last executing test programs: 6m55.354931033s ago: executing program 3 (id=11): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000fe4000/0x11000)=nil, &(0x7f0000fea000/0x1000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x1b7b, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$unix(0x1, 0x1, 0x0) r2 = socket(0xb, 0x3, 0x6) unshare(0x8000000) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r3, 0xc008561c, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000180)={0x1}) ioctl$vim2m_VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000040)={0xf0f022}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) r5 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) ioctl$VIDIOC_S_SELECTION(r5, 0xc040565f, &(0x7f0000000940)={0xa, 0x100, 0x3, {0x8000, 0x1000, 0x4, 0x2}}) sendmsg$nl_route_sched(r2, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r2, 0x89f9, 0x0) 6m51.320295204s ago: executing program 3 (id=19): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_tracing={0x1a, 0xf, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000009008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b70000000000000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x19, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r5}, 0x94) bpf$OBJ_PIN_PROG(0x11, 0x0, 0x0) 6m46.057651656s ago: executing program 3 (id=32): r0 = socket(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'hsr0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000140)="01154e0001000011221e445588fb", 0xe, 0x4044015, &(0x7f0000000040)={0x11, 0x0, r1, 0x0, 0x4, 0x0}, 0x14) socket$key(0xf, 0x3, 0x2) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x102, 0x0) write$sndseq(r2, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) read(r4, &(0x7f0000000300)=""/96, 0x60) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setfsgid(0xee00) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) socket$inet6_tcp(0xa, 0x1, 0x0) r8 = syz_genetlink_get_family_id$fou(&(0x7f0000000b80), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000340)={0x1c, r8, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40040021}, 0x40080) 6m44.165006924s ago: executing program 3 (id=35): chdir(&(0x7f0000000480)='./cgroup\x00') syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x1881c00, 0x0, 0x0, 0x0, &(0x7f0000000000)) socket$inet6_tcp(0xa, 0x1, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x7, 0x81}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 6m42.129814895s ago: executing program 3 (id=39): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x1000001, 0x4c032, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000002c0)={0xd, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x1000000000a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000025300)=""/102392, 0x18ff8) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x24008090) ioctl$CEC_S_MODE(r0, 0x40046109, &(0x7f0000000180)=0xd0) syz_io_uring_setup(0x496, 0x0, 0x0, &(0x7f0000000600), 0x0) 6m40.181295304s ago: executing program 3 (id=43): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x10008, &(0x7f0000000080)={[{@debug}, {@resuid={'resuid', 0x3d, 0xee01}}]}, 0xff, 0x49e, &(0x7f0000000f40)="$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") prlimit64(0x0, 0xc, &(0x7f00000000c0)={0x2d, 0x1ec}, 0x0) getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000900)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000980)={[], [{@fowner_eq}, {@smackfshat={'smackfshat', 0x3d, 'fsuuid'}}, {@uid_gt}, {@dont_hash}, {@fsuuid={'fsuuid', 0x3d, {[0x36, 0x33, 0x30, 0x30, 0x37, 0x69, 0x36, 0x30], 0x2d, [0x65, 0x56, 0x38, 0x32], 0x2d, [0x37, 0x39, 0x66, 0x31], 0x2d, [0x30, 0x39, 0x33, 0x62], 0x2d, [0x62, 0x35, 0x63, 0x62, 0x31, 0x62, 0x32, 0x38]}}}]}, 0x1, 0x5a3, &(0x7f00000002c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x8042, 0x81) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) 6m24.266120353s ago: executing program 32 (id=43): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x10008, &(0x7f0000000080)={[{@debug}, {@resuid={'resuid', 0x3d, 0xee01}}]}, 0xff, 0x49e, &(0x7f0000000f40)="$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") prlimit64(0x0, 0xc, &(0x7f00000000c0)={0x2d, 0x1ec}, 0x0) getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000900)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000980)={[], [{@fowner_eq}, {@smackfshat={'smackfshat', 0x3d, 'fsuuid'}}, {@uid_gt}, {@dont_hash}, {@fsuuid={'fsuuid', 0x3d, {[0x36, 0x33, 0x30, 0x30, 0x37, 0x69, 0x36, 0x30], 0x2d, [0x65, 0x56, 0x38, 0x32], 0x2d, [0x37, 0x39, 0x66, 0x31], 0x2d, [0x30, 0x39, 0x33, 0x62], 0x2d, [0x62, 0x35, 0x63, 0x62, 0x31, 0x62, 0x32, 0x38]}}}]}, 0x1, 0x5a3, &(0x7f00000002c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x8042, 0x81) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) 2m10.750762468s ago: executing program 2 (id=634): sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) unshare(0x6020400) r2 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsopen(&(0x7f0000000100)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x961a02, 0x0) ioctl$TIOCSSOFTCAR(r4, 0x5453, 0x0) 2m8.356013778s ago: executing program 2 (id=636): bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYRES32, @ANYRES32=0x0], 0x50) fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) getpid() connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r0 = socket(0x15, 0x5, 0x0) getsockopt(r0, 0x200000000114, 0x2711, 0x0, &(0x7f0000000040)) 2m7.823788851s ago: executing program 2 (id=639): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001840)={&(0x7f0000000200)={0x2c, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x4}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffff0001}]}]}, 0x2c}}, 0x20004890) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x1, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e23, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}}}, 0x108) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1c018050}, 0x44014) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffffc6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2m5.113604149s ago: executing program 4 (id=644): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000040)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xd, 0x0, 0x0) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000080), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) write$nci(r0, &(0x7f00000004c0)=@NCI_GID_PROPRIETARY_NFT={0xf, 0x1, 0x3, 0x0, 0x2, "4f782dd753c54834b6bdb81e8aebd5fa9b1f8428db55480cdeae6018f9b0b636449e776699e633eb26b9a24f22"}, 0x30) 2m4.939972114s ago: executing program 2 (id=645): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000280)='./bus\x00', 0x1c9c9b, 0x0, 0x0, 0x0, &(0x7f0000000140)) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x103090, 0x0) mount$bind(&(0x7f0000001900)='.\x00', &(0x7f0000000380)='./file0/file0\x00', 0x0, 0x2a05004, 0x0) mount$fuseblk(0x0, &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x24000, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) 2m4.852746406s ago: executing program 2 (id=646): sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) unshare(0x6020400) r2 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsopen(&(0x7f0000000100)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x961a02, 0x0) ioctl$TIOCSSOFTCAR(r4, 0x5453, 0x0) 2m4.744495648s ago: executing program 4 (id=647): openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000042003303"], 0x14}, 0x1, 0x0, 0x0, 0x4015}, 0x24040004) recvmmsg(r3, &(0x7f0000002080)=[{{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x7aaf804d}, {{0x0, 0x0, 0x0}, 0xd}, {{0x0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000001e00)=""/54, 0x36}, {0x0}, {0x0}, {0x0}, {0x0}], 0x8}, 0x81}], 0x4, 0x12002, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10008000}, 0x93) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0xa, 0x4e21, 0x80000, @loopback, 0x3}, 0x1c, 0x0}, 0x440e0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2m3.49134907s ago: executing program 4 (id=651): r0 = socket(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'hsr0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000140)="01154e0001000011221e445588fb", 0xe, 0x4044015, &(0x7f0000000040)={0x11, 0x0, r1, 0x0, 0x4, 0x0}, 0x14) socket$key(0xf, 0x3, 0x2) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x102, 0x0) write$sndseq(r2, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setfsgid(0xee00) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) socket(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r6 = syz_genetlink_get_family_id$fou(&(0x7f0000000b80), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000340)={0x1c, r6, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40040021}, 0x40080) 2m3.391486322s ago: executing program 2 (id=652): socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x4, 0x4, 0x8, 0x5, 0x0, 0x1}, 0x50) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={0xffffffffffffffff, r0}, 0xc) socket$inet_tcp(0x2, 0x1, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x8, 0x3, 0x370, 0x238, 0x11, 0x148, 0x238, 0x0, 0x2d8, 0x2a8, 0x2a8, 0x2d8, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x1f0, 0x238, 0x0, {}, [@common=@inet=@socket2={{0x28}}, @common=@inet=@hashlimit3={{0x158}, {'bridge0\x00', {0x6, 0x6, 0x40, 0x6, 0x0, 0x3, 0x5, 0x8, 0x0, 0x20}, {0x5}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0xfffffffe}}}, {{@ip={@multicast2, @remote, 0x0, 0x0, 'vlan0\x00', 'macvlan1\x00', {}, {0xff}}, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3d0) sched_setscheduler(0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) 2m2.992936702s ago: executing program 33 (id=652): socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x4, 0x4, 0x8, 0x5, 0x0, 0x1}, 0x50) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={0xffffffffffffffff, r0}, 0xc) socket$inet_tcp(0x2, 0x1, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x8, 0x3, 0x370, 0x238, 0x11, 0x148, 0x238, 0x0, 0x2d8, 0x2a8, 0x2a8, 0x2d8, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x1f0, 0x238, 0x0, {}, [@common=@inet=@socket2={{0x28}}, @common=@inet=@hashlimit3={{0x158}, {'bridge0\x00', {0x6, 0x6, 0x40, 0x6, 0x0, 0x3, 0x5, 0x8, 0x0, 0x20}, {0x5}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0xfffffffe}}}, {{@ip={@multicast2, @remote, 0x0, 0x0, 'vlan0\x00', 'macvlan1\x00', {}, {0xff}}, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3d0) sched_setscheduler(0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) 1m59.489212391s ago: executing program 4 (id=662): sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) unshare(0x6020400) r2 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsopen(&(0x7f0000000100)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x961a02, 0x0) ioctl$TIOCSSOFTCAR(r4, 0x5453, 0x0) 1m58.005782368s ago: executing program 4 (id=665): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e1f, 0x3, 'lc\x00', 0x4, 0x81, 0x9}, {@rand_addr=0x64010102, 0x4e26, 0x0, 0xcb, 0x12d5c, 0x12d5c}}, 0x44) setsockopt$IP_VS_SO_SET_EDITDEST(r0, 0x0, 0x489, &(0x7f0000000380)={{0x84, @multicast1, 0x4e20, 0x3, 'sh\x00', 0x1, 0x60000000, 0xc}, {@rand_addr=0x64010102, 0x4e26, 0x3, 0x0, 0x8001, 0x1}}, 0x44) 1m57.739871134s ago: executing program 4 (id=667): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r0, 0x0, 0x25, 0x0, @val=@tcx}, 0x1c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000000206010800000000000000000000003f0500010006000000050005000200000005000400000000000900020073797a310020000013000300686173683a6e65742c6966616365"], 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000005700)=ANY=[@ANYBLOB="580000000906010200000000000000000200fdff300007800c00018008000140e8000001140017006261746164765f736c6176655f3000000c00028008000140640101010900020073797a31000000000500010007"], 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x40c0080) 1m42.627218074s ago: executing program 34 (id=667): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r0, 0x0, 0x25, 0x0, @val=@tcx}, 0x1c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000000206010800000000000000000000003f0500010006000000050005000200000005000400000000000900020073797a310020000013000300686173683a6e65742c6966616365"], 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000005700)=ANY=[@ANYBLOB="580000000906010200000000000000000200fdff300007800c00018008000140e8000001140017006261746164765f736c6176655f3000000c00028008000140640101010900020073797a31000000000500010007"], 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x40c0080) 27.241022266s ago: executing program 6 (id=853): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x30}, 0x1, 0x0, 0x0, 0x8441}, 0x4000000) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001840)={&(0x7f0000000200)={0x2c, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x4}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffff0001}]}]}, 0x2c}}, 0x20004890) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x1, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e23, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}}}, 0x108) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1c018050}, 0x44014) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffffc6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 26.751999248s ago: executing program 6 (id=856): r0 = socket(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'hsr0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000140)="01154e0001000011221e445588fb", 0xe, 0x4044015, &(0x7f0000000040)={0x11, 0x0, r1, 0x0, 0x4, 0x0}, 0x14) socket$key(0xf, 0x3, 0x2) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x102, 0x0) write$sndseq(r2, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setfsgid(0xee00) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) socket(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r7 = syz_genetlink_get_family_id$fou(&(0x7f0000000b80), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000340)={0x1c, r7, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40040021}, 0x40080) 22.960965344s ago: executing program 6 (id=861): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000001200012a000000000000000080000000"], 0x26}}, 0x0) socket$igmp6(0xa, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x2, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x2001, 0x0) ioctl$FBIOBLANK(r4, 0x4611, 0x2) getrlimit(0x0, &(0x7f0000000180)) shutdown(0xffffffffffffffff, 0x1) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x200000000003, &(0x7f0000000040), 0x111, 0x9}}, 0x4c) 21.625662967s ago: executing program 5 (id=863): sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x8410) socket$tipc(0x1e, 0x2, 0x0) ioctl$NILFS_IOCTL_CHANGE_CPMODE(0xffffffffffffffff, 0x40106e80, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x200000087}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x404c000}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_mount_image$btrfs(&(0x7f0000000140), &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f0000000240)={[{@noenospc_debug}, {@compress}, {@discard}]}, 0xfc, 0x559e, &(0x7f000000ac40)="$eJzs3X9sVeX9B/BzWwoN+C39jhUYfxAgBoMkyJYtjqB4MQa24eKlgsKcCEQlBivYRDcYqUWSZcaghU4EF5GQaDJjscM/FMywy7CMZfzY5hZjs4JSaZZsAzVrHDG69N77XO49l9tembNOXy/SnvPcz3me+9yT88d9X/qcGwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEAURUcSc9+d0f3i0ZE1X77/Hz+e+OjGn4zfvX/roVvu23T/gjMjbto5a1nf+mlN8zdsbDjS/PS+ObdGUSLdL5Htf9u136q/88bbvlsdBly+MLOtrS31lJmuJzON4QUP9vcr/FkRRVFVbIDK7PbV7E5FwQC53cbiAQf0Tuui6O7J8ya1dT01bklyYU/xS6df9VBPYKhkr6ue89dSMv27InZErp136SUKLtFM//gF96m8CADgY5mZSm9yb0ezb3Fz7eZ4PdZOxtotsXZ4h9CS37gYmXGHl5rnpHh9iOaZzESFESXnGatnz3+unYr3j7VjUeNjzLPw0GykqS41z7Wx+lDNEwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOCzZOzxo2tWtD2y575fdtQceff9OVc+8KWOw22LT4y8eunKHWum/HTWsr7105rmb9jYcKT56X1zbo2i2nS/RKZ74kTL5b9NjZ3fvXfcG427n6vpq8yOG7bD8g6OXg87s0ZH0cq8Sk8Y9q81UZQqLKSb0Y7iwl3pnW+HAgAAAJ8nX0n/rsi1M3GwqqCdSKfJRPpfkAmL77Quiu6ePG9SW9dT45YkF/Zc/HipEuMlLzherl17/ieRF4xD/I2Pd74eDm0sGmdg8RHjef7SMWPefmty/eSvT5v7xA3PjOru+r8nZ2xJ/bGu5oUrru+tf/a6ovxfO3D+D2dO/gcAAOA/If/HxxnYYPn/jqVTt7z+i2Grft3a8MTB+h1/bv3OMzsXneq54Ud9L09N3v7o1UX5f1LBUxbl/zDjkP8roovL/wAAAPBZ9t/O/8micQY2WP5vONM3+wcHX6vr+PucxXt+9dAVi8+e/tv8U7t3DV9zR8v6uoeuLMr/M8vL/8Pypx0e/F2Y8OrRUTSz/JMKAAAAFAj/737+o4WQ1zOfHMTz+rX/vKp5380ffPMbD97zpzff/s2xA7MnrdteN/PgyzfVf1j5ve3dRfk/WV7+r/p0Xi4AAABQhuePrpw773jPucfPvtB18vDu3pMznjyzrqnvdOslLatXbTr2WlH+T5WX/0cMzcsBAAAALuDeO59bsfnVl/oe2H/X2Ck9FVc1XpK4ZduOqU0TPuq8tPfy7VuL8v/y8vL/yOw2u/Ih06kz/BVC6+goqu7fWZspHIparskVAAAAgE9IyOlbP1ixbOzOsb3jj59+rObQG4dn/2Vt55yN13RXdW/uXNZ4WdH9AkJiL3X//3Cng7D+v+D+f0Xr//MKmbv+zXZjAAAAAL6Iitfzh9vjZ765oNT375e7/n9J3cQTiba33lv11XMHzo1ZsP/7129aV9/be8+El37/wz9M/6i6KP83l5f/K/O3n+T3/wEAAMBF+F/7/r+lReMMbLD7/zdV9DWsWrd3+uota7csTCw7UH3qwdV731+w5l9Tb36+qea6A0X5v6W8/B+2o/JfXkc4P5tGR9H4/p3s3QR/Hqa7OlZor8orZE58rMeNoUe20D4ir5C2Ntbja6OjaHL/TnOs8P+h0BIrnK3JFnbFCsdCIXs95Ap7YoWOcKVtq8lON154MRSyCyzawwqKUbklEbEe75Xq0V+4YI+u3JMDAAB8oYTwnM2yVYXNKB5l2xODHTBysAMqBjugcrADhsUOiB9Y6vFoeWEhPH575yMbNjVMSb7y8NzHfvbms40T9j1+WV3v5g9f2XbvxJ3TW6YW5f9d5eX/cCqGZzal1v9HYf1/9nsNc+v/l4dCbazQHgqp+B0DUuE5MmH34fActalsj7PjcwUAAAD4XAufC1QO8TwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/s3evcdJVd0JAj/d9INumqaNE9GMk3TUgGakaWwNw+AoaoxGRZpZddxkNBBoEGmE8FgFURtQZxziZ3ztrJnoCAoiu+qHGFeDwUhcxIw6iWLiA/Cxjq7r+h6VGM2E/XTfOkXVrS67EFDa+X7/6DpVv/O89eg69946FwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/xjuPfjlk4YunP0PHzace8nqqqmL/kfH6Mv+cNW3vvjUPy5b9G9h/i9GnLll3kEXHjd/wbR/6Vi++ogzQmjtKleWFC977oqvPtS613HP3jFw48wbb63fUpWpNxMP/Tr/lGfuXBxbfbF/CHeXhVCRDgypSwKVmft1sb5960LYI2wLZEu01SYl0g2HB2pCWBK2BbJVra4JoS4ncMqG+++7vDNxTU0IXwkhVKfbeKY6aaMmHRhUlQRq04HpFUngt1sT2cBPypMA7LD4Zsi+6Fe15mdo6L5ckddf5U7r2KcrPbw+MdFQPN/rR+3iTuWoSj/QukNPW0F17BIFb4+13m294N1WsJ2v8LTlfpHKfEPZui1UHcontk0aP6d9dnykPDQ19SlW0y56np9+e/6E7Un3mtdh7EDDTnkdXvrYiun9lo2+9OrNvxqz4ayaA3a0m0/lbNLc9K5WHTKvuV7zPEajfJ70grdfwbekRl+6Qghbzz17xtfnTDz7iD63PLnu1QcfrNty9pwFvzhz4nmLLj55w7/Pf6lg/t/w0fP/+HKOt+V5uWOrH9Ync/P4SF1MvFmfzM0BAACg1+gNe01Xnv/6X73+/bWtMxed/u23Dj73w71afz3i/gFVB7yxrqn1/I2ff6Vg/t9Y2vH/eMi/Lne0a0MY1ZVYNCCEvbseTwIrY3e+OyCEL3elWvMDR6UCa0PYpytxULaqVIm+sURjKvByfSYwKhVYHwOtqcDyGLgiFbg4BlalAhNiYG0qcHQMhCn54/hqfWYcJQdqYmBcshFXxbMQ3qmPraW21aZsVQAAADtJZnZYmX8351yHHc0Qp5eranrKEM/ALpqhOlVDegabnVYVraGipxrKe6ohO+6Ojx5+Qc1lPdVccBpGWX6GG9f85X2LXjzsC2P3mvj5xUMvmPKz8eGst++uerx5yYtv7XvEzesK5v/NHz3/r+6mI2UFx/9DGNv1N+Yuz0Tas/FxrXkZAAAAgB1w0R//xR61Lw85oGHT+2X3zl/7xKMrfrl5j1NOf3/c8a//8PCaxnsL5v+jSjv/P+4T6ZOTOTwSd0NMHRBCc34gqXZkYSA56t0vEwAAAIDeIHs8PnssfErmNjlFOz2fLszfup3544H/Ud3m//09/7P2jq3/+mLZBd89d0TNgKX/9GrHhBNOPvqW47/1zj4VB/yyvGD+31ra+f+1+bdJJ9bHXlw9IIS+OYEHYy87A10aY+D5I/MDmfGvjxtgcawqc2JCtqrFscS4GGhOBZYUK/FotsTe+YHMk5VtfFF2HFMyJXICAAAA8ImLuwPicfl4/n/LGSNO++vvzfrbha88eN7qCy75q+Ed80eedP/THzbMvXJp2PTmEQXz/3Hbd/5/1zy44PT+9n4hDK0IoU/6hwGP1CYLA8ZAXVkmcW9tUlefdFULa0MY2TmwdFUvZNb/r0ivMfh4TVJVDOy93y1vD+pMLKsJYWhu4IlvLz2sMzEnFcg2flpNCF/qHG268bv6Jo1Xphu/tm8IX8wJZKua0DeEzsaq0lX9r+rMdQzSVa2qDmHPnEC2quHVIcwNAPRW8X/pxNwHZ82dN3V8e3vbzF2YiDvxa8KkKe1tTROmt0+sLtKniak+561jtKBwTKVe+mZTZo2ixSsnV5aSzv5QsDm3rcyO/IIzBzP345ehyq5xHlKZd7clPeQD9y9sIuR8lSo25PJdPOTa3Eq2PYkF9cf8VaFf6DtnVtvMpvPGz549c1jyt9TshyR/43GmZFsNS2+r2u76VsLLo+hyWSkfd1sNyq1k6OxpM4bOmjtvyJRp4ye3TW47p+XQP2sZMXz410YM7RxUc/K3h5EO6q7m1Ei3Li1xWDtxpF+oyKnkk/jQkJCQ6G2J/f7L5odH77n+nOt/9tqPz+/3zdPu3fvImT889KqpD1Xve/ji24ccWDD/n/HR8//4qRM/+DPrMxQ7/t8QD/Mnj287zD8uBpaUevy/odjR/OyJAY2pQEcMdDjMDwAAwGdD3B0Z92bGndKbb1m/buOSlrk/aHin5dY17Utvuum+U39y58ATvjQ47LXhuhM+VzD/7yjt9/87af3/7NL1JxRb5v+gWKK52Pr/6WX+s+v/dxRb/z+9zH92/f8ln8L6/3OygdQmecf6/wAAwGfBJ7f+f4/L+6cvEFCQocfl/dMXCCjI0OMy/qVeIGC71/9f8+Bff6Wq35g7/qTlN/WXvPZ39xzWeuS6zTP/5Etb10+877qxt6wpmP9fUdr838L9AAAAsPv4z5ddU3H02Xff0bJu6sZxbw5+98m3lgzq80HF0Q+3j3xh4Bu3nlcw/19S2vz/k1//LxQ7/7+xWKC12MKA1v8DAACglyq2/t89Q1sa/zCm/x+eHvab5Q/ePPqnj/z898v3+/mJPyvfZ8Gxz8+8bFLB/H9VafP/eNpFeV7u2JsP65M17UJ6Tbs367M/GQAAAIDeoTw0NVWWmDdvYdSjPn6bT2eWAv2odK7vvXLt2ZtfmH7c46ev+7uaEwbvOWHaBasa/2b4gXd+ftQley7ddGrB/H9tafP/vN9lXPrYiun9lo2+9MOrN/9qzIazag7YdvwfAAAA2HVK3S8BAAAAAAAAAAAAAAB8+s7tWHzhI8uOfe+bt//F/kcseXXwbXcd+Lsh/V664qoHJq1648zJXy/4/X8Y21Wu2O//43X/4u8L/igvd2y15/X/MvdPOfH2uV1LFj5SH8L+uYGpC6fuETLX5h+cG7jvjIMGdiYWpkusefbolzoT30kHjh/yuS2dicNTgXFxkcR90oF4VcUt/VOBuLzi4+lA3B6r0oGqTOCy/sk4ytLb6pW6ZFuVpbfVxroQBuQEstvq7rqkjbL0AK9JBbID/F46EAd4ciZQnu7V7f2SXsVAXSx6Q7+kVwAA7Lbit8DKMGlKe1tz/Aofb79QkX8b5S1ZtqCw2rISm9+UWZps8crJlaWk+6S/i2671nhlqO4cwrCCr6u5Wcq6Rrlzaulh0/1RkSH3tNpbeZFyadu76aqKj6gmGVHThOntEyt7HHhLz1kOqegxy7CCyU5ulvKuTVpCLSX0pYQRlbhtSuhyvF8empr6pHL9eQw2hDw9vSJK/b1+7jp/xV4FuXluO/TKt758zE+f++CfP/9E/2+cVnP7rO+/e+KvX7//wEOOuG5C05otBfP/htLm/9W549qSuRhAR7yy3sgBIYwrcUQAAADw2XfbRbfecfr09a9MWlvx5GOPTS0fc3rl1vl3zp93ycZ7Fx9/2cErdjR+2Fm//f5vBu//b89e9dJPR+7zwA03/58nD3v8z3//8I8eeqduZZ+x7xXM/xtLm//HPViZQ8HJ3o618fr/iwaE0HVp/YYksDIO97sDQvhyV6o1lkguqH9CLNGcBFbGHSYHxRLjWvOr6hsDq1KBl+szgbWpwPoYyOyluCVkduVcWR/CYV2psfklZsQSDanAmBhoTAWaYqA5FegfA6NSgdf6ZwKtqcDDMRCm5G+rH/fPbCsAAIDtkZlnVebfDel53qqKnjKU9ZShtqcM5T1lqO4pQ7FRxPt3xAyVqZNXynIyVaZrrUnVUpAhXgx/u/tVkCE8mp8zXbCg6Xj+QfZ8g7L8DFf+4NlT1w+e/tDqzcd8beBt/zhkz4Obp9e9t+CGp3475pzrnv/TQQXz/+bS5v+1+bdJ6+vj/H/b9f+SwIOxe1fHU8cbY+D5I/MDmR0D6+Nkd3G2qtZMicykfXEsMSoGGlOBGTEwKhUYNzYTWDIwP5CZaWcbX5RtfEqmRE4AAAAAPnFxB0HcTRPn/zce9YOr3x8wccuyeTPvH9vyxMmjv3H1XT+6d/9ld767YvCAce99p2D+P6q0+X9sr19uYxfH3rzYP4S7y7b1JhsYUpcE4n6Muvjz+H3rQtgjZwdHtkRbbVKiKtVweKAm+YV6Vbqq1TXJGgPx/ikb7r/v8s7ENTUhfCVn70u2jWeqkzZq0oFBVUmgNh2YXpEE4p6fbOAn5UkAdlh2r2B8QWVOdclq6L5ckdffZ+WaoOnhFewD7SZfd7+52lWq0w9k9qlmbd/TVlAdu0TB22Otd1tvfLc1eLflfpHKfEPZui1UHcontk0aP6d9dnwk95esBXbR85z7K9VS0jvhddjx8Xvbs+p0B5pTHx/N3Zfr/nVYFqu79LEV0/stG33p1Zt/NWbDWTUHlNyNIuIPhX+05X9XPpWzeXe16pB5zfW6z5NWnye98d9Ao6cthHDZ9cfsu+TdX+/33A3Pnbqu7Maxr/7lrHs2Lf+bysNHrXv/yaGjLy+Y/7eWNv+vSN12+V3cmLMGhHBgzsZ9JG7+YwYkn4M5geRTcs/CQHLI/V/ri35yAgAAwM6W3d2R3V8wJXObnBCenicX5m/dzvxxf8WobvOX2u9j121cedLQN6474G8vOPGNv7/28Kceuv6ysnXL//vYD1avuXzxe08UzP/HffT8v2+qm47/O/7PLuL4f7d2913RfdMPdOzQruiC6tglHP/v1u7+bnP8v1uO/zv+3x3H/3vg+H+3dvenreBb0gxfujonwdff+fPfTbzpg7mN+x180lPPHDrxun+6quXuu0555b+de9601761uWD+P6O0+b/1/7pftC+7/t+4Yuv/zSi2/l+H9f8AAIBdqshCc+l5XsHqfQUZ0qv3FWTocYHAHpcYtP7fdq//t3Dkv1904Q+fb7n2nTvHXb5m07Fnvvr0utXPzFpx3Lnnv9V6112tBfP/jtLm//Hl0C+39d6y/l/j2CJVXREDMywMCAAAwO6o2A4CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPl2HnvbO+5d8/R/aBv1ixc1/f+v/+7/P1q594JvfuGn4L6f86RllazZcM+LMLfMOuvC4+Qum/UvH8tVHnBHClK5yZUnxsueu+OpDrXsd9+wdAzfOvPHW+i3VmXorM7d/nJc7tvphfQhLch6pi4k36zvvbAuccuLtcys6E4/Uh7B/bmDqwql7dCaW14cwODdw3xkHDexMLEyXWPPs0S91Jr6TDhw/5HNbOhOHZwJl6e5e1z/pblm6u5f3D2FATiDb3bP751eVbeO4TKA83caKuqSNGKiLRa+tS9qIgfZYYkrfEIZWhNAnXdU/VydV9UlXdU91UlWfdFUXVYcwMoRQka7quaqkqor0yB+tSqqKgb33u+XtQZ2JpVUhDM0NPPHtpYd1JmamAtnG/1NVCF/qfMmkG/9xZdJ4Zbrx/1oZwhdDCFXpEu9VJCWq0iVeqAhhz5zAto1YEcLcwGdD/PSZmPvgrLnzpo5vb2+buQsTVZm2asKkKe1tTROmt0+sTvWpmLKc9NYFH3/sm96eP6HzdvHKyZWlpCsy5Sq7unxIZd7dlt2997FftbmVbHs+CuqP+atCv9B3zqy2mU3njZ89e+aw5G+p2Q9J/vbJRJNtNay3bKtBuZUMnT1txtBZc+cNmTJt/OS2yW3ntBz6Zy0jhg//2oihnYNqTv7ujJEu/eRH+oWKnEo+ife/hIREb0uU5326Ne/un+MFX/S3dbQyVHd9QBdMK3KzlHWNcmcM+qiPOeKP8zWlxxENK5g4FGQ5pOcsLQWTiW1ZapIsXV/rCiaHuTWVd23SeL88NDX1KbYdGvLv5m7e13dg8z6d2XSlpgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+P/swIEAAAAAAJD/ayNUVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVYQcOBAAAAACA/F8boaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqgo7cCwAAAAAIMzfOoyeDQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4FAAA//8fSxmR") write$nci(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) getpid() fsmount(0xffffffffffffffff, 