last executing test programs:

3.480715693s ago: executing program 2 (id=556):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000004c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x18004, &(0x7f0000000400), 0x3, 0x4cd, &(0x7f0000001180)="$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")
mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1)
creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
symlink(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')

2.990377751s ago: executing program 2 (id=560):
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='mmap_lock_acquire_returned\x00', r0}, 0x18)
shmdt(0x0)

2.962844901s ago: executing program 3 (id=562):
r0 = userfaultfd(0x80801)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x100})
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1})
mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0)
ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f00000000c0)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff4000/0xc000)=nil, 0x3000, 0x1})

2.816635924s ago: executing program 3 (id=563):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x17, 0x3, &(0x7f0000000b00)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', 0x2000, 0x8ef98fc165024b44)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r0, r1, 0x12}, 0x14)
r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CONNECT(r2, 0x0, 0x0)

2.664298956s ago: executing program 1 (id=565):
r0 = socket$kcm(0x10, 0x100000000002, 0x4)
r1 = socket$unix(0x1, 0x5, 0x0)
bind$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
listen(r1, 0x0)
sendmsg$kcm(r0, &(0x7f00000039c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="39000000140081ae00002c000500015601618575e285af0180fffffdef0000883795c04a31ba377a1b2cc32b38d37400000000000075440000", 0x39}], 0x1, 0x0, 0x0, 0xc00e}, 0x0)

2.565261108s ago: executing program 3 (id=566):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0)
pipe2$9p(0x0, 0x80000)
syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x80000c, &(0x7f0000001600)={[{@part={'part', 0x3d, 0x4}}, {@uid}, {@session={'session', 0x3d, 0xffffffffffffff7f}}, {@session={'session', 0x3d, 0x100000001}}, {@umask={'umask', 0x3d, 0x4}}, {@nodecompose}, {@uid}, {@umask={'umask', 0x3d, 0x3}}, {@creator={'creator', 0x3d, "85f19471"}}, {@uid={'uid', 0x3d, 0xffffffffffffffff}}, {@creator={'creator', 0x3d, "65fe04c2"}}, {@umask={'umask', 0x3d, 0x8f}}, {}, {@force}, {@umask={'umask', 0x3d, 0x3}}, {@creator={'creator', 0x3d, "00000204"}}, {@force}, {@nobarrier}]}, 0x1, 0x6e4, &(0x7f0000000340)="$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")
syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="040e0a056020"], 0xd)

2.131204365s ago: executing program 0 (id=568):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
setsockopt$inet6_int(r0, 0x29, 0x3c, &(0x7f0000000100)=0x9, 0x4)
listen(r0, 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "fc7771", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x3, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x2}}}}}}}, 0x0)

2.113336815s ago: executing program 3 (id=569):
r0 = syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000000)='./file1\x00', 0x810, &(0x7f00000001c0)={[{@treelog}, {@nodatacow}, {@max_inline={'max_inline', 0x3d, [0x6d, 0x33, 0x78, 0x39, 0x65, 0x36]}}, {@space_cache}, {@nodatasum}, {@nobarrier}, {@flushoncommit}, {@noautodefrag}, {@ref_verify}, {@noenospc_debug}, {@clear_cache}, {@commit={'commit', 0x3d, 0x3}}, {@ssd}, {@nobarrier}, {@max_inline={'max_inline', 0x3d, [0x38, 0x36, 0x38, 0x35, 0x32, 0x25]}}]}, 0x1, 0x50f3, &(0x7f000000a2c0)="$eJzs3U+IVWUfB/Dnzp1x5lVw7isEtsoikGrh4CYioqtMUFF0y8VgBE4tgnThJEi0EMQW/Vt4S4paSK6kFsksjKA2LqQwArehYS7cKAaSi3Yac8957pz7HO+5d0ZtTD8fmTnnOb/zPOe5l7O43+uccwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACEEF74/bNDVfVT16bPnJtp7jywZebyvul1p0OodbbX8vqOrc++8ua2HS9OxA6zL2fLRqPfkFnX81ljVc/GhX69P6+HEMaSAer58pk1pVGLq3vKA1a6fnH30U17mxuPH27Xr146e7L80lkwsdITWCn5eXVh8Vxqdn6PJHt024VTr9Zzimb90xPuX3kRAMCSTLU6i+7H0fwjbre9P60n7WbSbift+AmhXWwsRzbuqn7z3JDWV2iezSwqjPedZ1LP3/9uu5X2T9pJ1FjCPHt3zSPNRL95ziX1lZonAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwJ3kkbdHH6qqn7o2febcTHPngS0zl/dNrzsdQqOzvZaVa6vfP9z869utxw78uPmr4xeef6ye94vL0cLO4be48sRkCG8UKhfisBfXhtDqLXSa4cty4a3OynOxAAAAwN3k/s7vkW47i4NjPe1aJ03WOv+iLCxev7j76Ka9zY3HD7frVy+dPbn88Vp9xmvecLxuu7H4UysE4xh/0/EW63HXPaVxqqUjpnn+8fNTf1f1L+X/RnX+j++c/A8AAMDNkP/TcaoNyv/fvfbHJ1X9S/l/Q88hS/k/zjjm/5GwvPwPAAAAd7Lbnf+bpXGqDcr/4y+NfV3Vv5T/p4bL/6PFaceNv8YJ75oMYWrQ1AEAAIA+4v+7L361EPN69s1BmtefevTguarxSvm/OVz+H7ulrwoAAAC4GUe+2P5wVb2U/1vD5f/x2zprAAAAYCne+XDig6p6Kf/PDpf/V+fL/MqHrNNP8a8QDk2GMLGwMpcVfg7tp7sFAAAA4BaJOf3PT3f+ULVfKf/PVd//P97pIF7/33P/v9L1/4VCdte/J90YAAAAgHtR+Xr+eHv87MkF/Z6/P+z1/w/87+CrVccv5f/9w+X/enF5K5//BwAAAMvwX3v+3/bSONUG3f//vo/e/aWqfyn/t4fL/3G5pvjyTtRq2fvz3mQI6xdW8rsJfhMPtyspzI8VCh2tpMe22CMvzI8XCh1zSY/NkyE8uLCyPyn8PxbaSeHK2rxwJCmcjoX8fOgWjiWFE/FM+3xtPt208H0s5BdYzMcrKNZ0L4lIelzt12OhcMMeZ7sHBwAAuKfE8Jxn2bHeZkij7Hxt0A6rB+0wMmiH+qAdRpMd0h37bQ+zvYW4vX1m49Ke/39kuPwf34pV2aLf9f8hXv+fP9ewe/3/bCw0ksJ8LLTSOwa04jGysPtxPEajlfe4sr5bAAAAgLta/F6gvsLzAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP5h715j5KruA4CffY734fVCUoXQKNkkNY6beL22gUQtVdaUqhEpzbqhoCqi2NhrsnjBjm1KjEJkbCIaIShtkJIPRRhFUc0HqBWISAoIFymOUHlEVEUBBAqtIQoipSQRaYIUqtl7z+ydc3cefqzx0t9P8s6Z+Z/nnYfn3HvnXAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+P/h4Feu+dtm8Ud/e96zL1w8fsWetRe/et15pz4ZwsTM4x1ZuKP/xtvHf373uffseWD1HfcdPv+jvXm5PB4Gqn868zs3xFoPLw7h/o4QutPAisEs0JPfH4z1vW8whFPCbKBWYrI/K5E2HL7fF8K+MBuoVfW9vhAGC4ELn3rk4Zuridv6QlgaQqikbTxfydroSwNn9GaB/jSwtTsL/OqtTC3w3c4sAMcsvhlqL/oDE/UZhucu1+D113PcOvb2SofXFRPDjfP9bO08d6qgN31g4pietlJ1zIvS2+Ogd9sCeLeVtvOtnrbiF6n8G8pbs6FK6Nw0uXnD1dM74yOdYXS0q1FN8/Q8P/P6lzYeSXrBvA5jB4aPy+vwlieW3t21/ILH71ux9OX9H9v7yrF280eFTVpMz7dKyF9zC+Z5jMZ9niyAt1/pW9KIL10hhM2f/73PNIuX5v/Dzef/8eUcbzvrcsda3xzK5ubxkcGYeG0om5sDAADAgrEQ9ppuHX3oE83qK83/R9o7/h8P+eeT+Wy0B0MYn0nsXRLCaTOPZ4G7YnOXLQnhgzOpifrA2iRwMIT3ziSW16pKSiyKJUaSwE+G8sB4EjgUAxNJ4FsxcGsSuCEGDiSBjTFwMAmcGwNhqn4cvz+Uj6PtQF8MrM824oF4FsIvhmJrybZ6rlYVAADAcZLPDnvq7xbOdTjWDHF6eaCvVYZ4BnbDDJWkhnQGW5tWNayhu1UNna1qqI17d/Phl2ruaFVz6TSMjvoMt//ybz4bmijN/8eaz/8rc3Sko3T8P4R1M39j7s48Ml2Lr5+oywAAAAAcg4H/ffGbzeKl+f94e+f/x30iXYXM4bG4G2LLkhDG6gNZtX9YDmRHvQfyAAAAACwEtePxtWPhU/ltdop2Op8u5584wvzxwP/4nPl7Dz64vll/S/P/ifbO/++vv806cSj24mtLQlhUCPwg9rIamDESAz/+ZH0gH/+huAFuilXlJybUqropllgfA2NJYF+jEj+slTitPpA/WbXG99bGMZWXKAQAAADghIu7A+Jx+Xj+/4d+s/qaZuVK8//1R3b+/8w8uHR6//RACCu7Q+hKfxjwWH+2MGAMDHbkiYf6s7q60qqu7w/hnOrA0qpezNf/707XGHyqL6sqBk770P7Xz6gmvtkXwspi4OnP3XlWNbEzCdQa/8u+ED5QHW3a+HcWZY33pI1/fVEI7y8EalVdtiiEamO9aVWPVPLrGKRV/XMlhHcVArWqzq6EsCsAsEDF/0o3FR/csevaLRumpye3z2Mi7sPvC5unpidHN26d3lRp0KdNSZ/rljG6vjymdq9881y+RNFF964bbCdd+53gWLGtfD9+6cTB/H78LtQzM87VPXV316RD/siHy02EwjepRkPunOch9xcrmX0SS/XH/L1hICy6esfk9tEvbti5c/uq7G+72Vdnf+NhpmxbrUq3Vf9cfWvj5dFwtazE0W6rZcVKVu68ctvKHbuuXTF15YbLJy+fvGrV2avHzhxbM/bxM1dWRzWW/W0x1GVzVZ0M9a072xzXcRzq6d2FSk7Ep4aEhMRCS2wdWNb0/+TS/H9b8/l//NSJn/z5+gyNjv8Px8P82eOzh/nXx8C+do//Dzc6ml87MWAkCeyOgd0O8wMAAPDOECf5cW9m3Cv90+XfeblZudL8f3d7v/8/Tuv/15auP7/RMv/LY4mxRuv/p8v819b/391o/f90mf/a+v/73ob1/6+uBZJN8gvr/wMAAO8EJ279/5bL+6cXCChlaLm8f3qBgFKGlsv4t3uBgCNe///5//yr/w5NlOb/t7Y3/7dwPwAAAJw8vvxn1/xOs3hp/r+vvfn/iV//LzQ6/3+kUWCi0cKA1v8DAABggWq0/t/wjf2XNitXmv8faG/+H0+76KzLHWt9cyhb0y6ka9q9NlT7yQAAAAAsDJ1hdLSnzbx1K6OuPfo2n8mXAm2WLnrxTw4f2fn/B9ub/9f9LuOWJ5be3bX8gsffvG/F0pf3f2zvK7PH/wEAAID50+5+CQAAAAAAAAAAAAAA4O334n/sWdMsXvr9f1g383ij3//H6/7F3xe8uy53rLX1+n/5/Qs/fc+umSULHxsK4cPFwJY9W04J+bX5lxUDD1+y/D3VxJ60xIMvnPtSNXFpGvjUilPfqCbOSQLr4yKJ700D8aqKbyxOAnF5xX9PA3F7HEgDvXngq4uzcXSk2+qng9m26ki31bODISwpBGrb6v7BrI2OdIC3JYHaAL+QBuIA/zwPdKa9umcg61UMDMaidwxkvQIA4KQVvwX2hM1T05Nj8St8vD29u/42qluy7PpytR1tNv9cvjTZRfeuG2wn3ZV+F5291nhPqFSHsKr0dbWYpWNmlMenlhab7t0NhtxqtbfOBuVSR7rpehuPqC8b0ejGrdObeloOfE3rLKu7W2ZZVZrsFLN0zmzSNmppoy9tjKjNbdNGl+P9zjA62pXk+oMYHA51Wr0i2v29fnGdv0avgmKeqw7v/VWz+krz/+H25v+V4rjeyC8GsDteWe/vlljmHwAAAObXV9f++hvx32dvfPTpZnlL8/+R9ub/cQ9Wfig429txMF7/f++SEGYurT+cBe6KzV22JIQPzqQmYonsgvrnxxJjWeCuuMNkeSyxfqK+qkUxcCAJ/GQoDxxMAodiIN9LsT/ku3L+fiiEs2ZS6+pLbIslhpPAZ2JgJAmMxsBYElgcA+NJ4NXFeWAiCfxbDISp+m117+J8WwEAAByJfJ7VU383pPO8A92tMnS0ytDfKkNnqwyVVhkajSLe/3bM0JOcvNJRyNST1tqX1FLKEC+Gf8T9KmUIP6zPmRYsNR3PP6idb9BRn+GBT3RXQhOl+f9Ye/P//vrbrPVDcf4/e/2/LPCD2L2vxVPHR2Lgx5+sD+Q7Bg7Fye5Ntaom8hL5pP2mWGI8BkaSwLYYGE8C69flgX3vqQ/kM+1a43trjU/lJQoBAAAAOOHiDoK4mybO/+/Y8ZWBZuVK8//x9ub/sb2BYmM3xFoPLw7h/o7Z3tQCKwazQNyPMRh/Hv++wRBOKezgqJWY7M9K9CYNh+/3Zb9Q702r+l5f9uODeP/Cpx55+OZq4ra+EJYW9r7U2ni+krXRlwbO6M0C/Wlga3cWiHt+aoHvdmYBOGa1vYLxBZWf6lIzPHe5Bq+/d8o1QdPhlfaBzpFvrt9czZfSDtd8n2rNkT1tTfffctyU3h4HvdsW4rtt2Lut+EUq/4by1myoEjo3TW7ecPX0zvhI8ZesJfP0PBd/pdpO+ji8DncffW9bq6QdGEs+PsbmLjf367AjVnfLE0vv7lp+weP3rVj68v6P7X2l7W40EH8o/Mh1/zr4o8LmnW+VkL/mFtznyYTPk4X438CIpy2EsO7Vr9/ULF6a/0+0N//vTm5n/DpuzB1LQvhIYeM+Fjf/Hy/JPgcLgexT8l3lQHbI/b+GGn5yAgAAwPFW291R218wld9mJ4Sn8+Ry/okjzB/3V4zPmb/dfvf/9SVLm8VL8//1zef/i5JuOv7v+D/zxPH/OZ3su6IXpQ/sPqZd0aXqmBeO/8/pZH+3Of4/J8f/Hf+fi+P/LTj+P6eT/WkrfUva5ktXCOHlP3ro2Wbx0vx/W3vzf+v/zb1oX239v/WN1v/b1mj9v93W/wMAAOZVg4Xm0nleafW+UoZ09b5ShpYLBLZcYtD6f0e8/t9Lpz//m9BEaf6/u735f3w5DBRbXyjr/42sa1DVrTGwzcKAAAAAnIwa7SAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg7fXAP/zPpmbxR3973rMvXDx+xZ61F7963XmnPhnC1MzjHVm4o//G28d/fve59+x5YPUd9x0+/6OVvFxPfvu7dbljrW8OhbCv8MhgTLw2VL0zG7jw0/fs6q4mHhsK4cPFwJY9W06pJr41FMKyYuDhS5a/p5rYk5Z48IVzX6omLk0Dn1px6hvVxDl5oCPt7j8uzrrbkXb35sUhLCkEat29YnF9VbU2/jQPdKZt/NNg1kYMDMai3xjM2oiB6VhialEIK7tD6EqrerSSVdWVVvUvlayqrrSqL1dCOCeE0J1W9UJvVlV3OvIne7OqYuC0D+1//YxqYl9vCCuLgac/d+dZ1cQXkkCt8b/oDeED1ZdM2vi3e7LGe9LGb+sJ4f0hhN60xC+7sxK9aYkXu0N4VyFQa/zz3SHsCrwjxA+fuk+0Hbuu3bJhenpy+zwmevO2+sLmqenJ0Y1bpzdVkj410lFIv3X90Y/9ude/tLF6e9G96wbbSXfn5Xpmury6p+7umpO997Ff/cVKZp+PUv0xf28YCIuu3jG5ffSLG3bu3L4q+9tu9tXZ3648mm2rVQtlWy0rVrJy55XbVu7Yde2KqSs3XD55+eRVq85ePXbm2Jqxj5+5sjqqsezv8RjqnSd+qKd3Fyo5ER8AEhISCy3RWffpNnayf5CXvujPdrQnVGY+oEvTimKWjplRHo9Brz3KER/N95SWI1pVmjiUsqyeI8v19VnWlCYTs7X0ZVlmvteVJofFxjpnNmm83xlGR7sabYfh+rvFzfuzY9i8z+Sbrt00AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP/HDhwIAAAAAAD5vzZCVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVFXbgQAAAAAAAyP+1EaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwA8cCAAAAAML8rcPo2QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgEsBAAD//+erI4o=")
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x80)
pwrite64(r1, &(0x7f0000000140)='2', 0x59, 0x8000c61)
ioctl$EXT4_IOC_MOVE_EXT(r1, 0x40305829, &(0x7f00000004c0)={0x17c04, 0xffffffffffffffff, 0x81, 0x100000001})
ioctl$FS_IOC_GETFSSYSFSPATH(r0, 0x80811501, 0x0)

