last executing test programs: 2m27.894394205s ago: executing program 1 (id=24): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x80042, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) writev(r0, &(0x7f0000000680)=[{&(0x7f0000000280)="445d111ed198a51712c1cf9b0305e2fad802f40d708f52fcc86440127873c7bd2985a2021f50fdf163f3f36339210420006fe3bd381425d69b3138ce66b122760b3d9d1e14f8c64f980d69e13f2d08ec41d0fd86d2f84ecc0374900781ac7cbaf5c09ba45a3f39fca46239d8ad5b708cf2bffa9d380e70c9221de387adaa0c2d7f92c67e079cd2de755eb9580c198fc2ed82da1a69a454958e9f35182e979de7", 0xa0}, {&(0x7f0000000400)="5337af4d37c7adb6d6cb3f7f98b92e09092d5c7415177a9cd3da82e3d016951b38f322e790f71d574ab6f0f55da79e9be6367af78a2a99ce494c06ab6144fd46b235b7780ddf1f6af0800b7451b85fe1bce5637667f80de4158db3", 0x5b}, {&(0x7f0000000480)="b6ae74bc9b26f973d11dcf989fff5593a05408418f3766219596b3496f166298fa94641c2bbb3b8ee85c1a41b5c619db83ed3251501b5e941cdc644e99023dd745c33d084e945262a6131970d18fb811da043a175abed72f32e469898ca92a0613ad6c9aae722ae602a34417b3e382f9bc1bc186e6625d661423da9a6122d1350a9c71b015fe55a9a8e377c586de0da69bb5639bafef9fcc1667e277c5c9816831f5d27dc48f3c5d89", 0xa9}, {&(0x7f00000013c0)="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", 0x65d}], 0x4) 2m27.187246725s ago: executing program 1 (id=26): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x311000, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000100)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43, 0x1000000}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f00000001c0)={0x43, 0x0, 0x0, 0x3}, 0x10) ioctl$VIDIOC_G_TUNER(0xffffffffffffffff, 0xc054561d, &(0x7f0000000140)={0x31f, "13f20afd86c17f9dfa507069d57c6684154bc7ec29052b9ec48e707a4f251dd9", 0x0, 0x0, 0x0, 0x0, 0x8}) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) migrate_pages(0x0, 0xf, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x2200) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r4, 0xc0505405, &(0x7f0000000040)={{0x1, 0x2, 0xaad4, 0x0, 0x7}, 0x6, 0x4, 0x9}) 2m25.487233469s ago: executing program 1 (id=30): ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000000)={0x3, 0x0, 0x0}) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000180)='./mnt\x00', 0x0, &(0x7f00000001c0)={[{@test_dummy_encryption_v1}, {@test_dummy_encryption_v1}, {@nomblk_io_submit}, {@commit}]}, 0x1, 0x241, &(0x7f0000000540)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs={0x0, 0x0, 0xb}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) io_pgetevents(0x0, 0x7, 0x0, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x413, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, 0x0) socket$can_raw(0x1d, 0x3, 0x1) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000001f40)={0x0, 0x2904c, 0x29, 0x10003, '\x00', [{0x0, 0x5, 0x0, 0xffffffffffffffff}, {0xffffffff, 0x0, 0x9, 0xa}]}) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8040, 0x0) syz_open_pts(r5, 0x141601) gettid() 2m23.933838526s ago: executing program 1 (id=34): syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000000)='./bus\x00', 0x280008a, &(0x7f0000000840)=ANY=[@ANYBLOB='shortname=lower,shortname=win95,rodir,iocharset=default,uni_xlate=0,nonumtail=1,utf8=0,flush,rodir,shortname=win95,shortname=winnt,shortname=win95,showexec,uni_xlate=0,utf8=0,utf8=0,uni_xlate=0,shortname=mixed,\x00', @ANYRES8, @ANYRES16=0x0, @ANYRESHEX=0x0], 0x1, 0x2c3, &(0x7f00000002c0)="$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") prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) open(&(0x7f0000000100)='./bus\x00', 0x24040, 0x10) 2m23.159089779s ago: executing program 1 (id=38): set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000580)='./binderfs/binder1\x00', 0x802, 0x0) r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r2 = memfd_create(&(0x7f0000000280)='y\x105\xf3\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdbU\xb1\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\x90i\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14O\xf8\xb5C\x1f\xb6b8b\x06A2@D\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\x05\x00\x00\x00\x00\x00\x00\x00\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x18\xad\xaaY\x85\x15\x95\xfe\x00\x88\xd1\x1eQB\x18\xc1-\xc4\x8fK\xf8\xfa\xb6\xf8\v;\xaa\x8fW\xcc\n\x17\x7fx\xb7\xcdqV\xd4\xf0)\xfa\x0fG\xc8\xbf\xfd\xe8>K\f\xcd+\xb0\x99Q\xba/\xa8\xb9`k\b\xd1\xcc\xfc\xeaAfC\x90%\xa1d\x91\xf8:\x16<\xad\xc2\x18\xdf\x01\xe2\x96\xfcj\xe9\xa4\x065m\x03\x05Np\xda\"\xf1\xb6\xbcP\x8fP\x8d\x89%\xf2\x12T\xd0\xc3\x15W\x9c\x87\x1b\x8c\xc9\xd9\xc6\xad\x96-d\xa2wFB\xcaB\xa5\x15\xf8,\x04\x1c*\xd98\x8bG\x90\x81`\x03\xe0J\x9c\x9a\x0f\x1b\x8f\xd2%*&$Wc\xb3\xa6\xc4TK1}2\xb3\xab\xf4\xb7\xb7\x85\apa\xaf\x1c\x10i\xb9\x9f\x06\xff4$\"7f \x0e\xf5Bk\r\xac\"\x13tNx\xc0$\x85\x9f\xe5\x1f_J\xd0=U\x88t\xe7\xab\xbb\x93J\xff\x923\xd5\xc7\xc8\xef\x00c3\xea\xab\xb4\'\bY}\x1f\x80v\r\xa8\xe4>\x185|\nF\xabB\x94\x0e_\x00\x8b\x95\x85\xbbE\\\x1a\xf8\xefI h\xd4\xf7\x8fo\xd3f\x7f\xc6M>\xd3\xa3S\xf3\xe1\xb4\xe4>P\x88\xfat\x86_wYv0i\x04JZ\xde\x1c\xb1qA\xceEj\x9b\vA\xf7.d\x80ni\xe5?\xe9\x89+\x1e;|M`/1\xba\x8cHd\x88\x990e[[\xb2X`\xda\xad;>N\x9f\xfb-\xf6\x96\xd6o,^\x8a\xea\f\x03\xfcU\x01%<{g\xdc\x14\x00O\x88\\\x19\xa9D\xde\xf1\xceE\xbc\xad\x00\x00\x00\x00', 0x3) ftruncate(r2, 0xffff) fcntl$addseals(r2, 0x409, 0x7) r3 = ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000100)={r2, 0x0, 0x0, 0x8000}) socket$nl_generic(0x10, 0x3, 0x10) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000080)=0x1) close_range(r0, 0xffffffffffffffff, 0x0) 2m18.902766594s ago: executing program 1 (id=47): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_io_uring_setup(0x7831, 0x0, 0x0, 0x0) r3 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r3, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) 2m18.316190019s ago: executing program 32 (id=47): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_io_uring_setup(0x7831, 0x0, 0x0, 0x0) r3 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r3, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) 11.133650358s ago: executing program 2 (id=468): syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000280)='./file0\x00', 0x3200c00, &(0x7f0000000340)=ANY=[], 0x2, 0xac6, &(0x7f0000001400)="$eJzs3U2MG1cBAOBn73qTzQ9xSkKXJDQJP2356W6zWcJPBE3VXIiailulikuUpiUiDYhUglaVmuTUG61KkDhBEaciUQFCai8o6olLJRqJS0+FA0JEQYrEAUoTV9l9zzt+sTNex1nb6++T3j6/eTN+b2bH4/HMvPcCMLaqi38XFmYqIVx469XD/7r3H9M3pjzUnKO++HeykKqFECoxPZm93/sTS/G1qy8cbxdXwvzi35QOj11pLrsxhHA27AkXQz3suHDplXfmHz167sj5ve++fvDynVl7AAAYL9++eHBh+9/+snPrB2/ccyisa05P5+f1mN4Uz/sPxRP/dP5fDa3pSiEUTWXzTcZQzeabaDNfsZxaNt9kh/KnsvetNfN3tsy3rqT8icK0dusNoyztx/VQqc62pKvV2dml3+Rh8Xf9VGX29MlTT50ZUEWBvvvP7sJ32R7hFuFsMd1oNF60zYRRD40tvR451vfpCASwJL9feJOz+ZWF29N8t8nuyr/ycLX98tAHq73/K3+0yv/1OUcc+met7k1pvdLnaFNM5/cR8ueXVvr5T++X34+odVnPTvcRRuX+Qqd6TqxyPXrVqf75frFWfSPGaTt8M8svfn7y/+mo/I+B9v67u4frhld7WOa16f5dt/xp78vuGYJrrms61IagDkIWppc+7G3yGoM+AAFDa/m5uSWNKOXnz/Xl+etK8teX5E+X5G8oyd9Ykg/j7A/P/iS8XFn+nZ//pl/p9bB0nW1zjD+2wvrk1yO7Kr/wDEP+3O9K9VR+Qf48MQyzN489fuKrTz5xaen5/0pz/78e9/c9MV2Pn62LcYZ0vTC/rt589r/eWk61w3x3ZfXZfNP8jaUSt7XOV9m2/D6hcJy5qR4zrctt6TTfrtb56tl80zHkTz3l5ycbsuXS+Uc6rqbtNZmtby1bj6msHum4sjXGnr6iH9L+2On5/7R/zoRa5amTp048GNNpP/3zRG3djen7im/6m9WpO3B7um3/MxNa2/9sak6vVYvHhS3L0yvF40I9mz6/lGzeJk/T98d0+p777sT04vTZ498/9WS/Vx7G3Jnnnv/esVOnTvzQi/RieiQ2SzpyDkt9unnxYWMoquFFNy/Kjhxr9clBGB9zzz7zg7kzzz3/wMlnjj194ukTp/cfOLB/fv7A1/YvzC2e188Vz+6BtWT5S3/QNQEAAAAAAAAAAAC69aMjhy/99e2vvLfU/n+5/V9q/5+e/E3t/1/K2v/n7eRTq4DUDnBrm/zFcffebK3HVDZfLYaPZ/XdlpWzPVvuEzFujuMX2/+n9vZ5v66pPndn0/P+e9N8WXcCN/WXMpX1QdIcLzA22P90TJ+P8a8CDFBluv3kGN+yf+vfvtScP/VPoV+K0ZT+b2lvSP2YpPbfnfp1Ssf/ratQR/pvNZoTDnodgfb+3Uv/3ylMrEbfxYUz8dt+r39u7s/7tA2NxsD7eW4Jkz0td+e2jzCEodEwigcwHAY9/me67pni03/61vobIc125eHW42XefyncjmEff1L5a2v8z+b4d10d/9r0rt7Sz3P3oyv87xeX3ysUG3Z0e/zN1z/1A72tvMyiD2L5af3vC92V33gtKz+/IdSl/2flb+iy/JvWf1dv5X8Yy0+b7f7PdFv+Uo0r1dZ65NeN0/2//Lpxci1b/9S354rXv8eBGq/H8mGcdR5nttsRbIdTu/F/J4dw/N9O8ucwvhzT6UCYnnPIv5FXWv/0fEX6HtievX+l5PttVMYp7mTcx//9eozLPg9p/N+0P9bbpKuFdK3Nth31fQXWmvfT/b9q7/cQfr5u8PcxhiacHYI6CEMa+jgGdp9Co9EYaEfeehEfrEFv/1vffW4zmmLjxVUs/84b9PYvk4//m5/D5+P/VrMfEPn4v/ny+fi/eX4+vl6en4//m2/PfPzfPP/u7H3zK9gzJfmfLMnfUZK/czl/ul3+rpLlP1WSv7ck/56S/N0l+XeV5E+U5H+2JP9zJfn3luTfX5L/+ZL8tW6xPUrhQzVu6w/jLG+f5/MP42Px/k/hJlL++U/3hRwfYO352Rv7Hnni99+pL7X/n2r+Xkv38Q7FdC3+dv5xTOf3vUMhfSPv7Zj+e5Y/7Nc7YJzk/Wfk3+/3leQDoys95+XzDWOo0r7Hnvx+W6d+qzqd5zNavhDjL8b4SzF+IMazMZ6L8b4Yz69S/bgzHvndHw++XFn+vb8ly+/2efK8PVDeT9T+LuuTXx9Y6fPseT9+K3W75ffYHAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGBgqot/FxZmKiFceOvVw48fPTl3Y8pDzTnqi38nC6lac7kQHozxRIx/GV9cu/rC8WJ8PcaVMB8qodKcHh670ixpYwjhbNgTLoZ62HHh0ivvzD969NyR83vfff3g5Tu3BQAAAGDt+ygAAP//0RceDw==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x125042, 0x2c) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x105042, 0x143) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r1, 0x0) pipe2$9p(0x0, 0x0) write$P9_RSETATTR(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x32600) 10.15717475s ago: executing program 2 (id=471): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r1 = fcntl$dupfd(r0, 0x0, r0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000240)={0x3, 0x40, 0xfa02, {{0x6000000, 0x4e21, 0x40003, @empty}, {0x2, 0xfff9, 0xc00, @mcast2}, 0xffffffffffffffff, 0x2}}, 0x48) 9.132322225s ago: executing program 2 (id=476): sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@bridge_newneigh={0x1c, 0x1c, 0x401, 0x70bd29, 0x25dfdbfd, {0x7, 0x0, 0x0, r1, 0x80, 0x0, 0x9}}, 0x1c}, 0x1, 0x0, 0x0, 0x40801}, 0x20000040) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r2, 0x0, 0xd}, 0x18) r3 = syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0) pread64(r3, 0x0, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r5 = socket(0x2b, 0x80801, 0x1) connect$inet6(r5, &(0x7f00000001c0)={0xa, 0x4e23, 0x3ff, @empty, 0xfffffffe}, 0x1c) setsockopt$IP_VS_SO_SET_STARTDAEMON(r5, 0x0, 0x48b, &(0x7f0000000000)={0x2, 'geneve0\x00', 0x2}, 0x18) r6 = userfaultfd(0x801) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x48c}) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x3000046, &(0x7f0000000bc0)={[{@dioread_nolock}, {@data_err_abort}, {@inlinecrypt}, {@noauto_da_alloc}, {@data_err_ignore}, {@nojournal_checksum}, {@errors_remount}, {@grpquota}, {@noblock_validity}, {@user_xattr}, {@nombcache}, {@errors_remount}]}, 0x11, 0x553, &(0x7f0000001080)="$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") r7 = open(&(0x7f0000000000)='./file1\x00', 0x143142, 0x80) ioctl$FS_IOC_FIEMAP(r7, 0xc020660b, &(0x7f00000004c0)=ANY=[]) getdents64(r4, &(0x7f00000002c0)=""/191, 0xbf) r8 = syz_open_dev$vbi(&(0x7f00000000c0), 0x3, 0x2) ioctl$VIDIOC_S_PARM(r8, 0xc0cc5616, &(0x7f0000000200)={0x1, @output={0x0, 0x1, {0x32, 0x4}, 0x6, 0x1}}) epoll_pwait(r4, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}], 0x7, 0x400, &(0x7f0000000080)={[0x4]}, 0x8) pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCGRS485(r9, 0x542e, &(0x7f0000000000)) 9.120052935s ago: executing program 5 (id=477): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(r2, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x10040881) read$FUSE(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x67) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) timer_create(0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, 0x0}) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x2010042, &(0x7f0000000000)) mount(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x40078, 0x0) mount$9p_rdma(&(0x7f00000000c0), &(0x7f0000000300)='./file0\x00', &(0x7f0000000340), 0x10400, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=rdma,port=0x0000000000004e24,posixacl,smackfsroot=+%,rootcontext=user_u,meas', @ANYRESDEC, @ANYBLOB='\x00\x00']) ioctl$HCIINQUIRY(r3, 0x400448ca, 0x0) ioctl$sock_bt_hci(r3, 0x400448c9, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x0) 7.335766583s ago: executing program 2 (id=480): capset(0x0, &(0x7f00000000c0)={0x1fffff, 0x200000, 0x28}) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x4000000) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x6, &(0x7f0000000000)=0x9, 0x8, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) 6.772120107s ago: executing program 2 (id=482): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x2200) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r3) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="310300000000fcdbdf250900000008000300", @ANYRES32=r5, @ANYBLOB="080006"], 0x24}}, 0x8) 6.374408184s ago: executing program 5 (id=487): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x46, 0x0, 0x0) getsockopt$inet6_int(r0, 0x29, 0x46, 0x0, &(0x7f0000000640)) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setgroups(0x41b7, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0]) 5.675150254s ago: executing program 0 (id=489): sendmsg$inet(0xffffffffffffffff, 0x0, 0x600) syz_mount_image$btrfs(&(0x7f0000000280), &(0x7f0000005600)='./file0\x00', 0x0, &(0x7f0000000000)={[{@device={'device', 0x3d, './file2'}}], [{@hash}, {@subj_role={'subj_role', 0x3d, 'device'}}, {@dont_measure}]}, 0x1, 0x55b1, &(0x7f0000005680)="$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") 5.448937334s ago: executing program 5 (id=491): sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@bridge_newneigh={0x1c, 0x1c, 0x401, 0x70bd29, 0x25dfdbfd, {0x7, 0x0, 0x0, r1, 0x80, 0x0, 0x9}}, 0x1c}, 0x1, 0x0, 0x0, 0x40801}, 0x20000040) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r2, 0x0, 0xd}, 0x18) r3 = syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0) pread64(r3, 0x0, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r5 = socket(0x2b, 0x80801, 0x1) connect$inet6(r5, &(0x7f00000001c0)={0xa, 0x4e23, 0x3ff, @empty, 0xfffffffe}, 0x1c) setsockopt$IP_VS_SO_SET_STARTDAEMON(r5, 0x0, 0x48b, &(0x7f0000000000)={0x2, 'geneve0\x00', 0x2}, 0x18) r6 = userfaultfd(0x801) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x3000046, &(0x7f0000000bc0)={[{@dioread_nolock}, {@data_err_abort}, {@inlinecrypt}, {@noauto_da_alloc}, {@data_err_ignore}, {@nojournal_checksum}, {@errors_remount}, {@grpquota}, {@noblock_validity}, {@user_xattr}, {@nombcache}, {@errors_remount}]}, 0x11, 0x553, &(0x7f0000001080)="$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") r7 = open(&(0x7f0000000000)='./file1\x00', 0x143142, 0x80) ioctl$FS_IOC_FIEMAP(r7, 0xc020660b, &(0x7f00000004c0)=ANY=[]) getdents64(r4, &(0x7f00000002c0)=""/191, 0xbf) r8 = syz_open_dev$vbi(&(0x7f00000000c0), 0x3, 0x2) ioctl$VIDIOC_S_PARM(r8, 0xc0cc5616, &(0x7f0000000200)={0x1, @output={0x0, 0x1, {0x32, 0x4}, 0x6, 0x1}}) epoll_pwait(r4, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}], 0x7, 0x400, &(0x7f0000000080)={[0x4]}, 0x8) pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCGRS485(r9, 0x542e, &(0x7f0000000000)) 4.530419874s ago: executing program 5 (id=493): sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\x00', @ANYRES16, @ANYBLOB="020026bd7000fddbdf25070000000800020004000000140006002001000000000000000000000000000206000b002a00000008"], 0x6c}, 0x1, 0x0, 0x0, 0x10}, 0x40090) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e9"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x8, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x4}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x40f00, 0x24, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) ioctl$KVM_RUN(r3, 0xae80, 0x0) 4.172180199s ago: executing program 0 (id=495): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000003140)='./bus\x00', 0x1008002, &(0x7f0000000400)={[{@grpquota}, {@delalloc}, {@resuid}, {@errors_remount}, {@dioread_nolock}, {@nojournal_checksum}, {@nomblk_io_submit}, {@noauto_da_alloc}]}, 0x1, 0x5d8, &(0x7f00000005c0)="$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") lchown(&(0x7f0000000080)='./file1\x00', 0xee00, 0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) 4.056078294s ago: executing program 0 (id=497): bind$alg(0xffffffffffffffff, &(0x7f0000000a00)={0x26, 'hash\x00', 0x0, 0x0, 'md5\x00'}, 0x58) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58fe7ab67a988db6}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="b70000000000002f83dc12903047236626c3714a9100611190"], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, &(0x7f0000000280)="f30f1bf066b9034d564b0f32f30f7f0266b80500000066b9b4e963a60f01c166b96a09000066b81080000066ba000000000f30d3c23e0fc71f360f50c9ba4200ed66b80500000066b922cd00000f01d9", 0x50}], 0x1, 0x16, 0x0, 0x0) ioctl$sock_bt_bnep_BNEPCONNADD(0xffffffffffffffff, 0x400442c8, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0500000005006159575791be29e4adeb34b82f35dec5779d7ffab125c40a9217c7d137885adda4962e75a23af7f754a7685d4a945ade3c8bba2351969478b2c18bbe52b0ca56723f671fc278e2f02ba6b0ed3313d5c0513de45f099e045dd6b626f1413da238"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r2, 0x4068aea3, &(0x7f00000002c0)={0xbe, 0x0, 0x1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.896850491s ago: executing program 2 (id=498): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(r3, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x10040881) read$FUSE(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x67) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) timer_create(0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, 0x0}) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x2010042, &(0x7f0000000000)) mount(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x40078, 0x0) mount$9p_rdma(&(0x7f00000000c0), &(0x7f0000000300)='./file0\x00', &(0x7f0000000340), 0x10400, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=rdma,port=0x0000000000004e24,posixacl,smackfsroot=+%,rootcontext=user_u,meas', @ANYRESDEC, @ANYBLOB='\x00\x00']) ioctl$HCIINQUIRY(r4, 0x400448ca, 0x0) ioctl$sock_bt_hci(r4, 0x400448c9, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x0) 3.823182234s ago: executing program 5 (id=499): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f00000020c0)=[@in6={0xa, 