0x12c
[   74.808921][ T8078]        el0t_64_sync+0x198/0x19c
[   74.809724][ T8078] 
[   74.809724][ T8078] -> #1 (&ocfs2_sysfile_lock_key[EXTENT_ALLOC_SYSTEM_INODE]){+.+.}-{4:4}:
[   74.811514][ T8078]        down_write+0x50/0xc0
[   74.812293][ T8078]        ocfs2_reserve_suballoc_bits+0x12c/0x3b9c
[   74.813336][ T8078]        ocfs2_reserve_new_metadata_blocks+0x368/0x810
[   74.814489][ T8078]        ocfs2_init_xattr_set_ctxt+0x318/0x774
[   74.815424][ T8078]        ocfs2_xattr_set+0x920/0xe9c
[   74.816194][ T8078]        ocfs2_set_acl+0x574/0x628
[   74.816969][ T8078]        ocfs2_iop_set_acl+0x190/0x25c
[   74.817807][ T8078]        vfs_set_acl+0x70c/0x974
[   74.818600][ T8078]        do_set_acl+0xe0/0x1a8
[   74.819328][ T8078]        file_setxattr+0x210/0x294
[   74.820154][ T8078]        path_setxattrat+0x2ac/0x320
[   74.820926][ T8078]        __arm64_sys_fsetxattr+0xc0/0xdc
[   74.821810][ T8078]        invoke_syscall+0x98/0x254
[   74.822629][ T8078]        el0_svc_common+0x130/0x23c
[   74.823447][ T8078]        do_el0_svc+0x48/0x58
[   74.824210][ T8078]        el0_svc+0x5c/0x254
[   74.824908][ T8078]        el0t_64_sync_handler+0x84/0x12c
[   74.825789][ T8078]        el0t_64_sync+0x198/0x19c
[   74.826635][ T8078] 
[   74.826635][ T8078] -> #0 (&oi->ip_xattr_sem){+.+.}-{4:4}:
[   74.827830][ T8078]        __lock_acquire+0x1774/0x30a4
[   74.828686][ T8078]        lock_acquire+0x14c/0x2e0
[   74.829543][ T8078]        down_write+0x50/0xc0
[   74.830266][ T8078]        ocfs2_xattr_set_handle+0x2a8/0x5e4
[   74.831152][ T8078]        ocfs2_init_security_set+0xb4/0xd8
[   74.832119][ T8078]        ocfs2_mknod+0x106c/0x1cf0
[   74.832948][ T8078]        ocfs2_create+0x190/0x474
[   74.833761][ T8078]        path_openat+0x12d8/0x2c40
[   74.834554][ T8078]        do_filp_open+0x18c/0x36c
[   74.835335][ T8078]        do_sys_openat2+0x11c/0x1b4
[   74.836139][ T8078]        __arm64_sys_openat+0x120/0x158
[   74.837062][ T8078]        invoke_syscall+0x98/0x254
[   74.837853][ T8078]        el0_svc_common+0x130/0x23c
[   74.838680][ T8078]        do_el0_svc+0x48/0x58
[   74.839404][ T8078]        el0_svc+0x5c/0x254
[   74.840087][ T8078]        el0t_64_sync_handler+0x84/0x12c
[   74.840993][ T8078]        el0t_64_sync+0x198/0x19c
[   74.841732][ T8078] 
[   74.841732][ T8078] other info that might help us debug this:
[   74.841732][ T8078] 
[   74.843366][ T8078] Chain exists of:
[   74.843366][ T8078]   &oi->ip_xattr_sem --> &journal->j_trans_barrier --> jbd2_handle
[   74.843366][ T8078] 
[   74.845615][ T8078]  Possible unsafe locking scenario:
[   74.845615][ T8078] 
[   74.846798][ T8078]        CPU0                    CPU1
[   74.847626][ T8078]        ----                    ----
[   74.848441][ T8078]   rlock(jbd2_handle);
[   74.849071][ T8078]                                lock(&journal->j_trans_barrier);
[   74.850328][ T8078]                                lock(jbd2_handle);
