last executing test programs: 17.606323231s ago: executing program 3 (id=75): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f0000000040)) prlimit64(0x0, 0xe, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) getpid() setns(0xffffffffffffffff, 0x24020000) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r4, 0x560f, &(0x7f0000000040)={0x1, 0x4002, 0x2, 0x2, 0x3f000000, 0x0}) umount2(0x0, 0x2) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x1c, r5, 0x1, 0x70bd29, 0x25dfdbfe}, 0x1c}, 0x1, 0x0, 0x0, 0x200000b1}, 0x4) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f00000008c0)={'veth1_to_hsr\x00', &(0x7f0000006d00)=@ethtool_gstrings={0x1b, 0x8, 0x5, "c8b41d57c2"}}) 11.102544257s ago: executing program 1 (id=90): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x8, 0x6, &(0x7f0000000200)=ANY=[@ANYBLOB="1800008080b6"], 0x0, 0x7, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x3, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x4, 0x5, 0x4, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 9.722650367s ago: executing program 4 (id=93): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000180)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x482, &(0x7f0000000600)=0x0) io_submit(r5, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x7, r4, 0x0}]) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x0, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, 0x0}}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000900)="013d"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 9.626531469s ago: executing program 1 (id=94): syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00') syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') socket$tipc(0x1e, 0x2, 0x0) socket$tipc(0x1e, 0x2, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="01000000080010000400000008"], 0x50) socket$kcm(0x21, 0x2, 0x2) socket$rxrpc(0x21, 0x2, 0xa) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e20, @loopback}, {0x2, 0x4e26, @local}, {0x2, 0x4ea3, @empty}, 0x3c7, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7, 0x416, 0x800}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8], 0x1c}}, 0x24018807) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) 8.765142031s ago: executing program 1 (id=95): unshare(0x68040200) mmap(&(0x7f00002f4000/0x4000)=nil, 0x4000, 0x3, 0x8031, 0xffffffffffffffff, 0xfdffa000) socket$nl_netfilter(0x10, 0x3, 0xc) read$FUSE(0xffffffffffffffff, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) connect$can_bcm(r0, 0x0, 0x0) sendmsg$can_bcm(r0, &(0x7f0000001b00)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x38}, 0x1, 0x0, 0x0, 0xc080}, 0x11) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400ff0160291d000905", @ANYRES8, @ANYBLOB="79a9"], 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) 8.654292943s ago: executing program 4 (id=97): syz_mount_image$ocfs2(&(0x7f00000026c0), &(0x7f0000004780)='./file0\x00', 0x200000, &(0x7f0000000340)=ANY=[@ANYBLOB="6a6f75726e616c5f6173796e635f636f6d6d69742c636f686572656e63793d66756c6c2c6572726f72733d636f6e74696e75652c6865617274626561743d6e6f6e652c6572726f72733d636f6e74696e75652c6e6f696e74722c67727071756f74612c001796fa694353e3807803df5ea6fd4d6e6a2613d336eb62b863dcd89e37b45f8bd04199a14c48b3e553e035ab300ba3c60c27682a8ab5656969d829535c0862f6e3a35f15fe4d50c0d5c74631344625d6224c436474bb101ff47a14c51e342ca291c09c35d9d31b06b6b86cb9dccae387b5f1e7c5e1d445d52845a3fa4c77234ea9d37c8a277c85e69a85cc6ffeb225bebbca91b569b80ee303c9a21c58db5d96fb87f1713e0e9b896e37becae2e7a978259a0847e9fb08dcb8b9f84f616463da2507db1b3489769e99"], 0x1, 0x4703, &(0x7f0000004800)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$FITRIM(r0, 0x40046f01, &(0x7f00000002c0)={0x7fffffff, 0x5, 0x401}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r1 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ftruncate(r1, 0x2007ffc) sendfile(r1, r1, 0x0, 0x800000009) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x40942, 0x0) r3 = open(&(0x7f0000000080)='./bus\x00', 0x181102, 0x0) ftruncate(r3, 0x2007ffb) syz_usb_connect$hid(0x3, 0x36, 0x0, 0x0) copy_file_range(r2, 0x0, r1, 0x0, 0xfffffbffa003e458, 0x100000000000000) 8.15832985s ago: executing program 2 (id=99): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = getpgrp(r1) ioprio_get$pid(0x2, r4) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x14, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$LINK_DETACH(0x22, 0x0, 0x0) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000300), 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, 0x0, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000100), 0x10}, 0x94) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0xffffffffffffffff, 0x70bdab, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x37c13, 0x7}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ICV_LEN={0x5, 0x3, 0x9}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x20040000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r6, 0x702, 0xe, 0x700, &(0x7f0000000540)="e460334470b8d480eb00c15286dd", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000000)={0x800004db, 0x1, 0x3, 0xa, 0x18, "10162dd7912fffff1a8a00004f6708080d0004"}) ioctl$HCIINQUIRY(r0, 0x400448ca, 0x0) ioctl$sock_bt_hci(r0, 0x400448e4, 0x0) 7.260740853s ago: executing program 2 (id=101): timer_create(0xfffffffffffffffa, 0x0, &(0x7f0000000000)) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x88fd537e5e114b6f, 0x12, r2, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000002c0)={0x0, 0x0, @pic={0x2e, 0xc0, 0x7, 0x6, 0xfb, 0x2, 0xf, 0x4, 0xfb, 0xa, 0x67, 0x58, 0xa0, 0x2, 0x6, 0x2}}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x18addbae, 0xfff, 0x0, 0x180, 0x4, 0x14, 0xf1, 0x0, 0x7fffffffffffe, 0x7, 0x5, 0x3, 0xfffffffffffffffe, 0x45, 0x4, 0xbdb], 0xffff1000, 0x1c4213}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 6.238526838s ago: executing program 2 (id=102): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'geneve1\x00', 0x5}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000700)={[{@noinit_itable}, {@discard}, {@data_err_ignore}, {@max_batch_time={'max_batch_time', 0x3d, 0x6}}, {@journal_dev={'journal_dev', 0x3d, 0x6}}, {@nolazytime}, {@nobarrier}]}, 0x6, 0x62e, &(0x7f0000001140)="$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") quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f0000000040)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000100)={0x200000000000000, 0x8, 0x80000001, 0x6, 0x2, 0x800, 0x7f, 0x0, 0xfc}) 5.385412811s ago: executing program 2 (id=103): syz_read_part_table(0x40a2, &(0x7f0000000000)="$eJzsz89JA1EQB+Bfsn8jQhQU7MGL2oU3D6YBa/DuyRYsIsQCBMEu7MEqnqzZVTx4DIp832Fn3swwy4TfVabk9fK0+96qx3iQ9M9TaVNKyTy52RwOIbl/2ra6fhxvX75WnJ2n2etn2U9ym2ooXT8kF/V2/Wq9y9MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIC/4yTJMkm5G16z+fBtPrt1Zh9xkaTLVZvp9TbNLFKNWZ8qzTB+lDwe//jD+ZSs1js4BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD439r0Scrynf05OEEghoIAOohJ9GR1tmENXmzBIuzBWixD8OJCArukgL29dxrmw8Cf2+9/WItj0lJ6POQ3jvfUXjzefSNt3jhv8XNJajndnrm+dvwFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABY2IEDAQAAAAAg/9dGqKqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqsIOHJAAAAAACPr/uh2BAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACwUAAAAP//JLsnIw==") syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="040e00fc4020"], 0x7) 5.238294413s ago: executing program 4 (id=104): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x8, 0x6, &(0x7f0000000200)=ANY=[@ANYBLOB="1800008080b6"], 0x0, 0x7, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x3, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x4, 0x5, 0x4, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 5.123383085s ago: executing program 1 (id=105): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'geneve1\x00', 0x5}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000700)={[{@noinit_itable}, {@discard}, {@data_err_ignore}, {@max_batch_time={'max_batch_time', 0x3d, 0x6}}, {@journal_dev={'journal_dev', 0x3d, 0x6}}, {@nolazytime}, {@nobarrier}]}, 0x6, 0x62e, &(0x7f0000001140)="$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") quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f0000000040)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000100)={0x200000000000000, 0x8, 0x80000001, 0x6, 0x2, 0x800, 0x7f, 0x0, 0xfc}) 4.80236185s ago: executing program 0 (id=106): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000001b40)='./file0\x00', 0x208008de, &(0x7f0000000100)=ANY=[@ANYRES64, @ANYRES16, @ANYRES8, @ANYRESHEX], 0x1, 0x1505, &(0x7f0000002840)="$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") r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, r4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x800) recvmmsg(r5, &(0x7f0000007700), 0x318, 0xfc0, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='net/vlan/vlan0\x00') syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r6, 0x8982, &(0x7f0000002800)={0x1, 'vlan0\x00'}) process_madvise(0xffffffffffffffff, 0x0, 0x0, 0x15, 0x0) pwritev2(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0x5412, 0xf2, 0x9) 4.549022383s ago: executing program 3 (id=107): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000180)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x482, &(0x7f0000000600)=0x0) io_submit(r5, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x7, r4, 0x0}]) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x0, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, 0x0}}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000900)="013d"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 3.901632433s ago: executing program 1 (id=108): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080), 0x4) connect$inet6(r0, 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x3) write$binfmt_elf64(r3, &(0x7f0000000180)=ANY=[], 0x78) sendfile(r2, r3, &(0x7f00000001c0), 0x8) fcntl$addseals(r3, 0x409, 0x8) close_range(r1, 0xffffffffffffffff, 0x0) 3.729192905s ago: executing program 4 (id=109): r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x482, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000200)={0x6, 0xca, 0xfffe0000, 0x40000009, 0x11, "7f04371e6367f3a18d000100000000000038f6"}) capset(&(0x7f0000000140)={0x20080522}, &(0x7f0000000040)={0x8001, 0x10ffff, 0x3, 0x0, 0x0, 0x1fffc}) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000040)=0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0x200, 0x15, "00000000000700000000fffe00"}) r1 = syz_open_pts(r0, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x400000000000, 0x8330, 0xffffffffffffffff, 0x20000000000800, 0x0, 0x2000000000000004, 0xfffffffffffffffe}, 0x0, &(0x7f00000001c0)={0x1f, 0x0, 0xc3aa, 0x0, 0x0, 0x4, 0x6ac}, 0x0, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000240)=0x1) 3.728576455s ago: executing program 3 (id=110): syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00') syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') socket$tipc(0x1e, 0x2, 0x0) socket$tipc(0x1e, 0x2, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="01000000080010000400000008"], 0x50) socket$kcm(0x21, 0x2, 0x2) socket$rxrpc(0x21, 0x2, 0xa) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e20, @loopback}, {0x2, 0x4e26, @local}, {0x2, 0x4ea3, @empty}, 0x3c7, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7, 0x416, 0x800}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8], 0x1c}}, 0x24018807) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) 3.622333997s ago: executing program 4 (id=111): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = getpgrp(r1) ioprio_get$pid(0x2, r4) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x14, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$LINK_DETACH(0x22, 0x0, 0x0) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000300), 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, 0x0, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000100), 0x10}, 0x94) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0xffffffffffffffff, 0x70bdab, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x37c13, 0x7}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ICV_LEN={0x5, 0x3, 0x9}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x20040000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r6, 0x702, 0xe, 0x700, &(0x7f0000000540)="e460334470b8d480eb00c15286dd", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000000)={0x800004db, 0x1, 0x3, 0xa, 0x18, "10162dd7912fffff1a8a00004f6708080d0004"}) ioctl$HCIINQUIRY(r0, 0x400448ca, 0x0) ioctl$sock_bt_hci(r0, 0x400448e4, 0x0) 3.495588949s ago: executing program 1 (id=112): request_key(0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() ioprio_set$pid(0x2, 0x0, 0x4004) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x2501, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x37) 3.476338779s ago: executing program 0 (id=113): timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x88fd537e5e114b6f, 0x12, r2, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000002c0)={0x0, 0x0, @pic={0x2e, 0xc0, 0x7, 0x6, 0xfb, 0x2, 0xf, 0x4, 0xfb, 0xa, 0x67, 0x58, 0xa0, 0x2, 0x6, 0x2}}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x18addbae, 0xfff, 0x0, 0x180, 0x4, 0x14, 0xf1, 0x0, 0x7fffffffffffe, 0x7, 0x5, 0x3, 0xfffffffffffffffe, 0x45, 0x4, 0xbdb], 0xffff1000, 0x1c4213}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2.742139349s ago: executing program 2 (id=114): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'geneve1\x00', 0x5}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000700)={[{@noinit_itable}, {@discard}, {@data_err_ignore}, {@max_batch_time={'max_batch_time', 0x3d, 