0x4e20, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1}], 0x1c) listen(r0, 0xfff) openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x2ca043, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) syz_emit_ethernet(0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x20000840) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000300), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a00100000000280", 0x2a}, {&(0x7f0000000400)="6a6f8e5e", 0x4}], 0x2}, 0x0) 3.822913044s ago: executing program 4 (id=500): socket$kcm(0x2, 0x200000000000001, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x311000, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000100)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f00000001c0)={0x43, 0x0, 0x0, 0x3}, 0x10) ioctl$VIDIOC_G_TUNER(0xffffffffffffffff, 0xc054561d, &(0x7f0000000140)={0x31f, "13f20afd86c17f9dfa507069d57c6684154bc7ec29052b9ec48e707a4f251dd9", 0x0, 0x0, 0x0, 0x0, 0x8}) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) migrate_pages(0x0, 0xf, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x2200) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r4, 0xc0505405, &(0x7f0000000040)={{0x1, 0x2, 0xaad4, 0x0, 0x7}, 0x6, 0x4, 0x9}) 3.732920348s ago: executing program 0 (id=501): socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) socket$netlink(0x10, 0x3, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r4, @ANYBLOB="1f003300d000000008021100000108021100000050505050505000001502", @ANYRES8=r2], 0x3c}, 0x1, 0x0, 0x0, 0x8800}, 0x10) 3.564403996s ago: executing program 0 (id=502): syz_mount_image$hfs(&(0x7f0000002c80), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000002cc0)=ANY=[], 0xfd, 0x298, &(0x7f0000000240)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e25}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) prlimit64(r0, 0xa, &(0x7f0000000140)={0x1, 0x7fff}, 0x0) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0x10) r4 = syz_open_dev$loop(0x0, 0x200, 0x80040) ioctl$BLKREPORTZONE(r4, 0xc0101282, 0x0) 2.569211339s ago: executing program 4 (id=503): sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@bridge_newneigh={0x1c, 0x1c, 0x401, 0x70bd29, 0x25dfdbfd, {0x7, 0x0, 0x0, r1, 0x80, 0x0, 0x9}}, 0x1c}, 0x1, 0x0, 0x0, 0x40801}, 0x20000040) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r2, 0x0, 0xd}, 0x18) r3 = syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0) pread64(r3, 0x0, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r5 = socket(0x2b, 0x80801, 0x1) connect$inet6(r5, &(0x7f00000001c0)={0xa, 0x4e23, 0x3ff, @empty, 0xfffffffe}, 0x1c) setsockopt$IP_VS_SO_SET_STARTDAEMON(r5, 0x0, 0x48b, &(0x7f0000000000)={0x2, 'geneve0\x00', 0x2}, 0x18) r6 = userfaultfd(0x801) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x3000046, &(0x7f0000000bc0)={[{@dioread_nolock}, {@data_err_abort}, {@inlinecrypt}, {@noauto_da_alloc}, {@data_err_ignore}, {@nojournal_checksum}, {@errors_remount}, {@grpquota}, {@noblock_validity}, {@user_xattr}, {@nombcache}, {@errors_remount}]}, 0x11, 0x553, &(0x7f0000001080)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8Hbjkn9ybnfnPv9/TcnBsSwNCayP4UIl6OiG+SiIMRkeTrRiNfObG23er9q7PZkkSj8elfSXO7rN56rdbz9ueVlyLit68ijhc2tltbXlkolcvpYl6frFcuTdaWV05cqJTm0/n04vTMzKm3Z6bfe/edvsX6xtl/vv/k9oenvj66+t0vdw/dTOJ0HMjXtcfxBK61VyZiIn9PxuL0IxtO9aGxnSQZ9A6wLSN5no9F1gccjJE864H/vy8jogEMqUT+w5BqjQNa1/Z9ug5+btz7YO0CaGP8o2ufjcSe5rXRvtXkoSuj7Hp3vA/tZ238+uetm9kS/fscAmBL165HxMnR0Y39X5L3f9t3sodtHm1D/wfPzu1s/PNmp/FPYX38Ex3GP/s75O52bJ3/hbt9aKarbPz3fsfx7/qk1fhIXnuhOeYbS85fKKdZ3/ZiRByLsd1ZfbP5nFOrdxrd1rWP/7Ila781Fsz34+7o7oefM1eql54k5nb3rke80nH8m6wf/6TD8c/ej7M9tnEkvfVat3Vbx/90NX6KeL3j8X8wo5VsPj852TwfJltnxUZ/3zjye7f2Bx1/dvz3bR7/eNI+X1t7/DZ+3PNv2m3dQ/FH7+f/ruSzZnlX/tiVUr2+OBWxK/l44+PTD57bqre2z+I/dnTz/q/T+b83Ij7vMf4bh39+taf4B3T85x7r+D9+4c5HX/zQrf3e+r+3mqVj+SO99H+97uCTvHcAAAAAAACw0xQi4kAkheJ6uVAoFtfu7zgc+wrlaq1+/Hx16eJcNL8rOx5jhdZM98G2+yGm8vthW/XpR+ozEXEoIr4d2dusF2er5blBBw8AAAAAAAAAAAAAAAAAAAA7xP4u3//P/DEy6L0Dnjo/+Q3Da8v878cvPQE7kv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX509cyZbGqv3r85m9bnLy0sL1csn5tLaQrGyNFucrS5eKs5Xq/PltDhbrWz1euVq9dLUdCxdmayntfpkbXnlXKW6dLF+7kKlNJ+eS8eeSVQAAAAAAAAAAAAAAAAAAADwfKktryyUyuV0UUFhW4XRnbEbCn0uDLpnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAH/gsAAP//6AY3sQ==") r7 = open(&(0x7f0000000000)='./file1\x00', 0x143142, 0x80) ioctl$FS_IOC_FIEMAP(r7, 0xc020660b, &(0x7f00000004c0)=ANY=[]) getdents64(r4, &(0x7f00000002c0)=""/191, 0xbf) r8 = syz_open_dev$vbi(&(0x7f00000000c0), 0x3, 0x2) ioctl$VIDIOC_S_PARM(r8, 0xc0cc5616, &(0x7f0000000200)={0x1, @output={0x0, 0x1, {0x32, 0x4}, 0x6, 0x1}}) epoll_pwait(r4, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}], 0x7, 0x400, &(0x7f0000000080)={[0x4]}, 0x8) pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCGRS485(r9, 0x542e, &(0x7f0000000000)) 2.554702889s ago: executing program 3 (id=504): mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x11c0, 0x0) syz_mount_image$hfs(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', 0x200000, &(0x7f0000000ac0)={[{@uid}, {@dir_umask={'dir_umask', 0x3d, 0x7}}, {@iocharset={'iocharset', 0x3d, 'euc-jp'}}, {@codepage={'codepage', 0x3d, 'cp869'}}, {@file_umask={'file_umask', 0x3d, 0xd}}, {@uid}, {@part={'part', 0x3d, 0x2}}, {@creator={'creator', 0x3d, "8c10b081"}}]}, 0x2, 0x36b, &(0x7f0000000280)="$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") 2.412109935s ago: executing program 5 (id=505): sched_setscheduler(0x0, 0x2, 0x0) syz_mount_image$ocfs2(&(0x7f0000004740), &(0x7f0000004780)='./file0\x00', 0x100000a, &(0x7f00000002c0)=ANY=[@ANYBLOB='journal_async_commit,heartbeat=none,usrquota,barrier=000000000\x000000000007,heartbeat=none,nointr,\x00'], 0x1, 0x4703, &(0x7f0000004800)="$eJzs212IXFcBB/BzJ6vZpMl2P9ImafoxSQQXLcumT9X6ENeqjabNh7bVVFlnN9vN6uzMujujBYPUIIiCoARBxQ+qQulLLYiBvtQiFPxAWoVSUbS+iBSq4INBG+jKzNybnXtntneyk7S0/f2gnb3n3nPumf3vPXfOPZNCrHZqYaW4sFIsVYrV2ftXbil+rlquL86FwqvktT4/vbkSOcn+tXPkfR/4yD23hPCHY1/70Orq6mpoGA5dHWj7+fy/T8+2vyYKmTqNdru31vLH+iMv/fwtr3REnhMhhB0d/WrYFEL42C9C2BxCGInLRuPXLSGEbSGEKITw6G/+9ePBfrrQ5uy9Lzx37MzhfWemHn/smQvzR9c9MArhu+XdN88vvrh/023Pv+MynR4AAF7RB48fufvo5IHwZBSGzg10fl7fGb8mn4/vfNun7np4YG3/Kr3Z9CqGCgAAABlr8//h6OUu63XJylqyJPjEAyfufipa229i+/p26K4jt79/8kC8/ht17L81Lvrnezc111Cz677Z9d+RTP3u679r53n4q8/+svLWjfc/6V9y3uEQFSZS24XCxEQIx6Za27uirYVydaX2zvur9crJjZ/3jSKdf3b1fm1Bv9f8RzPV89b/d3/i8z/bMtDPOxgL2b/axnax80+ZLtL5rz+W/+RLUU/5j2Xq5eV/x9Pbz/9qcz/vIHtGLkU6/9aFuK/9gGJrAGjk/82B/Px3ZNrPy//7U+cePbGB7/80xpnhqNHXwdQI8HJcvs5XmMhI598KIjV0xr/I9a7//2XyvybTfl7+d1b/8bu/9XH/X2/8H5/qp803j3T+rSCKqSPWrv+RQv71f22m/bz8f3vqz89+sq97dWf+jf6Pu//3JJ1/fCNOD57N32Sv4//OTPt5+e8au++hhQ30+8Nb4n4ORWGs7Vun5xq3sKG19ermlKaxe2kDJ3kTSOff+q2lLp2h1kvz+h/OH/93ZdrPy/+hPV9/z+m+vv/bffyfNP73JJ3/lmbZpeT/Uib/3Zn28/L/4em//+W+yzz+N7YPyr8n6fy3duxfe/5T6Gn+d12mft7zn32jTz3y1z7m/0n/kvMmz3+S5xDjUev5D92l879q3eN6vf/vydTLu/6/9Z/nn97fz/gfDXoC0Id0/ttahV0mgL3mf32m/bz8v3DPlz/+pw3M/5qf+AaT/Nvm/5tb5UeN/z1J57+9VZj6x1APNv/fvP9Hnbn/N5P/DZn28/K/cGhi4CuX+f7f6P94l0fZdErnP7TucY38f9/D/f/GTL28/L+496cv3tzX5/8QJs31Nyyd/9XrHte8/gfz878pUy8v/+9849dPPNhH/9/eR12y+bfu9anLKf5s3uv8v5hpPy//H42fP7v/Csz/bnX/70k6/9aq+aXkn53/7820n5f/9478YHngCjz/uUP+AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGzIavw6HqDCR2i4UJiZCGIu3d4Wt0Uzp5PRMuTr7mZUQdsTlxTAazZerM6Xy9EKlenJuulQuV2dDuCbevyMMRivlam16sbR07cW2tkSn5krLtZm5Ui2EsDMuvz5sT9qaWagtlpaaxyZ1ropKn61Xa6WJ+srccth9sXxbUj6/XK0vXXexrasL1eWlU6XK9MmF5XdPTk5Ohj0X+zwSzT1Qm6vUWr1t7W3USeoOR21vprn7hrbzfbpaX66Uys3yG9vqlKuzpXJbnZvazldbrldmS7W56XJ1Pjlfsa1u23tr7t4b7xsPI6n3l9TNOhi/3n7o+EePHz7Qsb8YpfOu1BfnJrd3/5sAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4I3rydve9e0QwkBrqxBCOJj8EMX/pZy994Xnjp05vO/M1OOPPXNh/mi3YwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4PztwIAAAAAAA5P/aCFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVXYuZ+XKro4DsBnxve+FkgpbYRcBoaI6E7Cgn4RSeU1smWb1kGtEjIoCgwjWhYEQVC7qCBoFVT+BVELl62qTS1aGERQMTqTlzvCDS90zHkeGM4Mc++ZLwzcO3M+hwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALB+nN2x2JW1l3ZtXtq6+0PozM/9H0IYTZb3P+/tCD0hhK9fZk6HVdpCT1P/bybnxstXTX7v7R9/eH00WXv9xXeL63aHJB1qON6ZpOnQ0Nr736juDD6bHkxCSGMXQhQLY0/O1EIIHbELIYqfH+cvZr/v/8UuhCj6P9ztyu5/LXYhRLF196e+Wv6MR/Wcr18YbPzvb/UI3sYjOuvQ25NX3qVuauW9zN//k3zzPlgNsyeOvH8euwiimZ2bOhq7BgAA4O861yL/D1uW9+9fTkJPdzn3/9aU//c29b96/r/i3vYbYzNthRDbSmOT2fHwvnb63PhODVy9/bpmvKeq5P/VJv+vNvl/tcn/q03+X23yfzKv5P+V9PjmnsUXsYsgGvk/AABUz6HjE1P14ZHs5X/Tj85yXt+Xt/U8T39wa3rgUcO4kfzw33b42MSBg8Mj+X0vDwiurP+QLp39ns/3aG4Lk03zLlqt/9D7dGH+Wmf5E/U/nL9R1Fdc1/oPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAvdueehkEwCsPod1sRtdGqaMLCT4IPNDAiACnMaEAHEwZgIAQUMJBzlnuTZ3kBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA5/tXeV18f2mM9Foj0lR22bV/jqfZz9y3w/I+e9y4FQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADZ24EAGAAAAQJi/dR7tBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4KkAAAD//8Oayzs=") quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f0000000100)=@loop={'/dev/loop', 0x0}, 0xee00, &(0x7f0000000280)={0x0, 0x6, 0x80007a, 0x5, 0x6, 0xb, 0x1000, 0x9, 0xf811}) 2.393321776s ago: executing program 3 (id=506): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000000240)) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) sendto(r2, &(0x7f0000000200)="0096", 0x2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000005cc0), 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x34, 0x3, 0xffffffffffffffff, 0x0, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000000240)}, 0x0, 0x40000000}) r4 = syz_io_uring_setup(0x74d, 0x0, &(0x7f0000000300)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f0000000740)=[{&(0x7f00000003c0)=""/201, 0xc9}], 0x1) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x0, 0x0, 0xffffffffffffffff, 0x0, r4}) io_uring_enter(r4, 0x749f, 0x4, 0x0, 0x0, 0xfffffffffffffef5) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) recvfrom(r1, &(0x7f00000001c0)=""/62, 0x3e, 0x10120, 0x0, 0x0) 1.456878757s ago: executing program 3 (id=507): r0 = socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) syz_mount_image$hfs(&(0x7f0000000080), &(0x7f00000008c0)='./bus\x00', 0x808808, &(0x7f0000000380)=ANY=[@ANYBLOB="636f6465706167653d757466382c66696c655f756d61736b3d30303030303030303030303030303030303030303030332c696f636861727365743d63703737352c71756965742c008f7881d185c35a6a28ef06c5b85628f12a02248de249c2a338d049166371583781680d171f47"], 0x1, 0x2f3, &(0x7f0000000c00)="$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") r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) r3 = openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_POST(r3, 0x5008, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, 0x0) socketpair(0x23, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{}, 0x0, &(0x7f0000000140)=r6}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{}, 0x0, &(0x7f0000000380)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x5) recvmmsg(r0, &(0x7f0000002a40), 0x0, 0x2b, 0x0) syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000780)='./file0\x00', 0x0, &(0x7f0000000000)={[{@nouid32}, {@mblk_io_submit}, {@i_version}]}, 0x1, 0x741, &(0x7f0000000f40)="$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") r7 = socket$inet_smc(0x2b, 0x1, 0x0) splice(0xffffffffffffffff, 0x0, r7, 0x0, 0x6, 0xa) 1.346309642s ago: executing program 4 (id=508): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x2200) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r4) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="310300000000fcdbdf250900000008000300", @ANYRES32=r6, @ANYBLOB="080006"], 0x24}}, 0x8) 460.14985ms ago: executing program 3 (id=509): mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='f']) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e21, 0x20000000, @dev={0xfe, 0x80, '\x00', 0x1e}, 0x8}, 0x1c) getsockopt$sock_buf(r0, 0x1, 0x19, &(0x7f0000002f80)=""/217, &(0x7f0000003080)=0xd9) 368.867294ms ago: executing program 4 (id=510): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) shmdt(0x0) r0 = timerfd_create(0x0, 0x0) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0xfff) timerfd_settime(r0, 0x3, &(0x7f0000000140)={{}, {0x77359400}}, 0x0) r1 = timerfd_create(0x0, 0x0) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) timerfd_settime(r1, 0x2, &(0x7f0000000280)={{r2, r3+60000000}, {r4, r5+60000000}}, &(0x7f00000002c0)) r6 = memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) ftruncate(r6, 0x80079a0) timerfd_settime(r1, 0x3, &(0x7f00000001c0)={{}, {0x0, 0x989680}}, 0x0) clock_adjtime(0x0, &(0x7f0000000040)={0x2925, 0x0, 0xa, 0x3, 0x40, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1000000040000000, 0x0, 0x0, 0x7fffffffffffffff, 0x0, 0x0, 0x7, 0x4, 0xffffffffffffffff, 0x2000800, 0x0, 0x0, 0x59, 0x3201ada9}) 361.496634ms ago: executing program 3 (id=511): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x67, 0x0, @rand_addr, @broadcast}, @time_exceeded={0x21, 0x0, 0x0, 0x12, 0x0, 0x2802, {0x8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @local, {[@noop, @ssrr={0x89, 0xb, 0xc5, [@private=0xa010101, @broadcast]}]}}}}}}}, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)=ANY=[@ANYBLOB="88020000", @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="6102330050300100080211000001080211000000505050505050"], 0x288}, 0x1, 0x0, 0x0, 0x800}, 0x0) 208.113371ms ago: executing program 4 (id=512): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x800800, &(0x7f0000000980)=ANY=[@ANYBLOB='\x00\x00\n\x00\x00\x00\x00\x00\x00\x00', @ANYRESHEX=0x0, @ANYBLOB=',discard,iocharset=macgaelic,errors=continue,iocharset=cp863,errors=remount-ro,time_offset=0x0000000000000008,errors=remount-ro,utf8,iocharset=macgreek,umask=00000000000000000000011,iocharset=macinuit,umask=00000000000000000000002,\x00'], 0x1, 0x1524, &(0x7f0000002280)="$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") ioctl$TCSETS(0xffffffffffffffff, 0xc0384707, &(0x7f0000000040)={0x1, 0x2, 0x0, 0x800000, 0x4, "3eccd8f9d20000000000001000000200000500"}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x26) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0xc0185879, &(0x7f0000000040)={@desc={0x1, 0x0, @desc1}}) 136.151224ms ago: executing program 0 (id=513): socket$kcm(0x2, 0x200000000000001, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x311000, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000100)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f00000001c0)={0x43, 0x0, 0x0, 0x3}, 0x10) ioctl$VIDIOC_G_TUNER(0xffffffffffffffff, 0xc054561d, &(0x7f0000000140)={0x31f, "13f20afd86c17f9dfa507069d57c6684154bc7ec29052b9ec48e707a4f251dd9", 0x0, 0x0, 0x0, 0x0, 0x8}) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) migrate_pages(0x0, 0xf, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x2200) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r4, 0xc0505405, &(0x7f0000000040)={{0x1, 0x2, 0xaad4, 0x0, 0x7}, 0x6, 0x4, 0x9}) 125.916474ms ago: executing program 3 (id=514): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010bd28710000000000000109022400010000000009040100010300000009210200000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000100)={0x2c, &(0x7f00000000c0)={0x20, 0x4, 0x5, {0x5, 0xc, "18f565"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 0s ago: executing program 4 (id=515): ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000001300)=@raw={'raw\x00', 0x3c1, 0x3, 0x530, 0x348, 0x18c, 0x203, 0x348, 0x19030000, 0x460, 0x2e0, 0x2e0, 0x460, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x300, 0x348, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x34}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x80}, {}, {}, {}, {}, {}, {}, {0x16}]}}, @common=@hl={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x590) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x8800, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000180)=0xe) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11000000040000000400000022"], 0x48) r6 = socket(0x2c, 0x3, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r5, &(0x7f0000000140), &(0x7f0000000080)=@udp=r6}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000002c0)={r5, &(0x7f0000000540)}, 0x20) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.215' (ED25519) to the list of known hosts. [ 47.723197][ T4170] cgroup: Unknown subsys name 'net' [ 47.893443][ T4170] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 49.089820][ T4170] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 50.453604][ T4186] chnl_net:caif_netlink_parms(): no params data found [ 50.495532][ T4180] chnl_net:caif_netlink_parms(): no params data found [ 50.536959][ T4183] chnl_net:caif_netlink_parms(): no params data found [ 50.551562][ T4182] chnl_net:caif_netlink_parms(): no params data found [ 50.603896][ T4181] chnl_net:caif_netlink_parms(): no params data found [ 50.635303][ T4180] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.642469][ T4180] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.650771][ T4180] device bridge_slave_0 entered promiscuous mode [ 50.661555][ T4180] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.668594][ T4180] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.676328][ T4180] device bridge_slave_1 entered promiscuous mode [ 50.696895][ T4186] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.704074][ T4186] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.712501][ T4186] device bridge_slave_0 entered promiscuous mode [ 50.735958][ T4186] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.743113][ T4186] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.750696][ T4186] device bridge_slave_1 entered promiscuous mode [ 50.799486][ T4180] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 50.819385][ T4186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 50.828508][ T4182] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.835830][ T4182] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.843390][ T4182] device bridge_slave_0 entered promiscuous