last executing test programs: 4m43.774138936s ago: executing program 1 (id=66): syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000200)='./file0\x00', 0xa00010, &(0x7f0000000840)=ANY=[@ANYBLOB='nodecompose,decompose,nobarrier,gid=', @ANYRESHEX=0xee01, @ANYBLOB="2c6e6c733d69736f383835392d310000000072726965722c00bcd0f0b5c4e2957974ff5d7ea3c3dcee087e4983684e8a4c4e4e87b134e30ce77162b12885b964b3506ff3eae0f3599447b17861d19be78079e5dd7bdc7f1eb36e31ac14de48349767164f5f6431bbdeaef96a4f2bce64b5cfa76ce3a2c4302374bc5535d7e2eb8dfb2e5d58a37b7e37836597c21f51bcdf6df4cad825cfd9ef5ee9e89e04b15cd3cea9e152d67b9a7eedc5dfe6d85a3ce7c342da8cc969b552197cb8bcc4a1009f38f4a85b7c742101ba5bc03115feca2b994c699812"], 0x6, 0x635, &(0x7f0000000c80)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x400, &(0x7f0000000040), 0x3, 0x4a6, &(0x7f0000000a40)="$eJzs3c9rXNUeAPDvzDRpkua9/niPR9sHr4U+6HtKM/mBNFEXulIXBbHgRqHGZBprJpmQmdQmdJHqrgsXoiiIC/f+BW7syiKIa92LC6lojaCCMHLvzKT5NXXQNAO5nw/czrn33M73nAzfw51z750bQGadTv7JRQxGxBcRcbixunmH042XtbvXp5IlF/X6xe9z6X7JemvX1v87FBGrEdEXEc89FfFybnvc6vLK7GS5XFpsrhdrcwvF6vLKuStzkzOlmdL8yPj5iYnx4bHRiV3r6803X7154eNnej/6+Y07t9/69JOkWYPNuo392E2NrvfE0Q3bDkTE4w8iWBcUmv3p73ZD+FOSz+8fEXEmzf/DUUg/TSAL6vV6/bf6wXbVq3Vg38qnx8C5/FBENMr5/NBQ4xj+nzGQL1eqtYcvV5bmpxvHykeiJ3/5Srk03PyucCR6csn6SFq+tz66ZX0sIj0GfrvQn64PTVXK03s71AFbHNqS/z8VGvkPZISv/JBd8h+yS/5Ddsl/yC75D9kl/yG75D9kl/yH7JL/kF3yH7JL/kMmPXvhQrLUW/e/T19dXpqtXD03XarODs0tTQ1NVRYXhmYqlZn0np25P3q/cqWyMPJILF0r1krVWrG6vHJprrI0X7uU3td/qdSzJ70COnH01K2vchGx+mh/uiR6m3VyFfa3ej0X3b4HGeiOQrcHIKBrTP1BdvmOD+zwE72b9LWrWNj9tgB7I9/tBgBdc/aE83+QVeb/IbvM/0N2OcYHzP9D9pj/h+wabPP8r79teHbXcET8PSK+LPQcbD3rC9gP8t/mmsf/Zw//d3BrbW/ul/QUQW9EvPb+xXevTdZqiyPJ9h/Wt9fea24f7Ub7gU618rSVxwBAdq3dvT7VWvYy7ndPNi5C2B7/QHNusi89Rzmwltt0rUJul65dWL0REcd3ip9rPu+8ceZjYK2wLf6x5muu8RZpew+kz03fm/gnNsT/z4b4J//yXwWy4VYy/gzvlH/5NKdjPf82jz+Du3TtRPvxL78+/hXajH+nOozxygevf9M2/o2IkzvGb8XrS2NtjZ+07WyH8e+8+Py/2tXVP2y8z07xW5JSsTa3UKwur5xLf0dupjQ/Mn5+YmJ8eGx0opjOURdbM9XbPXb889v36/9Am/jt+v9Es03/77D/v/77sxdO3yf+/87s/PkfaxM/0R8RD3UY/8fRr19qV5fEn27T//x94ifbxjqMX33n6YMd7goA7IHq8srsZLlcWlRQUFBYL3R7ZAIetHtJ3+2WAAAAAAAAAAAAAJ3ai8uJu91HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID94PcAAAD//5j81ps=") prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000080)={0x1}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) lsm_get_self_attr(0x64, 0x0, &(0x7f0000001280), 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000540)=@delpolicy={0x50, 0x14, 0x1, 0x0, 0x0, {{@in6=@local, @in6=@mcast2, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, 0x50}}, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x7d0791cba9493985) ioperm(0x2, 0x3, 0x7) statx(0xffffffffffffffff, 0x0, 0x4000, 0x12, 0x0) socket(0x11, 0x80a, 0x1) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r4, &(0x7f0000000380)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "d9298498abdba7f061bd1ca44c226af5160e961711a03760760beeab91e8ff0055e5c0d48bd63ffdb93bd43a847a1597c8ef03da5be42200", 0x37}, 0x60) 4m40.33743477s ago: executing program 1 (id=71): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, 0x0) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x14, 0x0, 0x7d243a6ea807936d, 0x12, 0x25dfdbf8}, 0x14}, 0x1, 0x0, 0x0, 0x48891}, 0x880) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x27}, 0x62) listen(0xffffffffffffffff, 0x3) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) sendmsg$NL802154_CMD_DEL_SEC_DEV(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000440), 0xc, &(0x7f00000004c0)={&(0x7f0000000480)=ANY=[@ANYBLOB='\x00\x00', @ANYRES16, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x8000800}, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r3, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r3, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) ppoll(&(0x7f0000000500)=[{r2}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffe, 0x0, 0x0, 0x3, 0x2000000000000000}, 0x0, &(0x7f00000002c0)={0x3ff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) r5 = socket$unix(0x1, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x91}, 0x24044884) syz_genetlink_get_family_id$ieee802154(0x0, r0) 4m36.383845359s ago: executing program 1 (id=78): r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f0000002540)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) write$UHID_INPUT(r5, &(0x7f0000001040)={0xf, {"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", 0x1000}}, 0x96d) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) openat$bsg(0xffffff9c, &(0x7f0000000000), 0x80800, 0x0) socket$alg(0x26, 0x5, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000000), 0x4) syz_open_dev$sndpcmp(&(0x7f0000000040), 0x1, 0x2800) r6 = syz_open_procfs(0x0, &(0x7f0000000240)='smaps\x00') pread64(r6, &(0x7f0000000280)=""/70, 0x46, 0xbbf9) 4m33.186082902s ago: executing program 1 (id=82): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x1, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) ioctl$DRM_IOCTL_LOCK(0xffffffffffffffff, 0x4008642a, &(0x7f00000002c0)={0x0, 0x20}) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x18, 0x2, 0x9, 0x201, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFCTH_TUPLE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x600000c4}, 0x40840) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0xb0180) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000001280)=[0x0], 0x1}) socket$inet6(0xa, 0x80002, 0x0) mount(&(0x7f0000000080)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000180)='efs\x00', 0x200000, 0x0) 4m30.106073092s ago: executing program 1 (id=86): openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x842, 0x0) socket$kcm(0x2, 0x3, 0x2) r0 = socket$inet(0x2, 0x6000000000000001, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a0000000600010014"], 0x1c}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0xfffffffffffffe01, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000000), 0x1, 0x8000) ioctl$LOOP_CONFIGURE(r3, 0x125d, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a0b0400000000000000000200000038000480340001800b00010074617267657400002400028010000100434f4e4e5345434d41524b0005000300ef00000008000240000000000900010073797a30000000000900020073797a32000000001400058008000240000000ce"], 0xa0}}, 0x14b6deac033214c2) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000080)=0x3ad, 0x4) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @local}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$sock_int(r2, 0x1, 0x29, &(0x7f0000000000)=0x7b, 0x4) recvfrom$inet(r2, 0x0, 0x0, 0x2043, 0x0, 0x0) mmap(&(0x7f0000001000/0x200000)=nil, 0x200000, 0x1, 0x11, r0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_io_uring_setup(0x1239, &(0x7f0000000380)={0x0, 0x3c3, 0x80, 0x3, 0x2b9}, &(0x7f0000000040)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r5, r6, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000080)=@l2tp={0x2, 0x0, @local, 0x3}}) syz_emit_ethernet(0xb6, &(0x7f0000000080)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xa8, 0x0, 0x0, 0xfe, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, @time_exceeded={0x3, 0x1, 0x0, 0x3, 0x24, 0x0, {0x23, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @local, @loopback=0xac1414aa, {[@cipso={0x86, 0x71, 0xffffffffffffffff, [{0x0, 0xb, "e256b28c59881681fb"}, {0x1, 0x9, "020007651442eb"}, {0x0, 0xe, "7434954373561de584b703c8"}, {0x0, 0x9, "e706d30bd224f8"}, {0x2, 0x7, "cfa11cab1a"}, {0x0, 0x12, "8475be675de6a70a05a0dc91e57ac4c6"}, {0x0, 0x6, "6580a5e9"}, {0x0, 0x12, "73bc23f9ffffffa30900a301c8460000"}, {0x0, 0xf, "c8f46976e79ea788f03d9d3205"}]}, @cipso={0x86, 0x6, 0x20}]}}}}}}}, 0x0) r7 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) ioctl$UDMABUF_CREATE_LIST(r7, 0x40087543, &(0x7f0000000080)=ANY=[@ANYBLOB="0000ac000001"]) 4m26.95350001s ago: executing program 1 (id=90): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_generic(0x10, 0x3, 0x10) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f00000001c0), 0x0, 0x0, 0x1) syz_emit_vhci(0x0, 0x7) socket$inet_sctp(0x2, 0x1, 0x84) write$USERIO_CMD_SET_PORT_TYPE(0xffffffffffffffff, 0x0, 0x0) ioctl$CEC_TRANSMIT(0xffffffffffffffff, 0xc0386105, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r5 = fsopen(&(0x7f00000001c0)='devpts\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r2, 0x4038ae7a, &(0x7f0000000340)={0x80, 0x40000094, 0x0, 0x0}) r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_RUN(r6, 0xae80, 0x0) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x40040000) 4m11.414097864s ago: executing program 32 (id=90): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_generic(0x10, 0x3, 0x10) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f00000001c0), 0x0, 0x0, 0x1) syz_emit_vhci(0x0, 0x7) socket$inet_sctp(0x2, 0x1, 0x84) write$USERIO_CMD_SET_PORT_TYPE(0xffffffffffffffff, 0x0, 0x0) ioctl$CEC_TRANSMIT(0xffffffffffffffff, 0xc0386105, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r5 = fsopen(&(0x7f00000001c0)='devpts\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r2, 0x4038ae7a, &(0x7f0000000340)={0x80, 0x40000094, 0x0, 0x0}) r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_RUN(r6, 0xae80, 0x0) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x40040000) 59.562194843s ago: executing program 3 (id=386): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0xfffffffe, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x7fffffff}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000880}, 0x0) 58.764158033s ago: executing program 3 (id=390): r0 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x14, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000480)=@tipc=@nameseq={0x1e, 0x1, 0x3, {0x41, 0x0, 0x2}}, 0x80, 0x0}, 0x4004) 58.500186668s ago: executing program 3 (id=393): unshare(0x2000400) r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, 0x0, 0x10) 56.504130335s ago: executing program 3 (id=401): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x8, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb01001800000000000000680000006800000002000000000000000000000d0a000000000000000200000604"], &(0x7f0000000f40)=""/4089, 0x82, 0xff9, 0x5, 0x0, 0x0, @void, @value}, 0x20) 56.3797006s ago: executing program 3 (id=402): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$getregset(0x4204, r0, 0x1, 0xfffffffffffffffc) 56.193448375s ago: executing program 3 (id=405): syz_mount_image$bcachefs(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x200414, &(0x7f0000000400)=ANY=[], 0xff, 0x5ad0, &(0x7f000000bec0)="$eJzs3X+QHNV9IPDXM7Pa2V39WAkcZDCrRUYJwbG14ldhOxXLucROgUPJ5ZRjcbJhgRWRLQmVfgSQSSxy4LMO7LJTziU4+YNQmDuM4uIKEqNQJvw4ibOxVSQOdYWps++w//AV4VAFUKiUj03tTL/Zmd7p7dnZWUnA51PS9vSbN9/3+vXrnn5vencCAAAAbwmHb9117LLTf/O7fzTx6ud+62+33RyGyrX0aswwnC5vOFE15Hjqr6ysLbP94pc++42fjl7969+5f/Drrx265qzNP/yNU65++NOXHLzjzx97ZcmDrz9fFDf2p3On15MXkxCq3z76J58/9NRpU2nJ0qmfpX0hLE9WPLY8aY3wL3/fqGMIYWUm/gOvnr95annzbf0t6csy+fT3t7ap/TzVsfYeu/5d4Ucf3HjL91d986/6DrywbzpLUm3qTyEsvbL59X0hhIH0f0j7Ymjqj7HTbgghDDa97uKCer2zw/qvzVk/I10uSpdDBXHi86sz66VMvux61JdZDhaUN1959egmX+2IX/HXs+ZZnFlPOiy/U3n1jOnL0+W30uW5c4xfTrehnIRSEiqN6m9NpvtIaNpvSUhq+7LaWC819m1Itz+znmTWS5n1cl9mu2rlph2tnCSt6TFfJj2ejitp+lnN5+o2PpaT/vZ0WU0P1Nfiesg+qBua8aCxXTWxXkdnqcvxUGo6B7VLb+z4dGcMpWlDyYoZr5lsIz53aOPta8qbHj883L4ajWKGaj1p7vH3fm/54k/dt39P9n29UcCVpTR+qav4P770yEuX77/ra7nxvxzjl7uKf94jgy9e+sStq3PaJyRHkzR+Zfb4ldbC4nPjzz/5xVWnXnUgt/53xvjVruq//uCR/iXHHnk0t/5jsX0Guor/3Ps/9JN7n3nohdz4IcYf7Cr+poM7vtQ/cuyc3PiPxvYZ6q7/vHzgomdHRn42mhf/6Rh/yVT8i8Mc49+z74733b3stkty9++G2D7DXdX/I2c/fMviYw+dmXfuTO7s9B0WgHZOSa+xvpCudzvOnK+m8cKfjVbqF2iL0/9LellQ5uJzqpylvYwPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACGEt73rf3z4/3x8+MVKut6fPniuVF/G9EUhJAMhhF27x3fu3rL92tFPX7dn5/bxraPju0cntu/eeePoBb8yunNix9bxG6eeHXv3+fXXrQhJfZmcOaPsgTA5WRpuTYvl/buzD/xozcX/959CGHvbD0YqufVfe8e2u09t8zMjWT/5gW17LvvBhX+ZbtdwWq/hNvWanJycDDn1+n+f+Pndf3z0p+eEMPYLs9Xryed+7e8aFarGhOk4qVJ/qFeoPxlsW49GrdP6xPaqbN6ydWJs9vaden05Zzv+/Wdf+NfNN3zl5/X2reZuR4ftO7B+cmvpTzd+5P//6U31hKJ6naj9XtTecSti/WL7VdP2Xppu19Kc7arkbNet33/0mW+fvj+/oQu2qy/tAH3J2zsqN27dYLK8Jb2a5o8Via9bu3vbjrW7btz77i3bxq+duHZi+3vXXbDuorELL7pwbW3L1/Zm+1/ZF8YqL68aDLH8X+xw+3vRnwayR9+Mcpf9/r5vxZ+d9afWei2ac3tM1au4PZprlHf8DX7s81997x1PXFZPKOrnMXfjfJIuB6f287rQ1N9mtlW77SraPyGE0Xbt8NIrl4TT/ueWW4rOQ817pvlnRrJ+8qnV//yXF//Fyl+tJxyX83xzhbo8zzdqPV2fWntV0/0xeZK2b38op9s11LZe6556ou/2w//0B436LVoUbhjfvXvnuvrPxWlNFydntK1XNjVu16raz3JImyU0ummb/jqlL9Trlz1/xuxnZsoYSp8bSla03a6s+NyhjbevKW96/HBeSyf310scCEvqy+QdOTm3Zl5YblS4Xfkn6/FX1D9GPvwXD378wb+5YEb/OK/+s2i7kpzt+uYz93z161/5j3/Tu+368K8dGf7n//V7a+oJJ/15pVyvSKPWaX2S5vPKeSEUHX+rQvvtaBx//7kc46Y1ar89Rcdftpzp/O3jjWbWh0K5q+P1vEcGX7z0iVtX5x6vR2c7Xps39qaW15ULjteTpf9kj6+k0lqPhTu+WjpKsn7yO184Zd9jn9twej2h6P2ykbtdvz6/g/FH++2KF3D/2Lvzxjd+5YErfji+/g/rCd3v91iX3uz3atq+1Zz2bdQ6jjub2/c9V1+39Zp6elE7n7jr33RZMP6Jp5JdN+79zPjWrRM7d3W2XZ2+n8Zysq3c7ftpPLutKNiu0oztWrgHnbRXzvEW/u7yZ0euG/0P/5htr2u6bq/W420oJF29L+z93vLFn7pv/57hGa9KC7qylMYvdRX/x5ceeeny/Xd9LTf+l2P8Slfxx59/8ourTr3qQG78O5M0frWr+OsPHulfcuyRR3Pjj8X6D3QV/7n3f+gn9z7z0Au58UOMP9Rd+7984KJnR0Z+lhv/6SQtZ+oaKYQHXj1/c309CX3p8Rbr0ddSr5BdTzLrpcx6uXm9FN+E0gLKSdKanoqPz2qqSzu/m5Mer8KqK+vL1+J6yD6YNX3RLEWfEKWmc3+79KLrVACAN7v4+X+8Bo2f/0+kF0r5Mw0wbb7jsJU5ceM4bHo+p3XIsTKNH18f5wFH3hPGppY3j9Yv9Of6OUI8HrLznLGcc97ZGqNwnnOyVv6Mec6i+ffVmfVYr/p8eaVpHJqaOa6phA7m31dnwhTNv2c2v/jzrNEvzKjWaNO8VXb/9aUzZu3udwit7VKZipDXP7LzYvF+jpGlYUOtvA77R/Y+mrgfsvfRxHJOz5w4u72PJq9/DM9sh5Z6xf4R883SP2pVLv48cub+C7O07/T+ax8tu//msL+rIfy3u+LKQn0+24N5w7antE7mDfvblBCf63zecGE/DzMvmRM/PcA6mDd8fVnL647PvGEpkx63o5KmF80nfjwnvUfziY3zVKzX0VnqcjyYTwTerOL4P75HTI3/py7A/yWTr2ickr1qjPFy79Mrt69P0bgje3U+FAa7eh/fdHDHl/pHjp2Te53zaKf36e1oWRssuO+nqB3XZNYL2zFngqZovJctp6jds/dlDIUlXbX7PfvueN/dy267JLfdN9TfSIvb/asta0sK2n2h7+fserzQd7LcZ2C80DZ+Y7zQXf85XvcxFM2fnbD7GNIbnxZqPPI7OelzHY8MznjQ2K6ak3c8Mv1G2t86gQcA0FYc/zc+P0vH//87ZkivI4rGredm1mO83HFrzvVJ3rj1t9PlDZn8Q+lvVMz1uvkjZz98y+JjD52ZO265s9Nx6H9tWRvOjEOzlZjvuDl3HLGhN/eL544jGuOs+Y0Tc+vfGCfOb5ye8zFt0zh9fuPo3PZpjKNb5wG+eqSz+PFzw9z4jXmAHo5zX5/OdPzu1y+Yr8sUFlc7na87IePopa3buSDj6PTXZxdqHP2xnPS5jqOHZjxobFfNyTuObk03jgYA3qzi+D9exsXx/xOZfPP9nD13XNCj6/bs3wNpxH96QcaV0/F7dL9o8bhvoceteeP6ZF+7UuKznY/rF3pe4o19v+jCzwsN1/6AZxp/3dIO43c6T3bCPl8+WcbFaaHGxQAAnMzi+H8gXc8f/89vfDJj/NZXv4ScHp+88cbnzflO3Pi8V5+7G5+3jd/p59Y58U+e+a+FvU/mLT/+j+vp6mSn4//G95HUGf8DALCQ4vg//tpj/Pt//z1dz/7d+oUfp881/mR6SbpAn6On7WGcbpweZhmnfyDn7w7E5zsfp/d4ni3Gb74PwDzA8b0/fmA6v/sAAAA4EfpqI6WZv2f/yXSZ/T37vN/Lvzwnf00HfxO1kl4eX7V758TEFXt2XDO+e+KK7dddM7Hriut3btm9e2J7Pd98x42545a0kn2hkrZH+3zZcduydGJgWc7fQ8jmj2HPqD2Y+fcQssUOFPw9u+n911l98/ZfaZb87fpH3v7Oi/+7Ofmjxv6/+vfOu2Lzriu2bN+ye8v41i17J1qjTzXE4By+NzNJ/8/p+1KffO4/HQ6h/qj2rZkZpbl/f2fcPXOsR8uPGQdSaapFktz9P1WPJFOP5WlNlud9/0FOvb/793/8+2dP/vzeEMbeVn7HXOvdGnL95F9/YuK3dx/+wY6p+pdmrX8jZ1qvou8rzeaP21PZet2u3e/afN2e7dlvlOxOnM8oNdYXaD4jPfzLHc5PbMpJn+vv75dnPDg5dTw/MeWDVx2/igEAnOTi5//xejZ+fviV9AIqpnc+Tq9fOHb7+XHuOH2ss3F69nvJisbp2fxxezsdp1fnOU7Plp8/Th/Izd9unJ437s6L/zs5+eeq837Sxe9jxOHnffv35PaTK7P9ZKBtvuz3GRT1k2z+ufaTZJ79JFt+0XxOu/zt+knefs+L/9Gc/HmK+kOl0R/m9/szuf3hy52dN345s17UH7L559ofSvPsD9nyi/pDu/zt+kPe/s2Lf1lO/k619o+pjlHrFxNXXH/dzs805Vvo778IM2/J6KR+i6ZfO+/vC2xfvyvn98Vinbfvwt73Nf/6h7C+lpJX/4W9r2z+9S9q/zn8/tfSMOO+stz6P51zAul5/Rf2+10y8rLPfP3xmq9NzwRF958VzeNuzEmf6zzuohkPTk5zmscFeiqO/+PHPXH8f1u67PXHQAt9nbTw35P2xvkes5b3reN2//38fo+96DrmLfd+nv3I3fs5AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwBtffwj9lZW1h4dv3XXsstN/87t/NPHq537rb7fd/Euf/cZPR6/+9e/cP/j11w5dc9bmH/7GKVc//OlLDt7x54+9suTB158vjD1c+1k5N12thpC8mIRQ/fbRP/n8oadOm0pLQgjlZHhfCMuTFY8tTzIRxv41hHBNrGql9ckHXj1/89Ty5tv6W9KXZYJktysMlWN9musZwg2FW8QbUDXtZ3uPXf+u8KMPbrzl+6u++Vd9B17YN50lqTb1pxCWXtn8+r4QwkD6P9QPmZqV8cXpckMIYbDpdRcX1OudHdZ/bc76GelyUbocKogTn1+dWS9l8mXXo77McrCgvPnKq0e3+YoszqxnT0bzlVfPmL48XX4rXZ47x/jl+D8JpSRUGtXfmkz3kdC035KQ1PZltbFeauzbkG5/Zj3JrJcy6+W+zHbVyk07WjlJWtNjvkx6PB1X0vSzms/VbXwsJ/3t6bKaHqivxfWQfVA3NONBY7tqYr2OzlKX1H8pztK9UtM5qF16Y8enO2MoTRtKVsx4zWQb8blDG29fU970+OHhnHok9ydp/KSr+Hu/t3zxp+7bv2dlXvwrS2n8Ulfxf3zpkZcu33/X13LjfznGL3cV/7xHBl+89IlbV+e2z9HYPpWu4o8//+QXV5161YHc+t8Z41e7ir/+4JH+JcceeTS3/mOxfQa6iv/c+z/0k3ufeeiF3Pghxh/sKv6mgzu+1D9y7Jzc+I/G9hnqrv+8fOCiZ0dGfjaaF//pGH9JV/Hv2XfH++5edtsluft3Q2yf4a7if+Tsh29ZfOyhM/POncmdvXrnBHhrOiW9xvpCut7tOHO+msYLfzZaqV/zLU7/L+llQRlT5SxdwPgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALw5/cNNF3zyEx/46MZKEkKSk2eyjfhcedH69aNdlDv+/JNfXHXqVQea01a2z9rfRXgAAACgSRyHlxop1bAyXJ8MhDPa5o9zBGfEtaQ1PbuMcZrmCPrmEidk4pTa1KfURZxyl9uVjVPpUZy+HsVZ1KM42UmXOccZCG1l41RDZ/XJhmuOU5nqAR1u1+Cs9ek8zlCP4izuUZwlPYqztEdxlvUozvCscTrvz8t7FGdFj+Kc0qM4p86Ic0m1JWqHcd7Wo/r8Qo/inNajONk55bn2wyVpztPz4tQelAvjVJJy44l28+mnpeWcOc9yhmYtpzq5ZOb7cVflDBRsTyznnZnXlYrL2decv9phOb8493Jat7/Dcn55nuWUCsqJ/faGbP1iOXGtw/5/Y4/i7O1RnM/2KM5NPYrzB3OJ0+YzshjnD3tUn8/NMw5Ap+L4f3q8Nxz6K78aBtMzTnYWII53V9V+zny/yzshxXjvyKQvKoqXHahn4q2aa/2yEwiZeKsz0fpa4lUa45FZ4lWb463JPDnb9r5/ffu6Ncc7N5PeP0u8muzEAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsoH+46YJPfuIDH90YkjD1r63JNuJz5UXr1492Ue6hjbevKW96/HBzWn+li0AAAABAoTgO72ukVEN/ZV3oTxa15Kum8wDVdL08XF+OLA0b6jMHpdr6YLJ81tdV0tet3b1tx9pdN+5995Zt49dOXDux/b3rLlh30diFF124dvOWrRNj9Z8h9BfECyHUph923bj3M+Nbt07s3FVPzNZ/Zfq6qWU611F73ch7wtjU8ubRev1XFJRXmlHewj3obA8CAMC/sWu/oZLV5QPAnzMzd2a8uj/nh//Gxb0O6ypWVmrX0BLvgSDBP4sXIeZaN1lyJenqLrorZpNeSE0pAmVh2fBFGyZp0hv/pET+YcEwS+huEirli3pRaBkqvghl4t6ZM3dm7oxzG8RV+3xenHPm+T7f73O+58WF59wDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADw/llqTM/XZ2bnJpOIZEhOc4BsLF9M09oYdb/y2M4flKbeOrU7ViqMsRAAAAAwUtaHT3Qi5SgV8pGP41d+bY6ugVjt+wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgP89S43p+frM7NzhSUQyJKc5QDaWL6ZpbYy6L7/xwGdfmJr6W3esOsY6AAAAwGhZH57rRMpRjZNiIjl+ufPvRLN3Axv75rfyVmXrbFpnXv+7g2F5J60z75R15n1sRN7W9vmGAAAAgA+/rP8vdCKVKBU2rOmHs/5/VF+f5Z3Yl5dvn9f/rUBx3ZkAAADAu8v6/1InUo1Sodrp19fb72/uy8vmj/q/fTb/5CHzR/0//+L22f/pAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAODDY6kxPV+fmZ3LJxHJkJxms9ksdF0vy8byxTStjVH3zMcn/3HhgVs3d8dKhTEWAgAAAEbK+vDV1rscpcJkTMThK73+1Pl3P/Slhx6ZjohWm18sxg3bdu269szWMcs749kDE99/+tVvr8k7o3U8ZBsEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADeM0uN6fn6zOzcYUlEMiSnOUA2li+maW2Mui99/ot/ue/5R1/pjlXHWAcAAAAYLevDV3v/clSjGMU4duVXd6+/LNc3f9g7AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOCj47pv3viNbQsL2691cWgumvmID8BtuHDRe3Go/zIBAADvtRMjieZ/6bhLDvVdAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHwRLjen5+szsXDmJSIbkNJvNxeVDt2wsX0zT2hh108eeK2146/Enu2PVMdYBAAAARsv68NXevxzVmIiJOGbl16B3Aiv9f+V9vEkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgA2WpMT1fn5md25BEJENymgNkY/limtbGqHvv4r7P3XPk9y7ojpUKYywEAAAAjJT14cVOpBylwsejFCe0fy/0Tkjy7fPg9wKr83b2TJtc97xG16xi5Nc97/a+nRXau2nNK7ej+Urr3JlXW52Xa8+rdc2rRqd8rTNv5WHt6am2YcR9Dnr2AAAA8H7J+v9SJ1KJUqHU1f//tCe/os8FAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIZYakzP12dm55IkIhmS0xwgG8sX07Q2Rt0bf/v/R3z1Z3fs7o5Vx1gHAAAAGC3rw1d7/3JUY1P8X2xa6fuj0puf5f2z/vY9d/3rr6dGnH7swalC/7I/yi5+/dJ5T/QfInK92bmII9v1kiH1fvP7u67f0nz7vojTj8mfsKZevHu93iXT5sP17RfvevrgzhEPBwAAAD4isv5/ohOpRKlwzdD+P+u8R/T/HSsN+JHXL/7i6Pax3ZH3zchV2vVyQ+p9YcsDfz757L+/utz/r633yc7Vp/ddfc/RPQVbkT5J2py5evfWg2ftz2W7btXP99XPnsuXv/XKv6+84c63W/XLUW7HN/bdSqva2mNf+UibC7m9cxe9s7fRW78wZP+3/u7J53+18Y43l+u/ceJkp/4pMah+a+eFofXjsLQ5eelte87Zd2Brb/2IqA2q/9qbF8Rxf7zqlv79T/Yt3P3ku4/9DyBtPrv59f1n3109t7d+0lc/e/4/f/7ePT+587uPZPWzb0VOPWm99XN99Z+5/ajFp26+ZGNv/dyQ/T9x2QtTO2rf+UP//q/oWbUw9C4ier6vSdLm/ac9ePmL29Kb+h8NAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAR8tSY3q+PjM7l0sikiE5zQGysXwxTWtj1H35wudeu+yOH/+wO1YdYx0AAABgtKwPX+39y1GNYhRjcqXvf7i+/eJdTx/cGZXWaFKJSBYjCgs7rtv1iSt37L7mikN38wAAAMC6vHxhstL/FzqRSpQKW2Ki3f/PXL1768Gz9uey/j+3fE4i4sqrFrafHp28Z24/avGpmy/Z2HlPELHyWUB5Oe8zq3nnn/dc5fU/ff3kgXlnruY9u/n1/WffXT03y4vuvDOi837i/tMevPzFbelNnfvrzvvU13YstF9PZOtOXnrbnnP2Hdiaa+cX2ufJ9rpZ3kJu79xF7+xt5CpRWh7Pt/PK7X0DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGstNabn6zOzc5GPSIbkNLu1A9lYvpimtTHqXrTll7cc8dajm7pjpcIYCwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwH/YgQMBAAAAACD/10aoqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwn79hUhV9nEAf56Z2Xdnd3Z1V19oK1pXKwq7UAoi6qaiIjRC6MqQsDQvoiCIKOyiNTQSK7oJsm4kKqi2EAxyk0SLNfon3XRRQYF1EYi0ULtIFxk785xx9jin0dkKpM8Hhmef55zzPb9znmfO7AEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAM4rvZWRentkxyOzd15062dP3T/z5O0fPLTtiife+mls082f7u1//eTU5uVbvr1l6aYDD6yZ3P3K4d8G3/vjWMfgxxvNytSthhBPxBCqH06/+PTU5xfMjcUQQjkOjYcwHJccHo65hNW/hxA2N+ucv3HfzDVb5tptu3rnjS/OheSvK9TKWT0NQ/PrbXUqH8Z5p5rW2dbZx64K39+0fvuXy959p2fi+PjpXeLcPuW0nkJYtLH1+J4QQl/6zMlW20h2cGrXhRD6W467rkNdl55l/asK+hen9n+prXXIybavyPVLuf3y/UxPru3vcL6FKqqj2/06Gcj18w+jhWrWuar9+HBq30/tynPML2efGEoxVJrlPxhPr5HQMm8xxPpcVpv9Uja3lZCuv6fluBhCzPVLuX65J3dd9fOmhVaOcf54tl9uPHscV9L48tZndRt3FYxfmNpq+qKezPoh/0dD7Yw/mtdVl9U1/Re1/BtKLc+gduPNiU+TUUtjtbjkjGNOtZFtm1r/7OXlDR8dGSqoI+6NKT92lb/1i+GBe97e+ehIUf7GUsovdZX/w9qjv9y989WXC/NfyPLLXeVffbD/xNqPd6wovD/T2f2pnFV+TP1s273HPnlu2f/vm2g31/X8PVl+tav6b5w82js4e/BQYf2rs/vT11X+dzfc9uObX+8/Xpgfsvz+rvI3TD78fO/o7JWF+YcaX4VafYV2sX5+nbj2m9HRn8eK8r/K7v9gm/zYMf+N8d3Xv7Z415rC9bkuuz9DKb/vnOq/47ID2wdm919S9OyMe/6uX06A/6al6X+sZ1K/03vmvplS2/fMhWp5X3hprNL4BRpIn07vhgsxd55F/2A+AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMCf7MABCQAAAICg/6/bESgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAATwUAAP//nCAIEA==") syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x84c00, 0x0, 0x0, 