last executing test programs: 2.070022696s ago: executing program 3 (id=369): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000001400)=0x7) syz_mount_image$xfs(&(0x7f0000000040), &(0x7f0000000240)='./file0\x00', 0x2018010, &(0x7f0000000080)={[{@nogrpid}, {@noalign}, {@sysvgroups}, {@inode64}, {@nolazytime}]}, 0x1, 0xb99f, &(0x7f0000018700)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x1c1002, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) 1.929988816s ago: executing program 2 (id=374): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000003c0)={0x1c, &(0x7f0000000280)=ANY=[@ANYBLOB="000001"], 0x0, 0x0}) 1.847829166s ago: executing program 0 (id=375): memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) sendto(0xffffffffffffffff, &(0x7f0000000540)="0cc31a4098ddc80dadd3a0aa2bea9050d9f47bcde4cbb8170d3d61aabbdbd869e8a75ab95a3b8e8b960477dbbbbf5cb0fd4a98ea0032d054de676f19c5e1f84def57482d1b3eb94a2a1d3c0af33709610ece6cb54ae7f8c3ed385c3890244d348c9bcfb556ee478845ff23d8a9f2a492531e7c7ce719ef1983bdaf4008386323fc593be590321dbe51aa4ecabebf495efc0f722637337e20cc541399dc617deafa840b68f2b22e5f7c6afb3825871b966ab90a79a4d6d72f29a1e43abdf4d25f6352dfa26c57684224fdb0e14151550796aaa09b4669e71d9f4255f63905467b709f6d7185347a078538e4", 0xeb, 0x4000, 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') setgroups(0x400000000000026f, &(0x7f0000000080)=[0x0, 0xee00]) read$FUSE(r0, &(0x7f0000001180)={0x2020}, 0x2020) 1.787548536s ago: executing program 0 (id=376): syz_mount_image$udf(&(0x7f0000000f00), &(0x7f0000000100)='./file0\x00', 0xa00000, &(0x7f0000000200)={[{@iocharset={'iocharset', 0x3d, 'cp866'}}, {@anchor={'anchor', 0x3d, 0xb}}, {@shortad}, {@uid_forget}, {@unhide}, {@uid_ignore}, {@shortad}, {@partition={'partition', 0x3d, 0x202}}, {@mode={'mode', 0x3d, 0x8000}}]}, 0x1, 0xc43, &(0x7f0000000f40)="$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") 1.669166547s ago: executing program 0 (id=379): bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xb, 0x11, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000008500000011000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb702000008000000182300009ed47cdc8112b111f3cbe3ce9f3492773e265d7f071028163ad8a8cfbd807d4caf5d74f0fb950a8331f65077080edb452f2f7c7b83343f07ae27a923e702fe5073446f079ce7e52c18", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a5000000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$FBIOBLANK(0xffffffffffffffff, 0x4611, 0x4) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000"], 0x7c}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) dup(r1) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x70, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x526}, @TCA_SAMPLE_PARMS={0x18}]}, {0x4}, {0xc}, {0xc, 0x4}}}]}]}, 0x70}}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socket(0x400000000010, 0x3, 0x0) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$tipc(r3, &(0x7f0000005a40)=@id={0x1e, 0x3, 0x0, {0x4e20, 0x2}}, 0x10) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="24000000700001000000000000000000070000", @ANYRES32, @ANYBLOB="0c000280060001"], 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r6 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000900)=@newtaction={0x48, 0x32, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4}}}]}]}, 0x48}}, 0x0) 1.641906537s ago: executing program 3 (id=380): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x83, 0x2, 0x3, 0x7f, 0xa9, 0x4d, 0x6, 0x5f, 0x9, 0x15, 0xffff2d37, 0xff7fff01, 0x6, 0x5, 0x7, 0x5, 0x8006, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0x10, 0x5, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x20003, 0x8, 0x4c74, 0x10000, 0x242, 0x3, 0xe, 0x4, 0x80008071, 0x7, 0x17, 0x1, 0x5, 0x5, 0x3e, 0x18e, 0x6, 0x6, 0x454f, 0x6, 0x4, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x6, 0x8, 0x8000, 0x1, 0x5], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xad53, 0x129432f6, 0xc8, 0xf1, 0xe, 0x2bf, 0x6c7, 0xa, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x66abcbd2, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0xfffff575, 0x5f31, 0xd, 0x9, 0x381, 0x4, 0xb, 0x4, 0x9, 0x8, 0x5, 0x6, 0x49, 0x6, 0x1, 0xfe000000, 0x8, 0x2, 0x4, 0x9, 0x13, 0x3, 0x4000009, 0x6, 0x0, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x4, 0x408, 0x4, 0x5, 0xfffffffd, 0x100, 0x4, 0x9, 0x5, 0x8002, 0x0, 0x9, 0xb, 0x4, 0x45, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0xfffffffa, 0xb, 0x5, 0x2, 0x2, 0x400003, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x4, 0xa9, 0x5, 0x0, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x1, 0xc921, 0xa, 0xffffffff, 0x5, 0x2, 0x120000, 0x807ff, 0x2006, 0x80a2ed, 0x1, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x1938, 0x6, 0x6, 0x0, 0xb9, 0xce4, 0x1ff, 0x6, 0x57, 0x8, 0x3, 0x2, 0x10000, 0x4, 0x7fff, 0xffff, 0xa620, 0x1, 0x5, 0x1, 0x2000002, 0x14c, 0x60a7, 0x6, 0x7, 0xffffffff, 0x80000000, 0x5, 0x5, 0xc8, 0x1, 0xfffff000, 0xffff, 0x3, 0x7e, 0x100, 0x9622, 0x7, 0xaf, 0x20000008, 0x5, 0x226, 0x2, 0x5, 0x0, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x530e, 0x6c1b, 0x0, 0x4, 0x400005, 0x803, 0xd7, 0x200, 0xb, 0xfff]}, 0x45c) r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f00000001c0)=0x7) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 1.536299127s ago: executing program 0 (id=382): socket$inet_mptcp(0x2, 0x1, 0x106) socket$vsock_stream(0x28, 0x1, 0x0) socket$tipc(0x1e, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) openat$sequencer2(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r1, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES16=r2, @ANYRES32=r2], 0x44}}, 0x4000000) 1.503091297s ago: executing program 0 (id=383): openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x40042, 0x21) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x2b, 0x0, 0xa0031718561b10dc}}, 0x50) utimensat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x100) 1.333851298s ago: executing program 2 (id=386): syz_mount_image$hfs(&(0x7f0000000080), &(0x7f00000008c0)='./bus\x00', 0x808808, &(0x7f0000000380)=ANY=[@ANYBLOB="636f6465706167653d757466382c66696c655f756d61736b3d30303030303030303030303030303030303030303030332c696f636861727365743d63703737352c71756965742c008f7881d185c35a6a28ef06c5b85628f12a02248de249c2a338d049166371583781680d171f47"], 0x1, 0x2e2, &(0x7f0000000900)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$UHID_INPUT(r0, &(0x7f0000003040)={0x8, {"488085fddf7e1378d3ad4adb6e165913c1f7ae15c9b4ed75d7413838ff0d9381cead5adbe8228d9ba29fe815a6f64afca949ca64011b9d8c93b4272d6428962fe017b1cb68796b7b800b25eb3013496be2e3e973309e6842f2df0e5309a233d16ced2bc26cd6f7db616268621fe160c1644afc707a535571e0a936469f5dd6d60c6962109cd8de336fc0938bcd412788f01c1d84e33d5eaa3e140944ddefde0366395044cf0f095786b3f1fd27c0eaf2d0df657acf52c9220297bc28779a85ac06d4f14c31cbfced5519b61ddf599c08c7f10e385e4a6637e44ce117631e6d561c5118ad8e21bba948e572e54c67516e0f2a504f05f23e00d9b04160dac7e52d6caacf617d94e200e9c97771d56fe7b2ad6b69247904463f36b11e74b41ea9e63e77ded5af1406fe0f01f2350e756fd41c94f9dee22f611720853d7f8fd755903f1c3e044bd704bd4255c570cc0c82cacec7b9b7720cd6d5b2cd96e583ff1ddb0ad39155daa2f29a4f61298b44ea802bbac9b1f552cf0279f52ff200178468b94b293f7052817d89adb9130a3eaec5ceeeb386a31a7d9807f069ad07e3488e99a0b7f7f92fc2a63226175432a93ae4dc820e702d21bdec10a773c7b3de3f0ec4b5f8af60a159aaa4231ed4e79883acf5d2eed3a0fd3445d46d7fbbd47f2c610d96d6435293b103db15b8e7383e63e9d672410f5248183d4e608e7aee4d9dbfd040fb3fae39faec3cc0f5410d0d479bc1b7addd255ba502a52fa858eb6574530fd16c01e1138b19258e1c40b9a29a8672f418159f663bc8fe634e3a0d23dde1ced471cfb1decc1a9464667771b795229b1906651e9e5e4402c7e75182b1432acb4b54c499358585aa83fca804fbdd12dfd3b9e95b0ac718cadb879a2898d86c4ed914a59918df6ba519de4599f662811202158e418cef0d103ed4e77833d4dea6e59f7fef1c86f818121655dd1b2cb3717c892a289797049911356b5dd5dc0c50caadd0dd0318994d730fd6e6953e01730fb2682ab3f7ca8b4d596574456f59b95f34ff6f79db68b495010b8816a7b55229b35a2790f25c42ef1efcc5271c66500fc285de61516fc401518ba1ae388f90b0a5760e01031ceed37d1eb8a792f4a196a9fa0ff1579358bfe5c63744027d1a01e0a4602c79c2fe727034a4d810f0a2c30dc5a4c122e510e4d6348774754bf1f924c1d5a31dccf345a6c752389cc38e46e968e3b2815e2ecc3e5827f198f5d836b5783e9d7cc5bc5ba1715d23a4c35157b28e997010c627cbcebda89d08ac88e3d2f387c87af78b2a565dd5704bf3c12e4019d91890ad4f660345b384b59fad6d9f56f1fcf35babe5a9fbd8dd3908be450edf05ca8a3154fb3ac1af485508c61a7ba322ac06928e7d660fee6bfef74c9c4f22bbab318077446163a3230a3d486ce6d71aed12e2581e4208eed1a540560921ac89e9372482594351a5ff0cf9e95e80f0a69c4d621638c9056ae0bdfc44895f061767aba8400da865b73b5488c690694af744372c00d87bba4664a60f13f1453337113055d7b659a87208c1e663e4d35f0ebcfe70459f5ec5812434468cec38d3fbcf90598de986b3d49ad45e7b3b230fc389b5278ed6242abe9c44a8c74438968cc9b7a253d89c5b14f7a917b86a6d51f5d5380f2a7606dbe1867fd781fab284d153e20f5bf1a2c8156b93e60dc8945eb8385d937537b785f6f6af81ea0131398c77819ddea78eadf6b6f019db772e69e9cde3540ddc95625987b4a4e1dbbf15bc0217abac6cc3ff0650ed11fa612b90afaab842be4c2bd9967702b023e8ecd5f4a0e62af56f7320241a8516bcdf344a4421eed035b8c5a126820c5dc3962f5df4bf369bd6260eb09aa8e1310bf6f28aba0e3236f699721daa26950de7fa8fd8c3d2adebc101e304d0ed1af839c74b6cc42a6d7244f6b31ed08f6f12f62569b2c0602cc371962bff74b9b3c5f6326247d4ffec7f2d0a073e5a678e76f4243533001b1c0de6739c5c6ec0195fa9a8e898c2068bb614c40c403324e84cdbc530121217ba49f300aa8d5056d170d0a6bc8827ee20d55401b9f401b12e212cf630781139978b5fb38fdf768fec87b79f7a70d6083c3df98019ebd09b7941708e06c8d9fa930a1fdb993e0061343c87b4cf47dd36f9a3d603ca986f5144af403b7b04a93f5808a8c192df5e4c17af1ec23eddd1e7fc91109e6a4cfe5e23435bcabf3915ce5242cb6f7974e97c8ad3773e3a510afa52c4193c36fd1b99a02ece5b19ad35eb8fa97b57fd1641b463de79cdd2aac5d5b4060a040ad1d5752d70015b74d556fb4ef0cc8747591edc8858707616104f0ec342fb3a9b95df31b6f84e56387aae80a72d8dd670be7aaeef54065d6e2d7837481ce5622ee3c115d02d50efdb20aaf25b636d6d6c7e49f50a4b30ae243ecf1187ffe851c52bb1849c5e5c0979b758b747aebfdab58d8fd60faa5d5005f401c661256183dd4e7cba38b4ccf03506398eab901595dc2de27ab231abdddffc9d120abd8025b77ac47f39b6373a38a09bc045559578ccdf0402385177d499333d06d2cd3f604689d50dcd01b04ffbcb545385da389e4b6102ee77febb8a34a906f822601e61d2d3fc9e206caf3753f65422a5ff31dc3b3c4d09aa9a90f9ebc858ee2e4df6a730948e436586c665a3c64aab00aa757d252eec5b8bea5035a5b9f644cb84a991286edc2a394cef9fd40ad085aa99680aea363dc163c2ef40e0f289e0b79dc600f31ae510bbd74f963632ff25230a1ec866fed0db0d0af59c5b9f4a18659f5a218c3d0db80700719a61e59efbd5f996145139e5654a9290bf504eb7453775b8c6190ff51d4c04ce9384060f1dd34799fee04c0f951ae15cb589f80dc544c05421d60f51cbc78df7dceff213575bfebe2bb307d196ef0a5cf3c2608fbb969a574e6dce9132246447a84cab6dd4923281cf40bc19c29585a02bc0d2d491907e5b528a1cfc7b2fe88dc2520ea49903423cb7a0d23530daa7217e7f312d4ec67c02fc74ab8d91b8ead50bfe9508b0f7d70e88868ee1a5f38349054374ae463d1148e0ca238c0f9fe7b40f6fba87498697f3220612ea66feb18a29f1df04234ac3d69e0706d0deef321d09ee16de188a32f4c41635cf48ee35a42140fc08b42c2e0e289a3c73fd4b0e656a72b29b99093127a17aaa199610787787abb0f4613dd03332a9306b9b5e98e9c839ffce5e72c44b288593bee47253613dc0fc3e583ab9aac7e1a161dfc36bd038d533eb6829b22dc1a01f055c16f83c1b1abe049b5744508456658c6df44c13d6ab1a18d76a55740cdcfca4a1dd81b54d9c4e71cef9f4b55f1ebc7751766175d631f9607f22a613377f6d96afaddbc66cbeef20ae578468f33265516ee711e2591e1af272a35bf5cedc78aec6e330bf6f3f3b9cdb7d373754125c9caea6a4d344d098c7332175b09441cc11040e5b71e9b975b2aaaaa5f8c5f502b00ad3ade9de204602aa227c9f11da55107b79802c09d246050c6580d92559a47935cfb59b47e88aa8095ea1ac34578697ffe89c440a2369f6661db2c24f1056d553e200184b927b359efba5db1e69e7f2cf5e4dd9c9bbc3e085fc38c43f436aa47abcc1e9986fc0226262588110c5b27c6fe9b8072cd8204c500883d3b9feaed80d5d87929d01b9bad995ed58a1be3ccad600840c6424625f4f4c221c8e1cd11af1a5ac153954ac6b441692f296ac2d529233d317fecf3fbfa53f77c8ea47d1385e3ca4b8b55fd2467cac15af1bfa04fb41784305a4b9aed6880cfba9629d6dabd22b2bd90c1aad0f2e0dff0777112b1e313447cf9417a52a58b17cc73ab03d4841ec9b1dc3f75d0fb5ece65c99982b338bb2f42b68104d94c826247814bd68e7c9664e8b2a9fdaf7fde4730960b43a496cb818badfbc97d1e51aa7817657e49536e69cacb3c4abb27dfe10d5c962fabdd3056d290a2b969e7f61d144e22539c5e2027b57c8e099db6ab8f0fdda7412b393af60e3299478744e9071801c4c39b0c87d4f237ade73b955812f254e641844e985d40f3e4df51bf7a9c81f02d22ad8296fe94d4664f3c0d113974ba222dab68c4407e9d5359205a5fec059d4370e0d15fd040ced32baa7e8586d38680a4c2e4e5679c0d374636e9dc0fd9a06808671f08e8c19b0bed18540de8107855f410f8954e078755a8c7b0822c25e2534887c9593aa1e008e78244cfec5b347a847ecf61cb207dcb2170b663a54d98ffeea991a9d944e4a8302bf37231bf3558c6b2fcaf925becb663bb574341bc81bbc50e9f0108c5d8a7783caf25bcb3bc24368e8a4915785652877555d22f7d6cbcb12049180ee4c49502d41c0fb00e31f3835b53e622e85290ee5a641eb9215567fed4782484ba8ccb43d81d3ef3ca5d8a2e3389864c15946e3d5dad607447f35a5396c27e99e20a1b98393169d85e788e9c4f9367649b308094479bc0ad8d68f0dc655724e2d9f599557f567fe7fd11f87b37df7ce0530e40d7e0ab06c2b273716e2598bd6e816c18c2e3c038b199e58424a5d72759af13e121e21d263fa0f24577a32b4356919cc22c5d1929b15590a53861aaf68aaa9ed404d1e64c3c6b0fa19e0a5299bd46867aff993b87ce96fd493fa2b125ea23907f9598acc33cd7e90c2383d5af5d232d979766ac2743c93d947db811d38df20742fa1db7c6f2306ec008ca9d53faf1a7cc2372d42437f906ef6ff9db785ac575c97e4f568e57414a0881ffe1b8dee59240305e28ab5f4f2c990c959009b022a656386229c7a71b3fcbc381a1f3511751ef19653d8e7dd0de12f630c719413a84b385802f5e8e2680cc2afa7fbb1cd1193a1e5af32ad07b24ba1c05904d3325634d10aa685d97f9c1d58377cfa46f17f0f57c7d48ce0917a8b4f5bccdf60e52764b7a826e6ccab1b70821a74cc5cc2e15532d3ef346aaf9c31fe0e0776bb1e3f4f5f276bcf53f5ea9018609b18b47497dba8e73676d2fc2fba47472ffba25ba7ddca1e9754b516eff05a05eaba9e7752f8d97f99684e3a53ded2d2c1913a6e488c65f57f8d85d261c762c37015c756e0aeed54edda41236bae33ed83c688478bcd94ce9e67971c0f8e588f1a3a4cd3f7da5e571c1984d9c9a10bb7eaf8414cbabf5fb97a17a67d10ae1a7ab96a8df88da1e82e797e67b534f765a5dcac76bb769d9547f375cfbea8d9f434f48d60e05df8797919fef5cb01a04177ed092a37f71f7948279bc4c35e3239e943a1507cff0b7152dd95c27e573e0191cfe1bc9f3862e5329ddcd160c61fc5bb82b57d8086e1e74abfc36bb43404357c50eb150fcaea9aac90fa0c413ea9f8538055a45b77d5a7548f6a4f2414714495576a1de459a55ab298a2a2fa33459da0d205e4b91d340c0721226e546f323bb878605590b66516fa51fd635e5eaa580486f6fb543b6b5236871aa3dedcb44e7d73d9bf704420fc0bb9b1a0f21e848ed9161e9bf1ae3bc628861b5007f0a38884a178dc85dbf034e9234fe603698cda4811dfcb73253335ca7cee533957578a9b97f149ae6dbd43c4aae8a16da135830f7a1c5b913838d5c28936f45f2d9ed991ec7a3ab83df4dd6fe2ff720a6b8abf40927bf8835bfa25effb92eadea47ae1629193ee5707767b13771cb105f231be2af8380a85b9de42f682d22d17c926ccbe39ea3fa7a5d3c0f6b3dc7802b927a36cd04ade3e02bf8ce06a52585388fb8f49df4dda68e9eb426da9c0909d5b9cf4b16c2e3f78331c8683a1698033ea0b1ed4dd33edeecd89c4f14caf84d52336e500", 