mode [ 50.851435][ T4182] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.858472][ T4182] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.866428][ T4182] device bridge_slave_1 entered promiscuous mode [ 50.874219][ T4180] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 50.884435][ T4183] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.891810][ T4183] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.899787][ T4183] device bridge_slave_0 entered promiscuous mode [ 50.916861][ T4186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 50.936905][ T4183] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.944254][ T4183] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.951918][ T4183] device bridge_slave_1 entered promiscuous mode [ 50.991583][ T4181] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.998674][ T4181] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.006448][ T4181] device bridge_slave_0 entered promiscuous mode [ 51.022116][ T4182] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 51.033074][ T4186] team0: Port device team_slave_0 added [ 51.040760][ T4180] team0: Port device team_slave_0 added [ 51.047601][ T4186] team0: Port device team_slave_1 added [ 51.058625][ T4181] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.065761][ T4181] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.073975][ T4181] device bridge_slave_1 entered promiscuous mode [ 51.082149][ T4182] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 51.092687][ T4180] team0: Port device team_slave_1 added [ 51.113550][ T4183] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 51.124726][ T4183] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 51.180670][ T4182] team0: Port device team_slave_0 added [ 51.187136][ T4180] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 51.194147][ T4180] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.220214][ T4180] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 51.231840][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 51.238782][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.265315][ T4186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 51.287992][ T4181] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 51.298404][ T4182] team0: Port device team_slave_1 added [ 51.304719][ T4180] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 51.311809][ T4180] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.337795][ T4180] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 51.354082][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 51.361223][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.387310][ T4186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 51.400393][ T4183] team0: Port device team_slave_0 added [ 51.413993][ T4181] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 51.436137][ T4182] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 51.443209][ T4182] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.469151][ T4182] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 51.484279][ T4183] team0: Port device team_slave_1 added [ 51.501809][ T4182] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 51.508741][ T4182] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.534952][ T4182] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 51.577371][ T4180] device hsr_slave_0 entered promiscuous mode [ 51.583997][ T4180] device hsr_slave_1 entered promiscuous mode [ 51.604926][ T4181] team0: Port device team_slave_0 added [ 51.623553][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 51.630739][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.656879][ T4183] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 51.669319][ T4181] team0: Port device team_slave_1 added [ 51.683589][ T4182] device hsr_slave_0 entered promiscuous mode [ 51.690421][ T4182] device hsr_slave_1 entered promiscuous mode [ 51.696880][ T4182] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 51.704700][ T4182] Cannot create hsr debugfs directory [ 51.710727][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 51.717655][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.743757][ T4183] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 51.774160][ T4186] device hsr_slave_0 entered promiscuous mode [ 51.780864][ T4186] device hsr_slave_1 entered promiscuous mode [ 51.787286][ T4186] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 51.794989][ T4186] Cannot create hsr debugfs directory [ 51.818843][ T4181] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 51.825906][ T4181] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.852206][ T4181] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 51.882888][ T4181] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 51.890203][ T4181] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.916360][ T4181] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 51.940953][ T4183] device hsr_slave_0 entered promiscuous mode [ 51.947615][ T4183] device hsr_slave_1 entered promiscuous mode [ 51.954325][ T4183] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 51.961905][ T4183] Cannot create hsr debugfs directory [ 52.045663][ T4181] device hsr_slave_0 entered promiscuous mode [ 52.052676][ T4181] device hsr_slave_1 entered promiscuous mode [ 52.059363][ T4181] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 52.066918][ T4181] Cannot create hsr debugfs directory [ 52.119700][ T4187] Bluetooth: hci3: command 0x0409 tx timeout [ 52.129244][ T1108] Bluetooth: hci0: command 0x0409 tx timeout [ 52.140687][ T1108] Bluetooth: hci2: command 0x0409 tx timeout [ 52.146816][ T1108] Bluetooth: hci1: command 0x0409 tx timeout [ 52.209311][ T4187] Bluetooth: hci4: command 0x0409 tx timeout [ 52.291015][ T4182] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 52.301576][ T4182] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 52.313070][ T4182] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 52.324672][ T4182] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 52.360694][ T4180] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 52.370465][ T4180] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 52.388847][ T4180] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 52.400346][ T4180] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 52.450335][ T4181] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 52.477369][ T4181] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 52.487660][ T4181] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 52.505675][ T4181] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 52.538896][ T4182] 8021q: adding VLAN 0 to HW filter on device bond0 [ 52.573263][ T4182] 8021q: adding VLAN 0 to HW filter on device team0 [ 52.584555][ T4186] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 52.593616][ T4186] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 52.601890][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 52.612940][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 52.652819][ T4186] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 52.661196][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 52.670972][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 52.680620][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.687721][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.697140][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 52.708504][ T4180] 8021q: adding VLAN 0 to HW filter on device bond0 [ 52.716515][ T4186] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 52.727829][ T4183] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 52.747527][ T4180] 8021q: adding VLAN 0 to HW filter on device team0 [ 52.754821][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 52.763806][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 52.772768][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.779837][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.788063][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 52.796548][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 52.804420][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 52.815817][ T4183] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 52.826622][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 52.839095][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 52.847660][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 52.856140][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.863185][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.871494][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 52.890266][ T4183] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 52.902264][ T4183] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 52.910634][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 52.921477][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 52.931012][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 52.941264][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 52.949693][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 52.957792][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 52.966433][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 52.978164][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 52.987322][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 52.995755][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.002805][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.024507][ T4181] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.035958][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 53.045084][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 53.053398][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 53.086857][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 53.096157][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 53.105485][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 53.114250][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 53.123158][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 53.132112][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 53.140734][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 53.151151][ T4182] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 53.168260][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 53.176716][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 53.184860][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 53.202163][ T4181] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.216526][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 53.231287][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 53.261241][ T4180] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 53.276203][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 53.291252][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 53.299774][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.306811][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.314901][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 53.344293][ T4183] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.356458][ T4186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.382848][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 53.399499][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 53.408377][ T355] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.415468][ T355] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.439534][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 53.448068][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 53.458699][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 53.466785][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 53.477713][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 53.493194][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 53.513439][ T4186] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.524206][ T4183] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.542958][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 53.552589][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 53.561988][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 53.569956][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 53.578337][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 53.586921][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 53.595269][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 53.606332][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 53.616417][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 53.625671][ T355] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.632752][ T355] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.648073][ T4182] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 53.665812][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 53.675156][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 53.683314][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 53.691131][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 53.700319][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 53.708559][ T355] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.715621][ T355] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.723513][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 53.733178][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 53.741540][ T355] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.748580][ T355] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.756296][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 53.765748][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 53.773918][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 53.782568][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 53.791259][ T355] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.798294][ T355] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.807025][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 53.820140][ T4181] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 53.829520][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 53.848719][ T4180] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 53.874756][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 53.884740][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 53.899410][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 53.906819][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 53.921965][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 53.932097][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 53.968099][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 53.976294][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 53.986124][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 53.995879][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 54.005727][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 54.014931][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 54.024691][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 54.034297][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 54.044034][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 54.052673][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 54.061730][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 54.071017][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 54.080396][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 54.088673][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 54.097016][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 54.105373][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 54.115214][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 54.126162][ T4183] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 54.147771][ T4181] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.173974][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 54.183207][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 54.193436][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 54.201817][ T26] Bluetooth: hci1: command 0x041b tx timeout [ 54.207850][ T26] Bluetooth: hci2: command 0x041b tx timeout [ 54.213911][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 54.219419][ T26] Bluetooth: hci0: command 0x041b tx timeout [ 54.225823][ T4180] device veth0_vlan entered promiscuous mode [ 54.228899][ T26] Bluetooth: hci3: command 0x041b tx timeout [ 54.244044][ T4186] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 54.255470][ T4186] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 54.268846][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 54.278327][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 54.279516][ T13] Bluetooth: hci4: command 0x041b tx timeout [ 54.287479][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 54.302122][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 54.323840][ T4182] device veth0_vlan entered promiscuous mode [ 54.356178][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 54.365748][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 54.373741][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 54.384065][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 54.392362][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 54.401388][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 54.410190][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 54.417800][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 54.438462][ T4180] device veth1_vlan entered promiscuous mode [ 54.452727][ T4182] device veth1_vlan entered promiscuous mode [ 54.461516][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 54.475688][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 54.484772][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 54.492513][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 54.500489][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 54.508477][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 