2.066501646s ago: executing program 1 (id=570):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000100000000000000010200850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x45)
r1 = creat(&(0x7f0000000280)='./file0\x00', 0x0)
close(r1)
epoll_create(0x8)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r0])

2.050047286s ago: executing program 0 (id=571):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff})
r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000001840), 0x200400, 0x0)
io_setup(0x101, &(0x7f0000001880)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f00000019c0)=[&(0x7f0000001980)={0x0, 0x0, 0x0, 0x8, 0x2f, r0, 0x0, 0x0, 0x5, 0x0, 0x3, r1}])

1.962476898s ago: executing program 2 (id=572):
syz_mount_image$reiserfs(&(0x7f0000000000), &(0x7f00000000c0)='./file1\x00', 0x8488, &(0x7f0000000780), 0xfe, 0x10fd, &(0x7f0000001140)="$eJzs2T9rFEEYBvBnds8/3cqmXwQtLCQknF8ghcK1ttqIpDJVrlL8OH4cTWUf0msRsF9Zb/dO5UTwTm1+PzjmvYd9Z2fKmQ0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMZsmnkhxUSTtlVZKSdN3F4ipJN+V33tdVSp6eLpaPz+dPlknqb4+XZ0kZuoa2tMf3brfzdt4et48OTu5/WL5+8+rF2dnp+ThNSZfL6/1vpYzrAQAAAH7U76z5z+8HAAAAfmdvFwkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAf6hvNnU7FVWSknTdxeIqSbel78Y/Wh8AAACwu5Iqz5tt+eoaYONhPjZlnQ/jlzLUR3m3pR8AAAD4pf7WWHz/fb3c3JzHH2S2PpcP2d3Mcni4+j8O+XyS1EmOfpr88vrty+lX+vpv7wUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgK/swLEAAAAAgDB/6zQ6NgAAAAAAAAAAAAAAAAAAAPYKAAD///F61s8=")
r0 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0)
ftruncate(r0, 0x2007ffc)
r1 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0)
getdents64(r1, &(0x7f0000000200)=""/58, 0x3a)

1.947940548s ago: executing program 1 (id=573):
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108)
mount$bind(0x0, &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x201008, 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
r0 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2f, &(0x7f0000000200)={0x8, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e21, 0x10000000, @remote}}}, 0x108)

1.860435279s ago: executing program 0 (id=574):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001000010400"/19, @ANYRES32, @ANYBLOB="00001700000000001c"], 0x44}, 0x1, 0x0, 0x0, 0x4008010}, 0x0)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2400000070000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="0c0002800600"], 0x24}}, 0x0)

1.843171219s ago: executing program 1 (id=575):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast})
write$tun(r0, &(0x7f0000000240)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x0, 0x300, 0x14}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x3c, 0x28, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {{0x2200, 0x22eb, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}, 0x36)

1.701174782s ago: executing program 0 (id=576):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x800, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f00000002c0)=0x10)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={<r2=>0x0}, &(0x7f00000010c0)=0x8)
setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000001080)={r2}, 0xc)

1.466237346s ago: executing program 1 (id=577):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip6_flowlabel\x00')
bpf$PROG_LOAD(0x5, 0x0, 0x0)
fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, 0x0, 0x2c, 0x2)
sendmmsg$unix(r0, 0x0, 0x0, 0x0)

1.299260078s ago: executing program 1 (id=578):
getpid()
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10)
syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000100)='./file1\x00', 0x810, &(0x7f0000000300)={[{@discard}, {@nodatacow}, {@nobarrier}, {@usebackuproot}, {@metadata_ratio={'metadata_ratio', 0x3d, 0x3}}, {@autodefrag}, {@user_subvol_rm}, {@max_inline={'max_inline', 0x3d, [0x6d, 0x38, 0x67, 0x30, 0x32, 0x6640f45c1cb32689]}}]}, 0x3, 0x510e, &(0x7f00000196c0)="$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")
close(0x4)

1.298956449s ago: executing program 2 (id=579):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="12000000070000000400000002"], 0x48)
socketpair(0x1, 0x2, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000005c0)={r0, &(0x7f0000000480), &(0x7f0000000580)=@tcp=r2}, 0x99)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r0, &(0x7f0000000280)="aa", &(0x7f0000000400)=@udp=r1}, 0x20)
close(0x4)

917.329255ms ago: executing program 2 (id=580):
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003140)=[{{0x0, 0x0, &(0x7f0000001f00)=[{&(0x7f0000000e40)="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", 0xbba}], 0x1}}], 0x1, 0x0)
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x10004, &(0x7f00000000c0), 0x0, 0x4c0, &(0x7f0000000540)="$eJzs3d9rXFUeAPDvnWSStJ1u0t3C/njZbtvdLpTOZLKk0IVlW/ZhF9aC2D+gxmQaQyaZkJnUJBRM/wUVLfggIvjki6DvRcRXfRH1QXzxSRAtFRF8GJk7kzZNMklImkzNfD5wuPfcO5nvORnu+c6cSe4JoGudioiViOiLiGcjYrB1PGmVuNwsjcfdv3drvFGSqNevfZek5xv1WPMzDcdazzkQEc/8N+K5ZGPc6tLy9Fi5XJpv1Qu1mblCdWn5wtTM2GRpsjQ7Mjx6abR4sVgsPra+vvRj7venP7j8rzeeeuvjt99bXEzW9HdtP3ZrZZNjza5nI7fmWG9E/H+vwZ4QPa3+9HW6IexKJiJ+GxGn0+t/MHrSVxMAOMzq9cGoD66tAwCHXePzfy6STL41F5CLTCafb87hnYyjmXKlWjt/o7IwOxHpHNZQZDM3psql4dbc2VBkk0a9mO4/rI+sq/8jIk5ExCv9R9J6frxSnujkGx8A6GLH1uX/H/qb+R8AOOQGOt0AAODAyf8A0H3kfwDoPvI/AHQf+R8Auo/8DwDdR/4HgK7y9NWrjVJfvf/1xM2lhenKzQsTpep0fmZhPD9emZ/LT1Yqk+k9e2a2e75ypTJ3MWYXFgu1UrVWqC4tX5+pLMzWrqf39b5eyh5IrwCArZz4890vkohY+eeRtMSatRzkajjcMp1uANAxPZ1uANAxVvuC7uUzPrDJEr1rZNv/idCd3cc09wCdde6P5v+hW8nB0L3M/0P3Mv8P3ateT6z5DwBdZjdz/Jf34X0I0Dlbf/+/xS1C9vD9PwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPza5dKSZPKttcBzkcnk8xHHI2IossmNqXJpOCJ+ExGf92f7G/VipxsNAOxR5puktf7XucGzufVn+5Kf+tNtRLzw+rXXFsdqtfli4/j3D47X7rSOj3Si/QDAdlbz9GoeX3X/3q3x1XKQ7fn2SnNx0Y3xe6M33Q5ENiKO3k9a9abG+5WexxB/5XZE/GGz+EnkIo4MtVY+XR+/Efv4/sePh/Ezj8TPpOea28bv4nePoS3Qbe5eaS5ovvH6y8SpdLv59T+QjlB71378yzwY/3rajH+ndtrHjwb/1zb+7Yg/9W4+/qzGT9rEP7vD+F9Xvny53bn6mxHnNs0/ySOxCrWZuUJ1afnC1MzYZGmyNDsyPHpptHixWCwW0jnqwupM9Ub/fvWzF7fq/9E28Qe26f9fd9j/rz75z4d/2SL+389s/vqf3CJ+Iyf+bYfx3znz/vPtzjXiT7Tp/3av//kdxr/76bs/7/ChAMABqC4tT4+Vy6V5O3b2c6fvyWiGnZ3udHpkAvbbw4u+0y0BAAAAAAAAAAAAAADaOYh/J+p0HwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADi8fgkAAP//ZCDc4A==")
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0xa, 0x7, 0x209, 0x40}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280), &(0x7f0000000180), 0x3ff, r0}, 0x38)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000280), &(0x7f0000000080), 0x7c7, r0}, 0x38)

831.952356ms ago: executing program 3 (id=581):
sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000fc0)=ANY=[], 0x1c}}, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ip6gre0\x00', <r1=>0x0})
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000640)=ANY=[@ANYBLOB="4400000010000305fcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="05030200157e0000140012800c0001006d616376746170000400028008000500", @ANYRES32=r1, @ANYBLOB="080004"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x48094)

589.28525ms ago: executing program 0 (id=582):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000280)={r0, r0, 0xc, 0x0, 0x0, 0x9, 0x1, 0x457, 0x9, 0x9, 0x1, 0x1, 'syz1\x00'})
ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d2, &(0x7f0000000400)={0x2, &(0x7f0000000e80)=[{@fixed}, {@none}]})

92.985519ms ago: executing program 0 (id=583):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10)
r1 = syz_open_dev$tty20(0xc, 0x4, 0x1)
write$binfmt_misc(r1, &(0x7f0000000240), 0xfffffecc)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000040)=0x3)

61.925399ms ago: executing program 2 (id=584):
syz_mount_image$udf(&(0x7f0000000c40), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='noadinicb,nostrict,mode=00000000000000000000004,uid=forget,noadinicb,umask=00000000000000040002000,lastblock=00000000000000000013,undelete,partition=00000000000000000005,\x00'], 0x43, 0xc11, &(0x7f0000000d00)="$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")
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xc, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x8042, 0x0)
unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0)
unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0)

0s ago: executing program 3 (id=585):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0x9})