[   74.851417][ T8078]   lock(&oi->ip_xattr_sem);
[   74.852196][ T8078] 
[   74.852196][ T8078]  *** DEADLOCK ***
[   74.852196][ T8078] 
[   74.853474][ T8078] 8 locks held by syz.1.389/8078:
[   74.854280][ T8078]  #0: ffff0000cc164428 (sb_writers#21){.+.+}-{0:0}, at: mnt_want_write+0x44/0x9c
[   74.855772][ T8078]  #1: ffff0000e68c42c0 (&type->i_mutex_dir_key#14){+.+.}-{4:4}, at: path_openat+0x638/0x2c40
[   74.857406][ T8078]  #2: ffff0000ddd03480 (&ocfs2_sysfile_lock_key[INODE_ALLOC_SYSTEM_INODE]){+.+.}-{4:4}, at: ocfs2_reserve_suballoc_bits+0x12c/0x3b9c
[   74.859482][ T8078]  #3: ffff0000ddd042c0 (&ocfs2_sysfile_lock_key[EXTENT_ALLOC_SYSTEM_INODE]){+.+.}-{4:4}, at: ocfs2_reserve_suballoc_bits+0x12c/0x3b9c
[   74.861916][ T8078]  #4: ffff0000f7a5ed80 (&ocfs2_sysfile_lock_key[LOCAL_ALLOC_SYSTEM_INODE]){+.+.}-{4:4}, at: ocfs2_reserve_local_alloc_bits+0x104/0x26a0
[   74.864148][ T8078]  #5: ffff0000cc164618 (sb_internal#3){.+.+}-{0:0}, at: ocfs2_mknod+0xc50/0x1cf0
[   74.865678][ T8078]  #6: ffff0000ce17e4e8 (&journal->j_trans_barrier){.+.+}-{4:4}, at: ocfs2_start_trans+0x35c/0x6b0
[   74.867514][ T8078]  #7: ffff0000d4604950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0xe4c/0x10dc
[   74.869147][ T8078] 
[   74.869147][ T8078] stack backtrace:
[   74.870091][ T8078] CPU: 0 UID: 0 PID: 8078 Comm: syz.1.389 Not tainted syzkaller #0 PREEMPT 
[   74.871567][ T8078] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025
[   74.873259][ T8078] Call trace:
[   74.873768][ T8078]  show_stack+0x2c/0x3c (C)
[   74.874458][ T8078]  __dump_stack+0x30/0x40
[   74.875092][ T8078]  dump_stack_lvl+0xd8/0x12c
[   74.875797][ T8078]  dump_stack+0x1c/0x28
[   74.876459][ T8078]  print_circular_bug+0x324/0x32c
[   74.877276][ T8078]  check_noncircular+0x154/0x174
[   74.878114][ T8078]  __lock_acquire+0x1774/0x30a4
[   74.878858][ T8078]  lock_acquire+0x14c/0x2e0
[   74.879591][ T8078]  down_write+0x50/0xc0
[   74.880246][ T8078]  ocfs2_xattr_set_handle+0x2a8/0x5e4
[   74.881116][ T8078]  ocfs2_init_security_set+0xb4/0xd8
[   74.881987][ T8078]  ocfs2_mknod+0x106c/0x1cf0
[   74.882718][ T8078]  ocfs2_create+0x190/0x474
[   74.883445][ T8078]  path_openat+0x12d8/0x2c40
[   74.884199][ T8078]  do_filp_open+0x18c/0x36c
[   74.884961][ T8078]  do_sys_openat2+0x11c/0x1b4
[   74.885710][ T8078]  __arm64_sys_openat+0x120/0x158
[   74.886534][ T8078]  invoke_syscall+0x98/0x254
[   74.887324][ T8078]  el0_svc_common+0x130/0x23c
[   74.888107][ T8078]  do_el0_svc+0x48/0x58
[   74.888762][ T8078]  el0_svc+0x5c/0x254
[   74.889391][ T8078]  el0t_64_sync_handler+0x84/0x12c
[   74.890178][ T8078]  el0t_64_sync+0x198/0x19c
[   75.073596][ T8089] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[   75.073624][ T8089] overlayfs: option "index=on" is useless in a non-upper mount, ignore
[   75.073631][ T8089] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[   75.661750][ T6534] ocfs2: Unmounting device (7,1) on (node local)