0x1, 0x89) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000e80)='/sys/power/mem_sleep', 0x101a82, 0x100) copy_file_range(r1, &(0x7f0000000000)=0x7, r1, 0x0, 0x7, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getpeername$unix(r2, 0x0, 0x0) r4 = open(&(0x7f0000000440)='./file1\x00', 0x4242, 0x1df2a23c5997faa6) socket$nl_route(0x10, 0x3, 0x0) write$FUSE_CREATE_OPEN(r4, &(0x7f0000000180)={0xa0, 0x0, 0x0, {{0x0, 0x0, 0x5, 0x85, 0x1, 0x1, {0x3, 0xff, 0x5, 0x8, 0x1ff, 0x0, 0x8, 0x535, 0xfffffffc, 0x1000, 0x100, 0x0, 0x0, 0x5, 0x2000000}}, {0x0, 0x13}}}, 0xa0) sendfile(r4, r4, &(0x7f0000000080), 0x7f03) 20.755590609s ago: executing program 0 (id=864): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) unshare(0x6020400) r2 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsopen(&(0x7f0000000100)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x961a02, 0x0) ioctl$TIOCSSOFTCAR(r4, 0x5453, 0x0) 20.039651247s ago: executing program 0 (id=866): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r0, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x30}, 0x1, 0x0, 0x0, 0x8441}, 0x4000000) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001840)={&(0x7f0000000200)={0x2c, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x4}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffff0001}]}]}, 0x2c}}, 0x20004890) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x1, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e23, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}}}, 0x108) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1c018050}, 0x44014) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffffc6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) 15.408964373s ago: executing program 5 (id=870): prlimit64(0x0, 0xe, &(0x7f0000000180)={0x7, 0x81}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 14.421273078s ago: executing program 5 (id=871): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = dup(0xffffffffffffffff) ioctl$USBDEVFS_CONTROL(r3, 0xc0185500, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket(0x1d, 0x2, 0x6) getsockopt$inet_mreqn(r4, 0x6a, 0x4, 0x0, &(0x7f00000000c0)=0xffffffffffffff16) mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) openat$dir(0xffffffffffffff9c, 0x0, 0x200000, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_group_source_req(r5, 0x29, 0x3c, 0x0, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@ipv6_newnexthop={0x34, 0x68, 0x1, 0x0, 0x0, {0x2}, [@NHA_ENCAP={0xc, 0x8, 0x0, 0x1, @LWTUNNEL_IP6_TC={0x5}}, @NHA_OIF={0x8}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x2}]}, 0x34}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000000)=ANY=[], 0x47) 13.591935379s ago: executing program 0 (id=872): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8000000000100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$unix(0x1, 0x1, 0x0) r4 = socket(0xa, 0x5, 0x0) ioctl$PPPOEIOCDFWD(r4, 0x541b, 0xf0ff1f00000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x20040084) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x40188d0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) mincore(&(0x7f0000f0c000/0x3000)=nil, 0xffffffff00000000, &(0x7f0000afaf0a)=""/246) syz_open_procfs(0xffffffffffffffff, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x46032, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000480)=[0x0], &(0x7f0000000300), 0x0, 0x1, 0x0, 0x0, r5}) 13.309820476s ago: executing program 6 (id=873): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/wakeup_count', 0x1, 0x20) io_setup(0x4, &(0x7f00000001c0)=0x0) io_submit(r4, 0x1, &(0x7f0000000400)=[&(0x7f0000000300)={0x1000000, 0x0, 0x0, 0x1, 0x40, r3, &(0x7f0000000200)='8', 0x1, 0x10000000005971}]) 12.915961216s ago: executing program 5 (id=875): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = socket(0x1d, 0x2, 0x6) setsockopt$RDS_CANCEL_SENT_TO(r1, 0x6a, 0x1, 0x0, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x4e22, 0xb6, @ipv4={'\x00', '\xff\xff', @local}, 0xc4ca}, 0x1c) bpf$MAP_CREATE(0x0, 0x0, 0x50) socket$nl_generic(0x10, 0x3, 0x10) ioctl$OCFS2_IOC_INFO(0xffffffffffffffff, 0x80106f05, &(0x7f000000c140)={&(0x7f000000bf80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=@freeinode={{0x4f32494e, 0x8, 0x10, 0x100000001}, [{0x8000000000000000, 0x4}, {0x9, 0x8000000000000001}, {0xb7, 0x6}, {0xffffffff, 0x3}, {0x2f4, 0x40}, {0x1000, 0x98e}, {0x1, 0x6}, {0x2, 0x2}, {0x7}, {0xc, 0xffffffff80000000}, {0x800000000000, 0x1c}, {0xffffffffffffffff, 0x4}, {0x9, 0x9}, {0xe8b0, 0x3aac00200000000}, {0x69b7, 0x5f}, {0x0, 0x5}, {0xa, 0x2}, {0x7fff}, {0x7, 0x4}, {0x7ff, 0xffffffffffffffff}, {0x1ff, 0x100000001}, {0xa2e, 0xe}, {0x30fe, 0x1}, {0x8, 0x4}, {0xff, 0x2}, {0xfb9, 0x1}, {0x6, 0x8}, {0x1, 0xfffffffffffffffc}, {0x7, 0x5}, {0x2, 0xffffffffffff7fff}, {0x9, 0x8}, {0x59f, 0x5ff5}, {0x7fff, 0x7}, {0x8, 0x3}, {0xc1d, 0x4077d962}, {0x139b, 0x1089}, {0x5, 0x81}, {0x0, 0x3}, {0x8, 0xb}, {0x5, 0x1}, {0x4a82, 0xb}, {0x200, 0x405}, {0x1c508f61, 0x1a5b5e17}, {0xc, 0x7fffffff}, {0xff, 0x7d71}, {0x8000000000000001}, {0x10, 0x6}, {0x7, 0x8}, {0x5, 0x200}, {0xfffffffffffffffb, 0x5}, {0x7f, 0x6}, {0x80000001, 0x1}, {0x70, 0x9}, {0x1, 0x1}, {0x3, 0x2}, {0x81, 0x5}, {0x5, 0x9}, {0x8, 0x101}, {0x3, 0x7}, {0x9, 0x3}, {0x180, 0x59f}, {0xffff, 0x2}, {0x5}, {0x7, 0x80000000}, {0x10, 0x7fffffff}, {0x9, 0x9}, {0x1, 0x6}, {0x76, 0xfffffffffffffffc}, {0x40, 0x6}, {0x100000000, 0x200}, {0x4, 0x8}, {0x0, 0xf}, {0xd9, 0x63da50e0}, {0x2, 0xa987}, {0xf, 0xf800000000000000}, {0x8, 0xf405}, {0x2, 0x4}, {0x0, 0x80000001}, {0x2, 0x9}, {0x0, 0x2}, {0x5, 0x4}, {0x5, 0x7}, {0x2, 0x80000000}, {0x400000000000, 0xdb6}, {0x34c0}, {0x94, 0xfffffffffffffffa}, {0x0, 0xead5}, {0x7ff, 0x8001}, {0x5, 0x2}, {0xffffffffffff7fff}, {0xa, 0x1}, {0x0, 0x99}, {0xb9, 0x8001}, {0x7, 0x6de}, {0x2}, {0xfffffffffffffff7, 0x99b1}, {0x6, 0x4}, {0xda, 0x5}, {0x2, 0x8}, {0xd8, 0x4}, {0x8, 0xb6ea}, {0x4, 0xc27}, {0x2, 0x8000000000000000}, {0x3, 0x1}, {0x4, 0x6}, {0x2125, 0x10001}, {0x0, 0x7}, {0x0, 0x80}, {0x2, 0xfffffc0000000000}, {0x4e9a, 0x7}, {0x10001, 0x8}, {0x7fff, 0x200}, {0x5, 0x3}, {0x7, 0x3}, {0x100, 0x3}, {0x8, 0x5}, {0x3, 0x8000000000000000}, {0x4, 0x200}, {0x5, 0x5}, {0x2, 0x6}, {0x9, 0x9}, {0xa, 0x5}, {0x7, 0xd97}, {0xff, 0x5173}, {0x2}, {0x1, 0x81}, {0x6, 0x1ff}, {0x401, 0x6}, {0x9, 0x140000000000}, {0x26, 0x7}, {0x4, 0x6}, {0x0, 0xa}, {0x3}, {0xb, 0x5}, {0x9, 0x7}, {0x7, 0x1}, {0x1, 0x1}, {0x1e12, 0x5}, {0x5, 0x4}, {0x3, 0x6}, {0x5, 0x3}, {0x4003, 0xffffffff}, {0x1, 0x5}, {0x100000000, 0x3}, {0x90a6, 0x9}, {0x9, 0x107}, {0xf, 0x80000000}, {0x9, 0x101}, {0x9, 0x7fff}, {0x0, 0x1}, {0x6, 0x40}, {0xffffffffffffffff, 0x10001}, {0x7, 0x6}, {0x200}, {0x3, 0xffff}, {0x5, 0x793}, {0x6, 0x100000000}, {0x3, 0xda}, {0xb0, 0xffffffff}, {0x6, 0x2}, {0xd, 0x2}, {0x4, 0x1}, {0x6, 0xa}, {0x5d, 0x8001}, {0x38, 0x5f0}, {0x4, 0x7}, {0xffffffff, 0x5a2}, {0x1, 0x2}, {0x8, 0x1}, {0xe9, 0xfffffffffffff7b6}, {0x8e, 0x7fff}, {0x80000000, 0x8000000000000001}, {0xffffffff, 0xfda9}, {0xe5, 0xffffffffffffff41}, {0x24, 0x8}, {0x5, 0x4}, {0x187, 0xa2}, {0xd6, 0xffffffffffffffa3}, {0x1, 0xa807}, {0x3723, 0x6}, {0xfffffffffffff801, 0xa9}, {}, {0x2, 0xfffffffffffffffa}, {0x10001, 0x8000000000}, {0xfffffffffffff000, 0x3}, {0x3, 0xf9e}, {0x2321, 0x8}, {0x7ff}, {0x10001, 0xffffffff}, {0x5, 0x3}, {0x7ff, 0x9}, {0x2, 0x3e}, {0x3bd14045, 0x8001}, {0xff, 0x9}, {0x8, 0xffff}, {0x575, 0x2}, {0x3, 0x2}, {0x1, 0xe}, {0x5, 0xe}, {0x7, 0x9c}, {0x3ff, 0x8001}, {0x8, 0xffffffffffff0001}, {0x0, 0x7}, {0x3, 0x1}, {0xfffffffffffffffb, 0x4}, {0x7, 0x9}, {0x7, 0x8001}, {0x3ff, 0x7}, {0xf, 0xe6a}, {0x8, 0x1}, {0x10000, 0x5}, {0x7, 0x6}, {0xfffffffffffffffe, 0xb5}, {0x7, 0xdd1}, {0xffff, 0x66e}, {0x0, 0x4}, {0xd26f, 0x30580c97}, {0x8001, 0xf6}, {0x6, 0x800}, {0xcaa, 0x5}, {0x9, 0xb}, {0x0, 0xb12}, {0x7, 0x8}, {0xfaa, 0x6}, {0x8, 0x5}, {0xfffffffffffff801, 0x951}, {0x7, 0x101}, {0x7, 0x910000}, {0x2, 0x5b}, {0xa8, 0x8}, {0x619, 0x1}, {0x8, 0xfffffffffffff775}, {0x3, 0x3}, {0x1ff, 0x8}, {0x1901, 0x80000000}, {0xfff, 0x1}, {0x2, 0x868}, {0x2ef, 0x2}, {0x10000, 0x8000000000000000}, {0x3, 0xfffffffffffffffc}, {0x1, 0x1}, {0x7, 0x7}, {0x57, 0x7}, {0x401, 0x6}, {0x5, 0x73}, {0x80000001, 0xc91}, {0x800, 0x7ff}, {0x777b, 0x9}, {0xb3, 0x8}, {0x4, 0x1}, {0x7, 0x6}, {0xd5}, {0x3, 0x401}, {0x1, 0x2}, {0x2, 0xfffffffffffff27a}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x32}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000380)={0x8, 0x4d, 0x2ba8}) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) 12.419351528s ago: executing program 0 (id=876): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) unshare(0x6020400) r2 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsopen(&(0x7f0000000100)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x961a02, 0x0) ioctl$TIOCSSOFTCAR(r4, 0x5453, 0x0) 11.774607895s ago: executing program 7 (id=877): shmget(0x1, 0x1000, 0x2, &(0x7f00003ae000/0x1000)=nil) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000d88000/0x1000)=nil, &(0x7f00007f2000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff6000/0xa000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00008f7000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045) r2 = io_uring_setup(0x1193, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xcb}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1) io_uring_enter(r2, 0x3449, 0xcf74, 0x79, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 11.511702791s ago: executing program 7 (id=878): ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000440)) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000001c00)=ANY=[@ANYBLOB="4bb2", @ANYRES16, @ANYBLOB="010028bd7000010000040f000000"], 0x14}}, 0x8080) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0xe}, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x40800) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x48400, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setpriority(0x1, 0xffffffffffffffff, 0x3) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) kcmp(0x0, 0x0, 0x0, r0, 0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0xa00008, &(0x7f0000000080), 0x1, 0x7a2, &(0x7f00000007c0)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141442, 0x40) fallocate(r2, 0x0, 0xfff, 0x9) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x1d8) pwrite64(r3, &(0x7f0000000140)='2', 0xfdef, 0x1008) r4 = getpid() sched_setscheduler(r4, 0x1, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0xf, 0x0, 0x0, 0xb, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) syz_usb_connect(0x0, 0x3f, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000e5876e4040200516940a0000000109022d00010000000009040000035883b200090589000000000000090585"], 0x0) 9.370316144s ago: executing program 5 (id=880): sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x8410) socket$tipc(0x1e, 0x2, 0x0) ioctl$NILFS_IOCTL_CHANGE_CPMODE(0xffffffffffffffff, 0x40106e80, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x200000087}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x404c000}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_mount_image$btrfs(&(0x7f0000000140), &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f0000000240)={[{@noenospc_debug}, {@compress}, {@discard}]}, 0xfc, 0x559e, &(0x7f000000ac40)="$eJzs3X9sVeX9B/BzWwoN+C39jhUYfxAgBoMkyJYtjqB4MQa24eKlgsKcCEQlBivYRDcYqUWSZcaghU4EF5GQaDJjscM/FMywy7CMZfzY5hZjs4JSaZZsAzVrHDG69N77XO49l9tembNOXy/SnvPcz3me+9yT88d9X/qcGwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEAURUcSc9+d0f3i0ZE1X77/Hz+e+OjGn4zfvX/roVvu23T/gjMjbto5a1nf+mlN8zdsbDjS/PS+ObdGUSLdL5Htf9u136q/88bbvlsdBly+MLOtrS31lJmuJzON4QUP9vcr/FkRRVFVbIDK7PbV7E5FwQC53cbiAQf0Tuui6O7J8ya1dT01bklyYU/xS6df9VBPYKhkr6ue89dSMv27InZErp136SUKLtFM//gF96m8CADgY5mZSm9yb0ezb3Fz7eZ4PdZOxtotsXZ4h9CS37gYmXGHl5rnpHh9iOaZzESFESXnGatnz3+unYr3j7VjUeNjzLPw0GykqS41z7Wx+lDNEwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOCzZOzxo2tWtD2y575fdtQceff9OVc+8KWOw22LT4y8eunKHWum/HTWsr7105rmb9jYcKT56X1zbo2i2nS/RKZ74kTL5b9NjZ3fvXfcG427n6vpq8yOG7bD8g6OXg87s0ZH0cq8Sk8Y9q81UZQqLKSb0Y7iwl3pnW+HAgAAAJ8nX0n/rsi1M3GwqqCdSKfJRPpfkAmL77Quiu6ePG9SW9dT45YkF/Zc/HipEuMlLzherl17/ieRF4xD/I2Pd74eDm0sGmdg8RHjef7SMWPefmty/eSvT5v7xA3PjOru+r8nZ2xJ/bGu5oUrru+tf/a6ovxfO3D+D2dO/gcAAOA/If/HxxnYYPn/jqVTt7z+i2Grft3a8MTB+h1/bv3OMzsXneq54Ud9L09N3v7o1UX5f1LBUxbl/zDjkP8roovL/wAAAPBZ9t/O/8micQY2WP5vONM3+wcHX6vr+PucxXt+9dAVi8+e/tv8U7t3DV9zR8v6uoeuLMr/M8vL/8Pypx0e/F2Y8OrRUTSz/JMKAAAAFAj/737+o4WQ1zOfHMTz+rX/vKp5380ffPMbD97zpzff/s2xA7MnrdteN/PgyzfVf1j5ve3dRfk/WV7+r/p0Xi4AAABQhuePrpw773jPucfPvtB18vDu3pMznjyzrqnvdOslLatXbTr2WlH+T5WX/0cMzcsBAAAALuDeO59bsfnVl/oe2H/X2Ck9FVc1XpK4ZduOqU0TPuq8tPfy7VuL8v/y8vL/yOw2u/Ih06kz/BVC6+goqu7fWZspHIparskVAAAAgE9IyOlbP1ixbOzOsb3jj59+rObQG4dn/2Vt55yN13RXdW/uXNZ4WdH9AkJiL3X//3Cng7D+v+D+f0Xr//MKmbv+zXZjAAAAAL6Iitfzh9vjZ765oNT375e7/n9J3cQTiba33lv11XMHzo1ZsP/7129aV9/be8+El37/wz9M/6i6KP83l5f/K/O3n+T3/wEAAMBF+F/7/r+lReMMbLD7/zdV9DWsWrd3+uota7csTCw7UH3qwdV731+w5l9Tb36+qea6A0X5v6W8/B+2o/JfXkc4P5tGR9H4/p3s3QR/Hqa7OlZor8orZE58rMeNoUe20D4ir5C2Ntbja6OjaHL/TnOs8P+h0BIrnK3JFnbFCsdCIXs95Ap7YoWOcKVtq8lON154MRSyCyzawwqKUbklEbEe75Xq0V+4YI+u3JMDAAB8oYTwnM2yVYXNKB5l2xODHTBysAMqBjugcrADhsUOiB9Y6vFoeWEhPH575yMbNjVMSb7y8NzHfvbms40T9j1+WV3v5g9f2XbvxJ3TW6YW5f9d5eX/cCqGZzal1v9HYf1/9nsNc+v/l4dCbazQHgqp+B0DUuE5MmH34fActalsj7PjcwUAAAD4XAufC1QO8TwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/s3evcdJVd0JAj/d9INumqaNE9GMk3TUgGakaWwNw+AoaoxGRZpZddxkNBBoEGmE8FgFURtQZxziZ3ztrJnoCAoiu+qHGFeDwUhcxIw6iWLiA/Cxjq7r+h6VGM2E/XTfOkXVrS67EFDa+X7/6DpVv/O89eg69946FwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/xjuPfjlk4YunP0PHzace8nqqqmL/kfH6Mv+cNW3vvjUPy5b9G9h/i9GnLll3kEXHjd/wbR/6Vi++ogzQmjtKleWFC977oqvPtS613HP3jFw48wbb63fUpWpNxMP/Tr/lGfuXBxbfbF/CHeXhVCRDgypSwKVmft1sb5960LYI2wLZEu01SYl0g2HB2pCWBK2BbJVra4JoS4ncMqG+++7vDNxTU0IXwkhVKfbeKY6aaMmHRhUlQRq04HpFUngt1sT2cBPypMA7LD4Zsi+6Fe15mdo6L5ckddf5U7r2KcrPbw+MdFQPN/rR+3iTuWoSj/QukNPW0F17BIFb4+13m294N1WsJ2v8LTlfpHKfEPZui1UHcontk0aP6d9dnykPDQ19SlW0y56np9+e/6E7Un3mtdh7EDDTnkdXvrYiun9lo2+9OrNvxqz4ayaA3a0m0/lbNLc9K5WHTKvuV7zPEajfJ70grdfwbekRl+6Qghbzz17xtfnTDz7iD63PLnu1QcfrNty9pwFvzhz4nmLLj55w7/Pf6lg/t/w0fP/+HKOt+V5uWOrH9Ync/P4SF1MvFmfzM0BAACg1+gNe01Xnv/6X73+/bWtMxed/u23Dj73w71afz3i/gFVB7yxrqn1/I2ff6Vg/t9Y2vH/eMi/Lne0a0MY1ZVYNCCEvbseTwIrY3e+OyCEL3elWvMDR6UCa0PYpytxULaqVIm+sURjKvByfSYwKhVYHwOtqcDyGLgiFbg4BlalAhNiYG0qcHQMhCn54/hqfWYcJQdqYmBcshFXxbMQ3qmPraW21aZsVQAAADtJZnZYmX8351yHHc0Qp5eranrKEM/ALpqhOlVDegabnVYVraGipxrKe6ohO+6Ojx5+Qc1lPdVccBpGWX6GG9f85X2LXjzsC2P3mvj5xUMvmPKz8eGst++uerx5yYtv7XvEzesK5v/NHz3/r+6mI2UFx/9DGNv1N+Yuz0Tas/FxrXkZAAAAgB1w0R//xR61Lw85oGHT+2X3zl/7xKMrfrl5j1NOf3/c8a//8PCaxnsL5v+jSjv/P+4T6ZOTOTwSd0NMHRBCc34gqXZkYSA56t0vEwAAAIDeIHs8PnssfErmNjlFOz2fLszfup3544H/Ud3m//09/7P2jq3/+mLZBd89d0TNgKX/9GrHhBNOPvqW47/1zj4VB/yyvGD+31ra+f+1+bdJJ9bHXlw9IIS+OYEHYy87A10aY+D5I/MDmfGvjxtgcawqc2JCtqrFscS4GGhOBZYUK/FotsTe+YHMk5VtfFF2HFMyJXICAAAA8ImLuwPicfl4/n/LGSNO++vvzfrbha88eN7qCy75q+Ed80eedP/THzbMvXJp2PTmEQXz/3Hbd/5/1zy44PT+9n4hDK0IoU/6hwGP1CYLA8ZAXVkmcW9tUlefdFULa0MY2TmwdFUvZNb/r0ivMfh4TVJVDOy93y1vD+pMLKsJYWhu4IlvLz2sMzEnFcg2flpNCF/qHG268bv6Jo1Xphu/tm8IX8wJZKua0DeEzsaq0lX9r+rMdQzSVa2qDmHPnEC2quHVIcwNAPRW8X/pxNwHZ82dN3V8e3vbzF2YiDvxa8KkKe1tTROmt0+sLtKniak+561jtKBwTKVe+mZTZo2ixSsnV5aSzv5QsDm3rcyO/IIzBzP345ehyq5xHlKZd7clPeQD9y9sIuR8lSo25PJdPOTa3Eq2PYkF9cf8VaFf6DtnVtvMpvPGz549c1jyt9TshyR/43GmZFsNS2+r2u76VsLLo+hyWSkfd1sNyq1k6OxpM4bOmjtvyJRp4ye3TW47p+XQP2sZMXz410YM7RxUc/K3h5EO6q7m1Ei3Li1xWDtxpF+oyKnkk/jQkJCQ6G2J/f7L5odH77n+nOt/9tqPz+/3zdPu3fvImT889KqpD1Xve/ji24ccWDD/n/HR8//4qRM/+DPrMxQ7/t8QD/Mnj287zD8uBpaUevy/odjR/OyJAY2pQEcMdDjMDwAAwGdD3B0Z92bGndKbb1m/buOSlrk/aHin5dY17Utvuum+U39y58ATvjQ47LXhuhM+VzD/7yjt9/87af3/7NL1JxRb5v+gWKK52Pr/6WX+s+v/dxRb/z+9zH92/f8ln8L6/3OygdQmecf6/wAAwGfBJ7f+f4/L+6cvEFCQocfl/dMXCCjI0OMy/qVeIGC71/9f8+Bff6Wq35g7/qTlN/WXvPZ39xzWeuS6zTP/5Etb10+877qxt6wpmP9fUdr838L9AAAAsPv4z5ddU3H02Xff0bJu6sZxbw5+98m3lgzq80HF0Q+3j3xh4Bu3nlcw/19S2vz/k1//LxQ7/7+xWKC12MKA1v8DAACglyq2/t89Q1sa/zCm/x+eHvab5Q/ePPqnj/z898v3+/mJPyvfZ8Gxz8+8bFLB/H9VafP/eNpFeV7u2JsP65M17UJ6Tbs367M/GQAAAIDeoTw0NVWWmDdvYdSjPn6bT2eWAv2odK7vvXLt2ZtfmH7c46ev+7uaEwbvOWHaBasa/2b4gXd+ftQley7ddGrB/H9tafP/vN9lXPrYiun9lo2+9MOrN/9qzIazag7YdvwfAAAA2HVK3S8BAAAAAAAAAAAAAAB8+s7tWHzhI8uOfe+bt//F/kcseXXwbXcd+Lsh/V664qoHJq1648zJXy/4/X8Y21Wu2O//43X/4u8L/igvd2y15/X/MvdPOfH2uV1LFj5SH8L+uYGpC6fuETLX5h+cG7jvjIMGdiYWpkusefbolzoT30kHjh/yuS2dicNTgXFxkcR90oF4VcUt/VOBuLzi4+lA3B6r0oGqTOCy/sk4ytLb6pW6ZFuVpbfVxroQBuQEstvq7rqkjbL0AK9JBbID/F46EAd4ciZQnu7V7f2SXsVAXSx6Q7+kVwAA7Lbit8DKMGlKe1tz/Aofb79QkX8b5S1ZtqCw2rISm9+UWZps8crJlaWk+6S/i2671nhlqO4cwrCCr6u5Wcq6Rrlzaulh0/1RkSH3tNpbeZFyadu76aqKj6gmGVHThOntEyt7HHhLz1kOqegxy7CCyU5ulvKuTVpCLSX0pYQRlbhtSuhyvF8empr6pHL9eQw2hDw9vSJK/b1+7jp/xV4FuXluO/TKt758zE+f++CfP/9E/2+cVnP7rO+/e+KvX7//wEOOuG5C05otBfP/htLm/9W549qSuRhAR7yy3sgBIYwrcUQAAADw2XfbRbfecfr09a9MWlvx5GOPTS0fc3rl1vl3zp93ycZ7Fx9/2cErdjR+2Fm//f5vBu//b89e9dJPR+7zwA03/58nD3v8z3//8I8eeqduZZ+x7xXM/xtLm//HPViZQ8HJ3o618fr/iwaE0HVp/YYksDIO97sDQvhyV6o1lkguqH9CLNGcBFbGHSYHxRLjWvOr6hsDq1KBl+szgbWpwPoYyOyluCVkduVcWR/CYV2psfklZsQSDanAmBhoTAWaYqA5FegfA6NSgdf6ZwKtqcDDMRCm5G+rH/fPbCsAAIDtkZlnVebfDel53qqKnjKU9ZShtqcM5T1lqO4pQ7FRxPt3xAyVqZNXynIyVaZrrUnVUpAhXgx/u/tVkCE8mp8zXbCg6Xj+QfZ8g7L8DFf+4NlT1w+e/tDqzcd8beBt/zhkz4Obp9e9t+CGp3475pzrnv/TQQXz/+bS5v+1+bdJ6+vj/H/b9f+SwIOxe1fHU8cbY+D5I/MDmR0D6+Nkd3G2qtZMicykfXEsMSoGGlOBGTEwKhUYNzYTWDIwP5CZaWcbX5RtfEqmRE4AAAAAPnFxB0HcTRPn/zce9YOr3x8wccuyeTPvH9vyxMmjv3H1XT+6d/9ld767YvCAce99p2D+P6q0+X9sr19uYxfH3rzYP4S7y7b1JhsYUpcE4n6Muvjz+H3rQtgjZwdHtkRbbVKiKtVweKAm+YV6Vbqq1TXJGgPx/ikb7r/v8s7ENTUhfCVn70u2jWeqkzZq0oFBVUmgNh2YXpEE4p6fbOAn5UkAdlh2r2B8QWVOdclq6L5ckdffZ+WaoOnhFewD7SZfd7+52lWq0w9k9qlmbd/TVlAdu0TB22Otd1tvfLc1eLflfpHKfEPZui1UHcontk0aP6d9dnwk95esBXbR85z7K9VS0jvhddjx8Xvbs+p0B5pTHx/N3Zfr/nVYFqu79LEV0/stG33p1Zt/NWbDWTUHlNyNIuIPhX+05X9XPpWzeXe16pB5zfW6z5NWnye98d9Ao6cthHDZ9cfsu+TdX+/33A3Pnbqu7Maxr/7lrHs2Lf+bysNHrXv/yaGjLy+Y/7eWNv+vSN12+V3cmLMGhHBgzsZ9JG7+YwYkn4M5geRTcs/CQHLI/V/ri35yAgAAwM6W3d2R3V8wJXObnBCenicX5m/dzvxxf8WobvOX2u9j121cedLQN6474G8vOPGNv7/28Kceuv6ysnXL//vYD1avuXzxe08UzP/HffT8v2+qm47/O/7PLuL4f7d2913RfdMPdOzQruiC6tglHP/v1u7+bnP8v1uO/zv+3x3H/3vg+H+3dvenreBb0gxfujonwdff+fPfTbzpg7mN+x180lPPHDrxun+6quXuu0555b+de9601761uWD+P6O0+b/1/7pftC+7/t+4Yuv/zSi2/l+H9f8AAIBdqshCc+l5XsHqfQUZ0qv3FWTocYHAHpcYtP7fdq//t3Dkv1904Q+fb7n2nTvHXb5m07Fnvvr0utXPzFpx3Lnnv9V6112tBfP/jtLm//Hl0C+39d6y/l/j2CJVXREDMywMCAAAwO6o2A4CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPl2HnvbO+5d8/R/aBv1ixc1/f+v/+7/P1q594JvfuGn4L6f86RllazZcM+LMLfMOuvC4+Qum/UvH8tVHnBHClK5yZUnxsueu+OpDrXsd9+wdAzfOvPHW+i3VmXorM7d/nJc7tvphfQhLch6pi4k36zvvbAuccuLtcys6E4/Uh7B/bmDqwql7dCaW14cwODdw3xkHDexMLEyXWPPs0S91Jr6TDhw/5HNbOhOHZwJl6e5e1z/pblm6u5f3D2FATiDb3bP751eVbeO4TKA83caKuqSNGKiLRa+tS9qIgfZYYkrfEIZWhNAnXdU/VydV9UlXdU91UlWfdFUXVYcwMoRQka7quaqkqor0yB+tSqqKgb33u+XtQZ2JpVUhDM0NPPHtpYd1JmamAtnG/1NVCF/qfMmkG/9xZdJ4Zbrx/1oZwhdDCFXpEu9VJCWq0iVeqAhhz5zAto1YEcLcwGdD/PSZmPvgrLnzpo5vb2+buQsTVZm2asKkKe1tTROmt0+sTvWpmLKc9NYFH3/sm96eP6HzdvHKyZWlpCsy5Sq7unxIZd7dlt2997FftbmVbHs+CuqP+atCv9B3zqy2mU3njZ89e+aw5G+p2Q9J/vbJRJNtNay3bKtBuZUMnT1txtBZc+cNmTJt/OS2yW3ntBz6Zy0jhg//2oihnYNqTv7ujJEu/eRH+oWKnEo+ife/hIREb0uU5326Ne/un+MFX/S3dbQyVHd9QBdMK3KzlHWNcmcM+qiPOeKP8zWlxxENK5g4FGQ5pOcsLQWTiW1ZapIsXV/rCiaHuTWVd23SeL88NDX1KbYdGvLv5m7e13dg8z6d2XSlpgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+P/swIEAAAAAAJD/ayNUVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVYQcOBAAAAACA/F8boaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqgo7cCwAAAAAIMzfOoyeDQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4FAAA//8fSxmR") write$nci(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) getpid() fsmount(0xffffffffffffffff, 