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.10.26' (ED25519) to the list of known hosts.
syzkaller login: [   63.659647][ T5772] cgroup: Unknown subsys name 'net'
[   63.821133][ T5772] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   65.188049][ T5772] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   66.613624][ T5794] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   66.633748][ T5795] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   66.634863][ T5797] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   66.648169][ T5798] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   66.651271][ T5796] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   66.656010][ T5798] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   66.665528][ T5797] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   66.670926][ T5798] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   66.677426][ T5797] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   66.684827][ T5798] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   66.691971][ T5797] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   66.699330][ T5798] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   66.705254][ T5796] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   66.713206][ T5797] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   66.720541][ T5796] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   66.726538][ T5797] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[   66.740582][ T5796] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   66.740806][ T5797] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[   66.747910][ T5796] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[   66.754700][ T5798] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   66.768952][ T5795] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   66.769891][ T5798] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   66.776890][ T5796] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[   66.790914][ T5797] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   67.270323][ T5784] chnl_net:caif_netlink_parms(): no params data found
[   67.286339][ T5785] chnl_net:caif_netlink_parms(): no params data found
[   67.408400][ T5783] chnl_net:caif_netlink_parms(): no params data found
[   67.418227][ T5782] chnl_net:caif_netlink_parms(): no params data found
[   67.437973][ T5784] bridge0: port 1(bridge_slave_0) entered blocking state
[   67.445380][ T5784] bridge0: port 1(bridge_slave_0) entered disabled state
[   67.452687][ T5784] bridge_slave_0: entered allmulticast mode
[   67.459645][ T5784] bridge_slave_0: entered promiscuous mode
[   67.472282][ T5784] bridge0: port 2(bridge_slave_1) entered blocking state
[   67.479528][ T5784] bridge0: port 2(bridge_slave_1) entered disabled state
[   67.487394][ T5784] bridge_slave_1: entered allmulticast mode
[   67.494390][ T5784] bridge_slave_1: entered promiscuous mode
[   67.566169][ T5785] bridge0: port 1(bridge_slave_0) entered blocking state
[   67.573285][ T5785] bridge0: port 1(bridge_slave_0) entered disabled state
[   67.581231][ T5785] bridge_slave_0: entered allmulticast mode
[   67.588017][ T5785] bridge_slave_0: entered promiscuous mode
[   67.596400][ T5785] bridge0: port 2(bridge_slave_1) entered blocking state
[   67.603518][ T5785] bridge0: port 2(bridge_slave_1) entered disabled state
[   67.610811][ T5785] bridge_slave_1: entered allmulticast mode
[   67.618199][ T5785] bridge_slave_1: entered promiscuous mode
[   67.638311][ T5784] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   67.650859][ T5784] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   67.724620][ T5785] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   67.741150][ T5784] team0: Port device team_slave_0 added
[   67.769639][ T5785] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   67.798467][ T5784] team0: Port device team_slave_1 added
[   67.804919][ T5783] bridge0: port 1(bridge_slave_0) entered blocking state
[   67.812110][ T5783] bridge0: port 1(bridge_slave_0) entered disabled state
[   67.819593][ T5783] bridge_slave_0: entered allmulticast mode
[   67.826510][ T5783] bridge_slave_0: entered promiscuous mode
[   67.833859][ T5782] bridge0: port 1(bridge_slave_0) entered blocking state
[   67.841277][ T5782] bridge0: port 1(bridge_slave_0) entered disabled state
[   67.849288][ T5782] bridge_slave_0: entered allmulticast mode
[   67.856570][ T5782] bridge_slave_0: entered promiscuous mode
[   67.888255][ T5783] bridge0: port 2(bridge_slave_1) entered blocking state
[   67.895637][ T5783] bridge0: port 2(bridge_slave_1) entered disabled state
[   67.902734][ T5783] bridge_slave_1: entered allmulticast mode
[   67.910482][ T5783] bridge_slave_1: entered promiscuous mode
[   67.917321][ T5782] bridge0: port 2(bridge_slave_1) entered blocking state
[   67.924706][ T5782] bridge0: port 2(bridge_slave_1) entered disabled state
[   67.931872][ T5782] bridge_slave_1: entered allmulticast mode
[   67.939284][ T5782] bridge_slave_1: entered promiscuous mode
[   67.948489][ T5785] team0: Port device team_slave_0 added
[   67.957198][ T5785] team0: Port device team_slave_1 added
[   68.029673][ T5784] batman_adv: batadv0: Adding interface: batadv_slave_0
[   68.036761][ T5784] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   68.064116][ T5784] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   68.078012][ T5784] batman_adv: batadv0: Adding interface: batadv_slave_1
[   68.085295][ T5784] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   68.111352][ T5784] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   68.138337][ T5782] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   68.151106][ T5782] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   68.161309][ T5785] batman_adv: batadv0: Adding interface: batadv_slave_0
[   68.168603][ T5785] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   68.194758][ T5785] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   68.211581][ T5785] batman_adv: batadv0: Adding interface: batadv_slave_1
[   68.218942][ T5785] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   68.244931][ T5785] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   68.265039][ T5783] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   68.302426][ T5782] team0: Port device team_slave_0 added
[   68.316485][ T5783] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   68.338340][ T5782] team0: Port device team_slave_1 added
[   68.415763][ T5783] team0: Port device team_slave_0 added
[   68.426859][ T5784] hsr_slave_0: entered promiscuous mode
[   68.433205][ T5784] hsr_slave_1: entered promiscuous mode
[   68.452142][ T5782] batman_adv: batadv0: Adding interface: batadv_slave_0
[   68.459147][ T5782] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   68.485665][ T5782] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   68.501754][ T5785] hsr_slave_0: entered promiscuous mode
[   68.508630][ T5785] hsr_slave_1: entered promiscuous mode
[   68.516825][ T5785] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   68.524792][ T5785] Cannot create hsr debugfs directory
[   68.532064][ T5783] team0: Port device team_slave_1 added
[   68.550520][ T5782] batman_adv: batadv0: Adding interface: batadv_slave_1
[   68.557598][ T5782] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   68.583512][ T5782] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   68.659366][ T5783] batman_adv: batadv0: Adding interface: batadv_slave_0
[   68.667273][ T5783] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   68.693321][ T5783] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   68.708078][ T5783] batman_adv: batadv0: Adding interface: batadv_slave_1
[   68.715122][ T5783] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   68.741172][ T5783] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   68.771060][ T5782] hsr_slave_0: entered promiscuous mode
[   68.777437][ T5782] hsr_slave_1: entered promiscuous mode
[   68.783684][ T5782] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   68.791785][ T5782] Cannot create hsr debugfs directory
[   68.848966][ T5797] Bluetooth: hci3: command tx timeout
[   68.849052][ T5789] Bluetooth: hci1: command tx timeout
[   68.860513][ T5795] Bluetooth: hci2: command tx timeout
[   68.860806][ T5105] Bluetooth: hci0: command tx timeout
[   68.948680][ T5783] hsr_slave_0: entered promiscuous mode
[   68.955632][ T5783] hsr_slave_1: entered promiscuous mode
[   68.962137][ T5783] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   68.969755][ T5783] Cannot create hsr debugfs directory
[   69.196265][ T5785] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   69.208267][ T5785] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   69.218041][ T5785] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   69.253058][ T5785] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   69.309478][ T5784] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   69.334393][ T5784] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   69.343727][ T5784] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   69.356463][ T5784] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   69.450911][ T5782] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   69.460322][ T5782] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   69.471777][ T5782] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   69.482369][ T5782] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   69.576717][ T5783] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   69.586705][ T5783] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   69.597098][ T5783] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   69.609345][ T5783] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   69.671044][ T5785] 8021q: adding VLAN 0 to HW filter on device bond0
[   69.733210][ T5784] 8021q: adding VLAN 0 to HW filter on device bond0
[   69.758715][ T5785] 8021q: adding VLAN 0 to HW filter on device team0
[   69.772524][ T2979] bridge0: port 1(bridge_slave_0) entered blocking state
[   69.779868][ T2979] bridge0: port 1(bridge_slave_0) entered forwarding state
[   69.803664][ T5784] 8021q: adding VLAN 0 to HW filter on device team0
[   69.822189][   T48] bridge0: port 2(bridge_slave_1) entered blocking state
[   69.829355][   T48] bridge0: port 2(bridge_slave_1) entered forwarding state
[   69.861278][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[   69.868786][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[   69.907862][ T2979] bridge0: port 2(bridge_slave_1) entered blocking state
[   69.915065][ T2979] bridge0: port 2(bridge_slave_1) entered forwarding state
[   69.956241][ T5783] 8021q: adding VLAN 0 to HW filter on device bond0
[   69.973334][ T5782] 8021q: adding VLAN 0 to HW filter on device bond0
[   70.013723][ T5783] 8021q: adding VLAN 0 to HW filter on device team0
[   70.063074][ T5782] 8021q: adding VLAN 0 to HW filter on device team0
[   70.089515][ T2979] bridge0: port 1(bridge_slave_0) entered blocking state
[   70.096715][ T2979] bridge0: port 1(bridge_slave_0) entered forwarding state
[   70.119874][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   70.127051][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   70.173215][ T2979] bridge0: port 1(bridge_slave_0) entered blocking state
[   70.180418][ T2979] bridge0: port 1(bridge_slave_0) entered forwarding state
[   70.207480][ T2979] bridge0: port 2(bridge_slave_1) entered blocking state
[   70.214672][ T2979] bridge0: port 2(bridge_slave_1) entered forwarding state
[   70.420202][ T5785] 8021q: adding VLAN 0 to HW filter on device batadv0
[   70.542426][ T5785] veth0_vlan: entered promiscuous mode
[   70.608549][ T5785] veth1_vlan: entered promiscuous mode
[   70.643720][ T5784] 8021q: adding VLAN 0 to HW filter on device batadv0
[   70.718591][ T5785] veth0_macvtap: entered promiscuous mode
[   70.748761][ T5783] 8021q: adding VLAN 0 to HW filter on device batadv0
[   70.761840][ T5785] veth1_macvtap: entered promiscuous mode
[   70.784265][ T5784] veth0_vlan: entered promiscuous mode
[   70.812980][ T5785] batman_adv: batadv0: Interface activated: batadv_slave_0
[   70.831504][ T5782] 8021q: adding VLAN 0 to HW filter on device batadv0
[   70.843871][ T5785] batman_adv: batadv0: Interface activated: batadv_slave_1
[   70.862521][ T5784] veth1_vlan: entered promiscuous mode
[   70.896170][ T5785] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   70.906054][ T5785] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   70.915236][ T5785] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   70.923945][ T5785] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   70.924951][ T5105] Bluetooth: hci0: command tx timeout
[   70.933208][ T5795] Bluetooth: hci1: command tx timeout
[   70.938156][ T5789] Bluetooth: hci2: command tx timeout
[   70.943358][ T5797] Bluetooth: hci3: command tx timeout
[   71.029906][ T5784] veth0_macvtap: entered promiscuous mode
[   71.043231][ T5784] veth1_macvtap: entered promiscuous mode
[   71.078714][ T5782] veth0_vlan: entered promiscuous mode
[   71.136754][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   71.147717][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   71.159561][ T5784] batman_adv: batadv0: Interface activated: batadv_slave_0
[   71.168599][ T5783] veth0_vlan: entered promiscuous mode
[   71.190079][ T5782] veth1_vlan: entered promiscuous mode
[   71.198426][ T2979] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   71.216851][ T2979] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   71.228764][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   71.240061][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   71.252192][ T5784] batman_adv: batadv0: Interface activated: batadv_slave_1
[   71.266206][ T5783] veth1_vlan: entered promiscuous mode
[   71.290961][ T5784] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   71.301451][ T5784] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   71.311512][ T5784] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   71.320892][ T5784] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   71.344013][   T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   71.352871][   T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   71.441866][ T5783] veth0_macvtap: entered promiscuous mode
[   71.473310][ T5782] veth0_macvtap: entered promiscuous mode
[   71.482467][ T5783] veth1_macvtap: entered promiscuous mode
[   71.574084][ T1277] ieee802154 phy0 wpan0: encryption failed: -22
[   71.574282][ T5876] syz.0.1[5876]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set
[   71.580768][ T1277] ieee802154 phy1 wpan1: encryption failed: -22
[   71.597964][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   71.611505][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   71.620118][ T5782] veth1_macvtap: entered promiscuous mode
[   71.678992][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   71.691210][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   71.708334][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   71.723073][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   71.737822][ T5783] batman_adv: batadv0: Interface activated: batadv_slave_0
[   71.771753][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   71.783714][   T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   71.784048][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   71.802777][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   71.806754][   T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   71.814611][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   71.831776][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   71.842688][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   71.859773][ T5782] batman_adv: batadv0: Interface activated: batadv_slave_0
[   71.871183][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   71.894319][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   71.909593][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   71.920235][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   71.932254][ T5783] batman_adv: batadv0: Interface activated: batadv_slave_1
[   71.979324][ T5783] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   71.996354][ T5783] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   72.005184][ T5783] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   72.015188][ T5783] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   72.026445][ T5876] loop0: detected capacity change from 0 to 32768