0x1000}}, 0xd31) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/power/pm_debug_messages', 0x101a02, 0x0) 1.254403028s ago: executing program 3 (id=387): mount(&(0x7f00000000c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='ecryptfs\x00', 0x208002, 0x0) 1.230398708s ago: executing program 3 (id=389): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x256c, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)={0x40, 0xe, 0x20, {0x20, 0x38, "866daa17ccef9b40fce32aff8768ecfaa4f8e86c8487c43bf5eddc1c3b92"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 1.158626468s ago: executing program 2 (id=390): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000340)={0xffffffffffffffff}, 0x111, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0, r2, 0x2}}, 0x18) 1.128643188s ago: executing program 2 (id=392): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) syz_mount_image$f2fs(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x8, &(0x7f0000005880)=ANY=[@ANYBLOB="6e6f646973636172642c6e6f636865636b706f696e745f6d657267652c616c6c6f635f6d6f64653d64656661756c742c6163746976655f6c6f67733d362c757365725f78617474722c6661756c745f696e6a656374696f6e3d30303030303030303030303030303030303031362c646973636172642c6e6f61636c2c6673796e635f6d6f64653d706f7369782c616c6c6f635f6d6f64653d64656661756c742c6e6f657874656e745f63616368652c6163746976655f6c6f67733d322c6661756c745f747970653d30303030303030303030303031363737373231342c0084538367d8b9c04bebbf0f4ea4d5617c063f0a30b5325e5d939d497829d8452e38794f1563bf34cdaaf9b70591db2f2a066e339d0c0b7c189bac05d8e91e9d1f4670d79a57f83b67f1f98b905d3b06be7de7829439d0b21d1744d7fad3fe3f3f9b3361f4bfa2c2e375c048af0d6ecac62d07c6a85e2558b9e8639b050137830520aea2c9243f9f9eca12969def7d15c8bac687164c38cf349d738c"], 0x1, 0x5512, &(0x7f0000005a00)="$eJzs3L1vG2UYAPDHSdM2bSkRYmDrSRVSItVWnI8KtgCt+BCpogIDEzi2Y7m1fVHsOCETAyNi4D9BIDEx8jcwMLMhBhAbEsh3F2j4qBB1YpL8ftL5uXvv9XPPa0WRnjvLAZxbc8nPP5biesxGxHREXIvI9kvFllnLw3MRcSMiph7ZSsX47wMXI+JKRFwfJc9zlopTn94a3lz94Y2fvvrm0oWrn3357eRWDUza8xHR3c7397p5TFt5fFCM14btLHZXhkXMT3QfFsdpHveam1mGvdrhvFoWl1v5/HR7tz+KW51afRRb7a1sfLuXX7A/bB3myd7woLaTHTeam1ls99Mstg7yuvYP8v9tB/1BnqdR5PsgSx+DwWHMx5v7zXw92w+zWO8NivE8b9po7o/isIjF5aKedhpZHZtP8kn/v73Z7u3uJ8PmTr+d9pLVSvWFSvV2ubqTNpqD5kq51m3cXknmW53RtPKgWeuutdK01WlW6ml3IZlv1evlajWZv9PcbNd6SbVaWa4sllcXir1byav33kk6jWR+FF9u93YH7U4/2Up3kvwdC8lSZfnFheRmNXlrfSPZuH/37vrG2+/deffeS+uvv1JM+ktZyfzS4tJSubpYXqounKP1f1QUPcb1wxMpTboAgNNH/w8ci9nHnz6+/n/nfsTx9/+h/x+LU9X/Pqb//69tyFlZP0yE/h8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4Nz6bubz17Kdufz4ajH+VDH0THFcioipiPj1b0zHxSM5p4s8M/8wf+ZPNXxdiizD6BqXiu1KRKwV2y9PH/enAAAAAGfXFx/e+CTv1vOXuUkXxEnKb9pMXXt/TPlKETEz9/2Ysk2NXp4dU7Ls7/tC7I8pW3YD6/KYkuW33C6MK9u/Mn0kXH4klPIwdaLlAAAAJ+JoJ3CyXQgAAAAn6eNJF8BklOLwUebhs+Dsm/d/PBCcPXIEAAAAnEKlSRcAAAAAHLus//f7fwAAAHC25b//BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/MbO/dwmDkRxAH42eGH/adFq79vK3qCMLWGPe4woIE1QQA6khTRADeSWEiKI8DgEIg6RPLaV6PskZzKW+fEGwWFmpAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAu3Vfrxe3V7+u2Obt9O3lGAwAAAFyyrdaL+p9Z6n9t7n9vbv1s+kVElBFxae4+ik9nmaMmp3p5/ub0+epVDXcRdcLhPSbN9SUi/jTX44+uPwUAAAD4uDbL1TzN1tOf2dAF0ae0aFN++5spr4iIavaQKa085P3KFFZ/v8fxP1NavYA1zRSWltzGudLepP65H1ftpidNkZry4suORWYbOwAA0KPRWdPvLAQAAIA+/Ru6AIZRxPNW5nErcJKaZnvv81kPAAAAeIeKoQsAAAAAOlfP/3s6/2/v/D8AAAAYRjr/DwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgC5tq/Vis1zN2+bs9u3kGQ0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPDE/ryrUAgDMADNffjapN/rx0tAV1eXc6CQJnQoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAATz7XyfcOv4Y9yb9tw9R6JJmTHL0sndqsnRu2PhgvfwYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABO9uclBUIgCKJgzvjfSd//sJKgZxAhAhoeVdSiAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+KTf/fJ/YmqcSeZOG0vHI8naVWPrqrH3oHH0YLz9GwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAudu7nNY4qDgD4d2Z2trYqxig5RETBg15suq2tvYkHJXjwTxBCuq2xW3+0OdhSxFy8Sc69iB5FBCXe+j/03EIv9dbDHip4jszsTHbaFFx/dGbbfD7w5n13GOZ93yyEfOe9BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACojd+dxllxWJjEaXXu5r2r60V/64G+cH379nLRijhpM+nHw8vND8lSd4kAAABwcGR1fR8Rd/Kd1aJPF8r6P6+vKWr+75+dxHU9/2DdX/d17V+03369++LeQAuTcYqbnt0YDY/tT6X36GY535772yt65ZMv371k5ReSfrD1wjgvn2fy7Y0b7/XL8FAb2QIA/8bRuq+C+vehoh90mRgAB0avUXjX9X+20G1OAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAG0Yb8XTdZxExHJvGhdu3bu6/rD++vbt5bqdunZtO76e3rO4RR4RZzdGw2Otzma+Xbp85fzaaDS82H7wSkR0Nfo71fTPfzTDxRGdPB/B/xSk1Zc9L/k8HkGHP5QAAHgi5VUr6vo7+c5qcS5ZjNj94f76//VGHDPW/3c/PnWzOVaz/h+0NsP5t7J54fOVS5evvLlxYe3c8Nzw07eOD94enDh98uTplfJdyYo3JgAAAPw3/ao16/90cf/6/5FGHDPW/198N/iqOVam/o/Y3d13arro10lGAAAAVJ5/9c8/koecT/r9+HJtc/PiYHLc+3x8cuwg1X/sUNWa9X+22HVWAAAAQBvGW8l96/9nGnHMuP7/zI8v/dy8ZxYRh6v1/6Prn43OtDedudbGnxN3PUcAAAC6dbhqzfX/vNz/n+5teUgj4o3XJnH1bwBnqv+z97/5qTlWc///ifamOJfSpcnzKPuliN5S1xkBAADwJHuqakWx/3u+s/rJL0c+7Nv/DwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANC2vwIAAP//3rpBAw==") r0 = open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x68) r1 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) lseek(r1, 0x100, 0x0) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0) pwritev2(r2, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) fallocate(r0, 0x0, 0x1000000, 0x1001f0) 1.001385688s ago: executing program 1 (id=395): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x4002, 0x0) syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000002900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000010, &(0x7f00000022c0)=ANY=[], 0x1, 0x6d0, &(0x7f0000001340)="$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") openat(r0, 0x0, 0x2804c1, 0x20) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 936.967488ms ago: executing program 1 (id=396): syz_mount_image$squashfs(&(0x7f0000000940), &(0x7f0000000080)='./file1\x00', 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="007e2a01b3e93dc9b01cde3a16380b3485a43d22a0baf1475abb31820c847c4cc9c5f7fb5b0346e9584bd76d3e0284a2d88a1203a216f9000000000000000000cd53386d3903cd1c5feea0df6ae2ffebef5a71b94f19fe6b85f2e967358056b96f0ea03203e45120741be6031f1d069575c54d3635d0bfe4f1c7021f"], 0x1, 0x17d, &(0x7f0000000d80)="$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") listxattr(&(0x7f0000000000)='./file1\x00', 0x0, 0x0) 874.354238ms ago: executing program 2 (id=397): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000"], 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff85000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='sched_switch\x00', r3}, 0x10) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7b, 0x4) bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r4, &(0x7f0000000700)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff959bcecc7a95425a3", 0x2a, 0x11, 0x0, 0x0) recvmsg(r4, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x407006}, 0x104) r5 = io_uring_setup(0x204b, &(0x7f0000001600)={0x0, 0x20, 0x3080, 0x6, 0x27d}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r5, 0x15, &(0x7f0000000980)=[{0x0, 0x0, 0x0, 0x0, 0x0}], 0x1) 874.053969ms ago: executing program 4 (id=398): socket$netlink(0x10, 0x3, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000), 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000100)) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000006c0), 0x48200, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, 0x0) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000180)={0x28, r2, 0x1, 0x70bd26, 0x0, {{0x2}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0x74}}}}}, 0x28}}, 0x20000000) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x80000}, 0x94) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r4, 0x40047438, &(0x7f0000000180)=""/246) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x2, &(0x7f00000000c0)=@gcm_256={{0x303, 0x36}, "f1ff5ef2fe010017", "9e8ecc7bb5352776725e1047711330ff2bb17b5508000000000000009bc400", "dc5d3f00", "46b0dc72b7b1d30e"}, 0x38) ioctl$PPPIOCSFLAGS1(r4, 0x4004743a, &(0x7f0000000300)) write(r0, &(0x7f0000000380)="3ace", 0x2) 816.944549ms ago: executing program 1 (id=399): syz_mount_image$hfs(&(0x7f0000002c80), &(0x7f0000000000)='./file1\x00', 0x1004cde, &(0x7f0000000040)=ANY=[], 0xfd, 0x29a, &(0x7f0000000740)="$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") r0 = open(&(0x7f0000000240)='./file1\x00', 0xc4142, 0x0) r1 = open(&(0x7f0000000180)='./file1\x00', 0x185102, 0x3b) ftruncate(r1, 0x2007ffb) sendfile(r0, r1, 0x0, 0x1000000201001) 785.194629ms ago: executing program 1 (id=400): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000080000000000000004850000006d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, 0x0}}], 0x48}, 0x0) 434.02634ms ago: executing program 0 (id=401): socketpair$unix(0x1, 0x3, 0x0, 0x0) unshare(0x2040400) syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000180)=ANY=[], 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x118d, &(0x7f00000000c0)={0x0, 0x8d2dc, 0x0, 0xffffffff, 0xc2}, &(0x7f00000003c0)=0x0, &(0x7f0000000140)=0x0) epoll_create1(0x0) syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00') syz_open_dev$sndpcmc(0x0, 0x0, 0x80000) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x5, r1, 0x0, 0x0, 0x0, 0x80000}) io_uring_enter(r2, 0x47f5, 0x0, 0x0, 0x0, 0x0) 433.58442ms ago: executing program 4 (id=402): unshare(0x22020600) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY(r0, 0x0, 0x1, 0x0, 0x0) 433.23294ms ago: executing program 1 (id=403): r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x2, 0x842) ioctl$EVIOCGBITSND(r0, 0x40044591, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82307202, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'veth1_to_team\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="400000006800010025bd7000feffffff0a0000000000000018000880140001000100000000000000870004001048a2f5060007000700000008000500", @ANYRES32=r2], 0x40}, 0x1, 0x0, 0x0, 0x20000}, 0x40040d0) r3 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x16, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0xfffffffd, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000}, 0x94) r4 = add_key$user(&(0x7f00000003c0), 0x0, &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000200)={r4, r4, r4}, 0x0, 0x0, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x201, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000000)=0xf) ioctl$TIOCSSOFTCAR(r5, 0x80047437, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@ipv6_newrule={0x38, 0x20, 0x1, 0x70bd29, 0x0, {0xa, 0x0, 0x20, 0x64, 0x0, 0x0, 0x0, 0x7}, [@FIB_RULE_POLICY=@FRA_SUPPRESS_IFGROUP={0x8, 0xd, 0x9}, @FRA_SRC={0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24040804}, 0x0) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000040)={0x0, 0x3, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4, 0x0, 0xc, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2, 0x1, 0x4d3, 0x0, 0x0, 0x0, 0x2, 0x7ffffffe}]}, 0x20}}, 0x4000000) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYRESDEC=r0], 0x5c}, 0x1, 0x0, 0x0, 0x48800}, 0x40004) 432.9545ms ago: executing program 3 (id=404): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000f00)=@raw={'raw\x00', 0x8, 0x3, 0x3d0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x300, 0xffffffff, 0xffffffff, 0x300, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0xff000000, 0xffffff00], [0x0, 0xff000000], 'veth0_macvtap\x00', 'veth1_to_hsr\x00', {}, {}, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'hsr0\x00', {0x41, 0x1ff, 0x3, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x40, 0x8}}}]}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x8}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [0x0, 0x0, 0x0, 0xff], [0x0, 0x0, 0xffffffff], 'erspan0\x00', 'gre0\x00', {}, {0xff}}, 0x0, 0x128, 0x190, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'rose0\x00', {0x0, 0x0, 0x5, 0x5, 0x0, 0x7, 0x0, 0xa0}, {0x5a}}}, @inet=@rpfilter={{0x28}, {0xa}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x2, 0x0, 0xc204, 0x10000, 'syz0\x00', 'syz0\x00', {0xd}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x430) 394.41795ms ago: executing program 4 (id=405): r0 = openat$udambuf(0xffffff9c, &(0x7f0000000200), 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000002000000", @ANYRES32, @ANYBLOB="0000004000400000000008180066000000000000", @ANYBLOB]) 356.1244ms ago: executing program 1 (id=406): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f0000000480)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001200)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) 286.5299ms ago: executing program 4 (id=407): ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000140)={0x9, 0xc5, {}, {0xee00}, 0xe0000000, 0x80000000}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) timer_create(0x3, 0x0, &(0x7f00000000c0)=0x0) timer_settime(0x0, 0x1, &(0x7f0000000240)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) timer_gettime(r0, &(0x7f0000000080)) 286.28539ms ago: executing program 3 (id=408): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581", @ANYRES8], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197d09647190890"], 0x0, 0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000"], 0x398}}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000000), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r1, 0xd01c4813, &(0x7f0000000100)={0x2, 0xffffffff, 0x0, 0x2, 0x0, 0x42}) 257.12768ms ago: executing program 4 (id=409): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000340)='/dev/comedi2\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'rti800\x00', [0x4f27, 0x0, 0xc139, 0x2, 0x4, 0xaf, 0xe, 0x807, 0x54c6cff3, 0xf1c00000, 0x2, 0xfffffffd, 0x1, 0x2, 0xa, 0x8a73, 0xfffffffe, 0x7f, 0x5, 0x40000003, 0x6, 0xcaa3, 0x1000, 0x7fff, 0x3, 0x479, 0x0, 0x8, 0x4086, 0x0, 0x5]}) 224.6423ms ago: executing program 4 (id=410): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448e3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_mount_image$ocfs2(&(0x7f0000004740), &(0x7f0000004780)='./file0\x00', 0x100000a, &(0x7f00000002c0)=ANY=[@ANYBLOB='journal_async_commit,heartbeat=none,usrquota,barrier=000000000\x000000000007,heartbeat=none,nointr,\x00'], 0x1, 0x4703, &(0x7f0000004800)="$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") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f00000004c0), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) ftruncate(r1, 0x0) 0s ago: executing program 2 (id=411): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001040)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x4}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r4 