0x1, 0x89) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000e80)='/sys/power/mem_sleep', 0x101a82, 0x100) copy_file_range(r1, &(0x7f0000000000)=0x7, r1, 0x0, 0x7, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getpeername$unix(r2, 0x0, 0x0) r4 = open(&(0x7f0000000440)='./file1\x00', 0x4242, 0x1df2a23c5997faa6) socket$nl_route(0x10, 0x3, 0x0) write$FUSE_CREATE_OPEN(r4, &(0x7f0000000180)={0xa0, 0x0, 0x0, {{0x0, 0x0, 0x5, 0x85, 0x1, 0x1, {0x3, 0xff, 0x5, 0x8, 0x1ff, 0x0, 0x8, 0x535, 0xfffffffc, 0x1000, 0x100, 0x0, 0x0, 0x5, 0x2000000}}, {0x0, 0x13}}}, 0xa0) sendfile(r4, r4, &(0x7f0000000080), 0x7f03) 7.56231511s ago: executing program 0 (id=881): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120141014813442024040075ee69010203010902240001000010000904b8070259d1ca00090506"], 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0x4fa, &(0x7f0000000540)=ANY=[@ANYBLOB="120100022502aa10120a105d"], 0x0) 6.955950385s ago: executing program 7 (id=883): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000001200012a000000000000000080000000"], 0x26}}, 0x0) socket$igmp6(0xa, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x2, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x2001, 0x0) ioctl$FBIOBLANK(r4, 0x4611, 0x2) getrlimit(0x0, &(0x7f0000000180)) shutdown(0xffffffffffffffff, 0x1) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x200000000003, &(0x7f0000000040), 0x111, 0x9}}, 0x4c) 6.850002968s ago: executing program 1 (id=884): r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/netlink\x00') preadv(r0, &(0x7f0000000a80)=[{&(0x7f0000000580)=""/200, 0xc8}], 0x1, 0x111, 0x0) 6.688875972s ago: executing program 1 (id=885): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = dup(0xffffffffffffffff) ioctl$USBDEVFS_CONTROL(r3, 0xc0185500, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket(0x1d, 0x2, 0x6) getsockopt$inet_mreqn(r4, 0x6a, 0x4, 0x0, &(0x7f00000000c0)=0xffffffffffffff16) mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) openat$dir(0xffffffffffffff9c, 0x0, 0x200000, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_group_source_req(r5, 0x29, 0x3c, 0x0, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000000)=ANY=[], 0x47) 5.5739316s ago: executing program 6 (id=886): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8000000000100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$unix(0x1, 0x1, 0x0) r3 = socket(0xa, 0x5, 0x0) ioctl$PPPOEIOCDFWD(r3, 0x541b, 0xf0ff1f00000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x20040084) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x40188d0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) mincore(&(0x7f0000f0c000/0x3000)=nil, 0xffffffff00000000, &(0x7f0000afaf0a)=""/246) syz_open_procfs(0xffffffffffffffff, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x46032, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000480)=[0x0], &(0x7f0000000300), 0x0, 0x1, 0x0, 0x0, r4}) 4.863889848s ago: executing program 1 (id=887): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1, 0x0) write(r0, &(0x7f0000000080), 0x0) close(r0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) connect$unix(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./my_configfs/usb_gadget/g1/functions/obex.usb1\x00', 0x1ff) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000019140)='net/fib_trie\x00') pread64(r3, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) 3.796062924s ago: executing program 0 (id=888): shmget(0x1, 0x1000, 0x2, &(0x7f00003ae000/0x1000)=nil) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000d88000/0x1000)=nil, &(0x7f00007f2000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff6000/0xa000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00008f7000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045) r2 = io_uring_setup(0x1193, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xcb}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1) io_uring_enter(r2, 0x3449, 0xcf74, 0x79, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 3.558283691s ago: executing program 5 (id=889): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000001200012a000000000000000080000000"], 0x26}}, 0x0) socket$igmp6(0xa, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x2, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback, 0x3}, 0x31) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x2001, 0x0) ioctl$FBIOBLANK(r4, 0x4611, 0x2) getrlimit(0x0, &(0x7f0000000180)) shutdown(0xffffffffffffffff, 0x1) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x200000000003, &(0x7f0000000040), 0x111, 0x9}}, 0x4c) 3.19013756s ago: executing program 7 (id=890): mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x0, 0x2172, 0xffffffffffffffff, 0x0) r0 = openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000140)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f00000013c0)={@hyper}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r0, 0x7ab, &(0x7f0000000280)={&(0x7f0000000780)={{@my=0x0}, {@my=0x0, 0x800000}, 0x10fe8, "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"}, 0x11000}) 3.17561428s ago: executing program 1 (id=891): mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x1858}, 0x1, 0x0, 0x0, 0x200408d1}, 0x4008094) 3.071970093s ago: executing program 7 (id=892): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) unshare(0x6020400) r2 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsopen(&(0x7f0000000100)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x961a02, 0x0) ioctl$TIOCSSOFTCAR(r4, 0x5453, 0x0) 2.996724075s ago: executing program 6 (id=893): ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000440)) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000001c00)=ANY=[@ANYBLOB="4bb2", @ANYRES16, @ANYBLOB="010028bd7000010000040f000000"], 0x14}}, 0x8080) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0xe}, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x40800) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x48400, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setpriority(0x1, 0xffffffffffffffff, 0x3) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) kcmp(0x0, 0x0, 0x0, r0, 0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0xa00008, &(0x7f0000000080), 0x1, 0x7a2, &(0x7f00000007c0)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141442, 0x40) fallocate(r2, 0x0, 0xfff, 0x9) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x1d8) pwrite64(r3, &(0x7f0000000140)='2', 0xfdef, 0x1008) r4 = getpid() sched_setscheduler(r4, 0x1, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0xf, 0x0, 0x0, 0xb, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) syz_usb_connect(0x0, 0x3f, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000e5876e4040200516940a0000000109022d00010000000009040000035883b200090589000000000000090585"], 0x0) 2.958078176s ago: executing program 1 (id=894): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r0, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x30}, 0x1, 0x0, 0x0, 0x8441}, 0x4000000) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001840)={&(0x7f0000000200)={0x2c, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x4}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffff0001}]}]}, 0x2c}}, 0x20004890) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x1, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e23, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}}}, 0x108) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1c018050}, 0x44014) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffffc6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) 2.350643491s ago: executing program 7 (id=895): r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/netlink\x00') preadv(r0, &(0x7f0000000a80)=[{&(0x7f0000000580)=""/200, 0xc8}], 0x1, 0x111, 0x0) 0s ago: executing program 1 (id=896): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0xff}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/wakeup_count', 0x1, 0x20) io_setup(0x4, &(0x7f00000001c0)=0x0) io_submit(r4, 0x1, &(0x7f0000000400)=[&(0x7f0000000300)={0x1000000, 0x0, 0x0, 0x1, 0x40, r3, &(0x7f0000000200)='8', 0x1, 0x10000000005971}]) kernel console output (not intermixed with test programs): 00000000002,,errors=continue. Quota mode: none. [ 148.327552][ T5158] ext4 filesystem being mounted at /6/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 148.426275][ T5172] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 150.388618][ T5158] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 152.337478][ T4590] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 152.584670][ T4590] usb 5-1: Using ep0 maxpacket: 32 [ 152.665039][ T5223] device syzkaller0 entered promiscuous mode [ 152.708398][ T4590] usb 5-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 152.734885][ T4590] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.786084][ T4590] usb 5-1: config 0 descriptor?? [ 153.061480][ T4590] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 154.928332][ T4590] usb 5-1: USB disconnect, device number 2 [ 155.496325][ T5265] loop0: detected capacity change from 0 to 128 [ 156.225898][ T5265] EXT4-fs (loop0): Test dummy encryption mode enabled [ 156.274384][ T5265] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption=v1,max_dir_size_kb=0x0000000000000002,,errors=continue. Quota mode: none. [ 156.381263][ T5265] ext4 filesystem being mounted at /38/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 156.462815][ T5279] device syzkaller0 entered promiscuous mode [ 156.541469][ T5275] loop4: detected capacity change from 0 to 4096 [ 156.795111][ T5275] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 157.215590][ T5275] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 158.977547][ T5301] syz.2.181 (5301) used greatest stack depth: 17984 bytes left [ 159.121550][ T5305] kvm [5302]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0xc2 data 0x0 [ 160.783188][ T5339] device syzkaller0 entered promiscuous mode [ 161.697307][ T4845] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 162.552376][ T5360] loop8: detected capacity change from 0 to 7 [ 162.622050][ T4712] loop8: [CUMANA/ADFS] p1 [Linux] p2 [ADFS] p1 [Linux] p2 [ 162.691951][ T4712] loop8: partition table partially beyond EOD, truncated [ 162.754574][ T4712] loop8: p1 size 1905483274 extends beyond EOD, truncated [ 163.673236][ T4845] usb 1-1: Using ep0 maxpacket: 32 [ 164.636402][ T4712] loop8: p2 start 121280928 is beyond EOD, truncated [ 164.663209][ T5360] loop8: [CUMANA/ADFS] p1 [Linux] p2 [ADFS] p1 [Linux] p2 [ 164.670631][ T5360] loop8: partition table partially beyond EOD, truncated [ 165.566496][ T5360] loop8: p1 size 1905483274 extends beyond EOD, truncated [ 165.586310][ T5360] loop8: p2 start 121280928 is beyond EOD, truncated [ 165.710978][ T4845] usb 1-1: device descriptor read/all, error -71 [ 165.869792][ T5382] loop4: detected capacity change from 0 to 128 [ 165.917031][ T4712] udevd[4712]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 166.020757][ T5382] EXT4-fs (loop4): Test dummy encryption mode enabled [ 166.696743][ T5377] kvm [5376]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0xc2 data 0x0 [ 167.846830][ T5404] device syzkaller0 entered promiscuous mode [ 167.895412][ T5382] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption=v1,max_dir_size_kb=0x0000000000000002,,errors=continue. Quota mode: none. [ 167.992862][ T5382] ext4 filesystem being mounted at /49/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 170.274846][ T4712] udevd[4712]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 170.422485][ T5429] loop8: detected capacity change from 0 to 7 [ 170.440820][ T5429] loop8: [CUMANA/ADFS] p1 [Linux] p2 [ADFS] p1 [Linux] p2 [ 170.452399][ T5429] loop8: partition table partially beyond EOD, truncated [ 170.591177][ T5429] loop8: p1 size 1905483274 extends beyond EOD, truncated [ 170.828876][ T5429] loop8: p2 start 121280928 is beyond EOD, truncated [ 171.122937][ T4712] udevd[4712]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 173.131165][ T5451] loop0: detected capacity change from 0 to 32768 [ 173.751568][ T5451] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.218 (5451) [ 175.880704][ T5451] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 175.889792][ T5451] BTRFS info (device loop0): use zlib compression, level 3 [ 175.897287][ T5451] BTRFS info (device loop0): turning on sync discard [ 175.904105][ T5451] BTRFS info (device loop0): using free space tree [ 175.910756][ T5451] BTRFS info (device loop0): has skinny extents [ 176.566797][ T5451] BTRFS error (device loop0): open_ctree failed: -12 [ 176.620258][ T5504] device syzkaller0 entered promiscuous mode [ 176.867282][ T4964] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 179.738249][ T5545] loop5: detected capacity change from 0 to 32768 [ 179.745109][ T4964] usb 6-1: string descriptor 0 read error: -71 [ 179.752858][ T4964] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 179.762107][ T4964] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.771933][ T4964] usb 6-1: config 0 descriptor?? [ 179.813857][ T5549] device syzkaller0 entered promiscuous mode [ 179.832404][ T4964] usb 6-1: can't set config #0, error -71 [ 179.840459][ T4964] usb 6-1: USB disconnect, device number 2 [ 179.867735][ T5545] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 scanned by syz.5.236 (5545) [ 180.734265][ T5517] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 181.618000][ T5545] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 181.626756][ T5545] BTRFS info (device loop5): use zlib compression, level 3 [ 181.634908][ T5545] BTRFS info (device loop5): turning on sync discard [ 181.641671][ T5545] BTRFS info (device loop5): using free space tree [ 181.648249][ T5545] BTRFS info (device loop5): has skinny extents [ 181.936714][ T5571] loop1: detected capacity change from 0 to 2048 [ 184.210739][ T5571] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 184.414846][ T5545] BTRFS error (device loop5): open_ctree failed: -12 [ 184.512483][ T5601] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 184.577851][ T5601] infiniband syz5: RDMA CMA: cma_listen_on_dev, error -98 [ 187.624472][ T5621] loop2: detected capacity change from 0 to 256 [ 188.308806][ T5626] device syzkaller0 entered promiscuous mode [ 188.338884][ T5621] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 189.137081][ T4964] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 190.882638][ T5648] loop0: detected capacity change from 0 to 32768 [ 191.556693][ T4175] Bluetooth: hci0: command 0x0406 tx timeout [ 191.587290][ T4175] Bluetooth: hci2: command 0x0406 tx timeout [ 191.627705][ T5648] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.255 (5648) [ 191.718596][ T4175] Bluetooth: hci4: command 0x0406 tx timeout [ 191.727643][ T4175] Bluetooth: hci1: command 0x0406 tx timeout [ 191.741141][ T4964] usb 2-1: device descriptor read/all, error -71 [ 192.897511][ T5648] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 192.906315][ T5648] BTRFS info (device loop0): use zlib compression, level 3 [ 192.913716][ T5648] BTRFS info (device loop0): turning on sync discard [ 192.920685][ T5648] BTRFS info (device loop0): using free space tree [ 192.927790][ T5648] BTRFS info (device loop0): has skinny extents [ 193.675388][ T5648] BTRFS error (device loop0): open_ctree failed: -12 [ 193.995886][ T5679] loop5: detected capacity change from 0 to 2048 [ 194.024637][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.031057][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.761451][ T5679] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 195.827590][ T5679] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 195.879340][ T5679] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 2 with max blocks 32 with error 28 [ 195.892063][ T5679] EXT4-fs (loop5): This should not happen!! Data will be lost [ 195.892063][ T5679] [ 195.902389][ T5679] EXT4-fs (loop5): Total free blocks count 0 [ 195.908655][ T5679] EXT4-fs (loop5): Free/Dirty block details [ 195.914983][ T5679] EXT4-fs (loop5): free_blocks=66060288 [ 195.920952][ T5679] EXT4-fs (loop5): dirty_blocks=48 [ 195.926278][ T5679] EXT4-fs (loop5): Block reservation details [ 195.932412][ T5679] EXT4-fs (loop5): i_reserved_data_blocks=3 [ 197.136030][ T5701] siw: device registration error -23 [ 197.410829][ T1166] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 197.457346][ T1166] EXT4-fs (loop5): This should not happen!! Data will be lost [ 197.457346][ T1166] [ 197.742313][ T5711] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input5 [ 199.000718][ T5737] netlink: 8 bytes leftover after parsing attributes in process `syz.1.268'. [ 200.627267][ T4229] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 201.517425][ T4229] usb 1-1: Using ep0 maxpacket: 32 [ 202.243967][ T5763] loop4: detected capacity change from 0 to 32768 [ 202.298073][ T5763] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.276 (5763) [ 202.343551][ T5763] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 202.352919][ T5763] BTRFS info (device loop4): use zlib compression, level 3 [ 202.360241][ T5763] BTRFS info (device loop4): turning on sync discard [ 202.366948][ T5763] BTRFS info (device loop4): using free space tree [ 202.373523][ T5763] BTRFS info (device loop4): has skinny extents [ 202.417873][ T4229] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 202.425837][ T4229] usb 1-1: can't read configurations, error -71 [ 203.719481][ T5789] siw: device registration error -23 [ 204.930684][ T5790] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 204.957385][ T5790] CIFS: Attempting to mount \\127.0.0.1\share [ 204.963637][ T5790] CIFS: VFS: No username specified [ 204.990726][ T5763] BTRFS error (device loop4): open_ctree failed: -12 [ 205.227300][ T4375] tipc: Subscription rejected, illegal request [ 205.359072][ T5819] db_root: cannot be changed: target drivers registered [ 205.464252][ T5823] device syzkaller0 entered promiscuous mode [ 206.286295][ T5835] loop2: detected capacity change from 0 to 32768 [ 206.868960][ T5835] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.292 (5835) [ 207.159373][ T5835] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 207.168175][ T5835] BTRFS info (device loop2): use zlib compression, level 3 [ 207.175402][ T5835] BTRFS info (device loop2): turning on sync discard [ 207.182149][ T5835] BTRFS info (device loop2): using free space tree [ 207.188727][ T5835] BTRFS info (device loop2): has skinny extents [ 210.419066][ T5835] BTRFS error (device loop2): open_ctree failed: -12 [ 211.454397][ T5885] CIFS: Attempting to mount \\127.0.0.1\share [ 211.461361][ T5885] CIFS: VFS: No username specified [ 211.815849][ T154] tipc: Subscription rejected, illegal request [ 218.023828][ T3088] tipc: Subscription rejected, illegal request [ 220.867273][ T4385] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 221.433073][ T5993] loop1: detected capacity change from 0 to 256 [ 221.557355][ T4385] usb 5-1: Using ep0 maxpacket: 32 [ 221.677620][ T4385] usb 5-1: config 0 has an invalid interface number: 85 but max is 0 [ 221.734469][ T4385] usb 5-1: config 0 has no interface number 0 [ 221.764970][ T4385] usb 5-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 221.781894][ T4385] usb 5-1: config 0 interface 85 has no altsetting 0 [ 221.997502][ T4385] usb 5-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 222.043071][ T4385] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.067663][ T4385] usb 5-1: Product: syz [ 222.076244][ T4385] usb 5-1: Manufacturer: syz [ 222.088600][ T4385] usb 5-1: SerialNumber: syz [ 222.101743][ T4385] usb 5-1: config 0 descriptor?? [ 223.817512][ T4385] appletouch 5-1:0.85: Geyser mode initialized. [ 223.835494][ T4385] input: appletouch as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.85/input/input6 [ 224.738791][ T4385] usb 5-1: USB disconnect, device number 3 [ 224.747238][ C0] appletouch 5-1:0.85: atp_complete: usb_submit_urb failed with result -19 [ 224.905167][ T4385] appletouch 5-1:0.85: input: appletouch disconnected [ 225.000560][ T6036] db_root: cannot be changed: target drivers registered [ 225.090162][ T6034] device syzkaller0 entered promiscuous mode [ 225.192302][ T6034] tipc: Started in network mode [ 225.228003][ T6034] tipc: Node identity fe6cc5c5c4f1, cluster identity 4711 [ 225.508073][ T6034] tipc: Enabled bearer , priority 0 [ 225.867955][ T6050] tipc: Resetting bearer [ 226.762971][ T6050] tipc: Disabling bearer [ 226.810049][ T13] tipc: Node number