54.517401][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 54.526432][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 54.538309][ T4181] device veth0_vlan entered promiscuous mode [ 54.562131][ T4183] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.582041][ T4181] device veth1_vlan entered promiscuous mode [ 54.591785][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 54.607836][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 54.638580][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 54.652363][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 54.665031][ T4180] device veth0_macvtap entered promiscuous mode [ 54.676981][ T4180] device veth1_macvtap entered promiscuous mode [ 54.693452][ T4182] device veth0_macvtap entered promiscuous mode [ 54.720677][ T4180] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 54.732618][ T4181] device veth0_macvtap entered promiscuous mode [ 54.742560][ T4182] device veth1_macvtap entered promiscuous mode [ 54.756990][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 54.766900][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 54.777518][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 54.785611][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 54.793598][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 54.802602][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 54.811666][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 54.820357][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 54.828708][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 54.842402][ T4181] device veth1_macvtap entered promiscuous mode [ 54.850239][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 54.858450][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 54.866287][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 54.881709][ T4180] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 54.902481][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 54.915176][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 54.927242][ T4180] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.941779][ T4180] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.950833][ T4180] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.959789][ T4180] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.971566][ T4186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.999627][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.014100][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.025738][ T4182] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.035655][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.046244][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.056914][ T4182] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.077261][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 55.092353][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 55.101114][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 55.110317][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 55.119368][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.130223][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.140815][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.151275][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.163182][ T4181] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.182275][ T4182] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.192632][ T4182] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.205271][ T4182] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.214053][ T4182] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.233904][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 55.243203][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 55.252654][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 55.261969][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 55.270749][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 55.279555][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 55.288563][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.299345][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.309311][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.320477][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.331289][ T4181] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.369544][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 55.377954][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 55.386893][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 55.395220][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 55.406084][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 55.414185][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 55.424940][ T4181] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.433887][ T4181] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.442668][ T4181] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.451478][ T4181] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.474684][ T4283] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.483979][ T4283] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.507907][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 55.518544][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 55.527495][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 55.544662][ T4183] device veth0_vlan entered promiscuous mode [ 55.552653][ T4186] device veth0_vlan entered promiscuous mode [ 55.563760][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 55.572839][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 55.589669][ T4183] device veth1_vlan entered promiscuous mode [ 55.604509][ T4186] device veth1_vlan entered promiscuous mode [ 55.611763][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.629951][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.675610][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 55.703932][ T4186] device veth0_macvtap entered promiscuous mode [ 55.717889][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 55.732052][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 55.740842][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 55.756164][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.765925][ T4186] device veth1_macvtap entered promiscuous mode [ 55.772372][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.799825][ T4283] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.807736][ T4283] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.819823][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 55.820762][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.840922][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.842525][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 55.864153][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 55.872809][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 55.882195][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 55.890206][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 55.905803][ T4183] device veth0_macvtap entered promiscuous mode [ 55.924956][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.935984][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.946702][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.962561][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.973459][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.992026][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.003979][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.024869][ T4183] device veth1_macvtap entered promiscuous mode [ 56.033434][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 56.043133][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 56.051232][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 56.059799][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 56.293340][ T1324] Bluetooth: hci3: command 0x040f tx timeout [ 56.303808][ T4299] xt_bpf: check failed: parse error [ 56.596274][ T4301] netlink: 232 bytes leftover after parsing attributes in process `syz.0.1'. [ 56.681623][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.729815][ T1324] Bluetooth: hci0: command 0x040f tx timeout [ 56.739197][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.741238][ T1324] Bluetooth: hci2: command 0x040f tx timeout [ 56.755281][ T1324] Bluetooth: hci1: command 0x040f tx timeout [ 56.761953][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.772697][ T4260] Bluetooth: hci4: command 0x040f tx timeout [ 56.780204][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.791234][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.801728][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.813171][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.823743][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.836936][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.838235][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 56.864520][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 56.874439][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 56.920693][ T4186] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.929785][ T4186] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.940145][ T4186] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.948836][ T4186] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.972592][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.009028][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.049372][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.067211][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.079917][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.091010][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.102280][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.120379][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.136915][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.255734][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 57.269793][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 57.324958][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.354440][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.371237][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.519407][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 58.528384][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 58.537273][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #0a!!! [ 58.546216][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #0a!!! [ 58.555918][ T4311] ======================================================= [ 58.555918][ T4311] WARNING: The mand mount option has been deprecated and [ 58.555918][ T4311] and is ignored by this kernel. Remove the mand [ 58.555918][ T4311] option from the mount to silence this warning. [ 58.555918][ T4311] ======================================================= [ 58.563922][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.590735][ C1] vkms_vblank_simulate: vblank timer overrun [ 58.609664][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 58.618903][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 58.627868][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #88!!! [ 58.639367][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.653950][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.664082][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.679481][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.721267][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.739514][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 58.753873][ T4320] IPVS: sync thread started: state = BACKUP, mcast_ifn = geneve0, syncid = 2, id = 0 [ 58.759834][ T4261] Bluetooth: hci2: command 0x0419 tx timeout [ 58.767395][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 58.783928][ T4261] Bluetooth: hci3: command 0x0419 tx timeout [ 58.793517][ T4183] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.814154][ T4183] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.886633][ T4183] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.895491][ T4183] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.906954][ T1324] Bluetooth: hci4: command 0x0419 tx timeout [ 58.918241][ T1324] Bluetooth: hci1: command 0x0419 tx timeout [ 59.049237][ T355] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.076895][ T355] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.132160][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 59.188013][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 59.193664][ T355] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.199248][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.298333][ T355] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.318292][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.319592][ T4283] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.348997][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 59.357993][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 59.418071][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 59.634745][ T4283] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.648218][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 59.650676][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 60.067083][ T4335] loop1: detected capacity change from 0 to 64 [ 60.369543][ T4245] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 60.384108][ T4324] loop3: detected capacity change from 0 to 32768 [ 60.825471][ T4324] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.10 (4324) [ 61.272901][ T4348] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 61.289616][ T4324] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 61.298462][ T4324] BTRFS info (device loop3): using free space tree [ 61.341472][ T4324] BTRFS info (device loop3): has skinny extents [ 61.389295][ T4245] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 61.404275][ T4245] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 61.415924][ T4245] usb 3-1: New USB device found, idVendor=05ac, idProduct=8102, bcdDevice= 0.00 [ 61.426195][ T4245] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 61.872969][ T4245] usb 3-1: config 0 descriptor?? [ 62.116827][ T4324] BTRFS error (device loop3): open_ctree failed: -12 [ 62.123875][ T4245] usb 3-1: can't set config #0, error -71 [ 62.201785][ T4245] usb 3-1: USB disconnect, device number 2 [ 62.281148][ T4292] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 64.800205][ T4395] IPVS: sync thread started: state = BACKUP, mcast_ifn = geneve0, syncid = 2, id = 0 [ 65.120619][ T4409] loop2: detected capacity change from 0 to 64 [ 65.159311][ T4292] usb 1-1: device not accepting address 2, error -71 [ 65.274261][ T4410] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 67.340068][ T4428] loop1: detected capacity change from 0 to 128 [ 67.430020][ T4428] EXT4-fs (loop1): Test dummy encryption mode enabled [ 67.467858][ T4428] EXT4-fs (loop1): Test dummy encryption mode enabled [ 67.474721][ T4428] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 67.507740][ T4418] loop3: detected capacity change from 0 to 8192 [ 67.586793][ T4428] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption=v1,test_dummy_encryption=v1,nomblk_io_submit,commit=0x0000000000000000,,errors=continue. Quota mode: none. [ 67.700874][ T4428] ext4 filesystem being mounted at /6/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 67.976197][ T4418] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 68.605056][ T4418] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1052) [ 68.614484][ T4418] FAT-fs (loop3): Filesystem has been set read-only [ 68.621611][ T4418] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1052) [ 68.630513][ T4418] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1052) [ 68.750948][ T4439] loop0: detected capacity change from 0 to 4096 [ 68.810075][ T4439] ntfs3: loop0: Different NTFS' sector size (1024) and media sector size (512) [ 68.942914][ T4181] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1052) [ 69.074242][ T4449] loop1: detected capacity change from 0 to 256 [ 69.167169][ T25] audit: type=1800 audit(1765436828.710:2): pid=4449 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.34" name="bus" dev="loop1" ino=1048592 res=0 errno=0 [ 69.208531][ T4439] ntfs3: loop0: ntfs_sync_inode r=1e failed, -22. [ 69.560941][ T154] ntfs3: loop0: ntfs3_write_inode r=1e failed, -22. [ 69.619400][ T4182] ntfs3: loop0: ntfs_evict_inode r=1e failed, -22. [ 69.643640][ T4186] FAT-fs (loop1): error, corrupted directory (invalid entries) [ 69.689316][ T4182] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 69.789057][ T4186] FAT-fs (loop1): Filesystem has been set read-only [ 69.818613][ T4186] FAT-fs (loop1): error, corrupted directory (invalid entries) [ 71.129535][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.136138][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.337944][ T4471] xt_bpf: check failed: parse error [ 72.581365][ T4485] loop4: detected capacity change from 0 to 64 [ 74.133114][ T4491] netlink: 20 bytes leftover after parsing attributes in process `syz.2.49'. [ 74.213667][ T9] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.852313][ T9] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.380142][ T9] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.895793][ T4508] IPVS: sync thread started: state = BACKUP, mcast_ifn = geneve0, syncid = 2, id = 0 [ 75.938777][ T9] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.053020][ T4515] loop3: detected capacity change from 0 to 512 [ 76.200972][ T7] cfg80211: failed to load regulatory.db [ 76.207025][ T4515] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 76.269740][ T25] audit: type=1800 audit(1765436835.820:3): pid=4515 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.46" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 76.347457][ T4515] EXT4-fs error (device loop3): ext4_validate_block_bitmap:420: comm syz.3.46: bg 0: bad block bitmap checksum [ 77.658108][ T4512] chnl_net:caif_netlink_parms(): no params data found [ 77.786192][ T4512] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.799193][ T4512] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.807448][ T4512] device bridge_slave_0 entered promiscuous mode [ 77.935173][ T4512] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.948830][ T4512] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.006405][ T4512] device bridge_slave_1 entered promiscuous mode [ 78.068753][ T4565] xt_bpf: check failed: parse error [ 78.689105][ T4224] Bluetooth: hci3: command 0x0409 tx timeout [ 78.758670][ T4512] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.811975][ T4512] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.952572][ T4512] team0: Port device team_slave_0 added [ 78.991971][ T4512] team0: Port device team_slave_1 added [ 79.063272][ T4512] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.084938][ T4512] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.163453][ T4512] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.215928][ T9] device hsr_slave_0 left promiscuous mode [ 79.234109][ T9] device hsr_slave_1 left promiscuous mode [ 79.248673][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 79.271070][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 79.293983][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 79.316180][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 79.346047][ T9] device bridge_slave_1 left promiscuous mode [ 79.367557][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.405234][ T9] device bridge_slave_0 left promiscuous mode [ 79.431777][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.641223][ T9] device veth1_macvtap left promiscuous mode [ 79.648068][ T9] device veth0_macvtap left promiscuous mode [ 79.654649][ T9] device veth1_vlan left promiscuous mode [ 79.661250][ T9] device veth0_vlan left promiscuous mode [ 80.047278][ T4586] Cannot find set identified by id 0 to match [ 80.763485][ T4376] Bluetooth: hci3: command 0x041b tx timeout [ 80.890743][ T4595] loop4: detected capacity change from 0 to 64 [ 81.748712][ T9] team0 (unregistering): Port device team_slave_1 removed [ 81.769394][ T9] team0 (unregistering): Port device team_slave_0 removed [ 81.783637][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 81.798414][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 82.553994][ T9] bond0 (unregistering): Released all slaves [ 82.800677][ T4512] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.810006][ T4512] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.836033][ T4512] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.843348][ T4376] Bluetooth: hci3: command 0x040f tx timeout [ 82.927164][ T4611] loop2: detected capacity change from 0 to 64 [ 83.139830][ T4611] BFS-fs: bfs_fill_super(): loop2 is unclean, continuing [ 83.736899][ T4512] device hsr_slave_0 entered promiscuous mode [ 83.783376][ T4512] device hsr_slave_1 entered promiscuous mode [ 83.817036][ T4512] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 83.825060][ T4512] Cannot create hsr debugfs directory [ 84.009140][ T4623] xt_bpf: check failed: parse error [ 84.580561][ T4512] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 84.609148][ T4512] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 84.627754][ T4512] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 84.657745][ T4512] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 85.479433][ T4377] Bluetooth: hci3: command 0x0419 tx timeout [ 86.148736][ T4512] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.193987][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 86.238788][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 86.302733][ T4512] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.375657][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 86.396126][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 86.489421][ T4413] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.496492][ T4413] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.539290][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 86.576093][ T4551] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 86.577574][ T4675] IPVS: sync thread started: state = BACKUP, mcast_ifn = geneve0, syncid = 2, id = 0 [ 86.594689][ T4551] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 86.596792][ T4671] loop2: detected capacity change from 0 to 128 [ 86.633036][ T4551] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.640153][ T4551] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.700920][ T4671] UDF-fs: bad mount option "threaded" or missing value [ 86.713490][ T4551] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 86.770520][ T4551] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 86.798739][ T4551] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 86.822006][ T4551] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 86.903348][ T4551] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 86.941783][ T4551] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 86.956150][ T4682] loop2: detected capacity change from 0 to 64 [ 86.961839][ T4551] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 86.984370][ T4551] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 86.996857][ T4651] loop4: detected capacity change from 0 to 32768 [ 87.006175][ T4551] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 87.022432][ T4551] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 87.034501][ T4551] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 87.048132][ T4512] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 87.072876][ T4651] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.79 (4651) [ 87.265631][ T4651] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 87.299139][ T4651] BTRFS info (device loop4): turning on async discard [ 87.334781][ T4651] BTRFS info (device loop4): setting nodatacow, compression disabled [ 87.408259][ T4651] BTRFS info (device loop4): max_inline at 0 [ 87.449621][ T4651] BTRFS info (device loop4): using free space tree [ 87.497998][ T4651] BTRFS info (device loop4): has skinny extents [ 87.528462][ T4554] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 87.539262][ T4554] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 87.627108][ T4512] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.734255][ T4735] xt_bpf: check failed: parse error [ 89.517159][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 89.537360][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 89.607970][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 89.640306][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 89.664231][ T4512] device veth0_vlan entered promiscuous mode [ 89.677084][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 89.704865][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 89.763580][ T4512] device veth1_vlan entered promiscuous mode [ 90.107899][ T4512] device veth0_macvtap entered promiscuous mode [ 90.391047][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 90.639676][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 90.728259][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 90.777102][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 90.801651][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 90.854051][ T4512] device veth1_macvtap entered promiscuous mode [ 90.980679][ T4512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.034802][ T4512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.070359][ T4512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.109017][ T4512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.142430][ T4512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.197529][ T4512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.246924][ T4512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.302766][ T4512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.370754][ T4512] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.408442][ T4442] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 91.428361][ T4442] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 91.459536][ T4512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.497108][ T4512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.508234][ T4512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.522753][ T4512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.533078][ T4512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.599033][ T4512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.679147][ T4512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.700633][ T4512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.847656][ T4512] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.868439][ T4512] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.885759][ T4512] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.895300][ T4512] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.910361][ T4512] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.304648][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 92.381718][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 92.582446][ T4442] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.612387][ T4442] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.678763][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 92.820915][ T4283] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.911415][ T4802] xt_bpf: check failed: parse error [ 93.521069][ T4283] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.557045][ T4442] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 94.102681][ T4818] loop5: detected capacity change from 0 to 4096 [ 94.293187][ T4828] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 94.463535][ T4818] syz.5.50 (4818) used greatest stack depth: 20048 bytes left [ 95.679941][ T4841] loop5: detected capacity change from 0 to 64 [ 96.224264][ T4845] loop5: detected capacity change from 0 to 40427 [ 96.385993][ T4845] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 96.394034][ T4845] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 96.405241][ T4845] F2FS-fs (loop5): invalid crc value [ 96.529146][ T4845] F2FS-fs (loop5): Found nat_bits in checkpoint [ 96.612340][ T4845] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 96.619533][ T4845] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 96.834503][ T25] audit: type=1800 audit(1765436856.370:4): pid=4857 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.104" name="file1" dev="loop5" ino=10 res=0 errno=0 [ 96.854668][ C1] vkms_vblank_simulate: vblank timer overrun [ 98.383515][ T4872] lo speed is unknown, defaulting to 1000 [ 98.401616][ T4872] lo speed is unknown, defaulting to 1000 [ 98.580025][ T4874] loop4: detected capacity change from 0 to 32768 [ 98.615521][ T4877] xt_bpf: check failed: parse error [ 99.187345][ T4872] lo speed is unknown, defaulting to 1000 [ 99.282425][ T4874] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.111 (4874) [ 99.305726][ T4872] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 99.318562][ T4872] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 99.325801][ T4874] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 99.325887][ T4874] BTRFS info (device loop4): using free space tree [ 99.325903][ T4874] BTRFS info (device loop4): has skinny extents [ 99.413131][ T4872] lo speed is unknown, defaulting to 1000 [ 99.420716][ T4872] lo speed is unknown, defaulting to 1000 [ 99.430395][ T4872] lo speed is unknown, defaulting to 1000 [ 99.437614][ T4872] lo speed is unknown, defaulting to 1000 [ 99.449946][ T4872] lo speed is unknown, defaulting to 1000 [ 100.920441][ T4896] loop3: detected capacity change from 0 to 64 [ 101.090745][ T4911] loop2: detected capacity change from 0 to 1024 [ 101.176912][ T4874] BTRFS info (device loop4): enabling ssd optimizations [ 102.432515][ T4283] hfsplus: b-tree write err: -5, ino 4 [ 102.523334][ T4946] IPVS: sync thread started: state = BACKUP, mcast_ifn = geneve0, syncid = 2, id = 0 [ 102.549157][ T4938] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 102.685692][ T4950] xt_bpf: check failed: parse error [ 103.698994][ T4938] usb 4-1: Using ep0 maxpacket: 16 [ 104.539546][ T4938] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 104.566848][ T4938] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 104.614207][ T4938] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 104.628124][ T4970] loop3: detected capacity change from 0 to 64 [ 104.649018][ T4938] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 104.678645][ T4938] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 104.749041][ T4938] usb 4-1: string descriptor 0 read error: -71 [ 104.765470][ T4938] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 104.929662][ T4938] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 104.942836][ T4938] usb 4-1: config 0 descriptor?? [ 104.959146][ T4938] usb 4-1: can't set config #0, error -71 [ 105.009017][ T4938] usb 4-1: USB disconnect, device number 2 [ 105.099128][ T4954] loop2: detected capacity change from 0 to 32768 [ 105.142838][ T4954] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.120 (4954) [ 105.208356][ T4954] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 105.242925][ T4954] BTRFS info (device loop2): using free space tree [ 105.280656][ T4954] BTRFS info (device loop2): has skinny extents [ 105.321084][ T4957] loop0: detected capacity change from 0 to 32768 [ 105.508211][ T4957] XFS (loop0): DAX enabled. Warning: EXPERIMENTAL, use at your own risk [ 105.528003][ T4957] XFS (loop0): DAX unsupported by block device. Turning off DAX. [ 105.536563][ T4966] loop5: detected capacity change from 0 to 32768 [ 105.539028][ T4957] XFS (loop0): DAX and reflink cannot be used together! [ 105.639319][ T4954] BTRFS info (device loop2): enabling ssd optimizations [ 105.740237][ T4968] loop4: detected capacity change from 0 to 32768 [ 105.824942][ T4966] XFS (loop5): Mounting V5 Filesystem [ 105.878297][ T4968] XFS (loop4): Mounting V5 Filesystem [ 105.951539][ T4982] loop3: detected capacity change from 0 to 32768 [ 106.162273][ T4982] JBD2: Ignoring recovery information on journal [ 106.223643][ T4968] XFS (loop4): Ending clean mount [ 106.280471][ T4968] XFS (loop4): Quotacheck needed: Please wait. [ 106.311868][ T4982] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 106.335045][ T4966] XFS (loop5): Ending clean mount [ 106.481883][ T4968] XFS (loop4): Quotacheck: Done. [ 106.539959][ T4512] XFS (loop5): Unmounting Filesystem [ 106.598505][ T4181] ocfs2: Unmounting device (7,3) on (node local) [ 107.375494][ T4183] XFS (loop4): Unmounting Filesystem [ 110.130650][ T5077] loop0: detected capacity change from 0 to 64 [ 110.372573][ T5085] process 'syz.5.140' launched './file0' with NULL argv: empty string added [ 110.432863][ T5090] loop3: detected capacity change from 0 to 128 [ 110.562004][ T5090] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 110.593521][ T5090] ext4 filesystem being mounted at /28/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 110.918077][ T5103] loop4: detected capacity change from 0 to 2048 [ 111.067041][ T5103] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 111.148109][ T4195] Bluetooth: hci1: unknown advertising packet type: 0x6c [ 113.836620][ T5162] loop0: detected capacity change from 0 to 64 [ 114.513757][ T5172] QAT: failed to copy from user cfg_data. [ 115.158571][ T5158] loop5: detected capacity change from 0 to 32768 [ 115.219075][ T5158] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 scanned by syz.5.157 (5158) [ 115.284871][ T5158] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm [ 115.320233][ T5158] BTRFS info (device loop5): setting nodatacow, compression disabled [ 115.348307][ T5158] BTRFS info (device loop5): enabling auto defrag [ 115.375015][ T5158] BTRFS info (device loop5): max_inline at 0 [ 115.394734][ T5158] BTRFS info (device loop5): using free space tree [ 115.427636][ T5158] BTRFS info (device loop5): has skinny extents [ 116.519488][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 116.820055][ T5183] loop3: detected capacity change from 0 to 32768 [ 116.867660][ T5183] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.162 (5183) [ 116.912039][ T5238] loop2: detected capacity change from 0 to 64 [ 116.949738][ T5183] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 116.993236][ T5183] BTRFS info (device loop3): using free space tree [ 117.008295][ T5183] BTRFS info (device loop3): has skinny extents [ 117.694886][ T5183] BTRFS info (device loop3): enabling ssd optimizations [ 117.886085][ T25] audit: type=1800 audit(1765436877.430:5): pid=5183 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.162" name="file2" dev="loop3" ino=261 res=0 errno=0 [ 119.012405][ T5291] xt_bpf: check failed: parse error [ 120.209483][ T5032] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 120.579053][ T5032] usb 4-1: Using ep0 maxpacket: 16 [ 120.929167][ T5032] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 120.943874][ T5032] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 121.111410][ T5032] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 121.172854][ T5032] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.188434][ T5321] loop0: detected capacity change from 0 to 64 [ 121.198196][ T5032] usb 4-1: Product: syz [ 121.213809][ T5032] usb 4-1: Manufacturer: syz [ 121.232583][ T5032] usb 4-1: SerialNumber: syz [ 121.989165][ T5032] usb 4-1: 0:2 : does not exist [ 122.189477][ T5032] usb 4-1: USB disconnect, device number 3 [ 122.243033][ T5339] loop2: detected capacity change from 0 to 40427 [ 122.489377][ T5339] F2FS-fs (loop2): Unrecognized mount option "errors=continue" or