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r4, &(0x7f00000005c0)="bad330fbc9b55400040000ea0756", 0xe, 0x40, &(0x7f0000000080)={0x11, 0x88a8, r3, 0x1, 0xd8, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.28' (ED25519) to the list of known hosts. [ 24.544348][ T4309] cgroup: Unknown subsys name 'net' [ 24.829301][ T4309] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 25.093987][ T4309] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS [ 25.839659][ T4324] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 25.841332][ T4324] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 25.844371][ T4327] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 25.846017][ T4324] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 25.846111][ T4327] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 25.848660][ T4327] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 25.850605][ T4327] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 25.851801][ T4327] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 25.853163][ T4327] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 25.854611][ T4327] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 25.856046][ T4327] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 25.857740][ T4327] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 25.880673][ T4324] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 25.882141][ T4324] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 25.883473][ T4324] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 25.885005][ T4324] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 25.886410][ T4324] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 25.888025][ T4324] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 25.889596][ T4324] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 25.891195][ T4324] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 25.892515][ T4324] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 25.894137][ T4326] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 25.895463][ T4326] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 25.897681][ T4326] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 25.899508][ T4324] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 25.901053][ T4326] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 25.902373][ T4326] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 25.903645][ T4326] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 25.905410][ T4321] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 25.907954][ T4326] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 25.989627][ T4323] chnl_net:caif_netlink_parms(): no params data found [ 26.009467][ T4320] chnl_net:caif_netlink_parms(): no params data found [ 26.028453][ T4328] chnl_net:caif_netlink_parms(): no params data found [ 26.041246][ T4323] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.042390][ T4323] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.043879][ T4323] device bridge_slave_0 entered promiscuous mode [ 26.060632][ T4323] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.061864][ T4323] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.063370][ T4323] device bridge_slave_1 entered promiscuous mode [ 26.071141][ T4320] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.072308][ T4320] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.073886][ T4320] device bridge_slave_0 entered promiscuous mode [ 26.089728][ T4320] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.091083][ T4320] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.092506][ T4320] device bridge_slave_1 entered promiscuous mode [ 26.107092][ T4329] chnl_net:caif_netlink_parms(): no params data found [ 26.114336][ T4323] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.115826][ T4328] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.118780][ T4328] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.120206][ T4328] device bridge_slave_0 entered promiscuous mode [ 26.123113][ T4328] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.124117][ T4328] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.125490][ T4328] device bridge_slave_1 entered promiscuous mode [ 26.128471][ T4320] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.130836][ T4323] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.145130][ T4320] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.150786][ T4323] team0: Port device team_slave_0 added [ 26.153459][ T4323] team0: Port device team_slave_1 added [ 26.158802][ T4328] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.163673][ T4330] chnl_net:caif_netlink_parms(): no params data found [ 26.169359][ T4328] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.178841][ T4320] team0: Port device team_slave_0 added [ 26.188683][ T4320] team0: Port device team_slave_1 added [ 26.192357][ T4323] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 26.193382][ T4323] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.199027][ T4323] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 26.210980][ T4320] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 26.212113][ T4320] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.215844][ T4320] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 26.218550][ T4323] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 26.219671][ T4323] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.223513][ T4323] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 26.226467][ T4328] team0: Port device team_slave_0 added [ 26.233626][ T4320] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 26.234625][ T4320] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.238229][ T4320] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 26.243222][ T4328] team0: Port device team_slave_1 added [ 26.244392][ T4329] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.245538][ T4329] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.249374][ T4329] device bridge_slave_0 entered promiscuous mode [ 26.253378][ T4330] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.254455][ T4330] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.255964][ T4330] device bridge_slave_0 entered promiscuous mode [ 26.258618][ T4330] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.259726][ T4330] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.261246][ T4330] device bridge_slave_1 entered promiscuous mode [ 26.268453][ T4328] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 26.269560][ T4328] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.273371][ T4328] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 26.275167][ T4329] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.276208][ T4329] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.277666][ T4329] device bridge_slave_1 entered promiscuous mode [ 26.285604][ T4328] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 26.287111][ T4328] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.291035][ T4328] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 26.303605][ T4330] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.306041][ T4330] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.337723][ T4320] device hsr_slave_0 entered promiscuous mode [ 26.396826][ T4320] device hsr_slave_1 entered promiscuous mode [ 26.465359][ T4329] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.497659][ T4323] device hsr_slave_0 entered promiscuous mode [ 26.546762][ T4323] device hsr_slave_1 entered promiscuous mode [ 26.596668][ T4323] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 26.597876][ T4323] Cannot create hsr debugfs directory [ 26.602707][ T4330] team0: Port device team_slave_0 added [ 26.608544][ T4329] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.612661][ T4330] team0: Port device team_slave_1 added [ 26.647635][ T4328] device hsr_slave_0 entered promiscuous mode [ 26.686777][ T4328] device hsr_slave_1 entered promiscuous mode [ 26.736705][ T4328] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 26.737871][ T4328] Cannot create hsr debugfs directory [ 26.757612][ T4330] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 26.758788][ T4330] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.762452][ T4330] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 26.765641][ T4329] team0: Port device team_slave_0 added [ 26.771825][ T4330] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 26.772974][ T4330] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.777297][ T4330] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 26.782518][ T4329] team0: Port device team_slave_1 added [ 26.804534][ T4329] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 26.805716][ T4329] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.810008][ T4329] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 26.818975][ T4329] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 26.820075][ T4329] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.823720][ T4329] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 26.867531][ T4330] device hsr_slave_0 entered promiscuous mode [ 26.906764][ T4330] device hsr_slave_1 entered promiscuous mode [ 26.946697][ T4330] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 26.947946][ T4330] Cannot create hsr debugfs directory [ 27.047808][ T4329] device hsr_slave_0 entered promiscuous mode [ 27.106839][ T4329] device hsr_slave_1 entered promiscuous mode [ 27.146652][ T4329] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 27.147923][ T4329] Cannot create hsr debugfs directory [ 27.180381][ T4320] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 27.229335][ T4320] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 27.272851][ T4320] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 27.311274][ T4320] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 27.372418][ T4323] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 27.401090][ T4323] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 27.437978][ T4323] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 27.481016][ T4323] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 27.545269][ T4328] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 27.583516][ T4328] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 27.618098][ T4328] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 27.659140][ T4328] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 27.699145][ T4330] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 27.743859][ T4330] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 27.787783][ T4330] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 27.852397][ T4330] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 27.905914][ T4329] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 27.927237][ T4327] Bluetooth: hci3: command 0x0409 tx timeout [ 27.928221][ T4327] Bluetooth: hci4: command 0x0409 tx timeout [ 27.929097][ T4327] Bluetooth: hci2: command 0x0409 tx timeout [ 27.930062][ T4327] Bluetooth: hci1: command 0x0409 tx timeout [ 27.930221][ T4326] Bluetooth: hci0: command 0x0409 tx timeout [ 27.942049][ T4329] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 27.977903][ T4329] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 28.031189][ T4329] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 28.084889][ T4320] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.108281][ T1604] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 28.110191][ T1604] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 28.116070][ T4320] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.129320][ T4323] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.131251][ T1604] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 28.133131][ T1604] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 28.134836][ T1604] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.135929][ T1604] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.139301][ T1604] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 28.149964][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 28.151887][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 28.153438][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.154622][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.157379][ T1604] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 28.158811][ T1604] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 28.163034][ T4330] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.171578][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 28.172980][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 28.174250][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 28.183338][ T4323] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.185251][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 28.187470][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 28.189609][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 28.191108][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 28.193003][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 28.194597][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 28.197464][ T4328] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.202947][ T4330] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.205198][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 28.208812][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 28.214284][ T4320] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 28.216280][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 28.220809][ T4329] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.222618][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 28.224195][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 28.225576][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 28.229324][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 28.231190][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.232379][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.233909][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 28.235397][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 28.238133][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.239264][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.240666][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 28.242158][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 28.248902][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 