0x0, &(0x7f0000000000)) rename(&(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='./file0\x00') 49.224690565s ago: executing program 0 (id=427): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000880)=@newqdisc={0x50, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r1, {0x0, 0x2}, {0xffff, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x20, 0x2, {{0x10, 0x2d, 0x1, 0x1, 0x400, 0x8}, [@TCA_NETEM_DELAY_DIST={0x4}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x40001d4}, 0x4c8d0) 48.243260345s ago: executing program 0 (id=429): r0 = socket$kcm(0xa, 0x922000000003, 0x11) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f00000002c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1={0xff, 0x2}}, 0x80, &(0x7f0000001500)=[{&(0x7f0000000000), 0x4c00}], 0x1}, 0x0) recvmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000340)=""/4106, 0x5d5}], 0x10}, 0x4029498e) 47.860121994s ago: executing program 0 (id=431): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f00000001c0)) readv(r0, &(0x7f0000000540)=[{&(0x7f0000000200)=""/183, 0xb7}, {&(0x7f00000002c0)=""/81, 0x51}], 0x2) 47.246622665s ago: executing program 0 (id=434): r0 = socket(0x10, 0x803, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaa0086dd6075e70000183a00fc0200000000000000000008"], 0x0) sendmsg$nl_route(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000056000100000000f70000000007020000", @ANYRES32, @ANYBLOB="200001"], 0x38}}, 0x0) 46.81999432s ago: executing program 0 (id=436): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000200)=ANY=[@ANYBLOB="61636c2c6865617274626561743d6e6f6e652c6572726f72733d72656d6f756e742d726f2c636f686572656e63793d66756c6c2c636f686572656e63793d66756c6c2c6c6f63616c666c6f636b732c696e74722c6e6f61636c2c00cca95d9508800817f8254b73447649b206b05a00815372e7c7713b4e67be5e222c5d2019012909a42442df3433324596781a5ddeeee07b8da9c3c8b4af28922a1ab0e86562ec9366ce02ae485a9a12eb0fd600b5d190f8b6d77dcf83d81a87561f00aa19b1f1788849412b24a71f5933704df847f0be1a06302aba16"], 0x1, 0x442a, &(0x7f0000008940)="$eJzs3c9PHGUfAPBnBvoW+rZ9oW8PfZM3cRObaNQQ6EmliZTSUmixptrGeNkusG3RhW1gMR56wFsTTyYejIdGE2+cGg5e65/gxWM9N9GDFxOTRszuzgIz7IaVsGDr53NgmOc3+5159pnD8MSJyp25pdzcUq6wkCvP3Fo6k/u4XFqeL4Z4nzTt/9D+9U97OnGdHPS190929fzFd2+cCeH72R+frK+vr4eq7tDU0Jbff/v13szWY0OcqVNtt3lre+WDEMLJbeOq6gohvP9dCFEI4VySNpoce0MIx0I978a9z27m9mg0Dx8Xz+afTt1fGz49ufpgrfXfHoXwVel/r92e//nFruGfXtmj7gEAAAAAAAAAAAAAAAAAeMaNX7t6/Z3BofAoCt2r0fb3dceTY6v3Y9f3zAud/2MBAAAAAAAAAAAAAAAAAADgb2rz/f9cdKLJ+/9jyXGkRf31tzo/Rjpn4u2rYxcGh5L936Nt+a8nSb+c6wr9TfZ9z+7/fi5Tv/n+79v72a3G+Br99oUoHkidx/HAQAjfJBu/n4qOxKXyUuXVW+Xlhdk9G8YzKx3/+u79qegkG/q3G//RTPud3///v9uupur5zb27xJ5r6fh3tSz37adRW/E/n6m3H/Fn99Lx766l9W4tMFKfAKrx/7x75/iPZdrvVPyPhxByUXWsudQMUF3DVNNbrVdIS8f/UC0tNXUmH2Sr+//3TPwvZNo/qPl/JftFRFPp+P+rltaTKrF5//fHO9//FzPtH0T8q+Nf8f3flnT8D9cTu1NFap9ku/P/eKb9TsX/epyM83iUugJWo3p6q/9XR1o6/j3b8jef/+K21n+XMvX36/mv0W/j+a8x/b8c1Z//aC4d/96W5dq9/ycy9To9/4/U1n/sVjr+R2pp6bVzX+1nu/GfzLTfqfjXViU9jfhvzid/HK6nf23915Z0/P9dT4y3llip/ayt/6Kd1/+XM+0fxPqvOv6VuLO9Pi/S8T/aslw1/j+08f1/JVOv8/EPYdBaf9fS8T/Wslzt/u/ZOf5TmXqdjv9LnWwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4Bkwmhz7QhQPpM7jeGAghPPJ+alwJJouzOanS+WZj5ZCGEvSc+FEdLtUni6U8nML5dlivlAqlWdCuJDknww90VKpXMnPF+5e3GirN7pTLCxWpouFSghhPEn/fzjWaGt6rjJfuBtCuLSR95+4vHj3TmEhPzu3+Obg4OBgmNgYQ39U/KRSXKjUe6/nhjC5Ubcv2jK4WvbljbEcjT4sLy8uFEq19Ctb6pTKM4XSljpTSd4XoT+qLC4vzBQqxXypfLvR30EaSY5jE9feu3ZlaFv+zah+HN3fYQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwFz0afuPLEEJ3/SwOIYw0fomalX/4uHg2/3Tq/trw6cnVB2tPWpUDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+JMdOBAAAAAAAPJ/bYSqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqoq7NIxSgNBFAbgN2Ohdh7DatntbFcU0cIVwRPoMTyMHsVLeIcUKdKmCIFkFsJmF7ZJqu9rHszPzHswDwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgHme3ruPt7qJSHG1uYz4+/pfHOYvpf7cj9+/OMOMnM7za/fwWDfl39NRfleOlm3epevV92eM1N7vYE+G+7TX97menGtq36bm6/veRMpVRLQlv005V9W8twAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgyw4cCAAAAAAA+b82QlVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVRV24FgAAAAAQJi/dRR9GwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPArAAD///4CHxA=") open(&(0x7f0000000000)='./file0\x00', 0x8741, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000000)='cifs\x00', 0x0, &(0x7f00000001c0)='=\n\x9b\xa1Q\x83\xe9\n@\xf6\"2a\xd7\x1fch\x1a}#\xfa\xe4\n\xdc[\x03\x97\xcd\xf1\xa6b\x9a\x1f\xff\xff\xffIT\xe4\x8c&\xac\xe6:\xc5\xe8\xd9\"\x82\xd5\xeb\x90\xef1:\xba\xc3\xc3\xd3\xad\'\xc44\x17,,\x8dZz\x04\x17-#F\xc7<\xe6\xf5]%gC\x9e\xca\nS\xc3\xc8\x98\xd8\xc8\x9eZ\xa76\x9f\xc2=\xaa\xcet7\xb9\xbd\xd47\xe3\xc8@$8\v\x9f\xfd\xe1!\x11\x19Y\x06J\x8f\x80\xef9Tw8\x1b\xe2\xf3\x85\xd5}\xa5\xb7\xd5|') 45.691138778s ago: executing program 4 (id=439): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000009c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xc}}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x4}]}], {0x14}}, 0x6c}, 0x1, 0x0, 0x0, 0x20004049}, 0x0) 43.816487991s ago: executing program 4 (id=443): syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000500)='./file0\x00', 0x200001, &(0x7f0000000300)={[{@usrquota}, {@barrier}, {@nogrpid}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1000}}]}, 0x1, 0x511, &(0x7f0000000f80)="$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") r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) fsync(r0) 43.222139825s ago: executing program 0 (id=445): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) unshare(0x400) ioperm(0x0, 0x6e, 0xe) arch_prctl$ARCH_REQ_XCOMP_GUEST_PERM(0x1025, 0x12) bpf$TOKEN_CREATE(0x24, &(0x7f0000000100)={0x0, r2}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x3082ea341ddad53e, 0xb, &(0x7f0000000340)=ANY=[@ANYRES32=r0, @ANYRES8=r1, @ANYRES8=r1, @ANYRES64=r0, @ANYRES32, @ANYRES8=r2], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x0) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f0000000000)={0x18, 0x0, {0x1, @broadcast, 'lo\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r3, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x1, @broadcast, 'lo\x00'}}) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0xa0042, 0x0) write$tcp_mem(r4, &(0x7f0000000280)={0x7, 0x2d, 0xffffffffffffffff, 0x3a, 0x0, 0x2c}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xb, 0x20, &(0x7f0000000700)=ANY=[@ANYBLOB, @ANYBLOB="0000000000000000b7080000010000007b8af8ff00000000bfa200b30000000007020000f8ff8e4cb703000008000000", @ANYRES32=r4], 0x0, 0x6, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001400)={0x0, 0xf, 0x8c8e, 0x8}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 41.631908339s ago: executing program 4 (id=447): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000600)=@raw={'raw\x00', 0xc08, 0x3, 0x458, 0x310, 0x5002004a, 0xb, 0x310, 0xea13, 0x3c0, 0x3c8, 0x3c8, 0x3c0, 0x3c8, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'erspan0\x00', 'bond_slave_1\x00', {}, {}, 0x6}, 0x0, 0x2c8, 0x310, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x2, 0x0, [{}, {0x16, 0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x5}, {}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {0x5}]}}, @inet=@rpfilter={{0x28}, {0x4}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x7a, 0x10, "3116ff3aca4df55cbd426175511a19175df2bdae503ef9a1a8a613ded913"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x4b8) 40.602092121s ago: executing program 33 (id=405): syz_mount_image$bcachefs(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x200414, &(0x7f0000000400)=ANY=[], 0xff, 0x5ad0, &(0x7f000000bec0)="$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") syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x84c00, 0x0, 0x0, 0x0, &(0x7f0000000000)) rename(&(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='./file0\x00') 40.591324088s ago: executing program 2 (id=449): sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x8) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000001c0)=@ipv6_newroute={0x1c, 0x18, 0x111, 0xffffffff, 0x0, {0xa, 0x60, 0x0, 0x0, 0xff, 0x0, 0x0, 0x6}}, 0x1c}}, 0x84054) 40.240155612s ago: executing program 2 (id=450): r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000c80)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x10, &(0x7f0000001cc0)=ANY=[@ANYBLOB='\f@\x00N']) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x14, &(0x7f0000000000)={[{0xd, 0x4e00, "89fa0cffc72fb8d4e261dfc6c3"}]}) 39.060458907s ago: executing program 4 (id=451): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000fcffffff18110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r1}, 0x10) syz_emit_ethernet(0x52, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a3705", 0x1c, 0x2c, 0x0, @remote, @local, {[@routing={0x87, 0x0, 0x0, 0x7}], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x4}}}}}}}, 0x0) 38.615945474s ago: executing program 4 (id=452): syz_mount_image$f2fs(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x8, &(0x7f0000000400)=ANY=[@ANYBLOB="6661756c745f696e6a656374696f6e3d30303030303030303030303030303030313236322c657874656e745f63616368652c616c6c6f635f6d6f64653d64656661756c742c6163746976655f6c6f67733d362c6163746976655f6c6f67733d362c6e6f646973636172642c6a71666d743d76667376312c6e6f61636c2c636865636b706f696e743d64697361626c652c616c6c6f635f6d6f64653d64656661756c742c6e6f657874656e745f63616368652c6e6f757365725f78617474722c6a71666d743d7666736f6c642c66617374626f6f742c6d656d6f72793d6c6f772c696e6c696e655f78617474725f73697a653d3078303030303030303030303030303030392c00fd6f61b352587257ebbb0935298e3f04b3b0867aa93eb8be85a6ff"], 0x1, 0x5505, &(0x7f0000002480)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000140)) 36.937403417s ago: executing program 2 (id=453): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r0, &(0x7f00000086c0)=[{{0x0, 0x0, 0x0}, 0x101}, {{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000006c0)=""/186, 0xba}, {0x0}, {&(0x7f0000000440)=""/84, 0x54}, {&(0x7f00000008c0)=""/4096, 0x1000}, {&(0x7f0000000640)=""/68, 0x44}, {&(0x7f00000007c0)=""/227, 0xe3}, {&(0x7f00000000c0)=""/237, 0xed}], 0x7}, 0x7ffffffc}], 0x4, 0x4022, 0x0) 36.550875444s ago: executing program 2 (id=454): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r0, 0x408, 0x0) 36.152057349s ago: executing program 2 (id=455): syz_mount_image$ext4(&(0x7f0000000240)='ext2\x00', &(0x7f0000000f00)='./file0\x00', 0x2800418, &(0x7f0000000180), 0xfe, 0x263, &(0x7f0000000700)="$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") munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r0 = open(&(0x7f00000000c0)='.\x00', 0x10000, 0x0) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) 35.301540621s ago: executing program 2 (id=456): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x800) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) recvmmsg(r3, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) 34.395623186s ago: executing program 4 (id=457): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000002200)="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", 0x2000, &(0x7f0000006600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000000280), 0x0, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x280}) ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f000040a000/0x800000)=nil, 0x800000}, 0x1}) r3 = syz_open_dev$cec(&(0x7f0000000040), 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r3, 0xc05c6104, &(0x7f00000000c0)={"78b2a6da", 0xfffd, 0x4, 0x8, 0x8, 0x40, "00000000060000000000000000049c", "ccd05b81", "94ff1288", "7431864c", ["786b132ee42458633269a0cc", "84578142d99aafe26aee8ebb", "61114dff22ae89b6328952a9", "539784f5fdb53ba077765d31"]}) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$NFNL_MSG_ACCT_GET(0xffffffffffffffff, 0x0, 0x8881) r4 = openat$sequencer2(0xffffff9c, &(0x7f00000011c0), 0x0, 0x0) ioctl$SNDCTL_SEQ_NRMIDIS(r4, 0xc0045103, &(0x7f0000000040)) 1.131708794s ago: executing program 34 (id=445): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) unshare(0x400) ioperm(0x0, 0x6e, 0xe) arch_prctl$ARCH_REQ_XCOMP_GUEST_PERM(0x1025, 0x12) bpf$TOKEN_CREATE(0x24, &(0x7f0000000100)={0x0, r2}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x3082ea341ddad53e, 0xb, &(0x7f0000000340)=ANY=[@ANYRES32=r0, @ANYRES8=r1, @ANYRES8=r1, @ANYRES64=r0, @ANYRES32, @ANYRES8=r2], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x0) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f0000000000)={0x18, 0x0, {0x1, @broadcast, 'lo\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r3, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x1, @broadcast, 'lo\x00'}}) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0xa0042, 0x0) write$tcp_mem(r4, &(0x7f0000000280)={0x7, 0x2d, 0xffffffffffffffff, 0x3a, 0x0, 0x2c}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xb, 0x20, &(0x7f0000000700)=ANY=[@ANYBLOB, @ANYBLOB="0000000000000000b7080000010000007b8af8ff00000000bfa200b30000000007020000f8ff8e4cb703000008000000", @ANYRES32=r4], 0x0, 0x6, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001400)={0x0, 0xf, 0x8c8e, 0x8}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 225.246909ms ago: executing program 35 (id=456): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x800) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) recvmmsg(r3, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) 0s ago: executing program 36 (id=457): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000002200)="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", 0x2000, &(0x7f0000006600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000000280), 0x0, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x280}) ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f000040a000/0x800000)=nil, 0x800000}, 0x1}) r3 = syz_open_dev$cec(&(0x7f0000000040), 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r3, 0xc05c6104, &(0x7f00000000c0)={"78b2a6da", 0xfffd, 0x4, 0x8, 0x8, 0x40, "00000000060000000000000000049c", "ccd05b81", "94ff1288", "7431864c", ["786b132ee42458633269a0cc", "84578142d99aafe26aee8ebb", "61114dff22ae89b6328952a9", "539784f5fdb53ba077765d31"]}) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$NFNL_MSG_ACCT_GET(0xffffffffffffffff, 0x0, 0x8881) r4 = openat$sequencer2(0xffffff9c, &(0x7f00000011c0), 0x0, 0x0) ioctl$SNDCTL_SEQ_NRMIDIS(r4, 0xc0045103, &(0x7f0000000040)) kernel console output (not intermixed with test programs): te type 12 has an invalid length. [ 143.718113][ T6262] netlink: 'syz.0.68': attribute type 29 has an invalid length. [ 143.726052][ T6262] netlink: 148 bytes leftover after parsing attributes in process `syz.0.68'. [ 143.737587][ T6262] netlink: 'syz.0.68': attribute type 1 has an invalid length. [ 143.745385][ T6262] netlink: 'syz.0.68': attribute type 2 has an invalid length. [ 143.753249][ T6262] netlink: 39 bytes leftover after parsing attributes in process `syz.0.68'. [ 145.164854][ T9] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 145.320447][ T9] usb 4-1: device descriptor read/64, error -32 [ 145.629540][ T9] usb usb4-port1: attempt power cycle [ 145.867919][ T6264] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 146.130291][ T9] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 146.950789][ T9] usb 4-1: device descriptor read/8, error -32 [ 147.641082][ T5904] IPVS: starting estimator thread 0... [ 147.770473][ T6280] IPVS: using max 24 ests per chain, 57600 per kthread [ 148.811521][ T6285] loop3: detected capacity change from 0 to 2048 [ 148.868568][ T6288] loop2: detected capacity change from 0 to 256 [ 148.881499][ T6285] EXT4-fs: Ignoring removed mblk_io_submit option [ 148.893217][ T6288] vfat: Unknown parameter 'shor†name' [ 149.168740][ T6285] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 150.023660][ T6292] [U] [ 150.315473][ T6295] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 234: padding at end of block bitmap is not set [ 151.504741][ T5846] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.768184][ T5891] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 153.741299][ T6325] bio_check_eod: 12 callbacks suppressed [ 153.741320][ T6325] syz.1.82: attempt to access beyond end of device [ 153.741320][ T6325] nbd1: rw=0, sector=0, nr_sectors = 1 limit=0 [ 153.760326][ T6325] efs: cannot read volume header [ 155.990262][ T6332] loop2: detected capacity change from 0 to 256 [ 157.991247][ T6345] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 157.999421][ T6345] overlayfs: failed to set xattr on upper [ 158.008001][ T6345] overlayfs: ...falling back to redirect_dir=nofollow. [ 158.015249][ T6345] overlayfs: ...falling back to index=off. [ 158.021540][ T6345] overlayfs: ...falling back to uuid=null. [ 162.465683][ T6373] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 162.485839][ T6373] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 163.447203][ T6380] loop4: detected capacity change from 0 to 256 [ 163.479872][ T6380] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xc5dfab67, utbl_chksum : 0xe619d30d) [ 165.412263][ T6396] warning: `syz.0.99' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 173.332826][ T6427] €Â0: renamed from bond_slave_1 (while UP) [ 173.548729][ T6433] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 174.134377][ T6432] tty tty25: ldisc open failed (-12), clearing slot 24 [ 175.756731][ T6442] delete_channel: no stack [ 177.198778][ T6448] loop4: detected capacity change from 0 to 2048 [ 177.429204][ T51] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 177.461772][ T51] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 177.477096][ T30] audit: type=1107 audit(1750240015.135:2): pid=6447 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 177.542364][ T51] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 177.552248][ T6448] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 177.580523][ T51] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 177.589071][ T51] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 177.658922][ T6448] ext4 filesystem being mounted at /17/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 177.732927][ T6462] random: crng reseeded on system resumption [ 177.752259][ T6462] Restarting kernel threads ... [ 177.757968][ T6462] Done restarting kernel threads. [ 178.537714][ T6465] loop2: detected capacity change from 0 to 1024 [ 179.740313][ T51] Bluetooth: hci5: command tx timeout [ 179.793218][ T12] hfsplus: b-tree write err: -5, ino 4 [ 180.648570][ T6476] loop2: detected capacity change from 0 to 512 [ 180.662039][ T5831] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.823689][ T51] Bluetooth: hci5: command tx timeout [ 182.801631][ T6494] [U]  [ 182.908865][ T1099] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.901720][ T51] Bluetooth: hci5: command tx timeout [ 183.937107][ T6499] loop2: detected capacity change from 0 to 8 [ 184.189376][ T6456] chnl_net:caif_netlink_parms(): no params data found [ 185.497515][ T6508] loop4: detected capacity change from 0 to 256 [ 185.514483][ T6508] exfat: Deprecated parameter 'namecase' [ 185.548657][ T6508] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 186.518162][ T51] Bluetooth: hci5: command tx timeout [ 188.571244][ T1099] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.397726][ T1099] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.052470][ T6553] dlm: no local IP address has been set [ 192.058202][ T6553] dlm: cannot start dlm midcomms -107 [ 192.071526][ T6553] loop2: detected capacity change from 0 to 16 [ 192.097800][ T6553] erofs (device loop2): mounted with root inode @ nid 36. [ 192.196794][ T1099] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.214234][ T6560] loop0: detected capacity change from 0 to 4096 [ 192.251834][ T6560] ntfs3: Bad value for 'dmask' [ 193.239740][ T6569] hub 8-0:1.0: USB hub found [ 193.247731][ T6569] hub 8-0:1.0: 1 port detected [ 194.228752][ T6456] bridge0: port 1(bridge_slave_0) entered blocking state [ 194.274550][ T6456] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.285485][ T6456] bridge_slave_0: entered allmulticast mode [ 194.565383][ T6456] bridge_slave_0: entered promiscuous mode [ 194.822412][ T6456] bridge0: port 2(bridge_slave_1) entered blocking state [ 194.840351][ T6456] bridge0: port 2(bridge_slave_1) entered disabled state [ 195.008370][ T6456] bridge_slave_1: entered allmulticast mode [ 195.034620][ T6456] bridge_slave_1: entered promiscuous mode [ 195.065034][ T6583] kernel profiling enabled (shift: 7) [ 196.598111][ T30] audit: type=1326 audit(1750240034.325:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6571 comm="syz.2.137" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1734d8e929 code=0x0 [ 197.380554][ T6456] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 197.396777][ T6578] team0: No ports can be present during mode change [ 197.407770][ T6594] vlan0: entered promiscuous mode [ 198.162726][ T6594] team0: Port device vlan0 added [ 198.294985][ T6456] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 199.791226][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.797985][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 200.153389][ T6609] loop2: detected capacity change