[   72.043105][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   72.059163][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   72.059913][ T5876] =======================================================
[   72.059913][ T5876] WARNING: The mand mount option has been deprecated and
[   72.059913][ T5876]          and is ignored by this kernel. Remove the mand
[   72.059913][ T5876]          option from the mount to silence this warning.
[   72.059913][ T5876] =======================================================
[   72.069513][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   72.118792][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   72.131655][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   72.143665][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   72.156770][ T5782] batman_adv: batadv0: Interface activated: batadv_slave_1
[   72.201959][ T5876] ocfs2: Mounting device (7,0) on (node local, slot 0) with writeback data mode.
[   72.263591][ T5782] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   72.301775][ T5782] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   72.323482][ T5782] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   72.332383][ T5782] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   72.359088][ T5785] ocfs2: Unmounting device (7,0) on (node local)
[   72.502344][ T2979] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   72.512808][ T2979] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   72.623167][ T2111] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   72.646808][ T2111] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   72.702458][ T5883] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   72.729863][ T2111] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   72.752082][ T2111] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   72.802956][ T2957] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   72.830321][ T2957] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   73.005617][ T5795] Bluetooth: hci0: command tx timeout
[   73.012031][ T5797] Bluetooth: hci2: command tx timeout
[   73.018933][ T5795] Bluetooth: hci3: command tx timeout
[   73.019632][ T5789] Bluetooth: hci1: command tx timeout
[   73.033160][ T5890] Driver unsupported XDP return value 0 on prog  (id 2) dev N/A, expect packet loss!
[   73.349519][ T5901] loop3: detected capacity change from 0 to 512
[   73.386828][ T5901] EXT4-fs: Ignoring removed bh option
[   73.427776][ T5901] EXT4-fs: quotafile must be on filesystem root
[   74.502552][ T5934] loop0: detected capacity change from 0 to 164
[   74.677906][ T5934] rock: directory entry would overflow storage
[   74.684282][ T5934] rock: sig=0x4f50, size=4, remaining=3
[   74.744636][ T5934] iso9660: Corrupted directory entry in block 4 of inode 1792
[   74.820529][ T5922] loop2: detected capacity change from 0 to 32768
[   74.893949][ T5922] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[   75.088723][ T5789] Bluetooth: hci1: command tx timeout
[   75.090451][ T5795] Bluetooth: hci3: command tx timeout
[   75.094153][ T5789] Bluetooth: hci0: command tx timeout
[   75.101675][ T5797] Bluetooth: hci2: command tx timeout
[   75.136068][ T5948] sctp: [Deprecated]: syz.1.30 (pid 5948) Use of struct sctp_assoc_value in delayed_ack socket option.
[   75.136068][ T5948] Use struct sctp_sack_info instead
[   75.155946][ T5922] syz.2.19 (5922) used greatest stack depth: 18992 bytes left
[   75.295491][ T5826] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[   75.326598][ T5783] ocfs2: Unmounting device (7,2) on (node local)
[   75.366724][   T27] audit: type=1326 audit(1752661773.248:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5954 comm="syz.1.35" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14aaf8e929 code=0x7ffc0000
[   75.407408][   T27] audit: type=1326 audit(1752661773.248:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5954 comm="syz.1.35" exe="/root/syz-executor" sig=0 arch=c000003e syscall=294 compat=0 ip=0x7f14aaf8e929 code=0x7ffc0000
[   75.461544][   T27] audit: type=1326 audit(1752661773.248:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5954 comm="syz.1.35" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14aaf8e929 code=0x7ffc0000
[   75.525082][   T27] audit: type=1326 audit(1752661773.248:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5954 comm="syz.1.35" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14aaf8e929 code=0x7ffc0000
[   75.525299][ T5826] usb 4-1: Using ep0 maxpacket: 32
[   75.572696][ T5826] usb 4-1: config 0 has an invalid interface number: 67 but max is 0
[   75.581531][ T5826] usb 4-1: config 0 has no interface number 0
[   75.591164][ T5826] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[   75.602407][ T5826] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   75.614717][ T5826] usb 4-1: Product: syz
[   75.618957][ T5826] usb 4-1: Manufacturer: syz
[   75.625685][ T5826] usb 4-1: SerialNumber: syz
[   75.639767][ T5826] usb 4-1: config 0 descriptor??
[   75.668447][ T5826] smsc95xx v2.0.0
[   76.316768][ T5980] loop0: detected capacity change from 0 to 512
[   76.398034][ T5980] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   76.463200][ T5980] ext4 filesystem being mounted at /15/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   76.499836][ T5826] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): EEPROM read operation timeout
[   76.716551][ T5826] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71
[   76.755584][ T5826] smsc95xx: probe of 4-1:0.67 failed with error -71
[   76.796075][ T5826] usb 4-1: USB disconnect, device number 2
[   76.933605][ T5785] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   77.399886][ T6002] loop1: detected capacity change from 0 to 2048
[   77.426948][ T6002] hpfs: bad mount options.
[   77.502128][ T5777] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[   77.701130][ T6015] loop2: detected capacity change from 0 to 512
[   77.714527][    T8] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   77.799325][ T6017] sch_tbf: burst 480 is lower than device lo mtu (65550) !
[   77.932112][    T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   77.976007][    T8] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[   78.010291][    T8] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[   78.027058][    T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   78.084187][    T8] usb 1-1: config 0 descriptor??
[   78.539257][    T8] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0
[   78.573442][    T8] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving
[   78.629710][    T8] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0
[   78.703253][ T6039] syz.2.68 uses obsolete (PF_INET,SOCK_PACKET)
[   78.920758][ T5826] usb 1-1: USB disconnect, device number 2
[   78.963964][ T6029] loop3: detected capacity change from 0 to 32768
[   79.137659][   T27] audit: type=1800 audit(1752661777.028:6): pid=6029 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.63" name="file1" dev="loop3" ino=4 res=0 errno=0
[   79.432474][ T6037] loop1: detected capacity change from 0 to 40427
[   79.451427][ T6037] F2FS-fs (loop1): heap/no_heap options were deprecated
[   80.248633][ T5787] kernel write not supported for file /44/loginuid (pid: 5787 comm: kworker/0:4)
[   80.665028][ T6063] loop0: detected capacity change from 0 to 32768
[   80.724808][ T6075] loop2: detected capacity change from 0 to 4096
[   80.897885][ T6076] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   81.437150][ T6071] loop3: detected capacity change from 0 to 32768
[   81.488691][ T6071] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[   81.677312][ T6103] loop1: detected capacity change from 0 to 2048
[   81.726406][ T6071] XFS (loop3): Ending clean mount
[   81.731333][ T6108] loop2: detected capacity change from 0 to 512
[   81.738455][ T6103] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   81.760623][ T6108] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   81.772873][ T6103] ext4 filesystem being mounted at /28/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   81.801176][ T6108] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[   81.832800][  T786] cfg80211: failed to load regulatory.db
[   81.841157][ T6071] XFS (loop3): Quotacheck needed: Please wait.
[   81.881614][ T6108] EXT4-fs (loop2): 1 truncate cleaned up
[   81.893138][ T6108] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   81.946163][ T6108] syz.2.91 (pid 6108) is setting deprecated v1 encryption policy; recommend upgrading to v2.
[   81.947735][ T6071] XFS (loop3): Quotacheck: Done.
[   81.973558][ T6103] fs-verity: sha512 using implementation "sha512-avx2"
[   82.006195][ T5783] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   82.147648][ T5782] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   82.168719][ T5784] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[   82.315538][ T6113] sch_tbf: burst 32854 is lower than device lo mtu (65550) !
[   82.348975][ T6111] loop2: detected capacity change from 0 to 4096
[   82.419803][ T6111] ntfs3: loop2: Different NTFS sector size (1024) and media sector size (512).
[   82.554138][ T6111] ntfs3: loop2: Mark volume as dirty due to NTFS errors
[   82.558205][ T6118] netlink: 'syz.0.95': attribute type 3 has an invalid length.
[   82.576950][ T6118] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.95'.
[   82.820191][ T5833] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   83.030186][ T6130] syzkaller1: entered promiscuous mode
[   83.036035][ T5833] usb 2-1: Using ep0 maxpacket: 16
[   83.051400][ T6130] syzkaller1: entered allmulticast mode
[   83.059018][ T5833] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   83.083834][ T5833] usb 2-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00
[   83.098410][ T5833] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   83.132089][ T5833] usb 2-1: config 0 descriptor??
[   83.150119][ T5833] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input7
[   83.444356][ T6123] loop3: detected capacity change from 0 to 32768
[   83.478225][ T6123] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[   83.501236][ T5144] bcm5974 2-1:0.0: could not read from device
[   83.524793][ T5144] bcm5974 2-1:0.0: could not read from device
[   83.562080][ T5144] bcm5974 2-1:0.0: could not read from device
[   83.562209][ T5833] usb 2-1: USB disconnect, device number 2
[   83.633542][ T5144] bcm5974 2-1:0.0: could not read from device
[   83.710620][ T6123] XFS (loop3): Ending clean mount
[   83.757318][ T6123] XFS (loop3): Quotacheck needed: Please wait.
[   83.786152][ T6156] loop2: detected capacity change from 0 to 16
[   83.813778][ T6156] erofs: (device loop2): mounted with root inode @ nid 36.
[   83.854874][ T6123] XFS (loop3): Quotacheck: Done.
[   84.041060][ T5784] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[   84.955533][ T6193] loop1: detected capacity change from 0 to 512
[   85.116191][ T6193] EXT4-fs (loop1): Test dummy encryption mode enabled
[   85.128531][ T6193] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2244: inode #15: comm syz.1.126: corrupted in-inode xattr: invalid ea_ino
[   85.146130][ T6193] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.126: couldn't read orphan inode 15 (err -117)
[   85.160878][ T6193] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   85.396283][ T5782] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   85.529960][ T6205] loop3: detected capacity change from 0 to 128
[   85.583646][ T6204] loop1: detected capacity change from 0 to 2048
[   85.620372][ T6204] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024)
[   85.694596][ T6206] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   85.699319][ T5799] udevd[5799]: incorrect nilfs2 checksum on /dev/loop1
[   85.870753][ T6210] loop2: detected capacity change from 0 to 47
[   85.922657][ T6206] NILFS (loop1): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3)
[   85.953440][ T6206] NILFS error (device loop1): nilfs_bmap_propagate: broken bmap (inode number=4)
[   86.001295][ T6210] syz.2.130: attempt to access beyond end of device
[   86.001295][ T6210] loop2: rw=2049, sector=48, nr_sectors = 2 limit=47
[   86.021868][ T6206] Remounting filesystem read-only
[   86.059299][ T6210] Buffer I/O error on dev loop2, logical block 24, lost async page write
[   86.094592][ T6210] syz.2.130: attempt to access beyond end of device
[   86.094592][ T6210] loop2: rw=2049, sector=50, nr_sectors = 2 limit=47
[   86.125461][ T5782] NILFS (loop1): disposed unprocessed dirty file(s) when stopping log writer
[   86.132263][ T6210] Buffer I/O error on dev loop2, logical block 25, lost async page write
[   86.143440][ T6210] syz.2.130: attempt to access beyond end of device
[   86.143440][ T6210] loop2: rw=2049, sector=52, nr_sectors = 2 limit=47
[   86.159644][ T6210] Buffer I/O error on dev loop2, logical block 26, lost async page write
[   86.175085][ T5782] NILFS (loop1): discard dirty page: offset=57344, ino=15
[   86.182241][ T5782] NILFS (loop1): discard dirty block: blocknr=0, size=1024
[   86.194075][ T5782] NILFS (loop1): discard dirty block: blocknr=0, size=1024
[   86.234515][ T5782] NILFS (loop1): discard dirty block: blocknr=0, size=1024
[   86.241767][ T5782] NILFS (loop1): discard dirty block: blocknr=0, size=1024
[   86.285846][   T11] kworker/u4:0: attempt to access beyond end of device
[   86.285846][   T11] loop2: rw=1, sector=54, nr_sectors = 2 limit=47
[   86.300011][ T5782] NILFS (loop1): discard dirty page: offset=61440, ino=15
[   86.309366][ T5782] NILFS (loop1): discard dirty block: blocknr=0, size=1024
[   86.314616][   T11] Buffer I/O error on dev loop2, logical block 27, lost async page write
[   86.317155][ T5782] NILFS (loop1): discard dirty block: blocknr=0, size=1024
[   86.332558][ T5782] NILFS (loop1): discard dirty block: blocknr=0, size=1024
[   86.364543][ T5782] NILFS (loop1): discard dirty block: blocknr=0, size=1024
[   86.371795][ T5782] NILFS (loop1): discard dirty page: offset=65536, ino=15
[   86.410485][ T5782] NILFS (loop1): discard dirty block: blocknr=0, size=1024
[   86.437438][ T5782] NILFS (loop1): discard dirty block: blocknr=0, size=1024
[   86.460312][ T5782] NILFS (loop1): discard dirty block: blocknr=0, size=1024
[   86.478476][ T5782] NILFS (loop1): discard dirty block: blocknr=0, size=1024
[   86.503008][ T5782] NILFS (loop1): discard dirty page: offset=0, ino=6
[   86.520038][ T5782] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[   86.540056][ T5782] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[   86.559715][ T5782] NILFS (loop1): discard dirty block: blocknr=37, size=1024
[   86.574529][ T5782] NILFS (loop1): discard dirty block: blocknr=38, size=1024
[   86.594002][ T5782] NILFS (loop1): discard dirty page: offset=0, ino=5
[   86.611100][ T5782] NILFS (loop1): discard dirty block: blocknr=41, size=1024
[   86.628940][ T5782] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[   86.648093][ T5782] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[   86.669569][ T5782] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[   86.695202][ T5782] NILFS (loop1): discard dirty page: offset=0, ino=4
[   86.712154][ T5782] NILFS (loop1): discard dirty block: blocknr=40, size=1024
[   86.730041][ T5782] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[   86.744807][ T5782] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[   86.764212][ T5782] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[   86.785705][ T6226] loop5: detected capacity change from 0 to 2615
[   86.793206][ T5782] NILFS (loop1): discard dirty page: offset=0, ino=3
[   86.810827][ T5782] NILFS (loop1): discard dirty block: blocknr=42, size=1024
[   86.830622][ T6226] loop5: detected capacity change from 2615 to 4079
[   86.837479][ T5782] NILFS (loop1): discard dirty block: blocknr=43, size=1024
[   86.854547][ T5782] NILFS (loop1): discard dirty block: blocknr=44, size=1024
[   86.872224][ T5782] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[   86.905294][ T5782] NILFS (loop1): discard dirty page: offset=229376, ino=3
[   86.913641][ T5782] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[   86.933054][ T5782] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[   86.949217][ T5782] NILFS (loop1): discard dirty block: blocknr=50, size=1024
[   86.966967][ T5782] NILFS (loop1): discard dirty block: blocknr=0, size=1024
[   86.985967][ T5782] NILFS (loop1): discard dirty page: offset=233472, ino=3