set to 983418309 [ 229.278116][ T13] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 229.857954][ T13] usb 6-1: Using ep0 maxpacket: 32 [ 231.157543][ T13] usb 6-1: config 0 has an invalid interface number: 85 but max is 0 [ 231.676373][ T13] usb 6-1: config 0 has no interface number 0 [ 231.717298][ T13] usb 6-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 231.779170][ T13] usb 6-1: config 0 interface 85 has no altsetting 0 [ 231.907455][ T13] usb 6-1: string descriptor 0 read error: -71 [ 231.923915][ T13] usb 6-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 231.941461][ T13] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.971425][ T13] usb 6-1: config 0 descriptor?? [ 231.985192][ T6112] loop0: detected capacity change from 0 to 4096 [ 232.017466][ T13] usb 6-1: can't set config #0, error -71 [ 232.030784][ T13] usb 6-1: USB disconnect, device number 3 [ 232.180248][ T6112] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 233.185454][ T6130] device syzkaller0 entered promiscuous mode [ 233.225502][ T6130] tipc: Started in network mode [ 233.248745][ T6130] tipc: Node identity e23b7097c469, cluster identity 4711 [ 233.256085][ T6130] tipc: Enabled bearer , priority 0 [ 233.308441][ T6127] tipc: Resetting bearer [ 233.375021][ T6127] tipc: Disabling bearer [ 234.947017][ T6157] netlink: 20 bytes leftover after parsing attributes in process `syz.0.362'. [ 237.518534][ T6184] device syzkaller0 entered promiscuous mode [ 237.901592][ T6190] tipc: Enabled bearer , priority 0 [ 238.284564][ T6200] tipc: Resetting bearer [ 238.329342][ T6200] tipc: Disabling bearer [ 240.747339][ T6219] netlink: 4 bytes leftover after parsing attributes in process `syz.0.373'. [ 241.406736][ T6219] loop0: detected capacity change from 0 to 8 [ 247.484116][ T4175] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 247.887356][ T4175] usb 6-1: config 1 has an invalid interface number: 3 but max is 0 [ 247.971737][ T4175] usb 6-1: config 1 has no interface number 0 [ 248.418289][ T4175] usb 6-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 248.490816][ T4175] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.543512][ T4175] usb 6-1: Product: syz [ 248.566192][ T4175] usb 6-1: Manufacturer: syz [ 248.604890][ T4175] usb 6-1: SerialNumber: syz [ 249.107652][ T4175] usb 6-1: cannot find UAC_HEADER [ 249.129259][ T6271] netlink: 20 bytes leftover after parsing attributes in process `syz.1.387'. [ 249.429443][ T4175] snd-usb-audio: probe of 6-1:1.3 failed with error -22 [ 249.442634][ T4175] usb 6-1: USB disconnect, device number 4 [ 249.648138][ T4712] udevd[4712]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.3/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 254.483705][ T6314] loop1: detected capacity change from 0 to 512 [ 254.542703][ T6314] EXT4-fs (loop1): Ignoring removed nobh option [ 255.043623][ T6314] EXT4-fs (loop1): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000001000,nobh,quota,,errors=continue. Quota mode: writeback. [ 255.087569][ T6314] ext4 filesystem being mounted at /78/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 255.194133][ T6314] EXT4-fs error (device loop1): ext4_do_update_inode:5229: inode #2: comm syz.1.398: corrupted inode contents [ 255.216889][ T6314] EXT4-fs error (device loop1): ext4_dirty_inode:6077: inode #2: comm syz.1.398: mark_inode_dirty error [ 255.242468][ T6314] EXT4-fs error (device loop1): ext4_do_update_inode:5229: inode #2: comm syz.1.398: corrupted inode contents [ 255.306943][ T6314] EXT4-fs error (device loop1): __ext4_ext_dirty:183: inode #2: comm syz.1.398: mark_inode_dirty error [ 255.888665][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.895192][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.073064][ T6330] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 256.329481][ T6330] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 259.067352][ T6358] netlink: 4 bytes leftover after parsing attributes in process `syz.4.408'. [ 259.748554][ T6358] loop4: detected capacity change from 0 to 8 [ 261.945244][ T6378] netlink: 20 bytes leftover after parsing attributes in process `syz.2.414'. [ 264.224841][ T6400] loop5: detected capacity change from 0 to 512 [ 264.284010][ T6400] EXT4-fs (loop5): Ignoring removed nobh option [ 264.405509][ T6400] EXT4-fs (loop5): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000001000,nobh,quota,,errors=continue. Quota mode: writeback. [ 264.546505][ T6400] ext4 filesystem being mounted at /60/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 264.678682][ T6400] EXT4-fs error (device loop5): ext4_do_update_inode:5229: inode #2: comm syz.5.419: corrupted inode contents [ 264.874065][ T6400] EXT4-fs error (device loop5): ext4_dirty_inode:6077: inode #2: comm syz.5.419: mark_inode_dirty error [ 265.929372][ T6400] EXT4-fs error (device loop5): ext4_do_update_inode:5229: inode #2: comm syz.5.419: corrupted inode contents [ 265.993754][ T6400] EXT4-fs error (device loop5): __ext4_ext_dirty:183: inode #2: comm syz.5.419: mark_inode_dirty error [ 268.949575][ T6450] loop0: detected capacity change from 0 to 8 [ 269.035179][ T26] audit: type=1800 audit(1789087310.764:11): pid=6450 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.445" name="file1" dev="loop0" ino=5 res=0 errno=0 [ 269.108201][ T6455] SQUASHFS error: Failed to read block 0x8f: -5 [ 269.125707][ T6455] SQUASHFS error: Failed to read block 0x8f: -5 [ 269.153303][ T6455] SQUASHFS error: Failed to read block 0x8f: -5 [ 269.197584][ T6455] SQUASHFS error: Failed to read block 0x8f: -5 [ 269.243878][ T6455] SQUASHFS error: Failed to read block 0x8f: -5 [ 269.268516][ T6455] SQUASHFS error: Failed to read block 0x8f: -5 [ 269.295385][ T6455] SQUASHFS error: Failed to read block 0x8f: -5 [ 269.423012][ T6455] SQUASHFS error: Failed to read block 0x8f: -5 [ 270.806710][ T6477] loop0: detected capacity change from 0 to 512 [ 270.873644][ T6477] EXT4-fs (loop0): Ignoring removed nobh option [ 270.968200][ T6477] EXT4-fs (loop0): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000001000,nobh,quota,,errors=continue. Quota mode: writeback. [ 271.053552][ T6477] ext4 filesystem being mounted at /89/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 271.165566][ T6477] EXT4-fs error (device loop0): ext4_do_update_inode:5229: inode #2: comm syz.0.440: corrupted inode contents [ 271.217460][ T6477] EXT4-fs error (device loop0): ext4_dirty_inode:6077: inode #2: comm syz.0.440: mark_inode_dirty error [ 271.237780][ T6477] EXT4-fs error (device loop0): ext4_do_update_inode:5229: inode #2: comm syz.0.440: corrupted inode contents [ 271.261313][ T6477] EXT4-fs error (device loop0): __ext4_ext_dirty:183: inode #2: comm syz.0.440: mark_inode_dirty error [ 273.797504][ T4966] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 274.077562][ T4966] usb 6-1: Using ep0 maxpacket: 8 [ 274.222344][ T4966] usb 6-1: too many endpoints for config 0 interface 0 altsetting 9: 254, using maximum allowed: 30 [ 275.398660][ T4966] usb 6-1: config 0 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 275.412260][ T4966] usb 6-1: config 0 interface 0 has no altsetting 0 [ 275.419791][ T4966] usb 6-1: New USB device found, idVendor=057e, idProduct=200e, bcdDevice= 0.00 [ 275.518097][ T4966] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 275.542720][ T4966] usb 6-1: config 0 descriptor?? [ 276.027920][ T4966] hid (null): invalid report_count 19403 [ 276.441734][ T4966] hid-generic 0003:057E:200E.0001: invalid report_count 19403 [ 276.449512][ T4966] hid-generic 0003:057E:200E.0001: item 0 2 1 9 parsing failed [ 276.457579][ T4966] hid-generic: probe of 0003:057E:200E.0001 failed with error -22 [ 276.468672][ T4966] usb 6-1: USB disconnect, device number 5 [ 278.757904][ T4966] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 279.663136][ T6574] loop2: detected capacity change from 0 to 8 [ 279.777323][ T4966] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 279.840735][ T4966] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 279.915882][ T4966] usb 1-1: Product: syz [ 279.920620][ T4966] usb 1-1: Manufacturer: syz [ 279.934870][ T4966] usb 1-1: SerialNumber: syz [ 279.973285][ T26] audit: type=1800 audit(1789087321.704:12): pid=6574 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.472" name="file1" dev="loop2" ino=5 res=0 errno=0 [ 280.550351][ T4966] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 281.633820][ T4966] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -71 [ 281.696556][ T4966] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 281.748616][ T4966] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 281.777955][ T4966] lan78xx: probe of 1-1:1.0 failed with error -71 [ 281.827941][ T4966] usb 1-1: USB disconnect, device number 6 [ 283.921738][ T6603] loop5: detected capacity change from 0 to 32768 [ 284.041733][ T6603] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 scanned by syz.5.479 (6603) [ 284.055376][ T146] Bluetooth: hci5: link tx timeout [ 284.061576][ T146] Bluetooth: hci5: killing stalled connection 10:aa:aa:aa:aa:aa [ 284.071838][ T146] Bluetooth: hci5: link tx timeout [ 284.077719][ T146] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 284.089584][ T146] Bluetooth: hci5: link tx timeout [ 284.094770][ T146] Bluetooth: hci5: killing stalled connection 10:aa:aa:aa:aa:aa [ 284.102915][ T146] Bluetooth: hci5: link tx timeout [ 284.108496][ T146] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 284.116291][ T146] Bluetooth: hci5: link tx timeout [ 284.121867][ T146] Bluetooth: hci5: killing stalled connection 10:aa:aa:aa:aa:aa [ 284.129673][ T146] Bluetooth: hci5: link tx timeout [ 284.134856][ T146] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 284.145073][ T146] Bluetooth: hci5: link tx timeout [ 284.150252][ T146] Bluetooth: hci5: killing stalled connection 10:aa:aa:aa:aa:aa [ 284.157983][ T146] Bluetooth: hci5: link tx timeout [ 284.163668][ T146] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 284.171702][ T146] Bluetooth: hci5: link tx timeout [ 284.176838][ T146] Bluetooth: hci5: killing stalled connection 10:aa:aa:aa:aa:aa [ 284.184544][ T146] Bluetooth: hci5: link tx timeout [ 284.189791][ T146] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 284.197680][ T146] Bluetooth: hci5: link tx timeout [ 284.202810][ T146] Bluetooth: hci5: killing stalled connection 10:aa:aa:aa:aa:aa [ 284.210534][ T146] Bluetooth: hci5: link tx timeout [ 284.215660][ T146] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 284.223509][ T146] Bluetooth: hci5: link tx timeout [ 284.228665][ T146] Bluetooth: hci5: killing stalled connection 10:aa:aa:aa:aa:aa [ 284.236290][ T146] Bluetooth: hci5: link tx timeout [ 284.241477][ T146] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 284.249303][ T146] Bluetooth: hci5: link tx timeout [ 284.254469][ T146] Bluetooth: hci5: killing stalled connection 10:aa:aa:aa:aa:aa [ 284.262264][ T146] Bluetooth: hci5: link tx timeout [ 284.267923][ T146] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 284.276414][ T6603] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 284.285193][ T6603] BTRFS info (device loop5): use zlib compression, level 3 [ 284.292468][ T6603] BTRFS info (device loop5): turning on sync discard [ 284.299163][ T6603] BTRFS info (device loop5): using free space tree [ 284.305657][ T6603] BTRFS info (device loop5): has skinny extents [ 284.314283][ T146] Bluetooth: hci5: link tx timeout [ 284.319522][ T146] Bluetooth: hci5: killing stalled connection 10:aa:aa:aa:aa:aa [ 284.327286][ T146] Bluetooth: hci5: link tx timeout [ 284.332412][ T146] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 284.341132][ T146] Bluetooth: hci5: link tx timeout [ 284.346316][ T146] Bluetooth: hci5: killing stalled connection 10:aa:aa:aa:aa:aa [ 284.354022][ T146] Bluetooth: hci5: link tx timeout [ 284.359192][ T146] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 284.368436][ T146] Bluetooth: hci5: link tx timeout [ 284.373589][ T146] Bluetooth: hci5: killing stalled connection 10:aa:aa:aa:aa:aa [ 284.381444][ T146] Bluetooth: hci5: link tx timeout [ 284.386570][ T146] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 284.394501][ T146] Bluetooth: hci5: link tx timeout [ 284.399754][ T146] Bluetooth: hci5: killing stalled connection 10:aa:aa:aa:aa:aa [ 284.417262][ T146] Bluetooth: hci5: link tx timeout [ 284.422419][ T146] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 284.548866][ T146] Bluetooth: hci5: link tx timeout [ 284.554305][ T146] Bluetooth: hci5: killing stalled connection 10:aa:aa:aa:aa:aa [ 284.562365][ T146] Bluetooth: hci5: link tx timeout [ 284.567884][ T146] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 284.578784][ T146] Bluetooth: hci5: link tx timeout [ 284.584463][ T146] Bluetooth: hci5: killing stalled connection 10:aa:aa:aa:aa:aa [ 284.592387][ T146] Bluetooth: hci5: link tx timeout [ 284.597854][ T146] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 284.605701][ T146] Bluetooth: hci5: link tx timeout [ 284.802243][ T146] Bluetooth: hci5: killing stalled connection 10:aa:aa:aa:aa:aa [ 284.816133][ T146] Bluetooth: hci5: link tx timeout [ 284.822561][ T146] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 284.834690][ T146] Bluetooth: hci5: link tx timeout [ 284.840121][ T146] Bluetooth: hci5: killing stalled connection 10:aa:aa:aa:aa:aa [ 284.848036][ T146] Bluetooth: hci5: link tx timeout [ 284.853348][ T146] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 284.889290][ T146] Bluetooth: hci5: link tx timeout [ 284.894636][ T146] Bluetooth: hci5: killing stalled connection 10:aa:aa:aa:aa:aa [ 284.903358][ T146] Bluetooth: hci5: link tx timeout [ 284.932324][ T146] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 285.053890][ T146] Bluetooth: hci5: link tx timeout [ 285.059131][ T146] Bluetooth: hci5: killing stalled connection 10:aa:aa:aa:aa:aa [ 285.066796][ T146] Bluetooth: hci5: link tx timeout [ 285.071990][ T146] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 285.079710][ T146] Bluetooth: hci5: link tx timeout [ 285.085398][ T146] Bluetooth: hci5: killing stalled connection 10:aa:aa:aa:aa:aa [ 285.093084][ T146] Bluetooth: hci5: link tx timeout [ 285.098312][ T146] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 285.106172][ T146] Bluetooth: hci5: link tx timeout [ 285.111325][ T146] Bluetooth: hci5: killing stalled connection 10:aa:aa:aa:aa:aa [ 285.118991][ T146] Bluetooth: hci5: link tx timeout [ 285.124096][ T146] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 285.131895][ T146] Bluetooth: hci5: link tx timeout [ 285.137026][ T146] Bluetooth: hci5: killing stalled connection 10:aa:aa:aa:aa:aa [ 285.144713][ T146] Bluetooth: hci5: link tx timeout [ 285.149876][ T146] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 285.157732][ T146] Bluetooth: hci5: link tx timeout [ 285.162851][ T146] Bluetooth: hci5: killing stalled connection 10:aa:aa:aa:aa:aa [ 285.170504][ T146] Bluetooth: hci5: link tx timeout [ 285.175636][ T146] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 285.185342][ T146] Bluetooth: hci5: link tx timeout [ 285.191056][ T146] Bluetooth: hci5: killing stalled connection 10:aa:aa:aa:aa:aa [ 285.198879][ T146] Bluetooth: hci5: link tx timeout [ 285.204066][ T146] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 285.211918][ T146] Bluetooth: hci5: link tx timeout [ 285.217053][ T146] Bluetooth: hci5: killing stalled connection 10:aa:aa:aa:aa:aa [ 285.224742][ T146] Bluetooth: hci5: link tx timeout [ 285.229877][ T146] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 285.237702][ T146] Bluetooth: hci5: link tx timeout [ 285.242916][ T146] Bluetooth: hci5: killing stalled connection 10:aa:aa:aa:aa:aa [ 285.250595][ T146] Bluetooth: hci5: link tx timeout [ 285.255704][ T146] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 285.263498][ T146] Bluetooth: hci5: link tx timeout [ 285.268644][ T146] Bluetooth: hci5: killing stalled connection 10:aa:aa:aa:aa:aa [ 285.276267][ T146] Bluetooth: hci5: link tx timeout [ 285.281405][ T146] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 285.292438][ T146] Bluetooth: hci5: link tx timeout [ 285.297602][ T146] Bluetooth: hci5: killing stalled connection 10:aa:aa:aa:aa:aa [ 285.305250][ T146] Bluetooth: hci5: link tx timeout [ 285.310410][ T146] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 285.318374][ T146] Bluetooth: hci5: link tx timeout [ 285.323502][ T146] Bluetooth: hci5: killing stalled connection 10:aa:aa:aa:aa:aa [ 285.331250][ T146] Bluetooth: hci5: link tx timeout [ 285.336362][ T146] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 285.344272][ T146] Bluetooth: hci5: link tx timeout [ 285.349425][ T146] Bluetooth: hci5: killing stalled connection 10:aa:aa:aa:aa:aa [ 285.357044][ T146] Bluetooth: hci5: link tx timeout [ 285.362190][ T146] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 285.370003][ T146] Bluetooth: hci5: link tx timeout [ 285.375160][ T146] Bluetooth: hci5: killing stalled connection 10:aa:aa:aa:aa:aa [ 285.382853][ T146] Bluetooth: hci5: link tx timeout [ 285.387992][ T146] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 285.396797][ T146] Bluetooth: hci5: link tx timeout [ 285.402009][ T146] Bluetooth: hci5: killing stalled connection 10:aa:aa:aa:aa:aa [ 285.410625][ T146] Bluetooth: hci5: link tx timeout [ 285.415757][ T146] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 285.424444][ T146] Bluetooth: hci5: link tx timeout [ 285.429598][ T146] Bluetooth: hci5: killing stalled connection 10:aa:aa:aa:aa:aa [ 285.437276][ T146] Bluetooth: hci5: link tx timeout [ 285.442392][ T146] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 285.450176][ T146] Bluetooth: hci5: link tx timeout [ 285.455502][ T146] Bluetooth: hci5: killing stalled connection 10:aa:aa:aa:aa:aa [ 285.463185][ T146] Bluetooth: hci5: link tx timeout [ 285.468354][ T146] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 285.482366][ T146] Bluetooth: hci5: link tx timeout [ 285.487576][ T146] Bluetooth: hci5: killing stalled connection 10:aa:aa:aa:aa:aa [ 285.495751][ T146] Bluetooth: hci5: link tx timeout [ 285.500939][ T146] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 285.541939][ T146] Bluetooth: hci5: link tx timeout [ 285.547314][ T146] Bluetooth: hci5: killing stalled connection 10:aa:aa:aa:aa:aa [ 285.554990][ T146] Bluetooth: hci5: link tx timeout [ 285.560834][ T146] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 285.568576][ T146] Bluetooth: hci5: link tx timeout [ 285.573721][ T146] Bluetooth: hci5: killing stalled connection 10:aa:aa:aa:aa:aa [ 285.581445][ T146] Bluetooth: hci5: link tx timeout [ 285.586577][ T146] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 285.607723][ T146] Bluetooth: hci5: link tx timeout [ 285.612913][ T146] Bluetooth: hci5: killing stalled connection 10:aa:aa:aa:aa:aa [ 285.620813][ T146] Bluetooth: hci5: link tx timeout [ 285.625952][ T146] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 285.640261][ T146] Bluetooth: hci5: link tx timeout [ 285.645425][ T146] Bluetooth: hci5: killing stalled connection 10:aa:aa:aa:aa:aa [ 285.653228][ T146] Bluetooth: hci5: link tx timeout [ 285.658403][ T146] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 285.668365][ T146] Bluetooth: hci5: link tx timeout [ 285.673530][ T146] Bluetooth: hci5: killing stalled connection 10:aa:aa:aa:aa:aa [ 285.681328][ T146] Bluetooth: hci5: link tx timeout [ 285.686452][ T146] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 285.694450][ T146] Bluetooth: hci5: link tx timeout [ 285.700212][ T146] Bluetooth: hci5: killing stalled connection 10:aa:aa:aa:aa:aa [ 285.707965][ T146] Bluetooth: hci5: link tx timeout [ 285.713131][ T146] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 285.721136][ T146] Bluetooth: hci5: link tx timeout [ 285.726292][ T146] Bluetooth: hci5: killing stalled connection 10:aa:aa:aa:aa:aa [ 285.734020][ T146] Bluetooth: hci5: link tx timeout [ 285.739211][ T146] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 285.749855][ T146] Bluetooth: hci5: link tx timeout [ 285.754987][ T146] Bluetooth: hci5: killing stalled connection 10:aa:aa:aa:aa:aa [ 285.763270][ T146] Bluetooth: hci5: link tx timeout [ 285.768494][ T146] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 285.776523][ T146] Bluetooth: hci5: link tx timeout [ 285.781828][ T146] Bluetooth: hci5: killing stalled connection 10:aa:aa:aa:aa:aa [ 285.789526][ T146] Bluetooth: hci5: link tx timeout [ 285.794633][ T146] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 285.804231][ T146] Bluetooth: hci5: link tx timeout [ 285.809417][ T146] Bluetooth: hci5: killing stalled connection 10:aa:aa:aa:aa:aa [ 285.817068][ T146] Bluetooth: hci5: link tx timeout [ 285.822270][ T146] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 285.837367][ T146] Bluetooth: hci5: link tx timeout [ 285.842610][ T146] Bluetooth: hci5: killing stalled connection 10:aa:aa:aa:aa:aa [ 285.850307][ T146] Bluetooth: hci5: link tx timeout [ 285.855555][ T146] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 285.865855][ T146] Bluetooth: hci5: link tx timeout [ 285.871056][ T146] Bluetooth: hci5: killing stalled connection 10:aa:aa:aa:aa:aa [ 285.878922][ T146] Bluetooth: hci5: link tx timeout [ 285.884067][ T146] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 285.898017][ T146] Bluetooth: hci5: link tx timeout [ 285.903741][ T146] Bluetooth: hci5: killing stalled connection 10:aa:aa:aa:aa:aa [ 285.911681][ T146] Bluetooth: hci5: link tx timeout [ 285.916823][ T146] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 285.924820][ T146] Bluetooth: hci5: link tx timeout [ 285.930007][ T146] Bluetooth: hci5: killing stalled connection 10:aa:aa:aa:aa:aa [ 285.937819][ T146] Bluetooth: hci5: link tx timeout [ 285.943134][ T146] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 285.957383][ T146] Bluetooth: hci5: link tx timeout [ 285.962534][ T146] Bluetooth: hci5: killing stalled connection 10:aa:aa:aa:aa:aa [ 285.970653][ T146] Bluetooth: hci5: link tx timeout [ 285.975771][ T146] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 285.985384][ T146] Bluetooth: hci5: link tx timeout [ 285.990597][ T146] Bluetooth: hci5: killing stalled connection 10:aa:aa:aa:aa:aa [ 285.998308][ T146] Bluetooth: hci5: link tx timeout [ 286.003418][ T146] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 286.017395][ T146] Bluetooth: hci5: link tx timeout [ 286.022533][ T146] Bluetooth: hci5: killing stalled connection 10:aa:aa:aa:aa:aa [ 286.030261][ T146] Bluetooth: hci5: link tx timeout [ 286.035396][ T146] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 286.043968][ T146] Bluetooth: hci5: link tx timeout [ 286.049175][ T146] Bluetooth: hci5: killing stalled connection 10:aa:aa:aa:aa:aa [ 286.056850][ T146] Bluetooth: hci5: link tx timeout [ 286.062051][ T146] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 286.069883][ T146] Bluetooth: hci5: link tx timeout [ 286.075014][ T146] Bluetooth: hci5: killing stalled connection 10:aa:aa:aa:aa:aa [ 286.082737][ T146] Bluetooth: hci5: link tx timeout [ 286.087917][ T146] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 286.097273][ T4227] Bluetooth: hci5: command 0x0406 tx timeout [ 286.104056][ T146] Bluetooth: hci5: link tx timeout [ 286.109852][ T146] Bluetooth: hci5: killing stalled connection 10:aa:aa:aa:aa:aa [ 286.117550][ T146] Bluetooth: hci5: link tx timeout [ 286.122658][ T146] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 286.130445][ T146] Bluetooth: hci5: link tx timeout [ 286.135560][ T146] Bluetooth: hci5: killing stalled connection 10:aa:aa:aa:aa:aa [ 286.143236][ T146] Bluetooth: hci5: link tx timeout [ 286.148367][ T146] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 286.156146][ T146] Bluetooth: hci5: link tx timeout [ 286.161297][ T146] Bluetooth: hci5: killing stalled connection 10:aa:aa:aa:aa:aa [ 286.168967][ T146] Bluetooth: hci5: link tx timeout [ 286.174078][ T146] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 286.182450][ T146] Bluetooth: hci5: link tx timeout [ 286.187626][ T146] Bluetooth: hci5: killing stalled connection 10:aa:aa:aa:aa:aa [ 286.195258][ T146] Bluetooth: hci5: link tx timeout [ 286.200437][ T146] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 286.208232][ T146] Bluetooth: hci5: link tx timeout [ 286.213808][ T146] Bluetooth: hci5: killing stalled connection 10:aa:aa:aa:aa:aa [ 286.221531][ T146] Bluetooth: hci5: link tx timeout [ 286.226635][ T146] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 286.234457][ T146] Bluetooth: hci5: link tx timeout [ 286.239623][ T146] Bluetooth: hci5: killing stalled connection 10:aa:aa:aa:aa:aa [ 286.247315][ T146] Bluetooth: hci5: link tx timeout [ 286.252421][ T146] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 286.260269][ T146] Bluetooth: hci5: link tx timeout [ 286.265387][ T146] Bluetooth: hci5: killing stalled connection 10:aa:aa:aa:aa:aa [ 286.273169][ T146] Bluetooth: hci5: link tx timeout [ 286.278308][ T146] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 286.286115][ T146] Bluetooth: hci5: link tx timeout [ 286.291296][ T146] Bluetooth: hci5: killing stalled connection 10:aa:aa:aa:aa:aa [ 286.298979][ T146] Bluetooth: hci5: link tx timeout [ 286.304081][ T146] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 286.311916][ T146] Bluetooth: hci5: link tx timeout [ 286.317619][ T146] Bluetooth: hci5: killing stalled connection 10:aa:aa:aa:aa:aa [ 286.325295][ T146] Bluetooth: hci5: link tx timeout [ 286.330450][ T146] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 286.338211][ T146] Bluetooth: hci5: link tx timeout [ 286.343320][ T146] Bluetooth: hci5: killing stalled connection 10:aa:aa:aa:aa:aa [ 286.350975][ T146] Bluetooth: hci5: link tx timeout [ 286.356079][ T146] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 286.363906][ T146] Bluetooth: hci5: link tx timeout [ 286.369055][ T146] Bluetooth: hci5: killing stalled connection 10:aa:aa:aa:aa:aa [ 286.376679][ T146] Bluetooth: hci5: link tx timeout [ 286.381823][ T146] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 286.389654][ T146] Bluetooth: hci5: link tx timeout [ 286.394774][ T146] Bluetooth: hci5: killing stalled connection 10:aa:aa:aa:aa:aa [ 286.402447][ T146] Bluetooth: hci5: link tx timeout [ 286.407579][ T146] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 286.421194][ T146] Bluetooth: hci5: link tx timeout [ 286.426338][ T146] Bluetooth: hci5: killing stalled connection 10:aa:aa:aa:aa:aa [ 286.434050][ T146] Bluetooth: hci5: link tx timeout [ 286.439249][ T146] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 286.447126][ T146] Bluetooth: hci5: link tx timeout [ 286.452285][ T146] Bluetooth: hci5: killing stalled connection 10:aa:aa:aa:aa:aa [ 286.459951][ T146] Bluetooth: hci5: link tx timeout [ 286.465062][ T146] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 286.472906][ T146] Bluetooth: hci5: link tx timeout [ 286.478074][ T146] Bluetooth: hci5: killing stalled connection 10:aa:aa:aa:aa:aa [ 286.485697][ T146] Bluetooth: hci5: link tx timeout [ 286.490834][ T146] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 286.498648][ T146] Bluetooth: hci5: link tx timeout [ 286.503773][ T146] Bluetooth: hci5: killing stalled connection 10:aa:aa:aa:aa:aa [ 286.511472][ T146] Bluetooth: hci5: link tx timeout [ 286.516600][ T146] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 286.536334][ T146] Bluetooth: hci5: link tx timeout [ 286.541598][ T146] Bluetooth: hci5: killing stalled connection 10:aa:aa:aa:aa:aa [ 286.549313][ T146] Bluetooth: hci5: link tx timeout [ 286.554437][ T146] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 286.562309][ T146] Bluetooth: hci5: link tx timeout [ 286.567451][ T146] Bluetooth: hci5: killing stalled connection 10:aa:aa:aa:aa:aa [ 286.575081][ T146] Bluetooth: hci5: link tx timeout [ 286.580265][ T146] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 286.610979][ T146] Bluetooth: hci5: link tx timeout [ 286.616149][ T146] Bluetooth: hci5: killing stalled connection 10:aa:aa:aa:aa:aa [ 286.624449][ T146] Bluetooth: hci5: link tx timeout [ 286.629640][ T146] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 286.662748][ T146] Bluetooth: hci5: link tx timeout [ 286.667932][ T146] Bluetooth: hci5: killing stalled connection 10:aa:aa:aa:aa:aa [ 286.675580][ T146] Bluetooth: hci5: link tx timeout [ 286.680759][ T146] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 286.731414][ T146] Bluetooth: hci5: link tx timeout [ 286.736585][ T146] Bluetooth: hci5: killing stalled connection 10:aa:aa:aa:aa:aa [ 286.744340][ T146] Bluetooth: hci5: link tx timeout [ 286.749492][ T146] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 286.757447][ T146] Bluetooth: hci5: link tx timeout [ 286.762575][ T146] Bluetooth: hci5: killing stalled connection 10:aa:aa:aa:aa:aa [ 286.770272][ T146] Bluetooth: hci5: link tx timeout [ 286.775377][ T146] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 286.783273][ T146] Bluetooth: hci5: link tx timeout [ 286.788441][ T146] Bluetooth: hci5: killing stalled connection 10:aa:aa:aa:aa:aa [ 286.796088][ T146] Bluetooth: hci5: link tx timeout [ 286.801234][ T146] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 286.809052][ T146] Bluetooth: hci5: link tx timeout [ 286.814200][ T146] Bluetooth: hci5: killing stalled connection 10:aa:aa:aa:aa:aa [ 286.821929][ T146] Bluetooth: hci5: link tx timeout [ 286.827503][ T146] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 286.842698][ T146] Bluetooth: hci5: link tx timeout [ 286.847859][ T146] Bluetooth: hci5: killing stalled connection 10:aa:aa:aa:aa:aa [ 286.855605][ T146] Bluetooth: hci5: link tx timeout [ 286.860754][ T146] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 286.903253][ T146] Bluetooth: hci5: link tx timeout [ 286.908465][ T146] Bluetooth: hci5: killing stalled connection 10:aa:aa:aa:aa:aa [ 286.916106][ T146] Bluetooth: hci5: link tx timeout [ 286.921259][ T146] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 286.933477][ T146] Bluetooth: hci5: link tx timeout [ 286.938661][ T146] Bluetooth: hci5: killing stalled connection 10:aa:aa:aa:aa:aa [ 286.946299][ T146] Bluetooth: hci5: link tx timeout [ 286.951437][ T146] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 286.959268][ T146] Bluetooth: hci5: link tx timeout [ 286.964416][ T146] Bluetooth: hci5: killing stalled connection 10:aa:aa:aa:aa:aa [ 286.972119][ T146] Bluetooth: hci5: link tx timeout [ 286.977684][ T146] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 286.985521][ T146] Bluetooth: hci5: link tx timeout [ 286.990669][ T146] Bluetooth: hci5: killing stalled connection 10:aa:aa:aa:aa:aa [ 286.998333][ T146] Bluetooth: hci5: link tx timeout [ 287.003433][ T146] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 287.015630][ T146] Bluetooth: hci5: link tx timeout [ 287.020843][ T146] Bluetooth: hci5: killing stalled connection 10:aa:aa:aa:aa:aa [ 287.028532][ T146] Bluetooth: hci5: link tx timeout [ 287.034037][ T146] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 287.041849][ T146] Bluetooth: hci5: link tx timeout [ 287.046981][ T146] Bluetooth: hci5: killing stalled connection 10:aa:aa:aa:aa:aa [ 287.054674][ T146] Bluetooth: hci5: link tx timeout [ 287.059866][ T146] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 287.067940][ T146] Bluetooth: hci5: link tx timeout [ 287.073246][ T146] Bluetooth: hci5: killing stalled connection 10:aa:aa:aa:aa:aa [ 287.080939][ T146] Bluetooth: hci5: link tx timeout [ 287.086049][ T146] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 287.213256][ T6603] BTRFS error (device loop5): open_ctree failed: -12 [ 287.229879][ T146] Bluetooth: hci5: link tx timeout [ 287.235661][ T146] Bluetooth: hci5: killing stalled connection 10:aa:aa:aa:aa:aa [ 287.243460][ T146] Bluetooth: hci5: link tx timeout [ 287.248654][ T146] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 287.642896][ T4712] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 scanned by udevd (4712) [ 287.844026][ T6639] loop0: detected capacity change from 0 to 32768 [ 288.034519][ T6647] loop4: detected capacity change from 0 to 256 [ 288.071842][ T6639] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 288.080616][ T6639] BTRFS info (device loop0): use zlib compression, level 3 [ 288.087874][ T6639] BTRFS info (device loop0): turning on sync discard [ 288.094544][ T6639] BTRFS info (device loop0): using free space tree [ 288.101088][ T6639] BTRFS info (device loop0): has skinny extents [ 288.182281][ T4225] Bluetooth: hci5: command 0x0406 tx timeout [ 289.750875][ T6639] BTRFS info (device loop0): enabling ssd optimizations [ 290.682385][ T26] audit: type=1800 audit(1789087332.394:13): pid=6678 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.495" name="file1" dev="loop0" ino=260 res=0 errno=0 [ 291.686285][ T4717] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 10 /dev/loop0 scanned by udevd (4717) [ 293.750913][ T6701] loop5: detected capacity change from 0 to 32768 [ 294.618604][ T4383] Bluetooth: hci5: command 0x0405 tx timeout [ 295.168086][ T6701] XFS (loop5): Mounting V5 Filesystem [ 295.512207][ T6701] XFS (loop5): Ending clean mount [ 296.647917][ T4640] XFS (loop5): Unmounting Filesystem [ 301.630129][ T6790] loop5: detected capacity change from 0 to 1024 [ 301.821057][ T6790] hfsplus: invalid length 1280 has been corrected to 255 [ 302.130454][ T6775] loop2: detected capacity change from 0 to 40427 [ 302.149753][ T6798] loop5: detected capacity change from 0 to 256 [ 302.262944][ T4229] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 302.547302][ T4229] usb 2-1: Using ep0 maxpacket: 8 [ 302.747674][ T4229] usb 2-1: unable to get BOS descriptor or descriptor too short [ 303.529585][ T4229] usb 2-1: config 1 interface 0 has no altsetting 0 [ 303.827317][ T4229] usb 2-1: string descriptor 0 read error: -22 [ 303.839875][ T4229] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.40 [ 303.872846][ T4229] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 305.287508][ T4229] usbhid 2-1:1.0: can't add hid device: -71 [ 305.293884][ T4229] usbhid: probe of 2-1:1.0 failed with error -71 [ 305.311008][ T4229] usb 2-1: USB disconnect, device number 6 [ 307.056333][ T6820] loop5: detected capacity change from 0 to 32768 [ 307.122195][ T6820] (syz.5.526,6820,0):ocfs2_parse_options:1459 ERROR: Invalid heartbeat mount options [ 307.222497][ T6820] (syz.5.526,6820,0):ocfs2_fill_super:1177 ERROR: status = -22 [ 307.337261][ T4488] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 307.767312][ T4488] usb 2-1: unable to get BOS descriptor or descriptor too short [ 307.897438][ T4488] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 308.143006][ T6839] loop2: detected capacity change from 0 to 32768 [ 308.806350][ T4488] usb 2-1: New USB device found, idVendor=8086, idProduct=0ad2, bcdDevice= 0.00 [ 308.815822][ T4488] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 308.825955][ T4488] usb 2-1: Product: syz [ 308.841066][ T4488] usb 2-1: Manufacturer: syz [ 308.912612][ T4488] usb 2-1: Found UVC 1.00 device syz (8086:0ad2) [ 308.946600][ T4488] usb 2-1: No streaming interface found for terminal 2. [ 309.138475][ T6839] XFS (loop2): Mounting V5 Filesystem [ 309.218935][ T4488] input: syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input7 [ 309.375065][ T4488] usb 2-1: USB disconnect, device number 7 [ 309.401363][ T6839] XFS (loop2): Ending clean mount [ 309.860552][ T4197] XFS (loop2): Unmounting Filesystem [ 312.767261][ T4229] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 313.427422][ T4229] usb 3-1: New USB device found, idVendor=0402, idProduct=5602, bcdDevice=49.83 [ 313.677347][ T4229] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 313.767143][ T4229] usb 3-1: Product: syz [ 313.787630][ T4229] usb 3-1: Manufacturer: syz [ 313.867227][ T4229] usb 3-1: SerialNumber: syz [ 313.928400][ T4229] usb 3-1: config 0 descriptor?? [ 314.002051][ T4229] gspca_main: ALi m5602-2.14.0 probing 0402:5602 [ 314.371681][ T4229] gspca_m5602: Failed to find a sensor [ 314.377309][ T4229] ALi m5602 3-1:0.0: ALi m5602 webcam failed [ 314.393820][ T4229] usb 3-1: USB disconnect, device number 3 [ 315.957391][ T4488] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 317.121723][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.138863][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.372304][ T6902] loop4: detected capacity change from 0 to 32768 [ 319.272853][ T6922] capability: warning: `syz.4.551' uses 32-bit capabilities (legacy support in use) [ 321.817301][ T4383] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 322.247460][ T4383] usb 6-1: unable to get BOS descriptor or descriptor too short [ 323.847343][ T4383] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 325.027400][ T4383] usb 6-1: New USB device found, idVendor=8086, idProduct=0ad2, bcdDevice= 0.00 [ 325.047257][ T4383] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 325.055459][ T4383] usb 6-1: Product: syz [ 325.277601][ T4383] usb 6-1: can't set config #1, error -71 [ 325.965236][ T4383] usb 6-1: USB disconnect, device number 6 [ 329.543297][ T6999] loop4: detected capacity change from 0 to 256 [ 333.247809][ T7040] loop0: detected capacity change from 0 to 256 [ 336.133659][ T7061] loop0: detected capacity change from 0 to 256 [ 339.336342][ T7089] loop1: detected capacity change from 0 to 256 [ 342.718147][ T7117] loop1: detected capacity change from 0 to 256 [ 346.447275][ T4965] usb 6-1: new full-speed USB device number 7 using dummy_hcd [ 346.847390][ T4965] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 346.848192][ T7142] loop4: detected capacity change from 0 to 256 [ 346.873516][ T4965] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 346.900074][ T4965] usb 6-1: New USB device found, idVendor=0506, idProduct=4601, bcdDevice= 1.00 [ 346.926275][ T4965] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 348.867361][ T4965] pegasus 6-1:1.0: can't reset MAC [ 348.872655][ T4965] pegasus: probe of 6-1:1.0 failed with error -5 [ 348.903349][ T4965] usb 6-1: USB disconnect, device number 7 [ 351.847595][ T7190] loop0: detected capacity change from 0 to 256 [ 354.303402][ T7217] loop0: detected capacity change from 0 to 32768 [ 354.434606][ T7217] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 354.443513][ T7217] BTRFS info (device loop0): use zlib compression, level 3 [ 354.450871][ T7217] BTRFS info (device loop0): turning on sync discard [ 354.457638][ T7217] BTRFS info (device loop0): using free space tree [ 354.464153][ T7217] BTRFS info (device loop0): has skinny extents [ 355.739490][ T7217] BTRFS info (device loop0): enabling ssd optimizations [ 355.910357][ T26] audit: type=1800 audit(1789087397.644:14): pid=7217 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.627" name="file1" dev="loop0" ino=260 res=0 errno=0 [ 357.486369][ T7265] loop0: detected capacity change from 0 to 2048 [ 358.829950][ T7265] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 358.864402][ T7265] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 358.909691][ T7265] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 2 with max blocks 32 with error 28 [ 358.922958][ T7265] EXT4-fs (loop0): This should not happen!! Data will be lost [ 358.922958][ T7265] [ 358.932982][ T7265] EXT4-fs (loop0): Total free blocks count 0 [ 358.956818][ T7265] EXT4-fs (loop0): Free/Dirty block details [ 358.963008][ T7265] EXT4-fs (loop0): free_blocks=66060288 [ 358.968783][ T7265] EXT4-fs (loop0): dirty_blocks=48 [ 358.974028][ T7265] EXT4-fs (loop0): Block reservation details [ 358.980175][ T7265] EXT4-fs (loop0): i_reserved_data_blocks=3 [ 359.258145][ T4225] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 359.647668][ T4225] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 359.739197][ T4225] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 359.934828][ T4225] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 360.085512][ T4225] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 360.241265][ T4225] usb 1-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 360.336679][ T4225] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 360.564716][ T4225] usb 1-1: config 0 descriptor?? [ 361.017699][ T1107] usb 1-1: USB disconnect, device number 7 [ 361.708380][ T144] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 361.723957][ T7282] loop1: detected capacity change from 0 to 256 [ 361.731252][ T144] EXT4-fs (loop0): This should not happen!! Data will be lost [ 361.731252][ T144] [ 364.035545][ T7305] process 'syz.4.641' launched './file1' with NULL argv: empty string added [ 366.173102][ T1237] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.280876][ T1237] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.405535][ T1237] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.494918][ T7336] device syzkaller0 entered promiscuous mode [ 366.583113][ T1237] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.795390][ T7336] tipc: Enabled bearer , priority 0 [ 366.812440][ T7340] tipc: Resetting bearer [ 366.829232][ T7335] tipc: Resetting bearer [ 366.891070][ T7335] tipc: Disabling bearer [ 367.447275][ T4228] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 367.732685][ T4228] usb 2-1: Using ep0 maxpacket: 32 [ 367.864098][ T4228] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 367.885311][ T4228] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 0 [ 368.153084][ T4228] usb 2-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= a.f5 [ 368.191567][ T4228] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 368.353347][ T4228] usb 2-1: Product: syz [ 368.428353][ T4228] usb 2-1: Manufacturer: syz [ 368.526269][ T4228] usb 2-1: SerialNumber: syz [ 368.754362][ T4228] usb 2-1: config 0 descriptor?? [ 368.813457][ T7363] chnl_net:caif_netlink_parms(): no params data found [ 369.028199][ T7347] loop1: detected capacity change from 0 to 8 [ 369.070215][ T4228] snd-usb-audio: probe of 2-1:0.0 failed with error -12 [ 369.330131][ T4718] udevd[4718]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 369.376991][ T1237] device hsr_slave_0 left promiscuous mode [ 369.432556][ T1237] device hsr_slave_1 left promiscuous mode [ 369.465764][ T1237] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 