from 0 to 64 [ 200.401660][ T6609] bfs: Unknown parameter 'ÿ00000000000000000005' [ 200.667636][ T6456] team0: Port device team_slave_0 added [ 200.670428][ T6603] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 200.673966][ T30] audit: type=1800 audit(1750240038.395:4): pid=6603 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.143" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 200.683294][ T6603] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 201.485533][ T6603] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 201.663585][ T6603] syz.3.143 (6603) used greatest stack depth: 18776 bytes left [ 201.828176][ T6456] team0: Port device team_slave_1 added [ 202.033733][ T6621] input: syz0 as /devices/virtual/input/input5 [ 202.260821][ T6624] netlink: 36 bytes leftover after parsing attributes in process `syz.4.146'. [ 205.124946][ T6627] loop2: detected capacity change from 0 to 8 [ 205.234904][ T1099] bridge_slave_1: left allmulticast mode [ 205.275056][ T1099] bridge_slave_1: left promiscuous mode [ 205.439040][ T1099] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.828367][ T6627] SQUASHFS error: lzo decompression failed, data probably corrupt [ 205.872016][ T1099] bridge_slave_0: left allmulticast mode [ 205.879880][ T1099] bridge_slave_0: left promiscuous mode [ 205.891571][ T6627] SQUASHFS error: Failed to read block 0x91: -5 [ 205.918487][ T6627] SQUASHFS error: Unable to read metadata cache entry [8f] [ 205.927901][ T1099] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.960278][ T6627] SQUASHFS error: Unable to read inode 0x11f [ 207.510895][ T6646] Illegal XDP return value 4294967294 on prog (id 48) dev N/A, expect packet loss! [ 208.552812][ T6655] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 208.566028][ T6655] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 210.920274][ T1170] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 211.225078][ T6676] hub 6-0:1.0: USB hub found [ 211.239420][ T6676] hub 6-0:1.0: 1 port detected [ 211.307299][ T6676] netlink: 12 bytes leftover after parsing attributes in process `syz.2.156'. [ 212.041683][ T1170] usb 5-1: Using ep0 maxpacket: 8 [ 212.417075][ T1099] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 212.432422][ T1099] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 212.446676][ T1099] bond0 (unregistering): Released all slaves [ 212.462393][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 212.468781][ T5840] Bluetooth: hci1: command 0x0406 tx timeout [ 212.480133][ T5835] Bluetooth: hci0: command 0x0406 tx timeout [ 212.490579][ T1170] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 212.499049][ T1170] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 212.539013][ T1170] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 212.568171][ T1170] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 212.583792][ T6456] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 212.585835][ T1170] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 212.590993][ T6456] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 212.591063][ T6456] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 212.594749][ T6456] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 212.653389][ T6456] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 212.683762][ T6456] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 212.687535][ T1170] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 212.900286][ T1170] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.962098][ T1170] usb 5-1: usb_control_msg returned -32 [ 213.967945][ T1170] usbtmc 5-1:16.0: can't read capabilities [ 215.585987][ T5891] IPVS: starting estimator thread 0... [ 215.750265][ T6695] IPVS: using max 25 ests per chain, 60000 per kthread [ 215.817815][ T6456] hsr_slave_0: entered promiscuous mode [ 215.851649][ T6456] hsr_slave_1: entered promiscuous mode [ 215.858136][ T6456] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 215.890380][ T6456] Cannot create hsr debugfs directory [ 216.114515][ T6705] netlink: 44 bytes leftover after parsing attributes in process `syz.2.161'. [ 216.256734][ T6708] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 216.797838][ T5927] usb 5-1: USB disconnect, device number 2 [ 217.612994][ T6716] loop4: detected capacity change from 0 to 512 [ 217.620511][ T6716] ext3: Unknown parameter 'obj_type' [ 217.778575][ T6719] loop0: detected capacity change from 0 to 512 [ 218.161497][ T6719] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 218.217748][ T6719] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 218.228088][ T6719] EXT4-fs (loop0): group descriptors corrupted! [ 218.678671][ T6725] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 218.678671][ T6725] The task syz.4.166 (6725) triggered the difference, watch for misbehavior. [ 218.722415][ T6726] loop0: detected capacity change from 0 to 8 [ 218.777448][ T6726] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 218.847659][ T6726] cramfs: bad data blocksize 4294967270 [ 218.941243][ T6726] cramfs: Error -3 while decompressing! [ 219.007229][ T6726] cramfs: ffffffff99bcdba2(26)->ffff888077973000(4096) [ 219.071275][ T6726] cramfs: bad data blocksize 3221485902 [ 219.729709][ T6726] cramfs: bad data blocksize 4294967270 [ 219.819470][ T30] audit: type=1800 audit(2000000001.280:5): pid=6726 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.167" name="file2" dev="loop0" ino=348 res=0 errno=0 [ 220.403344][ T6744] sctp: [Deprecated]: syz.3.169 (pid 6744) Use of struct sctp_assoc_value in delayed_ack socket option. [ 220.403344][ T6744] Use struct sctp_sack_info instead [ 220.553882][ T6746] netlink: 24 bytes leftover after parsing attributes in process `syz.4.170'. [ 220.916938][ T6747] loop4: detected capacity change from 0 to 32768 [ 220.924710][ T6747] XFS: noikeep mount option is deprecated. [ 220.930659][ T6747] xfs: Unknown parameter 'obj_role' [ 224.775286][ T6775] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 225.683513][ T6774] loop4: detected capacity change from 0 to 32768 [ 225.831057][ T6774] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 225.928532][ T1099] hsr_slave_0: left promiscuous mode [ 225.943992][ T6774] XFS (loop4): Ending clean mount [ 225.964979][ T6774] XFS (loop4): Quotacheck needed: Please wait. [ 225.993628][ T1099] hsr_slave_1: left promiscuous mode [ 226.016481][ T6791] loop2: detected capacity change from 0 to 256 [ 226.025236][ T1099] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 226.089553][ T6791] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 226.108961][ T1099] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 226.121060][ T6774] XFS (loop4): Quotacheck: Done. [ 226.191731][ T1099] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 226.199322][ T1099] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 226.261983][ T6791] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 226.310445][ T6791] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 226.318339][ T6791] UDF-fs: Scanning with blocksize 512 failed [ 226.406259][ T6791] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 226.408448][ T5831] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 226.472825][ T1099] veth1_macvtap: left promiscuous mode [ 226.478960][ T1099] veth0_macvtap: left promiscuous mode [ 226.490366][ T1099] veth1_vlan: left promiscuous mode [ 226.501650][ T1099] veth0_vlan: left promiscuous mode [ 226.568348][ T6791] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 228.678280][ T6795] process 'syz.3.178' launched '/dev/fd/5' with NULL argv: empty string added [ 229.150337][ T5882] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 229.320265][ T5882] usb 5-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 229.332793][ T5882] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.343680][ T5882] usb 5-1: Product: syz [ 229.347970][ T5882] usb 5-1: Manufacturer: syz [ 229.359718][ T5882] usb 5-1: SerialNumber: syz [ 229.383742][ T5882] usb 5-1: config 0 descriptor?? [ 229.402113][ T5882] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 229.615683][ T5882] gspca_sunplus: reg_r err -32 [ 229.620835][ T5882] sunplus 5-1:0.0: probe with driver sunplus failed with error -32 [ 230.138775][ T1099] team0 (unregistering): Port device team_slave_1 removed [ 230.329027][ T6817] netlink: 'syz.3.181': attribute type 10 has an invalid length. [ 231.002052][ T1099] team0 (unregistering): Port device team_slave_0 removed [ 231.677094][ T6817] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 231.721009][ T6817] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 231.825065][ T6817] syz.3.181 (6817) used greatest stack depth: 18552 bytes left [ 232.997964][ T6456] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 233.017464][ T6823] netlink: 'syz.2.183': attribute type 11 has an invalid length. [ 233.027133][ T6823] netlink: 36 bytes leftover after parsing attributes in process `syz.2.183'. [ 233.079949][ T6456] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 233.082663][ T6825] loop3: detected capacity change from 0 to 64 [ 233.131409][ T6456] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 233.155160][ T5904] usb 5-1: USB disconnect, device number 3 [ 233.214349][ T6456] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 233.366861][ T6830] loop0: detected capacity change from 0 to 512 [ 233.378872][ T6830] EXT4-fs: Ignoring removed i_version option [ 233.385116][ T6830] EXT4-fs: Ignoring removed nobh option [ 233.409462][ T6830] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 233.463807][ T6830] EXT4-fs (loop0): 1 truncate cleaned up [ 233.479447][ T6830] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 234.371073][ T5836] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 236.250833][ T6842] overlay: Unknown parameter '/' [ 238.339858][ T6858] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 239.977500][ T6851] loop4: detected capacity change from 0 to 4096 [ 240.899428][ T6851] ntfs3(loop4): Different NTFS sector size (1024) and media sector size (512). [ 241.190946][ T6851] ntfs3(loop4): Failed to read $UpCase (-4). [ 244.039332][ T6886] macsec0: entered promiscuous mode [ 244.057914][ T6886] macsec0: entered allmulticast mode [ 244.065848][ T6886] veth1_macvtap: entered allmulticast mode [ 244.325923][ T5840] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 244.336380][ T5840] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 244.345189][ T5840] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 244.433123][ T5840] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 244.440980][ T5840] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 244.563027][ T6906] netlink: 8 bytes leftover after parsing attributes in process `syz.0.195'. [ 245.353451][ T5891] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 246.462057][ T5840] Bluetooth: hci3: command tx timeout [ 246.622529][ T5891] usb 4-1: config 0 has no interfaces? [ 246.691410][ T5891] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 246.780355][ T9] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 246.786942][ T5891] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.818420][ T5891] usb 4-1: Product: syz [ 246.849016][ T5891] usb 4-1: Manufacturer: syz [ 246.958903][ T6922] input: syz0 as /devices/virtual/input/input6 [ 247.173346][ T5891] usb 4-1: SerialNumber: syz [ 247.359644][ T9] usb 3-1: New USB device found, idVendor=1b80, idProduct=e396, bcdDevice=a7.b1 [ 247.427521][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.441454][ T5891] usb 4-1: config 0 descriptor?? [ 248.024733][ T6924] loop0: detected capacity change from 0 to 65536 [ 248.061602][ T9] usb 3-1: config 0 descriptor?? [ 248.096653][ T9] usb 3-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 248.124175][ T6924] XFS (loop0): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 248.148732][ T9] dvb_usb_af9015 3-1:0.0: probe with driver dvb_usb_af9015 failed with error -22 [ 248.330956][ T9] usb 3-1: USB disconnect, device number 6 [ 248.447695][ T6924] XFS (loop0): Ending clean mount [ 248.540176][ T5840] Bluetooth: hci3: command tx timeout [ 248.878540][ T6936] overlayfs: missing 'lowerdir' [ 249.365145][ T6937] XFS (loop0): Metadata CRC error detected at xfs_agf_read_verify+0x12f/0x1f0, xfs_agf block 0x1 [ 249.376949][ T6937] XFS (loop0): Unmount and run xfs_repair [ 249.382910][ T6937] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 249.390481][ T6937] 00000000: 58 41 47 46 00 00 00 01 00 00 00 00 00 00 40 00 XAGF..........@. [ 249.399920][ T6937] 00000010: 00 00 00 02 00 00 00 03 00 00 00 00 00 00 00 01 ................ [ 249.409867][ T6937] 00000020: 00 00 00 01 00 00 00 00 00 00 00 01 00 00 00 04 ................ [ 249.419597][ T6937] 00000030: 00 00 00 04 00 00 3f ca 00 00 3f c7 00 00 00 00 ......?...?..... [ 249.429363][ T6937] 00000040: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 249.438447][ T6937] 00000050: 00 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00 ................ [ 249.447659][ T6937] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 249.457172][ T6937] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 249.467194][ T6937] XFS (loop0): metadata I/O error in "xfs_read_agf+0x281/0x5c0" at daddr 0x1 len 1 error 74 [ 249.503760][ T6937] XFS (loop0): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x517/0x8e0 (fs/xfs/xfs_trans_buf.c:311). Shutting down filesystem. [ 249.519728][ T6937] XFS (loop0): Please unmount the filesystem and rectify the problem(s) [ 250.746019][ T5840] Bluetooth: hci3: command tx timeout [ 250.922871][ T5836] XFS (loop0): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 251.608860][ T6948] loop2: detected capacity change from 0 to 1024 [ 252.472162][ T5891] usb 4-1: can't set config #0, error -110 [ 252.787436][ T5840] Bluetooth: hci3: command tx timeout [ 252.834809][ T6958] loop4: detected capacity change from 0 to 2048 [ 252.915879][ T6958] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 253.009026][ T5904] usb 4-1: USB disconnect, device number 6 [ 253.395889][ T6962] hub 2-0:1.0: USB hub found [ 253.404594][ T6962] hub 2-0:1.0: 1 port detected [ 254.233715][ T6902] chnl_net:caif_netlink_parms(): no params data found [ 255.384190][ T6976] orangefs_mount: mount request failed with -4 [ 255.682716][ T1099] bridge_slave_1: left allmulticast mode [ 255.715494][ T1099] bridge_slave_1: left promiscuous mode [ 255.750580][ T1099] bridge0: port 2(bridge_slave_1) entered disabled state [ 255.787641][ T1099] bridge_slave_0: left allmulticast mode [ 255.825083][ T1099] bridge_slave_0: left promiscuous mode [ 255.847668][ T6984] loop3: detected capacity change from 0 to 64 [ 255.949185][ T1099] bridge0: port 1(bridge_slave_0) entered disabled state [ 256.806895][ T6987] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 256.951225][ T6992] loop2: detected capacity change from 0 to 4096 [ 256.959653][ T6992] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512). [ 257.617655][ T6973] sctp: failed to load transform for md5: -2 [ 257.816432][ T6995] minix_free_block (loop3:1): bit already cleared [ 257.823869][ T6995] minix_free_block (loop3:4): bit already cleared [ 257.831683][ T6995] minix_free_block (loop3:3): bit already cleared [ 257.838168][ T6995] minix_free_block (loop3:2): bit already cleared [ 257.844865][ T6995] minix_free_block (loop3:1): bit already cleared [ 258.104719][ T6992] ntfs3(loop2): ino=19, mi_enum_attr [ 258.112383][ T6992] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 258.189049][ T6999] loop0: detected capacity change from 0 to 65 [ 258.372413][ T6992] Process accounting resumed [ 259.214541][ T6999] BFS-fs: bfs_fill_super(): NOTE: filesystem loop0 was created with 512 inodes, the real maximum is 511, mounting anyway [ 259.275241][ T7002] tty tty2: ldisc open failed (-12), clearing slot 1 [ 259.529614][ T7007] loop2: detected capacity change from 0 to 4096 [ 260.173965][ T7009] netlink: 'syz.4.212': attribute type 1 has an invalid length. [ 260.190650][ T7012] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 261.185707][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.202546][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 261.336304][ T30] audit: type=1800 audit(2000000042.800:6): pid=7016 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.211" name="file2" dev="loop2" ino=16 res=0 errno=0 [ 261.905542][ T7025] netlink: 4 bytes leftover after parsing attributes in process `syz.3.213'. [ 262.815134][ T30] audit: type=1326 audit(2000000044.280:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7017 comm="syz.0.214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed7f78e929 code=0x7ffc0000 [ 263.147572][ T1099] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 263.448228][ T30] audit: type=1326 audit(2000000044.280:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7017 comm="syz.0.214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed7f78e929 code=0x7ffc0000 [ 263.471646][ T30] audit: type=1326 audit(2000000044.590:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7017 comm="syz.0.214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fed7f78e52b code=0x7ffc0000 [ 263.721981][ T30] audit: type=1326 audit(2000000045.190:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7017 comm="syz.0.214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fed7f78e52b code=0x7ffc0000 [ 263.730769][ T1099] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 264.564257][ T1099] bond0 (unregistering): Released all slaves [ 266.815154][ T1099] hsr_slave_0: left promiscuous mode [ 267.099016][ T1099] hsr_slave_1: left promiscuous mode [ 267.115616][ T1099] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 267.182193][ T1099] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 272.214718][ T7074] loop3: detected capacity change from 0 to 512 [ 272.360509][ T7074] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 272.612697][ T7074] EXT4-fs error (device loop3): mb_free_blocks:1948: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 273.354496][ T7084] loop4: detected capacity change from 0 to 8 [ 273.361686][ T7084] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 273.425832][ T5880] udevd[5880]: incorrect cramfs checksum on /dev/loop4 [ 273.433727][ T7074] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #11: comm syz.3.224: corrupted inode contents [ 273.485129][ T7074] EXT4-fs error (device loop3): ext4_dirty_inode:6459: inode #11: comm syz.3.224: mark_inode_dirty error [ 273.536193][ T6009] udevd[6009]: incorrect cramfs checksum on /dev/loop4 [ 273.670904][ T7074] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.224: invalid indirect mapped block 1 (level 1) [ 273.727413][ T7074] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #11: comm syz.3.224: corrupted inode contents [ 273.762683][ T7074] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 273.785610][ T7074] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #11: comm syz.3.224: corrupted inode contents [ 273.920420][ T7074] EXT4-fs error (device loop3): ext4_truncate:4597: inode #11: comm syz.3.224: mark_inode_dirty error [ 273.950780][ T7074] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 274.011835][ T7074] EXT4-fs (loop3): 1 truncate cleaned up [ 274.046616][ T7074] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 274.063704][ T1099] team0 (unregistering): Port device team_slave_1 removed [ 274.244631][ T7093] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 274.480224][ T30] audit: type=1326 audit(2000000055.900:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7086 comm="syz.4.228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4881d8e929 code=0x7ffc0000 [ 274.782496][ T7074] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 274.838995][ T30] audit: type=1326 audit(2000000055.900:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7086 comm="syz.4.228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4881d8e929 code=0x7ffc0000 [ 274.866918][ T30] audit: type=1326 audit(2000000055.910:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7086 comm="syz.4.228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=136 compat=0 ip=0x7f4881d8e929 code=0x7ffc0000 [ 274.895243][ T30] audit: type=1326 audit(2000000055.910:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7086 comm="syz.4.228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4881d8e929 code=0x7ffc0000 [ 274.933783][ T1099] team0 (unregistering): Port device team_slave_0 removed [ 274.973394][ T30] audit: type=1326 audit(2000000055.910:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7086 comm="syz.4.228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4881d8e929 code=0x7ffc0000 [ 275.214330][ T7098] loop4: detected capacity change from 0 to 128 [ 277.283321][ T6902] bridge0: port 1(bridge_slave_0) entered blocking state [ 277.293385][ T6902] bridge0: port 1(bridge_slave_0) entered disabled state [ 277.450434][ T6902] bridge_slave_0: entered allmulticast mode [ 277.463632][ T65] kworker/u8:4: attempt to access beyond