0x6}}, {@journal_dev={'journal_dev', 0x3d, 0x6}}, {@nolazytime}, {@nobarrier}]}, 0x6, 0x62e, &(0x7f0000001140)="$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") quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f0000000040)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000100)={0x200000000000000, 0x8, 0x80000001, 0x6, 0x2, 0x800, 0x7f, 0x0, 0xfc}) 2.668331541s ago: executing program 3 (id=115): unshare(0x68040200) mmap(&(0x7f00002f4000/0x4000)=nil, 0x4000, 0x3, 0x8031, 0xffffffffffffffff, 0xfdffa000) socket$nl_netfilter(0x10, 0x3, 0xc) read$FUSE(0xffffffffffffffff, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) connect$can_bcm(r0, 0x0, 0x0) sendmsg$can_bcm(r0, &(0x7f0000001b00)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x38}, 0x1, 0x0, 0x0, 0xc080}, 0x11) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400ff0160291d000905", @ANYRES8, @ANYBLOB="79a9"], 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) 2.558491623s ago: executing program 0 (id=116): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_procfs(r0, &(0x7f0000000380)='net/udp\x00') getdents(r1, 0xffffffffffffffff, 0x5a) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x168) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], 0x0, 0x1) 2.558209213s ago: executing program 4 (id=117): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f0000000040)) prlimit64(0x0, 0xe, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) getpid() setns(0xffffffffffffffff, 0x24020000) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r4, 0x560f, &(0x7f0000000040)={0x1, 0x4002, 0x2, 0x2, 0x3f000000, 0x0}) umount2(0x0, 0x2) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x1c, r5, 0x1, 0x70bd29, 0x25dfdbfe}, 0x1c}, 0x1, 0x0, 0x0, 0x200000b1}, 0x4) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f00000008c0)={'veth1_to_hsr\x00', &(0x7f0000006d00)=@ethtool_gstrings={0x1b, 0x8, 0x5, "c8b41d57c2"}}) 1.919795422s ago: executing program 2 (id=118): syz_mount_image$ocfs2(&(0x7f00000026c0), &(0x7f0000004780)='./file0\x00', 0x200000, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x1, 0x4703, &(0x7f0000004800)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$FITRIM(r0, 0x40046f01, &(0x7f00000002c0)={0x7fffffff, 0x5, 0x401}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r1 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ftruncate(r1, 0x2007ffc) sendfile(r1, r1, 0x0, 0x800000009) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x40942, 0x0) r3 = open(&(0x7f0000000080)='./bus\x00', 0x181102, 0x0) ftruncate(r3, 0x2007ffb) syz_usb_connect$hid(0x3, 0x36, 0x0, 0x0) copy_file_range(r2, 0x0, r1, 0x0, 0xfffffbffa003e458, 0x100000000000000) 1.662498416s ago: executing program 0 (id=119): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x8, 0x6, &(0x7f0000000200)=ANY=[@ANYBLOB="1800008080b6"], 0x0, 0x7, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x37, [0xfffffff8, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x4, 0x25cd, 0x1, 0xb4, 0xa, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x1, 0x8, 0xd, 0x0, 0x12a3, 0x6, 0x1, 0x2, 0x6, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x10000, 0x0, 0x91, 0x4, 0x4, 0x16, 0x8, 0x5, 0x401, 0xfffffff5, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x9, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0xc66, 0xa8a9, 0x20000073, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x809, 0x4, 0xa7, 0x1000, 0x0, 0x200b398, 0x400080, 0x1, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x400, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00060, 0x5, 0x6, 0x2, 0x1, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x1, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x95, 0x7fffffff, 0x4, 0xfffffff9, 0x1, 0x1000, 0xfffff801, 0x5], [0x2, 0xfffffffe, 0xffff, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x8d3, 0x200006, 0x8, 0x400, 0x2, 0x400, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x8000003, 0x4e, 0x9, 0x3, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x3e55, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0xd, 0x7, 0x601, 0x101, 0xdd80, 0x60a0, 0x7f, 0x9d26, 0x10000, 0x1, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbfc, 0x8, 0x5, 0x7f, 0x55, 0x40, 0xff, 0x1005, 0x1, 0x7, 0x1e, 0x9, 0x81, 0x3, 0x9d82, 0xd, 0xfffffff7, 0x8, 0x140f2, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0xffffffff, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x1, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x6, 0x8, 0x14000, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x3, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x4, 0x5, 0x4, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 1.33448912s ago: executing program 0 (id=120): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'geneve1\x00', 0x5}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000700)={[{@noinit_itable}, {@discard}, {@data_err_ignore}, {@max_batch_time={'max_batch_time', 0x3d, 0x6}}, {@journal_dev={'journal_dev', 0x3d, 0x6}}, {@nolazytime}, {@nobarrier}]}, 0x6, 0x62e, &(0x7f0000001140)="$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") quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f0000000040)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000100)={0x200000000000000, 0x8, 0x80000001, 0x6, 0x2, 0x800, 0x7f, 0x0, 0xfc}) 391.515844ms ago: executing program 0 (id=121): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000180)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x482, &(0x7f0000000600)=0x0) io_submit(r5, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x7, r4, 0x0}]) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x0, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, 0x0}}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000900)="013d"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 217.522767ms ago: executing program 3 (id=122): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080), 0x4) r1 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x3) write$binfmt_elf64(r3, &(0x7f0000000180)=ANY=[], 0x78) sendfile(r2, r3, &(0x7f00000001c0), 0x8) fcntl$addseals(r3, 0x409, 0x8) close_range(r1, 0xffffffffffffffff, 0x0) 0s ago: executing program 3 (id=123): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) ioctl$TCSETSW(r0, 0x5403, 0x0) capset(&(0x7f0000000140)={0x20080522}, &(0x7f0000000040)={0x8001, 0x10ffff, 0x3, 0x0, 0x0, 0x1fffc}) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000040)=0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0x200, 0x15, "00000000000700000000fffe00"}) r1 = syz_open_pts(r0, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x400000000000, 0x8330, 0xffffffffffffffff, 0x20000000000800, 0x0, 0x2000000000000004, 0xfffffffffffffffe}, 0x0, &(0x7f00000001c0)={0x1f, 0x0, 0xc3aa, 0x0, 0x0, 0x4, 0x6ac}, 0x0, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000240)=0x1) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.96' (ED25519) to the list of known hosts. [ 61.973056][ T4176] cgroup: Unknown subsys name 'net' [ 62.123512][ T4176] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 63.587695][ T4176] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 65.063945][ T4192] chnl_net:caif_netlink_parms(): no params data found [ 65.097357][ T4188] chnl_net:caif_netlink_parms(): no params data found [ 65.174282][ T4191] chnl_net:caif_netlink_parms(): no params data found [ 65.183726][ T4189] chnl_net:caif_netlink_parms(): no params data found [ 65.243396][ T4192] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.250706][ T4192] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.259437][ T4192] device bridge_slave_0 entered promiscuous mode [ 65.273449][ T4192] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.280599][ T4192] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.288836][ T4192] device bridge_slave_1 entered promiscuous mode [ 65.343948][ T4190] chnl_net:caif_netlink_parms(): no params data found [ 65.364366][ T4188] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.371598][ T4188] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.380057][ T4188] device bridge_slave_0 entered promiscuous mode [ 65.401750][ T4192] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.411185][ T4188] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.419567][ T4188] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.428027][ T4188] device bridge_slave_1 entered promiscuous mode [ 65.463090][ T4192] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.485007][ T4189] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.492367][ T4189] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.500889][ T4189] device bridge_slave_0 entered promiscuous mode [ 65.515067][ T4189] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.522218][ T4189] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.530627][ T4189] device bridge_slave_1 entered promiscuous mode [ 65.561539][ T4191] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.569011][ T4191] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.576894][ T4191] device bridge_slave_0 entered promiscuous mode [ 65.591579][ T4191] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.598706][ T4191] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.606669][ T4191] device bridge_slave_1 entered promiscuous mode [ 65.617312][ T4192] team0: Port device team_slave_0 added [ 65.624991][ T4188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.663524][ T4192] team0: Port device team_slave_1 added [ 65.671250][ T4188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.688187][ T4189] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.706024][ T4189] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.729316][ T4191] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.754271][ T4188] team0: Port device team_slave_0 added [ 65.760908][ T4190] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.769028][ T4190] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.776932][ T4190] device bridge_slave_0 entered promiscuous mode [ 65.793582][ T4191] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.803858][ T4192] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.810902][ T4192] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.836825][ T4192] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.856956][ T4188] team0: Port device team_slave_1 added [ 65.863424][ T4190] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.870987][ T4190] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.879470][ T4190] device bridge_slave_1 entered promiscuous mode [ 65.893592][ T4192] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.900873][ T4192] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.926933][ T4192] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.940710][ T4189] team0: Port device team_slave_0 added [ 65.979840][ T4189] team0: Port device team_slave_1 added [ 65.994037][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.001378][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.027746][ T4188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.041727][ T4191] team0: Port device team_slave_0 added [ 66.062758][ T4190] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.074326][ T4190] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.084215][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.091479][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.117795][ T4188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.135537][ T4191] team0: Port device team_slave_1 added [ 66.158705][ T4192] device hsr_slave_0 entered promiscuous mode [ 66.165459][ T4192] device hsr_slave_1 entered promiscuous mode [ 66.207661][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.214649][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.241264][ T4189] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.267421][ T4190] team0: Port device team_slave_0 added [ 66.288004][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.295004][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.321248][ T4189] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.346684][ T4190] team0: Port device team_slave_1 added [ 66.353669][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.361234][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.387992][ T4191] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.414486][ T4188] device hsr_slave_0 entered promiscuous mode [ 66.421659][ T4188] device hsr_slave_1 entered promiscuous mode [ 66.428449][ T4188] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 66.436411][ T4188] Cannot create hsr debugfs directory [ 66.450968][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.458140][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.485440][ T4191] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.521951][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.529196][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.555776][ T4190] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.594432][ T4189] device hsr_slave_0 entered promiscuous mode [ 66.601393][ T4189] device hsr_slave_1 entered promiscuous mode [ 66.608453][ T4189] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 66.616142][ T4189] Cannot create hsr debugfs directory [ 66.622497][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.629659][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.655845][ T4190] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.694135][ T4191] device hsr_slave_0 entered promiscuous mode [ 66.701233][ T4191] device hsr_slave_1 entered promiscuous mode [ 66.712149][ T4191] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 66.720600][ T4194] Bluetooth: hci0: command 0x0409 tx timeout [ 66.727607][ T4194] Bluetooth: hci1: command 0x0409 tx timeout [ 66.733919][ T4191] Cannot create hsr debugfs directory [ 66.807395][ T4194] Bluetooth: hci2: command 0x0409 tx timeout [ 66.813536][ T4194] Bluetooth: hci3: command 0x0409 tx timeout [ 66.820091][ T4194] Bluetooth: hci4: command 0x0409 tx timeout [ 66.876849][ T4190] device hsr_slave_0 entered promiscuous mode [ 66.884277][ T4190] device hsr_slave_1 entered promiscuous mode [ 66.891393][ T4190] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 66.899504][ T4190] Cannot create hsr debugfs directory [ 67.089110][ T4192] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 67.112860][ T4192] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 67.135261][ T4192] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 67.145805][ T4192] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 67.216753][ T4189] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 67.230008][ T4189] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 67.244089][ T4189] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 67.262719][ T4189] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 67.307035][ T4188] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 67.329169][ T4188] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 67.359287][ T4188] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 67.372338][ T4188] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 67.421431][ T4192] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.439783][ T4191] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 67.450245][ T4191] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 67.460035][ T4191] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 67.470152][ T4191] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 67.526283][ T4192] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.544065][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 67.553710][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 67.585941][ T4189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.604709][ T4233] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 67.614873][ T4233] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 67.624312][ T4233] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.631641][ T4233] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.641887][ T4233] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 67.651045][ T4233] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 67.659744][ T4233] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.667015][ T4233] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.675065][ T4233] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 67.687846][ T4233] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 67.696589][ T4233] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 67.708879][ T4190] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 67.729627][ T4189] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.740562][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 67.749029][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 67.761986][ T4190] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 67.773875][ T4188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.786984][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 67.795999][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 67.804839][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.811979][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.820555][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 67.830144][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 67.839321][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 67.847893][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 67.861663][ T4190] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 67.873416][ T4190] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 67.891761][ T4233] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 67.901153][ T4233] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 67.910134][ T4233] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.917274][ T4233] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.925808][ T4233] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 67.948246][ T4233] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 67.957712][ T4233] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 67.966433][ T4233] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 67.975774][ T4233] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 67.986271][ T4233] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 67.995288][ T4233] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 68.017879][ T4192] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 68.032701][ T4188] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.040571][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 68.051830][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 68.060904][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 68.080744][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 68.091622][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 68.100609][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 68.111510][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 68.121089][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 68.135724][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 68.145231][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 68.154528][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.161693][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.183442][ T4189] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 68.194488][ T4189] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 68.209439][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 68.218971][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 68.228033][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 68.243622][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 68.252342][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 68.280240][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 68.302393][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 68.328848][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 68.344431][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.351593][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.415017][ T4191] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.427570][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 68.448083][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 68.496444][ T4190] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.519378][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 68.528745][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 68.542445][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 68.552501][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 68.562107][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 68.573888][ T4191] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.589510][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 68.600592][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 68.641398][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 68.650592][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 68.659664][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 68.669394][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 68.678139][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.685197][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.693207][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 68.705169][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 68.713983][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.721300][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.731090][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 68.740625][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 68.750136][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 68.759069][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 68.767829][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 68.776248][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 68.784011][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 68.791601][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 68.799906][ T2304] Bluetooth: hci1: command 0x041b tx timeout [ 68.807316][ T2304] Bluetooth: hci0: command 0x041b tx timeout [ 68.823627][ T4192] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.836183][ T4190] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.869219][ T4188] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 68.877332][ T2304] Bluetooth: hci4: command 0x041b tx timeout [ 68.883770][ T2304] Bluetooth: hci3: command 0x041b tx timeout [ 68.890694][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 68.903785][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 68.908746][ T2304] Bluetooth: hci2: command 0x041b tx timeout [ 68.912523][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 68.928526][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 68.943810][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 68.952874][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 68.963108][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 68.972116][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 68.981710][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 68.990988][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 69.004034][ T4189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.054224][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 69.064718][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 69.087648][ T4240] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.094937][ T4240] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.116171][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 69.125220][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 69.141785][ T4240] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.148976][ T4240] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.163455][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 69.173027][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 69.182178][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 69.191534][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 69.201102][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 69.212684][ T4191] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 69.231458][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 69.248773][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 69.306055][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 69.328370][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 69.347917][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 69.362212][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 69.374522][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 69.398395][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 69.414997][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 69.435630][ T4190] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 69.448031][ T4190] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 69.476113][ T4189] device veth0_vlan entered promiscuous mode [ 69.488217][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 69.500992][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 69.511078][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 69.522951][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 69.532331][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 69.541076][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 69.550069][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 69.562501][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 69.572637][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 69.585694][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 69.623048][ T4188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.636059][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 69.645061][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 69.654147][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 69.662024][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 69.670645][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 69.679787][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 69.698227][ T4192] device veth0_vlan entered promiscuous mode [ 69.706309][ T4191] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.727186][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 69.736145][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 69.761331][ T4189] device veth1_vlan entered promiscuous mode [ 69.775412][ T4192] device veth1_vlan entered promiscuous mode [ 69.790922][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 69.800532][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 69.810359][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 69.819640][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 69.893744][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 69.906448][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 69.915195][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 69.925169][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 69.934596][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 69.944060][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 69.953694][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 69.963160][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 