369.515666][ T1237] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 369.604316][ T1237] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 369.617297][ T4845] Bluetooth: hci3: command 0x0409 tx timeout [ 369.623457][ T1237] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 369.662513][ T1237] device bridge_slave_1 left promiscuous mode [ 370.354093][ T1237] bridge0: port 2(bridge_slave_1) entered disabled state [ 370.439150][ T1237] device bridge_slave_0 left promiscuous mode [ 370.456205][ T1237] bridge0: port 1(bridge_slave_0) entered disabled state [ 370.555976][ T1237] device veth1_macvtap left promiscuous mode [ 370.576577][ T1237] device veth0_macvtap left promiscuous mode [ 370.596470][ T1237] device veth1_vlan left promiscuous mode [ 370.606760][ T1237] device veth0_vlan left promiscuous mode [ 370.837258][ T4260] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 371.107222][ T4260] usb 1-1: Using ep0 maxpacket: 32 [ 371.257449][ T4260] usb 1-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 371.274321][ T4260] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 371.319242][ T4260] usb 1-1: config 0 descriptor?? [ 371.382785][ T4260] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 371.456532][ T1237] team0 (unregistering): Port device team_slave_1 removed [ 371.568713][ T1237] team0 (unregistering): Port device team_slave_0 removed [ 371.609598][ T1237] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 371.660625][ T1237] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 371.697303][ T4307] Bluetooth: hci3: command 0x041b tx timeout [ 371.885979][ T1237] bond0 (unregistering): Released all slaves [ 372.154214][ T7363] bridge0: port 1(bridge_slave_0) entered blocking state [ 372.176733][ T4845] usb 2-1: USB disconnect, device number 8 [ 372.204078][ T7363] bridge0: port 1(bridge_slave_0) entered disabled state [ 372.238886][ T7363] device bridge_slave_0 entered promiscuous mode [ 372.256304][ T7363] bridge0: port 2(bridge_slave_1) entered blocking state [ 372.318719][ T7363] bridge0: port 2(bridge_slave_1) entered disabled state [ 372.343847][ T7363] device bridge_slave_1 entered promiscuous mode [ 372.370547][ T7363] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 372.405622][ T7363] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 372.517426][ T4260] gspca_nw80x: reg_w err -71 [ 372.522330][ T4260] nw80x: probe of 1-1:0.0 failed with error -71 [ 372.556511][ T7363] team0: Port device team_slave_0 added [ 372.573077][ T4260] usb 1-1: USB disconnect, device number 8 [ 372.590071][ T7363] team0: Port device team_slave_1 added [ 372.657104][ T7363] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 372.664621][ T7363] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 372.711218][ T7363] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 372.748860][ T7363] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 372.772750][ T7363] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 372.870094][ T7363] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 372.975445][ T7363] device hsr_slave_0 entered promiscuous mode [ 373.017994][ T7363] device hsr_slave_1 entered promiscuous mode [ 373.791203][ T21] Bluetooth: hci3: command 0x040f tx timeout [ 373.826239][ T7420] ODEBUG: Out of memory. ODEBUG disabled [ 373.874442][ T7440] loop1: detected capacity change from 0 to 32768 [ 374.108985][ T7440] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.669 (7440) [ 374.132428][ T7440] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 374.141667][ T7440] BTRFS info (device loop1): use zlib compression, level 3 [ 374.149100][ T7440] BTRFS info (device loop1): turning on sync discard [ 374.155802][ T7440] BTRFS info (device loop1): using free space tree [ 374.162360][ T7440] BTRFS info (device loop1): has skinny extents [ 374.342042][ T7363] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 374.368418][ T7440] BTRFS info (device loop1): enabling ssd optimizations [ 374.401093][ T7363] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 374.465668][ T7363] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 374.523217][ T7363] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 374.566389][ T26] audit: type=1800 audit(1789087416.294:15): pid=7440 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.669" name="file1" dev="loop1" ino=260 res=0 errno=0 [ 375.375020][ T7363] 8021q: adding VLAN 0 to HW filter on device bond0 [ 375.770129][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 375.816980][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 375.906758][ T7363] 8021q: adding VLAN 0 to HW filter on device team0 [ 375.939225][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 375.947405][ T4307] Bluetooth: hci3: command 0x0419 tx timeout [ 375.987841][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 376.076553][ T4377] bridge0: port 1(bridge_slave_0) entered blocking state [ 376.083799][ T4377] bridge0: port 1(bridge_slave_0) entered forwarding state [ 376.104586][ T4712] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 10 /dev/loop1 scanned by udevd (4712) [ 376.155052][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 376.187893][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 376.247322][ T4377] bridge0: port 2(bridge_slave_1) entered blocking state [ 376.254608][ T4377] bridge0: port 2(bridge_slave_1) entered forwarding state [ 376.324577][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 376.338912][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 376.380294][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 376.428198][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 376.468475][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 376.506071][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 376.556886][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 376.594646][ T7363] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 376.635686][ T7363] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 376.662153][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 376.672139][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 376.766133][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 376.848051][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 376.927991][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 377.010771][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 377.482863][ T7500] loop5: detected capacity change from 0 to 2048 [ 377.665829][ T7500] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 377.722945][ T7500] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 377.763395][ T7500] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 2 with max blocks 32 with error 28 [ 377.775941][ T7500] EXT4-fs (loop5): This should not happen!! Data will be lost [ 377.775941][ T7500] [ 377.785773][ T7500] EXT4-fs (loop5): Total free blocks count 0 [ 377.791882][ T7500] EXT4-fs (loop5): Free/Dirty block details [ 377.797876][ T7500] EXT4-fs (loop5): free_blocks=66060288 [ 377.817958][ T7500] EXT4-fs (loop5): dirty_blocks=48 [ 377.823226][ T7500] EXT4-fs (loop5): Block reservation details [ 377.829409][ T7500] EXT4-fs (loop5): i_reserved_data_blocks=3 [ 378.087392][ T4845] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 378.339568][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.346159][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.527359][ T4845] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 378.596676][ T4845] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 378.743439][ T4845] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 378.886300][ T4845] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 379.044980][ T4845] usb 6-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 379.047600][ T4388] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 379.148591][ T4845] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 379.322965][ T4845] usb 6-1: config 0 descriptor?? [ 379.524539][ T3088] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 379.560999][ T3088] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 379.798965][ T7363] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 381.455514][ T4227] usb 6-1: USB disconnect, device number 8 [ 381.461607][ T7523] loop0: detected capacity change from 0 to 4096 [ 381.719619][ T3088] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 381.736036][ T3088] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 381.819131][ T3088] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 381.830740][ T3088] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 381.903087][ T7363] device veth0_vlan entered promiscuous mode [ 381.944725][ T3088] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 381.984178][ T3088] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 382.013555][ T7363] device veth1_vlan entered promiscuous mode [ 382.124083][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 382.143282][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 382.153652][ T4377] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 382.187803][ T4377] EXT4-fs (loop5): This should not happen!! Data will be lost [ 382.187803][ T4377] [ 382.219420][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 382.239439][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 382.303831][ T7363] device veth0_macvtap entered promiscuous mode [ 382.342522][ T7363] device veth1_macvtap entered promiscuous mode [ 382.468713][ T7363] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 382.507481][ T7363] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 382.547243][ T7363] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 382.607214][ T7363] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 382.644136][ T7363] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 382.688170][ T7363] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 382.737600][ T7363] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 382.777140][ T7363] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 382.872741][ T7363] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 382.997227][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 383.005750][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 383.169156][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 383.313706][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 383.471049][ T7363] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 383.576447][ T7363] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 383.706842][ T7363] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 383.842694][ T7363] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 383.969792][ T7363] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 384.114805][ T7363] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 384.244044][ T7363] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 384.394040][ T7363] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 384.552565][ T7363] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 384.653655][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 384.706834][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 385.380163][ T7363] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.448367][ T7363] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.577828][ T7363] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.703231][ T7363] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.543628][ T4303] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 386.606158][ T4303] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 386.659273][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 386.697007][ T4303] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 386.707171][ T4303] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 386.714676][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 388.567420][ T21] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 388.837224][ T21] usb 7-1: Using ep0 maxpacket: 32 [ 388.967659][ T21] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 389.039216][ T21] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 0 [ 389.271614][ T4388] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 389.327792][ T21] usb 7-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= a.f5 [ 389.336995][ T21] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 389.349028][ T21] usb 7-1: Product: syz [ 389.353231][ T21] usb 7-1: Manufacturer: syz [ 389.357911][ T21] usb 7-1: SerialNumber: syz [ 389.375245][ T21] usb 7-1: config 0 descriptor?? [ 389.507821][ T21] snd-usb-audio: probe of 7-1:0.0 failed with error -12 [ 389.538799][ T4388] usb 2-1: Using ep0 maxpacket: 32 [ 389.599717][ T7604] udevd[7604]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 389.652711][ T7592] loop6: detected capacity change from 0 to 8 [ 389.658307][ T4388] usb 2-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 389.681030][ T4388] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 389.744640][ T7596] chnl_net:caif_netlink_parms(): no params data found [ 389.793620][ T4388] usb 2-1: config 0 descriptor?? [ 389.849936][ T4388] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 389.986615][ T7596] bridge0: port 1(bridge_slave_0) entered blocking state [ 389.994113][ T7596] bridge0: port 1(bridge_slave_0) entered disabled state [ 390.010913][ T7596] device bridge_slave_0 entered promiscuous mode [ 390.035530][ T7596] bridge0: port 2(bridge_slave_1) entered blocking state [ 390.234800][ T7596] bridge0: port 2(bridge_slave_1) entered disabled state [ 390.493229][ T7596] device bridge_slave_1 entered promiscuous mode [ 390.719842][ T4388] gspca_nw80x: reg_w err -110 [ 390.724612][ T4388] nw80x: probe of 2-1:0.0 failed with error -110 [ 390.870470][ T7596] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 390.902930][ T7596] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 390.961097][ T7420] Set syz1 is full, maxelem 65536 reached [ 390.993212][ T7596] team0: Port device team_slave_0 added [ 391.047649][ T7596] team0: Port device team_slave_1 added [ 391.105524][ T7596] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 391.125756][ T7596] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 391.227167][ T7596] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 391.290610][ T7596] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 391.307256][ T4963] Bluetooth: hci4: command 0x0409 tx timeout [ 391.321290][ T7596] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 391.349384][ T7596] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 391.494195][ T7596] device hsr_slave_0 entered promiscuous mode [ 391.515495][ T7596] device hsr_slave_1 entered promiscuous mode [ 391.535168][ T7596] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 391.554152][ T7596] Cannot create hsr debugfs directory [ 391.767331][ T7487] usb 2-1: USB disconnect, device number 9 [ 391.881941][ T4963] usb 7-1: USB disconnect, device number 2 [ 392.105443][ T7638] loop1: detected capacity change from 0 to 2048 [ 392.290735][ T7638] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 392.345456][ T7638] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 392.398661][ T7638] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 2 with max blocks 32 with error 28 [ 392.411695][ T7638] EXT4-fs (loop1): This should not happen!! Data will be lost [ 392.411695][ T7638] [ 392.421809][ T7638] EXT4-fs (loop1): Total free blocks count 0 [ 392.447810][ T7638] EXT4-fs (loop1): Free/Dirty block details [ 392.453833][ T7638] EXT4-fs (loop1): free_blocks=66060288 [ 392.459684][ T7638] EXT4-fs (loop1): dirty_blocks=48 [ 392.464919][ T7638] EXT4-fs (loop1): Block reservation details [ 392.471203][ T7638] EXT4-fs (loop1): i_reserved_data_blocks=3 [ 392.486046][ T7596] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 392.707918][ T7487] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 392.751980][ T7596] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 392.959604][ T7596] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 393.127259][ T7487] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 393.183466][ T7596] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 393.204550][ T7487] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 393.349183][ T7487] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 393.486264][ T7487] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 393.648552][ T7487] usb 2-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 393.655788][ T4963] Bluetooth: hci4: command 0x041b tx timeout [ 393.746488][ T7487] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 393.883904][ T7487] usb 2-1: config 0 descriptor?? [ 395.596295][ T7596] 8021q: adding VLAN 0 to HW filter on device bond0 [ 395.793456][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 395.818900][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 395.884861][ T7596] 8021q: adding VLAN 0 to HW filter on device team0 [ 395.941221][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 395.961106][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 396.014417][ T4375] bridge0: port 1(bridge_slave_0) entered blocking state [ 396.021569][ T4375] bridge0: port 1(bridge_slave_0) entered forwarding state [ 396.037860][ T4962] usb 2-1: USB disconnect, device number 10 [ 396.054290][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 396.110065][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 396.178965][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 396.211755][ T4375] bridge0: port 2(bridge_slave_1) entered blocking state [ 396.218894][ T4375] bridge0: port 2(bridge_slave_1) entered forwarding state [ 396.264312][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 396.284999][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 396.367773][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 396.376870][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 396.452194][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 396.499152][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 396.540982][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 396.587512][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 396.595847][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 396.660198][ T154] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 396.701373][ T154] EXT4-fs (loop1): This should not happen!! Data will be lost [ 396.701373][ T154] [ 396.721723][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 396.749510][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 397.541628][ T4962] Bluetooth: hci4: command 0x040f tx timeout [ 397.694255][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 397.725335][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 397.762050][ T7596] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 398.771741][ T7690] loop1: detected capacity change from 0 to 256 [ 398.787723][ T7687] device syzkaller0 entered promiscuous mode [ 398.826863][ T7691] tipc: Enabled bearer , priority 0 [ 398.920688][ T7687] tipc: Resetting bearer [ 399.097666][ T7686] tipc: Resetting bearer [ 399.321991][ T7686] tipc: Disabling bearer [ 399.627602][ T4963] Bluetooth: hci4: command 0x0419 tx timeout [ 399.975495][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 399.992961][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 400.083908][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 400.146805][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 400.180562][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 400.207961][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 400.232009][ T7596] device veth0_vlan entered promiscuous mode [ 400.280133][ T7596] device veth1_vlan entered promiscuous mode [ 400.364148][ T7596] device veth0_macvtap entered promiscuous mode [ 400.401322][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 400.419881][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 400.449749][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 400.487893][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 400.512010][ T7596] device veth1_macvtap entered promiscuous mode [ 400.542916][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 400.560026][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 400.606900][ T7596] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 400.637315][ T7596] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 400.667371][ T7596] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 400.685424][ T7596] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 400.711640][ T7596] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 400.757227][ T7596] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 400.787212][ T7596] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 400.809004][ T7596] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 400.830156][ T7596] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 400.893653][ T7596] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 401.185709][ T7596] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 401.244652][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 401.277977][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 