end of device [ 277.463632][ T65] loop4: rw=1, sector=145, nr_sectors = 8 limit=128 [ 277.470263][ T6902] bridge_slave_0: entered promiscuous mode [ 277.518766][ T65] kworker/u8:4: attempt to access beyond end of device [ 277.518766][ T65] loop4: rw=1, sector=161, nr_sectors = 8 limit=128 [ 277.554978][ T65] kworker/u8:4: attempt to access beyond end of device [ 277.554978][ T65] loop4: rw=1, sector=177, nr_sectors = 8 limit=128 [ 277.775902][ T65] kworker/u8:4: attempt to access beyond end of device [ 277.775902][ T65] loop4: rw=1, sector=193, nr_sectors = 8 limit=128 [ 277.793799][ T6902] bridge0: port 2(bridge_slave_1) entered blocking state [ 277.802361][ T6902] bridge0: port 2(bridge_slave_1) entered disabled state [ 278.048054][ T7110] loop3: detected capacity change from 0 to 512 [ 278.503887][ T6902] bridge_slave_1: entered allmulticast mode [ 278.538376][ T65] kworker/u8:4: attempt to access beyond end of device [ 278.538376][ T65] loop4: rw=1, sector=209, nr_sectors = 8 limit=128 [ 278.539848][ T6902] bridge_slave_1: entered promiscuous mode [ 278.558858][ T7110] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 278.609464][ T65] kworker/u8:4: attempt to access beyond end of device [ 278.609464][ T65] loop4: rw=1, sector=225, nr_sectors = 8 limit=128 [ 278.623403][ T7110] EXT4-fs (loop3): 1 truncate cleaned up [ 278.625898][ T5838] Bluetooth: hci4: command 0x0406 tx timeout [ 278.631747][ T7110] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 278.648079][ T65] kworker/u8:4: attempt to access beyond end of device [ 278.648079][ T65] loop4: rw=1, sector=241, nr_sectors = 8 limit=128 [ 278.750564][ T65] kworker/u8:4: attempt to access beyond end of device [ 278.750564][ T65] loop4: rw=1, sector=257, nr_sectors = 8 limit=128 [ 278.779146][ T65] kworker/u8:4: attempt to access beyond end of device [ 278.779146][ T65] loop4: rw=1, sector=273, nr_sectors = 8 limit=128 [ 278.794797][ T65] kworker/u8:4: attempt to access beyond end of device [ 278.794797][ T65] loop4: rw=1, sector=289, nr_sectors = 8 limit=128 [ 279.125621][ T7116] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.233'. [ 279.911857][ T5846] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 279.951714][ T6902] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 280.021944][ T6902] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 283.266228][ T7131] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 283.757261][ T6902] team0: Port device team_slave_0 added [ 283.832520][ T6902] team0: Port device team_slave_1 added [ 284.063488][ T7137] loop4: detected capacity change from 0 to 128 [ 284.277344][ T7137] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 284.319330][ T6902] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 284.357362][ T6902] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 284.426972][ T7137] ext4 filesystem being mounted at /53/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 284.500222][ T6902] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 285.511957][ T6902] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 285.518961][ T6902] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 285.948728][ T6902] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 286.020337][ T5927] IPVS: starting estimator thread 0... [ 286.047257][ T7146] loop2: detected capacity change from 0 to 32768 [ 286.119166][ T7146] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 286.120490][ T7156] IPVS: using max 28 ests per chain, 67200 per kthread [ 286.182677][ T5831] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 286.396160][ T7146] XFS (loop2): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 286.460595][ T7146] XFS (loop2): Starting recovery (logdev: internal) [ 286.848106][ T7169] evm: overlay not supported [ 286.907309][ T7146] XFS (loop2): Ending recovery (logdev: internal) [ 287.057354][ T6902] hsr_slave_0: entered promiscuous mode [ 287.138927][ T6902] hsr_slave_1: entered promiscuous mode [ 287.147272][ T6902] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 287.156780][ T6902] Cannot create hsr debugfs directory [ 287.427897][ T7177] loop4: detected capacity change from 0 to 16 [ 287.436062][ T7177] erofs: Unknown parameter '0xffffffffffffffff' [ 287.496355][ T7177] loop4: detected capacity change from 0 to 4096 [ 287.505497][ T7177] ntfs3: Unknown parameter '' [ 288.141879][ T5841] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 289.489665][ T7194] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 292.151695][ T7209] loop2: detected capacity change from 0 to 1024 [ 292.163625][ T7209] EXT4-fs (loop2): Cannot use DAX on a filesystem that may contain inline data [ 293.840945][ T7216] loop3: detected capacity change from 0 to 128 [ 293.853880][ T7216] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 294.555542][ T7221] lo speed is unknown, defaulting to 1000 [ 295.761490][ T7221] lo speed is unknown, defaulting to 1000 [ 295.768866][ T7221] lo speed is unknown, defaulting to 1000 [ 295.792596][ T7221] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 295.870307][ T7221] lo speed is unknown, defaulting to 1000 [ 295.878609][ T7221] lo speed is unknown, defaulting to 1000 [ 295.887251][ T7221] lo speed is unknown, defaulting to 1000 [ 295.895803][ T7221] lo speed is unknown, defaulting to 1000 [ 295.904372][ T7221] lo speed is unknown, defaulting to 1000 [ 295.997981][ T6902] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 296.057899][ T6902] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 296.347884][ T6902] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 296.591413][ T7239] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 298.324637][ T6902] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 298.389364][ T7240] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 298.396773][ T7240] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 298.448405][ T7240] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 298.455538][ T7240] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 298.531202][ T7249] loop4: detected capacity change from 0 to 2048 [ 298.545157][ T7232] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 298.638846][ T7249] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 298.649709][ T7240] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 298.655767][ T7240] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 298.724316][ T7263] loop3: detected capacity change from 0 to 128 [ 298.753132][ T7240] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 298.759118][ T7240] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 298.810169][ T7263] EXT4-fs (loop3): Test dummy encryption mode enabled [ 299.272532][ T7263] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 299.979853][ T7263] ext4 filesystem being mounted at /50/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 300.109125][ T7273] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-aesni" [ 300.352340][ T7274] fscrypt: AES-256-XTS using implementation "xts-aes-aesni-avx" [ 301.389571][ T7279] loop2: detected capacity change from 0 to 2048 [ 302.711543][ T7284] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 303.455774][ T7288] loop4: detected capacity change from 0 to 256 [ 304.381444][ T7288] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x46ae1815, utbl_chksum : 0xe619d30d) [ 304.395531][ T7288] exFAT-fs (loop4): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 304.797597][ T5838] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 304.945535][ T5838] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 305.022924][ T5838] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 305.059931][ T5838] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 305.074036][ T5838] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 305.116051][ T5840] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 305.132968][ T5840] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 305.144059][ T5840] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 305.152623][ T5840] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 305.164220][ T5840] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 305.419012][ T7302] loop2: detected capacity change from 0 to 512 [ 306.305115][ T5846] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 306.519426][ T7302] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 306.809648][ T7289] lo speed is unknown, defaulting to 1000 [ 306.854339][ T7302] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 306.885404][ T7314] loop0: detected capacity change from 0 to 164 [ 306.979474][ T7302] ext4 filesystem being mounted at /66/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 307.536033][ T5838] Bluetooth: hci5: command tx timeout [ 307.833848][ T7320] loop3: detected capacity change from 0 to 40427 [ 307.878879][ T7320] F2FS-fs (loop3): build fault injection rate: 690 [ 307.895289][ T7320] F2FS-fs (loop3): invalid crc value [ 308.362398][ T7323] netlink: 12 bytes leftover after parsing attributes in process `syz.0.263'. [ 308.378507][ T30] audit: type=1800 audit(2000000089.840:16): pid=7302 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.260" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 308.419956][ T7326] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 308.435774][ T7320] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 308.584247][ T7302] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.260: bg 0: block 304: padding at end of block bitmap is not set [ 308.686577][ T7302] EXT4-fs (loop2): Remounting filesystem read-only [ 308.808654][ T5846] bio_check_eod: 102 callbacks suppressed [ 308.808677][ T5846] syz-executor: attempt to access beyond end of device [ 308.808677][ T5846] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 308.834559][ T7302] netlink: 'syz.2.260': attribute type 8 has an invalid length. [ 308.856304][ T5846] CPU: 1 UID: 0 PID: 5846 Comm: syz-executor Not tainted 6.16.0-rc2-next-20250618-syzkaller #0 PREEMPT(full) [ 308.856336][ T5846] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 308.856357][ T5846] Call Trace: [ 308.856367][ T5846] [ 308.856378][ T5846] dump_stack_lvl+0x189/0x250 [ 308.856423][ T5846] ? __pfx_dump_stack_lvl+0x10/0x10 [ 308.856455][ T5846] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 308.856483][ T5846] ? __pfx_queue_work_on+0x10/0x10 [ 308.856507][ T5846] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 308.856534][ T5846] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 308.856564][ T5846] ? f2fs_hw_is_readonly+0x39b/0x470 [ 308.856604][ T5846] f2fs_handle_critical_error+0x37c/0x540 [ 308.856640][ T5846] f2fs_write_end_io+0x495/0x810 [ 308.856668][ T5846] ? blkg_put+0x22/0x240 [ 308.856713][ T5846] __submit_merged_bio+0x27a/0x6a0 [ 308.856749][ T5846] __submit_merged_write_cond+0x255/0x530 [ 308.856785][ T5846] f2fs_write_data_pages+0x261d/0x3000 [ 308.856854][ T5846] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 308.856978][ T5846] ? __lock_acquire+0xab9/0xd20 [ 308.857018][ T5846] ? do_raw_spin_lock+0x121/0x290 [ 308.857059][ T5846] ? do_raw_spin_unlock+0x122/0x240 [ 308.857084][ T5846] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 308.857111][ T5846] do_writepages+0x32e/0x550 [ 308.857153][ T5846] ? do_raw_spin_unlock+0x122/0x240 [ 308.857179][ T5846] filemap_fdatawrite+0x199/0x240 [ 308.857210][ T5846] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 308.857302][ T5846] ? do_raw_spin_unlock+0x122/0x240 [ 308.857333][ T5846] f2fs_sync_dirty_inodes+0x31f/0x830 [ 308.857384][ T5846] f2fs_write_checkpoint+0x95a/0x1df0 [ 308.857448][ T5846] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 308.857536][ T5846] ? f2fs_stop_gc_thread+0x7f/0xb0 [ 308.857596][ T5846] ? kfree+0x18e/0x440 [ 308.857632][ T5846] ? kill_f2fs_super+0x298/0x6c0 [ 308.857671][ T5846] kill_f2fs_super+0x2c3/0x6c0 [ 308.857712][ T5846] ? __pfx_kill_f2fs_super+0x10/0x10 [ 308.857741][ T5846] ? radix_tree_delete_item+0x2b6/0x400 [ 308.857781][ T5846] ? shrinker_free+0x2ce/0x3e0 [ 308.857812][ T5846] deactivate_locked_super+0xb9/0x130 [ 308.857846][ T5846] cleanup_mnt+0x425/0x4c0 [ 308.857876][ T5846] ? lockdep_hardirqs_on+0x9c/0x150 [ 308.857910][ T5846] task_work_run+0x1d1/0x260 [ 308.857943][ T5846] ? __pfx_task_work_run+0x10/0x10 [ 308.857968][ T5846] ? __x64_sys_umount+0x122/0x160 [ 308.858009][ T5846] ? exit_to_user_mode_loop+0x40/0x110 [ 308.858047][ T5846] exit_to_user_mode_loop+0xec/0x110 [ 308.858080][ T5846] do_syscall_64+0x2bd/0x3b0 [ 308.858110][ T5846] ? lockdep_hardirqs_on+0x9c/0x150 [ 308.858143][ T5846] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 308.858165][ T5846] ? clear_bhb_loop+0x60/0xb0 [ 308.858193][ T5846] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 308.858215][ T5846] RIP: 0033:0x7f640ab8fc57 [ 308.858243][ T5846] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 308.858261][ T5846] RSP: 002b:00007ffe9417c968 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 308.858284][ T5846] RAX: 0000000000000000 RBX: 00007f640ac10925 RCX: 00007f640ab8fc57 [ 308.858299][ T5846] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe9417ca20 [ 308.858313][ T5846] RBP: 00007ffe9417ca20 R08: 0000000000000000 R09: 0000000000000000 [ 308.858326][ T5846] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffe9417dab0 [ 308.858340][ T5846] R13: 00007f640ac10925 R14: 000000000004b594 R15: 00007ffe9417daf0 [ 308.858378][ T5846] [ 309.244288][ T5846] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 309.887507][ T7338] loop4: detected capacity change from 0 to 512 [ 309.910651][ T7338] EXT4-fs: Ignoring removed i_version option [ 310.238407][ T5838] Bluetooth: hci5: command tx timeout [ 310.924934][ T7338] EXT4-fs (loop4): orphan cleanup on readonly fs [ 310.934776][ T7338] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.267: bg 0: block 131: padding at end of block bitmap is not set [ 310.962513][ T7338] EXT4-fs (loop4): Remounting filesystem read-only [ 310.969508][ T7338] EXT4-fs (loop4): 1 truncate cleaned up [ 310.989063][ T7338] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 311.073389][ T5841] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 311.150458][ T5998] Quota error (device loop2): dquot_write_dquot: Can't write quota structure (error -30). Quota may get out of sync! [ 311.152243][ T5831] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 311.412325][ T5998] Quota error (device loop2): dquot_write_dquot: Can't write quota structure (error -30). Quota may get out of sync! [ 312.302815][ T5840] Bluetooth: hci5: command tx timeout [ 312.457990][ T7358] tipc: Started in network mode [ 312.463371][ T7358] tipc: Node identity aaaaaaaaaa32, cluster identity 4711 [ 312.471695][ T7358] tipc: Enabled bearer , priority 10 [ 313.256786][ T7362] ubi31: attaching mtd0 [ 313.375605][ T7362] ubi31: scanning is finished [ 313.380708][ T7362] ubi31: empty MTD device detected [ 313.473076][ T5834] tipc: Node number set to 10005162 [ 314.212832][ T7368] loop2: detected capacity change from 0 to 32768 [ 314.271739][ T7362] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 314.280371][ T7368] XFS (loop2): DAX unsupported by block device. Turning off DAX. [ 314.306769][ T7362] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 314.340964][ T7368] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 314.382477][ T5840] Bluetooth: hci5: command tx timeout [ 314.570278][ T7362] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 314.577487][ T7362] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 314.915967][ T7368] XFS (loop2): Ending clean mount [ 314.956195][ T7368] XFS (loop2): Quotacheck needed: Please wait. [ 315.352700][ T7362] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 315.359810][ T7362] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 315.513872][ T7362] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 2634837313 [ 315.526997][ T7368] XFS (loop2): Quotacheck: Done. [ 315.579152][ T7362] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 315.630209][ T7377] ubi31: background thread "ubi_bgt31d" started, PID 7377 [ 315.630297][ T7289] chnl_net:caif_netlink_parms(): no params data found [ 315.996044][ T7368] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 316.090166][ T5967] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 316.232266][ T1099] bridge_slave_1: left allmulticast mode [ 316.290145][ T5967] usb 4-1: Using ep0 maxpacket: 32 [ 316.292801][ T1099] bridge_slave_1: left promiscuous mode [ 316.316413][ T5967] usb 4-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice=6d.22 [ 316.342836][ T5967] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 316.350427][ T1099] bridge0: port 2(bridge_slave_1) entered disabled state [ 316.360159][ T5967] usb 4-1: Product: syz [ 316.364383][ T5967] usb 4-1: Manufacturer: syz [ 316.388035][ T5967] usb 4-1: SerialNumber: syz [ 316.404911][ T5841] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 316.411222][ T5967] usb 4-1: config 0 descriptor?? [ 316.430969][ T1099] bridge_slave_0: left allmulticast mode [ 316.444688][ T1099] bridge_slave_0: left promiscuous mode [ 316.452028][ T5967] usbserial_generic 4-1:0.0: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 316.463916][ T1099] bridge0: port 1(bridge_slave_0) entered disabled state [ 316.676206][ T5967] usbserial_generic 4-1:0.0: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 316.711381][ T5967] usbserial_generic 4-1:0.0: device has no bulk endpoints [ 316.812554][ T7399] vivid-000: disconnect [ 316.919528][ T7400] vivid-000: reconnect [ 317.398288][ T7403] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 317.410789][ T7403] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 320.554294][ T5834] usb 4-1: USB disconnect, device number 7 [ 321.528467][ T7415] loop0: detected capacity change from 0 to 32768 [ 321.628837][ T7415] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 321.637341][ T7415] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 321.775286][ T7415] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 321.788325][ T1170] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 321.810243][ T1170] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 321.854129][ T1099] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 323.084857][ T7426] loop2: detected capacity change from 0 to 1024 [ 323.239622][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 323.270383][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 324.070798][ T1099] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 324.193258][ T1099] bond0 (unregistering): Released all slaves [ 324.203196][ T1170] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 2392ms [ 324.214872][ T1170] gfs2: fsid=syz:syz.0: jid=0: Done [ 324.221985][ T7415] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 324.236996][ T7415] gfs2: fsid=syz:syz.0: can't create logd thread: -4 [ 325.536770][ T7434] loop2: detected capacity change from 0 to 512 [ 325.595469][ T7434] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 325.628223][ T7434] EXT4-fs error (device loop2): __ext4_iget:5379: inode #2: block 3072: comm syz.2.279: invalid block [ 325.652065][ T7434] EXT4-fs (loop2): get root inode failed [ 325.704561][ T7434] EXT4-fs (loop2): mount failed [ 325.719455][ T1099] hsr_slave_0: left promiscuous mode [ 325.810618][ T1099] hsr_slave_1: left promiscuous mode [ 325.817871][ T1099] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 326.234543][ T7451] Bluetooth: hci3: Frame reassembly failed (-84) [ 326.895565][ T1099] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 326.998371][ T7449] loop4: detected capacity change from 0 to 8 [ 327.038919][ T7449] SQUASHFS error: Failed to read block 0x62: -5 [ 327.046308][ T7449] squashfs image failed sanity check [ 327.095559][ T7449] fuse: Unknown parameter 'fd0x0000000000000008' [ 327.998038][ T1099] team0 (unregistering): Port device team_slave_1 removed [ 329.050624][ T51] Bluetooth: hci3: command 0x1003 tx timeout [ 329.057050][ T5835] Bluetooth: hci5: command 0x0405 tx timeout [ 329.141113][ T5840] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 329.196816][ T7470] loop2: detected capacity change from 0 to 32768 [ 329.372178][ T7470] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 329.440479][ T1099] team0 (unregistering): Port device team_slave_0 removed [ 329.536449][ T7470] XFS (loop2): Ending clean mount [ 329.545180][ T7483] loop3: detected capacity change from 0 to 1024 [ 329.559671][ T7483] EXT4-fs: Ignoring removed bh option [ 329.567981][ T7470] XFS (loop2): Quotacheck needed: Please wait. [ 329.608428][ T7483] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 329.646908][ T7470] XFS (loop2): Quotacheck: Done. [ 329.700754][ T7483] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (31873!