69.972763][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 69.981761][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 69.995557][ T4188] device veth0_vlan entered promiscuous mode [ 70.007001][ T4192] device veth0_macvtap entered promiscuous mode [ 70.017734][ T4189] device veth0_macvtap entered promiscuous mode [ 70.036132][ T4189] device veth1_macvtap entered promiscuous mode [ 70.047040][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 70.055141][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 70.065137][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 70.073744][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 70.084999][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 70.093308][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 70.101327][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 70.116819][ T4188] device veth1_vlan entered promiscuous mode [ 70.124645][ T4191] device veth0_vlan entered promiscuous mode [ 70.146318][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.155808][ T4192] device veth1_macvtap entered promiscuous mode [ 70.176899][ T4190] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.187662][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 70.195799][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 70.205129][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 70.214151][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 70.222588][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 70.232848][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 70.242903][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 70.255074][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.268160][ T4191] device veth1_vlan entered promiscuous mode [ 70.286068][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 70.294787][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 70.303806][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 70.313553][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 70.330315][ T4189] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.345545][ T4189] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.354467][ T4189] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.363821][ T4189] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.389798][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.402571][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.416054][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.437408][ T4233] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 70.446707][ T4233] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 70.456758][ T4233] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 70.466038][ T4233] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 70.481952][ T4233] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 70.490813][ T4233] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 70.501531][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.512488][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.524744][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.539555][ T4191] device veth0_macvtap entered promiscuous mode [ 70.557814][ T4188] device veth0_macvtap entered promiscuous mode [ 70.567567][ T4191] device veth1_macvtap entered promiscuous mode [ 70.574838][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 70.587741][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 70.595792][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 70.604699][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 70.626569][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 70.639853][ T4192] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.649400][ T4192] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.658744][ T4192] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.668173][ T4192] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.685898][ T4188] device veth1_macvtap entered promiscuous mode [ 70.708534][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 70.716640][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 70.725957][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 70.776903][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.787925][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.799256][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.810002][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.822952][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.834295][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 70.843103][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 70.852339][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 70.862285][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 70.871363][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 70.880239][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 70.888032][ T4198] Bluetooth: hci0: command 0x040f tx timeout [ 70.894240][ T4198] Bluetooth: hci1: command 0x040f tx timeout [ 70.907461][ T4190] device veth0_vlan entered promiscuous mode [ 70.940006][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.954613][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.964964][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.976058][ T4267] Bluetooth: hci2: command 0x040f tx timeout [ 70.982407][ T4267] Bluetooth: hci3: command 0x040f tx timeout [ 70.988558][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.998833][ T4267] Bluetooth: hci4: command 0x040f tx timeout [ 71.006263][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.020109][ T4190] device veth1_vlan entered promiscuous mode [ 71.031588][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.043640][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.053850][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.066164][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.076372][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.087346][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.099097][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.121633][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 71.130247][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 71.139928][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 71.149597][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 71.158581][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 71.173906][ T4191] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.186001][ T4191] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.196120][ T4191] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.206481][ T4191] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.224109][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.235109][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.245240][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.255756][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.266025][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.276796][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.291733][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.322760][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 71.332030][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 71.342048][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 71.354724][ T4233] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.355440][ T4188] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.369655][ T4233] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.380767][ T4188] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.382618][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.392846][ T4188] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.407122][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.419043][ T4188] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.461875][ T4233] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 71.498337][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.525247][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.559124][ T4233] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 71.570029][ T4233] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 71.582996][ T4233] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 71.605066][ T4190] device veth0_macvtap entered promiscuous mode [ 71.648578][ T4233] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.658513][ T4233] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.671371][ T4190] device veth1_macvtap entered promiscuous mode [ 71.678439][ T4258] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.686289][ T4258] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.698173][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 71.709441][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 71.717958][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 71.729774][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 71.770460][ T4240] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.798104][ T4240] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.821891][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 71.839147][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.858674][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.874017][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.884557][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.901309][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.912268][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.923700][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.934805][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.947500][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.967589][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 71.976400][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 71.976874][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.992727][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.011114][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.025778][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.057342][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 72.084264][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.116871][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.138722][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.155821][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.166822][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.183589][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.194209][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.211869][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.223938][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.243209][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 72.253963][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 72.271802][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 72.291524][ T4190] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.302274][ T4190] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.311606][ T4190] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.322583][ T4190] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.334209][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.372702][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.394361][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 72.581856][ T4277] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 72.607213][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.615095][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.711085][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 72.735869][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.783575][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.821937][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 72.887524][ T4271] loop0: detected capacity change from 0 to 32768 [ 72.912125][ T4271] ======================================================= [ 72.912125][ T4271] WARNING: The mand mount option has been deprecated and [ 72.912125][ T4271] and is ignored by this kernel. Remove the mand [ 72.912125][ T4271] option from the mount to silence this warning. [ 72.912125][ T4271] ======================================================= [ 72.958490][ T4235] Bluetooth: hci1: command 0x0419 tx timeout [ 73.138901][ T4235] Bluetooth: hci0: command 0x0419 tx timeout [ 73.149826][ T2304] Bluetooth: hci4: command 0x0419 tx timeout [ 73.156424][ T2304] Bluetooth: hci3: command 0x0419 tx timeout [ 73.163497][ T2304] Bluetooth: hci2: command 0x0419 tx timeout [ 73.189137][ T4271] ocfs2: Slot 0 on device (7,0) was already allocated to this node! [ 73.217579][ T4268] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 74.906688][ T4295] sched: RT throttling activated [ 74.950372][ T4271] JBD2: Ignoring recovery information on journal [ 75.137182][ T4299] loop2: detected capacity change from 0 to 1024 [ 75.327717][ T4268] usb 4-1: config 0 interface 0 altsetting 255 has an invalid endpoint with address 0xFF, skipping [ 75.434955][ T4268] usb 4-1: config 0 interface 0 has no altsetting 0 [ 75.737881][ T4268] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 75.852808][ T4268] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 76.413592][ T4304] loop1: detected capacity change from 0 to 1024 [ 76.593045][ T4299] EXT4-fs error (device loop2): ext4_map_blocks:741: inode #3: block 1: comm syz.2.3: lblock 1 mapped to illegal pblock 1 (length 1) [ 76.609358][ T4299] Quota error (device loop2): write_blk: dquota write failed [ 76.616990][ T4299] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 76.627507][ T4299] EXT4-fs error (device loop2): ext4_acquire_dquot:6236: comm syz.2.3: Failed to acquire dquot type 0 [ 76.653641][ T4299] EXT4-fs error (device loop2): ext4_free_blocks:6231: comm syz.2.3: Freeing blocks not in datazone - block = 0, count = 4096 [ 76.675362][ T4299] EXT4-fs error (device loop2): ext4_read_inode_bitmap:140: comm syz.2.3: Invalid inode bitmap blk 0 in block_group 0 [ 76.693078][ T4299] EXT4-fs error (device loop2) in ext4_free_inode:362: Corrupt filesystem [ 76.703108][ T4299] EXT4-fs (loop2): 1 orphan inode deleted [ 76.709034][ T4299] EXT4-fs (loop2): mounted filesystem without journal. Opts: ; noinit_itable,discard,data_err=ignore,max_batch_time=0x0000000000000006,journal_dev=0x0000000000000006,nolazytime,nobarrier,,errors=continue. Quota mode: writeback. [ 76.862196][ T4268] usb 4-1: Product: syz [ 77.044871][ T4268] usb 4-1: Manufacturer: syz [ 77.074024][ T4268] usb 4-1: SerialNumber: syz [ 77.092825][ T4271] JBD2: recovery failed [ 77.097040][ T4271] (syz.0.1,4271,1):ocfs2_journal_load:1105 ERROR: Failed to load journal! [ 77.109181][ T4268] usb 4-1: config 0 descriptor?? [ 77.128088][ T4271] (syz.0.1,4271,1):ocfs2_check_volume:2437 ERROR: ocfs2 journal load failed! -5 [ 77.157175][ T4271] (syz.0.1,4271,1):ocfs2_check_volume:2493 ERROR: status = -5 [ 77.208987][ T4268] usb 4-1: can't set config #0, error -71 [ 77.215790][ T4271] (syz.0.1,4271,1):ocfs2_mount_volume:1824 ERROR: status = -5 [ 77.246875][ T4268] usb 4-1: USB disconnect, device number 2 [ 77.263108][ T4271] (syz.0.1,4271,1):ocfs2_fill_super:1177 ERROR: status = -5 [ 77.596917][ T4304] EXT4-fs error (device loop1): ext4_map_blocks:741: inode #3: block 1: comm syz.1.8: lblock 1 mapped to illegal pblock 1 (length 1) [ 77.612051][ T4304] Quota error (device loop1): write_blk: dquota write failed [ 77.619574][ T4304] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 77.629693][ T4304] EXT4-fs error (device loop1): ext4_acquire_dquot:6236: comm syz.1.8: Failed to acquire dquot type 0 [ 77.645184][ T4304] EXT4-fs error (device loop1): ext4_free_blocks:6231: comm syz.1.8: Freeing blocks not in datazone - block = 0, count = 4096 [ 77.659181][ T4304] EXT4-fs error (device loop1): ext4_read_inode_bitmap:140: comm syz.1.8: Invalid inode bitmap blk 0 in block_group 0 [ 77.672493][ T4304] EXT4-fs error (device loop1) in ext4_free_inode:362: Corrupt filesystem [ 77.681987][ T4304] EXT4-fs (loop1): 1 orphan inode deleted [ 77.687873][ T4304] EXT4-fs (loop1): mounted filesystem without journal. Opts: ; noinit_itable,discard,data_err=ignore,max_batch_time=0x0000000000000006,journal_dev=0x0000000000000006,nolazytime,nobarrier,,errors=continue. Quota mode: writeback. [ 78.277322][ T4310] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 79.015770][ T4329] loop0: detected capacity change from 0 to 32768 [ 79.056330][ T4331] loop3: detected capacity change from 0 to 32768 [ 79.139775][ T4331] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.14 (4331) [ 79.185348][ T4326] loop2: detected capacity change from 0 to 32768 [ 79.314044][ T4326] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.15 (4326) [ 79.316440][ T4331] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 79.399550][ T4326] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 79.451325][ T4326] BTRFS info (device loop2): setting nodatacow, compression disabled [ 79.479953][ T4331] BTRFS info (device loop3): force clearing of disk cache [ 79.498469][ T4326] BTRFS info (device loop2): enabling disk space caching [ 79.534769][ T4326] BTRFS warning (device loop2): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 79.567355][ T4331] BTRFS info (device loop3): enabling auto defrag [ 79.584147][ T4331] BTRFS info (device loop3): max_inline at 0 [ 79.617926][ T4326] BTRFS info (device loop2): trying to use backup root at mount time [ 79.634264][ T4331] BTRFS info (device loop3): enabling disk space caching [ 79.681617][ T4326] BTRFS info (device loop2): allowing degraded mounts [ 79.692263][ T4331] BTRFS info (device loop3): disk space caching is enabled [ 79.756869][ T4326] BTRFS info (device loop2): turning on flush-on-commit [ 79.767405][ T4331] BTRFS info (device loop3): has skinny extents [ 79.796206][ T4326] BTRFS info (device loop2): turning on async discard [ 79.837282][ T4326] BTRFS info (device loop2): turning off barriers [ 79.843882][ T4326] BTRFS info (device loop2): disabling disk space caching [ 79.853677][ T4326] BTRFS info (device loop2): enabling ssd optimizations [ 79.862983][ T4326] BTRFS info (device loop2): using spread ssd allocation scheme [ 79.870849][ T4326] BTRFS info (device loop2): not using ssd optimizations [ 79.878064][ T4326] BTRFS info (device loop2): not using spread ssd allocation scheme [ 79.887132][ T4326] BTRFS error (device loop2): cannot disable free space tree [ 79.906587][ T4326] BTRFS error (device loop2): open_ctree failed: -22 [ 80.208707][ T4331] BTRFS info (device loop3): enabling ssd optimizations [ 80.254719][ T4331] BTRFS info (device loop3): clearing free space tree [ 80.263077][ T4331] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 80.274444][ T4331] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 80.807351][ T4268] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 80.886165][ T26] audit: type=1800 audit(1782510397.271:2): pid=4331 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.14" name="file1" dev="loop3" ino=260 res=0 errno=0 [ 80.918982][ T144] BTRFS info (device loop3): qgroup scan completed (inconsistency flag cleared) [ 81.001470][ T26] audit: type=1800 audit(1782510397.351:3): pid=4331 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.14" name="file1" dev="loop3" ino=260 res=0 errno=0 [ 81.123932][ T26] audit: type=1800 audit(1782510397.461:4): pid=4394 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.14" name="file1" dev="loop3" ino=260 res=0 errno=0 [ 81.257323][ T4268] usb 1-1: config 0 interface 0 altsetting 255 has an invalid endpoint with address 0xFF, skipping [ 81.307240][ T4268] usb 1-1: config 0 interface 0 has no altsetting 0 [ 82.108686][ T4387] loop2: detected capacity change from 0 to 32768 [ 82.189260][ T4387] BTRFS warning: duplicate device /dev/loop2 devid 1 generation 8 scanned by syz.2.20 (4387) [ 82.540975][ T4282] BTRFS warning: duplicate device /dev/loop2 devid 1 generation 8 scanned by udevd (4282) [ 82.918448][ T4415] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.078083][ T4268] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 83.101660][ T4268] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 83.125560][ T4268] usb 1-1: Product: syz [ 83.139845][ T4268] usb 1-1: Manufacturer: syz [ 83.167169][ T4268] usb 1-1: SerialNumber: syz [ 83.193492][ T4268] usb 1-1: config 0 descriptor?? [ 83.406864][ T4268] snd-usb-audio: probe of 1-1:0.0 failed with error -22 [ 83.461648][ T4284] udevd[4284]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 83.676709][ T4408] loop1: detected capacity change from 0 to 32768 [ 83.714032][ T4194] usb 1-1: USB disconnect, device number 2 [ 83.739104][ T4415] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.782624][ T4433] loop3: detected capacity change from 0 to 1024 [ 83.814098][ T4408] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.23 (4408) [ 83.841413][ T4408] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 83.885718][ T4408] BTRFS info (device loop1): setting nodatacow, compression disabled [ 83.894569][ T4408] BTRFS info (device loop1): turning on flush-on-commit [ 83.903480][ T4408] BTRFS info (device loop1): trying to use backup root at mount time [ 83.908880][ T4433] EXT4-fs error (device loop3): ext4_map_blocks:741: inode #3: block 1: comm syz.3.22: lblock 1 mapped to illegal pblock 1 (length 1) [ 83.915356][ T4408] BTRFS info (device loop1): max_inline at 0 [ 83.926221][ T4433] Quota error (device loop3): write_blk: dquota write failed [ 83.933154][ T4408] BTRFS info (device loop1): using free space tree [ 83.939377][ T4433] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 83.939546][ T4433] EXT4-fs error (device loop3): ext4_acquire_dquot:6236: comm syz.3.22: Failed to acquire dquot type 0 [ 83.949659][ T4408] BTRFS info (device loop1): has skinny extents [ 83.960951][ T4433] EXT4-fs error (device loop3): ext4_free_blocks:6231: comm syz.3.22: Freeing blocks not in datazone - block = 0, count = 4096 [ 83.986970][ T4433] EXT4-fs error (device loop3): ext4_read_inode_bitmap:140: comm syz.3.22: Invalid inode bitmap blk 0 in block_group 0 [ 84.007434][ T4433] EXT4-fs error (device loop3) in ext4_free_inode:362: Corrupt filesystem [ 84.016293][ T4433] EXT4-fs (loop3): 1 orphan inode deleted [ 84.022148][ T4433] EXT4-fs (loop3): mounted filesystem without journal. Opts: ; noinit_itable,discard,data_err=ignore,max_batch_time=0x0000000000000006,journal_dev=0x0000000000000006,nolazytime,nobarrier,,errors=continue. Quota mode: writeback. [ 84.084151][ T4415] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.240494][ T4415] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.344038][ T4424] loop4: detected capacity change from 0 to 32768 [ 84.392810][ T4233] BTRFS warning (device loop1): checksum verify failed on 5337088 wanted 0xe63dbdda found 0xc926492d level 0 [ 84.447728][ T4408] BTRFS warning (device loop1): failed to read root (objectid=2): -5 [ 84.467686][ T4233] BTRFS warning (device loop1): checksum verify failed on 5324800 wanted 0x9f73850b found 0x80379423 level 0 [ 84.519704][ T4424] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.25 (4424) [ 84.620990][ T4408] BTRFS warning (device loop1): couldn't read tree root [ 84.647740][ T4424] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 84.658115][ T4415] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.671303][ T4408] BTRFS error (device loop1): parent transid verify failed on 5255168 wanted 5 found 7 [ 84.703213][ T4424] BTRFS info (device loop4): force clearing of disk cache [ 84.715767][ T4438] loop0: detected capacity change from 0 to 1024 [ 84.732525][ T4424] BTRFS info (device loop4): use zlib compression, level 3 [ 84.751134][ T4408] BTRFS warning (device loop1): couldn't read tree root [ 84.776863][ T4415] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.787753][ T4424] BTRFS info (device loop4): enabling ssd optimizations [ 84.794823][ T4424] BTRFS info (device loop4): using spread ssd allocation scheme [ 84.826509][ T4408] BTRFS info (device loop1): enabling ssd optimizations [ 84.851762][ T4467] loop3: detected capacity change from 0 to 512 [ 84.860886][ T4424] BTRFS info (device loop4): using free space tree [ 84.869144][ T4408] BTRFS info (device loop1): clearing free space tree [ 84.876029][ T4408] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 84.899663][ T4438] EXT4-fs error (device loop0): ext4_map_blocks:741: inode #3: block 1: comm syz.0.26: lblock 1 mapped to illegal pblock 1 (length 1) [ 84.925850][ T4424] BTRFS info (device loop4): has skinny extents [ 84.933041][ T4408] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 84.955327][ T4408] BTRFS info (device loop1): creating free space tree [ 84.973062][ T4438] Quota error (device loop0): write_blk: dquota write failed [ 84.995156][ T4415] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.011196][ T4408] BTRFS info (device loop1): setting compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 85.021280][ T4408] BTRFS info (device loop1): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 85.041526][ T4467] EXT4-fs (loop3): Ignoring removed bh option [ 85.062358][ T4438] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 85.073467][ T4438] EXT4-fs error (device loop0): ext4_acquire_dquot:6236: comm syz.0.26: Failed to acquire dquot type 0 [ 85.087021][ T4467] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 85.094325][ T4467] EXT4-fs (loop3): Unrecognized mount option "=" or missing value [ 85.122335][ T4415] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.133699][ T4438] EXT4-fs error (device loop0): ext4_free_blocks:6231: comm syz.0.26: Freeing blocks not in datazone - block = 0, count = 4096 [ 85.173426][ T4438] EXT4-fs error (device loop0): ext4_read_inode_bitmap:140: comm syz.0.26: Invalid inode bitmap blk 0 in block_group 0 [ 85.238681][ T4438] EXT4-fs error (device loop0) in ext4_free_inode:362: Corrupt filesystem [ 85.250348][ T144] EXT4-fs error (device loop0): ext4_map_blocks:631: inode #3: block 1: comm kworker/u4:1: lblock 1 mapped to illegal pblock 1 (length 1) [ 85.274869][ T144] Quota error (device loop0): remove_tree: Can't read quota data block 1 [ 85.287833][ T4438] EXT4-fs (loop0): 1 orphan inode deleted [ 85.331003][ T4438] EXT4-fs (loop0): mounted filesystem without journal. Opts: ; noinit_itable,discard,data_err=ignore,max_batch_time=0x0000000000000006,journal_dev=0x0000000000000006,nolazytime,nobarrier,,errors=continue. Quota mode: writeback. [ 85.369778][ T144] EXT4-fs error (device loop0): ext4_release_dquot:6272: comm kworker/u4:1: Failed to release dquot type 0 [ 85.433228][ T4462] loop3: detected capacity change from 0 to 512 [ 85.476958][ T4424] BTRFS info (device loop4): clearing free space tree [ 85.487317][ T4424] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 85.528799][ T4462] EXT4-fs (loop3): Mount option "noacl" will be removed by 3.5 [ 85.528799][ T4462] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 85.528799][ T4462] [ 85.577194][ T4424] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 85.677312][ T4462] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 85.708184][ T4424] BTRFS info (device loop4): creating free space tree [ 85.721252][ T4462] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 85.750267][ T4424] BTRFS info (device loop4): setting compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 85.797155][ T4462] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities [ 85.827191][ T4424] BTRFS info (device loop4): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 85.931563][ T4424] BTRFS info (device loop4): checking UUID tree [ 86.739260][ T1108] cfg80211: failed to load regulatory.db [ 87.216021][ T26] audit: type=1326 audit(1782510403.601:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4539 comm="syz.1.34" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f68e8b97e59 code=0x7ffc0000 [ 87.368479][ T26] audit: type=1326 audit(1782510403.651:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4539 comm="syz.1.34" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f68e8b97e59 code=0x7ffc0000 [ 87.467175][ T4535] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 87.537308][ T26] audit: type=1326 audit(1782510403.571:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4539 comm="syz.1.34" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68e8b97e59 code=0x7ffc0000 [ 87.606195][ T4562] Bluetooth: hci0: invalid length 0, exp 2 for type 11 [ 87.706489][ T4521] loop0: detected capacity change from 0 to 32768 [ 87.765749][ T4521] BTRFS: device fsid 3a375e4e-b156-4d76-a2ad-16e198ce1409 devid 1 transid 8 /dev/loop0 scanned by syz.0.30 (4521) [ 87.821750][ T4559] loop1: detected capacity change from 0 to 4096 [ 87.838056][ T4535] usb 4-1: config 0 interface 0 altsetting 255 has an invalid endpoint with address 0xFF, skipping [ 87.868580][ T4535] usb 4-1: config 0 interface 0 has no altsetting 0 [ 87.899657][ T4559] ntfs3: loop1: Different NTFS' sector size (2048) and media sector size (512) [ 87.938702][ T4521] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 87.989982][ T4521] BTRFS info (device loop0): using free space tree [ 87.996648][ T4521] BTRFS info (device loop0): has skinny extents [ 88.052261][ T4535] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 88.071882][ T4535] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 88.107230][ T4535] usb 4-1: Product: syz [ 88.111599][ T4535] usb 4-1: Manufacturer: syz [ 88.116228][ T4535] usb 4-1: SerialNumber: syz [ 88.410287][ T4576] loop2: detected capacity change from 0 to 1024 [ 88.580380][ T26] audit: type=1800 audit(1782510404.941:8): pid=4559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.39" name="bus" dev="loop1" ino=33 res=0 errno=0 [ 88.653962][ T4521] BTRFS info (device loop0): enabling ssd optimizations [ 88.677620][ T26] audit: type=1804 audit(1782510404.951:9): pid=4559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.39" name="/newroot/7/file1/bus" dev="loop1" ino=33 res=1 errno=0 [ 89.546805][ T4535] usb 4-1: config 0 descriptor?? [ 89.616335][ T4535] snd-usb-audio: probe of 4-1:0.0 failed with error -22 [ 89.660472][ T4576] EXT4-fs error (device loop2): ext4_map_blocks:741: inode #3: block 1: comm syz.2.40: lblock 1 mapped to illegal pblock 1 (length 1) [ 89.674653][ T4576] Quota error (device loop2): write_blk: dquota write failed [ 89.682199][ T4576] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 89.692293][ T4576] EXT4-fs error (device loop2): ext4_acquire_dquot:6236: comm syz.2.40: Failed to acquire dquot type 0 [ 89.703874][ T4576] EXT4-fs error (device loop2): ext4_free_blocks:6231: comm syz.2.40: Freeing blocks not in datazone - block = 0, count = 4096 [ 89.717620][ T4576] EXT4-fs error (device loop2): ext4_read_inode_bitmap:140: comm syz.2.40: Invalid inode bitmap blk 0 in block_group 0 [ 89.731088][ T4576] EXT4-fs error (device loop2) in ext4_free_inode:362: Corrupt filesystem [ 89.740190][ T4576] EXT4-fs (loop2): 1 orphan inode deleted [ 89.745959][ T4576] EXT4-fs (loop2): mounted filesystem without journal. Opts: ; noinit_itable,discard,data_err=ignore,max_batch_time=0x0000000000000006,journal_dev=0x0000000000000006,nolazytime,nobarrier,,errors=continue. Quota mode: writeback. [ 89.748200][ T4240] EXT4-fs error (device loop2): ext4_map_blocks:631: inode #3: block 1: comm kworker/u4:5: lblock 1 mapped to illegal pblock 1 (length 1) [ 89.850516][ T4525] usb 4-1: USB disconnect, device number 3 [ 90.033477][ T4240] Quota error (device loop2): remove_tree: Can't read quota data block 1 [ 90.083284][ T4240] EXT4-fs error (device loop2): ext4_release_dquot:6272: comm kworker/u4:5: Failed to release dquot type 0 [ 90.818925][ T4280] udevd[4280]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 91.642080][ T4623] loop2: detected capacity change from 0 to 2048 [ 91.642125][ T4605] loop1: detected capacity change from 0 to 32768 [ 91.682578][ T4605] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.45 (4605) [ 91.736703][ T4605] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 91.772562][ T4623] NILFS (loop2): invalid segment: Magic number mismatch [ 91.773526][ T4605] BTRFS warning (device loop1): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 91.823637][ T4605] BTRFS info (device loop1): trying to use backup root at mount time [ 91.833056][ T4623] NILFS (loop2): trying rollback from an earlier position [ 91.870573][ T4605] BTRFS info (device loop1): setting nodatasum [ 91.886119][ T4605] BTRFS info (device loop1): enabling ssd optimizations [ 91.930547][ T4605] BTRFS info (device loop1): using spread ssd allocation scheme [ 91.937654][ T4623] NILFS (loop2): recovery complete [ 91.965485][ T4605] BTRFS info (device loop1): turning on flush-on-commit [ 91.983692][ T4627] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 92.021502][ T4605] BTRFS info (device loop1): force zlib compression, level 3 [ 92.057174][ T4605] BTRFS info (device loop1): using free space tree [ 92.075050][ T4605] BTRFS info (device loop1): has skinny extents [ 92.109310][ T26] audit: type=1800 audit(1782510408.501:10): pid=4628 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.49" name="file1" dev="loop2" ino=12 res=0 errno=0 [ 92.569405][ T4620] loop3: detected capacity change from 0 to 40427 [ 92.575912][ T26] audit: type=1800 audit(1782510408.961:11): pid=4605 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.45" name="file1" dev="loop1" ino=260 res=0 errno=0 [ 92.596219][ C0] vkms_vblank_simulate: vblank timer overrun [ 92.633777][ T4653] Bluetooth: hci0: invalid length 0, exp 2 for type 11 [ 92.675672][ T4620] F2FS-fs (loop3): Invalid SB checksum offset: 0 [ 92.703157][ T4620] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 92.745214][ T4620] F2FS-fs (loop3): invalid crc value [ 92.832004][ T4620] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 92.996923][ T4625] loop0: detected capacity change from 0 to 32768 [ 93.081356][ T4625] (syz.0.43,4625,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 93.139165][ T4625] (syz.0.43,4625,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 93.258132][ T4625] JBD2: Ignoring recovery information on journal [ 93.311327][ T4662] loop2: detected capacity change from 0 to 4096 [ 93.326155][ T4662] ntfs3: Unknown parameter 'windows_names' [ 93.395636][ T4620] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 93.417403][ T4620] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 93.488749][ T4625] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 93.586874][ T26] audit: type=1800 audit(1782510409.971:12): pid=4620 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.48" name="file1" dev="loop3" ino=10 res=0 errno=0 [ 93.728174][ T4625] (syz.0.43,4625,1):ocfs2_read_blocks_sync:112 ERROR: status = -12 [ 93.736570][ T4625] (syz.0.43,4625,1):update_backups:188 ERROR: status = -12 [ 93.771068][ T26] audit: type=1800 audit(1782510410.161:13): pid=4669 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.43" name="file1" dev="loop0" ino=16978 res=0 errno=0 [ 93.847161][ T4625] ocfs2: Failed to update super blocks on 7,0 during fs resize. This condition is not fatal, but fsck.ocfs2 should be run to fix it [ 94.137210][ T4535] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 94.398415][ T4535] usb 2-1: Using ep0 maxpacket: 8 [ 94.444443][ T4625] syz.0.43 (4625) used greatest stack depth: 18240 bytes left [ 94.517378][ T4535] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 94.546406][ T4535] usb 2-1: config 16 has an invalid descriptor of length 52, skipping remainder of the config [ 94.608570][ T4535] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has an invalid bInterval 52, changing to 7 [ 94.670684][ T4535] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 9272, setting to 1024 [ 94.733003][ T4535] usb 2-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 94.807291][ T4535] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 94.816504][ T4535] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.938670][ T4535] usbtmc 2-1:16.0: bulk endpoints not found [ 95.025736][ T4189] ocfs2: Unmounting device (7,0) on (node local) [ 95.070193][ T4188] attempt to access beyond end of device [ 95.070193][ T4188] loop3: rw=2049, want=45104, limit=40427 [ 95.205152][ T4411] usb 2-1: USB disconnect, device number 2 [ 95.822844][ T4676] loop2: detected capacity change from 0 to 32768 [ 95.863142][ T4680] loop4: detected capacity change from 0 to 512 [ 95.967174][ T4676] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.53 (4676) [ 96.040411][ T4684] loop0: detected capacity change from 0 to 1024 [ 96.175608][ T4684] EXT4-fs error (device loop0): ext4_map_blocks:741: inode #3: block 1: comm syz.0.56: lblock 1 mapped to illegal pblock 1 (length 1) [ 96.190276][ T4684] Quota error (device loop0): write_blk: dquota write failed [ 96.197776][ T4684] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 96.207855][ T4684] EXT4-fs error (device loop0): ext4_acquire_dquot:6236: comm syz.0.56: Failed to acquire dquot type 0 [ 96.220474][ T4684] EXT4-fs error (device loop0): ext4_free_blocks:6231: comm syz.0.56: Freeing blocks not in datazone - block = 0, count = 4096 [ 96.234403][ T4684] EXT4-fs error (device loop0): ext4_read_inode_bitmap:140: comm syz.0.56: Invalid inode bitmap blk 0 in block_group 0 [ 96.247928][ T4684] EXT4-fs error (device loop0) in ext4_free_inode:362: Corrupt filesystem [ 96.256777][ T4684] EXT4-fs (loop0): 1 orphan inode deleted [ 96.262658][ T4684] EXT4-fs (loop0): mounted filesystem without journal. Opts: ; noinit_itable,discard,data_err=ignore,max_batch_time=0x0000000000000006,journal_dev=0x0000000000000006,nolazytime,nobarrier,,errors=continue. Quota mode: writeback. [ 96.313480][ T4680] EXT4-fs (loop4): 1 orphan inode deleted [ 96.398596][ T4680] EXT4-fs (loop4): mounted filesystem without journal. Opts: mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 96.510107][ T4680] ext4 filesystem being mounted at /13/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 96.597259][ T4535] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 96.737299][ T26] audit: type=1800 audit(1782510413.041:14): pid=4680 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.58" name="bus" dev="loop4" ino=18 res=0 errno=0 [ 97.941716][ T4676] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 98.078878][ T4535] usb 2-1: config 0 interface 0 altsetting 255 has an invalid endpoint with address 0xFF, skipping [ 98.107180][ T4676] BTRFS warning (device loop2): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 98.137130][ T4535] usb 2-1: config 0 interface 0 has no altsetting 0 [ 98.207508][ T4676] BTRFS info (device loop2): trying to use backup root at mount time [ 98.281634][ T4676] BTRFS info (device loop2): using free space tree [ 98.300546][ T4676] BTRFS info (device loop2): has skinny extents [ 98.358357][ T4535] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 98.409668][ T4535] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 98.457916][ T4535] usb 2-1: Product: syz [ 98.467820][ T4535] usb 2-1: Manufacturer: syz [ 98.487499][ T4535] usb 2-1: SerialNumber: syz [ 98.508806][ T4535] usb 2-1: config 0 descriptor?? [ 98.620517][ T4535] snd-usb-audio: probe of 2-1:0.0 failed with error -22 [ 98.660485][ T4724] Bluetooth: hci0: unsupported parameter 255 [ 98.720411][ T4724] Bluetooth: hci0: unsupported parameter 255 [ 99.427909][ T4284] udevd[4284]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 99.457779][ T1108] usb 2-1: USB disconnect, device number 3 [ 99.722420][ T4704] loop3: detected capacity change from 0 to 32768 [ 99.842729][ T4704] XFS (loop3): Mounting V5 Filesystem [ 99.960867][ T4704] XFS (loop3): Ending clean mount [ 99.976085][ T4704] XFS (loop3): Quotacheck needed: Please wait. [ 100.050195][ T4704] XFS (loop3): Quotacheck: Done. [ 100.702169][ T4676] BTRFS error (device loop2): open_ctree failed: -12 [ 100.711616][ T4282] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by udevd (4282) [ 100.741740][ T4737] loop4: detected capacity change from 0 to 4096 [ 100.918227][ T4737] ntfs3: loop4: ntfs_set_state r=3 failed, -22. [ 101.037588][ T4188] XFS (loop3): Unmounting Filesystem [ 101.080451][ T4233] ntfs3: loop4: ntfs3_write_inode r=3 failed, -22. [ 101.118950][ T4192] ntfs3: loop4: ntfs_set_state r=3 failed, -22. [ 101.131886][ T4192] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 101.173319][ T4192] ntfs3: loop4: ntfs_set_state r=3 failed, -22. [ 101.204308][ T516] ntfs3: loop4: ntfs3_write_inode r=3 failed, -22. [ 101.214804][ T4192] ntfs3: loop4: ntfs_evict_inode r=3 failed, -22. [ 101.887126][ T4235] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 101.956689][ T4743] loop1: detected capacity change from 0 to 32768 [ 102.035163][ T4743] (syz.1.66,4743,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 102.089345][ T4743] (syz.1.66,4743,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 102.145403][ T4743] JBD2: Ignoring recovery information on journal [ 102.204831][ T4743] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 102.317256][ T4235] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 102.333385][ T4743] (syz.1.66,4743,0):ocfs2_read_blocks_sync:112 ERROR: status = -12 [ 102.339603][ T4235] usb 3-1: config 0 interface 0 has no altsetting 0 [ 102.379951][ T4743] (syz.1.66,4743,0):update_backups:188 ERROR: status = -12 [ 102.393672][ T4750] loop4: detected capacity change from 0 to 32768 [ 102.416575][ T26] audit: type=1800 audit(1782510418.801:15): pid=4761 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.66" name="file1" dev="loop1" ino=16978 res=0 errno=0 [ 102.464270][ T4743] ocfs2: Failed to update super blocks on 7,1 during fs resize. This condition is not fatal, but fsck.ocfs2 should be run to fix it [ 102.897246][ T4235] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 102.906356][ T4235] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 103.306463][ T4235] usb 3-1: Product: syz [ 103.311264][ T4235] usb 3-1: Manufacturer: syz [ 103.316128][ T4235] usb 3-1: SerialNumber: syz [ 103.325428][ T4235] usb 3-1: config 0 descriptor?? [ 103.540573][ T4750] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 103.561453][ T4235] usb 3-1: selecting invalid altsetting 0 [ 103.583078][ T4750] BTRFS info (device loop4): setting nodatasum [ 103.589856][ T4750] BTRFS info (device loop4): force zlib compression, level 3 [ 103.597980][ T4750] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_LZO (0x8) [ 103.608175][ T4750] BTRFS info (device loop4): use lzo compression, level 0 [ 103.615424][ T4750] BTRFS info (device loop4): turning on flush-on-commit [ 103.636247][ T4776] loop3: detected capacity change from 0 to 1024 [ 103.649690][ T4750] BTRFS info (device loop4): enabling auto defrag [ 103.670637][ T4750] BTRFS info (device loop4): max_inline at 4096 [ 103.875213][ T4776] EXT4-fs error (device loop3): ext4_map_blocks:741: inode #3: block 1: comm syz.3.72: lblock 1 mapped to illegal pblock 1 (length 1) [ 103.891550][ T4776] Quota error (device loop3): write_blk: dquota write failed [ 103.899073][ T4776] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 103.909187][ T4776] EXT4-fs error (device loop3): ext4_acquire_dquot:6236: comm syz.3.72: Failed to acquire dquot type 0 [ 103.921288][ T4776] EXT4-fs error (device loop3): ext4_free_blocks:6231: comm syz.3.72: Freeing blocks not in datazone - block = 0, count = 4096 [ 103.935090][ T4776] EXT4-fs error (device loop3): ext4_read_inode_bitmap:140: comm syz.3.72: Invalid inode bitmap blk 0 in block_group 0 [ 103.947997][ T4233] EXT4-fs error (device loop3): ext4_map_blocks:631: inode #3: block 1: comm kworker/u4:4: lblock 1 mapped to illegal pblock 1 (length 1) [ 103.962876][ T4776] EXT4-fs error (device loop3) in ext4_free_inode:362: Corrupt filesystem [ 103.972744][ T4776] EXT4-fs (loop3): 1 orphan inode deleted [ 103.978616][ T4776] EXT4-fs (loop3): mounted filesystem without journal. Opts: ; noinit_itable,discard,data_err=ignore,max_batch_time=0x0000000000000006,journal_dev=0x0000000000000006,nolazytime,nobarrier,,errors=continue. Quota mode: writeback. [ 104.037958][ T4750] BTRFS info (device loop4): using free space tree [ 104.087981][ T4233] Quota error (device loop3): remove_tree: Can't read quota data block 1 [ 104.097688][ T4750] BTRFS info (device loop4): has skinny extents [ 104.181133][ T4235] usb 3-1: USB disconnect, device number 2 [ 104.217971][ T4233] EXT4-fs error (device loop3): ext4_release_dquot:6272: comm kworker/u4:4: Failed to release dquot type 0 [ 104.492975][ T4782] udevd[4782]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 105.020671][ T4191] ocfs2: Unmounting device (7,1) on (node local) [ 105.297838][ T4750] BTRFS error (device loop4): open_ctree failed: -12 [ 105.533092][ T4781] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by udevd (4781) [ 105.561214][ T4807] loop2: detected capacity change from 0 to 256 [ 105.592337][ T4807] exfat: Unknown parameter '0xffffffffffffffff' [ 106.349504][ T4821] netlink: 8 bytes leftover after parsing attributes in process `syz.2.76'. [ 106.365531][ T4821] netlink: 8 bytes leftover after parsing attributes in process `syz.2.76'. [ 106.376084][ T4821] netlink: 8 bytes leftover after parsing attributes in process `syz.2.76'. [ 106.387885][ T4821] netlink: 8 bytes leftover after parsing attributes in process `syz.2.76'. [ 106.398684][ T4821] netlink: 8 bytes leftover after parsing attributes in process `syz.2.76'. [ 107.280808][ T4814] loop1: detected capacity change from 0 to 32768 [ 107.415115][ T4814] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 107.467420][ T4814] BTRFS warning (device loop1): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 107.517148][ T4814] BTRFS info (device loop1): trying to use backup root at mount time [ 107.576426][ T4814] BTRFS info (device loop1): setting nodatasum [ 107.596798][ T4814] BTRFS info (device loop1): enabling ssd optimizations [ 107.630137][ T4836] loop4: detected capacity change from 0 to 4096 [ 107.643293][ T4814] BTRFS info (device loop1): using spread ssd allocation scheme [ 107.662011][ T4814] BTRFS info (device loop1): turning on flush-on-commit [ 107.710118][ T4814] BTRFS info (device loop1): force zlib compression, level 3 [ 107.738130][ T4814] BTRFS info (device loop1): using free space tree [ 107.801989][ T4814] BTRFS info (device loop1): has skinny extents [ 107.843516][ T4843] loop2: detected capacity change from 0 to 512 [ 107.892170][ T4836] ntfs3: loop4: ino=21, "bus" fallocate(0x20) is not supported [ 107.967735][ T4843] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 108.050069][ T4843] EXT4-fs (loop2): 1 truncate cleaned up [ 108.101522][ T26] audit: type=1800 audit(1782510424.491:16): pid=4814 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.73" name="file1" dev="loop1" ino=260 res=0 errno=0 [ 108.127145][ T4843] EXT4-fs (loop2): mounted filesystem without journal. Opts: dioread_lock,nombcache,max_batch_time=0x0000000000000006,nouid32,noinit_itable,auto_da_alloc,,errors=continue. Quota mode: none. [ 108.437695][ T4868] capability: warning: `syz.4.84' uses deprecated v2 capabilities in a way that may be insecure [ 111.723849][ T4894] loop2: detected capacity change from 0 to 1024 [ 111.896212][ T4894] EXT4-fs error (device loop2): ext4_map_blocks:741: inode #3: block 1: comm syz.2.89: lblock 1 mapped to illegal pblock 1 (length 1) [ 111.930771][ T4894] Quota error (device loop2): write_blk: dquota write failed [ 111.938400][ T4894] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 111.948505][ T4894] EXT4-fs error (device loop2): ext4_acquire_dquot:6236: comm syz.2.89: Failed to acquire dquot type 0 [ 111.997778][ T4894] EXT4-fs error (device loop2): ext4_free_blocks:6231: comm syz.2.89: Freeing blocks not in datazone - block = 0, count = 4096 [ 112.013575][ T4894] EXT4-fs error (device loop2): ext4_read_inode_bitmap:140: comm syz.2.89: Invalid inode bitmap blk 0 in block_group 0 [ 112.027745][ T4894] EXT4-fs error (device loop2) in ext4_free_inode:362: Corrupt filesystem [ 112.036616][ T4894] EXT4-fs (loop2): 1 orphan inode deleted [ 112.042480][ T4894] EXT4-fs (loop2): mounted filesystem without journal. Opts: ; noinit_itable,discard,data_err=ignore,max_batch_time=0x0000000000000006,journal_dev=0x0000000000000006,nolazytime,nobarrier,,errors=continue. Quota mode: writeback. [ 112.493703][ T4905] loop4: detected capacity change from 0 to 1024 [ 112.830066][ T4905] EXT4-fs error (device loop4): ext4_map_blocks:741: inode #3: block 1: comm syz.4.91: lblock 1 mapped to illegal pblock 1 (length 1) [ 112.844422][ T4905] Quota error (device loop4): write_blk: dquota write failed [ 112.851934][ T4905] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 112.861962][ T4905] EXT4-fs error (device loop4): ext4_acquire_dquot:6236: comm syz.4.91: Failed to acquire dquot type 0 [ 112.875738][ T4905] EXT4-fs error (device loop4): ext4_free_blocks:6231: comm syz.4.91: Freeing blocks not in datazone - block = 0, count = 4096 [ 112.889685][ T4905] EXT4-fs error (device loop4): ext4_read_inode_bitmap:140: comm syz.4.91: Invalid inode bitmap blk 0 in block_group 0 [ 112.902559][ T4905] EXT4-fs error (device loop4) in ext4_free_inode:362: Corrupt filesystem [ 112.911394][ T4774] EXT4-fs error (device loop4): ext4_map_blocks:631: inode #3: block 1: comm kworker/u4:9: lblock 1 mapped to illegal pblock 1 (length 1) [ 112.911811][ T4774] Quota error (device loop4): remove_tree: Can't read quota data block 1 [ 112.911841][ T4774] EXT4-fs error (device loop4): ext4_release_dquot:6272: comm kworker/u4:9: Failed to release dquot type 0 [ 112.919243][ T4909] loop2: detected capacity change from 0 to 256 [ 112.953028][ T4905] EXT4-fs (loop4): 1 orphan inode deleted [ 112.959003][ T4905] EXT4-fs (loop4): mounted filesystem without journal. Opts: ; noinit_itable,discard,data_err=ignore,max_batch_time=0x0000000000000006,journal_dev=0x0000000000000006,nolazytime,nobarrier,,errors=continue. Quota mode: writeback. [ 113.037743][ T4909] exfat: Unknown parameter '0xffffffffffffffff' [ 113.488846][ T4916] Bluetooth: hci0: unsupported parameter 255 [ 113.494902][ T4916] Bluetooth: hci0: unsupported parameter 255 [ 113.584440][ T4918] netlink: 8 bytes leftover after parsing attributes in process `syz.2.92'. [ 113.597534][ T4918] netlink: 8 bytes leftover after parsing attributes in process `syz.2.92'. [ 113.608024][ T4918] netlink: 8 bytes leftover after parsing attributes in process `syz.2.92'. [ 113.618290][ T4918] netlink: 8 bytes leftover after parsing attributes in process `syz.2.92'. [ 113.627499][ T4918] netlink: 8 bytes leftover after parsing attributes in process `syz.2.92'. [ 114.587160][ T7] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 114.947454][ T7] usb 2-1: config 0 interface 0 altsetting 255 has an invalid endpoint with address 0xFF, skipping [ 114.992751][ T7] usb 2-1: config 0 interface 0 has no altsetting 0 [ 115.044297][ T4926] loop4: detected capacity change from 0 to 32768 [ 115.364962][ T4926] (syz.4.97,4926,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 115.483858][ T4926] (syz.4.97,4926,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 115.757402][ T7] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 115.798036][ T7] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 115.841225][ T7] usb 2-1: Product: syz [ 115.845483][ T7] usb 2-1: Manufacturer: syz [ 115.907702][ T7] usb 2-1: SerialNumber: syz [ 115.934369][ T7] usb 2-1: config 0 descriptor?? [ 115.977944][ T4926] JBD2: Ignoring recovery information on journal [ 117.122758][ T4950] loop2: detected capacity change from 0 to 1024 [ 117.169169][ T4926] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 117.306781][ T4950] EXT4-fs error (device loop2): ext4_map_blocks:741: inode #3: block 1: comm syz.2.102: lblock 1 mapped to illegal pblock 1 (length 1) [ 117.326916][ T4950] Quota error (device loop2): write_blk: dquota write failed [ 117.335367][ T4950] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 117.345499][ T4950] EXT4-fs error (device loop2): ext4_acquire_dquot:6236: comm syz.2.102: Failed to acquire dquot type 0 [ 117.357929][ T4950] EXT4-fs error (device loop2): ext4_free_blocks:6231: comm syz.2.102: Freeing blocks not in datazone - block = 0, count = 4096 [ 117.373945][ T4950] EXT4-fs error (device loop2): ext4_read_inode_bitmap:140: comm syz.2.102: Invalid inode bitmap blk 0 in block_group 0 [ 117.387348][ T4950] EXT4-fs error (device loop2) in ext4_free_inode:362: Corrupt filesystem [ 117.396295][ T4950] EXT4-fs (loop2): 1 orphan inode deleted [ 117.402176][ T4950] EXT4-fs (loop2): mounted filesystem without journal. Opts: ; noinit_itable,discard,data_err=ignore,max_batch_time=0x0000000000000006,journal_dev=0x0000000000000006,nolazytime,nobarrier,,errors=continue. Quota mode: writeback. [ 117.733005][ T4192] ocfs2: Unmounting device (7,4) on (node local) [ 117.927736][ T7] snd-usb-audio: probe of 2-1:0.0 failed with error -22 [ 117.947274][ T7] usb 2-1: USB disconnect, device number 4 [ 118.068901][ T4781] udevd[4781]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 118.317689][ T4966] loop0: detected capacity change from 0 to 256 [ 118.347644][ T4965] loop1: detected capacity change from 0 to 1024 [ 118.377799][ T4966] exfat: Unknown parameter '0xffffffffffffffff' [ 118.429147][ T4965] EXT4-fs error (device loop1): ext4_map_blocks:741: inode #3: block 1: comm syz.1.105: lblock 1 mapped to illegal pblock 1 (length 1) [ 118.443374][ T4965] Quota error (device loop1): write_blk: dquota write failed [ 118.450848][ T4965] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 118.460898][ T4965] EXT4-fs error (device loop1): ext4_acquire_dquot:6236: comm syz.1.105: Failed to acquire dquot type 0 [ 118.472411][ T4965] EXT4-fs error (device loop1): ext4_free_blocks:6231: comm syz.1.105: Freeing blocks not in datazone - block = 0, count = 4096 [ 118.486335][ T4965] EXT4-fs error (device loop1): ext4_read_inode_bitmap:140: comm syz.1.105: Invalid inode bitmap blk 0 in block_group 0 [ 118.499119][ T4308] EXT4-fs error (device loop1): ext4_map_blocks:631: inode #3: block 1: comm kworker/u4:7: lblock 1 mapped to illegal pblock 1 (length 1) [ 118.510592][ T4965] EXT4-fs error (device loop1) in ext4_free_inode:362: Corrupt filesystem [ 118.522255][ T4965] EXT4-fs (loop1): 1 orphan inode deleted [ 118.528111][ T4965] EXT4-fs (loop1): mounted filesystem without journal. Opts: ; noinit_itable,discard,data_err=ignore,max_batch_time=0x0000000000000006,journal_dev=0x0000000000000006,nolazytime,nobarrier,,errors=continue. Quota mode: writeback. [ 118.531517][ T4308] Quota