28.250298][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 28.251975][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 28.253758][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 28.255204][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.256191][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.258407][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 28.262965][ T4328] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.266092][ T4329] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.271227][ T222] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 28.272695][ T222] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 28.274026][ T222] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 28.275463][ T222] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 28.279371][ T222] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.280393][ T222] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.281672][ T222] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 28.283454][ T222] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 28.284852][ T222] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.285935][ T222] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.288138][ T222] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 28.296023][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 28.297930][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 28.299375][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.300497][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.301804][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 28.303313][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 28.306732][ T222] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 28.314974][ T1573] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 28.317449][ T1573] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 28.318939][ T1573] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 28.320513][ T1573] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 28.321990][ T1573] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 28.323645][ T1573] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 28.325183][ T1573] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.326413][ T1573] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.332709][ T1573] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 28.342019][ T1573] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 28.343528][ T1573] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 28.345065][ T1573] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 28.347986][ T1573] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 28.350166][ T1573] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 28.351711][ T1573] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 28.353479][ T1573] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 28.355060][ T1573] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 28.357166][ T1573] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 28.358825][ T1573] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 28.360260][ T1573] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.361412][ T1573] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.364721][ T4330] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 28.367777][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 28.372053][ T1573] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 28.373485][ T1573] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 28.375018][ T1573] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 28.376501][ T1573] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 28.382899][ T222] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 28.384548][ T222] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 28.385962][ T222] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 28.389092][ T222] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 28.390986][ T222] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 28.392692][ T222] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 28.396143][ T222] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 28.398220][ T222] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 28.399462][ T222] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 28.400998][ T222] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 28.408794][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 28.410502][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 28.411897][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 28.413604][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 28.416024][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 28.418723][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 28.420123][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 28.424510][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 28.427545][ T222] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 28.429228][ T222] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 28.431168][ T222] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 28.433168][ T222] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 28.435057][ T222] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 28.439507][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 28.443245][ T4320] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.449831][ T1573] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 28.451823][ T1573] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 28.473186][ T222] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 28.474918][ T222] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 28.488869][ T222] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 28.491727][ T222] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 28.494316][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 28.513593][ T1604] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 28.515220][ T1604] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 28.518125][ T1604] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 28.519542][ T1604] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 28.530639][ T4320] device veth0_vlan entered promiscuous mode [ 28.534954][ T4320] device veth1_vlan entered promiscuous mode [ 28.544843][ T222] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 28.546416][ T222] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 28.551190][ T222] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 28.561755][ T222] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 28.563288][ T222] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 28.564395][ T222] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 28.569788][ T4323] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.573949][ T4330] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.593798][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 28.595452][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 28.601876][ T1604] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 28.603196][ T1604] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 28.609844][ T4328] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.617956][ T4320] device veth0_macvtap entered promiscuous mode [ 28.619380][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 28.620746][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 28.622538][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 28.635119][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 28.638699][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 28.645025][ T4329] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.652079][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 28.653315][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 28.657803][ T4320] device veth1_macvtap entered promiscuous mode [ 28.664945][ T1573] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 28.666469][ T1573] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 28.670329][ T1573] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 28.672246][ T1573] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 28.673994][ T1573] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 28.681096][ T4323] device veth0_vlan entered promiscuous mode [ 28.684845][ T4323] device veth1_vlan entered promiscuous mode [ 28.689905][ T4320] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 28.691327][ T1573] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 28.692931][ T1573] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 28.694566][ T1573] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 28.699291][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 28.700877][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 28.702495][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 28.704054][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 28.705585][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 28.709075][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 28.714872][ T4328] device veth0_vlan entered promiscuous mode [ 28.724735][ T4320] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 28.727710][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 28.729112][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 28.730697][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 28.732542][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 28.733988][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 28.742372][ T4320] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.743698][ T4320] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.745018][ T4320] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.746310][ T4320] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.750173][ T1604] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 28.751882][ T1604] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 28.755971][ T4330] device veth0_vlan entered promiscuous mode [ 28.762970][ T4330] device veth1_vlan entered promiscuous mode [ 28.765802][ T1604] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 28.768091][ T1604] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 28.769655][ T1604] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 28.771244][ T1604] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 28.773872][ T1604] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 28.775590][ T4323] device veth0_macvtap entered promiscuous mode [ 28.779117][ T4323] device veth1_macvtap entered promiscuous mode [ 28.780825][ T4328] device veth1_vlan entered promiscuous mode [ 28.788399][ T1604] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 28.789976][ T1604] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 28.791453][ T1604] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 28.792896][ T1604] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 28.794256][ T1604] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 28.795676][ T1604] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 28.799109][ T4329] device veth0_vlan entered promiscuous mode [ 28.800611][ T1604] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 28.802012][ T1604] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 28.825003][ T4329] device veth1_vlan entered promiscuous mode [ 28.832893][ T4323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 28.834493][ T4323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 28.837531][ T4323] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 28.841671][ T222] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 28.843147][ T222] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 28.844601][ T222] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 28.846140][ T222] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 28.848801][ T222] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 28.850284][ T222] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 28.855486][ T4328] device veth0_macvtap entered promiscuous mode [ 28.858553][ T4328] device veth1_macvtap entered promiscuous mode [ 28.867321][ T4323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 28.868895][ T4323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 28.870940][ T4323] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 28.871989][ T1604] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 28.873733][ T1604] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 28.875215][ T1604] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 28.877858][ T1604] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 28.879522][ T1604] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 28.888923][ T1604] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 28.890525][ T1604] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 28.892621][ T4323] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.893926][ T4323] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.895132][ T4323] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.896361][ T4323] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.899644][ T4330] device veth0_macvtap entered promiscuous mode [ 28.905303][ T4328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 28.907732][ T4328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 28.909139][ T4328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 28.910749][ T4328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 28.913011][ T4328] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 28.915003][ T1573] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 28.916233][ T1573] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 28.919597][ T4330] device veth1_macvtap entered promiscuous mode [ 28.927249][ T1604] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 28.929355][ T1604] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 28.930697][ T1604] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 28.931936][ T1604] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 28.933388][ T1604] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 28.940691][ T4328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 28.942270][ T4328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 28.943592][ T4328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 28.944997][ T4328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 28.948109][ T4328] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 28.950209][ T222] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 28.951868][ T222] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 