=20869) [ 329.859733][ T7483] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 330.436460][ T5841] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 330.976342][ T7483] EXT4-fs (loop3): failed to open journal device unknown-block(0,5) -6 [ 331.981199][ T7289] bridge0: port 1(bridge_slave_0) entered blocking state [ 331.988435][ T7289] bridge0: port 1(bridge_slave_0) entered disabled state [ 332.004199][ T7289] bridge_slave_0: entered allmulticast mode [ 332.012791][ T7289] bridge_slave_0: entered promiscuous mode [ 332.029905][ T7289] bridge0: port 2(bridge_slave_1) entered blocking state [ 332.039668][ T7289] bridge0: port 2(bridge_slave_1) entered disabled state [ 332.056720][ T7289] bridge_slave_1: entered allmulticast mode [ 332.067473][ T7289] bridge_slave_1: entered promiscuous mode [ 332.352944][ T7498] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 333.231611][ T7502] loop2: detected capacity change from 0 to 256 [ 335.005857][ T7502] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 335.016740][ T7502] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 335.121899][ T7502] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 335.294779][ T7502] exFAT-fs (loop2): error, invalid access to FAT (entry 0xffffffff) [ 335.303761][ T7502] exFAT-fs (loop2): Filesystem has been set read-only [ 335.367434][ T30] audit: type=1800 audit(2000000116.720:17): pid=7502 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.293" name="file1" dev="loop2" ino=1048658 res=0 errno=0 [ 336.058760][ T7289] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 336.107297][ T7289] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 336.257556][ T7513] loop2: detected capacity change from 0 to 8 [ 336.488794][ T7289] team0: Port device team_slave_0 added [ 336.528760][ T7513] SQUASHFS error: lzo decompression failed, data probably corrupt [ 336.570265][ T7513] SQUASHFS error: Failed to read block 0x91: -5 [ 336.576984][ T7513] SQUASHFS error: Unable to read metadata cache entry [8f] [ 337.498153][ T7513] SQUASHFS error: Unable to read inode 0x11f [ 338.144888][ T7289] team0: Port device team_slave_1 added [ 338.457844][ T7507] loop0: detected capacity change from 0 to 32768 [ 338.536506][ T7507] BTRFS: device fsid 9c2593b3-5c40-4e29-8ff3-7b58260955bc devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.298 (7507) [ 339.348850][ T5904] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 339.647421][ T7507] BTRFS error (device loop0): open_ctree failed: -4 [ 339.721233][ T7540] loop3: detected capacity change from 0 to 256 [ 339.833560][ T7289] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 340.081042][ T7289] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 340.113626][ T7289] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 340.131237][ T7543] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 340.144611][ T7540] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 340.322955][ T7289] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 340.590312][ T7540] FAT-fs (loop3): Filesystem has been set read-only [ 340.597779][ T7540] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 340.644740][ T7289] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 341.052713][ T7540] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 341.240963][ T7540] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 341.286078][ T7540] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 341.336973][ T7289] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 341.378453][ T7540] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 341.609749][ T7557] loop2: detected capacity change from 0 to 32768 [ 342.197725][ T7557] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 342.280631][ T7540] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 342.289481][ T7540] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 342.303402][ T7540] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 342.467257][ T7557] XFS (loop2): Ending clean mount [ 342.478154][ T7557] XFS (loop2): Quotacheck needed: Please wait. [ 342.518386][ T7540] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 342.605228][ T30] audit: type=1800 audit(2000000124.070:18): pid=7540 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.305" name="file1" dev="loop3" ino=1048659 res=0 errno=0 [ 342.633469][ T7557] XFS (loop2): Quotacheck: Done. [ 342.673000][ T7540] FAT-fs (loop3): error, fat_free_clusters: deleting FAT entry beyond EOF [ 344.174638][ T7289] hsr_slave_0: entered promiscuous mode [ 344.225409][ T7289] hsr_slave_1: entered promiscuous mode [ 344.261043][ T7289] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 344.269305][ T7289] Cannot create hsr debugfs directory [ 346.080275][ T7589] syz.0.312: attempt to access beyond end of device [ 346.080275][ T7589] nbd0: rw=0, sector=2, nr_sectors = 2 limit=0 [ 346.093790][ T7589] syz.0.312: attempt to access beyond end of device [ 346.093790][ T7589] nbd0: rw=0, sector=16, nr_sectors = 2 limit=0 [ 346.560610][ T5927] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 346.848031][ T5927] usb 5-1: New USB device found, idVendor=1b80, idProduct=e396, bcdDevice=a7.b1 [ 346.866337][ T5927] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 347.838303][ T5841] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 347.861116][ T5927] usb 5-1: config 0 descriptor?? [ 347.927427][ T5927] usb 5-1: can't set config #0, error -71 [ 347.928316][ T7606] loop3: detected capacity change from 0 to 32768 [ 348.020482][ T5927] usb 5-1: USB disconnect, device number 4 [ 348.045369][ T7606] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 348.784058][ T7606] XFS (loop3): Ending clean mount [ 348.793470][ T7606] XFS (loop3): Quotacheck needed: Please wait. [ 349.083012][ T7606] XFS (loop3): Quotacheck: Done. [ 349.241192][ T7629] loop4: detected capacity change from 0 to 1024 [ 349.384149][ T5846] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 349.937066][ T7632] loop4: detected capacity change from 0 to 4096 [ 351.512413][ T7645] /dev/nullb0: Can't open blockdev [ 352.219391][ T7627] loop2: detected capacity change from 0 to 32768 [ 353.233298][ T7665] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 353.242538][ T7665] xt_CT: You must specify a L4 protocol and not use inversions on it [ 354.059434][ T7289] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 355.163046][ T7289] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 355.970442][ T7687] xt_CT: You must specify a L4 protocol and not use inversions on it [ 356.038554][ T7289] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 356.065694][ T7690] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 356.113744][ T7690] xt_TPROXY: Can be used only with -p tcp or -p udp [ 356.151926][ T7289] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 356.512242][ T7710] loop3: detected capacity change from 0 to 256 [ 356.575496][ T7711] loop2: detected capacity change from 0 to 256 [ 356.618963][ T7289] 8021q: adding VLAN 0 to HW filter on device bond0 [ 356.999680][ T7716] netlink: 'syz.0.337': attribute type 2 has an invalid length. [ 357.127303][ T7718] loop0: detected capacity change from 0 to 64 [ 357.531982][ T7289] 8021q: adding VLAN 0 to HW filter on device team0 [ 357.602206][ T6038] bridge0: port 1(bridge_slave_0) entered blocking state [ 357.610331][ T6038] bridge0: port 1(bridge_slave_0) entered forwarding state [ 357.715928][ T6038] bridge0: port 2(bridge_slave_1) entered blocking state [ 357.723359][ T6038] bridge0: port 2(bridge_slave_1) entered forwarding state [ 358.962484][ T7746] loop3: detected capacity change from 0 to 40427 [ 359.031717][ T7746] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 359.039919][ T7746] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 359.066989][ T7746] F2FS-fs (loop3): invalid crc value [ 359.080702][ T7754] libceph: resolve '00' (ret=-3): failed [ 359.279850][ T7746] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 359.287206][ T7746] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 360.560586][ T7762] netlink: 20 bytes leftover after parsing attributes in process `syz.2.353'. [ 361.030354][ T7751] netlink: 20 bytes leftover after parsing attributes in process `syz.2.353'. [ 361.080307][ T7751] loop2: detected capacity change from 0 to 64 [ 361.763048][ T7783] loop4: detected capacity change from 0 to 64 [ 361.830160][ T7787] : renamed from bond_slave_0 (while UP) [ 362.128289][ T5840] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 362.138834][ T5840] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 362.148080][ T5840] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 362.386558][ T5840] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 362.397021][ T5840] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 362.679496][ T7803] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 362.696732][ T7805] tipc: Started in network mode [ 362.705659][ T7805] tipc: Node identity fef331000000000000000000000000aa, cluster identity 4711 [ 362.737261][ T7805] tipc: Enabling of bearer rejected, failed to enable media [ 363.030379][ T7811] tipc: Started in network mode [ 363.030750][ T7792] lo speed is unknown, defaulting to 1000 [ 363.035319][ T7811] tipc: Node identity , cluster identity 4711 [ 363.093144][ T7816] IPVS: length: 139 != 8 [ 363.519556][ T7831] capability: warning: `syz.4.376' uses deprecated v2 capabilities in a way that may be insecure [ 364.481729][ T5838] Bluetooth: hci3: command tx timeout [ 365.303409][ T7792] chnl_net:caif_netlink_parms(): no params data found [ 365.444519][ T13] bridge_slave_1: left allmulticast mode [ 365.460658][ T13] bridge_slave_1: left promiscuous mode [ 365.466898][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 365.518282][ T13] bridge_slave_0: left allmulticast mode [ 365.535978][ T13] bridge_slave_0: left promiscuous mode [ 365.553274][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 365.797046][ T7844] loop3: detected capacity change from 0 to 32768 [ 365.886159][ T7844] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 365.999826][ T7844] XFS (loop3): Ending clean mount [ 366.069304][ T5846] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 366.385954][ T7874] netlink: 'syz.3.386': attribute type 13 has an invalid length. [ 366.465786][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 366.478506][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 366.491803][ T13] bond0 (unregistering): Released all slaves [ 366.540507][ T5838] Bluetooth: hci3: command tx timeout [ 366.672922][ T7874] gretap0: refused to change device tx_queue_len [ 366.700832][ T7874] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 367.025011][ T13] hsr_slave_0: left promiscuous mode [ 367.083451][ T13] hsr_slave_1: left promiscuous mode [ 367.095705][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 367.134559][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 367.325578][ T7902] loop4: detected capacity change from 0 to 256 [ 367.408359][ T7902] exFAT-fs (loop4): failed to load upcase table (idx : 0x00017f3e, chksum : 0x0b83170a, utbl_chksum : 0xe619d30d) [ 368.152094][ T7919] loop2: detected capacity change from 0 to 7 [ 368.182320][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 368.192855][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 368.203229][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 368.212473][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 368.227090][ T13] team0 (unregistering): Port device team_slave_1 removed [ 368.236791][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 368.246723][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 368.258627][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 368.268346][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 368.288678][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 368.298062][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 368.306400][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 368.316559][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 368.326206][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 368.336081][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 368.344319][ T7919] ldm_validate_partition_table(): Disk read failed. [ 368.354050][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 368.364556][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 368.375858][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 368.385490][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 368.395080][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 368.395280][ T13] team0 (unregistering): Port device team_slave_0 removed [ 368.404994][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 368.405537][ T7919] Dev loop2: unable to read RDB block 0 [ 368.427051][ T7919] loop2: unable to read partition table [ 368.434387][ T7919] loop2: partition table beyond EOD, truncated [ 368.456890][ T7919] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 368.514073][ T5203] ldm_validate_partition_table(): Disk read failed. [ 368.521646][ T5203] Dev loop2: unable to read RDB block 0 [ 368.534707][ T5203] loop2: unable to read partition table [ 368.540882][ T5203] loop2: partition table beyond EOD, truncated [ 368.635989][ T5838] Bluetooth: hci3: command tx timeout [ 369.121282][ T7907] tipc: Enabled bearer , priority 10 [ 369.206369][ T7792] bridge0: port 1(bridge_slave_0) entered blocking state [ 369.235893][ T7792] bridge0: port 1(bridge_slave_0) entered disabled state [ 369.278879][ T7792] bridge_slave_0: entered allmulticast mode [ 369.324969][ T7792] bridge_slave_0: entered promiscuous mode [ 369.366424][ T7792] bridge0: port 2(bridge_slave_1) entered blocking state [ 369.395551][ T7792] bridge0: port 2(bridge_slave_1) entered disabled state [ 369.407557][ T7792] bridge_slave_1: entered allmulticast mode [ 369.448152][ T7792] bridge_slave_1: entered promiscuous mode [ 369.636584][ T7792] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 369.719677][ T7792] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 370.049346][ T7939] netlink: 'syz.2.406': attribute type 2 has an invalid length. [ 370.174059][ T7941] loop2: detected capacity change from 0 to 64 [ 370.700303][ T5838] Bluetooth: hci3: command tx timeout [ 370.974505][ T7792] team0: Port device team_slave_0 added [ 371.041245][ T7792] team0: Port device team_slave_1 added [ 371.309657][ T7792] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 371.353205][ T7792] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 371.500068][ T7792] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 371.575512][ T7792] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 371.594705][ T7792] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 371.808293][ T7934] loop3: detected capacity change from 0 to 32768 [ 371.983249][ T7792] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 372.745788][ T7934] bcachefs (loop3): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,metadata_target=invalid label 246,noinodes_use_key_cache,journal_flush_delay=3,journal_reclaim_delay=1000,nocow [ 372.745822][ T7934] allowing incompatible features above 0.0: (unknown version) [ 372.745835][ T7934] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 372.814651][ T7792] hsr_slave_0: entered promiscuous mode [ 372.815769][ T7792] hsr_slave_1: entered promiscuous mode [ 372.816524][ T7792] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 372.816612][ T7792] Cannot create hsr debugfs directory [ 373.174968][ T7994] loop4: detected capacity change from 0 to 256 [ 373.356718][ T7934] bcachefs (loop3): Using encoding defined by superblock: utf8-12.1.0 [ 373.418983][ T7934] bcachefs (loop3): initializing new filesystem [ 373.443283][ T7994] FAT-fs (loop4): Directory bread(block 64) failed [ 373.480293][ T7994] FAT-fs (loop4): Directory bread(block 65) failed [ 373.495767][ T5950] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 373.513833][ T7934] syz.3.405: vmalloc error: size 8388608, failed to allocated page array size 16384, mode:0xcc2(GFP_KERNEL|__GFP_HIGHMEM), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 373.551011][ T7994] FAT-fs (loop4): Directory bread(block 66) failed [ 373.599207][ T7994] FAT-fs (loop4): Directory bread(block 67) failed [ 373.621036][ T7994] FAT-fs (loop4): Directory bread(block 68) failed [ 373.638345][ T7934] CPU: 0 UID: 0 PID: 7934 Comm: syz.3.405 Not tainted 6.16.0-rc2-next-20250618-syzkaller #0 PREEMPT(full) [ 373.638378][ T7934] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 373.638391][ T7934] Call Trace: [ 373.638400][ T7934] [ 373.638411][ T7934] dump_stack_lvl+0x189/0x250 [ 373.638458][ T7934] ? __pfx_dump_stack_lvl+0x10/0x10 [ 373.638494][ T7934] ? __pfx__printk+0x10/0x10 [ 373.638518][ T7934] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 373.638542][ T7934] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 373.638568][ T7934] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 373.638594][ T7934] warn_alloc+0x214/0x310 [ 373.638626][ T7934] ? __pfx_warn_alloc+0x10/0x10 [ 373.638660][ T7934] ? __get_vm_area_node+0x28f/0x300 [ 373.638683][ T7934] ? bch2_fs_journal_start+0x2b4/0x12b0 [ 373.638717][ T7934] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 373.638767][ T7934] ? alloc_pages_mpol+0x3cd/0x4a0 [ 373.638791][ T7934] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 373.638819][ T7934] ? rcu_is_watching+0x15/0xb0 [ 373.638855][ T7934] ? bch2_fs_journal_start+0x2b4/0x12b0 [ 373.638883][ T7934] ? bch2_fs_journal_start+0x2b4/0x12b0 [ 373.638910][ T7934] __kvmalloc_node_noprof+0x3b8/0x5f0 [ 373.638932][ T7934] ? bch2_fs_journal_start+0x2b4/0x12b0 [ 373.638969][ T7934] bch2_fs_journal_start+0x2b4/0x12b0 [ 373.639022][ T7934] ? __pfx_bch2_fs_journal_start+0x10/0x10 [ 373.639052][ T7934] ? bch2_fs_journal_alloc+0x69/0x4e0 [ 373.639086][ T7934] ? bch2_fs_journal_alloc+0x4ac/0x4e0 [ 373.639114][ T7934] ? bch2_fs_journal_alloc+0x69/0x4e0 [ 373.639147][ T7934] bch2_fs_initialize+0xac7/0x1550 [ 373.639193][ T7934] ? __pfx_stack_trace_save+0x10/0x10 [ 373.639219][ T7934] ? __pfx_bch2_fs_initialize+0x10/0x10 [ 373.639253][ T7934] ? check_path+0x21/0x40 [ 373.639391][ T7934] ? bch2_fs_start+0x9fe/0xd90 [ 373.639419][ T7934] ? up_write+0x1c4/0x420 [ 373.639440][ T7934] ? bch2_fs_start+0x5c4/0xd90 [ 373.639465][ T7934] bch2_fs_start+0xa88/0xd90 [ 373.639489][ T7934] ? bch2_fs_start+0x5c4/0xd90 [ 373.639516][ T7934] ? __pfx_bch2_fs_start+0x10/0x10 [ 373.639563][ T7934] ? sget+0x267/0x620 [ 373.639600][ T7934] bch2_fs_get_tree+0xafc/0x14f0 [ 373.639666][ T7934] ? __pfx_bch2_fs_get_tree+0x10/0x10 [ 373.639723][ T7934] ? aa_get_newest_label+0xf7/0x5d0 [ 373.639753][ T7934] ? vfs_parse_monolithic_sep+0x2df/0x310 [ 373.639791][ T7934] ? apparmor_capable+0x137/0x1b0 [ 373.639833][ T7934] vfs_get_tree+0x8f/0x2b0 [ 373.639857][ T7934] do_new_mount+0x24a/0xa40 [ 373.639890][ T7934] __se_sys_mount+0x317/0x410 [ 373.639921][ T7934] ? __pfx___se_sys_mount+0x10/0x10 [ 373.639951][ T7934] ? do_syscall_64+0xbe/0x3b0 [ 373.639979][ T7934] ? __x64_sys_mount+0x20/0xc0 [ 373.640005][ T7934] do_syscall_64+0xfa/0x3b0 [ 373.640036][ T7934] ? lockdep_hardirqs_on+0x9c/0x150 [ 373.640065][ T7934] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 373.640088][ T7934] ? clear_bhb_loop+0x60/0xb0 [ 373.640115][ T7934] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 373.640137][ T7934] RIP: 0033:0x7f640ab900ca [ 373.640158][ T7934] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 373.640176][ T7934] RSP: 002b:00007f640baa7e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 373.640200][ T7934] RAX: ffffffffffffffda RBX: 00007f640baa7ef0 RCX: 00007f640ab900ca [ 373.640217][ T7934] RDX: 0000200000000000 RSI: 0000200000000100 RDI: 00007f640baa7eb0 [ 373.640232][ T7934] RBP: 0000200000000000 R08: 00007f640baa7ef0 R09: 0000000000200414 [ 373.640247][ T7934] R10: 0000000000200414 R11: 0000000000000246 R12: 0000200000000100 [ 373.640271][ T7934] R13: 00007f640baa7eb0 R14: 0000000000005ad0 R15: 0000200000000400 [ 373.640305][ T7934] [ 374.073745][ T7994] FAT-fs (loop4): Directory bread(block 69) failed [ 374.082359][ T7994] FAT-fs (loop4): Directory bread(block 70) failed [ 374.089745][ T7994] FAT-fs (loop4): Directory bread(block 71) failed [ 374.096651][ T7994] FAT-fs (loop4): Directory bread(block 72) failed [ 374.103919][ T7994] FAT-fs (loop4): Directory bread(block 73) failed [ 374.280490][ T5950] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 374.290950][ T5950] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 255, changing to 4 [ 374.303214][ T5950] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 374.454241][ T5950] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 374.475601][ T5950] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 374.486617][ T5950] usb 3-1: Product: syz [ 374.491736][ T5950] usb 3-1: Manufacturer: syz [ 374.500918][ T5950] usb 3-1: SerialNumber: syz [ 374.547805][ T7934] Mem-Info: [ 374.556035][ T7934] active_anon:15914 inactive_anon:0 isolated_anon:0 [ 374.556035][ T7934] active_file:13928 inactive_file:40044 isolated_file:0 [ 374.556035][ T7934] unevictable:768 dirty:182 writeback:0 [ 374.556035][ T7934] slab_reclaimable:10623 slab_unreclaimable:101251 [ 374.556035][ T7934] mapped:31983 shmem:11221 pagetables:1419 [ 374.556035][ T7934] sec_pagetables:0 bounce:0 [ 374.556035][ T7934] kernel_misc_reclaimable:0 [ 374.556035][ T7934] free:1302725 free_pcp:11764 free_cma:0 [ 374.637886][ T7934] Node 0 active_anon:63656kB inactive_anon:0kB active_file:55712kB inactive_file:159972kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:127932kB dirty:724kB writeback:0kB shmem:43348kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12456kB pagetables:5336kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 374.686937][ T7934] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 374.725004][ T5927] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 374.754649][ T5950] usb 3-1: 2:1 : no or invalid class specific endpoint descriptor [ 374.773724][ T7934] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 374.873627][ T7934] lowmem_reserve[]: 0 2500 2502 2502 2502 [ 374.889302][ T7934] Node 0 DMA32 free:1302904kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:63608kB inactive_anon:0kB active_file:55712kB inactive_file:158152kB unevictable:1536kB writepending:720kB present:3129332kB managed:2560792kB mlocked:0kB bounce:0kB free_pcp:30628kB local_pcp:19808kB free_cma:0kB [ 374.950400][ T5927] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 374.964578][ T5950] usb 3-1: USB disconnect, device number 7 [ 374.988879][ T5927] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 375.074327][ T5927] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 375.114704][ T7934] lowmem_reserve[]: 0 0 1 1 1 [ 375.141266][ T7934] Node 0 Normal free:16kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1820kB unevictable:0kB writepending:4kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB [ 375.172164][ T5927] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 375.228198][ T8001] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 375.303367][ T5927] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 375.330243][ T7934] lowmem_reserve[]: 0 0 0 0 0 [ 375.357022][ T7934] Node 1 Normal free:3891632kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:17088kB local_pcp:8416kB free_cma:0kB [ 375.598015][ T7934] lowmem_reserve[]: 0 0 0 0 0 [ 375.621044][ T5927] usb 5-1: USB disconnect, device number 5 [ 375.642923][ T7934] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 375.777768][ T7934] Node 0 DMA32: 38*4kB (UME) 6*8kB (ME) 4*16kB (M) 545*32kB (UME) 375*64kB (UME) 57*128kB (ME) 30*256kB (UME) 27*512kB (UME) 5*1024kB (UM) 5*2048kB (M) 296*4096kB (M) = 1298280kB [ 375.897848][ T7934] Node 0 Normal: 0*4kB 0*8kB 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 16kB [ 375.986114][ T7934] Node 1 Normal: 172*4kB (UME) 48*8kB (UME) 52*16kB (UME) 128*32kB (UME) 31*64kB (UME) 9*128kB (UME) 4*256kB (ME) 3*512kB (ME) 1*1024kB (M) 2*2048kB (UE) 946*4096kB (M) = 3891632kB [ 376.052606][ T8006] loop0: detected capacity change from 0 to 1764 [ 376.093974][ T7934] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 376.157020][ T7934] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 376.239557][ T7934] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 376.315547][ T7934] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 376.394364][ T7934] 65180 total pagecache pages [ 376.424737][ T7934] 0 pages in swap cache [ 376.447019][ T7934] Free swap = 124996kB [ 376.465660][ T7934] Total swap = 124996kB [ 376.489985][ C1] sched: DL replenish lagged too much [ 376.498226][ T7934] 2097051 pages RAM [ 376.557384][ T7934] 0 pages HighMem/MovableOnly [ 376.576526][ T7934] 424747 pages reserved [ 376.587806][ T7934] 0 pages cma reserved [ 376.673311][ T7934] bcachefs (loop3): error reallocating journal fifo (32768 open entries) [ 376.777683][ T7934] bcachefs (loop3): bch2_fs_initialize(): error ENOMEM_journal_pin_fifo [ 376.833794][ T7934] bcachefs (loop3): bch2_fs_start(): error starting filesystem ENOMEM_journal_pin_fifo [ 376.903766][ T7934] bcachefs (loop3): shutting down [ 376.932037][ T8010] netem: change failed [ 377.188500][ T7934] bcachefs (loop3): shutdown complete [ 378.907865][ T8008] loop4: detected capacity change from 0 to 32768 [ 379.065803][ T8008] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 379.347523][ T8008] XFS (loop4): Ending clean mount [ 379.398170][ T8050] loop2: detected capacity change from 0 to 64 [ 379.407886][ T8008] XFS (loop4): Quotacheck needed: Please wait. [ 379.711090][ T8008] XFS (loop4): Quotacheck: Done. [ 380.002058][ T5831] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 380.253938][ T8055] netlink: 60 bytes leftover after parsing attributes in process `syz.2.438'. [ 380.300548][ T8054] netlink: 60 bytes leftover after parsing attributes in process `syz.2.438'. [ 381.105606][ T8038] loop0: detected capacity change from 0 to 32768 [ 381.590701][ T8038] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 381.620850][ T8068] loop2: detected capacity change from 0 to 128 [ 381.755535][ T8068] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 381.884094][ T8070] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 381.935446][ T8068] ext4 filesystem being mounted at /115/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 382.059046][ T8070] CIFS mount error: No usable UNC path provided in device string! [ 382.059046][ T8070] [ 382.089219][ T8074] loop4: detected capacity change from 0 to 512 [ 382.140841][ T8070] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 382.194287][ T8074] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 382.269497][ T8074] EXT4-fs (loop4): orphan cleanup on readonly fs [ 382.307863][ T5841] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 382.338873][ T8074] EXT4-fs error (device loop4): ext4_orphan_get:1393: inode #15: comm syz.4.443: iget: bad i_size value: 360287970189639680 [ 382.516028][ T8074] EXT4-fs error (device loop4): ext4_orphan_get:1398: comm syz.4.443: couldn't read orphan inode 15 (err -117) [ 382.644978][ T8074] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 382.719150][ T5836] ocfs2: Unmounting device (7,0) on (node local) [ 384.235123][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 384.242075][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 384.255000][ T5831] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 385.210324][ T8096] IPv6: NLM_F_REPLACE set, but no existing node found! [ 386.470315][ T5927] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 386.700998][ T5927] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 386.740044][ T5927] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 386.805341][ T5927] usb 3-1: Product: syz [ 386.809593][ T5927] usb 3-1: Manufacturer: syz [ 386.864182][ T5927] usb 3-1: SerialNumber: syz [ 386.911404][ T5927] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 387.220125][ T5950] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 387.638845][ T5840] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 387.651290][ T5840] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 387.661805][ T5840] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 387.675734][ T5840] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 387.697869][ T5840] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 388.007118][ T8116] lo speed is unknown, defaulting to 1000 [ 388.066411][ T9] usb 3-1: USB disconnect, device number 8 [ 388.385297][ T5950] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 388.423941][ T5950] ath9k_htc: Failed to initialize the device [ 388.468898][ T9] usb 3-1: ath9k_htc: USB layer deinitialized [ 389.234435][ T8116] chnl_net:caif_netlink_parms(): no params data found [ 389.634120][ T8136] loop2: detected capacity change from 0 to 128 [ 389.681886][ T8114] loop4: detected capacity change from 0 to 40427 [ 389.726921][ T8136] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 389.823897][ T5840] Bluetooth: hci5: command tx timeout [ 389.836039][ T8114] F2FS-fs (loop4): build fault injection rate: 690 [ 389.846847][ T8136] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 389.931278][ T8114] F2FS-fs (loop4): invalid crc value [ 390.010593][ T8136] ext2 filesystem being mounted at /122/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 390.269849][ T8116] bridge0: port 1(bridge_slave_0) entered blocking state [ 390.337836][ T8116] bridge0: port 1(bridge_slave_0) entered disabled state [ 390.388114][ T8116] bridge_slave_0: entered allmulticast mode [ 390.447339][ T5841] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 390.466795][ T8116] bridge_slave_0: entered promiscuous mode [ 390.522389][ T8116] bridge0: port 2(bridge_slave_1) entered blocking state [ 390.529649][ T8116] bridge0: port 2(bridge_slave_1) entered disabled state [ 390.656872][ T8114] F2FS-fs (loop4): Start checkpoint disabled! [ 390.680420][ T8116] bridge_slave_1: entered allmulticast mode [ 390.688787][ T8116] bridge_slave_1: entered promiscuous mode [ 390.805124][ T8114] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 403.889029][ T5840] Bluetooth: hci5: command tx timeout [ 409.923094][ T5840] Bluetooth: hci5: command tx timeout [ 424.210437][ T5838] Bluetooth: hci5: command tx timeout [ 427.149004][ T5840] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 427.176132][ T5840] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 427.187012][ T5840] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 427.195600][ T5840] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 427.203644][ T5840] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 427.575708][ T5840] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 427.586737][ T5840] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 427.604527][ T5840] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 427.612936][ T5840] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 427.648016][ T5840] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 427.761372][ T5840] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 427.780777][ T5840] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 427.791566][ T5840] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 427.800708][ T5840] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 427.808861][ T5840] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 427.927599][ T5838] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 427.938595][ T5838] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 427.949509][ T5838] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 427.965579][ T5838] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 427.974076][ T5838] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 429.266050][ T5838] Bluetooth: hci6: command tx timeout [ 429.538440][ T8116] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 429.591089][ T8116] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 429.741404][ T5838] Bluetooth: hci7: command tx timeout [ 429.888491][ T8116] team0: Port device team_slave_0 added [ 429.904213][ T5838] Bluetooth: hci8: command tx timeout [ 429.978636][ T8116] team0: Port device team_slave_1 added [ 430.060491][ T5838] Bluetooth: hci9: command tx timeout [ 430.087255][ T8179] lo speed is unknown, defaulting to 1000 [ 430.256067][ T8116] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 430.286542][ T8116] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 430.354877][ T8116] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 430.407767][ T8116] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 430.424181][ T8116] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 430.458528][ T8116] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 430.484600][ T8175] lo speed is unknown, defaulting to 1000 [ 430.704997][ T8184] lo speed is unknown, defaulting to 1000 [ 430.938170][ T8116] hsr_slave_0: entered promiscuous mode [ 430.961475][ T8116] hsr_slave_1: entered promiscuous mode [ 430.968591][ T8116] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 431.007322][ T8116] Cannot create hsr debugfs directory [ 431.172409][ T8182] lo speed is unknown, defaulting to 1000 [ 431.350183][ T5838] Bluetooth: hci6: command tx timeout [ 431.820524][ T5838] Bluetooth: hci7: command tx timeout [ 431.980564][ T5838] Bluetooth: hci8: command tx timeout [ 432.140493][ T5838] Bluetooth: hci9: command tx timeout [ 433.206752][ T8175] chnl_net:caif_netlink_parms(): no params data found [ 433.420639][ T5838] Bluetooth: hci6: command tx timeout [ 433.455982][ T8179] chnl_net:caif_netlink_parms(): no params data found [ 433.641491][ T8184] chnl_net:caif_netlink_parms(): no params data found [ 433.900788][ T5838] Bluetooth: hci7: command tx timeout [ 433.927409][ T8182] chnl_net:caif_netlink_parms(): no params data found [ 434.060620][ T5838] Bluetooth: hci8: command tx timeout [ 434.229425][ T5838] Bluetooth: hci9: command tx timeout [ 435.500295][ T5838] Bluetooth: hci6: command tx timeout [ 435.980605][ T5838] Bluetooth: hci7: command tx timeout [ 436.140742][ T5838] Bluetooth: hci8: command tx timeout [ 436.302314][ T5838] Bluetooth: hci9: command tx timeout [ 441.803646][ T8175] bridge0: port 1(bridge_slave_0) entered blocking state [ 441.820785][ T8175] bridge0: port 1(bridge_slave_0) entered disabled state [ 441.828330][ T8175] bridge_slave_0: entered allmulticast mode [ 441.848068][ T8175] bridge_slave_0: entered promiscuous mode [ 442.164419][ T8175] bridge0: port 2(bridge_slave_1) entered blocking state [ 442.179128][ T8175] bridge0: port 2(bridge_slave_1) entered disabled state [ 442.195132][ T8175] bridge_slave_1: entered allmulticast mode [ 442.206154][ T8175] bridge_slave_1: entered promiscuous mode [ 442.995113][ T8179] bridge0: port 1(bridge_slave_0) entered blocking state [ 443.011882][ T8179] bridge0: port 1(bridge_slave_0) entered disabled state [ 443.019244][ T8179] bridge_slave_0: entered allmulticast mode [ 443.042081][ T8179] bridge_slave_0: entered promiscuous mode [ 443.062659][ T8179] bridge0: port 2(bridge_slave_1) entered blocking state [ 443.077604][ T8179] bridge0: port 2(bridge_slave_1) entered disabled state [ 443.085583][ T8179] bridge_slave_1: entered allmulticast mode [ 443.102523][ T8179] bridge_slave_1: entered promiscuous mode [ 443.594730][ T8182] bridge0: port 1(bridge_slave_0) entered blocking state [ 443.608544][ T8182] bridge0: port 1(bridge_slave_0) entered disabled state [ 443.625358][ T8182] bridge_slave_0: entered allmulticast mode [ 443.638112][ T8182] bridge_slave_0: entered promiscuous mode [ 443.656097][ T8184] bridge0: port 1(bridge_slave_0) entered blocking state [ 443.670313][ T8184] bridge0: port 1(bridge_slave_0) entered disabled state [ 443.677659][ T8184] bridge_slave_0: entered allmulticast mode [ 443.695005][ T8184] bridge_slave_0: entered promiscuous mode [ 443.813354][ T8175] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 443.842785][ T8182] bridge0: port 2(bridge_slave_1) entered blocking state [ 443.858579][ T8182] bridge0: port 2(bridge_slave_1) entered disabled state [ 443.868732][ T8182] bridge_slave_1: entered allmulticast mode [ 443.887918][ T8182] bridge_slave_1: entered promiscuous mode [ 443.899710][ T8184] bridge0: port 2(bridge_slave_1) entered blocking state [ 443.923185][ T8184] bridge0: port 2(bridge_slave_1) entered disabled state [ 443.940779][ T8184] bridge_slave_1: entered allmulticast mode [ 443.949014][ T8184] bridge_slave_1: entered promiscuous mode [ 443.970758][ T8179] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 444.001422][ T8175] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 444.254456][ T8179] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 444.402554][ T8182] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 444.503467][ T8184] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 444.828463][ T8175] team0: Port device team_slave_0 added [ 444.849349][ T8182] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 444.955448][ T8184] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 445.062841][ T8179] team0: Port device team_slave_0 added [ 445.088657][ T8175] team0: Port device team_slave_1 added [ 445.207394][ T8182] team0: Port device team_slave_0 added [ 445.302532][ T8179] team0: Port device team_slave_1 added [ 445.422650][ T8182] team0: Port device team_slave_1 added [ 445.507787][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 445.522275][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 445.641000][ T8184] team0: Port device team_slave_0 added [ 446.006254][ T8175] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 446.032861][ T8175] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 446.111453][ T8175] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 446.352509][ T8184] team0: Port device team_slave_1 added [ 446.369564][ T8179] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 446.400431][ T8179] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 446.480152][ T8179] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 446.519450][ T8182] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 446.549443][ T8182] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 446.637833][ T8182] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 446.683150][ T8182] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 446.718207][ T8182] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 446.803926][ T5840] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 446.821056][ T5840] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 446.833160][ T5840] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 446.845155][ T5840] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 446.858636][ T5840] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 446.902835][ T8182] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 446.951499][ T8175] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 446.958788][ T8175] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 447.002601][ T8175] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 447.116172][ T8179] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 447.126587][ T8179] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 447.164354][ T8179] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 447.686437][ T8179] hsr_slave_0: entered promiscuous mode [ 447.697041][ T8179] hsr_slave_1: entered promiscuous mode [ 447.709216][ T8179] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 447.725767][ T8179] Cannot create hsr debugfs directory [ 447.747887][ T8184] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 447.759375][ T8184] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 447.798580][ T8184] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 447.917717][ T8182] hsr_slave_0: entered promiscuous mode [ 447.927355][ T8182] hsr_slave_1: entered promiscuous mode [ 447.943088][ T8182] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 447.959352][ T8182] Cannot create hsr debugfs directory [ 447.972463][ T8244] lo speed is unknown, defaulting to 1000 [ 448.101055][ T8175] hsr_slave_0: entered promiscuous mode [ 448.123050][ T8175] hsr_slave_1: entered promiscuous mode [ 448.129863][ T8175] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 448.147900][ T8175] Cannot create hsr debugfs directory [ 448.157437][ T8184] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 448.176022][ T8184] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 448.210382][ T8184] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 448.940598][ T5840] Bluetooth: hci10: command tx timeout [ 449.463929][ T8184] hsr_slave_0: entered promiscuous mode [ 449.480893][ T8184] hsr_slave_1: entered promiscuous mode [ 449.488368][ T8184] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 449.508676][ T8184] Cannot create hsr debugfs directory [ 451.020501][ T5840] Bluetooth: hci10: command tx timeout [ 451.050299][ T8244] chnl_net:caif_netlink_parms(): no params data found [ 453.030426][ T8244] bridge0: port 1(bridge_slave_0) entered blocking state [ 453.037843][ T8244] bridge0: port 1(bridge_slave_0) entered disabled state [ 453.056925][ T8244] bridge_slave_0: entered allmulticast mode [ 453.068055][ T8244] bridge_slave_0: entered promiscuous mode [ 453.087454][ T8244] bridge0: port 2(bridge_slave_1) entered blocking state [ 453.100255][ T5840] Bluetooth: hci10: command tx timeout [ 453.113187][ T8244] bridge0: port 2(bridge_slave_1) entered disabled state [ 453.129365][ T8244] bridge_slave_1: entered allmulticast mode [ 453.138761][ T8244] bridge_slave_1: entered promiscuous mode [ 453.396668][ T8244] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 453.444292][ T8244] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 453.699170][ T8244] team0: Port device team_slave_0 added [ 453.717013][ T8244] team0: Port device team_slave_1 added [ 453.954135][ T8244] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 453.969071][ T8244] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 454.015163][ T8244] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 454.048407][ T8244] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 454.064052][ T8244] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 454.107795][ T8244] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 454.505678][ T8244] hsr_slave_0: entered promiscuous mode [ 454.522527][ T8244] hsr_slave_1: entered promiscuous mode [ 454.529216][ T8244] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 454.550646][ T8244] Cannot create hsr debugfs directory [ 455.180419][ T5840] Bluetooth: hci10: command tx timeout [ 486.069563][ T5838] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 486.087258][ T5838] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 486.099253][ T5838] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 486.108613][ T5838] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 486.116738][ T5838] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 486.451325][ T8520] lo speed is unknown, defaulting to 1000 [ 488.132402][ T8520] chnl_net:caif_netlink_parms(): no params data found [ 488.223396][ T5840] Bluetooth: hci11: command tx timeout [ 488.407361][ T5835] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 488.430482][ T5835] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 488.442468][ T5835] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 488.452899][ T5835] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 488.462938][ T5835] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 488.543956][ T5835] Bluetooth: hci3: command 0x0406 tx timeout [ 488.601035][ T5840] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 488.631899][ T5838] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 488.642571][ T5840] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 488.656200][ T5840] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 488.665300][ T5840] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 488.878032][ T8538] lo speed is unknown, defaulting to 1000 [ 488.942221][ T5835] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 488.961390][ T5835] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 488.971523][ T5835] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 488.981706][ T5835] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 488.990616][ T5835] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 489.291442][ T8520] bridge0: port 1(bridge_slave_0) entered blocking state [ 489.321133][ T8520] bridge0: port 1(bridge_slave_0) entered disabled state [ 489.328954][ T8520] bridge_slave_0: entered allmulticast mode [ 489.370597][ T8520] bridge_slave_0: entered promiscuous mode [ 489.391892][ T8520] bridge0: port 2(bridge_slave_1) entered blocking state [ 489.399666][ T8520] bridge0: port 2(bridge_slave_1) entered disabled state [ 489.458007][ T8520] bridge_slave_1: entered allmulticast mode [ 489.507399][ T8520] bridge_slave_1: entered promiscuous mode [ 489.544210][ T8540] lo speed is unknown, defaulting to 1000 [ 489.927644][ T8545] lo speed is unknown, defaulting to 1000 [ 489.937619][ T8520] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 489.991445][ T8520] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 490.310693][ T5835] Bluetooth: hci11: command tx timeout [ 490.436732][ T8520] team0: Port device team_slave_0 added [ 490.540179][ T5840] Bluetooth: hci12: command tx timeout [ 490.583704][ T8520] team0: Port device team_slave_1 added [ 490.701192][ T5835] Bluetooth: hci13: command tx timeout [ 490.984791][ T8520] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 491.016872][ T8520] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 491.050092][ T5835] Bluetooth: hci14: command tx timeout [ 491.110413][ T8520] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 491.162464][ T8520] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 491.169717][ T8520] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 491.258632][ T8520] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 492.055466][ T8538] chnl_net:caif_netlink_parms(): no params data found [ 492.127650][ T8520] hsr_slave_0: entered promiscuous mode [ 492.156475][ T8520] hsr_slave_1: entered promiscuous mode [ 492.190682][ T8520] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 492.198328][ T8520] Cannot create hsr debugfs directory [ 492.380430][ T5835] Bluetooth: hci11: command tx timeout [ 492.620925][ T5835] Bluetooth: hci12: command tx timeout [ 492.780637][ T5835] Bluetooth: hci13: command tx timeout [ 493.101070][ T5835] Bluetooth: hci14: command tx timeout [ 494.460460][ T5835] Bluetooth: hci11: command tx timeout [ 494.700321][ T5835] Bluetooth: hci12: command tx timeout [ 494.860687][ T5835] Bluetooth: hci13: command tx timeout [ 495.180392][ T5835] Bluetooth: hci14: command tx timeout [ 496.780280][ T5835] Bluetooth: hci12: command tx timeout [ 496.940300][ T5835] Bluetooth: hci13: command tx timeout [ 497.260490][ T5835] Bluetooth: hci14: command tx timeout [ 501.628523][ T8540] chnl_net:caif_netlink_parms(): no params data found [ 506.966557][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 506.973351][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 507.270578][ T5840] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 507.282955][ T5840] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 507.292446][ T5840] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 507.303967][ T5840] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 507.314976][ T5840] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 509.420342][ T5835] Bluetooth: hci1: command tx timeout [ 511.500345][ T5835] Bluetooth: hci1: command tx timeout [ 513.584162][ T5835] Bluetooth: hci1: command tx timeout [ 514.150252][ T5835] Bluetooth: hci5: command 0x0406 tx timeout [ 515.660813][ T5840] Bluetooth: hci1: command tx timeout [ 543.192493][ T8538] bridge0: port 1(bridge_slave_0) entered blocking state [ 543.220523][ T8538] bridge0: port 1(bridge_slave_0) entered disabled state [ 543.229094][ T8538] bridge_slave_0: entered allmulticast mode [ 543.275063][ T8538] bridge_slave_0: entered promiscuous mode [ 543.305699][ T8538] bridge0: port 2(bridge_slave_1) entered blocking state [ 543.343220][ T8538] bridge0: port 2(bridge_slave_1) entered disabled state [ 543.380453][ T8538] bridge_slave_1: entered allmulticast mode [ 543.426976][ T8538] bridge_slave_1: entered promiscuous mode [ 543.507014][ T8545] chnl_net:caif_netlink_parms(): no params data found [ 544.096069][ T8538] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 544.339723][ T8603] lo speed is unknown, defaulting to 1000 [ 544.352894][ T8540] bridge0: port 1(bridge_slave_0) entered blocking state [ 544.386446][ T8540] bridge0: port 1(bridge_slave_0) entered disabled state [ 544.406041][ T8540] bridge_slave_0: entered allmulticast mode [ 544.441701][ T8540] bridge_slave_0: entered promiscuous mode [ 544.475192][ T8540] bridge0: port 2(bridge_slave_1) entered blocking state [ 544.511190][ T8540] bridge0: port 2(bridge_slave_1) entered disabled state [ 544.518853][ T8540] bridge_slave_1: entered allmulticast mode [ 544.574576][ T8540] bridge_slave_1: entered promiscuous mode [ 544.606587][ T8538] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 545.402742][ T8538] team0: Port device team_slave_0 added [ 545.807559][ T8540] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 545.874631][ T8540] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 545.933640][ T8538] team0: Port device team_slave_1 added [ 546.706211][ T5835] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 546.717858][ T5835] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 546.729019][ T5835] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 546.738899][ T5835] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 546.749718][ T5835] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 547.331178][ T8545] bridge0: port 1(bridge_slave_0) entered blocking state [ 547.338755][ T8545] bridge0: port 1(bridge_slave_0) entered disabled state [ 547.401490][ T8545] bridge_slave_0: entered allmulticast mode [ 547.416353][ T8545] bridge_slave_0: entered promiscuous mode [ 547.466213][ T8545] bridge0: port 2(bridge_slave_1) entered blocking state [ 547.495069][ T8545] bridge0: port 2(bridge_slave_1) entered disabled state [ 547.540679][ T8545] bridge_slave_1: entered allmulticast mode [ 547.591308][ T8545] bridge_slave_1: entered promiscuous mode [ 548.131031][ T8540] team0: Port device team_slave_0 added [ 548.409711][ T8642] lo speed is unknown, defaulting to 1000 [ 548.879601][ T8656] Bluetooth: hci2: command tx timeout [ 549.995775][ T8656] Bluetooth: hci6: command 0x0406 tx timeout [ 550.002426][ T8656] Bluetooth: hci7: command 0x0406 tx timeout [ 550.008600][ T8656] Bluetooth: hci8: command 0x0406 tx timeout [ 550.311049][ T5838] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 550.326880][ T5838] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 550.341736][ T5838] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 550.352490][ T5838] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 550.362341][ T5838] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 550.497364][ T5835] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 550.515529][ T5835] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 550.525485][ T5835] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 550.541308][ T5835] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 550.554126][ T5835] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 550.679262][ T5838] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 550.693754][ T5838] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 550.704009][ T5838] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 550.719140][ T5838] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 550.736307][ T5838] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 550.940892][ T5835] Bluetooth: hci2: command tx timeout [ 552.460500][ T5835] Bluetooth: hci11: command tx timeout [ 552.624820][ T5835] Bluetooth: hci12: command tx timeout [ 552.780366][ T5835] Bluetooth: hci15: command tx timeout [ 553.027535][ T5838] Bluetooth: hci2: command tx timeout [ 554.540852][ T5835] Bluetooth: hci11: command tx timeout [ 554.700571][ T5835] Bluetooth: hci12: command tx timeout [ 554.861828][ T5835] Bluetooth: hci15: command tx timeout [ 555.110423][ T5840] Bluetooth: hci2: command tx timeout [ 555.116483][ T5835] Bluetooth: hci9: command 0x0406 tx timeout [ 556.622895][ T5838] Bluetooth: hci11: command tx timeout [ 556.780583][ T5838] Bluetooth: hci12: command tx timeout [ 556.945523][ T5838] Bluetooth: hci15: command tx timeout [ 557.702782][ T8603] chnl_net:caif_netlink_parms(): no params data found [ 557.990152][ T8670] lo speed is unknown, defaulting to 1000 [ 558.189622][ T8667] lo speed is unknown, defaulting to 1000 [ 558.340274][ T8672] lo speed is unknown, defaulting to 1000 [ 558.710437][ T5838] Bluetooth: hci11: command tx timeout [ 558.860901][ T5838] Bluetooth: hci12: command tx timeout [ 559.022527][ T5838] Bluetooth: hci15: command tx timeout [ 559.087959][ T8642] chnl_net:caif_netlink_parms(): no params data found [ 559.200643][ T8603] bridge0: port 1(bridge_slave_0) entered blocking state [ 559.207890][ T8603] bridge0: port 1(bridge_slave_0) entered disabled state [ 559.243269][ T8603] bridge_slave_0: entered allmulticast mode [ 559.272490][ T8603] bridge_slave_0: entered promiscuous mode [ 559.404746][ T8603] bridge0: port 2(bridge_slave_1) entered blocking state [ 559.430550][ T8603] bridge0: port 2(bridge_slave_1) entered disabled state [ 559.438232][ T8603] bridge_slave_1: entered allmulticast mode [ 559.472733][ T8603] bridge_slave_1: entered promiscuous mode [ 559.931674][ T8603] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 560.072232][ T8603] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 560.523873][ T8603] team0: Port device team_slave_0 added [ 560.952524][ T8603] team0: Port device team_slave_1 added [ 561.477354][ T8642] bridge0: port 1(bridge_slave_0) entered blocking state [ 561.497043][ T8642] bridge0: port 1(bridge_slave_0) entered disabled state [ 561.520516][ T8642] bridge_slave_0: entered allmulticast mode [ 561.540392][ T8642] bridge_slave_0: entered promiscuous mode [ 561.572829][ T8603] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 561.591115][ T8603] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 561.636262][ T8603] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 561.667123][ T8603] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 561.688025][ T8603] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 561.738063][ T8603] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 561.850544][ T8642] bridge0: port 2(bridge_slave_1) entered blocking state [ 561.858039][ T8642] bridge0: port 2(bridge_slave_1) entered disabled state [ 561.884624][ T8642] bridge_slave_1: entered allmulticast mode [ 561.902887][ T8642] bridge_slave_1: entered promiscuous mode [ 562.152303][ T8642] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 562.398401][ T8642] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 562.427370][ T8667] chnl_net:caif_netlink_parms(): no params data found [ 563.212431][ T8603] hsr_slave_0: entered promiscuous mode [ 563.219651][ T8603] hsr_slave_1: entered promiscuous mode [ 563.273472][ T8603] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 563.300109][ T8603] Cannot create hsr debugfs directory [ 563.342454][ T8642] team0: Port device team_slave_0 added [ 563.529417][ T8670] chnl_net:caif_netlink_parms(): no params data found [ 563.575234][ T8642] team0: Port device team_slave_1 added [ 563.797711][ T8672] chnl_net:caif_netlink_parms(): no params data found [ 563.989818][ T8642] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 563.998788][ T8642] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 564.057736][ T8642] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 564.396346][ T8642] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 564.420437][ T8642] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 564.469097][ T8642] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 565.041728][ T8667] bridge0: port 1(bridge_slave_0) entered blocking state [ 565.060371][ T8667] bridge0: port 1(bridge_slave_0) entered disabled state [ 565.068496][ T8667] bridge_slave_0: entered allmulticast mode [ 565.099688][ T8667] bridge_slave_0: entered promiscuous mode [ 565.123407][ T8667] bridge0: port 2(bridge_slave_1) entered blocking state [ 565.143958][ T8667] bridge0: port 2(bridge_slave_1) entered disabled state [ 565.160381][ T8667] bridge_slave_1: entered allmulticast mode [ 565.175133][ T8667] bridge_slave_1: entered promiscuous mode [ 565.718425][ T8667] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 565.765290][ T8667] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 565.909574][ T8670] bridge0: port 1(bridge_slave_0) entered blocking state [ 565.930334][ T8670] bridge0: port 1(bridge_slave_0) entered disabled state [ 565.937860][ T8670] bridge_slave_0: entered allmulticast mode [ 565.962578][ T8670] bridge_slave_0: entered promiscuous mode [ 565.994456][ T8642] hsr_slave_0: entered promiscuous mode [ 566.021209][ T8642] hsr_slave_1: entered promiscuous mode [ 566.028641][ T8642] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 566.050097][ T8642] Cannot create hsr debugfs directory [ 566.251933][ T8670] bridge0: port 2(bridge_slave_1) entered blocking state [ 566.259331][ T8670] bridge0: port 2(bridge_slave_1) entered disabled state [ 566.289688][ T8670] bridge_slave_1: entered allmulticast mode [ 566.313588][ T8670] bridge_slave_1: entered promiscuous mode [ 566.678895][ T8672] bridge0: port 1(bridge_slave_0) entered blocking state [ 566.712600][ T8672] bridge0: port 1(bridge_slave_0) entered disabled state [ 566.741014][ T8672] bridge_slave_0: entered allmulticast mode [ 566.773829][ T8672] bridge_slave_0: entered promiscuous mode [ 566.793834][ T8672] bridge0: port 2(bridge_slave_1) entered blocking state [ 566.831617][ T8672] bridge0: port 2(bridge_slave_1) entered disabled state [ 566.841478][ T8672] bridge_slave_1: entered allmulticast mode [ 566.873025][ T8672] bridge_slave_1: entered promiscuous mode [ 567.520819][ T5835] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 567.534107][ T5835] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 567.543670][ T5835] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 567.585572][ T5835] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 567.597359][ T5835] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 567.756396][ T8667] team0: Port device team_slave_0 added [ 567.792248][ T8667] team0: Port device team_slave_1 added [ 567.802510][ T8670] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 567.852993][ T8670] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 568.038294][ T8672] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 568.113410][ T8672] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 568.404110][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 568.411081][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 568.972384][ T8670] team0: Port device team_slave_0 added [ 569.660975][ T5840] Bluetooth: hci13: command tx timeout [ 570.469340][ T5840] Bluetooth: hci10: command 0x0406 tx timeout [ 571.202384][ T8672] team0: Port device team_slave_0 added [ 571.210557][ T8667] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 571.217560][ T8667] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 571.285965][ T8667] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 571.333707][ T8670] team0: Port device team_slave_1 added [ 571.467446][ T8723] lo speed is unknown, defaulting to 1000 [ 571.476836][ T8672] team0: Port device team_slave_1 added [ 571.605585][ T8667] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 571.620121][ T8667] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 571.665516][ T8667] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 571.740213][ T5835] Bluetooth: hci13: command tx timeout [ 572.148754][ T8670] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 572.156456][ T8670] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 572.208576][ T8670] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 572.250591][ T8670] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 572.257691][ T8670] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 572.325224][ T8670] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 572.397256][ T8672] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 572.420188][ T8672] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 572.476765][ T8672] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 572.624652][ T8667] hsr_slave_0: entered promiscuous mode [ 572.641060][ T8667] hsr_slave_1: entered promiscuous mode [ 572.660348][ T8667] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 572.668151][ T8667] Cannot create hsr debugfs directory [ 572.829128][ T8672] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 572.851735][ T8672] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 572.908986][ T8672] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 573.082832][ T8670] hsr_slave_0: entered promiscuous mode [ 573.101264][ T8670] hsr_slave_1: entered promiscuous mode [ 573.130153][ T8670] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 573.137885][ T8670] Cannot create hsr debugfs directory [ 573.503637][ T31] INFO: task syz-executor:7792 blocked for more than 143 seconds. [ 573.512050][ T31] Not tainted 6.16.0-rc2-next-20250618-syzkaller #0 [ 573.520782][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 573.529599][ T31] task:syz-executor state:D stack:22024 pid:7792 tgid:7792 ppid:1 task_flags:0x480140 flags:0x00004006 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 573.624054][ T31] Call Trace: [ 573.627414][ T31] [ 573.652404][ T31] __schedule+0x16f5/0x4d00 [ 573.657020][ T31] ? __lock_acquire+0xab9/0xd20 [ 573.687005][ T31] ? schedule+0x165/0x360 [ 573.749951][ T31] ? __pfx___schedule+0x10/0x10 [ 573.754924][ T31] ? schedule+0x91/0x360 [ 573.759221][ T31] schedule+0x165/0x360 [ 573.840221][ T5835] Bluetooth: hci13: command tx timeout [ 573.861735][ T31] schedule_preempt_disabled+0x13/0x30 [ 573.867732][ T31] __mutex_lock+0x724/0xe80 [ 573.910669][ T31] ? __mutex_lock+0x51b/0xe80 [ 573.915548][ T31] ? rcu_barrier+0x4c/0x570 [ 573.940356][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 573.945488][ T31] ? __mutex_unlock_slowpath+0x68a/0x700 [ 573.961842][ T31] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 573.968119][ T31] rcu_barrier+0x4c/0x570 [ 573.995472][ T31] netdev_run_todo+0x327/0xea0 [ 574.009962][ T31] ? __pfx_netdev_run_todo+0x10/0x10 [ 574.015383][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 574.030397][ T31] ? nsim_destroy+0x3ec/0x670 [ 574.035307][ T31] nsim_destroy+0x40c/0x670 [ 574.049934][ T31] __nsim_dev_port_del+0x14d/0x1b0 [ 574.055937][ T31] nsim_dev_reload_destroy+0x288/0x490 [ 574.080415][ T31] nsim_drv_remove+0x58/0x160 [ 574.086252][ T31] ? __pfx_nsim_bus_remove+0x10/0x10 [ 574.108928][ T31] device_release_driver_internal+0x46c/0x7c0 [ 574.130284][ T31] bus_remove_device+0x34d/0x410 [ 574.135498][ T31] device_del+0x511/0x8e0 [ 574.149943][ T31] ? __lock_acquire+0xab9/0xd20 [ 574.155083][ T31] ? __pfx_device_del+0x10/0x10 [ 574.170367][ T31] device_unregister+0x20/0xc0 [ 574.180315][ T31] del_device_store+0x2aa/0x360 [ 574.185434][ T31] ? __pfx_del_device_store+0x10/0x10 [ 574.209662][ T31] ? sysfs_file_kobj+0x1e4/0x230 [ 574.215860][ T31] ? sysfs_kf_write+0x166/0x260 [ 574.240292][ T31] ? __pfx_sysfs_kf_write+0x10/0x10 [ 574.245609][ T31] kernfs_fop_write_iter+0x375/0x4f0 [ 574.261807][ T31] vfs_write+0x548/0xa90 [ 574.266164][ T31] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 574.288326][ T31] ? __pfx_vfs_write+0x10/0x10 [ 574.293944][ T31] ? do_sys_openat2+0x154/0x1c0 [ 574.298972][ T31] ? kmem_cache_free+0x18f/0x400 [ 574.320334][ T31] ksys_write+0x145/0x250 [ 574.324779][ T31] ? __pfx_ksys_write+0x10/0x10 [ 574.329689][ T31] ? rcu_is_watching+0x15/0xb0 [ 574.350146][ T31] ? do_syscall_64+0xbe/0x3b0 [ 574.354931][ T31] do_syscall_64+0xfa/0x3b0 [ 574.359494][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 574.386109][ T31] ? asm_sysvec_call_function_single+0x1a/0x20 [ 574.400318][ T31] ? clear_bhb_loop+0x60/0xb0 [ 574.405307][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 574.421848][ T31] RIP: 0033:0x7f61d598d3df [ 574.426337][ T31] RSP: 002b:00007ffdb7c46240 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 574.455210][ T31] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007f61d598d3df [ 574.481873][ T31] RDX: 0000000000000001 RSI: 00007ffdb7c46290 RDI: 0000000000000005 [ 574.500110][ T31] RBP: 00007f61d5a11d8d R08: 0000000000000000 R09: 00007ffdb7c46097 [ 574.508170][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 574.531459][ T31] R13: 00007ffdb7c46290 R14: 00007f61d66e4620 R15: 0000000000000003 [ 574.558141][ T31] [ 574.562268][ T31] [ 574.562268][ T31] Showing all locks held in the system: [ 574.590341][ T31] 1 lock held by khungtaskd/31: [ 574.595371][ T31] #0: ffffffff8e13ee60 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 574.620936][ T31] 3 locks held by kworker/u8:4/65: [ 574.626127][ T31] 2 locks held by kworker/1:2/1170: [ 574.649483][ T31] 2 locks held by getty/5595: [ 574.655521][ T31] #0: ffff888032fc80a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 574.684710][ T31] #1: ffffc9000331b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 574.710380][ T31] 2 locks held by syz-executor/5831: [ 574.715749][ T31] #0: ffff8880638880e0 (&type->s_umount_key#100){++++}-{4:4}, at: deactivate_super+0xa9/0xe0 [ 574.747552][ T31] #1: ffffffff8e144840 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 574.770635][ T31] 2 locks held by kworker/1:3/5882: [ 574.776095][ T31] 5 locks held by kworker/1:5/5911: [ 574.800786][ T31] 3 locks held by kworker/1:7/5967: [ 574.806152][ T31] 3 locks held by kworker/u8:9/5998: [ 574.820113][ T31] #0: ffff88814cc45148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 574.848509][ T31] #1: ffffc9000503fbc0 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 574.881652][ T31] #2: ffffffff8f5177c8 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30 [ 574.904552][ T31] 2 locks held by kworker/u8:10/6038: [ 574.920783][ T31] 3 locks held by kworker/u8:13/6189: [ 574.926260][ T31] #0: ffff88801a489148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 574.957526][ T31] #1: ffffc90005487bc0 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 574.980112][ T31] #2: ffffffff8f5177c8 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 574.989225][ T31] 1 lock held by syz.2.110/6453: [ 575.015205][ T31] #0: ffffffff8e144840 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 575.041635][ T31] 7 locks held by syz-executor/7792: [ 575.047820][ T31] #0: ffff8880345f0428 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x211/0xa90 [ 575.078532][ T31] #1: ffff888058b5d888 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e0/0x4f0 [ 575.102175][ T31] #2: ffff8880277b65a8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x203/0x4f0 [ 575.124685][ T31] #3: ffffffff8edb0e08 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 575.150017][ T31] #4: ffff88802cbe70e8 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb6/0x7c0 [ 575.170231][ T31] #5: ffff888020a8b250 (&devlink->lock_key#8){+.+.}-{4:4}, at: nsim_drv_remove+0x50/0x160 [ 575.198118][ T31] #6: ffffffff8e144840 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 575.220144][ T31] 2 locks held by syz.3.405/7934: [ 575.226294][ T31] #0: ffffffff8e892488 (bio_slab_lock){+.+.}-{4:4}, at: bioset_exit+0x44a/0x690 [ 575.268017][ T31] #1: ffffffff8e144840 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 575.290311][ T31] 1 lock held by syz.0.445/8103: [ 575.295416][ T31] #0: ffffffff8e144840 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 575.321446][ T31] 4 locks held by syz-executor/8116: [ 575.326921][ T31] #0: ffff8880345f0428 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x211/0xa90 [ 575.360535][ T31] #1: ffff888033342c88 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e0/0x4f0 [ 575.380412][ T31] #2: ffff8880277b65a8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x203/0x4f0 [ 575.407239][ T31] #3: ffffffff8edb0e08 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 575.431053][ T31] 4 locks held by syz-executor/8175: [ 575.436682][ T31] #0: ffff8880345f0428 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x211/0xa90 [ 575.461686][ T31] #1: ffff888035ca3888 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e0/0x4f0 [ 575.487994][ T31] #2: ffff8880277b65a8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x203/0x4f0 [ 575.509972][ T31] #3: ffffffff8edb0e08 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 575.530282][ T31] 4 locks held by syz-executor/8179: [ 575.536240][ T31] #0: ffff8880345f0428 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x211/0xa90 [ 575.568306][ T31] #1: ffff888083ef8888 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e0/0x4f0 [ 575.591894][ T31] #2: ffff8880277b65a8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x203/0x4f0 [ 575.609965][ T31] #3: ffffffff8edb0e08 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 575.638721][ T31] 4 locks held by syz-executor/8182: [ 575.644979][ T31] #0: ffff8880345f0428 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x211/0xa90 [ 575.673401][ T31] #1: ffff8880364f7088 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e0/0x4f0 [ 575.692015][ T31] #2: ffff8880277b65a8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x203/0x4f0 [ 575.718565][ T31] #3: ffffffff8edb0e08 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 575.740657][ T31] 4 locks held by syz-executor/8184: [ 575.746111][ T31] #0: ffff8880345f0428 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x211/0xa90 [ 575.770167][ T31] #1: ffff888032557088 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e0/0x4f0 [ 575.799414][ T31] #2: ffff8880277b65a8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x203/0x4f0 [ 575.820133][ T31] #3: ffffffff8edb0e08 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 575.840022][ T31] 4 locks held by syz-executor/8244: [ 575.845385][ T31] #0: ffff8880345f0428 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x211/0xa90 [ 575.876738][ T31] #1: ffff88801dfea488 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e0/0x4f0 [ 575.900321][ T5835] Bluetooth: hci13: command tx timeout [ 575.908284][ T31] #2: ffff8880277b65a8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x203/0x4f0 [ 575.930310][ T31] #3: ffffffff8edb0e08 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 575.950384][ T31] 1 lock held by syz-executor/8520: [ 575.955660][ T31] #0: ffffffff8e144840 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 575.987256][ T31] 1 lock held by syz-executor/8538: [ 576.003472][ T31] #0: ffffffff8e144840 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 576.020262][ T31] 1 lock held by syz-executor/8540: [ 576.025550][ T31] #0: ffffffff8e144840 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 576.056416][ T31] 1 lock held by syz-executor/8545: [ 576.080526][ T31] #0: ffffffff8e144840 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 576.103801][ T31] 1 lock held by syz-executor/8603: [ 576.109095][ T31] #0: ffffffff8e144840 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 576.142243][ T31] 4 locks held by syz-executor/8642: [ 576.147614][ T31] #0: ffff8880345f0428 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x211/0xa90 [ 576.174400][ T31] #1: ffff88803d5df088 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e0/0x4f0 [ 576.201457][ T31] #2: ffff8880277b65a8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x203/0x4f0 [ 576.221422][ T31] #3: ffffffff8edb0e08 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 576.251380][ T31] 2 locks held by syz-executor/8667: [ 576.256736][ T31] #0: ffffffff8ed7a9e0 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 576.280495][ T31] #1: ffffffff8f5177c8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70 [ 576.289659][ T31] 2 locks held by syz-executor/8670: [ 576.320200][ T31] #0: ffffffff8ed7a9e0 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 576.343922][ T31] #1: ffffffff8f5177c8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70 [ 576.370146][ T31] 3 locks held by syz-executor/8672: [ 576.375512][ T31] #0: ffffffff8ecaa8c0 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 576.400214][ T31] #1: ffffffff8f5177c8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70 [ 576.421449][ T31] #2: ffffffff8e144978 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2f6/0x730 [ 576.448501][ T31] 2 locks held by syz-executor/8723: [ 576.460523][ T31] #0: ffffffff8f50abd0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0 [ 576.480485][ T31] #1: ffffffff8f5177c8 (rtnl_mutex){+.+.}-{4:4}, at: wg_netns_pre_exit+0x1c/0x1d0 [ 576.530431][ T31] [ 576.532845][ T31] ============================================= [ 576.532845][ T31] [ 576.610220][ T31] NMI backtrace for cpu 0 [ 576.610248][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc2-next-20250618-syzkaller #0 PREEMPT(full) [ 576.610275][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 576.610288][ T31] Call Trace: [ 576.610297][ T31] [ 576.610307][ T31] dump_stack_lvl+0x189/0x250 [ 576.610345][ T31] ? __wake_up_klogd+0xd9/0x110 [ 576.610375][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 576.610409][ T31] ? __pfx__printk+0x10/0x10 [ 576.610446][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 576.610476][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 576.610498][ T31] ? _printk+0xcf/0x120 [ 576.610526][ T31] ? __pfx__printk+0x10/0x10 [ 576.610552][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 576.610585][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 576.610622][ T31] watchdog+0xfee/0x1030 [ 576.610652][ T31] ? watchdog+0x1de/0x1030 [ 576.610685][ T31] kthread+0x70e/0x8a0 [ 576.610712][ T31] ? __pfx_watchdog+0x10/0x10 [ 576.610738][ T31] ? __pfx_kthread+0x10/0x10 [ 576.610765][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 576.610789][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 576.610816][ T31] ? __pfx_kthread+0x10/0x10 [ 576.610841][ T31] ret_from_fork+0x3f9/0x770 [ 576.610874][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 576.610911][ T31] ? __switch_to_asm+0x39/0x70 [ 576.610932][ T31] ? __switch_to_asm+0x33/0x70 [ 576.610962][ T31] ? __pfx_kthread+0x10/0x10 [ 576.610988][ T31] ret_from_fork_asm+0x1a/0x30 [ 576.611025][ T31] [ 576.611034][ T31] Sending NMI from CPU 0 to CPUs 1: [ 576.781973][ C1] NMI backtrace for cpu 1 [ 576.781993][ C1] CPU: 1 UID: 0 PID: 1170 Comm: kworker/1:2 Not tainted 6.16.0-rc2-next-20250618-syzkaller #0 PREEMPT(full) [ 576.782017][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 576.782030][ C1] Workqueue: wg-kex-wg0 wg_packet_handshake_receive_worker [ 576.782061][ C1] RIP: 0010:__kernel_text_address+0xd/0x40 [ 576.782089][ C1] Code: e8 a8 43 97 00 eb b3 66 0f 1f 44 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 66 0f 1f 00 53 48 89 fb e8 43 00 00 00 <85> c0 0f 95 c0 48 81 fb 00 70 06 91 0f 93 c1 48 81 fb 30 19 21 91 [ 576.782107][ C1] RSP: 0018:ffffc90000a07dd8 EFLAGS: 00000202 [ 576.782122][ C1] RAX: 0000000000000001 RBX: ffffffff89b43b95 RCX: 897935773be7c901 [ 576.782135][ C1] RDX: 0000000000000005 RSI: ffffffff8db7aaf9 RDI: ffffffff89b43b95 [ 576.782148][ C1] RBP: ffffc90000a07e90 R08: ffffc90000a08370 R09: 0000000000000000 [ 576.782161][ C1] R10: ffffc90000a07e58 R11: fffff52000140fcd R12: ffff888027229e00 [ 576.782176][ C1] R13: 0000000000000000 R14: dffffc0000000000 R15: 1ffff92000140fca [ 576.782189][ C1] FS: 0000000000000000(0000) GS:ffff888125d3d000(0000) knlGS:0000000000000000 [ 576.782205][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 576.782217][ C1] CR2: 00007fdf9a3b5f40 CR3: 00000000848a4000 CR4: 00000000003526f0 [ 576.782234][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 576.782244][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 576.782256][ C1] Call Trace: [ 576.782263][ C1] [ 576.782271][ C1] unwind_get_return_address+0x4d/0x90 [ 576.782303][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 576.782324][ C1] arch_stack_walk+0xfc/0x150 [ 576.782345][ C1] ? nft_synproxy_do_eval+0x345/0x570 [ 576.782371][ C1] stack_trace_save+0x9c/0xe0 [ 576.782391][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 576.782410][ C1] ? kasan_record_aux_stack+0xbd/0xd0 [ 576.782432][ C1] ? nft_synproxy_eval_v4+0x376/0x560 [ 576.782455][ C1] ? nft_synproxy_do_eval+0x345/0x570 [ 576.782476][ C1] ? nft_do_chain+0x40c/0x1920 [ 576.782499][ C1] ? __lock_acquire+0xab9/0xd20 [ 576.782526][ C1] kasan_save_track+0x3e/0x80 [ 576.782552][ C1] ? kasan_save_track+0x3e/0x80 [ 576.782577][ C1] ? kasan_save_free_info+0x46/0x50 [ 576.782600][ C1] ? __kasan_slab_free+0x62/0x70 [ 576.782626][ C1] ? kmem_cache_free+0x18f/0x400 [ 576.782642][ C1] ? skb_release_data+0x62d/0x7c0 [ 576.782663][ C1] ? consume_skb+0x9e/0xf0 [ 576.782682][ C1] ? nft_synproxy_eval_v4+0x376/0x560 [ 576.782730][ C1] ? skb_release_data+0x62d/0x7c0 [ 576.782751][ C1] kasan_save_free_info+0x46/0x50 [ 576.782773][ C1] __kasan_slab_free+0x62/0x70 [ 576.782801][ C1] kmem_cache_free+0x18f/0x400 [ 576.782820][ C1] skb_release_data+0x62d/0x7c0 [ 576.782853][ C1] consume_skb+0x9e/0xf0 [ 576.782872][ C1] nft_synproxy_eval_v4+0x376/0x560 [ 576.782900][ C1] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 576.782924][ C1] ? nf_ip_checksum+0x13c/0x510 [ 576.782948][ C1] nft_synproxy_do_eval+0x345/0x570 [ 576.782974][ C1] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 576.782998][ C1] ? __pfx___ip_vs_conn_in_get+0x10/0x10 [ 576.783031][ C1] nft_do_chain+0x40c/0x1920 [ 576.783060][ C1] ? __pfx_nft_do_chain+0x10/0x10 [ 576.783085][ C1] ? __pfx_ip_vs_conn_out_get_proto+0x10/0x10 [ 576.783123][ C1] ? ip_vs_out_hook+0x9b5/0xef0 [ 576.783151][ C1] ? __pfx_ip_vs_in_hook+0x10/0x10 [ 576.783181][ C1] nft_do_chain_inet+0x25d/0x340 [ 576.783203][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 576.783229][ C1] ? nf_nat_ipv4_local_in+0x223/0x720 [ 576.783259][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 576.783281][ C1] nf_hook_slow+0xc2/0x220 [ 576.783301][ C1] NF_HOOK+0x206/0x3a0 [ 576.783318][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 576.783336][ C1] ? NF_HOOK+0x9a/0x3a0 [ 576.783351][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 576.783367][ C1] ? ip_rcv_finish_core+0xda3/0x1c00 [ 576.783387][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 576.783406][ C1] ? skb_dst+0x4f/0xd0 [ 576.783423][ C1] ? ip_local_deliver+0x12a/0x1b0 [ 576.783442][ C1] NF_HOOK+0x309/0x3a0 [ 576.783459][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 576.783476][ C1] ? NF_HOOK+0x9a/0x3a0 [ 576.783492][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 576.783507][ C1] ? ip_rcv_core+0x7f7/0xd00 [ 576.783524][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 576.783546][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 576.783562][ C1] __netif_receive_skb+0x143/0x380 [ 576.783592][ C1] ? process_backlog+0x2d5/0x14f0 [ 576.783612][ C1] process_backlog+0x60e/0x14f0 [ 576.783628][ C1] ? enqueue_timer+0x216/0x560 [ 576.783662][ C1] ? __pfx_process_backlog+0x10/0x10 [ 576.783680][ C1] ? do_raw_spin_lock+0x121/0x290 [ 576.783704][ C1] __napi_poll+0xc7/0x480 [ 576.783731][ C1] ? net_rx_action+0x46d/0xe30 [ 576.783750][ C1] net_rx_action+0x707/0xe30 [ 576.783777][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 576.783814][ C1] handle_softirqs+0x286/0x870 [ 576.783850][ C1] ? do_softirq+0xec/0x180 [ 576.783880][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 576.783910][ C1] ? rcu_is_watching+0x15/0xb0 [ 576.783937][ C1] ? kernel_fpu_end+0xc8/0x120 [ 576.783958][ C1] do_softirq+0xec/0x180 [ 576.783984][ C1] [ 576.783990][ C1] [ 576.783997][ C1] ? __pfx_do_softirq+0x10/0x10 [ 576.784024][ C1] ? __local_bh_disable_ip+0xf1/0x190 [ 576.784051][ C1] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 576.784081][ C1] ? lockdep_softirqs_on+0x13b/0x1c0 [ 576.784107][ C1] __local_bh_enable_ip+0x17d/0x1c0 [ 576.784135][ C1] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 576.784164][ C1] ? kernel_fpu_begin_mask+0x2c8/0x3a0 [ 576.784188][ C1] kernel_fpu_end+0xd2/0x120 [ 576.784207][ C1] ? __pfx_kernel_fpu_end+0x10/0x10 [ 576.784231][ C1] blake2s_compress+0x5f/0xd0 [ 576.784255][ C1] blake2s_final+0x116/0x260 [ 576.784278][ C1] hmac+0x293/0x330 [ 576.784307][ C1] ? __pfx_hmac+0x10/0x10 [ 576.784350][ C1] ? kdf+0x115/0x270 [ 576.784387][ C1] kdf+0x182/0x270 [ 576.784415][ C1] ? __pfx_kdf+0x10/0x10 [ 576.784449][ C1] ? __local_bh_enable_ip+0x12d/0x1c0 [ 576.784481][ C1] wg_noise_handshake_consume_initiation+0x242/0x900 [ 576.784516][ C1] ? __pfx_wg_noise_handshake_consume_initiation+0x10/0x10 [ 576.784565][ C1] ? kernel_fpu_end+0xd2/0x120 [ 576.784583][ C1] ? __pfx_kernel_fpu_end+0x10/0x10 [ 576.784817][ C1] ? __asan_memset+0x22/0x50 [ 576.784898][ C1] ? blake2s_final+0x14c/0x260 [ 576.784920][ C1] ? compute_mac1+0x152/0x1a0 [ 576.784947][ C1] ? __pfx_compute_mac1+0x10/0x10 [ 576.784985][ C1] ? wg_cookie_validate_packet+0x208/0x320 [ 576.785017][ C1] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 576.785050][ C1] wg_packet_handshake_receive_worker+0x5f2/0xfb0 [ 576.785082][ C1] ? __pfx_wg_packet_handshake_receive_worker+0x10/0x10 [ 576.785106][ C1] ? register_lock_class+0x51/0x320 [ 576.785135][ C1] ? __lock_acquire+0xab9/0xd20 [ 576.785166][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 576.785198][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 576.785220][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 576.785247][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 576.785274][ C1] process_scheduled_works+0xae1/0x17b0 [ 576.785318][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 576.785354][ C1] worker_thread+0x8a0/0xda0 [ 576.785372][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 576.785399][ C1] ? __kthread_parkme+0x7b/0x200 [ 576.785421][ C1] kthread+0x70e/0x8a0 [ 576.785443][ C1] ? __pfx_worker_thread+0x10/0x10 [ 576.785471][ C1] ? __pfx_kthread+0x10/0x10 [ 576.785505][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 576.785526][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 576.785549][ C1] ? __pfx_kthread+0x10/0x10 [ 576.785570][ C1] ret_from_fork+0x3f9/0x770 [ 576.785602][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 576.785631][ C1] ? __switch_to_asm+0x39/0x70 [ 576.785651][ C1] ? __switch_to_asm+0x33/0x70 [ 576.785668][ C1] ? __pfx_kthread+0x10/0x10 [ 576.785689][ C1] ret_from_fork_asm+0x1a/0x30 [ 576.785717][ C1] [ 577.785653][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 577.792811][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc2-next-20250618-syzkaller #0 PREEMPT(full) [ 577.804666][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 577.815745][ T31] Call Trace: [ 577.819085][ T31] [ 577.822143][ T31] dump_stack_lvl+0x99/0x250 [ 577.827598][ T31] ? __asan_memcpy+0x40/0x70 [ 577.832267][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 577.838831][ T31] ? __pfx__printk+0x10/0x10 [ 577.844105][ T31] panic+0x2db/0x790 [ 577.848406][ T31] ? __pfx_panic+0x10/0x10 [ 577.852893][ T31] ? nmi_backtrace_stall_check+0x433/0x440 [ 577.859005][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 577.864528][ T31] ? nmi_trigger_cpumask_backtrace+0x2b6/0x300 [ 577.871271][ T31] watchdog+0x102d/0x1030 [ 577.875778][ T31] ? watchdog+0x1de/0x1030 [ 577.880352][ T31] kthread+0x70e/0x8a0 [ 577.884467][ T31] ? __pfx_watchdog+0x10/0x10 [ 577.889291][ T31] ? __pfx_kthread+0x10/0x10 [ 577.893943][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 577.899183][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 577.904631][ T31] ? __pfx_kthread+0x10/0x10 [ 577.909451][ T31] ret_from_fork+0x3f9/0x770 [ 577.914367][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 577.919818][ T31] ? __switch_to_asm+0x39/0x70 [ 577.925319][ T31] ? __switch_to_asm+0x33/0x70 [ 577.930299][ T31] ? __pfx_kthread+0x10/0x10 [ 577.935030][ T31] ret_from_fork_asm+0x1a/0x30 [ 577.939854][ T31] [ 577.943218][ T31] Kernel Offset: disabled [ 577.947744][ T31] Rebooting in 86400 seconds..