[   87.007181][ T5782] NILFS (loop1): discard dirty block: blocknr=0, size=1024
[   87.026781][ T5782] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[   87.054623][ T5782] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[   87.094463][ T5782] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[   87.173176][ T6221] loop2: detected capacity change from 0 to 32768
[   87.203404][ T6221] XFS: noikeep mount option is deprecated.
[   87.260359][ T6230] loop0: detected capacity change from 0 to 2048
[   87.275936][ T6221] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[   87.305571][ T6230] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[   87.484774][ T6221] XFS (loop2): Ending clean mount
[   87.511086][ T6221] XFS (loop2): Quotacheck needed: Please wait.
[   87.630925][ T6221] XFS (loop2): Quotacheck: Done.
[   87.919668][ T5783] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[   87.966626][ T6250] loop3: detected capacity change from 0 to 64
[   88.765350][   T27] audit: type=1326 audit(1752661786.658:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6274 comm="syz.2.154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f659bd8e929 code=0x7ffc0000
[   88.836961][   T27] audit: type=1326 audit(1752661786.658:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6274 comm="syz.2.154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f659bd8e929 code=0x7ffc0000
[   88.871478][   T27] audit: type=1326 audit(1752661786.658:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6274 comm="syz.2.154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f659bd8e929 code=0x7ffc0000
[   88.898889][   T27] audit: type=1326 audit(1752661786.658:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6274 comm="syz.2.154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f659bd8e929 code=0x7ffc0000
[   88.927010][   T27] audit: type=1326 audit(1752661786.658:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6274 comm="syz.2.154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f659bd8e929 code=0x7ffc0000
[   88.956046][   T27] audit: type=1326 audit(1752661786.658:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6274 comm="syz.2.154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f659bd8e929 code=0x7ffc0000
[   88.981629][   T27] audit: type=1326 audit(1752661786.658:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6274 comm="syz.2.154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f659bd8e929 code=0x7ffc0000
[   89.005059][   T27] audit: type=1326 audit(1752661786.658:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6274 comm="syz.2.154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f659bd8e929 code=0x7ffc0000
[   89.027618][ T5787] usb 1-1: new full-speed USB device number 3 using dummy_hcd
[   89.067799][ T6270] loop3: detected capacity change from 0 to 32768
[   89.088046][   T27] audit: type=1326 audit(1752661786.658:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6274 comm="syz.2.154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f659bd8e929 code=0x7ffc0000
[   89.146626][ T6270] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[   89.160717][   T27] audit: type=1326 audit(1752661786.658:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6274 comm="syz.2.154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f659bd8e929 code=0x7ffc0000
[   89.248515][ T5787] usb 1-1: config 0 has an invalid interface number: 1 but max is 0
[   89.255242][ T6270] XFS (loop3): Ending clean mount
[   89.273559][ T5787] usb 1-1: config 0 has no interface number 0
[   89.280025][ T5787] usb 1-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e
[   89.292524][ T5787] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   89.306188][ T5787] usb 1-1: config 0 descriptor??
[   89.322076][ T5787] usb 1-1: selecting invalid altsetting 1
[   89.345952][ T5787] dvb_ttusb_budget: ttusb_init_controller: error
[   89.352454][ T5787] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB)
[   89.496766][ T5784] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[   89.508481][ T5787] DVB: Unable to find symbol cx22700_attach()
[   89.530218][ T5793] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[   89.656455][ T5787] DVB: Unable to find symbol tda10046_attach()
[   89.673583][ T5787] dvb_ttusb_budget: no frontend driver found for device [0b48:1005]
[   89.702757][ T5787] usb 1-1: USB disconnect, device number 3
[   89.734562][ T5793] usb 3-1: Using ep0 maxpacket: 32
[   89.744168][ T5793] usb 3-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92
[   89.773204][ T5793] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   89.811861][ T5793] usb 3-1: config 0 descriptor??
[   89.834362][ T5793] gspca_main: nw80x-2.14.0 probing 055f:d001
[   90.154737][    T8] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[   90.234945][ T6305] process 'syz.0.165' launched '/dev/fd/3' with NULL argv: empty string added
[   90.367161][    T8] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   90.393696][    T8] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[   90.405788][    T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   90.425759][    T8] usb 2-1: config 0 descriptor??
[   90.440885][    T8] pwc: Askey VC010 type 2 USB webcam detected.
[   90.529252][ T6313] loop3: detected capacity change from 0 to 1024
[   90.545528][ T6313] EXT4-fs: Ignoring removed nobh option
[   90.551709][ T6313] EXT4-fs: Ignoring removed bh option
[   90.563064][ T6313] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[   90.602718][ T6313] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   90.671030][ T5784] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   90.862005][ T5793] gspca_nw80x: reg_w err -71
[   90.869099][    T8] pwc: recv_control_msg error -32 req 02 val 2b00
[   90.882118][ T5793] nw80x: probe of 3-1:0.0 failed with error -71
[   90.890678][    T8] pwc: recv_control_msg error -32 req 02 val 2700
[   90.905715][ T5793] usb 3-1: USB disconnect, device number 2
[   91.118250][    T8] pwc: recv_control_msg error -71 req 04 val 1000
[   91.126579][    T8] pwc: recv_control_msg error -71 req 04 val 1300
[   91.127040][ T6328] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant.
[   91.127040][ T6328] The task syz.3.172 (6328) triggered the difference, watch for misbehavior.
[   91.133531][    T8] pwc: recv_control_msg error -71 req 04 val 1400
[   91.161546][    T8] pwc: recv_control_msg error -71 req 02 val 2000
[   91.170178][    T8] pwc: recv_control_msg error -71 req 02 val 2100
[   91.179931][    T8] pwc: recv_control_msg error -71 req 04 val 1500
[   91.188114][    T8] pwc: recv_control_msg error -71 req 02 val 2500
[   91.195177][    T8] pwc: recv_control_msg error -71 req 02 val 2400
[   91.202076][    T8] pwc: recv_control_msg error -71 req 02 val 2600
[   91.215610][    T8] pwc: recv_control_msg error -71 req 02 val 2900
[   91.222732][    T8] pwc: recv_control_msg error -71 req 02 val 2800
[   91.229941][    T8] pwc: recv_control_msg error -71 req 04 val 1100
[   91.245226][    T8] pwc: recv_control_msg error -71 req 04 val 1200
[   91.264372][    T8] pwc: Registered as video103.
[   91.279674][    T8] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input8
[   91.308156][    T8] usb 2-1: USB disconnect, device number 3
[   91.519811][ T6335] loop2: detected capacity change from 0 to 512
[   91.532040][ T6335] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[   91.557027][ T6335] EXT4-fs (loop2): revision level too high, forcing read-only mode
[   91.565373][ T6335] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e000e118, mo2=0002]
[   91.576935][ T6335] System zones: 0-1, 15-15, 18-18, 34-34
[   91.583083][ T6335] EXT4-fs (loop2): orphan cleanup on readonly fs
[   91.590238][ T6335] EXT4-fs warning (device loop2): ext4_enable_quotas:7173: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix.
[   91.604294][    T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x7
[   91.606885][ T6335] EXT4-fs (loop2): Cannot turn on quotas: error -22
[   91.621998][    T8] hid-generic 0000:0000:0000.0002: ignoring exceeding usage max
[   91.622033][ T6335] EXT4-fs error (device loop2): ext4_validate_block_bitmap:439: comm syz.2.175: bg 0: block 40: padding at end of block bitmap is not set
[   91.632921][    T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   91.658726][    T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x6
[   91.667580][ T6335] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6642: Corrupt filesystem
[   91.676408][    T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0xd
[   91.679068][ T6335] EXT4-fs (loop2): 1 truncate cleaned up
[   91.691355][ T6335] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   91.721825][    T8] hid-generic 0000:0000:0000.0002: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz0
[   91.729346][ T6335] EXT4-fs error (device loop2): ext4_encrypted_get_link:46: inode #16: comm syz.2.175: bad symlink.
[   91.824849][ T5783] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   91.842957][ T6340] fido_id[6340]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[   92.294778][ T5826] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[   92.355447][ T5825] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   92.405018][ T5825] hid-generic 0000:0000:0000.0003: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[   92.484546][ T5826] usb 4-1: Using ep0 maxpacket: 16
[   92.504211][ T5826] usb 4-1: config 0 has an invalid interface number: 105 but max is 0
[   92.521623][ T5826] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   92.554956][ T5826] usb 4-1: config 0 has no interface number 0
[   92.578055][ T5826] usb 4-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28
[   92.591116][ T5826] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   92.612567][ T5826] usb 4-1: Product: syz
[   92.641173][ T5826] usb 4-1: Manufacturer: syz
[   92.664519][ T5826] usb 4-1: SerialNumber: syz
[   92.676849][ T5826] usb 4-1: config 0 descriptor??
[   92.700318][ T5826] usb 4-1: Found UVC 0.00 device syz (046d:08f3)
[   92.713554][ T5826] usb 4-1: No valid video chain found.
[   92.739811][ T6367] loop0: detected capacity change from 0 to 512
[   92.764224][ T6367] EXT4-fs error (device loop0): ext4_read_inode_bitmap:140: comm syz.0.187: Invalid inode bitmap blk 4 in block_group 0
[   92.790910][ T6367] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   92.994176][ T5785] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   93.033758][ T5826] usb 4-1: USB disconnect, device number 3
[   93.244208][ T6383] netlink: 8 bytes leftover after parsing attributes in process `syz.1.191'.
[   93.467391][ T6391] loop0: detected capacity change from 0 to 64
[   93.568460][ T6393] loop1: detected capacity change from 0 to 164
[   93.610674][ T6393] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[   93.655775][ T6393] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[   93.692492][ T6393] Symlink component flag not implemented
[   93.715464][ T6393] Symlink component flag not implemented
[   93.721624][ T6393] Symlink component flag not implemented (7)
[   93.754974][ T6393] Symlink component flag not implemented (116)
[   94.239842][ T6414] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   94.447050][ T6422] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   95.723446][ T6430] loop0: detected capacity change from 0 to 32768
[   95.773726][ T6430] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.210 (6430)
[   95.861647][ T6430] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   95.900210][ T6430] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm
[   95.932913][ T6430] BTRFS info (device loop0): using free space tree
[   96.121250][ T6430] BTRFS info (device loop0): enabling ssd optimizations
[   96.138654][ T6430] BTRFS info (device loop0): auto enabling async discard
[   96.207978][ T6444] loop3: detected capacity change from 0 to 32768
[   96.240112][ T6444] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.217 (6444)
[   96.314328][ T6444] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[   96.341386][ T6444] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm
[   96.380691][ T6444] BTRFS info (device loop3): setting nodatacow, compression disabled
[   96.408969][ T6444] BTRFS info (device loop3): enabling ssd optimizations
[   96.444494][ T6444] BTRFS info (device loop3): setting datacow
[   96.465485][ T6444] BTRFS info (device loop3): doing ref verification
[   96.493780][ T6444] BTRFS info (device loop3): force clearing of disk cache
[   96.509404][ T5785] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   96.554518][ T6444] BTRFS info (device loop3): turning off barriers
[   96.583271][ T6444] BTRFS info (device loop3): using spread ssd allocation scheme
[   96.634338][ T6444] BTRFS info (device loop3): using free space tree
[   96.729877][ T6480] loop1: detected capacity change from 0 to 256
[   96.749449][ T6480] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   96.914520][ T6444] BTRFS info (device loop3): auto enabling async discard
[   96.965098][ T6444] BTRFS info (device loop3): rebuilding free space tree
[   97.210472][ T6495] overlayfs: upper fs does not support tmpfile.
[   97.369014][   T27] kauditd_printk_skb: 4 callbacks suppressed
[   97.369028][   T27] audit: type=1800 audit(1752661795.248:20): pid=6444 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.217" name="file2" dev="loop3" ino=261 res=0 errno=0
[   97.439195][ T6468] loop2: detected capacity change from 0 to 32768
[   97.495011][ T6468] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.220 (6468)
[   97.549856][ T6468] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   97.607278][ T6468] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm
[   97.630024][ T6468] BTRFS info (device loop2): setting nodatacow, compression disabled
[   97.659155][ T6468] BTRFS info (device loop2): max_inline at 0
[   97.674525][ T6468] BTRFS info (device loop2): enabling disk space caching
[   97.685843][ T6468] BTRFS info (device loop2): turning off barriers
[   97.693769][ T6468] BTRFS info (device loop2): turning on flush-on-commit
[   97.701762][ T6468] BTRFS info (device loop2): doing ref verification
[   97.741718][ T6468] BTRFS info (device loop2): force clearing of disk cache
[   97.790045][ T6468] BTRFS info (device loop2): enabling ssd optimizations
[   97.854549][ T6468] BTRFS info (device loop2): max_inline at 4096
[   97.860851][ T6468] BTRFS info (device loop2): disk space caching is enabled
[   97.976910][ T5784] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[   98.073218][ T5797] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201'
[   98.083179][ T5797] CPU: 1 PID: 5797 Comm: kworker/u5:7 Not tainted 6.6.98-syzkaller #0
[   98.091363][ T5797] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[   98.101449][ T5797] Workqueue: hci3 hci_rx_work
[   98.106191][ T5797] Call Trace:
[   98.109515][ T5797]  <TASK>
[   98.112466][ T5797]  dump_stack_lvl+0x16c/0x230
[   98.117176][ T5797]  ? show_regs_print_info+0x20/0x20
[   98.122405][ T5797]  ? load_image+0x3b0/0x3b0
[   98.126962][ T5797]  sysfs_create_dir_ns+0x256/0x280
[   98.132098][ T5797]  ? hci_rx_work+0x43a/0xd80
[   98.136719][ T5797]  ? sysfs_warn_dup+0xa0/0xa0
[   98.136735][ T6468] BTRFS info (device loop2): auto enabling async discard
[   98.141399][ T5797]  ? do_raw_spin_unlock+0x121/0x230
[   98.153634][ T5797]  kobject_add_internal+0x6b8/0xc70
[   98.158880][ T5797]  kobject_add+0x156/0x220
[   98.163326][ T5797]  ? __rwlock_init+0x150/0x150
[   98.168127][ T5797]  ? kobject_init+0x1e0/0x1e0
[   98.172836][ T5797]  ? _raw_spin_unlock+0x28/0x40
[   98.177715][ T5797]  ? get_device_parent+0x366/0x390
[   98.181577][ T6468] BTRFS info (device loop2): rebuilding free space tree
[   98.182826][ T5797]  device_add+0x408/0xc20
[   98.194453][ T5797]  hci_conn_add_sysfs+0xd5/0x1e0
[   98.199415][ T5797]  le_conn_complete_evt+0xc37/0x1220
[   98.204826][ T5797]  ? hci_event_packet+0x4a7/0x1210
[   98.209972][ T5797]  ? hci_le_big_info_adv_report_evt+0x8e0/0x8e0
[   98.216241][ T5797]  ? __copy_skb_header+0xa7/0x550
[   98.221289][ T5797]  ? __mutex_unlock_slowpath+0x1a2/0x6a0
[   98.226961][ T5797]  ? skb_pull_data+0xfb/0x200
[   98.231764][ T5797]  hci_le_enh_conn_complete_evt+0x189/0x460
[   98.237783][ T5797]  ? hci_le_remote_conn_param_req_evt+0xcc0/0xcc0
[   98.244243][ T5797]  ? hci_remote_host_features_evt+0x160/0x160
[   98.246971][ T6468] BTRFS info (device loop2): disabling free space tree
[   98.250318][ T5797]  hci_event_packet+0x795/0x1210