401.350851][ T7596] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 401.389034][ T7596] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 401.474783][ T7596] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 401.506066][ T7596] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 401.564676][ T7596] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 401.592683][ T7596] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 401.627004][ T7596] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 401.647452][ T7596] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 401.668116][ T7596] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 401.688381][ T7596] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 401.716747][ T7596] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 401.730683][ T4981] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 401.752214][ T4981] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 401.774595][ T7596] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.795670][ T7596] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.805185][ T7596] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.815332][ T7596] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.187327][ T3088] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 402.231069][ T3088] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 402.422733][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 403.027025][ T4303] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 403.177877][ T4303] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 403.186204][ T5182] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 403.222908][ T7745] loop6: detected capacity change from 0 to 512 [ 403.249695][ T4683] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 403.311536][ T7749] loop1: detected capacity change from 0 to 256 [ 403.319854][ T7745] EXT4-fs (loop6): mounted filesystem without journal. Opts: noauto_da_alloc,errors=remount-ro,. Quota mode: writeback. [ 403.345495][ T7745] ext4 filesystem being mounted at /6/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 403.401636][ T4683] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 403.497931][ T7745] EXT4-fs error (device loop6): ext4_xattr_block_get:543: inode #12: comm syz.6.712: corrupted xattr block 6 [ 403.565152][ T4683] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 403.631058][ T7745] EXT4-fs (loop6): Remounting filesystem read-only [ 404.424592][ T4683] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.999804][ T4683] device hsr_slave_0 left promiscuous mode [ 407.012770][ T4683] device hsr_slave_1 left promiscuous mode [ 407.037846][ T4683] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 407.083451][ T4683] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 407.116105][ T4683] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 407.141641][ T4683] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 407.165514][ T4683] device bridge_slave_1 left promiscuous mode [ 407.219800][ T4683] bridge0: port 2(bridge_slave_1) entered disabled state [ 407.265751][ T4683] device bridge_slave_0 left promiscuous mode [ 407.284215][ T4683] bridge0: port 1(bridge_slave_0) entered disabled state [ 407.363422][ T4683] device veth1_macvtap left promiscuous mode [ 407.374966][ T7814] loop1: detected capacity change from 0 to 256 [ 407.390620][ T4683] device veth0_macvtap left promiscuous mode [ 407.410058][ T4683] device veth1_vlan left promiscuous mode [ 407.415884][ T4683] device veth0_vlan left promiscuous mode [ 407.791491][ T7820] loop6: detected capacity change from 0 to 256 [ 407.915294][ T7820] exFAT-fs (loop6): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3163b44b, utbl_chksum : 0xe619d30d) [ 408.258752][ T7822] loop0: detected capacity change from 0 to 128 [ 408.390763][ T7827] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2812553464 (22500427712 ns) > initial count (17799498648 ns). Using initial count to start timer. [ 408.409956][ T7822] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 408.446978][ T7822] ext4 filesystem being mounted at /158/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 408.485806][ T7822] EXT4-fs warning (device loop0): ext4_dirblock_csum_verify:406: inode #2: comm syz.0.731: No space for directory leaf checksum. Please run e2fsck -D. [ 408.502652][ T7822] EXT4-fs error (device loop0): htree_dirblock_to_tree:1083: inode #2: comm syz.0.731: Directory block failed checksum [ 408.529456][ T7822] EXT4-fs warning (device loop0): ext4_dirblock_csum_verify:406: inode #2: comm syz.0.731: No space for directory leaf checksum. Please run e2fsck -D. [ 408.564479][ T7822] EXT4-fs error (device loop0): __ext4_find_entry:1696: inode #2: comm syz.0.731: checksumming directory block 0 [ 408.609376][ T4683] team0 (unregistering): Port device team_slave_1 removed [ 408.680291][ T7837] EXT4-fs warning (device loop0): ext4_dirblock_csum_verify:406: inode #2: comm syz.0.731: No space for directory leaf checksum. Please run e2fsck -D. [ 408.736046][ T4683] team0 (unregistering): Port device team_slave_0 removed [ 408.787612][ T7837] EXT4-fs error (device loop0): __ext4_find_entry:1696: inode #2: comm syz.0.731: checksumming directory block 0 [ 408.831651][ T4683] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 408.841963][ T7822] EXT4-fs warning (device loop0): ext4_dirblock_csum_verify:406: inode #2: comm syz.0.731: No space for directory leaf checksum. Please run e2fsck -D. [ 408.879925][ T4683] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 408.893396][ T1107] infiniband syz5: ib_query_port failed (-19) [ 408.948992][ T7822] EXT4-fs error (device loop0): __ext4_find_entry:1696: inode #2: comm syz.0.731: checksumming directory block 0 [ 408.968649][ T7822] EXT4-fs warning (device loop0): ext4_dirblock_csum_verify:406: inode #2: comm syz.0.731: No space for directory leaf checksum. Please run e2fsck -D. [ 408.987366][ T7822] EXT4-fs error (device loop0): __ext4_find_entry:1696: inode #2: comm syz.0.731: checksumming directory block 0 [ 409.060675][ T4683] bond0 (unregistering): Released all slaves [ 409.079662][ T7837] EXT4-fs warning (device loop0): ext4_dirblock_csum_verify:406: inode #2: comm syz.0.731: No space for directory leaf checksum. Please run e2fsck -D. [ 409.113053][ T7837] EXT4-fs error (device loop0): __ext4_find_entry:1696: inode #2: comm syz.0.731: checksumming directory block 0 [ 409.135964][ T7822] EXT4-fs warning (device loop0): ext4_dirblock_csum_verify:406: inode #2: comm syz.0.731: No space for directory leaf checksum. Please run e2fsck -D. [ 409.191463][ T7822] EXT4-fs error (device loop0): __ext4_find_entry:1696: inode #2: comm syz.0.731: checksumming directory block 0 [ 409.206172][ T4383] bond0 speed is unknown, defaulting to 1000 [ 409.233669][ T7822] EXT4-fs warning (device loop0): ext4_dirblock_csum_verify:406: inode #2: comm syz.0.731: No space for directory leaf checksum. Please run e2fsck -D. [ 409.271848][ T7822] EXT4-fs error (device loop0): __ext4_find_entry:1696: inode #2: comm syz.0.731: checksumming directory block 0 [ 409.731224][ T7856] syz.5.736 uses obsolete (PF_INET,SOCK_PACKET) [ 410.402116][ T7878] loop5: detected capacity change from 0 to 256 [ 410.544775][ T7881] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2812553464 (22500427712 ns) > initial count (17799498648 ns). Using initial count to start timer. [ 411.588083][ T7904] loop5: detected capacity change from 0 to 2048 [ 411.818832][ T7906] loop7: detected capacity change from 0 to 32768 [ 411.857517][ T7904] UDF-fs: error (device loop5): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 411.918592][ T7904] UDF-fs: error (device loop5): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 411.980422][ T7904] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 413.171257][ T7934] loop7: detected capacity change from 0 to 1024 [ 413.324530][ T7934] EXT4-fs (loop7): mounted filesystem without journal. Opts: noinit_itable,,errors=continue. Quota mode: writeback. [ 413.570078][ T7946] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2812553464 (22500427712 ns) > initial count (17799498648 ns). Using initial count to start timer. [ 413.996410][ T4962] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 414.907863][ T4962] usb 8-1: Using ep0 maxpacket: 16 [ 415.047316][ T4962] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 415.065428][ T4962] usb 8-1: config 0 has no interfaces? [ 415.071503][ T4962] usb 8-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 415.081025][ T4962] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 415.108268][ T4962] usb 8-1: config 0 descriptor?? [ 415.306514][ T7973] loop5: detected capacity change from 0 to 256 [ 415.928835][ T7979] device syzkaller0 entered promiscuous mode [ 415.995081][ T7980] tipc: Enabled bearer , priority 0 [ 416.045421][ T7979] tipc: Resetting bearer [ 416.104576][ T7978] tipc: Resetting bearer [ 416.232201][ T7978] tipc: Disabling bearer [ 416.596416][ T7988] loop5: detected capacity change from 0 to 32768 [ 416.640835][ T1107] usb 8-1: USB disconnect, device number 2 [ 417.750974][ T8017] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2812553464 (22500427712 ns) > initial count (17799498648 ns). Using initial count to start timer. [ 420.120522][ T8037] loop0: detected capacity change from 0 to 256 [ 420.163283][ T8040] device syzkaller0 entered promiscuous mode [ 420.216978][ T8042] tipc: Started in network mode [ 420.295873][ T8042] tipc: Node identity e2d1a8d34e49, cluster identity 4711 [ 420.347286][ T8042] tipc: Enabled bearer , priority 0 [ 420.531347][ T8046] tipc: Resetting bearer [ 420.617474][ T8039] tipc: Resetting bearer [ 420.638528][ T8053] Invalid argument reading file caps for ./file0 [ 420.669762][ T8039] tipc: Disabling bearer [ 421.156751][ T8065] loop6: detected capacity change from 0 to 32768 [ 422.539716][ T8085] loop1: detected capacity change from 0 to 2048 [ 422.772303][ T8085] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 422.812571][ T8085] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 422.844976][ T8085] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 2 with max blocks 32 with error 28 [ 422.857393][ T8085] EXT4-fs (loop1): This should not happen!! Data will be lost [ 422.857393][ T8085] [ 422.867236][ T8085] EXT4-fs (loop1): Total free blocks count 0 [ 422.873337][ T8085] EXT4-fs (loop1): Free/Dirty block details [ 422.880456][ T8085] EXT4-fs (loop1): free_blocks=66060288 [ 422.901684][ T8085] EXT4-fs (loop1): dirty_blocks=48 [ 422.907217][ T8085] EXT4-fs (loop1): Block reservation details [ 422.913416][ T8085] EXT4-fs (loop1): i_reserved_data_blocks=3 [ 423.316036][ T4375] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 423.417313][ T4375] EXT4-fs (loop1): This should not happen!! Data will be lost [ 423.417313][ T4375] [ 424.184488][ T8111] loop0: detected capacity change from 0 to 32768 [ 424.940857][ T8111] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz.0.789 (8111) [ 425.049378][ T8111] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 425.059450][ T8111] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 425.069793][ T8111] BTRFS info (device loop0): use zstd compression, level 3 [ 425.077004][ T8111] BTRFS info (device loop0): force clearing of disk cache [ 425.084189][ T8111] BTRFS info (device loop0): enabling disk space caching [ 425.091252][ T8111] BTRFS info (device loop0): disk space caching is enabled [ 425.098457][ T8111] BTRFS info (device loop0): has skinny extents [ 426.079552][ T8136] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 426.869049][ T8108] sctp: failed to load transform for md5: -2 [ 427.232249][ T8111] BTRFS error (device loop0): open_ctree failed: -12 [ 427.270600][ T7604] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by udevd (7604) [ 429.152321][ T4260] Bluetooth: hci3: command 0x0406 tx timeout [ 429.618055][ T8170] loop1: detected capacity change from 0 to 2048 [ 430.920389][ T8170] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 430.953204][ T8170] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 430.984397][ T8170] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 2 with max blocks 32 with error 28 [ 430.996868][ T8170] EXT4-fs (loop1): This should not happen!! Data will be lost [ 430.996868][ T8170] [ 431.007189][ T8170] EXT4-fs (loop1): Total free blocks count 0 [ 431.013439][ T8170] EXT4-fs (loop1): Free/Dirty block details [ 431.019642][ T8170] EXT4-fs (loop1): free_blocks=66060288 [ 431.034285][ T8170] EXT4-fs (loop1): dirty_blocks=48 [ 431.039751][ T8170] EXT4-fs (loop1): Block reservation details [ 431.046079][ T8170] EXT4-fs (loop1): i_reserved_data_blocks=3 [ 432.229944][ T4377] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 432.315872][ T4377] EXT4-fs (loop1): This should not happen!! Data will be lost [ 432.315872][ T4377] [ 433.711035][ T8198] loop1: detected capacity change from 0 to 128 [ 434.168859][ T8198] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 434.376360][ T8198] ext4 filesystem being mounted at /178/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 434.732932][ T8195] EXT4-fs warning (device loop1): ext4_dirblock_csum_verify:406: inode #2: comm syz.1.803: No space for directory leaf checksum. Please run e2fsck -D. [ 434.787229][ T8195] EXT4-fs error (device loop1): htree_dirblock_to_tree:1083: inode #2: comm syz.1.803: Directory block failed checksum [ 434.839772][ T8198] EXT4-fs warning (device loop1): ext4_dirblock_csum_verify:406: inode #2: comm syz.1.803: No space for directory leaf checksum. Please run e2fsck -D. [ 434.917805][ T8198] EXT4-fs error (device loop1): __ext4_find_entry:1696: inode #2: comm syz.1.803: checksumming directory block 0 [ 434.946109][ T8211] usb3503 0-0008: unknown mode is requested [ 434.952460][ T8211] usb3503 0-0008: usb3503_probe: probed in standby mode [ 434.961091][ T8211] i2c i2c-0: new_device: Instantiated device usb3503 at 0x08 [ 435.050072][ T8210] EXT4-fs warning (device loop1): ext4_dirblock_csum_verify:406: inode #2: comm syz.1.803: No space for directory leaf checksum. Please run e2fsck -D. [ 435.201249][ T8210] EXT4-fs error (device loop1): __ext4_find_entry:1696: inode #2: comm syz.1.803: checksumming directory block 0 [ 435.283856][ T8215] FAULT_INJECTION: forcing a failure. [ 435.283856][ T8215] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 435.298678][ T8215] CPU: 0 PID: 8215 Comm: syz.6.799 Not tainted syzkaller #0 [ 435.305997][ T8215] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 435.316129][ T8215] Call Trace: [ 435.319472][ T8215] [ 435.322480][ T8215] dump_stack_lvl+0x188/0x250 [ 435.327392][ T8215] ? show_regs_print_info+0x20/0x20 [ 435.332659][ T8215] ? load_image+0x410/0x410 [ 435.337265][ T8215] should_fail+0x383/0x4b0 [ 435.341768][ T8215] prepare_alloc_pages+0x1e3/0x5b0 [ 435.346949][ T8215] __alloc_pages+0x11b/0x480 [ 435.351666][ T8215] ? zone_statistics+0x170/0x170 [ 435.356629][ T8215] ? rcu_lock_acquire+0x30/0x30 [ 435.361595][ T8215] ? alloc_pages+0x452/0x560 [ 435.366271][ T8215] __get_free_pages+0x8/0x30 [ 435.370962][ T8215] __tlb_remove_page_size+0x1f2/0x3f0 [ 435.376415][ T8215] unmap_page_range+0xfcf/0x2410 [ 435.381408][ T8215] unmap_vmas+0x131/0x250 [ 435.385777][ T8215] ? unmap_page_range+0x2410/0x2410 [ 435.390988][ T8215] ? __mutex_lock_common+0x435/0x2400 [ 435.396446][ T8215] ? exit_mm_release+0x16/0x30 [ 435.401283][ T8215] exit_mmap+0x3b9/0x640 [ 435.405569][ T8215] ? vm_brk+0x20/0x20 [ 435.409603][ T8215] ? uprobe_clear_state+0x2f6/0x460 [ 435.414885][ T8215] __mmput+0x115/0x390 [ 435.418990][ T8215] exit_mm+0x632/0x7b0 [ 435.423118][ T8215] ? perf_pmu_migrate_context+0xb70/0xb70 [ 435.428882][ T8215] ? do_exit+0x2110/0x2110 [ 435.433317][ T8215] ? __ia32_sys_timer_delete+0x40/0x40 [ 435.438872][ T8215] ? hrtimer_try_to_cancel+0x3d6/0x420 [ 435.444400][ T8215] ? tty_audit_exit+0x149/0x1f0 [ 435.449337][ T8215] do_exit+0x5b8/0x2110 [ 435.453511][ T8215] ? put_task_struct+0x80/0x80 [ 435.458299][ T8215] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 435.464432][ T8215] ? _raw_spin_lock_irq+0xb7/0xf0 [ 435.469485][ T8215] do_group_exit+0x12c/0x2f0 [ 435.474122][ T8215] ? lockdep_hardirqs_on+0x94/0x140 [ 435.479424][ T8215] get_signal+0x7eb/0x12e0 [ 435.483927][ T8215] arch_do_signal_or_restart+0xe6/0x12a0 [ 435.489612][ T8215] ? futex_exit_release+0x1c0/0x1c0 [ 435.494878][ T8215] ? get_sigframe_size+0x10/0x10 [ 435.499842][ T8215] ? __context_tracking_exit+0x4c/0x80 [ 435.505332][ T8215] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 435.511345][ T8215] ? exit_to_user_mode_loop+0x3b/0x130 [ 435.516839][ T8215] exit_to_user_mode_loop+0x9e/0x130 [ 435.522140][ T8215] exit_to_user_mode_prepare+0xee/0x180 [ 435.527700][ T8215] syscall_exit_to_user_mode+0x16/0x40 [ 435.533175][ T8215] do_syscall_64+0x58/0xa0 [ 435.537608][ T8215] ? clear_bhb_loop+0x30/0x80 [ 435.542357][ T8215] ? clear_bhb_loop+0x30/0x80 [ 435.547058][ T8215] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 435.552986][ T8215] RIP: 0033:0x7f94b3b57159 [ 435.557457][ T8215] Code: Unable to access opcode bytes at RIP 0x7f94b3b5712f. [ 435.564848][ T8215] RSP: 002b:00007f94b1daf0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 435.573285][ T8215] RAX: fffffffffffffe00 RBX: 00007f94b3ddefa8 RCX: 00007f94b3b57159 [ 435.581272][ T8215] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f94b3ddefa8 [ 435.589261][ T8215] RBP: 00007f94b3ddefa0 R08: 0000000000000000 R09: 0000000000000000 [ 435.597244][ T8215] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 435.605228][ T8215] R13: 00007f94b3ddf038 R14: 00007ffd9d9368c0 R15: 00007ffd9d9369a8 [ 435.613255][ T8215] [ 435.697356][ T8195] EXT4-fs warning (device loop1): ext4_dirblock_csum_verify:406: inode #2: comm syz.1.803: No space for directory leaf checksum. Please run e2fsck -D. [ 435.764633][ T8195] EXT4-fs error (device loop1): __ext4_find_entry:1696: inode #2: comm syz.1.803: checksumming directory block 0 [ 436.082644][ T8195] EXT4-fs warning (device loop1): ext4_dirblock_csum_verify:406: inode #2: comm syz.1.803: No space for directory leaf checksum. Please run e2fsck -D. [ 436.361877][ T8195] EXT4-fs error (device loop1): __ext4_find_entry:1696: inode #2: comm syz.1.803: checksumming directory block 0 [ 436.582858][ T8198] EXT4-fs warning (device loop1): ext4_dirblock_csum_verify:406: inode #2: comm syz.1.803: No space for directory leaf checksum. Please run e2fsck -D. [ 436.598384][ T8198] EXT4-fs error (device loop1): __ext4_find_entry:1696: inode #2: comm syz.1.803: checksumming directory block 0 [ 436.617152][ T8195] EXT4-fs warning (device loop1): ext4_dirblock_csum_verify:406: inode #2: comm syz.1.803: No space for directory leaf checksum. Please run e2fsck -D. [ 436.632603][ T8195] EXT4-fs error (device loop1): __ext4_find_entry:1696: inode #2: comm syz.1.803: checksumming directory block 0 [ 436.777508][ T8224] device syzkaller0 entered promiscuous mode [ 436.807430][ T8198] EXT4-fs warning (device loop1): ext4_dirblock_csum_verify:406: inode #2: comm syz.1.803: No space for directory leaf checksum. Please run e2fsck -D. [ 436.888624][ T8198] EXT4-fs error (device loop1): __ext4_find_entry:1696: inode #2: comm syz.1.803: checksumming directory block 0 [ 436.922967][ T8226] tipc: Enabled bearer , priority 0 [ 437.199710][ T8230] loop6: detected capacity change from 0 to 32768 [ 437.208132][ T8224] tipc: Resetting bearer [ 438.021387][ T4260] tipc: Node number set to 642936983 [ 438.317343][ T8223] tipc: Resetting bearer [ 438.427935][ T8223] tipc: Disabling bearer [ 438.709597][ T8238] loop5: detected capacity change from 0 to 2048 [ 438.922224][ T8238] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 438.961551][ T8238] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 438.993840][ T8238] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 2 with max blocks 32 with error 28 [ 439.006235][ T8238] EXT4-fs (loop5): This should not happen!! Data will be lost [ 439.006235][ T8238] [ 439.016020][ T8238] EXT4-fs (loop5): Total free blocks count 0 [ 439.022144][ T8238] EXT4-fs (loop5): Free/Dirty block details [ 439.028211][ T8238] EXT4-fs (loop5): free_blocks=66060288 [ 439.039004][ T8238] EXT4-fs (loop5): dirty_blocks=48 [ 439.044335][ T8238] EXT4-fs (loop5): Block reservation details [ 439.050731][ T8238] EXT4-fs (loop5): i_reserved_data_blocks=3 [ 439.300226][ T4194] Bluetooth: hci4: link tx timeout [ 439.306159][ T4194] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 439.316199][ T4194] Bluetooth: hci4: link tx timeout [ 439.321388][ T4194] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 439.329212][ T4194] Bluetooth: hci4: link tx timeout [ 439.334336][ T4194] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 439.342469][ T4194] Bluetooth: hci4: link tx timeout [ 439.347612][ T4194] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 439.355635][ T4194] Bluetooth: hci4: link tx timeout [ 439.360838][ T4194] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 439.372831][ T4194] Bluetooth: hci4: link tx timeout [ 439.378148][ T4194] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 439.390639][ T4194] Bluetooth: hci4: link tx timeout [ 439.395777][ T4194] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 439.404242][ T4194] Bluetooth: hci4: link tx timeout [ 439.409741][ T4194] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 439.418662][ T4194] Bluetooth: hci4: link tx timeout [ 439.423794][ T4194] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 439.432872][ T4194] Bluetooth: hci4: link tx timeout [ 439.438038][ T4194] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 439.445808][ T4194] Bluetooth: hci4: link tx timeout [ 439.450948][ T4194] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 439.459023][ T4194] Bluetooth: hci4: link tx timeout [ 439.464164][ T4194] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 439.472359][ T4194] Bluetooth: hci4: link tx timeout [ 439.477497][ T4194] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 439.486237][ T4194] Bluetooth: hci4: link tx timeout [ 439.491450][ T4194] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 439.500316][ T4194] Bluetooth: hci4: link tx timeout [ 439.505904][ T4194] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 439.517302][ T4194] Bluetooth: hci4: link tx timeout [ 439.522426][ T4194] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 439.549037][ T4194] Bluetooth: hci4: link tx timeout [ 439.554206][ T4194] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 439.563446][ T4194] Bluetooth: hci4: link tx timeout [ 439.568614][ T4194] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 439.576456][ T4194] Bluetooth: hci4: link tx timeout [ 439.581724][ T4194] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 439.589525][ T4194] Bluetooth: hci4: link tx timeout [ 439.594657][ T4194] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 439.643466][ T4194] Bluetooth: hci4: link tx timeout [ 439.648685][ T4194] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 439.782604][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.789402][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.798757][ T4194] Bluetooth: hci4: link tx timeout [ 439.803889][ T4194] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 439.816491][ T4194] Bluetooth: hci4: link tx timeout [ 439.821635][ T4194] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 439.829666][ T4194] Bluetooth: hci4: link tx timeout [ 439.834782][ T4194] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 439.842825][ T4194] Bluetooth: hci4: link tx timeout [ 439.848007][ T4194] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 439.855952][ T4194] Bluetooth: hci4: link tx timeout [ 439.861250][ T4194] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 439.869225][ T4194] Bluetooth: hci4: link tx timeout [ 439.874349][ T4194] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 439.891333][ T4194] Bluetooth: hci4: link tx timeout [ 439.896488][ T4194] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 439.905433][ T4194] Bluetooth: hci4: link tx timeout [ 439.910586][ T4194] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 439.925974][ T4194] Bluetooth: hci4: link tx timeout [ 439.931188][ T4194] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 439.939221][ T4194] Bluetooth: hci4: link tx timeout [ 439.944377][ T4194] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 439.962497][ T4194] Bluetooth: hci4: link tx timeout [ 439.967642][ T4194] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 441.387419][ T4260] Bluetooth: hci4: command 0x0406 tx timeout [ 441.750024][ T4981] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 441.808868][ T4981] EXT4-fs (loop5): This should not happen!! Data will be lost [ 441.808868][ T4981] [ 441.967844][ T8275] i2c i2c-0: Failed to register i2c client usb3503 at 0x08 (-16) [ 442.899784][ T8287] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 444.366920][ T8279] loop0: detected capacity change from 0 to 40427 [ 444.523638][ T8279] F2FS-fs (loop0): invalid crc value [ 444.647216][ T8279] F2FS-fs (loop0): Found nat_bits in checkpoint [ 445.124205][ T8320] loop5: detected capacity change from 0 to 32768 [ 445.757421][ T8279] F2FS-fs (loop0): Inconsistent segment (8) type [1, 0] in SSA and SIT [ 446.246505][ T8331] loop7: detected capacity change from 0 to 2048 [ 446.452784][ T8331] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 446.490513][ T8328] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 446.522039][ T8328] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 2 with max blocks 32 with error 28 [ 446.534456][ T8328] EXT4-fs (loop7): This should not happen!! Data will be lost [ 446.534456][ T8328] [ 446.544274][ T8328] EXT4-fs (loop7): Total free blocks count 0 [ 446.550399][ T8328] EXT4-fs (loop7): Free/Dirty block details [ 446.556393][ T8328] EXT4-fs (loop7): free_blocks=66060288 [ 446.562254][ T8328] EXT4-fs (loop7): dirty_blocks=48 [ 446.567481][ T8328] EXT4-fs (loop7): Block reservation details [ 446.574169][ T8328] EXT4-fs (loop7): i_reserved_data_blocks=3 [ 446.927275][ T4227] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 447.327342][ T4227] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 447.408778][ T4227] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 447.564039][ T4227] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 447.717989][ T4227] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 447.923206][ T4227] usb 8-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 448.088065][ T4227] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 449.928775][ T4227] usb 8-1: config 0 descriptor?? [ 450.439935][ T21] usb 8-1: USB disconnect, device number 3 [ 450.485077][ T4981] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 450.542653][ T4981] EXT4-fs (loop7): This should not happen!! Data will be lost [ 450.542653][ T4981] [ 451.057371][ T7] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 451.467619][ T7] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 451.614623][ T7] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 451.662178][ T7] usb 8-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 451.688212][ T7] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 451.754807][ T7] usb 8-1: config 0 descriptor?? [ 452.250206][ T7] cp2112 0003:10C4:EA90.0002: unknown main item tag 0x0 [ 452.387813][ T7] cp2112 0003:10C4:EA90.0002: unknown main item tag 0x0 [ 452.395081][ T7] cp2112 0003:10C4:EA90.0002: unknown main item tag 0x0 [ 452.402535][ T7] cp2112 0003:10C4:EA90.0002: unknown main item tag 0x0 [ 452.410568][ T7] cp2112 0003:10C4:EA90.0002: unknown main item tag 0x0 [ 452.431236][ T7] cp2112 0003:10C4:EA90.0002: unknown main item tag 0x0 [ 452.438510][ T7] cp2112 0003:10C4:EA90.0002: unknown main item tag 0x0 [ 452.468927][ T7] cp2112 0003:10C4:EA90.0002: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.7-1/input0 [ 452.729786][ T7] cp2112 0003:10C4:EA90.0002: Part Number: 0x00 Device Version: 0x00 [ 452.850088][ T8389] tipc: Enabling of bearer rejected, failed to enable media [ 453.242278][ T8353] cp2112 0003:10C4:EA90.0002: Error starting transaction: -38 [ 453.287520][ T7] cp2112 0003:10C4:EA90.0002: error reading lock byte: -71 [ 453.399601][ T7] usb 8-1: USB disconnect, device number 4 [ 454.510453][ T8398] fido_id[8398]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/report_descriptor': No such file or directory [ 454.695255][ T8412] loop6: detected capacity change from 0 to 2048 [ 455.909723][ T8411] loop5: detected capacity change from 0 to 40427 [ 455.995714][ T8411] F2FS-fs (loop5): Fix alignment : done, start(4096) end(16896) block(12288) [ 456.014019][ T8411] F2FS-fs (loop5): invalid crc value [ 456.021853][ T8411] F2FS-fs (loop5): invalid crc value [ 456.027413][ T8411] F2FS-fs (loop5): Failed to get valid F2FS checkpoint [ 456.144865][ T8412] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 456.174228][ T8412] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 456.206816][ T8412] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 2 with max blocks 32 with error 28 [ 456.219324][ T8412] EXT4-fs (loop6): This should not happen!! Data will be lost [ 456.219324][ T8412] [ 456.229203][ T8412] EXT4-fs (loop6): Total free blocks count 0 [ 456.235363][ T8412] EXT4-fs (loop6): Free/Dirty block details [ 456.241503][ T8412] EXT4-fs (loop6): free_blocks=66060288 [ 456.265661][ T8412] EXT4-fs (loop6): dirty_blocks=48 [ 456.270984][ T8412] EXT4-fs (loop6): Block reservation details [ 456.277150][ T8412] EXT4-fs (loop6): i_reserved_data_blocks=3 [ 457.399578][ T21] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 458.227439][ T21] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 458.717164][ T21] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 458.734623][ T21] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 458.757129][ T21] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 458.891521][ T21] usb 7-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 458.908761][ T21] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 458.947735][ T21] usb 7-1: config 0 descriptor?? [ 459.722071][ T7] usb 7-1: USB disconnect, device number 3 [ 459.782996][ T5182] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 460.025690][ T5182] EXT4-fs (loop6): This should not happen!! Data will be lost [ 460.025690][ T5182] [ 460.338974][ T8444] loop6: detected capacity change from 0 to 32768 [ 460.592625][ T8453] loop0: detected capacity change from 0 to 16 [ 462.911340][ T8453] erofs: (device loop0): mounted with root inode @ nid 36. [ 464.549430][ T8540] loop7: detected capacity change from 0 to 2048 [ 465.947642][ T8540] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 465.978191][ T8540] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 466.008390][ T8540] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 2 with max blocks 32 with error 28 [ 466.021551][ T8540] EXT4-fs (loop7): This should not happen!! Data will be lost [ 466.021551][ T8540] [ 466.031317][ T8540] EXT4-fs (loop7): Total free blocks count 0 [ 466.037406][ T8540] EXT4-fs (loop7): Free/Dirty block details [ 466.043909][ T8540] EXT4-fs (loop7): free_blocks=66060288 [ 466.061809][ T8540] EXT4-fs (loop7): dirty_blocks=48 [ 466.067118][ T8540] EXT4-fs (loop7): Block reservation details [ 466.073181][ T8540] EXT4-fs (loop7): i_reserved_data_blocks=3 [ 466.387344][ T5600] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 467.027388][ T5600] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 467.121475][ T5600] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 467.312213][ T5600] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 467.541081][ T5600] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 468.263509][ T5600] usb 8-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 468.323499][ T5600] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 468.343892][ T5600] usb 8-1: config 0 descriptor?? [ 469.123419][ T8564] loop5: detected capacity change from 0 to 32768 [ 470.340972][ T8575] netlink: 4 bytes leftover after parsing attributes in process `syz.1.865'. [ 470.374324][ T8575] loop1: detected capacity change from 0 to 8 [ 471.026327][ T8500] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 471.957101][ T8500] EXT4-fs (loop7): This should not happen!! Data will be lost [ 471.957101][ T8500] [ 471.978613][ T8500] EXT4-fs (loop7): Total free blocks count 0 [ 471.984644][ T8500] EXT4-fs (loop7): Free/Dirty block details [ 473.649471][ T4227] usb 8-1: USB disconnect, device number 5 [ 474.026295][ T8500] EXT4-fs (loop7): free_blocks=66060288 [ 474.048423][ T8500] EXT4-fs (loop7): dirty_blocks=32 [ 474.060201][ T8500] EXT4-fs (loop7): Block reservation details [ 474.084041][ T8500] EXT4-fs (loop7): i_reserved_data_blocks=2 [ 475.945258][ T8610] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 476.686255][ T8583] loop7: detected capacity change from 0 to 32768 [ 478.671615][ T8647] loop7: detected capacity change from 0 to 2048 [ 479.971144][ T8647] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 479.999661][ T8644] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 480.036554][ T8644] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 2 with max blocks 32 with error 28 [ 480.049062][ T8644] EXT4-fs (loop7): This should not happen!! Data will be lost [ 480.049062][ T8644] [ 480.059302][ T8644] EXT4-fs (loop7): Total free blocks count 0 [ 480.065364][ T8644] EXT4-fs (loop7): Free/Dirty block details [ 480.071939][ T8644] EXT4-fs (loop7): free_blocks=66060288 [ 480.077958][ T8644] EXT4-fs (loop7): dirty_blocks=48 [ 480.083189][ T8644] EXT4-fs (loop7): Block reservation details [ 480.089345][ T8644] EXT4-fs (loop7): i_reserved_data_blocks=3 [ 480.377236][ T4388] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 480.757334][ T4388] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 480.846514][ T4388] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 481.548987][ T8655] loop5: detected capacity change from 0 to 32768 [ 481.613032][ T4388] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 481.653549][ T4388] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 481.724223][ T4388] usb 8-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 481.830167][ T8658] loop1: detected capacity change from 0 to 40427 [ 481.918344][ T4388] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 481.939583][ T8658] F2FS-fs (loop1): Fix alignment : done, start(4096) end(16896) block(12288) [ 481.949820][ T8658] F2FS-fs (loop1): invalid crc value [ 481.952079][ T4388] usb 8-1: config 0 descriptor?? [ 481.960604][ T8658] F2FS-fs (loop1): invalid crc value [ 481.965960][ T8658] F2FS-fs (loop1): Failed to get valid F2FS checkpoint [ 482.914985][ T4228] usb 8-1: USB disconnect, device number 6 [ 482.981084][ T8502] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 483.059915][ T8502] EXT4-fs (loop7): This should not happen!! Data will be lost [ 483.059915][ T8502] [ 483.097175][ T4845] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 483.377308][ T4845] usb 1-1: Using ep0 maxpacket: 32 [ 483.665368][ T8689] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 484.397458][ T4845] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 484.405789][ T4845] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 484.847947][ T4845] usb 1-1: config 0 has no interface number 0 [ 484.854213][ T4845] usb 1-1: config 0 interface 184 altsetting 7 endpoint 0x6 has invalid wMaxPacketSize 0 [ 484.864209][ T4845] usb 1-1: config 0 interface 184 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 486.092161][ T4845] usb 1-1: config 0 interface 184 has no altsetting 0 [ 486.167199][ T4845] usb 1-1: string descriptor 0 read error: -71 [ 486.173498][ T4845] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 486.197145][ T4845] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 486.218304][ T4845] usb 1-1: config 0 descriptor?? [ 486.247329][ T4845] usb 1-1: can't set config #0, error -71 [ 486.324974][ T4845] usb 1-1: USB disconnect, device number 10 [ 487.849045][ T8767] loop6: detected capacity change from 0 to 2048 [ 489.203152][ T8767] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 489.243887][ T8767] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 489.275806][ T8767] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 2 with max blocks 32 with error 28 [ 489.288285][ T8767] EXT4-fs (loop6): This should not happen!! Data will be lost [ 489.288285][ T8767] [ 489.298298][ T8767] EXT4-fs (loop6): Total free blocks count 0 [ 489.304386][ T8767] EXT4-fs (loop6): Free/Dirty block details [ 489.310414][ T8767] EXT4-fs (loop6): free_blocks=66060288 [ 489.328628][ T8767] EXT4-fs (loop6): dirty_blocks=48 [ 489.333881][ T8767] EXT4-fs (loop6): Block reservation details [ 489.339998][ T8767] EXT4-fs (loop6): i_reserved_data_blocks=3 [ 489.607261][ T4228] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 490.017388][ T4228] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 490.078556][ T4228] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 490.354395][ T4228] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 490.434959][ T4228] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 490.507162][ T4228] usb 7-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 490.516257][ T4228] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 490.664393][ T4228] usb 7-1: config 0 descriptor?? [ 491.176056][ T4194] ------------[ cut here ]------------ [ 491.182676][ T4194] WARNING: CPU: 1 PID: 4194 at net/bluetooth/hci_conn.c:443 hci_conn_timeout+0x24f/0x450 [ 491.193764][ T4194] Modules linked in: [ 491.197716][ T4194] CPU: 1 PID: 4194 Comm: kworker/u5:3 Not tainted syzkaller #0 [ 491.206696][ T4194] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 491.227597][ T4228] usb 7-1: USB disconnect, device number 4 [ 491.234418][ T4194] Workqueue: hci3 hci_conn_timeout [ 491.239647][ T4194] RIP: 0010:hci_conn_timeout+0x24f/0x450 [ 491.245321][ T4194] Code: 8b 8d e8 94 58 de f8 48 8b 35 75 2d ab 04 bf 08 00 00 00 48 89 da 5b 41 5c 41 5d 41 5e 41 5f 5d e9 26 00 6e f8 e8 a1 2a 99 f8 <0f> 0b e9 35 fe ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c dd fd [ 491.265232][ T4194] RSP: 0018:ffffc90002f8fc08 EFLAGS: 00010293 [ 491.271737][ T4194] RAX: ffffffff88dfe4ff RBX: ffff88807d650138 RCX: ffff888079231dc0 [ 491.279789][ T4194] RDX: 0000000000000000 RSI: 00000000ffffffff RDI: 0000000000000000 [ 491.287969][ T4194] RBP: 00000000ffffffff R08: ffff88807d650013 R09: 1ffff1100faca002 [ 491.295963][ T4194] R10: dffffc0000000000 R11: ffffed100faca003 R12: ffff8880257b3808 [ 491.304090][ T4194] R13: dffffc0000000000 R14: ffff88807d650000 R15: ffff88807d650010 [ 491.312086][ T4194] FS: 0000000000000000(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 491.321430][ T4194] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 491.328032][ T4194] CR2: 0000001b3011fff8 CR3: 000000002a99d000 CR4: 00000000003506e0 [ 491.335999][ T4194] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 491.343999][ T4194] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 491.352083][ T4194] Call Trace: [ 491.355363][ T4194] [ 491.358748][ T4194] process_one_work+0x867/0xff0 [ 491.363726][ T4194] ? worker_detach_from_pool+0x240/0x240 [ 491.369598][ T4194] ? lockdep_hardirqs_off+0x70/0x100 [ 491.374924][ T4194] ? _raw_spin_lock_irq+0xb7/0xf0 [ 491.380080][ T4194] ? _raw_spin_lock_irqsave+0x100/0x100 [ 491.385658][ T4194] ? wq_worker_running+0x97/0x170 [ 491.390873][ T4194] worker_thread+0xad7/0x12a0 [ 491.395621][ T4194] kthread+0x42e/0x520 [ 491.399866][ T4194] ? rcu_lock_release+0x20/0x20 [ 491.404753][ T4194] ? kthread_blkcg+0xd0/0xd0 [ 491.409417][ T4194] ret_from_fork+0x1f/0x30 [ 491.413956][ T4194] [ 491.416994][ T4194] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 491.424261][ T4194] CPU: 1 PID: 4194 Comm: kworker/u5:3 Not tainted syzkaller #0 [ 491.431816][ T4194] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 491.441872][ T4194] Workqueue: hci3 hci_conn_timeout [ 491.446992][ T4194] Call Trace: [ 491.450268][ T4194] [ 491.453200][ T4194] dump_stack_lvl+0x188/0x250 [ 491.457908][ T4194] ? show_regs_print_info+0x20/0x20 [ 491.463118][ T4194] ? load_image+0x410/0x410 [ 491.467641][ T4194] panic+0x2f8/0x850 [ 491.471560][ T4194] ? bpf_jit_dump+0xd0/0xd0 [ 491.476068][ T4194] ? ret_from_fork+0x1f/0x30 [ 491.480808][ T4194] ? hci_conn_timeout+0x24f/0x450 [ 491.485835][ T4194] __warn+0x248/0x2b0 [ 491.489816][ T4194] ? hci_conn_timeout+0x24f/0x450 [ 491.494839][ T4194] report_bug+0x1b9/0x2e0 [ 491.499264][ T4194] handle_bug+0x3a/0x70 [ 491.503427][ T4194] exc_invalid_op+0x16/0x40 [ 491.507959][ T4194] asm_exc_invalid_op+0x16/0x20 [ 491.512820][ T4194] RIP: 0010:hci_conn_timeout+0x24f/0x450 [ 491.518452][ T4194] Code: 8b 8d e8 94 58 de f8 48 8b 35 75 2d ab 04 bf 08 00 00 00 48 89 da 5b 41 5c 41 5d 41 5e 41 5f 5d e9 26 00 6e f8 e8 a1 2a 99 f8 <0f> 0b e9 35 fe ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c dd fd [ 491.538051][ T4194] RSP: 0018:ffffc90002f8fc08 EFLAGS: 00010293 [ 491.544116][ T4194] RAX: ffffffff88dfe4ff RBX: ffff88807d650138 RCX: ffff888079231dc0 [ 491.552085][ T4194] RDX: 0000000000000000 RSI: 00000000ffffffff RDI: 0000000000000000 [ 491.560050][ T4194] RBP: 00000000ffffffff R08: ffff88807d650013 R09: 1ffff1100faca002 [ 491.568020][ T4194] R10: dffffc0000000000 R11: ffffed100faca003 R12: ffff8880257b3808 [ 491.576007][ T4194] R13: dffffc0000000000 R14: ffff88807d650000 R15: ffff88807d650010 [ 491.584024][ T4194] ? hci_conn_timeout+0x24f/0x450 [ 491.589060][ T4194] ? hci_conn_timeout+0x24f/0x450 [ 491.594137][ T4194] process_one_work+0x867/0xff0 [ 491.599002][ T4194] ? worker_detach_from_pool+0x240/0x240 [ 491.604631][ T4194] ? lockdep_hardirqs_off+0x70/0x100 [ 491.609928][ T4194] ? _raw_spin_lock_irq+0xb7/0xf0 [ 491.614976][ T4194] ? _raw_spin_lock_irqsave+0x100/0x100 [ 491.620521][ T4194] ? wq_worker_running+0x97/0x170 [ 491.625558][ T4194] worker_thread+0xad7/0x12a0 [ 491.630307][ T4194] kthread+0x42e/0x520 [ 491.634389][ T4194] ? rcu_lock_release+0x20/0x20 [ 491.639250][ T4194] ? kthread_blkcg+0xd0/0xd0 [ 491.643830][ T4194] ret_from_fork+0x1f/0x30 [ 491.648247][ T4194] [ 491.651560][ T4194] Kernel Offset: disabled [ 491.664169][ T4194] Rebooting in 86400 seconds..