28.953249][ T222] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 28.954781][ T222] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 28.957575][ T4328] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.959037][ T4328] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.960299][ T4328] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.961574][ T4328] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.974215][ T1604] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 28.975483][ T1604] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 28.978186][ T222] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 28.998002][ T4329] device veth0_macvtap entered promiscuous mode [ 29.001994][ T4330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 29.003656][ T4330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.005135][ T4330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 29.008431][ T4330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.009922][ T4330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 29.011414][ T4330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.013733][ T4330] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.022152][ T1604] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 29.023842][ T1604] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 29.025399][ T1604] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 29.032857][ T4329] device veth1_macvtap entered promiscuous mode [ 29.038040][ T1573] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 29.039363][ T1573] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 29.047565][ T1573] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 29.049629][ T4330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 29.051119][ T4330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.052505][ T4330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 29.056297][ T4330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.059998][ T4330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 29.069978][ T4330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.072562][ T4330] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.082281][ T222] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 29.082319][ T1604] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 29.084016][ T222] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 29.084852][ T1604] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 29.088019][ T4329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 29.089705][ T4329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.091145][ T4329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 29.092764][ T4329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.094160][ T4329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 29.095718][ T4329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.101081][ T4329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 29.102650][ T4329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.104999][ T4329] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.107650][ T4329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 29.109423][ T4329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.111028][ T4329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 29.112576][ T4329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.114023][ T4329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 29.115621][ T4329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.118199][ T4329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 29.119876][ T4329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.122097][ T4329] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.124425][ T4329] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.125888][ T4329] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.127640][ T4329] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.128945][ T4329] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.133417][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 29.135027][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 29.138218][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 29.142071][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 29.143758][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 29.161474][ T4330] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.162904][ T4330] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.164276][ T4330] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.165697][ T4330] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.169873][ T222] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 29.171389][ T222] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 29.174733][ T1573] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 29.191568][ T222] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 29.196868][ T222] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 29.199365][ T1604] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 29.216514][ T222] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 29.217915][ T222] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 29.219706][ T1604] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 29.241978][ T1604] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 29.243166][ T1604] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 29.245882][ T1573] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 29.252716][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 29.253862][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 29.255540][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 29.265250][ T222] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 29.267317][ T222] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 29.269729][ T1573] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 29.294067][ T4438] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2'. [ 29.296444][ T4438] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2'. [ 29.414223][ T4431] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 29.425247][ T4443] Zero length message leads to an empty skb [ 29.593393][ T4449] 9pnet_virtio: no channels available for device syz [ 30.241651][ T4442] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 1 [ 30.243216][ T4442] SQUASHFS error: Failed to read block 0x0: -5 [ 30.303179][ T4327] Bluetooth: hci2: command 0x041b tx timeout [ 30.313920][ T4326] Bluetooth: hci1: command 0x041b tx timeout [ 30.315887][ T4326] Bluetooth: hci3: command 0x041b tx timeout [ 30.320266][ T47] Bluetooth: hci4: command 0x041b tx timeout [ 30.322464][ T4321] Bluetooth: hci0: command 0x041b tx timeout [ 30.351261][ T4431] usb 1-1: Using ep0 maxpacket: 16 [ 30.362335][ T4431] usb 1-1: config 0 has an invalid interface number: 132 but max is 0 [ 30.365434][ T4431] usb 1-1: config 0 has no interface number 0 [ 30.625315][ T4431] usb 1-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 30.626984][ T4431] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 30.628118][ T4431] usb 1-1: Product: syz [ 30.628747][ T4431] usb 1-1: Manufacturer: syz [ 30.629499][ T4431] usb 1-1: SerialNumber: syz [ 30.638280][ T4431] usb 1-1: config 0 descriptor?? [ 30.644914][ T4431] hub 1-1:0.132: bad descriptor, ignoring hub [ 30.645972][ T4431] hub: probe of 1-1:0.132 failed with error -5 [ 30.655503][ T4431] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.132/input/input2 [ 30.708236][ T112] cfg80211: failed to load regulatory.db [ 31.039733][ T4462] Illegal XDP return value 51 on prog (id 2) dev syz_tun, expect packet loss! [ 31.272601][ T4478] device veth0 entered promiscuous mode [ 31.366157][ T4462] netlink: 'syz.3.10': attribute type 10 has an invalid length. [ 31.382742][ T4462] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 31.658496][ T4465] sch_tbf: peakrate 7 is lower than or equals to rate 11 ! [ 31.803784][ T4487] netlink: 156 bytes leftover after parsing attributes in process `syz.4.15'. [ 31.821509][ T4487] netlink: 12 bytes leftover after parsing attributes in process `syz.4.15'. [ 31.845541][ T4488] mmap: syz.2.17 (4488) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 32.326944][ T4452] Bluetooth: hci3: command 0x040f tx timeout [ 32.327851][ T4452] Bluetooth: hci1: command 0x040f tx timeout [ 32.392722][ T4506] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 32.416679][ T4324] Bluetooth: hci4: command 0x040f tx timeout [ 32.417628][ T4324] Bluetooth: hci2: command 0x040f tx timeout [ 32.418657][ T4324] Bluetooth: hci0: command 0x040f tx timeout [ 32.501820][ T4478] device veth0 left promiscuous mode [ 32.689052][ T4400] usb 1-1: USB disconnect, device number 2 [ 32.911532][ T4520] netlink: 156 bytes leftover after parsing attributes in process `syz.1.28'. [ 32.913857][ T4520] netlink: 12 bytes leftover after parsing attributes in process `syz.1.28'. [ 32.942447][ T4523] ======================================================= [ 32.942447][ T4523] WARNING: The mand mount option has been deprecated and [ 32.942447][ T4523] and is ignored by this kernel. Remove the mand [ 32.942447][ T4523] option from the mount to silence this warning. [ 32.942447][ T4523] ======================================================= [ 33.005106][ T4523] 9pnet_virtio: no channels available for device syz [ 33.440029][ T4373] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 33.648593][ T4373] usb 1-1: Using ep0 maxpacket: 8 [ 33.875151][ T4373] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 33.876803][ T4373] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 33.878328][ T4373] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 33.879897][ T4373] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 33.882083][ T4373] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 33.883614][ T4373] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 33.961197][ T27] audit: type=1326 audit(33.950:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4541 comm="syz.3.35" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8e95b9e8 code=0x7ffc0000 [ 33.964553][ T27] audit: type=1326 audit(33.950:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4541 comm="syz.3.35" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=218 compat=0 ip=0xffff8e95b9e8 code=0x7ffc0000 [ 33.970563][ T27] audit: type=1326 audit(33.950:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4541 comm="syz.3.35" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8e95b9e8 code=0x7ffc0000 [ 34.112249][ T4373] usb 1-1: GET_CAPABILITIES returned 0 [ 34.113721][ T4373] usbtmc 1-1:16.0: can't read capabilities [ 34.149346][ T4557] netlink: 156 bytes leftover after parsing attributes in process `syz.3.40'. [ 34.151591][ T4557] netlink: 12 bytes leftover after parsing attributes in process `syz.3.40'. [ 34.243289][ T4562] netlink: 20 bytes leftover after parsing attributes in process `syz.2.38'. [ 34.320740][ T4431] usb 1-1: USB disconnect, device number 3 [ 34.406791][ T4452] Bluetooth: hci1: command 0x0419 tx timeout [ 34.407839][ T4452] Bluetooth: hci3: command 0x0419 tx timeout [ 34.487171][ T4324] Bluetooth: hci0: command 0x0419 tx timeout [ 34.488235][ T4452] Bluetooth: hci2: command 0x0419 tx timeout [ 34.488246][ T4324] Bluetooth: hci4: command 0x0419 tx timeout [ 34.954697][ T4585] netlink: 156 bytes leftover after parsing attributes in process `syz.4.51'. [ 34.960087][ T4585] netlink: 'syz.4.51': attribute type 11 has an invalid length. [ 35.091663][ T4587] 9pnet_fd: Insufficient options for proto=fd [ 35.282013][ T4591] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 35.284387][ T4591] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 36.353388][ T4609] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.430183][ T4613] netlink: 28 bytes leftover after parsing attributes in process `syz.4.59'. [ 36.463038][ T27] audit: type=1326 audit(36.450:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4616 comm="syz.2.61" exe="/root/syz-executor" sig=9 arch=c00000b7 syscall=98 compat=0 ip=0xffff9b55b9e8 code=0x0 [ 36.488671][ T4609] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.568308][ T4609] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.639611][ T4609] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.691102][ T4624] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 36.694279][ T4624] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 36.784054][ T4609] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.787430][ T4609] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.790748][ T4609] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.794671][ T4609] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.057555][ T4631] fuse: Unknown parameter 'grou00000000000000000000' [ 37.373688][ T4629] binder: tried to use weak ref as strong ref [ 37.374704][ T4629] binder: 4628:4629 Acquire 1 refcount change on invalid ref 0 ret -22 [ 37.376453][ T4629] binder: 4628:4629 DecRefs 0 refcount change on invalid ref 0 ret -22 [ 37.377787][ T4629] binder: 4628:4629 got reply transaction with no transaction stack [ 37.379135][ T4629] binder: 4628:4629 transaction reply to 0:0 failed 3/29201/-71, size 0-0 line 2946 [ 37.387642][ T4629] netlink: 8 bytes leftover after parsing attributes in process `syz.0.65'. [ 37.390313][ T4373] binder: undelivered TRANSACTION_ERROR: 29201 [ 37.437595][ T4639] netlink: 156 bytes leftover after parsing attributes in process `syz.2.68'. [ 37.439681][ T4639] netlink: 'syz.2.68': attribute type 11 has an invalid length. [ 38.175530][ T4659] netlink: 20 bytes leftover after parsing attributes in process `syz.4.74'. [ 38.182500][ T4659] netlink: 36 bytes leftover after parsing attributes in process `syz.4.74'. [ 38.185661][ T4660] netlink: 20 bytes leftover after parsing attributes in process `syz.3.73'. [ 38.331396][ T27] audit: type=1326 audit(38.320:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4663 comm="syz.1.76" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9fd5b9e8 code=0x7ffc0000 [ 38.341859][ T27] audit: type=1326 audit(38.330:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4663 comm="syz.1.76" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9fd5b9e8 code=0x7ffc0000 [ 38.346483][ T27] audit: type=1326 audit(38.330:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4663 comm="syz.1.76" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9fd5b9e8 code=0x7ffc0000 [ 38.368173][ T27] audit: type=1326 audit(38.330:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4663 