[   98.262129][ T5797]  ? bis_list+0x290/0x290
[   98.266487][ T5797]  ? lockdep_hardirqs_on+0x98/0x150
[   98.271712][ T5797]  ? hci_send_to_monitor+0xd7/0x4f0
[   98.276947][ T5797]  hci_rx_work+0x43a/0xd80
[   98.278938][ T6468] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[   98.281451][ T5797]  ? process_scheduled_works+0x957/0x15b0
[   98.297040][ T5797]  process_scheduled_works+0xa45/0x15b0
[   98.302646][ T5797]  ? assign_work+0x400/0x400
[   98.307261][ T5797]  ? assign_work+0x39e/0x400
[   98.311882][ T5797]  worker_thread+0xa55/0xfc0
[   98.316536][ T5797]  kthread+0x2fa/0x390
[   98.319565][ T6468] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[   98.320601][ T5797]  ? pr_cont_work+0x560/0x560
[   98.335440][ T5797]  ? kthread_blkcg+0xd0/0xd0
[   98.340053][ T5797]  ret_from_fork+0x48/0x80
[   98.344484][ T5797]  ? kthread_blkcg+0xd0/0xd0
[   98.349096][ T5797]  ret_from_fork_asm+0x11/0x20
[   98.353905][ T5797]  </TASK>
[   98.361651][ T5797] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory.
[   98.376018][ T5797] Bluetooth: hci3: failed to register connection device
[   99.037087][ T5783] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   99.440927][ T6552] batadv_slave_1: entered promiscuous mode
[   99.452576][ T6551] batadv_slave_1: left promiscuous mode
[   99.556633][ T6554] loop2: detected capacity change from 0 to 4096
[   99.562631][ T6558] loop0: detected capacity change from 0 to 512
[   99.577690][ T6554] ntfs: (device loop2): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match.  Run ntfsfix or chkdsk.
[   99.590972][ T6558] EXT4-fs (loop0): Test dummy encryption mode enabled
[   99.605625][ T6554] ntfs: (device loop2): load_system_files(): $MFTMirr does not match $MFT.  Mounting read-only.  Run ntfsfix and/or chkdsk.
[   99.619310][ T6554] ntfs: (device loop2): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn.
[   99.630958][ T6554] ntfs: (device loop2): ntfs_read_locked_inode(): Failed with error code -5.  Marking corrupt inode 0xa as bad.  Run chkdsk.
[   99.635780][ T6558] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.241: invalid indirect mapped block 2185560079 (level 0)
[   99.644614][ T6554] ntfs: (device loop2): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default.
[   99.681420][ T6558] EXT4-fs (loop0): Remounting filesystem read-only
[   99.690243][ T6558] EXT4-fs (loop0): 1 truncate cleaned up
[   99.697474][ T6558] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   99.701173][ T6554] ntfs: volume version 3.1.
[   99.723774][ T6554] ntfs: (device loop2): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty.
[   99.813802][ T6554] ntfs: (device loop2): load_system_files(): Failed to load $LogFile.  Will not be able to remount read-write.  Mount in Windows.
[   99.859818][ T6554] ntfs: (device loop2): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5.
[   99.890216][ T6554] ntfs: (device loop2): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys.
[   99.956549][ T6562] loop1: detected capacity change from 0 to 512
[   99.990699][ T5785] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  100.008228][ T6562] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  100.058885][ T6562] ext4 filesystem being mounted at /68/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  100.222981][ T5782] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  100.501142][ T6577] program syz.3.248 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  100.834628][    T8] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  100.846433][ T5787] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  100.936750][ T6595] syz_tun: entered promiscuous mode
[  100.943914][ T6595] syz_tun: left promiscuous mode
[  101.034556][    T8] usb 2-1: Using ep0 maxpacket: 8
[  101.042191][    T8] usb 2-1: config 0 has an invalid interface number: 33 but max is 1
[  101.052324][    T8] usb 2-1: config 0 has no interface number 1
[  101.061327][    T8] usb 2-1: config 0 interface 33 altsetting 0 endpoint 0x6 has an invalid bInterval 0, changing to 7
[  101.073055][ T5787] usb 1-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36
[  101.082627][    T8] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 247
[  101.092980][ T5787] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  101.105613][    T8] usb 2-1: New USB device found, idVendor=2040, idProduct=2950, bcdDevice=85.f1
[  101.116068][ T5787] usb 1-1: Product: syz
[  101.120555][ T5787] usb 1-1: Manufacturer: syz
[  101.125539][    T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  101.133549][    T8] usb 2-1: Product: syz
[  101.137844][ T5787] usb 1-1: SerialNumber: syz
[  101.145022][ T5787] usb 1-1: config 0 descriptor??
[  101.150210][    T8] usb 2-1: Manufacturer: syz
[  101.157546][ T5787] ch341 1-1:0.0: ch341-uart converter detected
[  101.164723][    T8] usb 2-1: SerialNumber: syz
[  101.171803][    T8] usb 2-1: config 0 descriptor??
[  101.189625][    T8] pvrusb2: Hardware description: WinTV PVR USB2 Model 29xxx
[  101.399956][ T2315] pvrusb2: Invalid read control endpoint
[  101.411617][    T8] pvrusb2: Hardware description: WinTV PVR USB2 Model 29xxx
[  101.435248][    T8] usb 2-1: USB disconnect, device number 4
[  101.453603][ T2315] usb 2-1: Direct firmware load for v4l-pvrusb2-29xxx-01.fw failed with error -2
[  101.470693][ T2315] usb 2-1: Falling back to sysfs fallback for: v4l-pvrusb2-29xxx-01.fw
[  101.826436][ T6611] loop3: detected capacity change from 0 to 256
[  101.846464][ T6611] exfat: Deprecated parameter 'utf8'
[  101.864763][ T6611] exfat: Deprecated parameter 'namecase'
[  101.932697][ T6611] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xb5f96684, utbl_chksum : 0xe619d30d)
[  102.181601][ T5787] ch341-uart ttyUSB0: failed to read break control: -71
[  102.199336][ T5787] ch341-uart: probe of ttyUSB0 failed with error -71
[  102.227316][ T5787] usb 1-1: USB disconnect, device number 4
[  102.246353][ T5787] ch341 1-1:0.0: device disconnected
[  102.524646][  T786] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  102.714556][  T786] usb 4-1: Using ep0 maxpacket: 16
[  102.739432][  T786] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  102.780252][  T786] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  102.805991][  T786] usb 4-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00
[  102.830439][  T786] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  102.897926][  T786] usb 4-1: config 0 descriptor??
[  102.974344][ T6622] atomic_op ffff88807dc97998 conn xmit_atomic 0000000000000000
[  102.974922][ T6619] loop1: detected capacity change from 0 to 32768
[  103.027637][ T6619] JBD2: Ignoring recovery information on journal
[  103.243856][ T6619] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  103.570607][ T6629] netlink: 16 bytes leftover after parsing attributes in process `syz.2.270'.
[  103.702654][ T6626] loop0: detected capacity change from 0 to 32768
[  103.718473][ T5782] ocfs2: Unmounting device (7,1) on (node local)
[  103.770819][  T786] letsketch 0003:6161:4D15.0004: Device info: ¥
[  103.814189][ T6626] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  103.971211][ T6626] XFS (loop0): Ending clean mount
[  104.011728][  T786] usb 4-1: Max retries (5) exceeded reading string descriptor 201
[  104.011919][ T6626] XFS (loop0): Quotacheck needed: Please wait.
[  104.031192][  T786] letsketch: probe of 0003:6161:4D15.0004 failed with error -71
[  104.061554][  T786] usb 4-1: USB disconnect, device number 4
[  104.135683][ T6626] XFS (loop0): Quotacheck: Done.
[  104.247846][ T6647] loop1: detected capacity change from 0 to 128
[  104.478967][ T5785] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  104.804632][ T6658] netlink: 4 bytes leftover after parsing attributes in process `syz.2.278'.
[  105.584517][  T786] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  105.674072][ T6683] vlan2: entered allmulticast mode
[  105.680421][ T6683] bond0: entered allmulticast mode
[  105.686057][ T6683] bond_slave_0: entered allmulticast mode
[  105.691808][ T6683] bond_slave_1: entered allmulticast mode
[  105.769101][  T786] usb 1-1: Using ep0 maxpacket: 16
[  105.779115][  T786] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00
[  105.799516][  T786] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  105.824543][  T786] usb 1-1: Product: syz
[  105.829129][  T786] usb 1-1: Manufacturer: syz
[  105.833747][  T786] usb 1-1: SerialNumber: syz
[  105.865001][  T786] usb 1-1: config 0 descriptor??
[  105.896194][  T786] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected
[  105.935131][  T786] usb 1-1: Detected FT232H
[  106.096042][  T786] ftdi_sio ttyUSB0: Unable to read latency timer: -32
[  106.107143][ T6679] loop1: detected capacity change from 0 to 32768
[  106.141504][ T6679] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  106.258550][ T6679] XFS (loop1): Ending clean mount
[  106.273349][ T6679] XFS (loop1): Quotacheck needed: Please wait.
[  106.321356][ T6679] XFS (loop1): Quotacheck: Done.
[  106.375831][ T6708] loop3: detected capacity change from 0 to 128
[  106.490482][ T5782] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  106.561512][  T786] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  106.798200][  T786] usb 1-1: USB disconnect, device number 5
[  106.829975][  T786] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  106.874774][  T786] ftdi_sio 1-1:0.0: device disconnected
[  107.340378][ T6737] syzkaller1: entered promiscuous mode
[  107.345989][ T6737] syzkaller1: entered allmulticast mode
[  107.549194][ T6742] netlink: 8 bytes leftover after parsing attributes in process `syz.3.312'.
[  107.569473][ T6742] netlink: 'syz.3.312': attribute type 30 has an invalid length.
[  107.601915][ T6742] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  107.611532][ T6742] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  107.620405][ T6742] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  107.629146][ T6742] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  107.667774][ T6742] Zero length message leads to an empty skb
[  107.893121][ T6754] netlink: 104 bytes leftover after parsing attributes in process `syz.1.318'.
[  107.906020][ T6754] netlink: 104 bytes leftover after parsing attributes in process `syz.1.318'.
[  108.169273][ T6750] loop3: detected capacity change from 0 to 32768
[  108.192139][ T6750] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop3 scanned by syz.3.316 (6750)
[  108.219971][ T6750] BTRFS info (device loop3): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[  108.230764][ T6750] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm
[  108.240971][ T6750] BTRFS info (device loop3): using free space tree
[  108.292898][ T6750] BTRFS info (device loop3): enabling ssd optimizations
[  108.320691][ T6750] BTRFS info (device loop3): auto enabling async discard
[  108.697318][ T5784] BTRFS info (device loop3): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[  109.208123][ T6801] Bluetooth: MGMT ver 1.22
[  109.410981][ T6809] loop2: detected capacity change from 0 to 8192
[  110.288661][ T6835] loop1: detected capacity change from 0 to 16
[  110.313979][ T6835] erofs: (device loop1): mounted with root inode @ nid 36.
[  110.564592][ T5787] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  110.651594][ T6849] netlink: 4 bytes leftover after parsing attributes in process `syz.1.348'.
[  110.756596][ T5787] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  110.775895][ T5787] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  110.799805][ T5787] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  110.799831][ T5787] usb 1-1: Product: syz
[  110.799845][ T5787] usb 1-1: Manufacturer: syz
[  110.799859][ T5787] usb 1-1: SerialNumber: syz
[  111.226190][ T6865] netlink: 'syz.2.353': attribute type 34 has an invalid length.
[  111.705329][ T6872] input: syz1 as /devices/virtual/input/input10
[  111.853886][ T6864] loop3: detected capacity change from 0 to 32768
[  111.860646][ T5787] cdc_ncm 1-1:1.0: bind() failure
[  111.880285][ T5787] cdc_ncm: probe of 1-1:1.1 failed with error -71
[  111.889320][ T5787] cdc_mbim: probe of 1-1:1.1 failed with error -71
[  111.899678][ T5787] usbtest: probe of 1-1:1.1 failed with error -71
[  111.912436][ T5787] usb 1-1: USB disconnect, device number 6
[  111.919459][ T6864] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  112.067661][ T6864] XFS (loop3): Ending clean mount
[  112.085881][ T6864] XFS (loop3): Quotacheck needed: Please wait.
[  112.131783][ T6864] XFS (loop3): Quotacheck: Done.
[  112.237040][ T6890] loop1: detected capacity change from 0 to 128
[  112.257585][ T6890] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256
[  112.325057][ T5784] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  112.326819][ T6890] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  112.394210][   T27] kauditd_printk_skb: 9 callbacks suppressed
[  112.394223][   T27] audit: type=1800 audit(1752661810.278:21): pid=6890 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.362" name="file1" dev="loop1" ino=94 res=0 errno=0
[  112.548224][ T6899] netlink: 68 bytes leftover after parsing attributes in process `syz.0.365'.
[  112.777248][ T6905] loop2: detected capacity change from 0 to 4096
[  112.890578][   T27] audit: type=1800 audit(1752661810.778:22): pid=6905 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.369" name="file1" dev="loop2" ino=33 res=0 errno=0
[  113.335444][ T6923] netlink: 'syz.2.379': attribute type 6 has an invalid length.
[  113.482289][ T6927] loop2: detected capacity change from 0 to 4096
[  113.514660][ T6927] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512).
[  113.624272][ T6927] ntfs3: loop2: Mark volume as dirty due to NTFS errors
[  113.653421][ T6929] loop0: detected capacity change from 0 to 4096
[  113.708492][ T6929] ntfs3: loop0: Different NTFS sector size (1024) and media sector size (512).
[  113.802674][ T6929] ntfs3: loop0: Mark volume as dirty due to NTFS errors
[  114.193344][ T6947] loop3: detected capacity change from 0 to 1024
[  114.436162][ T6947] hfsplus: inconsistency in B*Tree (1,0,1,0,1)
[  114.451391][ T6947] hfsplus: inconsistency in B*Tree (1,0,1,0,1)
[  114.505549][ T6947] hfsplus: inconsistency in B*Tree (1,0,1,0,1)
[  114.524711][ T6947] hfsplus: inconsistency in B*Tree (1,0,1,0,1)
[  114.539945][ T6947] hfsplus: inconsistency in B*Tree (1,0,1,0,1)
[  114.607184][ T6961] loop0: detected capacity change from 0 to 512
[  114.618367][ T2957] hfsplus: b-tree write err: -5, ino 4
[  114.629861][ T6961] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found
[  114.643610][ T6961] UDF-fs: Scanning with blocksize 512 failed
[  114.660527][ T6961] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found
[  114.670233][ T6961] UDF-fs: Scanning with blocksize 1024 failed
[  114.720001][ T6961] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found
[  114.737878][ T6961] UDF-fs: Scanning with blocksize 2048 failed
[  114.769125][ T6961] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256
[  114.791741][ T6961] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  115.541560][ T6981] loop3: detected capacity change from 0 to 32768
[  115.558492][ T6981] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.404 (6981)
[  115.588796][ T6981] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  115.605377][ T6981] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm
[  115.615414][ T6981] BTRFS info (device loop3): force clearing of disk cache
[  115.623298][ T6981] BTRFS info (device loop3): metadata ratio 0
[  115.631121][ T6981] BTRFS info (device loop3): enabling ssd optimizations
[  115.639027][ T6981] BTRFS info (device loop3): using spread ssd allocation scheme
[  115.648299][ T6981] BTRFS info (device loop3): using free space tree
[  115.710683][ T6985] loop0: detected capacity change from 0 to 32768
[  115.757175][ T6981] BTRFS info (device loop3): auto enabling async discard
[  115.760200][   T27] audit: type=1800 audit(1752661813.648:23): pid=6985 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.407" name="file1" dev="loop0" ino=4 res=0 errno=0
[  115.800676][ T6981] BTRFS info (device loop3): rebuilding free space tree
[  116.131756][ T5784] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  116.441813][ T7013] netlink: 12 bytes leftover after parsing attributes in process `syz.1.412'.
[  116.594900][  T786] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  116.661074][ T7020] dummy0: entered promiscuous mode