error (device loop1): remove_tree: Can't read quota data block 1 [ 118.667273][ T4308] EXT4-fs error (device loop1): ext4_release_dquot:6272: comm kworker/u4:7: Failed to release dquot type 0 [ 119.043531][ T4966] netlink: 8 bytes leftover after parsing attributes in process `syz.0.106'. [ 119.054955][ T4966] netlink: 8 bytes leftover after parsing attributes in process `syz.0.106'. [ 119.064119][ T4966] netlink: 8 bytes leftover after parsing attributes in process `syz.0.106'. [ 119.073477][ T4966] netlink: 8 bytes leftover after parsing attributes in process `syz.0.106'. [ 119.082514][ T4966] netlink: 8 bytes leftover after parsing attributes in process `syz.0.106'. [ 119.380042][ T4984] Bluetooth: hci0: unsupported parameter 255 [ 119.486356][ T4984] Bluetooth: hci0: unsupported parameter 255 [ 120.511941][ T5003] loop2: detected capacity change from 0 to 1024 [ 120.746310][ T5003] EXT4-fs error (device loop2): ext4_map_blocks:741: inode #3: block 1: comm syz.2.114: lblock 1 mapped to illegal pblock 1 (length 1) [ 120.760648][ T5003] Quota error (device loop2): write_blk: dquota write failed [ 120.768146][ T5003] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 120.778253][ T5003] EXT4-fs error (device loop2): ext4_acquire_dquot:6236: comm syz.2.114: Failed to acquire dquot type 0 [ 120.790995][ T5003] EXT4-fs error (device loop2): ext4_free_blocks:6231: comm syz.2.114: Freeing blocks not in datazone - block = 0, count = 4096 [ 120.804767][ T5003] EXT4-fs error (device loop2): ext4_read_inode_bitmap:140: comm syz.2.114: Invalid inode bitmap blk 0 in block_group 0 [ 120.817698][ T4308] EXT4-fs error (device loop2): ext4_map_blocks:631: inode #3: block 1: comm kworker/u4:7: lblock 1 mapped to illegal pblock 1 (length 1) [ 120.821746][ T5003] EXT4-fs error (device loop2) in ext4_free_inode:362: Corrupt filesystem [ 120.840757][ T5003] EXT4-fs (loop2): 1 orphan inode deleted [ 120.846845][ T5003] EXT4-fs (loop2): mounted filesystem without journal. Opts: ; noinit_itable,discard,data_err=ignore,max_batch_time=0x0000000000000006,journal_dev=0x0000000000000006,nolazytime,nobarrier,,errors=continue. Quota mode: writeback. [ 120.874695][ T4308] Quota error (device loop2): remove_tree: Can't read quota data block 1 [ 120.883695][ T4308] EXT4-fs error (device loop2): ext4_release_dquot:6272: comm kworker/u4:7: Failed to release dquot type 0 [ 120.997301][ T4606] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 121.357390][ T4606] usb 4-1: config 0 interface 0 altsetting 255 has an invalid endpoint with address 0xFF, skipping [ 121.388781][ T4606] usb 4-1: config 0 interface 0 has no altsetting 0 [ 121.547470][ T4606] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 121.556575][ T4606] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 121.613322][ T4606] usb 4-1: Product: syz [ 121.632740][ T4606] usb 4-1: Manufacturer: syz [ 121.637754][ T4606] usb 4-1: SerialNumber: syz [ 121.709481][ T4606] usb 4-1: config 0 descriptor?? [ 121.805672][ T4606] snd-usb-audio: probe of 4-1:0.0 failed with error -22 [ 121.842765][ T5027] loop0: detected capacity change from 0 to 1024 [ 121.890471][ T4781] udevd[4781]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 122.008007][ T4606] usb 4-1: USB disconnect, device number 4 [ 122.077430][ T5027] EXT4-fs error (device loop0): ext4_map_blocks:741: inode #3: block 1: comm syz.0.120: lblock 1 mapped to illegal pblock 1 (length 1) [ 122.092025][ T5027] Quota error (device loop0): write_blk: dquota write failed [ 122.099515][ T5027] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 122.109919][ T5027] EXT4-fs error (device loop0): ext4_acquire_dquot:6236: comm syz.0.120: Failed to acquire dquot type 0 [ 122.121789][ T5027] EXT4-fs error (device loop0): ext4_free_blocks:6231: comm syz.0.120: Freeing blocks not in datazone - block = 0, count = 4096 [ 122.136181][ T5027] EXT4-fs error (device loop0): ext4_read_inode_bitmap:140: comm syz.0.120: Invalid inode bitmap blk 0 in block_group 0 [ 122.156377][ T5027] EXT4-fs error (device loop0) in ext4_free_inode:362: Corrupt filesystem [ 122.160499][ T144] EXT4-fs error (device loop0): ext4_map_blocks:631: inode #3: block 1: comm kworker/u4:1: lblock 1 mapped to illegal pblock 1 (length 1) [ 122.179739][ T5027] EXT4-fs (loop0): 1 orphan inode deleted [ 122.185508][ T5027] EXT4-fs (loop0): mounted filesystem without journal. Opts: ; noinit_itable,discard,data_err=ignore,max_batch_time=0x0000000000000006,journal_dev=0x0000000000000006,nolazytime,nobarrier,,errors=continue. Quota mode: writeback. [ 122.253454][ T5019] loop2: detected capacity change from 0 to 32768 [ 122.272337][ T144] EXT4-fs error (device loop0): ext4_release_dquot:6272: comm kworker/u4:1: Failed to release dquot type 0 [ 122.310993][ T5019] (syz.2.118,5019,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 122.352952][ T5019] (syz.2.118,5019,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 122.446086][ T5019] JBD2: Ignoring recovery information on journal [ 122.628400][ T5019] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 122.736316][ T5019] (syz.2.118,5019,1):ocfs2_read_blocks_sync:112 ERROR: status = -12 [ 122.781416][ T5019] (syz.2.118,5019,1):update_backups:188 ERROR: status = -12 [ 122.799477][ T26] kauditd_printk_skb: 1 callbacks suppressed [ 122.799492][ T26] audit: type=1800 audit(1782510439.191:17): pid=5036 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.118" name="file1" dev="loop2" ino=16978 res=0 errno=0 [ 122.810063][ T5019] ocfs2: Failed to update super blocks on 7,2 during fs resize. This condition is not fatal, but fsck.ocfs2 should be run to fix it [ 122.968802][ T5019] [ 122.971229][ T5019] ====================================================== [ 122.978255][ T5019] WARNING: possible circular locking dependency detected [ 122.985429][ T5019] syzkaller #0 Not tainted [ 122.989857][ T5019] ------------------------------------------------------ [ 122.996880][ T5019] syz.2.118/5019 is trying to acquire lock: [ 123.002781][ T5019] ffff88805f0722e0 (&oi->ip_alloc_sem/1){+.+.}-{3:3}, at: ocfs2_remap_file_range+0x3f0/0x740 [ 123.013014][ T5019] [ 123.013014][ T5019] but task is already holding lock: [ 123.020390][ T5019] ffff88805f0a22e0 (&ocfs2_file_ip_alloc_sem_key){++++}-{3:3}, at: ocfs2_remap_file_range+0x3d4/0x740 [ 123.031377][ T5019] [ 123.031377][ T5019] which lock already depends on the new lock. [ 123.031377][ T5019] [ 123.041792][ T5019] [ 123.041792][ T5019] the existing dependency chain (in reverse order) is: [ 123.050905][ T5019] [ 123.050905][ T5019] -> #2 (&ocfs2_file_ip_alloc_sem_key){++++}-{3:3}: [ 123.059700][ T5019] down_read+0x44/0x2e0 [ 123.064401][ T5019] ocfs2_read_virt_blocks+0x240/0x8e0 [ 123.070313][ T5019] ocfs2_find_entry+0x39d/0x1f90 [ 123.075802][ T5019] ocfs2_find_files_on_disk+0xdb/0x2f0 [ 123.081797][ T5019] ocfs2_lookup_ino_from_name+0x4f/0xf0 [ 123.087911][ T5019] ocfs2_get_system_file_inode+0x33f/0x7f0 [ 123.094256][ T5019] ocfs2_init_global_system_inodes+0x315/0x6e0 [ 123.100954][ T5019] ocfs2_fill_super+0x4032/0x50c0 [ 123.106522][ T5019] mount_bdev+0x28a/0x3c0 [ 123.111420][ T5019] legacy_get_tree+0xe6/0x180 [ 123.116641][ T5019] vfs_get_tree+0x88/0x270 [ 123.121598][ T5019] do_new_mount+0x247/0xa40 [ 123.126641][ T5019] __se_sys_mount+0x2e3/0x3d0 [ 123.131858][ T5019] do_syscall_64+0x4c/0xa0 [ 123.136817][ T5019] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 123.143340][ T5019] [ 123.143340][ T5019] -> #1 (&osb->system_file_mutex){+.+.}-{3:3}: [ 123.151696][ T5019] __mutex_lock_common+0x1e5/0x2400 [ 123.157439][ T5019] mutex_lock_nested+0x17/0x20 [ 123.162739][ T5019] ocfs2_get_system_file_inode+0x1a4/0x7f0 [ 123.169079][ T5019] ocfs2_reserve_suballoc_bits+0x12e/0x44b0 [ 123.175518][ T5019] ocfs2_reserve_new_metadata_blocks+0x412/0x9a0 [ 123.182384][ T5019] ocfs2_create_refcount_tree+0x26c/0x1240 [ 123.188736][ T5019] ocfs2_reflink_remap_blocks+0x313/0x1aa0 [ 123.195088][ T5019] ocfs2_remap_file_range+0x4a7/0x740 [ 123.201010][ T5019] vfs_copy_file_range+0xcce/0x1430 [ 123.206752][ T5019] __se_sys_copy_file_range+0x320/0x470 [ 123.212872][ T5019] do_syscall_64+0x4c/0xa0 [ 123.217837][ T5019] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 123.224309][ T5019] [ 123.224309][ T5019] -> #0 (&oi->ip_alloc_sem/1){+.+.}-{3:3}: [ 123.232335][ T5019] __lock_acquire+0x2c66/0x7b50 [ 123.237737][ T5019] lock_acquire+0x19e/0x400 [ 123.242793][ T5019] down_write_nested+0x3b/0x60 [ 123.248110][ T5019] ocfs2_remap_file_range+0x3f0/0x740 [ 123.254035][ T5019] vfs_copy_file_range+0xcce/0x1430 [ 123.259784][ T5019] __se_sys_copy_file_range+0x320/0x470 [ 123.265874][ T5019] do_syscall_64+0x4c/0xa0 [ 123.270832][ T5019] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 123.277268][ T5019] [ 123.277268][ T5019] other info that might help us debug this: [ 123.277268][ T5019] [ 123.287504][ T5019] Chain exists of: [ 123.287504][ T5019] &oi->ip_alloc_sem/1 --> &osb->system_file_mutex --> &ocfs2_file_ip_alloc_sem_key [ 123.287504][ T5019] [ 123.302736][ T5019] Possible unsafe locking scenario: [ 123.302736][ T5019] [ 123.310351][ T5019] CPU0 CPU1 [ 123.315737][ T5019] ---- ---- [ 123.321214][ T5019] lock(&ocfs2_file_ip_alloc_sem_key); [ 123.326778][ T5019] lock(&osb->system_file_mutex); [ 123.334428][ T5019] lock(&ocfs2_file_ip_alloc_sem_key); [ 123.342551][ T5019] lock(&oi->ip_alloc_sem/1); [ 123.347349][ T5019] [ 123.347349][ T5019] *** DEADLOCK *** [ 123.347349][ T5019] [ 123.355517][ T5019] 4 locks held by syz.2.118/5019: [ 123.360559][ T5019] #0: ffff88801fb1e460 (sb_writers#19){.+.+}-{0:0}, at: vfs_copy_file_range+0x89a/0x1430 [ 123.370551][ T5019] #1: ffff88805f072648 (&sb->s_type->i_mutex_key#26){+.+.}-{3:3}, at: lock_two_nondirectories+0xf7/0x150 [ 123.382022][ T5019] #2: ffff88805f0a2648 (&sb->s_type->i_mutex_key#26/4){+.+.}-{3:3}, at: ocfs2_reflink_inodes_lock+0x116/0xbb0 [ 123.393851][ T5019] #3: ffff88805f0a22e0 (&ocfs2_file_ip_alloc_sem_key){++++}-{3:3}, at: ocfs2_remap_file_range+0x3d4/0x740 [ 123.405278][ T5019] [ 123.405278][ T5019] stack backtrace: [ 123.411193][ T5019] CPU: 1 PID: 5019 Comm: syz.2.118 Not tainted syzkaller #0 [ 123.418496][ T5019] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 123.428582][ T5019] Call Trace: [ 123.431883][ T5019] [ 123.434830][ T5019] dump_stack_lvl+0x188/0x250 [ 123.439533][ T5019] ? load_image+0x410/0x410 [ 123.444055][ T5019] ? show_regs_print_info+0x20/0x20 [ 123.449278][ T5019] ? print_circular_bug+0x12b/0x1a0 [ 123.454496][ T5019] check_noncircular+0x296/0x330 [ 123.459450][ T5019] ? look_up_lock_class+0x71/0x110 [ 123.464586][ T5019] ? add_chain_block+0x9b0/0x9b0 [ 123.469538][ T5019] ? lockdep_lock+0xf1/0x1f0 [ 123.474151][ T5019] ? lockdep_unlock+0x143/0x2e0 [ 123.479024][ T5019] ? mark_lock+0x94/0x320 [ 123.483376][ T5019] ? _find_first_zero_bit+0xd1/0xf0 [ 123.488592][ T5019] __lock_acquire+0x2c66/0x7b50 [ 123.493472][ T5019] ? verify_lock_unused+0x140/0x140 [ 123.498689][ T5019] ? __mark_inode_dirty+0x3a4/0xc90 [ 123.503913][ T5019] ? generic_update_time+0x1cd/0x1f0 [ 123.509217][ T5019] ? __mnt_drop_write_file+0xbf/0xf0 [ 123.514524][ T5019] ? file_remove_privs+0x5d0/0x5d0 [ 123.519660][ T5019] lock_acquire+0x19e/0x400 [ 123.524183][ T5019] ? ocfs2_remap_file_range+0x3f0/0x740 [ 123.529756][ T5019] ? __might_sleep+0xf0/0xf0 [ 123.534365][ T5019] ? read_lock_is_recursive+0x10/0x10 [ 123.539755][ T5019] ? rwsem_write_trylock+0x135/0x1c0 [ 123.545066][ T5019] ? clear_nonspinnable+0x60/0x60 [ 123.550110][ T5019] ? kernel_read_file_from_fd+0x120/0x120 [ 123.555851][ T5019] ? aa_file_perm+0x38b/0xe80 [ 123.560550][ T5019] down_write_nested+0x3b/0x60 [ 123.565344][ T5019] ? ocfs2_remap_file_range+0x3f0/0x740 [ 123.570933][ T5019] ocfs2_remap_file_range+0x3f0/0x740 [ 123.576332][ T5019] ? ocfs2_fallocate+0x240/0x240 [ 123.581294][ T5019] ? rcu_read_lock_any_held+0xb0/0x130 [ 123.586815][ T5019] ? rcu_read_lock_bh_held+0xf0/0xf0 [ 123.592126][ T5019] ? end_current_label_crit_section+0x14b/0x170 [ 123.598399][ T5019] ? common_file_perm+0x171/0x1c0 [ 123.603464][ T5019] ? ocfs2_fallocate+0x240/0x240 [ 123.608424][ T5019] vfs_copy_file_range+0xcce/0x1430 [ 123.613647][ T5019] ? generic_copy_file_range+0x110/0x110 [ 123.619300][ T5019] ? __fdget+0x18b/0x210 [ 123.623562][ T5019] ? __se_sys_copy_file_range+0xb2/0x470 [ 123.629226][ T5019] __se_sys_copy_file_range+0x320/0x470 [ 123.634816][ T5019] ? __x64_sys_copy_file_range+0xf0/0xf0 [ 123.640478][ T5019] ? __x64_sys_copy_file_range+0x1d/0xf0 [ 123.646138][ T5019] do_syscall_64+0x4c/0xa0 [ 123.650587][ T5019] ? clear_bhb_loop+0x30/0x80 [ 123.655287][ T5019] ? clear_bhb_loop+0x30/0x80 [ 123.659983][ T5019] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 123.665915][ T5019] RIP: 0033:0x7f4907f35e59 [ 123.670378][ T5019] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 123.690001][ T5019] RSP: 002b:00007f490618f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000146 [ 123.698433][ T5019] RAX: ffffffffffffffda RBX: 00007f49081aefa0 RCX: 00007f4907f35e59 [ 123.706419][ T5019] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000006 [ 123.714406][ T5019] RBP: 00007f4907fcbe6f R08: fffffbffa003e458 R09: 0100000000000000 [ 123.722392][ T5019] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 123.730377][ T5019] R13: 00007f49081af038 R14: 00007f49081aefa0 R15: 00007ffd9152c758 [ 123.738370][ T5019] [ 124.241689][ T5036] (syz.2.118,5036,0):ocfs2_dio_end_io:2443 ERROR: Direct IO failed, bytes = -5 [ 124.790614][ T4190] ocfs2: Unmounting device (7,2) on (node local) [ 132.799377][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.805699][ T1422] ieee802154 phy1 wpan1: encryption failed: -22