missing value [ 122.745229][ T5350] xt_bpf: check failed: parse error [ 123.368497][ T4172] udevd[4172]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 124.717782][ T5387] loop5: detected capacity change from 0 to 64 [ 124.895150][ T5389] loop3: detected capacity change from 0 to 32768 [ 124.915310][ T5359] loop0: detected capacity change from 0 to 32768 [ 125.131040][ T5359] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.192 (5359) [ 125.166859][ T5359] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 125.210938][ T5389] XFS (loop3): Mounting V5 Filesystem [ 125.220408][ T5359] BTRFS info (device loop0): turning on flush-on-commit [ 125.290566][ T5359] BTRFS info (device loop0): max_inline at 0 [ 125.308033][ T5389] XFS (loop3): Ending clean mount [ 125.313385][ T5359] BTRFS info (device loop0): enabling disk space caching [ 125.354844][ T5359] BTRFS info (device loop0): turning off barriers [ 125.417370][ T5359] BTRFS info (device loop0): disabling tree log [ 125.459196][ T5359] BTRFS info (device loop0): enabling ssd optimizations [ 125.565470][ T5359] BTRFS info (device loop0): force clearing of disk cache [ 125.695836][ T5359] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 125.729057][ T5359] BTRFS info (device loop0): use zstd compression, level 3 [ 125.955250][ T5359] BTRFS info (device loop0): max_inline at 0 [ 125.976711][ T5359] BTRFS info (device loop0): disk space caching is enabled [ 126.052099][ T5359] BTRFS info (device loop0): has skinny extents [ 126.551253][ T5359] BTRFS info (device loop0): clearing free space tree [ 126.574521][ T5359] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 126.621132][ T5359] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 126.677767][ T5359] BTRFS info (device loop0): checking UUID tree [ 126.690550][ T5359] BTRFS warning (device loop0): failed to start uuid_rescan task [ 126.725646][ T5359] BTRFS warning (device loop0): failed to check the UUID tree: -4 [ 126.953516][ T5359] BTRFS error (device loop0): open_ctree failed: -4 [ 127.064150][ T4181] XFS (loop3): Unmounting Filesystem [ 127.373744][ T5467] xt_bpf: check failed: parse error [ 128.747194][ T5484] loop4: detected capacity change from 0 to 64 [ 128.781664][ T5487] loop3: detected capacity change from 0 to 128 [ 129.041021][ T5487] attempt to access beyond end of device [ 129.041021][ T5487] loop3: rw=2049, want=1041, limit=128 [ 129.050294][ T5466] loop5: detected capacity change from 0 to 32768 [ 129.129956][ T5466] XFS: attr2 mount option is deprecated. [ 129.285224][ T5466] XFS (loop5): Mounting V5 Filesystem [ 129.314096][ T5466] XFS (loop5): Ending clean mount [ 129.327050][ T5466] XFS (loop5): Quotacheck needed: Please wait. [ 129.365040][ T5466] XFS (loop5): Quotacheck: Done. [ 129.760829][ T4512] XFS (loop5): Unmounting Filesystem [ 129.883766][ T5515] loop2: detected capacity change from 0 to 4096 [ 129.982285][ T5515] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 130.062951][ T5515] ntfs3: loop2: Failed to load $Extend. [ 130.265279][ T5515] netlink: 165 bytes leftover after parsing attributes in process `syz.2.216'. [ 130.277667][ T5515] tmpfs: Unknown parameter 'e' [ 130.284953][ T5515] Zero length message leads to an empty skb [ 130.357686][ T5521] xt_bpf: check failed: parse error [ 132.522130][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.528435][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.267262][ T5544] loop3: detected capacity change from 0 to 1024 [ 133.462971][ T25] audit: type=1800 audit(1765436893.010:6): pid=5544 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.223" name="file1" dev="loop3" ino=20 res=0 errno=0 [ 133.696200][ T5554] loop5: detected capacity change from 0 to 64 [ 134.350263][ T5574] loop2: detected capacity change from 0 to 512 [ 134.459955][ T5574] EXT4-fs error (device loop2): ext4_orphan_get:1401: inode #15: comm syz.2.228: inode has both inline data and extents flags [ 134.508242][ T5574] EXT4-fs error (device loop2): ext4_orphan_get:1406: comm syz.2.228: couldn't read orphan inode 15 (err -117) [ 134.530443][ T5574] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 136.690285][ T5594] xt_bpf: check failed: parse error [ 137.310427][ T5602] loop2: detected capacity change from 0 to 256 [ 137.406381][ T5606] loop0: detected capacity change from 0 to 1024 [ 137.461477][ T5602] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xbe762c11, utbl_chksum : 0xe619d30d) [ 137.483015][ T5606] EXT4-fs (loop0): Ignoring removed nobh option [ 137.499193][ T5606] EXT4-fs (loop0): Ignoring removed bh option [ 137.505312][ T5606] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 137.843876][ T5606] EXT4-fs (loop0): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 138.765858][ T25] audit: type=1800 audit(1765436898.310:7): pid=5626 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.234" name="bus" dev="loop0" ino=18 res=0 errno=0 [ 139.217792][ T5603] loop5: detected capacity change from 0 to 256 [ 139.343027][ T5643] loop0: detected capacity change from 0 to 64 [ 139.651529][ T5603] FAT-fs (loop5): Directory bread(block 64) failed [ 139.677019][ T5603] FAT-fs (loop5): Directory bread(block 65) failed [ 139.688136][ T5603] FAT-fs (loop5): Directory bread(block 66) failed [ 139.749161][ T5603] FAT-fs (loop5): Directory bread(block 67) failed [ 139.819112][ T5603] FAT-fs (loop5): Directory bread(block 68) failed [ 139.842548][ T5603] FAT-fs (loop5): Directory bread(block 69) failed [ 139.949357][ T5603] FAT-fs (loop5): Directory bread(block 70) failed [ 139.998294][ T5603] FAT-fs (loop5): Directory bread(block 71) failed [ 140.029335][ T5603] FAT-fs (loop5): Directory bread(block 72) failed [ 140.041172][ T5603] FAT-fs (loop5): Directory bread(block 73) failed [ 140.797238][ T5660] xt_bpf: check failed: parse error [ 141.889694][ T4396] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 142.373834][ T5678] loop3: detected capacity change from 0 to 512 [ 142.378876][ T5679] loop0: detected capacity change from 0 to 1024 [ 142.389143][ T4396] usb 5-1: config 0 interface 0 altsetting 10 endpoint 0x81 has invalid wMaxPacketSize 0 [ 142.409619][ T4396] usb 5-1: config 0 interface 0 altsetting 10 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 142.415155][ T5679] hfsplus: creator requires a 4 character value [ 142.429070][ T4396] usb 5-1: config 0 interface 0 has no altsetting 0 [ 142.446421][ T4396] usb 5-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.00 [ 142.449431][ T5679] hfsplus: unable to parse mount options [ 142.477008][ T4396] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.497120][ T4396] usb 5-1: config 0 descriptor?? [ 142.591541][ T5678] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 142.606137][ T5686] loop2: detected capacity change from 0 to 64 [ 142.988751][ T4396] sony 0003:054C:0268.0001: unknown main item tag 0x0 [ 143.019639][ T4396] sony 0003:054C:0268.0001: unknown main item tag 0x0 [ 143.041612][ T4396] sony 0003:054C:0268.0001: unknown main item tag 0x0 [ 143.066597][ T4396] sony 0003:054C:0268.0001: unknown main item tag 0x0 [ 143.078866][ T4396] sony 0003:054C:0268.0001: unknown main item tag 0x0 [ 143.093281][ T4396] sony 0003:054C:0268.0001: unknown main item tag 0x0 [ 143.102234][ T4396] sony 0003:054C:0268.0001: unknown main item tag 0x0 [ 143.338943][ C0] hrtimer: interrupt took 36329 ns [ 143.697783][ T4396] sony 0003:054C:0268.0001: hiddev0,hidraw0: USB HID v80.00 Device [HID 054c:0268] on usb-dummy_hcd.4-1/input0 [ 143.721712][ T4396] sony 0003:054C:0268.0001: failed to claim input [ 143.886796][ T4396] usb 5-1: USB disconnect, device number 2 [ 143.979412][ T5705] xt_bpf: check failed: parse error [ 144.726620][ T5718] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 144.810712][ T5708] fido_id[5708]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 145.901395][ T5730] block device autoloading is deprecated and will be removed. [ 146.587141][ T25] audit: type=1326 audit(1765436906.130:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5735 comm="syz.2.267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e52187749 code=0x7ffc0000 [ 146.649654][ T25] audit: type=1326 audit(1765436906.200:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5735 comm="syz.2.267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e52187749 code=0x7ffc0000 [ 147.296671][ T5751] loop0: detected capacity change from 0 to 64 [ 147.298107][ T25] audit: type=1326 audit(1765436906.200:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5735 comm="syz.2.267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f4e52187749 code=0x7ffc0000 [ 147.435837][ T25] audit: type=1326 audit(1765436906.200:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5735 comm="syz.2.267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e52187749 code=0x7ffc0000 [ 147.510068][ T25] audit: type=1326 audit(1765436906.200:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5735 comm="syz.2.267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e52187749 code=0x7ffc0000 [ 148.030440][ T5757] xt_bpf: check failed: parse error [ 148.888553][ T5759] loop2: detected capacity change from 0 to 32768 [ 148.911103][ T4743] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 148.937480][ T5759] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.274 (5759) [ 148.978557][ T5759] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 148.991359][ T5759] BTRFS info (device loop2): using free space tree [ 149.001763][ T5759] BTRFS info (device loop2): has skinny extents [ 149.209034][ T5759] BTRFS info (device loop2): enabling ssd optimizations [ 149.229378][ T5759] BTRFS info (device loop2): device stats zeroed by syz.2.274 (5759) [ 149.280298][ T4743] usb 5-1: config index 0 descriptor too short (expected 65316, got 36) [ 149.288670][ T4743] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 149.299173][ T4743] usb 5-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 149.312574][ T4743] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 149.321895][ T4743] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.608181][ T4743] snd-usb-audio: probe of 5-1:27.0 failed with error -12 [ 149.662268][ T4743] usb 5-1: USB disconnect, device number 3 [ 149.665973][ T4417] udevd[4417]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 149.723072][ T5798] loop5: detected capacity change from 0 to 4096 [ 149.750707][ T5798] ntfs3: loop5: Different NTFS' sector size (4096) and media sector size (512) [ 150.132693][ T1092] block nbd2: Attempted send on invalid socket [ 150.141416][ T1092] blk_update_request: I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 150.155675][ T5806] hpfs: hpfs_map_sector(): read error [ 151.118919][ C1] sched: RT throttling activated [ 151.160407][ T5814] loop2: detected capacity change from 0 to 64 [ 151.306720][ T5820] netlink: 20 bytes leftover after parsing attributes in process `syz.0.288'. [ 152.175996][ T5823] loop0: detected capacity change from 0 to 512 [ 152.417831][ T5823] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 154.024431][ T5823] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.289: invalid indirect mapped block 4294967295 (level 1) [ 154.091830][ T5823] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.289: invalid indirect mapped block 4294967295 (level 1) [ 154.142702][ T5823] EXT4-fs (loop0): 2 truncates cleaned up [ 154.148541][ T5823] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpjquota=,init_itable=0x0000000000000007,dioread_nolock,auto_da_alloc=0x000000007fffffff,,errors=continue. Quota mode: writeback. [ 154.220919][ T5858] loop3: detected capacity change from 0 to 1024 [ 154.275265][ T5858] EXT4-fs (loop3): Ignoring removed orlov option [ 154.305702][ T5821] EXT4-fs error (device loop0): ext4_validate_block_bitmap:429: comm syz.0.289: bg 0: block 5: invalid block bitmap [ 154.337449][ T5858] EXT4-fs (loop3): mounted filesystem without journal. Opts: nolazytime,auto_da_alloc,sysvgroups,norecovery,jqfmt=vfsv0,orlov,nogrpid,noauto_da_alloc,grpid,,errors=continue. Quota mode: none. [ 154.915175][ T5870] loop0: detected capacity change from 0 to 2048 [ 155.048500][ T5853] loop2: detected capacity change from 0 to 32768 [ 155.177087][ T5866] loop5: detected capacity change from 0 to 32768 [ 155.324294][ T5866] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 scanned by syz.5.298 (5866) [ 155.537463][ T5866] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm [ 155.897809][ T5873] xt_bpf: check failed: parse error [ 155.906307][ T5866] BTRFS info (device loop5): force zlib compression, level 3 [ 155.942962][ T5866] BTRFS info (device loop5): turning on sync discard [ 155.953311][ T5866] BTRFS info (device loop5): turning on flush-on-commit [ 155.955377][ T5879] loop3: detected capacity change from 0 to 64 [ 155.967611][ T5866] BTRFS info (device loop5): allowing degraded mounts [ 155.975841][ T5866] BTRFS info (device loop5): use zlib compression, level 3 [ 155.993429][ T5866] BTRFS info (device loop5): turning off discard [ 156.004103][ T5866] BTRFS info (device loop5): using free space tree [ 156.059027][ T5866] BTRFS info (device loop5): has skinny extents [ 157.107257][ T5891] loop4: detected capacity change from 0 to 32768 [ 157.201615][ T5891] BTRFS warning: duplicate device /dev/loop4 devid 1 generation 8 scanned by syz.4.303 (5891) [ 157.299022][ T5866] BTRFS info (device loop5): enabling ssd optimizations [ 157.398642][ T4174] BTRFS warning: duplicate device /dev/loop4 devid 1 generation 8 scanned by udevd (4174) [ 157.590824][ T25] audit: type=1800 audit(1765436917.140:13): pid=5920 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.299" name="file2" dev="loop0" ino=1048605 res=0 errno=0 [ 159.383565][ T5933] loop2: detected capacity change from 0 to 4096 [ 160.226265][ T5929] loop5: detected capacity change from 0 to 32768 [ 160.283616][ T5929] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 scanned by syz.5.307 (5929) [ 160.358507][ T5929] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 160.367833][ T5929] BTRFS info (device loop5): using free space tree [ 160.374663][ T5929] BTRFS info (device loop5): has skinny extents [ 160.919706][ T5947] loop0: detected capacity change from 0 to 64 [ 162.098879][ T5929] BTRFS info (device loop5): enabling ssd optimizations [ 162.392753][ T5979] loop0: detected capacity change from 0 to 32768 [ 162.474029][ T5979] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.320 (5979) [ 163.578723][ T5979] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 163.587376][ T5979] BTRFS info (device loop0): using free space tree [ 163.593926][ T5979] BTRFS info (device loop0): has skinny extents [ 166.425140][ T5979] BTRFS error (device loop0): open_ctree failed: -12 [ 166.608993][ T4260] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 167.249027][ T4260] usb 4-1: Using ep0 maxpacket: 32 [ 167.317137][ T5141] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by udevd (5141) [ 167.399388][ T4260] usb 4-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 167.489217][ T4260] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.334238][ T6044] ODEBUG: Out of memory. ODEBUG disabled [ 168.396910][ T6044] syz.0.332 (6044): drop_caches: 2 [ 168.457203][ T4260] usb 4-1: config 0 descriptor?? [ 168.479094][ T4260] usb 4-1: can't set config #0, error -71 [ 168.509936][ T4260] usb 4-1: USB disconnect, device number 4 [ 168.925703][ T6055] loop3: detected capacity change from 0 to 64 [ 171.228060][ T6079] loop3: detected capacity change from 0 to 1024 [ 171.235483][ T4940] kernel write not supported for file /audio1 (pid: 4940 comm: kworker/1:11) [ 171.317158][ T6079] EXT4-fs (loop3): Ignoring removed bh option [ 171.365397][ T6079] EXT4-fs (loop3): inline encryption not supported [ 171.390312][ T6079] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c80ce018, mo2=0000] [ 171.441996][ T6079] EXT4-fs error (device loop3): ext4_map_blocks:629: inode #3: block 2: comm syz.3.344: lblock 2 mapped to illegal pblock 2 (length 1) [ 171.504828][ T6079] Quota error (device loop3): qtree_write_dquot: dquota write failed [ 171.558882][ T6079] EXT4-fs error (device loop3): ext4_map_blocks:629: inode #3: block 48: comm syz.3.344: lblock 0 mapped to illegal pblock 48 (length 1) [ 171.643896][ T6079] Quota error (device loop3): v2_write_file_info: Can't write info structure [ 171.656756][ T6079] EXT4-fs error (device loop3): ext4_acquire_dquot:6209: comm syz.3.344: Failed to acquire dquot type 0 [ 171.703721][ T6079] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5850: Corrupt filesystem [ 171.879592][ T6079] EXT4-fs error (device loop3): ext4_evict_inode:282: inode #11: comm syz.3.344: mark_inode_dirty error [ 172.002817][ T6079] EXT4-fs warning (device loop3): ext4_evict_inode:285: couldn't mark inode dirty (err -117) [ 172.189138][ T6079] EXT4-fs (loop3): 1 orphan inode deleted [ 172.194988][ T6079] EXT4-fs (loop3): mounted filesystem without journal. Opts: usrquota,noblock_validity,bh,max_batch_time=0x00000000000008c9,debug,inlinecrypt,,errors=continue. Quota mode: writeback. [ 172.198099][ T6094] loop4: detected capacity change from 0 to 256 [ 172.229711][ T4413] EXT4-fs error (device loop3): ext4_map_blocks:629: inode #3: block 1: comm kworker/u4:8: lblock 1 mapped to illegal pblock 1 (length 1) [ 172.238726][ T6079] EXT4-fs (loop3): shut down requested (1) [ 172.262872][ T4413] Quota error (device loop3): remove_tree: Can't read quota data block 1 [ 172.269491][ T6094] exfat: Unknown parameter 'sys_tz' [ 172.396819][ T6096] loop5: detected capacity change from 0 to 64 [ 173.305053][ T6112] loop5: detected capacity change from 0 to 1024 [ 173.335584][ T6114] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 173.468421][ T6114] loop4: detected capacity change from 0 to 8 [ 173.543934][ T6112] EXT4-fs (loop5): inline encryption not supported [ 173.573718][ T6112] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 173.626954][ T25] audit: type=1107 audit(1765436933.170:14): pid=6115 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='wg9ЅYlly-zd#i.j}f~bXPd'RWyP3D [ 173.626954][ T25] 3Å%l[Fg9B' [ 173.689050][ T4246] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 174.101395][ T6112] EXT4-fs (loop5): mounted filesystem without journal. Opts: dioread_nolock,data_err=abort,inlinecrypt,noauto_da_alloc,data_err=ignore,nojournal_checksum,errors=remount-ro,grpquota,noblock_validity,user_xattr,nombcache,errors=remount-ro,. Quota mode: writeback. [ 174.126275][ C1] vkms_vblank_simulate: vblank timer overrun [ 174.179734][ T4246] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 174.192695][ T4246] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 174.201937][ T4246] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.260402][ T4246] usb 1-1: config 0 descriptor?? [ 174.318759][ T6125] loop2: detected capacity change from 0 to 256 [ 174.329219][ T4246] pwc: Askey VC010 type 2 USB webcam detected. [ 174.524031][ T6129] loop5: detected capacity change from 0 to 512 [ 174.544005][ T6125] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 174.757917][ T6136] loop4: detected capacity change from 0 to 64 [ 174.764284][ T4246] pwc: recv_control_msg error -32 req 02 val 2b00 [ 174.819117][ T4246] pwc: recv_control_msg error -32 req 02 val 2700 [ 174.883050][ T4246] pwc: recv_control_msg error -32 req 02 val 2c00 [ 175.378188][ T4246] pwc: recv_control_msg error -32 req 04 val 1000 [ 175.635839][ T4940] Bluetooth: hci1: command 0x0406 tx timeout [ 175.648138][ T4246] pwc: recv_control_msg error -32 req 04 val 1300 [ 175.808302][ T4195] Bluetooth: hci3: unknown advertising packet type: 0x52 [ 175.808561][ T4245] Bluetooth: hci2: command 0x0406 tx timeout [ 175.839035][ T4246] pwc: recv_control_msg error -32 req 04 val 1400 [ 176.009870][ T4246] pwc: recv_control_msg error -32 req 02 val 2000 [ 176.339056][ T4246] pwc: recv_control_msg error -71 req 04 val 1500 [ 176.379138][ T4246] pwc: recv_control_msg error -71 req 02 val 2500 [ 176.421120][ T4246] pwc: recv_control_msg error -71 req 02 val 2400 [ 176.449145][ T4246] pwc: recv_control_msg error -71 req 02 val 2600 [ 176.489061][ T4246] pwc: recv_control_msg error -71 req 02 val 2900 [ 176.530854][ T4246] pwc: recv_control_msg error -71 req 02 val 2800 [ 176.569975][ T4246] pwc: recv_control_msg error -71 req 04 val 1100 [ 176.609417][ T4246] pwc: recv_control_msg error -71 req 04 val 1200 [ 176.634030][ T4246] pwc: Registered as video103. [ 176.669472][ T4246] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input6 [ 176.711879][ T4246] usb 1-1: USB disconnect, device number 4 [ 176.733502][ T6172] loop4: detected capacity change from 0 to 1024 [ 176.834315][ T6172] EXT4-fs (loop4): inline encryption not supported [ 176.871647][ T6172] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 176.949686][ T6172] EXT4-fs (loop4): mounted filesystem without journal. Opts: dioread_nolock,data_err=abort,inlinecrypt,noauto_da_alloc,data_err=ignore,nojournal_checksum,errors=remount-ro,grpquota,noblock_validity,user_xattr,nombcache,errors=remount-ro,. Quota mode: writeback. [ 177.027668][ T6176] loop3: detected capacity change from 0 to 8192 [ 177.078997][ T4253] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 177.226662][ T6194] loop0: detected capacity change from 0 to 64 [ 177.468989][ T4253] usb 6-1: Using ep0 maxpacket: 8 [ 178.483632][ T4253] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 178.517485][ T4253] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 178.561069][ T4253] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.609274][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 178.663116][ T4253] usb 6-1: config 0 descriptor?? [ 178.701627][ T6209] loop2: detected capacity change from 0 to 64 [ 178.843343][ T6209] hfs: unable to load iocharset "iso885=-4" [ 178.856262][ T6212] loop3: detected capacity change from 0 to 512 [ 178.858987][ T6209] hfs: unable to parse mount options [ 178.926197][ T6212] FAT-fs (loop3): Invalid FSINFO signature: 0x00025252, 0x61417272 (sector = 1) [ 178.944368][ T4253] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 178.969825][ T6212] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 179.728009][ T6207] loop0: detected capacity change from 0 to 40427 [ 179.786303][ T6207] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 179.807563][ T6207] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 179.840811][ T6207] F2FS-fs (loop0): invalid crc value [ 179.861926][ T6207] F2FS-fs (loop0): Found nat_bits in checkpoint [ 179.965971][ T6207] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 179.994065][ T6207] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 180.011139][ T6228] loop4: detected capacity change from 0 to 1024 [ 180.047166][ T6228] EXT4-fs (loop4): Ignoring removed bh option [ 180.064865][ T25] audit: type=1800 audit(1765436939.610:15): pid=6207 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.382" name="file1" dev="loop0" ino=10 res=0 errno=0 [ 180.085102][ C1] vkms_vblank_simulate: vblank timer overrun [ 180.106589][ T6230] loop2: detected capacity change from 0 to 1024 [ 180.140913][ T6228] EXT4-fs (loop4): mounted filesystem without journal. Opts: nodelalloc,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,stripe=0x0000000000000010,bh,init_itable,. Quota mode: none. [ 180.171694][ T6230] EXT4-fs (loop2): inline encryption not supported [ 180.178255][ T6230] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 180.605068][ T4260] usb 6-1: USB disconnect, device number 2 [ 180.666834][ T6230] EXT4-fs (loop2): mounted filesystem without journal. Opts: dioread_nolock,data_err=abort,inlinecrypt,noauto_da_alloc,data_err=ignore,nojournal_checksum,errors=remount-ro,grpquota,noblock_validity,user_xattr,nombcache,errors=remount-ro,. Quota mode: writeback. [ 180.691692][ C1] vkms_vblank_simulate: vblank timer overrun [ 181.041824][ T6250] loop2: detected capacity change from 0 to 64 [ 183.411983][ T6278] loop0: detected capacity change from 0 to 64 [ 183.475902][ T25] audit: type=1800 audit(1765436943.020:16): pid=6278 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.399" name="file1" dev="loop0" ino=18 res=0 errno=0 [ 183.505563][ T6246] loop4: detected capacity change from 0 to 32768 [ 183.566002][ T6246] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop4 scanned by syz.4.391 (6246) [ 183.871144][ T6280] loop2: detected capacity change from 0 to 40427 [ 183.913716][ T6246] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 183.924334][ T6280] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 183.932143][ T6280] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 183.943683][ T6280] F2FS-fs (loop2): invalid crc value [ 183.947544][ T6246] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 183.960062][ T6246] BTRFS info (device loop4): use zstd compression, level 3 [ 183.967541][ T6246] BTRFS info (device loop4): using free space tree [ 183.974251][ T6246] BTRFS info (device loop4): has skinny extents [ 184.025878][ T6246] BTRFS error (device loop4): open_ctree failed: -12 [ 184.082594][ T6280] F2FS-fs (loop2): Found nat_bits in checkpoint [ 184.148617][ T4172] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop4 scanned by udevd (4172) [ 184.167256][ T6280] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 184.174505][ T6280] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 184.367384][ T6274] loop5: detected capacity change from 0 to 32768 [ 184.418674][ T6274] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 scanned by syz.5.397 (6274) [ 184.842852][ T6274] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 185.030816][ T6274] BTRFS info (device loop5): using free space tree [ 185.037516][ T6274] BTRFS info (device loop5): has skinny extents [ 186.399768][ T6274] BTRFS error (device loop5): open_ctree failed: -12 [ 186.407910][ T4174] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 scanned by udevd (4174) [ 187.343034][ T6352] loop4: detected capacity change from 0 to 1024 [ 187.391291][ T6352] EXT4-fs (loop4): Ignoring removed orlov option [ 187.542202][ T6352] EXT4-fs (loop4): mounted filesystem without journal. Opts: min_batch_time=0x0000000000000009,journal_dev=0x0000000000001045,errors=continue,noquota,data_err=ignore,noblock_validity,delalloc,noauto_da_alloc,orlov,user_xattr,barrier,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none. [ 187.570839][ C1] vkms_vblank_simulate: vblank timer overrun [ 187.980870][ T6370] loop2: detected capacity change from 0 to 64 [ 189.970669][ T6386] netlink: 8 bytes leftover after parsing attributes in process `syz.2.417'. [ 191.341127][ T6414] loop4: detected capacity change from 0 to 16 [ 192.901747][ T6414] erofs: (device loop4): mounted with root inode @ nid 36. [ 192.995650][ T6427] loop0: detected capacity change from 0 to 64 [ 193.937253][ T6447] loop2: detected capacity change from 0 to 16 [ 193.961640][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.967955][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.058465][ T6447] erofs: (device loop2): mounted with root inode @ nid 36. [ 194.203143][ T6447] erofs: (device loop2): z_erofs_fill_inode_lazy: per-inode big pcluster without sb feature for nid 36 [ 194.214907][ T6447] erofs: (device loop2): z_erofs_readpage: failed to read, err [-117] [ 194.223080][ T6447] erofs: (device loop2): erofs_readdir: fail to readdir of logical block 0 of nid 36 [ 194.492566][ T6456] loop2: detected capacity change from 0 to 4096 [ 194.817908][ T6461] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 195.371474][ T6463] Bluetooth: hci0: invalid length 0, exp 2 for type 19 [ 196.049064][ T4187] Bluetooth: hci4: command 0x0406 tx timeout [ 196.082884][ T6479] loop3: detected capacity change from 0 to 256 [ 196.812611][ T6480] syz.0.454 (6480): drop_caches: 2 [ 196.818427][ T6480] syz.0.454 (6480): drop_caches: 2 [ 196.882682][ T6487] loop5: detected capacity change from 0 to 64 [ 197.028971][ T4246] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 197.439024][ T4246] usb 4-1: Using ep0 maxpacket: 32 [ 198.845373][ T4246] usb 4-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 198.854890][ T4246] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.864387][ T4246] usb 4-1: Product: syz [ 198.868582][ T4246] usb 4-1: Manufacturer: syz [ 198.873467][ T4246] usb 4-1: SerialNumber: syz [ 198.879900][ T4246] usb 4-1: config 0 descriptor?? [ 199.159072][ T4246] RobotFuzz Open Source InterFace, OSIF 4-1:0.0: failure sending bit rate [ 199.167671][ T4246] RobotFuzz Open Source InterFace, OSIF: probe of 4-1:0.0 failed with error -71 [ 199.417510][ T4246] usb 4-1: USB disconnect, device number 5 [ 200.100259][ T6527] loop5: detected capacity change from 0 to 64 [ 201.161512][ T4745] Bluetooth: hci3: command 0x0406 tx timeout [ 201.619029][ T4745] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 201.703635][ T6551] loop2: detected capacity change from 0 to 2048 [ 201.715694][ T6549] loop4: detected capacity change from 0 to 2048 [ 201.771569][ T6549] UDF-fs: bad mount option "uid=000000000000000000000x000000000000000400000000000000000000003" or missing value [ 201.805246][ T6553] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 201.822926][ T25] audit: type=1800 audit(1765436961.370:17): pid=6551 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.468" name="file2" dev="loop2" ino=16 res=0 errno=0 [ 201.954034][ T4745] usb 1-1: Using ep0 maxpacket: 8 [ 202.242742][ T25] audit: type=1800 audit(1765436961.390:18): pid=6551 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.468" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 202.310638][ T25] audit: type=1800 audit(1765436961.390:19): pid=6551 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.468" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 202.619370][ T4745] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 202.631683][ T4745] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.639798][ T4745] usb 1-1: Product: syz [ 202.644019][ T4745] usb 1-1: Manufacturer: syz [ 202.648667][ T4745] usb 1-1: SerialNumber: syz [ 202.766171][ T4745] usb 1-1: config 0 descriptor?? [ 202.780248][ T6563] loop3: detected capacity change from 0 to 4096 [ 202.983113][ T6563] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 203.587006][ T6571] loop4: detected capacity change from 0 to 64 [ 203.610473][ T4745] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 203.632192][ T6563] ntfs3: loop3: Failed to load $Extend. [ 203.646353][ T6563] syz.3.473 uses obsolete (PF_INET,SOCK_PACKET) [ 204.005267][ T6575] netlink: 165 bytes leftover after parsing attributes in process `syz.3.473'. [ 204.827838][ T6574] loop2: detected capacity change from 0 to 1024 [ 204.984402][ T6574] EXT4-fs (loop2): inline encryption not supported [ 205.006397][ T6574] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 205.175041][ T6574] EXT4-fs (loop2): mounted filesystem without journal. Opts: dioread_nolock,data_err=abort,inlinecrypt,noauto_da_alloc,data_err=ignore,nojournal_checksum,errors=remount-ro,grpquota,noblock_validity,user_xattr,nombcache,errors=remount-ro,. Quota mode: writeback. [ 205.323968][ C1] vkms_vblank_simulate: vblank timer overrun [ 205.729169][ T4745] dvb_usb_rtl28xxu: probe of 1-1:0.0 failed with error -71 [ 205.757946][ T4745] usb 1-1: USB disconnect, device number 5 [ 207.082747][ T6628] loop3: detected capacity change from 0 to 64 [ 207.759116][ T6635] loop5: detected capacity change from 0 to 1024 [ 207.955383][ T6635] EXT4-fs (loop5): inline encryption not supported [ 207.999044][ T6635] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 208.115812][ T6635] EXT4-fs (loop5): mounted filesystem without journal. Opts: dioread_nolock,data_err=abort,inlinecrypt,noauto_da_alloc,data_err=ignore,nojournal_checksum,errors=remount-ro,grpquota,noblock_validity,user_xattr,nombcache,errors=remount-ro,. Quota mode: writeback. [ 208.140674][ C1] vkms_vblank_simulate: vblank timer overrun [ 208.237287][ T6640] tmpfs: Unknown parameter 'quota' [ 208.409781][ T6632] loop4: detected capacity change from 0 to 32768 [ 208.455814][ T6632] (syz.4.490,6632,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 208.479994][ T6632] (syz.4.490,6632,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 208.552009][ T6645] kvm [6644]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0xc1 data 0xb200 [ 208.567495][ T6632] (syz.4.490,6632,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x656d756e, computed 0xdb849283. Applying ECC. [ 208.585833][ T6645] kvm [6644]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0xc1 data 0x7409100 [ 208.643537][ T6645] kvm [6644]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0xc1 data 0x740e500 [ 208.714555][ T6645] kvm [6644]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0x186 data 0x7401a00 [ 208.729448][ T6632] JBD2: Ignoring recovery information on journal [ 208.901734][ T6632] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 208.970836][ T4183] ocfs2: Unmounting device (7,4) on (node local) [ 210.179302][ T6665] sctp: failed to load transform for md5: -2 [ 210.290366][ T6683] loop3: detected capacity change from 0 to 64 [ 210.352361][ T6681] loop4: detected capacity change from 0 to 1024 [ 210.393525][ T6681] EXT4-fs (loop4): inline encryption not supported [ 210.435844][ T6681] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 210.755526][ T6681] EXT4-fs (loop4): mounted filesystem without journal. Opts: dioread_nolock,data_err=abort,inlinecrypt,noauto_da_alloc,data_err=ignore,nojournal_checksum,errors=remount-ro,grpquota,noblock_validity,user_xattr,nombcache,errors=remount-ro,. Quota mode: writeback. [ 211.432105][ T6697] loop3: detected capacity change from 0 to 64 [ 212.507455][ T6685] loop5: detected capacity change from 0 to 32768 [ 212.523043][ T6710] netlink: 8 bytes leftover after parsing attributes in process `syz.3.511'. [ 212.551217][ T6712] loop4: detected capacity change from 0 to 256 [ 212.563626][ T6685] (syz.5.505,6685,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 212.605475][ T6712] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 212.627248][ T6685] (syz.5.505,6685,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 212.771018][ T6685] JBD2: Ignoring recovery information on journal [ 213.195335][ T6685] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 213.312587][ T6685] [ 213.314937][ T6685] ====================================================== [ 213.321940][ T6685] WARNING: possible circular locking dependency detected [ 213.328953][ T6685] syzkaller #0 Not tainted [ 213.333352][ T6685] ------------------------------------------------------ [ 213.340351][ T6685] syz.5.505/6685 is trying to acquire lock: [ 213.346225][ T6685] ffff8880616f42c8 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#3){+.+.}-{3:3}, at: ocfs2_reserve_suballoc_bits+0x161/0x4350 [ 213.359489][ T6685] [ 213.359489][ T6685] but task is already holding lock: [ 213.366854][ T6685] ffff888077ee42c8 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#5){+.+.}-{3:3}, at: ocfs2_reserve_local_alloc_bits+0x122/0x24c0 [ 213.380339][ T6685] [ 213.380339][ T6685] which lock already depends on the new lock. [ 213.380339][ T6685] [ 213.390736][ T6685] [ 213.390736][ T6685] the existing dependency chain (in reverse order) is: [ 213.399734][ T6685] [ 213.399734][ T6685] -> #8 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#5){+.+.