[  116.667334][ T7020] macsec1: entered promiscuous mode
[  116.673020][ T7020] macsec1: entered allmulticast mode
[  116.678799][ T7020] dummy0: entered allmulticast mode
[  116.697444][ T7020] dummy0: left allmulticast mode
[  116.702867][ T7020] dummy0: left promiscuous mode
[  116.778830][  T786] usb 3-1: Using ep0 maxpacket: 16
[  116.800265][  T786] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  116.824584][  T786] usb 3-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00
[  116.833667][  T786] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  116.856951][  T786] usb 3-1: config 0 descriptor??
[  116.875776][  T786] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input11
[  117.187794][ T5144] bcm5974 3-1:0.0: could not read from device
[  117.225078][  T786] usb 3-1: USB disconnect, device number 3
[  117.230346][ T5144] bcm5974 3-1:0.0: could not read from device
[  117.266794][ T5144] bcm5974 3-1:0.0: could not read from device
[  117.288942][ T7038] loop0: detected capacity change from 0 to 47
[  117.356480][ T7037] loop3: detected capacity change from 0 to 2048
[  117.380731][ T7038] syz.0.411: attempt to access beyond end of device
[  117.380731][ T7038] loop0: rw=2049, sector=48, nr_sectors = 2 limit=47
[  117.395739][ T7038] Buffer I/O error on dev loop0, logical block 24, lost async page write
[  117.404061][ T7037] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  117.414286][ T7038] syz.0.411: attempt to access beyond end of device
[  117.414286][ T7038] loop0: rw=2049, sector=50, nr_sectors = 2 limit=47
[  117.431153][ T7038] Buffer I/O error on dev loop0, logical block 25, lost async page write
[  117.443591][ T7038] syz.0.411: attempt to access beyond end of device
[  117.443591][ T7038] loop0: rw=2049, sector=52, nr_sectors = 2 limit=47
[  117.459396][ T7038] Buffer I/O error on dev loop0, logical block 26, lost async page write
[  117.515889][  T141] kworker/u4:5: attempt to access beyond end of device
[  117.515889][  T141] loop0: rw=1, sector=54, nr_sectors = 2 limit=47
[  117.529669][  T141] Buffer I/O error on dev loop0, logical block 27, lost async page write
[  117.632456][ T5784] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  117.869173][ T7049] netlink: 4 bytes leftover after parsing attributes in process `syz.2.427'.
[  118.040714][ T7057] netlink: 4 bytes leftover after parsing attributes in process `syz.2.430'.
[  118.474560][  T786] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  118.540845][ T7079] loop1: detected capacity change from 0 to 2048
[  118.589518][ T7079] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  118.603476][ T7079] ext4 filesystem being mounted at /118/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  118.668356][  T786] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  118.695277][  T786] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  118.721616][  T786] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  118.751580][  T786] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  118.792896][  T786] usb 3-1: SerialNumber: syz
[  118.804112][ T5782] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  119.000264][ T7092] loop0: detected capacity change from 0 to 128
[  119.024539][ T7092] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  119.059087][ T7092] ext4 filesystem being mounted at /100/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  119.084672][  T786] usb 3-1: 0:2 : does not exist
[  119.180438][  T786] usb 3-1: USB disconnect, device number 4
[  119.208665][ T5785] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  119.243619][ T6824] udevd[6824]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  119.794778][ T5825] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  119.872463][ T7122] netlink: 16 bytes leftover after parsing attributes in process `syz.0.457'.
[  119.884122][ T7122] (unnamed net_device) (uninitialized): option primary_reselect: invalid value (133)
[  120.004989][ T5825] usb 4-1: Using ep0 maxpacket: 8
[  120.008840][ T7129] loop0: detected capacity change from 0 to 2048
[  120.018848][ T5825] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  120.028078][ T7129] UDF-fs: error (device loop0): udf_process_sequence: Primary Volume Descriptor not found!
[  120.040381][ T5825] usb 4-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a
[  120.059081][ T7129] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  120.094487][ T5825] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  120.109155][   T27] audit: type=1800 audit(1752661817.988:24): pid=7129 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.460" name="file1" dev="loop0" ino=1346 res=0 errno=0
[  120.116704][ T5825] usb 4-1: config 0 descriptor??
[  120.188531][ T5825] gspca_main: vc032x-2.14.0 probing 046d:0892
[  120.481848][ T7141] loop2: detected capacity change from 0 to 16
[  120.504203][ T7141] erofs: (device loop2): mounted with root inode @ nid 36.
[  120.588429][ T7143] loop0: detected capacity change from 0 to 4096
[  120.629146][ T7141] erofs: (device loop2): erofs_init_inode_xattrs: xattr_isize 12 of nid 46 is not supported yet
[  120.696657][ T7144] erofs: (device loop2): erofs_init_inode_xattrs: xattr_isize 12 of nid 46 is not supported yet
[  120.780125][   T27] audit: type=1800 audit(1752661818.668:25): pid=7143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.465" name="file1" dev="loop0" ino=33 res=0 errno=0
[  120.949801][ T5826] hid-generic 0000:0000:0000.0005: unknown main item tag 0x7
[  120.978427][ T5826] hid-generic 0000:0000:0000.0005: ignoring exceeding usage max
[  121.001165][ T5826] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[  121.023031][ T5826] hid-generic 0000:0000:0000.0005: unknown main item tag 0x6
[  121.041507][ T5826] hid-generic 0000:0000:0000.0005: unknown main item tag 0xd
[  121.061485][ T5826] hid-generic 0000:0000:0000.0005: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz0
[  121.203268][ T7151] fido_id[7151]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  121.219066][ T5825] gspca_vc032x: reg_r err -71
[  121.223857][ T5825] vc032x: probe of 4-1:0.0 failed with error -71
[  121.263293][ T5825] usb 4-1: USB disconnect, device number 5
[  121.306989][ T7157] ������2�g�,�{: renamed from lo (while UP)
[  121.421378][   T27] audit: type=1326 audit(1752661819.308:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7160 comm="syz.1.473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14aaf8e929 code=0x7ffc0000
[  121.443645][   T27] audit: type=1326 audit(1752661819.308:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7160 comm="syz.1.473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14aaf8e929 code=0x7ffc0000
[  121.466404][   T27] audit: type=1326 audit(1752661819.308:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7160 comm="syz.1.473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f14aaf8e929 code=0x7ffc0000
[  121.492586][   T27] audit: type=1326 audit(1752661819.308:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7160 comm="syz.1.473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14aaf8e929 code=0x7ffc0000
[  121.538828][   T27] audit: type=1326 audit(1752661819.308:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7160 comm="syz.1.473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14aaf8e929 code=0x7ffc0000
[  121.575582][   T27] audit: type=1326 audit(1752661819.308:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7160 comm="syz.1.473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7f14aaf8e929 code=0x7ffc0000
[  121.606120][   T27] audit: type=1326 audit(1752661819.308:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7160 comm="syz.1.473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14aaf8e929 code=0x7ffc0000
[  121.629192][   T27] audit: type=1326 audit(1752661819.308:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7160 comm="syz.1.473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14aaf8e929 code=0x7ffc0000
[  121.674567][ T5793] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  121.841573][ T7169] loop3: detected capacity change from 0 to 16
[  121.852536][ T7169] erofs: (device loop3): mounted with root inode @ nid 36.
[  121.854840][ T5793] usb 1-1: Using ep0 maxpacket: 16
[  121.877377][ T5793] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=d3.06
[  121.887668][ T5793] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=67
[  121.897815][ T7169] erofs: (device loop3): erofs_init_inode_xattrs: xattr_isize 12 of nid 46 is not supported yet
[  121.900798][ T5793] usb 1-1: Product: syz
[  121.910581][ T7169] erofs: (device loop3): erofs_init_inode_xattrs: xattr_isize 12 of nid 46 is not supported yet
[  121.918504][ T5793] usb 1-1: Manufacturer: syz
[  121.929431][ T5793] usb 1-1: SerialNumber: syz
[  121.942103][ T5793] r8152-cfgselector 1-1: config 0 descriptor??
[  122.161487][ T5793] usbip-host 1-1: 1-1 is not in match_busid table... skip!
[  122.262170][ T7178] syzkaller1: entered promiscuous mode
[  122.275812][ T7178] syzkaller1: entered allmulticast mode
[  122.392066][ T5793] usb 1-1: USB disconnect, device number 7
[  122.500514][ T7186] input: syz1 as /devices/virtual/input/input12
[  122.938319][ T7185] loop1: detected capacity change from 0 to 32768
[  123.387412][ T5793] hid-generic 0000:0000:0000.0006: unknown main item tag 0x7
[  123.436019][ T5793] hid-generic 0000:0000:0000.0006: ignoring exceeding usage max
[  123.458343][ T5793] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  123.466696][ T5793] hid-generic 0000:0000:0000.0006: unknown main item tag 0x6
[  123.474242][ T5793] hid-generic 0000:0000:0000.0006: unknown main item tag 0xd
[  123.501336][ T5793] hid-generic 0000:0000:0000.0006: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz0
[  123.682080][ T7214] fido_id[7214]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  124.127579][ T7227] loop2: detected capacity change from 0 to 2048
[  124.146158][ T7227] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found!
[  124.183915][ T7227] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  124.494051][ T7224] loop0: detected capacity change from 0 to 32768
[  124.551969][ T7224] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  124.727245][ T7224] XFS (loop0): Ending clean mount
[  124.746784][ T7224] XFS (loop0): Quotacheck needed: Please wait.
[  124.830767][ T7224] XFS (loop0): Quotacheck: Done.
[  124.852456][ T7248] netlink: 4 bytes leftover after parsing attributes in process `syz.2.507'.
[  124.920245][ T7233] loop1: detected capacity change from 0 to 40427
[  124.930307][ T7233] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12
[  124.950612][ T7233] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  124.988736][ T7233] F2FS-fs (loop1): invalid crc value
[  124.998218][ T5797] block nbd3: Receive control failed (result -32)
[  125.016895][ T7231] block nbd3: shutting down sockets
[  125.045238][ T7233] F2FS-fs (loop1): Found nat_bits in checkpoint
[  125.066719][ T5785] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  125.192098][ T7233] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  125.200563][ T7233] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  125.268410][   T27] kauditd_printk_skb: 7 callbacks suppressed
[  125.268424][   T27] audit: type=1800 audit(1752661823.158:41): pid=7233 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.503" name="file1" dev="loop1" ino=10 res=0 errno=0
[  125.464604][ T5787] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  125.666724][ T5787] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2
[  125.686581][ T7264] o2cb: This node has not been configured.
[  125.692985][ T5787] usb 4-1: config 1 has no interface number 0
[  125.706470][ T7264] o2cb: Cluster check failed. Fix errors before retrying.
[  125.713824][ T7264] (syz.2.514,7264,0):user_dlm_register:674 ERROR: status = -22
[  125.721715][ T5787] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  125.744254][ T5787] usb 4-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping
[  125.751962][ T7264] (syz.2.514,7264,1):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "bus"
[  125.760071][ T5787] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 20300, setting to 1024
[  125.774175][ T5787] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1024
[  125.790988][ T5787] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  125.816576][ T5787] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  125.845009][ T5787] usb 4-1: Product: syz
[  125.849222][ T5787] usb 4-1: Manufacturer: syz
[  125.864794][ T5787] usb 4-1: SerialNumber: syz
[  126.000454][ T7270] loop0: detected capacity change from 0 to 2048
[  126.019250][ T7270] EXT4-fs: Ignoring removed nobh option
[  126.116414][ T7270] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  126.163947][ T7256] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  126.172162][ T7270] ext4 filesystem being mounted at /118/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  126.295411][ T5785] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  126.633770][ T7288] syz_tun: entered promiscuous mode
[  126.655066][ T7288] syz_tun: left promiscuous mode
[  126.755040][ T7291] netlink: 16 bytes leftover after parsing attributes in process `syz.2.523'.
[  126.833114][ T7256] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  126.889293][ T5787] cdc_ncm 4-1:1.1: bind() failure
[  127.155846][ T5787] usb 4-1: USB disconnect, device number 6
[  127.177388][ T7282] loop1: detected capacity change from 0 to 40427
[  127.217218][ T7282] F2FS-fs (loop1): invalid crc value
[  127.236753][ T7282] F2FS-fs (loop1): Found nat_bits in checkpoint
[  127.318046][ T7282] F2FS-fs (loop1): Start checkpoint disabled!
[  127.331597][ T7282] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6
[  127.764576][ T5787] usb 1-1: new full-speed USB device number 8 using dummy_hcd
[  127.972911][ T5787] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
Stopping sshd: [  127.972945][ T5787] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  127.972987][ T5787] usb 1-1: New USB device found, idVendor=046d, idProduct=c262, bcdDevice= 0.00
[  127.973009][ T5787] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  127.986038][ T5787] usb 1-1: config 0 descriptor??
stopped /usr/sbin/sshd (pid 5541)
OK
Stopping crond: [  128.451140][ T5787] logitech-hidpp-device 0003:046D:C262.0007: item fetching failed at offset 0/3
[  128.482648][ T5787] logitech-hidpp-device 0003:046D:C262.0007: hidpp_probe:parse failed
[  128.493295][ T5787] logitech-hidpp-device: probe of 0003:046D:C262.0007 failed with error -22
stopped /usr/sbin/crond (pid 5528)
OK
[  128.653923][ T7323] loop3: detected capacity change from 0 to 4096
[  128.667696][ T5787] usb 1-1: USB disconnect, device number 8
[  128.730597][ T7323] ntfs: volume version 3.1.
Stopping dhcpcd...
stopped /sbin/dhcpcd (pid 5453)
Stopping network: [  129.718332][ T7336] loop2: detected capacity change from 0 to 32768
[  129.771644][ T7336] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.537 (7336)
[  129.866431][ T7336] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  129.903285][ T7336] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm
[  129.956984][ T7336] BTRFS info (device loop2): turning on sync discard
[  129.963725][ T7336] BTRFS info (device loop2): setting nodatacow, compression disabled
[  129.975742][ T7336] BTRFS info (device loop2): turning off barriers
[  129.982453][ T7336] BTRFS warning (device loop2): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  129.995855][ T5795] Bluetooth: hci0: Opcode 0x206a failed: -110
[  130.002433][ T5795] Bluetooth: hci0: command 0x206a tx timeout
[  130.083443][ T7336] BTRFS info (device loop2): trying to use backup root at mount time
[  130.098608][ T7336] BTRFS info (device loop2): metadata ratio 3
[  130.107050][ T7336] BTRFS info (device loop2): enabling auto defrag
[  130.124106][ T7336] BTRFS info (device loop2): max_inline at 0
[  130.131010][ T7336] BTRFS info (device loop2): using free space tree
[  130.296106][ T2979] BTRFS warning (device loop2): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0
[  130.387824][ T7336] BTRFS error (device loop2): failed to load root extent
[  130.421726][ T7336] BTRFS warning (device loop2): try to load backup roots slot 1
[  130.433880][ T2979] BTRFS warning (device loop2): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0
[  130.455473][ T7336] BTRFS warning (device loop2): couldn't read tree root
OK[  130.462835][ T7336] BTRFS warning (device loop2): try to load backup roots slot 2