comm="syz.1.76" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9fd5b9e8 code=0x7ffc0000 [ 38.385398][ T27] audit: type=1326 audit(38.330:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4663 comm="syz.1.76" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=210 compat=0 ip=0xffff9fd5b9e8 code=0x7ffc0000 [ 38.420314][ T27] audit: type=1326 audit(38.330:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4663 comm="syz.1.76" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9fd5b9e8 code=0x7ffc0000 [ 38.499516][ T4671] netlink: 156 bytes leftover after parsing attributes in process `syz.2.79'. [ 38.515116][ T4671] netlink: 'syz.2.79': attribute type 11 has an invalid length. [ 38.622281][ T4673] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 38.634838][ T4673] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 38.966729][ T4683] fuse: Unknown parameter 'grou00000000000000000000' [ 39.169339][ T4686] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 39.723615][ T4704] netlink: 156 bytes leftover after parsing attributes in process `syz.0.91'. [ 39.725574][ T4704] netlink: 12 bytes leftover after parsing attributes in process `syz.0.91'. [ 40.116159][ T4714] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 40.118724][ T4714] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 40.876641][ T4732] fuse: Unknown parameter 'group_i00000000000000000000' [ 41.215197][ T4735] random: crng reseeded on system resumption [ 41.340086][ T4741] netlink: 156 bytes leftover after parsing attributes in process `syz.1.103'. [ 41.342472][ T4741] netlink: 12 bytes leftover after parsing attributes in process `syz.1.103'. [ 41.356767][ T24] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 41.405615][ T4745] netlink: 60 bytes leftover after parsing attributes in process `syz.1.105'. [ 41.568593][ T24] usb 1-1: device descriptor read/64, error -71 [ 41.837265][ T24] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 41.986612][ T24] usb 1-1: device descriptor read/64, error -71 [ 42.106956][ T24] usb usb1-port1: attempt power cycle [ 42.325030][ T4761] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 42.326473][ T4761] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 42.434164][ T4766] netlink: 4 bytes leftover after parsing attributes in process `syz.4.113'. [ 42.516793][ T24] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 42.547275][ T24] usb 1-1: device descriptor read/8, error -71 [ 42.683965][ T4768] netlink: 156 bytes leftover after parsing attributes in process `syz.4.114'. [ 42.685950][ T4768] netlink: 12 bytes leftover after parsing attributes in process `syz.4.114'. [ 42.816649][ T24] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 42.847138][ T24] usb 1-1: device descriptor read/8, error -71 [ 42.947803][ T4778] fuse: Unknown parameter 'group_i00000000000000000000' [ 42.967128][ T24] usb usb1-port1: unable to enumerate USB device [ 43.223566][ T4782] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 43.228228][ T4782] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 43.810705][ T4799] Bluetooth: MGMT ver 1.22 [ 43.914013][ T4805] netlink: 156 bytes leftover after parsing attributes in process `syz.0.125'. [ 44.198752][ T4321] Bluetooth: Wrong link type (-22) [ 44.299169][ T4818] random: crng reseeded on system resumption [ 44.317879][ T4818] Restarting kernel threads ... done. [ 44.701276][ T4827] fuse: Unknown parameter 'group_i00000000000000000000' [ 45.229277][ T4836] netlink: 156 bytes leftover after parsing attributes in process `syz.4.136'. [ 45.851403][ T4852] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 45.852520][ T4852] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 45.881731][ T4852] vhci_hcd vhci_hcd.0: Device attached [ 46.079674][ T4854] vhci_hcd: connection closed [ 46.081226][ T4505] vhci_hcd: stop threads [ 46.083120][ T4505] vhci_hcd: release socket [ 46.084267][ T4505] vhci_hcd: disconnect device [ 46.144049][ T4366] usb 2-1: new low-speed USB device number 2 using vhci_hcd [ 46.150993][ T4366] usb 2-1: enqueue for inactive port 0 [ 46.282630][ T4859] netlink: 36 bytes leftover after parsing attributes in process `syz.4.142'. [ 46.299150][ T4366] vhci_hcd: vhci_device speed not set [ 46.406791][ T27] kauditd_printk_skb: 3 callbacks suppressed [ 46.406803][ T27] audit: type=1326 audit(46.400:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4864 comm="syz.4.145" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9755b9e8 code=0x7ffc0000 [ 46.411179][ T27] audit: type=1326 audit(46.400:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4864 comm="syz.4.145" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9755b9e8 code=0x7ffc0000 [ 46.421053][ T27] audit: type=1326 audit(46.400:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4864 comm="syz.4.145" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9755b9e8 code=0x7ffc0000 [ 46.435049][ T27] audit: type=1326 audit(46.400:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4864 comm="syz.4.145" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9755b9e8 code=0x7ffc0000 [ 46.450680][ T27] audit: type=1326 audit(46.400:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4864 comm="syz.4.145" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=29 compat=0 ip=0xffff9755b9e8 code=0x7ffc0000 [ 46.468625][ T27] audit: type=1326 audit(46.400:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4864 comm="syz.4.145" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9755b9e8 code=0x7ffc0000 [ 46.480309][ T27] audit: type=1326 audit(46.400:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4864 comm="syz.4.145" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9755b9e8 code=0x7ffc0000 [ 46.490457][ T27] audit: type=1326 audit(46.400:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4864 comm="syz.4.145" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9755b9e8 code=0x7ffc0000 [ 46.503061][ T27] audit: type=1326 audit(46.400:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4864 comm="syz.4.145" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9755b9e8 code=0x7ffc0000 [ 46.511732][ T27] audit: type=1326 audit(46.400:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4864 comm="syz.4.145" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=71 compat=0 ip=0xffff9755b9e8 code=0x7ffc0000 [ 46.548142][ T4873] netlink: 156 bytes leftover after parsing attributes in process `syz.4.148'. [ 46.584205][ T4874] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 46.585836][ T4874] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 46.845808][ T4883] fuse: Unknown parameter 'group_id00000000000000000000' [ 47.844312][ T4901] loop1: detected capacity change from 0 to 512 [ 47.884043][ T4901] EXT4-fs error (device loop1): ext4_orphan_get:1400: inode #15: comm syz.1.158: inode has both inline data and extents flags [ 47.887225][ T4901] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.158: couldn't read orphan inode 15 (err -117) [ 47.889302][ T4901] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 48.250352][ T4328] EXT4-fs (loop1): unmounting filesystem. [ 48.274159][ T4909] loop2: detected capacity change from 0 to 2048 [ 48.284107][ T4911] netlink: 156 bytes leftover after parsing attributes in process `syz.1.159'. [ 48.300316][ T4909] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 48.452694][ T4915] loop1: detected capacity change from 0 to 40427 [ 48.457383][ T4915] F2FS-fs (loop1): Unrecognized mount option "age_extent_cache" or missing value [ 48.528829][ T4314] I/O error, dev loop1, sector 40192 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 48.634460][ T4921] fuse: Unknown parameter 'group_id00000000000000000000' [ 49.016005][ T4923] loop1: detected capacity change from 0 to 32768 [ 49.034073][ T4923] ocfs2: Slot 0 on device (7,1) was already allocated to this node! [ 49.044028][ T4923] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 49.058720][ T4923] OCFS2: ERROR (device loop1): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #32 has an invalid fs_generation of #1 [ 49.061505][ T4923] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 49.063055][ T4923] OCFS2: File system is now read-only. [ 49.063784][ T4923] (syz.1.165,4923,0):ocfs2_search_chain:1761 ERROR: status = -30 [ 49.065461][ T4923] (syz.1.165,4923,0):ocfs2_search_chain:1871 ERROR: status = -30 [ 49.066639][ T4923] (syz.1.165,4923,0):ocfs2_claim_suballoc_bits:1940 ERROR: status = -30 [ 49.067983][ T4923] (syz.1.165,4923,0):ocfs2_claim_suballoc_bits:1983 ERROR: status = -30 [ 49.069389][ T4923] (syz.1.165,4923,0):__ocfs2_claim_clusters:2355 ERROR: status = -30 [ 49.070617][ T4923] (syz.1.165,4923,0):__ocfs2_claim_clusters:2363 ERROR: status = -30 [ 49.071870][ T4923] (syz.1.165,4923,0):ocfs2_local_alloc_new_window:1203 ERROR: status = -30 [ 49.073232][ T4923] (syz.1.165,4923,0):ocfs2_local_alloc_new_window:1228 ERROR: status = -30 [ 49.074523][ T4923] (syz.1.165,4923,0):ocfs2_local_alloc_slide_window:1302 ERROR: status = -30 [ 49.075920][ T4923] (syz.1.165,4923,0):ocfs2_local_alloc_slide_window:1321 ERROR: status = -30 [ 49.077649][ T4923] (syz.1.165,4923,0):ocfs2_reserve_local_alloc_bits:671 ERROR: status = -30 [ 49.079014][ T4923] (syz.1.165,4923,0):ocfs2_reserve_local_alloc_bits:709 ERROR: status = -30 [ 49.080659][ T4923] (syz.1.165,4923,0):ocfs2_reserve_clusters_with_limit:1166 ERROR: status = -30 [ 49.082110][ T4923] (syz.1.165,4923,0):ocfs2_reserve_clusters_with_limit:1215 ERROR: status = -30 [ 49.083432][ T4923] (syz.1.165,4923,1):ocfs2_mknod:357 ERROR: status = -30 [ 49.085032][ T4923] (syz.1.165,4923,1):ocfs2_mknod:502 ERROR: status = -30 [ 49.086177][ T4923] (syz.1.165,4923,1):ocfs2_mkdir:659 ERROR: status = -30 [ 49.118574][ T4929] loop0: detected capacity change from 0 to 128 [ 49.150514][ T4929] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 49.162391][ T4328] ocfs2: Unmounting device (7,1) on (node local) [ 49.191610][ T4932] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 49.193975][ T4932] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 49.206191][ T4932] loop4: detected capacity change from 0 to 2048 [ 49.217781][ T4932] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 49.219176][ T4932] UDF-fs: Scanning with blocksize 512 failed [ 49.223175][ T4932] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 49.233604][ T4932] UDF-fs: bad mount option "˙˙˙˙˙˙˙˙˙˙˙˙˙18446744073709551615˙˙˙˙š@­LqE:†‹ á艞Őt}˛0ü$‰" or missing value [ 49.254187][ T4320] EXT4-fs (loop0): unmounting filesystem. [ 49.280406][ T4934] sp0: Synchronizing with TNC [ 49.356112][ T4940] netlink: 156 bytes leftover after parsing attributes in process `syz.0.172'. [ 49.415701][ T4945] loop0: detected capacity change from 0 to 512 [ 49.443522][ T4945] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 49.753017][ T4953] binder: 4952:4953 tried to acquire reference to desc 0, got 1 instead [ 49.755136][ T4953] binder: 4952:4953 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 49.758106][ T4953] binder: 4953 RLIMIT_NICE not set [ 49.759050][ T4953] binder: 4953 RLIMIT_NICE not set [ 49.760253][ T4431] binder: release 4952:4953 transaction 8 out, still active [ 49.761430][ T4431] binder: undelivered TRANSACTION_COMPLETE [ 49.766502][ T4320] EXT4-fs (loop0): unmounting filesystem. [ 49.772007][ T4431] binder: release 4952:4953 transaction 8 in, still active [ 49.774802][ T4431] binder: send failed reply for transaction 8, target dead [ 49.833576][ T4961] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 49.835017][ T4961] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 49.921580][ T4968] loop4: detected capacity change from 0 to 64 [ 50.033032][ T4969] fuse: Unknown parameter 'group_id00000000000000000000' [ 50.285409][ T4971] netlink: 156 bytes leftover after parsing attributes in process `syz.2.184'. [ 50.353272][ T4978] loop4: detected capacity change from 0 to 64 [ 50.355814][ T4979] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 50.373395][ T4979] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 50.430661][ T4984] loop4: detected capacity change from 0 to 16 [ 50.445563][ T4984] erofs: (device loop4): mounted with root inode @ nid 36. [ 50.474123][ T4986] loop3: detected capacity change from 0 to 4096 [ 50.530622][ T4988] loop4: detected capacity change from 0 to 16 [ 50.536329][ T4988] erofs: (device loop4): mounted with root inode @ nid 36. [ 51.016814][ T4994] loop3: detected capacity change from 0 to 32768 [ 51.025377][ T5000] netlink: 156 bytes leftover after parsing attributes in process `syz.0.195'. [ 51.026136][ T4988] Bluetooth: MGMT ver 1.22 [ 51.085765][ T4994] XFS (loop3): Mounting V5 Filesystem [ 51.125601][ T5011] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 51.127430][ T5011] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 51.155327][ T4994] XFS (loop3): Ending clean mount [ 51.167417][ T4994] XFS (loop3): Quotacheck needed: Please wait. [ 51.185656][ T4994] XFS (loop3): Quotacheck: Done. [ 51.538577][ T4323] XFS (loop3): Unmounting Filesystem [ 51.583648][ T5019] loop1: detected capacity change from 0 to 1024 [ 51.585008][ T5019] EXT4-fs: Ignoring removed orlov option [ 51.617611][ T5019] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 51.642405][ T4328] EXT4-fs (loop1): unmounting filesystem. [ 51.808266][ T5033] netlink: 156 bytes leftover after parsing attributes in process `syz.1.206'. [ 51.933142][ T5036] fuse: Bad value for 'user_id' [ 52.208412][ T5035] loop1: detected capacity change from 0 to 4096 [ 52.259472][ T5043] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 52.364801][ T5049] netlink: 8 bytes leftover after parsing attributes in process `syz.1.211'. [ 52.369145][ T5049] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 52.370626][ T5049] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 52.371895][ T5049] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 52.373185][ T5049] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 52.704197][ T5053] netlink: 4 bytes leftover after parsing attributes in process `syz.2.213'. [ 52.712618][ T5055] loop4: detected capacity change from 0 to 64 [ 52.763852][ T5063] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 52.768594][ T5061] netlink: 156 bytes leftover after parsing attributes in process `syz.4.217'. [ 52.773497][ T5063] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 52.793335][ T5063] loop2: detected capacity change from 0 to 1024 [ 52.829488][ T5067] loop1: detected capacity change from 0 to 1024 [ 52.853614][ T5067] syz.1.221: attempt to access beyond end of device [ 52.853614][ T5067] loop1: rw=0, sector=201326592, nr_sectors = 2 limit=1024 [ 52.863668][ T5067] Buffer I/O error on dev loop1, logical block 100663296, async page read [ 52.868434][ T5067] hfsplus: unable to mark blocks free: error -5 [ 52.871729][ T5067] hfsplus: can't free extent [ 52.879458][ T5074] loop4: detected capacity change from 0 to 8 [ 52.957956][ T5074] SQUASHFS error: Unable to read directory block [1d0:0] [ 53.345002][ T5076] fuse: Bad value for 'user_id' [ 53.434199][ T5087] netlink: 72 bytes leftover after parsing attributes in process `syz.1.229'. [ 53.458916][ T5089] netlink: 156 bytes leftover after parsing attributes in process `syz.0.230'. [ 53.463331][ T5089] netlink: 20 bytes leftover after parsing attributes in process `syz.0.230'. [ 53.530136][ T5096] loop0: detected capacity change from 0 to 1024 [ 53.532790][ T5096] EXT4-fs: Ignoring removed mblk_io_submit option [ 53.650660][ T5096] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 53.665994][ T5096] EXT4-fs error (device loop0): ext4_expand_extra_isize_ea:2749: inode #15: comm syz.0.233: corrupted in-inode xattr [ 53.685728][ T5096] EXT4-fs (loop0): Remounting filesystem read-only [ 53.704045][ T5096] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2819: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 53.765879][ T5099] loop1: detected capacity change from 0 to 32768 [ 53.800383][ T5109] loop3: detected capacity change from 0 to 512 [ 53.811421][ T5109] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 53.822519][ T5109] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 53.831338][ T4320] EXT4-fs (loop0): unmounting filesystem. [ 53.835111][ T5114] loop2: detected capacity change from 0 to 1024 [ 53.841491][ T5109] EXT4-fs error (device loop3): ext4_orphan_get:1426: comm syz.3.238: bad orphan inode 131083 [ 53.843875][ T5109] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 53.864519][ T5099] XFS (loop1): Mounting V5 Filesystem [ 53.978818][ T5099] XFS (loop1): Ending clean mount [ 53.981484][ T5099] XFS (loop1): Quotacheck needed: Please wait. [ 54.004074][ T5099] XFS (loop1): Quotacheck: Done. [ 54.068771][ T4323] EXT4-fs (loop3): unmounting filesystem. [ 54.075665][ T4328] XFS (loop1): Unmounting Filesystem [ 54.121232][ T5125] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 54.129379][ T5125] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 54.144677][ T5127] loop3: detected capacity change from 0 to 512 [ 54.158263][ T5127] FAT-fs (loop3): Unrecognized mount option "umask=°0000000000000p00000001" or missing value [ 54.200959][ T4314] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 54.212658][ T5127] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. [ 54.402156][ T5134] netlink: 156 bytes leftover after parsing attributes in process `syz.1.243'. [ 54.504679][ T5136] loop3: detected capacity change from 0 to 40427 [ 54.509765][ T5136] F2FS-fs (loop3): Unrecognized mount option "age_extent_cache" or missing value [ 54.517385][ T5134] netlink: 20 bytes leftover after parsing attributes in process `syz.1.243'. [ 54.611563][ T4331] I/O error, dev loop3, sector 40192 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 54.658173][ T5150] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 54.721184][ T5151] fuse: Bad value for 'user_id' [ 54.769469][ T5150] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 54.965157][ T5153] loop2: detected capacity change from 0 to 512 [ 54.971119][ T5153] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 54.983504][ T5153] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 55.012163][ T4329] EXT4-fs (loop2): unmounting filesystem. [ 55.532214][ T5171] loop1: detected capacity change from 0 to 40427 [ 55.540164][ T5171] F2FS-fs (loop1): build fault injection attr: rate: 14, type: 0x3ffff [ 55.647575][ T5181] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 55.648970][ T5181] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 55.650950][ T5181] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 55.665648][ T5183] loop3: detected capacity change from 0 to 256 [ 55.674184][ T5183] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 56.010429][ T5188] loop2: detected capacity change from 0 to 32768 [ 56.014074][ T5188] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop2 scanned by syz.2.262 (5188) [ 56.035970][ T5188] BTRFS info (device loop2): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 56.037780][ T5188] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm [ 56.039096][ T5188] BTRFS info (device loop2): using free space tree [ 56.150816][ T5193] loop4: detected capacity change from 0 to 2048 [ 56.179438][ T5193] NILFS (loop4): error -5 while loading last checkpoint (checkpoint number=2) [ 56.501700][ T5213] netlink: 12 bytes leftover after parsing attributes in process `syz.1.265'. [ 56.543610][ T5188] BTRFS info (device loop2): enabling ssd optimizations [ 56.559709][ T5219] loop1: detected capacity change from 0 to 512 [ 56.581450][ T5220] netlink: 'syz.4.266': attribute type 4 has an invalid length. [ 56.623130][ T4329] BTRFS info (device loop2): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 56.671999][ T5224] loop4: detected capacity change from 0 to 2048 [ 56.674081][ T5224] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 56.691851][ T5226] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 56.828875][ T5227] fuse: Bad value for 'fd' [ 57.203990][ T5240] netlink: 8 bytes leftover after parsing attributes in process `syz.0.274'. [ 57.223282][ T5242] netlink: 156 bytes leftover after parsing attributes in process `syz.4.273'. [ 57.225524][ T5242] netlink: 'syz.4.273': attribute type 72 has an invalid length. [ 57.226827][ T5242] netlink: 12 bytes leftover after parsing attributes in process `syz.4.273'. [ 57.292240][ T5247] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 57.304158][ T5249] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 57.305765][ T5249] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 57.306900][ T5247] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 57.703749][ T5252] 9pnet_fd: p9_fd_create_tcp (5252): problem connecting socket to 127.0.0.1 [ 57.823757][ T5265] loop3: detected capacity change from 0 to 4096 [ 57.826223][ T5265] ntfs3: Unknown parameter 'windows_names' [ 58.233971][ T5270] netlink: 156 bytes leftover after parsing attributes in process `syz.2.286'. [ 58.235973][ T5270] netlink: 'syz.2.286': attribute type 72 has an invalid length. [ 58.246612][ T5270] netlink: 12 bytes leftover after parsing attributes in process `syz.2.286'. [ 58.309490][ T5278] loop1: detected capacity change from 0 to 512 [ 58.313944][ T5278] EXT4-fs: Ignoring removed bh option [ 58.322755][ T5280] loop2: detected capacity change from 0 to 128 [ 58.324563][ T5278] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 58.336457][ T5280] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 58.390716][ T4314] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 58.432018][ T4364] kernel write not supported for file /input/mice (pid: 4364 comm: kworker/0:3) [ 58.863781][ T5278] loop1: detected capacity change from 0 to 32768 [ 58.904224][ T5278] ocfs2: Slot 0 on device (7,1) was already allocated to this node! [ 58.913652][ T5301] netlink: 156 bytes leftover after parsing attributes in process `syz.3.300'. [ 58.925187][ T5301] netlink: 'syz.3.300': attribute type 72 has an invalid length. [ 58.931569][ T5301] netlink: 12 bytes leftover after parsing attributes in process `syz.3.300'. [ 58.941764][ T5278] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 58.985712][ T5304] loop4: detected capacity change from 0 to 2048 [ 59.001883][ T5296] loop0: detected capacity change from 0 to 32768 [ 59.003533][ T4328] ocfs2: Unmounting device (7,1) on (node local) [ 59.005791][ T5296] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop0 scanned by syz.0.299 (5296) [ 59.012195][ T5296] BTRFS info (device loop0): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 59.014287][ T5296] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 59.015740][ T5296] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 59.018370][ T5296] BTRFS info (device loop0): use zstd compression, level 3 [ 59.020146][ T5296] BTRFS info (device loop0): using free space tree [ 59.025395][ T5304] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 59.029092][ T5304] EXT4-fs (loop4): shut down requested (0) [ 59.151955][ T4330] EXT4-fs (loop4): unmounting filesystem. [ 59.219864][ T5334] loop3: detected capacity change from 0 to 32768 [ 59.223203][ T5296] BTRFS info (device loop0): enabling ssd optimizations [ 59.323284][ T4320] BTRFS info (device loop0): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 59.350260][ T5341] loop4: detected capacity change from 0 to 32768 [ 59.398420][ T5341] (syz.4.308,5341,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 59.401882][ T5341] (syz.4.308,5341,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 59.711526][ T5341] JBD2: Ignoring recovery information on journal [ 59.733725][ T5341] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 59.759914][ T5334] XFS (loop3): Mounting V5 Filesystem [ 59.778531][ T4330] ocfs2: Unmounting device (7,4) on (node local) [ 59.811547][ T5334] XFS (loop3): Ending clean mount [ 59.815090][ T5334] XFS (loop3): Quotacheck needed: Please wait. [ 59.830191][ T5334] XFS (loop3): Quotacheck: Done. [ 59.833209][ T5338] loop1: detected capacity change from 0 to 32768 [ 59.893062][ T4323] XFS (loop3): Unmounting Filesystem [ 59.916428][ T5363] netlink: 156 bytes leftover after parsing attributes in process `syz.4.312'. [ 59.929503][ T5363] netlink: 12 bytes leftover after parsing attributes in process `syz.4.312'. [ 60.041810][ T5367] vhci_hcd: invalid port number 13 [ 60.207698][ T5381] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 60.211599][ T5381] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 60.620692][ T5393] loop3: detected capacity change from 0 to 4096 [ 60.622433][ T5393] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 60.660069][ T5393] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 60.927808][ T5418] loop2: detected capacity change from 0 to 1024 [ 60.929615][ T5418] EXT4-fs: Ignoring removed nobh option [ 60.930686][ T5418] EXT4-fs: Ignoring removed bh option [ 60.931870][ T5418] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 60.959686][ T5418] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 60.996050][ T5418] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:3836: comm syz.2.337: Allocating blocks 497-513 which overlap fs metadata [ 61.022828][ T5429] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 61.024319][ T5429] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 61.029382][ T5418] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 117 [ 61.031405][ T5418] EXT4-fs (loop2): This should not happen!! Data will be lost [ 61.031405][ T5418] [ 61.032992][ T5427] loop1: detected capacity change from 0 to 4096 [ 61.082166][ T4329] EXT4-fs (loop2): unmounting filesystem. [ 61.130639][ T5431] loop4: detected capacity change from 0 to 32768 [ 61.132338][ T5431] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop4 scanned by syz.4.341 (5431) [ 61.136361][ T5431] BTRFS info (device loop4): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 61.138158][ T5431] BTRFS info (device loop4): using xxhash64 (xxhash64-generic) checksum algorithm [ 61.139884][ T5431] BTRFS info (device loop4): using free space tree [ 61.146631][ T5432] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 61.196621][ T5228] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 61.277706][ T5431] BTRFS info (device loop4): enabling ssd optimizations [ 61.303713][ T4330] BTRFS info (device loop4): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 61.389296][ T5228] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 61.390985][ T5228] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 61.392364][ T5228] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 61.394102][ T5228] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 61.395355][ T5228] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 61.404499][ T5228] usb 1-1: config 0 descriptor?? [ 61.473433][ T5469] netlink: 14 bytes leftover after parsing attributes in process `+}[@'. [ 61.559532][ T5477] loop3: detected capacity change from 0 to 64 [ 62.103033][ T5228] plantronics 0003:047F:FFFF.0001: unknown main item tag 0xd [ 62.105623][ T5228] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 62.114093][ T5228] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 62.360768][ T5489] loop2: detected capacity change from 0 to 1024 [ 62.380053][ T4373] usb 1-1: USB disconnect, device number 8 [ 62.381507][ T5489] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 62.383214][ T5489] EXT4-fs (loop2): orphan cleanup on readonly fs [ 62.395139][ T5489] EXT4-fs error (device loop2): ext4_free_blocks:6205: comm syz.2.354: Freeing blocks not in datazone - block = 0, count = 4096 [ 62.409144][ T5489] EXT4-fs (loop2): 1 orphan inode deleted [ 62.411087][ T5489] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 62.417324][ T5492] loop4: detected capacity change from 0 to 64 [ 62.490989][ T5469] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 62.537078][ T5469] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 62.540364][ T5498] loop4: detected capacity change from 0 to 4096 [ 62.578840][ T5469] bond0 (unregistering): Released all slaves [ 62.679144][ T5507] loop4: detected capacity change from 0 to 512 [ 62.680366][ T5508] netlink: 168 bytes leftover after parsing attributes in process `syz.1.363'. [ 62.687039][ T5507] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 62.715466][ T5507] EXT4-fs (loop4): 1 truncate cleaned up [ 62.716314][ T5507] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 62.758380][ T4330] EXT4-fs (loop4): unmounting filesystem. [ 62.840665][ T5522] loop1: detected capacity change from 0 to 2048 [ 62.858222][ T5522] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 62.930301][ T4329] EXT4-fs (loop2): unmounting filesystem. [ 62.965580][ T5520] loop3: detected capacity change from 0 to 65536 [ 62.980411][ T5529] loop1: detected capacity change from 0 to 1024 [ 62.981814][ T5529] EXT4-fs: inline encryption not supported [ 62.982913][ T5529] EXT4-fs: Ignoring removed i_version option [ 62.983837][ T5529] EXT4-fs: Ignoring removed orlov option [ 62.985010][ T5529] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 62.994366][ T5531] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 62.999977][ T5528] loop4: detected capacity change from 0 to 8192 [ 63.005112][ T5531] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 63.021218][ T5520] XFS (loop3): Mounting V5 Filesystem [ 63.030254][ T5529] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 63.052231][ T5528] loop4: p1 p2 p3 p4 [ 63.052231][ T5528] p1: [ 63.053734][ T5528] loop4: p1 size 196608 extends beyond EOD, truncated [ 63.058362][ T5520] XFS (loop3): Ending clean mount [ 63.066258][ T5528] loop4: p2 start 164919041 is beyond EOD, truncated [ 63.076230][ T5528] loop4: p3 size 66846464 extends beyond EOD, truncated [ 63.078073][ T4453] XFS (loop3): Metadata CRC error detected at xfs_agfl_read_verify+0x14c/0x220, xfs_agfl block 0x3 [ 63.079817][ T4453] XFS (loop3): Unmount and run xfs_repair [ 63.080719][ T4453] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 63.085679][ T4453] 00000000: 58 41 46 4c 00 00 00 00 d6 f6 9d bd 8c 5d 46 be XAFL.........]F. [ 63.089633][ T4453] 00000010: b8 8e 92 c0 ae 88 ce b2 00 00 00 00 00 00 00 00 ................ [ 63.091032][ T4453] 00000020: 35 fc 5c 25 ff 00 ff ff 00 00 00 05 00 00 00 06 5.\%............ [ 63.092504][ T4453] 00000030: 00 00 00 07 00 00 00 08 ff ff ff ff ff ff ff ff ................ [ 63.099891][ T5528] loop4: p4 size 37048832 extends beyond EOD, truncated [ 63.104299][ T5528] loop4: p5 size 196608 extends beyond EOD, truncated [ 63.106105][ T4453] 00000040: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 63.112758][ T4453] 00000050: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 63.114101][ T4453] 00000060: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 63.121623][ T4453] 00000070: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 63.123169][ T5520] XFS (loop3): metadata I/O error in "xfs_alloc_read_agfl+0x19c/0x330" at daddr 0x3 len 1 error 74 [ 63.125463][ T5520] XFS (loop3): page discard on page 0000000032663675, inode 0x49, pos 0. [ 63.129318][ T5544] loop0: detected capacity change from 0 to 2048 [ 63.132184][ T5351] XFS (loop3): Metadata CRC error detected at xfs_agfl_read_verify+0x14c/0x220, xfs_agfl block 0x3 [ 63.133795][ T5351] XFS (loop3): Unmount and run xfs_repair [ 63.134729][ T5351] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 63.135754][ T5351] 00000000: 58 41 46 4c 00 00 00 00 d6 f6 9d bd 8c 5d 46 be XAFL.........]F. [ 63.140742][ T4328] EXT4-fs (loop1): unmounting filesystem. [ 63.148157][ T5351] 00000010: b8 8e 92 c0 ae 88 ce b2 00 00 00 00 00 00 00 00 ................ [ 63.149626][ T5351] 00000020: 35 fc 5c 25 ff 00 ff ff 00 00 00 05 00 00 00 06 5.\%............ [ 63.150888][ T5351] 00000030: 00 00 00 07 00 00 00 08 ff ff ff ff ff ff ff ff ................ [ 63.152204][ T5351] 00000040: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 63.153764][ T5544] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 63.166285][ T5351] 00000050: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 63.175533][ T5351] 00000060: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 63.177452][ T5351] 00000070: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 63.182735][ T5545] XFS (loop3): metadata I/O error in "xfs_alloc_read_agfl+0x19c/0x330" at daddr 0x3 len 1 error 74 [ 63.184901][ T5545] XFS (loop3): page discard on page 0000000032663675, inode 0x49, pos 0. [ 63.195832][ T5550] loop1: detected capacity change from 0 to 1024 [ 63.224203][ T4323] XFS (loop3): Unmounting Filesystem [ 63.251574][ T5553] netlink: 12 bytes leftover after parsing attributes in process `syz.0.379'. [ 63.385211][ T4463] udevd[4463]: inotify_add_watch(7, /dev/loop4p5, 10) failed: No such file or directory [ 63.397597][ T4314] udevd[4314]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 63.402154][ T5565] netlink: 60 bytes leftover after parsing attributes in process `syz.4.384'. [ 63.402347][ T4331] udevd[4331]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 63.403604][ T5565] netlink: 60 bytes leftover after parsing attributes in process `syz.4.384'. [ 63.406421][ T5130] udevd[5130]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 63.419404][ T5565] netlink: 60 bytes leftover after parsing attributes in process `syz.4.384'. [ 63.425496][ T5565] netlink: 60 bytes leftover after parsing attributes in process `syz.4.384'. [ 63.455446][ T5556] loop1: detected capacity change from 0 to 32768 [ 63.461322][ T5556] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.381 (5556) [ 63.463034][ T5567] device syzkaller0 entered promiscuous mode [ 63.468147][ T5556] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 63.471030][ T5556] BTRFS info (device loop1): using crc32c (crc32c-generic) checksum algorithm [ 63.472469][ T5556] BTRFS info (device loop1): using free space tree [ 63.554553][ T5556] BTRFS info (device loop1): enabling ssd optimizations [ 63.557973][ T5589] loop2: detected capacity change from 0 to 64 [ 63.604865][ T5591] Error parsing options; rc = [-22] [ 63.615609][ T4328] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 63.657805][ T5593] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 63.659142][ T5593] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 63.848560][ T5601] loop2: detected capacity change from 0 to 40427 [ 63.851170][ T5601] F2FS-fs (loop2): build fault injection attr: rate: 14, type: 0x3ffff [ 63.871060][ T5609] loop1: detected capacity change from 0 to 1024 [ 63.898574][ T4314] I/O error, dev loop2, sector 40192 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 63.958891][ T5612] loop1: detected capacity change from 0 to 8 [ 63.996131][ T5612] SQUASHFS error: Failed to read block 0x2d7: -5 [ 63.998552][ T5612] SQUASHFS error: Unable to read metadata cache entry [2d5] [ 64.055513][ T5619] loop1: detected capacity change from 0 to 64 [ 64.419797][ T5626] netlink: 'syz.1.403': attribute type 1 has an invalid length. [ 64.498858][ T2061] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.500107][ T2061] ieee802154 phy1 wpan1: encryption failed: -22 [ 64.547409][ T5635] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 64.548918][ T5635] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 64.572177][ T5639] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 64.577379][ T5639] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 64.728098][ T5643] loop4: detected capacity change from 0 to 32768 [ 64.731386][ T5643] (syz.4.410,5643,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 64.733662][ T5643] (syz.4.410,5643,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 64.739500][ T5643] JBD2: Ignoring recovery information on journal [ 64.750216][ T5643] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 64.872642][ T5647] device syzkaller0 entered promiscuous mode [ 64.945967][ T5643] [ 64.946401][ T5643] ====================================================== [ 64.947414][ T5643] WARNING: possible circular locking dependency detected [ 64.948455][ T5643] syzkaller #0 Not tainted [ 64.949151][ T5643] ------------------------------------------------------ [ 64.950157][ T5643] syz.4.410/5643 is trying to acquire lock: [ 64.950908][ T5643] ffff0000e2530660 (&oi->ip_alloc_sem){++++}-{3:3}, at: ocfs2_try_remove_refcount_tree+0xb4/0x2d8 [ 64.952290][ T5643] [ 64.952290][ T5643] but task is already holding lock: [ 64.953267][ T5643] ffff0000e25306f8 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_try_remove_refcount_tree+0xa8/0x2d8 [ 64.954841][ T5643] [ 64.954841][ T5643] which lock already depends on the new lock. [ 64.954841][ T5643] [ 64.956284][ T5643] [ 64.956284][ T5643] the existing dependency chain (in reverse order) is: [ 64.957461][ T5643] [ 64.957461][ T5643] -> #4 (&oi->ip_xattr_sem){++++}-{3:3}: [ 64.958542][ T5643] down_read+0x64/0x304 [ 64.959192][ T5643] ocfs2_init_acl+0x258/0x5f0 [ 64.959905][ T5643] ocfs2_mknod+0x1168/0x1f18 [ 64.960597][ T5643] ocfs2_create+0x19c/0x4f0 [ 64.961298][ T5643] path_openat+0x112c/0x2680 [ 64.962080][ T5643] do_filp_open+0x174/0x344 [ 64.962804][ T5643] do_sys_openat2+0x128/0x3d8 [ 64.963648][ T5643] __arm64_sys_openat+0x120/0x154 [ 64.964494][ T5643] invoke_syscall+0x98/0x2bc [ 64.965213][ T5643] el0_svc_common+0x138/0x258 [ 64.965977][ T5643] do_el0_svc+0x58/0x13c [ 64.966679][ T5643] el0_svc+0x58/0x138 [ 64.967309][ T5643] el0t_64_sync_handler+0x84/0xf0 [ 64.968073][ T5643] el0t_64_sync+0x18c/0x190 [ 64.968742][ T5643] [ 64.968742][ T5643] -> #3 (jbd2_handle){++++}-{0:0}: [ 64.969788][ T5643] start_this_handle+0xfe0/0x122c [ 64.970550][ T5643] jbd2__journal_start+0x288/0x51c [ 64.971368][ T5643] jbd2_journal_start+0x3c/0x4c [ 64.972074][ T5643] ocfs2_start_trans+0x380/0x6c4 [ 64.972852][ T5643] ocfs2_reserve_local_alloc_bits+0xb8c/0x278c [ 64.973749][ T5643] ocfs2_reserve_clusters_with_limit+0x198/0x9e0 [ 64.974731][ T5643] ocfs2_reserve_clusters+0x3c/0x50 [ 64.975543][ T5643] ocfs2_mknod+0xc2c/0x1f18 [ 64.976274][ T5643] ocfs2_mkdir+0x19c/0x4f0 [ 64.976978][ T5643] vfs_mkdir+0x314/0x4d4 [ 64.977657][ T5643] do_mkdirat+0x1b4/0x3e0 [ 64.978338][ T5643] __arm64_sys_mkdirat+0x90/0xa8 [ 64.979088][ T5643] invoke_syscall+0x98/0x2bc [ 64.979959][ T5643] el0_svc_common+0x138/0x258 [ 64.980718][ T5643] do_el0_svc+0x58/0x13c [ 64.981382][ T5643] el0_svc+0x58/0x138 [ 64.982011][ T5643] el0t_64_sync_handler+0x84/0xf0 [ 64.982776][ T5643] el0t_64_sync+0x18c/0x190 [ 64.983498][ T5643] [ 64.983498][ T5643] -> #2 (&journal->j_trans_barrier){.+.+}-{3:3}: [ 64.984731][ T5643] down_read+0x64/0x304 [ 64.985428][ T5643] ocfs2_start_trans+0x374/0x6c4 [ 64.986258][ T5643] ocfs2_reserve_local_alloc_bits+0xb8c/0x278c [ 64.987170][ T5643] ocfs2_reserve_clusters_with_limit+0x198/0x9e0 [ 64.988100][ T5643] ocfs2_reserve_clusters+0x3c/0x50 [ 64.988888][ T5643] ocfs2_mknod+0xc2c/0x1f18 [ 64.989594][ T5643] ocfs2_mkdir+0x19c/0x4f0 [ 64.990314][ T5643] vfs_mkdir+0x314/0x4d4 [ 64.991042][ T5643] do_mkdirat+0x1b4/0x3e0 [ 64.991773][ T5643] __arm64_sys_mkdirat+0x90/0xa8 [ 64.992586][ T5643] invoke_syscall+0x98/0x2bc [ 64.993294][ T5643] el0_svc_common+0x138/0x258 [ 64.994016][ T5643] do_el0_svc+0x58/0x13c [ 64.994661][ T5643] el0_svc+0x58/0x138 [ 64.995310][ T5643] el0t_64_sync_handler+0x84/0xf0 [ 64.996084][ T5643] el0t_64_sync+0x18c/0x190 [ 64.996741][ T5643] [ 64.996741][ T5643] -> #1 (sb_internal#2){.+.+}-{0:0}: [ 64.997812][ T5643] lock_release+0x308/0x910 [ 64.998509][ T5643] up_write+0x48/0x5c0 [ 64.999134][ T5643] ocfs2_free_alloc_context+0x94/0x188 [ 64.999941][ T5643] ocfs2_write_begin_nolock+0x3a1c/0x3ab4 [ 65.000802][ T5643] ocfs2_write_begin+0x1b4/0x30c [ 65.001604][ T5643] generic_perform_write+0x230/0x4b0 [ 65.002439][ T5643] __generic_file_write_iter+0x168/0x37c [ 65.003331][ T5643] ocfs2_file_write_iter+0x1300/0x1bf4 [ 65.004142][ T5643] vfs_write+0x5ac/0x7c4 [ 65.004808][ T5643] ksys_write+0x120/0x210 [ 65.005414][ T5643] __arm64_sys_write+0x7c/0x90 [ 65.006131][ T5643] invoke_syscall+0x98/0x2bc [ 65.006862][ T5643] el0_svc_common+0x138/0x258 [ 65.007551][ T5643] do_el0_svc+0x58/0x13c [ 65.008209][ T5643] el0_svc+0x58/0x138 [ 65.008848][ T5643] el0t_64_sync_handler+0x84/0xf0 [ 65.009597][ T5643] el0t_64_sync+0x18c/0x190 [ 65.010311][ T5643] [ 65.010311][ T5643] -> #0 (&oi->ip_alloc_sem){++++}-{3:3}: [ 65.011423][ T5643] __lock_acquire+0x293c/0x6544 [ 65.012184][ T5643] lock_acquire+0x20c/0x644 [ 65.012978][ T5643] down_write+0x5c/0x88 [ 65.013715][ T5643] ocfs2_try_remove_refcount_tree+0xb4/0x2d8 [ 65.014650][ T5643] ocfs2_truncate_file+0xce8/0x149c [ 65.015614][ T5643] ocfs2_setattr+0x1234/0x18d4 [ 65.016469][ T5643] notify_change+0xb0c/0xdcc [ 65.017193][ T5643] do_truncate+0x178/0x1f0 [ 65.017868][ T5643] do_sys_ftruncate+0x284/0x31c [ 65.018647][ T5643] __arm64_sys_ftruncate+0x60/0x74 [ 65.019433][ T5643] invoke_syscall+0x98/0x2bc [ 65.020148][ T5643] el0_svc_common+0x138/0x258 [ 65.020878][ T5643] do_el0_svc+0x58/0x13c [ 65.021561][ T5643] el0_svc+0x58/0x138 [ 65.022168][ T5643] el0t_64_sync_handler+0x84/0xf0 [ 65.022906][ T5643] el0t_64_sync+0x18c/0x190 [ 65.023601][ T5643] [ 65.023601][ T5643] other info that might help us debug this: [ 65.023601][ T5643] [ 65.025044][ T5643] Chain exists of: [ 65.025044][ T5643] &oi->ip_alloc_sem --> jbd2_handle --> &oi->ip_xattr_sem [ 65.025044][ T5643] [ 65.026918][ T5643] Possible unsafe locking scenario: [ 65.026918][ T5643] [ 65.027969][ T5643] CPU0 CPU1 [ 65.028667][ T5643] ---- ---- [ 65.029434][ T5643] lock(&oi->ip_xattr_sem); [ 65.030065][ T5643] lock(jbd2_handle); [ 65.030986][ T5643] lock(&oi->ip_xattr_sem); [ 65.032016][ T5643] lock(&oi->ip_alloc_sem); [ 65.032685][ T5643] [ 65.032685][ T5643] *** DEADLOCK *** [ 65.032685][ T5643] [ 65.033798][ T5643] 3 locks held by syz.4.410/5643: [ 65.034557][ T5643] #0: ffff0000f3752460 (sb_writers#15){.+.+}-{0:0}, at: do_sys_ftruncate+0x210/0x31c [ 65.035865][ T5643] #1: ffff0000e25309c8 (&sb->s_type->i_mutex_key#31){+.+.}-{3:3}, at: do_truncate+0x164/0x1f0 [ 65.037322][ T5643] #2: ffff0000e25306f8 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_try_remove_refcount_tree+0xa8/0x2d8 [ 65.038931][ T5643] [ 65.038931][ T5643] stack backtrace: [ 65.039747][ T5643] CPU: 0 PID: 5643 Comm: syz.4.410 Not tainted syzkaller #0 [ 65.040765][ T5643] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025 [ 65.042139][ T5643] Call trace: [ 65.042593][ T5643] dump_backtrace+0x1c8/0x1f4 [ 65.043253][ T5643] show_stack+0x2c/0x3c [ 65.043856][ T5643] __dump_stack+0x30/0x40 [ 65.044468][ T5643] dump_stack_lvl+0xf8/0x160 [ 65.045144][ T5643] dump_stack+0x1c/0x5c [ 65.045734][ T5643] print_circular_bug+0x148/0x1b0 [ 65.046448][ T5643] check_noncircular+0x240/0x2d4 [ 65.047158][ T5643] __lock_acquire+0x293c/0x6544 [ 65.047870][ T5643] lock_acquire+0x20c/0x644 [ 65.048529][ T5643] down_write+0x5c/0x88 [ 65.049094][ T5643] ocfs2_try_remove_refcount_tree+0xb4/0x2d8 [ 65.049940][ T5643] ocfs2_truncate_file+0xce8/0x149c [ 65.050699][ T5643] ocfs2_setattr+0x1234/0x18d4 [ 65.051422][ T5643] notify_change+0xb0c/0xdcc [ 65.052082][ T5643] do_truncate+0x178/0x1f0 [ 65.052677][ T5643] do_sys_ftruncate+0x284/0x31c [ 65.053387][ T5643] __arm64_sys_ftruncate+0x60/0x74 [ 65.054079][ T5643] invoke_syscall+0x98/0x2bc [ 65.054750][ T5643] el0_svc_common+0x138/0x258 [ 65.055561][ T5643] do_el0_svc+0x58/0x13c [ 65.056204][ T5643] el0_svc+0x58/0x138 [ 65.056812][ T5643] el0t_64_sync_handler+0x84/0xf0 [ 65.057608][ T5643] el0t_64_sync+0x18c/0x190 [ 65.075665][ T4330] ocfs2: Unmounting device (7,4) on (node local)