}-{3:3}: [ 213.410259][ T6685] down_write+0x38/0x60 [ 213.414937][ T6685] ocfs2_reserve_local_alloc_bits+0x122/0x24c0 [ 213.421614][ T6685] ocfs2_reserve_clusters_with_limit+0x1bb/0xba0 [ 213.428462][ T6685] ocfs2_lock_allocators+0x2f7/0x5b0 [ 213.428946][ T4940] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 213.434267][ T6685] ocfs2_extend_allocation+0x397/0x1760 [ 213.434290][ T6685] ocfs2_extend_no_holes+0x20b/0x490 [ 213.453561][ T6685] ocfs2_acquire_dquot+0x5fe/0xaf0 [ 213.459187][ T6685] dqget+0x778/0xeb0 [ 213.463604][ T6685] dquot_set_dqblk+0x27/0xf90 [ 213.468806][ T6685] quota_setquota+0x4ac/0x530 [ 213.474017][ T6685] __se_sys_quotactl+0x295/0x6c0 [ 213.479476][ T6685] do_syscall_64+0x4c/0xa0 [ 213.484407][ T6685] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 213.490799][ T6685] [ 213.490799][ T6685] -> #7 (&ocfs2_quota_ip_alloc_sem_key){++++}-{3:3}: [ 213.499628][ T6685] down_write+0x38/0x60 [ 213.504282][ T6685] ocfs2_lock_global_qf+0x1e5/0x270 [ 213.509978][ T6685] ocfs2_acquire_dquot+0x29d/0xaf0 [ 213.515582][ T6685] dqget+0x778/0xeb0 [ 213.519971][ T6685] dquot_set_dqblk+0x27/0xf90 [ 213.525143][ T6685] quota_setquota+0x4ac/0x530 [ 213.530314][ T6685] __se_sys_quotactl+0x295/0x6c0 [ 213.535751][ T6685] do_syscall_64+0x4c/0xa0 [ 213.540670][ T6685] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 213.547061][ T6685] [ 213.547061][ T6685] -> #6 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#4){+.+.}-{3:3}: [ 213.557567][ T6685] down_write+0x38/0x60 [ 213.562219][ T6685] ocfs2_lock_global_qf+0x1c7/0x270 [ 213.567911][ T6685] ocfs2_acquire_dquot+0x29d/0xaf0 [ 213.573515][ T6685] dqget+0x778/0xeb0 [ 213.577905][ T6685] dquot_set_dqblk+0x27/0xf90 [ 213.583085][ T6685] quota_setquota+0x4ac/0x530 [ 213.588258][ T6685] __se_sys_quotactl+0x295/0x6c0 [ 213.593690][ T6685] do_syscall_64+0x4c/0xa0 [ 213.598601][ T6685] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 213.605009][ T6685] [ 213.605009][ T6685] -> #5 (&dquot->dq_lock){+.+.}-{3:3}: [ 213.612622][ T6685] __mutex_lock_common+0x1eb/0x2390 [ 213.618338][ T6685] mutex_lock_nested+0x17/0x20 [ 213.623613][ T6685] dquot_commit+0x5a/0x410 [ 213.628527][ T6685] ext4_write_dquot+0x1f0/0x360 [ 213.633874][ T6685] mark_all_dquot_dirty+0xf9/0x400 [ 213.639480][ T6685] __dquot_alloc_space+0x5d0/0xe20 [ 213.645093][ T6685] ext4_mb_new_blocks+0xf68/0x4940 [ 213.650706][ T6685] ext4_ind_map_blocks+0xdf6/0x20c0 [ 213.656398][ T6685] ext4_map_blocks+0x91f/0x1b30 [ 213.661768][ T6685] ext4_iomap_begin+0x807/0xb80 [ 213.667110][ T6685] iomap_iter+0x620/0xdb0 [ 213.671933][ T6685] __iomap_dio_rw+0x1014/0x1a70 [ 213.677277][ T6685] iomap_dio_rw+0x38/0x90 [ 213.682098][ T6685] ext4_file_write_iter+0x132b/0x17b0 [ 213.687965][ T6685] do_iter_readv_writev+0x497/0x600 [ 213.693655][ T6685] do_iter_write+0x205/0x7b0 [ 213.698743][ T6685] iter_file_splice_write+0x665/0xc50 [ 213.698948][ T4940] usb 4-1: Using ep0 maxpacket: 16 [ 213.704608][ T6685] direct_splice_actor+0xe1/0x130 [ 213.704627][ T6685] splice_direct_to_actor+0x4de/0xbd0 [ 213.721090][ T6685] do_splice_direct+0x1b6/0x2c0 [ 213.726450][ T6685] do_sendfile+0x5d5/0xec0 [ 213.731361][ T6685] __se_sys_sendfile64+0x13b/0x190 [ 213.736973][ T6685] do_syscall_64+0x4c/0xa0 [ 213.741883][ T6685] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 213.748269][ T6685] [ 213.748269][ T6685] -> #4 (&ei->i_data_sem){++++}-{3:3}: [ 213.755909][ T6685] down_write+0x38/0x60 [ 213.760585][ T6685] ext4_truncate+0x96d/0x10d0 [ 213.765753][ T6685] ext4_setattr+0xffe/0x19e0 [ 213.770856][ T6685] notify_change+0xbcd/0xee0 [ 213.775942][ T6685] do_truncate+0x197/0x220 [ 213.780854][ T6685] do_sys_ftruncate+0x31b/0x3d0 [ 213.786197][ T6685] do_syscall_64+0x4c/0xa0 [ 213.791106][ T6685] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 213.797492][ T6685] [ 213.797492][ T6685] -> #3 (jbd2_handle){++++}-{0:0}: [ 213.804754][ T6685] start_this_handle+0x1338/0x15a0 [ 213.810364][ T6685] jbd2__journal_start+0x2b7/0x5a0 [ 213.815972][ T6685] jbd2_journal_start+0x26/0x30 [ 213.821321][ T6685] ocfs2_start_trans+0x374/0x6c0 [ 213.826756][ T6685] ocfs2_shutdown_local_alloc+0x1fd/0xa10 [ 213.829048][ T4940] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 213.832971][ T6685] ocfs2_dismount_volume+0x1de/0x880 [ 213.841093][ T4940] usb 4-1: config 0 has no interface number 0 [ 213.846715][ T6685] generic_shutdown_super+0x130/0x300 [ 213.854091][ T4940] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 213.858622][ T6685] kill_block_super+0x7c/0xe0 [ 213.869713][ T4940] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 213.874610][ T6685] deactivate_locked_super+0x93/0xf0 [ 213.884515][ T4940] usb 4-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 213.890067][ T6685] cleanup_mnt+0x418/0x4d0 [ 213.890087][ T6685] task_work_run+0x125/0x1a0 [ 213.890104][ T6685] exit_to_user_mode_loop+0x10f/0x130 [ 213.899386][ T4940] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.904011][ T6685] exit_to_user_mode_prepare+0xee/0x180 [ 213.915098][ T4940] usb 4-1: config 0 descriptor?? [ 213.922918][ T6685] syscall_exit_to_user_mode+0x16/0x40 [ 213.922942][ T6685] do_syscall_64+0x58/0xa0 [ 213.922958][ T6685] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 213.922976][ T6685] [ 213.922976][ T6685] -> #2 (&journal->j_trans_barrier){.+.+}-{3:3}: [ 213.959606][ T6685] down_read+0x44/0x2e0 [ 213.964259][ T6685] ocfs2_start_trans+0x368/0x6c0 [ 213.969708][ T6685] ocfs2_shutdown_local_alloc+0x1fd/0xa10 [ 213.975942][ T6685] ocfs2_dismount_volume+0x1de/0x880 [ 213.981724][ T6685] generic_shutdown_super+0x130/0x300 [ 213.987591][ T6685] kill_block_super+0x7c/0xe0 [ 213.992771][ T6685] deactivate_locked_super+0x93/0xf0 [ 213.998553][ T6685] cleanup_mnt+0x418/0x4d0 [ 214.003463][ T6685] task_work_run+0x125/0x1a0 [ 214.008557][ T6685] exit_to_user_mode_loop+0x10f/0x130 [ 214.014421][ T6685] exit_to_user_mode_prepare+0xee/0x180 [ 214.020462][ T6685] syscall_exit_to_user_mode+0x16/0x40 [ 214.026419][ T6685] do_syscall_64+0x58/0xa0 [ 214.031327][ T6685] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 214.037717][ T6685] [ 214.037717][ T6685] -> #1 (sb_internal#5){.+.+}-{0:0}: [ 214.045156][ T6685] ocfs2_start_trans+0x269/0x6c0 [ 214.050593][ T6685] ocfs2_shutdown_local_alloc+0x1fd/0xa10 [ 214.056806][ T6685] ocfs2_dismount_volume+0x1de/0x880 [ 214.062589][ T6685] generic_shutdown_super+0x130/0x300 [ 214.068454][ T6685] kill_block_super+0x7c/0xe0 [ 214.073622][ T6685] deactivate_locked_super+0x93/0xf0 [ 214.079422][ T6685] cleanup_mnt+0x418/0x4d0 [ 214.084379][ T6685] task_work_run+0x125/0x1a0 [ 214.089465][ T6685] exit_to_user_mode_loop+0x10f/0x130 [ 214.095330][ T6685] exit_to_user_mode_prepare+0xee/0x180 [ 214.101367][ T6685] syscall_exit_to_user_mode+0x16/0x40 [ 214.107321][ T6685] do_syscall_64+0x58/0xa0 [ 214.112230][ T6685] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 214.118615][ T6685] [ 214.118615][ T6685] -> #0 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#3){+.+.}-{3:3}: [ 214.129102][ T6685] __lock_acquire+0x2c33/0x7c60 [ 214.134465][ T6685] lock_acquire+0x197/0x3f0 [ 214.139466][ T6685] down_write+0x38/0x60 [ 214.144114][ T6685] ocfs2_reserve_suballoc_bits+0x161/0x4350 [ 214.150505][ T6685] ocfs2_reserve_cluster_bitmap_bits+0xc1/0x1c0 [ 214.157283][ T6685] ocfs2_reserve_local_alloc_bits+0x876/0x24c0 [ 214.163933][ T6685] ocfs2_reserve_clusters_with_limit+0x1bb/0xba0 [ 214.170759][ T6685] ocfs2_lock_allocators+0x2f7/0x5b0 [ 214.176563][ T6685] ocfs2_extend_allocation+0x397/0x1760 [ 214.182605][ T6685] ocfs2_extend_no_holes+0x20b/0x490 [ 214.188385][ T6685] ocfs2_acquire_dquot+0x5fe/0xaf0 [ 214.194022][ T6685] dqget+0x778/0xeb0 [ 214.198422][ T6685] dquot_set_dqblk+0x27/0xf90 [ 214.203600][ T6685] quota_setquota+0x4ac/0x530 [ 214.208769][ T6685] __se_sys_quotactl+0x295/0x6c0 [ 214.214205][ T6685] do_syscall_64+0x4c/0xa0 [ 214.219116][ T6685] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 214.225503][ T6685] [ 214.225503][ T6685] other info that might help us debug this: [ 214.225503][ T6685] [ 214.235704][ T6685] Chain exists of: [ 214.235704][ T6685] &ocfs2_sysfile_lock_key[args->fi_sysfile_type]#3 --> &ocfs2_quota_ip_alloc_sem_key --> &ocfs2_sysfile_lock_key[args->fi_sysfile_type]#5 [ 214.235704][ T6685] [ 214.255653][ T6685] Possible unsafe locking scenario: [ 214.255653][ T6685] [ 214.263077][ T6685] CPU0 CPU1 [ 214.268416][ T6685] ---- ---- [ 214.273755][ T6685] lock(&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#5); [ 214.281021][ T6685] lock(&ocfs2_quota_ip_alloc_sem_key); [ 214.289143][ T6685] lock(&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#5); [ 214.298925][ T6685] lock(&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#3); [ 214.306184][ T6685] [ 214.306184][ T6685] *** DEADLOCK *** [ 214.306184][ T6685] [ 214.314297][ T6685] 5 locks held by syz.5.505/6685: [ 214.319289][ T6685] #0: ffff88801f5960e0 (&type->s_umount_key#76){++++}-{3:3}, at: user_get_super+0x118/0x240 [ 214.329434][ T6685] #1: ffff88807a95c0a8 (&dquot->dq_lock){+.+.}-{3:3}, at: ocfs2_acquire_dquot+0x290/0xaf0 [ 214.339403][ T6685] #2: ffff8880616f3488 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#4){+.+.}-{3:3}, at: ocfs2_lock_global_qf+0x1c7/0x270 [ 214.352322][ T6685] #3: ffff8880616f3120 (&ocfs2_quota_ip_alloc_sem_key){++++}-{3:3}, at: ocfs2_lock_global_qf+0x1e5/0x270 [ 214.363597][ T6685] #4: ffff888077ee42c8 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#5){+.+.}-{3:3}, at: ocfs2_reserve_local_alloc_bits+0x122/0x24c0 [ 214.377474][ T6685] [ 214.377474][ T6685] stack backtrace: [ 214.383342][ T6685] CPU: 0 PID: 6685 Comm: syz.5.505 Not tainted syzkaller #0 [ 214.390599][ T6685] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 214.400645][ T6685] Call Trace: [ 214.403901][ T6685] [ 214.406808][ T6685] dump_stack_lvl+0x168/0x230 [ 214.411469][ T6685] ? load_image+0x3b0/0x3b0 [ 214.415973][ T6685] ? show_regs_print_info+0x20/0x20 [ 214.421160][ T6685] ? print_circular_bug+0x12b/0x1a0 [ 214.426334][ T6685] check_noncircular+0x274/0x310 [ 214.431269][ T6685] ? add_chain_block+0x940/0x940 [ 214.436216][ T6685] ? lockdep_lock+0xdc/0x1e0 [ 214.440795][ T6685] ? verify_lock_unused+0x140/0x140 [ 214.445995][ T6685] ? mark_lock+0x94/0x320 [ 214.450307][ T6685] __lock_acquire+0x2c33/0x7c60 [ 214.455140][ T6685] ? verify_lock_unused+0x140/0x140 [ 214.460310][ T6685] ? __mutex_unlock_slowpath+0x19e/0x6a0 [ 214.465927][ T6685] ? do_raw_spin_lock+0x11d/0x280 [ 214.470947][ T6685] ? mutex_unlock+0x10/0x10 [ 214.475425][ T6685] ? __rwlock_init+0x140/0x140 [ 214.480164][ T6685] ? add_chain_block+0x940/0x940 [ 214.485091][ T6685] ? do_raw_spin_unlock+0x11d/0x230 [ 214.490275][ T6685] lock_acquire+0x197/0x3f0 [ 214.494763][ T6685] ? ocfs2_reserve_suballoc_bits+0x161/0x4350 [ 214.500810][ T6685] ? __might_sleep+0xf0/0xf0 [ 214.505373][ T6685] ? read_lock_is_recursive+0x10/0x10 [ 214.510729][ T6685] down_write+0x38/0x60 [ 214.514860][ T6685] ? ocfs2_reserve_suballoc_bits+0x161/0x4350 [ 214.520904][ T6685] ocfs2_reserve_suballoc_bits+0x161/0x4350 [ 214.526783][ T6685] ? __lock_acquire+0x7c60/0x7c60 [ 214.531794][ T6685] ? mark_lock+0x94/0x320 [ 214.536098][ T6685] ? ocfs2_block_group_search+0x470/0x470 [ 214.541790][ T6685] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 214.547743][ T6685] ? lock_chain_count+0x20/0x20 [ 214.552569][ T6685] ? __rwlock_init+0x140/0x140 [ 214.557317][ T6685] ? _raw_spin_lock_irqsave+0x7f/0xf0 [ 214.562669][ T6685] ? _raw_spin_unlock_irqrestore+0x82/0x100 [ 214.568535][ T6685] ? lockdep_hardirqs_on+0x94/0x140 [ 214.573709][ T6685] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 214.579574][ T6685] ? _raw_spin_unlock+0x40/0x40 [ 214.584397][ T6685] ? stack_trace_save+0x98/0xe0 [ 214.589225][ T6685] ? stack_trace_snprint+0xf0/0xf0 [ 214.594342][ T6685] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 214.600302][ T6685] ? stack_depot_save+0x404/0x440 [ 214.605311][ T6685] ? __kasan_kmalloc+0xcc/0xf0 [ 214.610062][ T6685] ? __kasan_kmalloc+0xb5/0xf0 [ 214.614823][ T6685] ? ocfs2_reserve_local_alloc_bits+0x815/0x24c0 [ 214.621158][ T6685] ? ocfs2_reserve_clusters_with_limit+0x1bb/0xba0 [ 214.627633][ T6685] ? ocfs2_lock_allocators+0x2f7/0x5b0 [ 214.628994][ T4940] uclogic 0003:28BD:0071.0002: failed retrieving string descriptor #100: -71 [ 214.633065][ T6685] ? ocfs2_extend_allocation+0x397/0x1760 [ 214.633087][ T6685] ? ocfs2_extend_no_holes+0x20b/0x490 [ 214.633106][ T6685] ? ocfs2_acquire_dquot+0x5fe/0xaf0 [ 214.633123][ T6685] ? dqget+0x778/0xeb0 [ 214.633141][ T6685] ? dquot_set_dqblk+0x27/0xf90 [ 214.633159][ T6685] ? quota_setquota+0x4ac/0x530 [ 214.633179][ T6685] ? __se_sys_quotactl+0x295/0x6c0 [ 214.633199][ T6685] ? do_syscall_64+0x4c/0xa0 [ 214.633218][ T6685] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 214.633249][ T6685] ocfs2_reserve_cluster_bitmap_bits+0xc1/0x1c0 [ 214.633272][ T6685] ? ocfs2_reserve_new_inode+0xc80/0xc80 [ 214.633298][ T6685] ocfs2_reserve_local_alloc_bits+0x876/0x24c0 [ 214.633323][ T6685] ? stack_trace_save+0x98/0xe0 [ 214.633340][ T6685] ? verify_lock_unused+0x140/0x140 [ 214.633363][ T6685] ? stack_depot_save+0x404/0x440 [ 214.633383][ T6685] ? ocfs2_complete_local_alloc_recovery+0x540/0x540 [ 214.633403][ T6685] ? __kasan_kmalloc+0xcc/0xf0 [ 214.633422][ T6685] ? __kasan_kmalloc+0xb5/0xf0 [ 214.633440][ T6685] ? ocfs2_reserve_clusters_with_limit+0xe7/0xba0 [ 214.633462][ T6685] ? ocfs2_lock_allocators+0x2f7/0x5b0 [ 214.633483][ T6685] ? ocfs2_extend_allocation+0x397/0x1760 [ 214.633502][ T6685] ? ocfs2_extend_no_holes+0x20b/0x490 [ 214.633522][ T6685] ? ocfs2_acquire_dquot+0x5fe/0xaf0 [ 214.633539][ T6685] ? dquot_set_dqblk+0x27/0xf90 [ 214.633559][ T6685] ? quota_setquota+0x4ac/0x530 [ 214.633578][ T6685] ? __se_sys_quotactl+0x295/0x6c0 [ 214.633599][ T6685] ? do_syscall_64+0x4c/0xa0 [ 214.633622][ T6685] ? ocfs2_alloc_should_use_local+0x13a/0x2d0 [ 214.633642][ T6685] ? __lock_acquire+0x7c60/0x7c60 [ 214.633662][ T6685] ? do_raw_spin_lock+0x11d/0x280 [ 214.633681][ T6685] ? __rwlock_init+0x140/0x140 [ 214.633699][ T6685] ? do_raw_spin_unlock+0x11d/0x230 [ 214.633717][ T6685] ? _raw_spin_unlock+0x24/0x40 [ 214.633734][ T6685] ? ocfs2_alloc_should_use_local+0x13a/0x2d0 [ 214.633752][ T6685] ? ocfs2_reserve_clusters_with_limit+0x168/0xba0 [ 214.633781][ T6685] ocfs2_reserve_clusters_with_limit+0x1bb/0xba0 [ 214.633803][ T6685] ? ocfs2_reserve_clusters+0x30/0x30 [ 214.633826][ T6685] ? rcu_is_watching+0x11/0xa0 [ 214.633842][ T6685] ? ocfs2_num_free_extents+0x2de/0x5a0 [ 214.633861][ T6685] ? ocfs2_validate_extent_block+0x550/0x550 [ 214.642972][ T4940] uclogic 0003:28BD:0071.0002: failed retrieving pen parameters: -71 [ 214.648291][ T6685] ? ocfs2_read_blocks_sync+0xb30/0xb30 [ 214.661612][ T4940] uclogic 0003:28BD:0071.0002: pen probing failed: -71 [ 214.663023][ T6685] ? psi_task_switch+0x495/0x810 [ 214.667849][ T4940] uclogic 0003:28BD:0071.0002: failed probing parameters: -71 [ 214.672666][ T6685] ocfs2_lock_allocators+0x2f7/0x5b0 [ 214.672692][ T6685] ? _ocfs2_clear_bit+0x40/0x40 [ 214.678266][ T4940] uclogic: probe of 0003:28BD:0071.0002 failed with error -71 [ 214.682391][ T6685] ? ocfs2_read_inode_block+0x11a/0x180 [ 214.682414][ T6685] ? ocfs2_read_inode_block_full+0x1a0/0x1a0 [ 214.682434][ T6685] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 214.697022][ T4940] usb 4-1: USB disconnect, device number 6 [ 214.700295][ T6685] ? lock_chain_count+0x20/0x20 [ 214.700320][ T6685] ocfs2_extend_allocation+0x397/0x1760 [ 214.700347][ T6685] ? finish_task_switch+0x12f/0x640 [ 214.700370][ T6685] ? ocfs2_extend_no_holes+0x490/0x490 [ 214.950276][ T6685] ? __schedule+0x11c3/0x4390 [ 214.954937][ T6685] ? mark_lock+0x94/0x320 [ 214.959242][ T6685] ? ocfs2_allocate_extend_trans+0x5b0/0x5b0 [ 214.965197][ T6685] ? release_firmware_map_entry+0x190/0x190 [ 214.971063][ T6685] ? mark_lock+0x94/0x320 [ 214.975366][ T6685] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 214.981319][ T6685] ? lock_chain_count+0x20/0x20 [ 214.986143][ T6685] ocfs2_extend_no_holes+0x20b/0x490 [ 214.991409][ T6685] ? ocfs2_zero_extend+0x26c0/0x26c0 [ 214.996699][ T6685] ocfs2_acquire_dquot+0x5fe/0xaf0 [ 215.001798][ T6685] ? ocfs2_destroy_dquot+0x40/0x40 [ 215.006883][ T6685] dqget+0x778/0xeb0 [ 215.010756][ T6685] dquot_set_dqblk+0x27/0xf90 [ 215.015408][ T6685] quota_setquota+0x4ac/0x530 [ 215.020081][ T6685] ? quota_getnextquota+0x450/0x450 [ 215.025256][ T6685] ? bpf_lsm_capable+0x5/0x10 [ 215.029917][ T6685] ? do_quotactl+0x4f3/0x710 [ 215.034483][ T6685] __se_sys_quotactl+0x295/0x6c0 [ 215.039394][ T6685] ? __x64_sys_quotactl+0xa0/0xa0 [ 215.044393][ T6685] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 215.050382][ T6685] ? lock_chain_count+0x20/0x20 [ 215.055244][ T6685] ? vtime_user_exit+0x2dc/0x400 [ 215.060159][ T6685] ? lockdep_hardirqs_on+0x94/0x140 [ 215.065332][ T6685] do_syscall_64+0x4c/0xa0 [ 215.069721][ T6685] ? clear_bhb_loop+0x30/0x80 [ 215.074376][ T6685] ? clear_bhb_loop+0x30/0x80 [ 215.079028][ T6685] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 215.084916][ T6685] RIP: 0033:0x7f268e1ac749 [ 215.089309][ T6685] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 215.108891][ T6685] RSP: 002b:00007f268c413038 EFLAGS: 00000246 ORIG_RAX: 00000000000000b3 [ 215.117291][ T6685] RAX: ffffffffffffffda RBX: 00007f268e402fa0 RCX: 00007f268e1ac749 [ 215.125236][ T6685] RDX: 000000000000ee00 RSI: 0000200000000100 RDI: ffffffff80000800 [ 215.133188][ T6685] RBP: 00007f268e230f91 R08: 0000000000000000 R09: 0000000000000000 [ 215.141158][ T6685] R10: 0000200000000280 R11: 0000000000000246 R12: 0000000000000000 [ 215.149126][ T6685] R13: 00007f268e403038 R14: 00007f268e402fa0 R15: 00007ffd171e9d38 [ 215.157097][ T6685] [ 215.286493][ T4512] ocfs2: Unmounting device (7,5) on (node local) [ 215.471940][ T6726] loop2: detected capacity change from 0 to 40427 [ 215.486698][ T6726] F2FS-fs (loop2): build fault injection attr: rate: 23, type: 0x1ffff [ 215.511264][ T6726] F2FS-fs (loop2): Unrecognized mount option "errors=continue" or missing value [ 215.543345][ T6728] loop3: detected capacity change from 0 to 40427 [ 215.589984][ T6728] F2FS-fs (loop3): Unrecognized mount option "errors=continue" or missing value