[  130.487418][ T2957] BTRFS error (device loop2): level verify failed on logical 5255168 mirror 1 wanted 0 found 1
[  130.528619][ T7336] BTRFS warning (device loop2): couldn't read tree root
[  130.559298][ T7336] BTRFS warning (device loop2): try to load backup roots slot 3
[  130.594834][ T5787] usb 4-1: new high-speed USB device number 7 using dummy_hcd
Stopping iptables: [  130.654903][ T7336] BTRFS info (device loop2): enabling ssd optimizations
[  130.696416][ T7336] BTRFS info (device loop2): rebuilding free space tree
[  130.773471][ T7336] BTRFS info (device loop2): checking UUID tree
OK
[  130.799225][ T5787] usb 4-1: Using ep0 maxpacket: 8
[  130.809782][ T5787] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  130.839833][ T5787] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  130.861600][ T5787] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  130.884557][ T5787] usb 4-1: config 1 has no interface number 1
[  130.890705][ T5787] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  130.934844][ T5787] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7
Stopping system message bus: [  130.971686][ T5787] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  130.997724][ T5787] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  131.016980][ T5787] usb 4-1: Product: syz
[  131.031902][ T5787] usb 4-1: Manufacturer: syz
[  131.040951][ T5787] usb 4-1: SerialNumber: syz
[  131.078782][ T5783] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  131.327841][ T5787] usb 4-1: 2:1 : invalid UAC_AS_GENERAL desc
[  131.391572][ T5787] usb 4-1: USB disconnect, device number 7
[  131.484923][ T6824] udevd[6824]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
done
[  131.860089][ T7389] loop0: detected capacity change from 0 to 40427
[  131.950948][ T7389] F2FS-fs (loop0): Found nat_bits in checkpoint
[  132.147469][ T7389] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  132.409248][   T27] audit: type=1326 audit(1752661830.288:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7416 comm="syz.3.552" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff75378e929 code=0x0
[  132.856381][ T7427] loop2: detected capacity change from 0 to 512
[  132.967782][ T7408] loop1: detected capacity change from 0 to 32768
[  132.990454][ T7427] EXT4-fs error (device loop2): ext4_orphan_get:1399: inode #15: comm syz.2.556: iget: bad i_size value: 38620345925642
[  133.020134][ T1277] ieee802154 phy0 wpan0: encryption failed: -22
[  133.026566][ T1277] ieee802154 phy1 wpan1: encryption failed: -22
[  133.044099][ T7427] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.556: couldn't read orphan inode 15 (err -117)
[  133.056200][ T7408] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  133.076585][ T7427] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  133.137763][ T7427] EXT4-fs error (device loop2): ext4_check_dx_root:2266: inode #2: comm syz.2.556: Corrupt dir, invalid name_len for '.', running e2fsck is recommended
Stopping klogd: [  133.245692][ T7408] XFS (loop1): Ending clean mount
[  133.271227][ T5783] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  133.282433][ T7408] XFS (loop1): Quotacheck needed: Please wait.
[  133.411151][ T7408] XFS (loop1): Quotacheck: Done.
[  133.565335][ T7457] loop0: detected capacity change from 0 to 1024
OK
[  133.587693][ T5782] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
Stopping acpid: [  133.774743][ T7457] syz.0.564: attempt to access beyond end of device
[  133.774743][ T7457] loop0: rw=2049, sector=5778, nr_sectors = 2 limit=1024
[  133.814655][ T7457] Buffer I/O error on dev loop0, logical block 2889, lost async page write
[  133.939561][ T7465] loop3: detected capacity change from 0 to 1024
[  133.949246][ T7465] hfsplus: session requires an argument
[  133.955504][ T7465] hfsplus: unable to parse mount options
[  134.064201][ T5795] Bluetooth: hci0: unexpected event for opcode 0x2060
[  134.259128][  T786] kernel write not supported for file bpf-prog (pid: 786 comm: kworker/0:2)
[  134.493115][ T7481] loop2: detected capacity change from 0 to 8192
[  134.511331][ T7484] syzkaller1: entered promiscuous mode
[  134.521894][ T7481] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  134.545021][ T7484] syzkaller1: entered allmulticast mode
[  134.568017][ T7481] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal
[  134.614698][ T7481] REISERFS (device loop2): using ordered data mode
[  134.630262][ T7481] reiserfs: using flush barriers
[  134.659264][ T7481] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  134.681469][ T7474] loop3: detected capacity change from 0 to 32768
[  134.690549][ T7481] REISERFS (device loop2): checking transaction log (loop2)
[  134.694299][ T7474] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.569 (7474)
[  134.716314][ T7481] REISERFS (device loop2): Using r5 hash to sort names
[  134.732441][ T7481] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage.
[  134.733028][ T7474] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  134.756256][ T7474] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm
[  134.767348][ T7474] BTRFS info (device loop3): setting nodatacow, compression disabled
[  134.777698][ T7474] BTRFS info (device loop3): max_inline at 0
[  134.783712][ T7474] BTRFS info (device loop3): enabling disk space caching
[  134.793027][ T7474] BTRFS info (device loop3): turning off barriers
[  134.802468][ T7474] BTRFS info (device loop3): turning on flush-on-commit
[  134.808794][   T27] audit: type=1800 audit(1752661832.698:43): pid=7481 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.572" name="file1" dev="loop2" ino=2 res=0 errno=0
[  134.815236][ T7474] BTRFS info (device loop3): doing ref verification
[  134.841714][ T7474] BTRFS info (device loop3): force clearing of disk cache
[  134.851158][ T7474] BTRFS info (device loop3): enabling ssd optimizations
[  134.862515][ T7474] BTRFS info (device loop3): max_inline at 4096
[  134.873449][ T7474] BTRFS info (device loop3): disk space caching is enabled
OK
[  135.008490][ T7474] BTRFS info (device loop3): auto enabling async discard
[  135.032226][ T7474] BTRFS info (device loop3): rebuilding free space tree
[  135.061588][ T7474] BTRFS info (device loop3): disabling free space tree
[  135.069219][ T7474] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  135.083025][ T7474] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
Stopping syslogd: stopped /sbin/syslogd (pid 5141)
OK
[  135.411157][ T7517] loop2: detected capacity change from 0 to 512
[  135.458543][ T5784] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  135.515666][ T7517] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a802c01c, mo2=0002]
[  135.523816][ T7517] System zones: 0-2, 18-18, 34-35
[  135.623718][ T7507] loop1: detected capacity change from 0 to 32768
[  135.637463][ T7507] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.578 (7507)
[  135.639075][ T7517] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  135.703085][ T7507] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  135.719334][ T7507] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm
[  135.719554][ T7517] ext4 filesystem being mounted at /154/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  135.752104][ T7507] BTRFS info (device loop1): turning on sync discard
[  135.778440][ T7507] BTRFS info (device loop1): setting nodatacow, compression disabled
[  135.804956][ T7507] BTRFS info (device loop1): turning off barriers
[  135.811426][ T7507] BTRFS warning (device loop1): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  135.815466][ T7522] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input13
[  135.910181][ T7507] BTRFS info (device loop1): trying to use backup root at mount time
[  135.920593][ T7507] BTRFS info (device loop1): metadata ratio 3
[  135.926941][ T7507] BTRFS info (device loop1): enabling auto defrag
[  135.934850][ T7507] BTRFS info (device loop1): max_inline at 0
[  135.941360][ T7507] BTRFS info (device loop1): using free space tree
umount: can't remount debugfs read-only
umount: tmpfs busy - remounted read-only
[  136.132954][   T48] BTRFS warning (device loop1): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0
[  136.198083][ T5783] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  136.224662][ T7507] BTRFS error (device loop1): failed to load root extent
[  136.224707][ T7507] BTRFS warning (device loop1): try to load backup roots slot 1
[  136.226287][ T2957] BTRFS warning (device loop1): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0
[  136.226472][ T7507] BTRFS warning (device loop1): couldn't read tree root
[  136.226492][ T7507] BTRFS warning (device loop1): try to load backup roots slot 2
[  136.227006][   T11] BTRFS error (device loop1): level verify failed on logical 5255168 mirror 1 wanted 0 found 1
[  136.227106][ T7507] BTRFS warning (device loop1): couldn't read tree root
[  136.227123][ T7507] BTRFS warning (device loop1): try to load backup roots slot 3
[  136.309332][ T7507] BTRFS info (device loop1): enabling ssd optimizations
umount: sysfs busy - remounted read-only
[  136.311186][ T7507] BTRFS info (device loop1): rebuilding free space tree
[  136.351538][ T7507] BTRFS info (device loop1): checking UUID tree
umount: devtmpfs busy - remounted read-only
umount: can't remount /dev/root read-only
[  136.481248][ T7551] loop2: detected capacity change from 0 to 2048
The system is going down NOW!
[  136.507362][ T5159] udevd[5159]: could not touch /run/udev/queue: Read-only file system
Sent SIGTERM to all processes
Connection to 10.128.10.26 closed by remote host.
[  136.595563][ T7551] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  136.686409][ T5782] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  137.691330][   T48] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
Sent SIGKILL to all processes
[  137.870834][   T48] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
Requesting system poweroff
[  137.950876][   T48] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  138.006548][   T48] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  138.898719][ T2315] pvrusb2: ***WARNING*** Device fx2 controller firmware seems to be missing.
[  138.908356][ T2315] pvrusb2: Did you install the pvrusb2 firmware files in their proper location?
[  138.917536][ T2315] pvrusb2: request_firmware unable to locate fx2 controller file v4l-pvrusb2-29xxx-01.fw
[  138.927424][ T2315] pvrusb2: Failure uploading firmware1
[  138.932902][ T2315] pvrusb2: Device initialization was not successful.
[  138.940512][ T2315] pvrusb2: Giving up since device microcontroller firmware appears to be missing.
[  138.949837][ T2315] pvrusb2: Failed to submit write-control URB status=-19
[  138.950429][    T8] pvrusb2: Device being rendered inoperable
[  138.958134][ T2315] usb 2-1: Direct firmware load for v4l-pvrusb2-29xxx-01.fw failed with error -2
[  138.973049][ T2315] usb 2-1: Falling back to sysfs fallback for: v4l-pvrusb2-29xxx-01.fw
[  138.981843][ T2315] ------------[ cut here ]------------
[  138.987393][ T2315] WARNING: CPU: 1 PID: 2315 at drivers/base/firmware_loader/fallback.c:144 firmware_fallback_sysfs+0x713/0x940
[  138.999215][ T2315] Modules linked in:
[  139.003124][ T2315] CPU: 1 PID: 2315 Comm: pvrusb2-context Not tainted 6.6.98-syzkaller #0
[  139.012375][ T2315] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  139.022581][ T2315] RIP: 0010:firmware_fallback_sysfs+0x713/0x940
[  139.028891][ T2315] Code: e7 e8 71 55 f9 ff 41 89 ef eb c1 e8 e7 1d 48 fc c6 05 54 b2 f7 08 01 48 c7 c7 00 a2 21 8b e8 64 c2 25 05 eb ac e8 cd 1d 48 fc <0f> 0b 4c 89 f7 48 c7 c6 e0 a2 21 8b 4c 89 e2 e8 09 e7 29 05 eb 91
[  139.048557][ T2315] RSP: 0018:ffffc90005bb7730 EFLAGS: 00010293
[  139.054649][ T2315] RAX: ffffffff853d88a3 RBX: dffffc0000000000 RCX: ffff888026ca9e00
[  139.062621][ T2315] RDX: 0000000000000000 RSI: 00000000fffffff5 RDI: 0000000000000000
[  139.070607][ T2315] RBP: 0000000000000001 R08: ffffffff90da669f R09: 1ffffffff21b4cd3
[  139.078584][ T2315] R10: dffffc0000000000 R11: fffffbfff21b4cd4 R12: ffffffff8b788280
[  139.086842][ T2315] R13: 0000000000001770 R14: ffff8880232a60a8 R15: 00000000fffffff5
[  139.094855][ T2315] FS:  0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000
[  139.103781][ T2315] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  139.110772][ T2315] CR2: 0000001b2d50aff8 CR3: 0000000030de1000 CR4: 00000000003506e0
[  139.118908][ T2315] Call Trace:
[  139.122220][ T2315]  <TASK>
[  139.125206][ T2315]  ? _request_firmware+0xe0c/0x1510
[  139.130405][ T2315]  ? kmem_cache_free+0xf8/0x280
[  139.135281][ T2315]  _request_firmware+0xed9/0x1510
[  139.140314][ T2315]  ? request_firmware+0x50/0x50
[  139.145213][ T2315]  ? pvr2_hdw_initialize+0x30d/0x3a90
[  139.150587][ T2315]  ? __lock_acquire+0x7c80/0x7c80
[  139.155660][ T2315]  request_firmware+0x36/0x50
[  139.160348][ T2315]  pvr2_locate_firmware+0xb3/0x500
[  139.165642][ T2315]  pvr2_upload_firmware1+0x1b5/0x900
[  139.170933][ T2315]  ? mutex_unlock+0x10/0x10
[  139.175486][ T2315]  ? pvr2_hdw_set_input_allowed+0x570/0x570
[  139.181386][ T2315]  ? lockdep_hardirqs_on+0x98/0x150
[  139.186591][ T2315]  ? verify_lock_unused+0x140/0x140
[  139.191772][ T2315]  ? verify_lock_unused+0x140/0x140
[  139.196987][ T2315]  pvr2_hdw_initialize+0x3e0/0x3a90
[  139.202183][ T2315]  ? pvr2_hdw_set_stream_type+0x420/0x420
[  139.207950][ T2315]  ? pvr2_context_thread_func+0x264/0xac0
[  139.214004][ T2315]  ? __lock_acquire+0x7c80/0x7c80
[  139.219162][ T2315]  ? rcu_is_watching+0x15/0xb0
[  139.223935][ T2315]  ? trace_contention_end+0x39/0xe0
[  139.229173][ T2315]  ? __mutex_lock+0x304/0xcc0
[  139.233862][ T2315]  ? __mutex_unlock_slowpath+0x1a2/0x6a0
[  139.239505][ T2315]  ? mutex_unlock+0x10/0x10
[  139.243996][ T2315]  ? _raw_spin_unlock_irqrestore+0xae/0x110
[  139.249995][ T2315]  ? _raw_spin_unlock+0x40/0x40
[  139.254899][ T2315]  ? finish_wait+0xc7/0x1d0
[  139.259423][ T2315]  pvr2_context_thread_func+0x482/0xac0
[  139.265032][ T2315]  ? pvr2_context_global_init+0x60/0x60
[  139.270579][ T2315]  ? _raw_spin_unlock_irqrestore+0xae/0x110
[  139.276501][ T2315]  ? wake_bit_function+0x200/0x200
[  139.281618][ T2315]  ? __kthread_parkme+0x7a/0x1c0
[  139.286597][ T2315]  kthread+0x2fa/0x390
[  139.290653][ T2315]  ? pvr2_context_global_init+0x60/0x60
[  139.296221][ T2315]  ? kthread_blkcg+0xd0/0xd0
[  139.300810][ T2315]  ret_from_fork+0x48/0x80
[  139.305269][ T2315]  ? kthread_blkcg+0xd0/0xd0
[  139.309860][ T2315]  ret_from_fork_asm+0x11/0x20
[  139.315338][ T2315]  </TASK>
[  139.318358][ T2315] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  139.325626][ T2315] CPU: 1 PID: 2315 Comm: pvrusb2-context Not tainted 6.6.98-syzkaller #0
[  139.334033][ T2315] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  139.344085][ T2315] Call Trace:
[  139.347352][ T2315]  <TASK>
[  139.350266][ T2315]  dump_stack_lvl+0x16c/0x230
[  139.354943][ T2315]  ? show_regs_print_info+0x20/0x20
[  139.360139][ T2315]  ? load_image+0x3b0/0x3b0
[  139.364649][ T2315]  panic+0x2c0/0x710
[  139.368556][ T2315]  ? bpf_jit_dump+0xd0/0xd0
[  139.373059][ T2315]  ? ret_from_fork_asm+0x11/0x20
[  139.377989][ T2315]  __warn+0x2e0/0x470
[  139.381957][ T2315]  ? firmware_fallback_sysfs+0x713/0x940
[  139.387581][ T2315]  ? firmware_fallback_sysfs+0x713/0x940
[  139.393215][ T2315]  report_bug+0x2be/0x4f0
[  139.397548][ T2315]  ? firmware_fallback_sysfs+0x713/0x940
[  139.403186][ T2315]  ? firmware_fallback_sysfs+0x713/0x940
[  139.408817][ T2315]  ? firmware_fallback_sysfs+0x715/0x940
[  139.414454][ T2315]  handle_bug+0xcf/0x120
[  139.418709][ T2315]  exc_invalid_op+0x1a/0x50
[  139.423208][ T2315]  asm_exc_invalid_op+0x1a/0x20
[  139.428049][ T2315] RIP: 0010:firmware_fallback_sysfs+0x713/0x940
[  139.434281][ T2315] Code: e7 e8 71 55 f9 ff 41 89 ef eb c1 e8 e7 1d 48 fc c6 05 54 b2 f7 08 01 48 c7 c7 00 a2 21 8b e8 64 c2 25 05 eb ac e8 cd 1d 48 fc <0f> 0b 4c 89 f7 48 c7 c6 e0 a2 21 8b 4c 89 e2 e8 09 e7 29 05 eb 91
[  139.453875][ T2315] RSP: 0018:ffffc90005bb7730 EFLAGS: 00010293
[  139.459932][ T2315] RAX: ffffffff853d88a3 RBX: dffffc0000000000 RCX: ffff888026ca9e00
[  139.467891][ T2315] RDX: 0000000000000000 RSI: 00000000fffffff5 RDI: 0000000000000000
[  139.475847][ T2315] RBP: 0000000000000001 R08: ffffffff90da669f R09: 1ffffffff21b4cd3
[  139.483804][ T2315] R10: dffffc0000000000 R11: fffffbfff21b4cd4 R12: ffffffff8b788280
[  139.491762][ T2315] R13: 0000000000001770 R14: ffff8880232a60a8 R15: 00000000fffffff5
[  139.499726][ T2315]  ? firmware_fallback_sysfs+0x713/0x940
[  139.505359][ T2315]  ? _request_firmware+0xe0c/0x1510
[  139.510542][ T2315]  ? kmem_cache_free+0xf8/0x280
[  139.515381][ T2315]  _request_firmware+0xed9/0x1510
[  139.520408][ T2315]  ? request_firmware+0x50/0x50
[  139.525252][ T2315]  ? pvr2_hdw_initialize+0x30d/0x3a90
[  139.530624][ T2315]  ? __lock_acquire+0x7c80/0x7c80
[  139.535640][ T2315]  request_firmware+0x36/0x50
[  139.540310][ T2315]  pvr2_locate_firmware+0xb3/0x500
[  139.545413][ T2315]  pvr2_upload_firmware1+0x1b5/0x900
[  139.550689][ T2315]  ? mutex_unlock+0x10/0x10
[  139.555189][ T2315]  ? pvr2_hdw_set_input_allowed+0x570/0x570
[  139.561070][ T2315]  ? lockdep_hardirqs_on+0x98/0x150
[  139.566253][ T2315]  ? verify_lock_unused+0x140/0x140
[  139.571440][ T2315]  ? verify_lock_unused+0x140/0x140
[  139.576638][ T2315]  pvr2_hdw_initialize+0x3e0/0x3a90
[  139.581834][ T2315]  ? pvr2_hdw_set_stream_type+0x420/0x420
[  139.587550][ T2315]  ? pvr2_context_thread_func+0x264/0xac0
[  139.593262][ T2315]  ? __lock_acquire+0x7c80/0x7c80
[  139.598275][ T2315]  ? rcu_is_watching+0x15/0xb0
[  139.603028][ T2315]  ? trace_contention_end+0x39/0xe0
[  139.608214][ T2315]  ? __mutex_lock+0x304/0xcc0
[  139.612907][ T2315]  ? __mutex_unlock_slowpath+0x1a2/0x6a0
[  139.618549][ T2315]  ? mutex_unlock+0x10/0x10
[  139.623061][ T2315]  ? _raw_spin_unlock_irqrestore+0xae/0x110
[  139.628961][ T2315]  ? _raw_spin_unlock+0x40/0x40
[  139.633826][ T2315]  ? finish_wait+0xc7/0x1d0
[  139.638328][ T2315]  pvr2_context_thread_func+0x482/0xac0
[  139.643885][ T2315]  ? pvr2_context_global_init+0x60/0x60
[  139.649436][ T2315]  ? _raw_spin_unlock_irqrestore+0xae/0x110
[  139.655326][ T2315]  ? wake_bit_function+0x200/0x200
[  139.660433][ T2315]  ? __kthread_parkme+0x7a/0x1c0
[  139.665407][ T2315]  kthread+0x2fa/0x390
[  139.669486][ T2315]  ? pvr2_context_global_init+0x60/0x60
[  139.675076][ T2315]  ? kthread_blkcg+0xd0/0xd0
[  139.679664][ T2315]  ret_from_fork+0x48/0x80
[  139.684079][ T2315]  ? kthread_blkcg+0xd0/0xd0
[  139.688680][ T2315]  ret_from_fork_asm+0x11/0x20
[  139.693449][ T2315]  </TASK>
[  139.696692][ T2315] Kernel Offset: disabled
[  139.701066][ T2315] Rebooting in 86400 seconds..