last executing test programs: 1m49.973979085s ago: executing program 1 (id=60): socketpair$unix(0x1, 0x2, 0x0, 0x0) setfsgid(0xee00) setresuid(0x0, 0xee00, 0x0) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x803, 0x4, 0x7}) mount(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000180)='tmpfs\x00', 0x2200cd0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') read$FUSE(r0, &(0x7f00000047c0)={0x2020}, 0x2020) 1m49.892541147s ago: executing program 1 (id=65): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000010c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000001140), 0x318, 0x0) recvmmsg(r1, &(0x7f0000001180), 0x10106, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f00000011c0)={0x20000014}) epoll_wait(r0, &(0x7f0000001200)=[{}], 0x1, 0x400) 1m45.214867561s ago: executing program 1 (id=80): r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000020000202505a1a440000102030109025c00022ecb"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000500)={0x2c, 0x0, &(0x7f0000000340)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x4c09, 0x207) 1m45.208805561s ago: executing program 1 (id=84): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$f2fs(&(0x7f0000000300), &(0x7f0000000340)='./file1\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x1, 0x54f4, &(0x7f0000003b80)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000009080)='./file0\x00', 0x10) syz_mount_image$vfat(&(0x7f00000090c0), &(0x7f0000009100)='./bus\x00', 0x3c9c9b, 0x0, 0x0, 0x0, &(0x7f0000009140)) mount$overlay(0x0, &(0x7f0000009180)='./file0\x00', &(0x7f00000091c0), 0x4008, &(0x7f0000009200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file1\x00', 0x40, 0x83) fsync(r0) 1m43.22964576s ago: executing program 1 (id=93): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newtfilter={0x5c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r3, {0x6, 0x7}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x2c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x10, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x2}]}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x100c}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x22044020}, 0x0) 1m41.55126942s ago: executing program 1 (id=96): r0 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x1) fchdir(r1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x68800, 0x1c) lseek(r2, 0x100, 0x1) getdents64(r2, 0x0, 0x0) 1m41.067319702s ago: executing program 32 (id=96): r0 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x1) fchdir(r1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x68800, 0x1c) lseek(r2, 0x100, 0x1) getdents64(r2, 0x0, 0x0) 1m25.031333544s ago: executing program 3 (id=235): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="c4e1a9761d006000000f08653e6726660fc7370f0f358bf34dd0a7f3f49aba9e0000de00660f3880a18ade0000c7442400e7000000c744240200880000c7442406000000000f011c242e3ef466baf80cb88eafda8bef66bafc0c66b8742a66ef", 0x60}], 0x1, 0x55, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000005700)=@vmx={0x0, 0x0, 0x2080}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m24.582809955s ago: executing program 3 (id=238): mkdirat(0xffffffffffffff9c, &(0x7f0000004000)='./mnt\x00', 0x1ff) getsockopt$TIPC_DEST_DROPPABLE(0xffffffffffffffff, 0x10f, 0x81, &(0x7f0000000080), &(0x7f00000000c0)=0x4) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) mount(&(0x7f0000000400), &(0x7f0000000000)='./mnt\x00', &(0x7f0000000480)='ecryptfs\x00', 0x0, &(0x7f0000000500)='ecryptfs_sig=syz,ecryptfs_fnek_sig=syz,ecryptfs_cipher=aes,ecryptfs_key_bytes=16\x00') r0 = open(&(0x7f00000001c0)='./mnt\x00', 0x8000, 0x129) ioctl$EVIOCGBITSND(r0, 0x80404532, &(0x7f0000000040)=""/31) lseek(r0, 0x2, 0x3) 1m24.185568844s ago: executing program 3 (id=241): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x11, &(0x7f0000000040)=0x7fffffbd, 0x4) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x1, 0x1, 0x0, 0x6, @random="001122334455"}, 0x14) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f00000000c0)=@req={0x1000, 0x4, 0x800, 0x8}, 0x10) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3, 0x11, r0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x57, &(0x7f0000000140)={0x0, 0x18}}, 0x20000040) write(r0, &(0x7f0000000000)="01", 0x1) 1m24.059562207s ago: executing program 3 (id=242): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="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", @ANYRESOCT, @ANYRESDEC=0x0, @ANYRESHEX], 0xbf, 0x5534, &(0x7f0000006040)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x183341, 0x84) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x1860, 0x0, 0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x158) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000004100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r0, 0xf501, 0x0) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r0, 0xf502, 0x0) 1m22.29886359s ago: executing program 3 (id=252): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r0 = syz_create_resource$binfmt(&(0x7f0000000180)='./proc/net/afs/sysname\x00') r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) write$binfmt_script(r1, &(0x7f0000000080)={'#! ', './file1'}, 0xb) close(0xffffffffffffffff) execveat$binfmt(0xffffffffffffff9c, r0, 0x0, 0x0, 0x0) 1m21.345080554s ago: executing program 3 (id=262): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./bus\x00', 0x8c0, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x1, 0x4449, &(0x7f000000cd00)="$eJzs3c9rXNUeAPBzb/LapK8/0h+LPnjwBl7hPVRC0pWagm2aNk3aWKm2iJvpJJm20UmmJBNx0UXcFVwJLopCUXCXVcnCbf0T3Lis64Iu3AhCMTJ37iRzJzPtWDKNDZ8PJCf3/E6+c0/OXcycOFW5NbeUm1vKFRZy5ZkbSydzH5dLy/PFEL8gOz0+nek4TntCzXb2yba7fPb8u9dOhvD97I+P19fX15OY9YaWhht+/u3XOzONaV3c1Kbab+vetssHIYRjW+ZV1RNCeP+7EKIQwpk0bzRN+0MIB0Ot7Nqdz/Y+dYj+zmfz4FHxVP7J1N21kROTq/fX2v/uUQhflv712s35n//bM/LTK52PAAAAAAAAAAAAAAAAAADAbjZ+5fLVd4aGw8Mo9K5GW9+vO56muTbt17fNf1oP8NX+bf6NAQAAAAAAAAAAAAAAAAAA4O9n8/3/uehIi/f/j6Xp6Tbt19/q/hzpnom3L4+dGxpOz3+PtpS/nmb9cqYnHG5x7nvz+e9nmtq3Pv996zjPqz6/+rgDIYoHM9dxPDgYwjfpwe/Ho31xqbxUefVGeXlhdtum8dLKxr92en8mOumB/p3Gf7Sp/+6f/390y6upen19+15iu1o2/j1t6337adRR/M9mm93r0rQbHO3+ELtYNv69SV5/Y4W9taQa/897nx3/sab+u3X/Hwwh5KLqXHOZFaC6h6nmt9uvkJWN/z+SvMzSmf4h293/vydpvFH9XFP/O7X+rzT/I6KlbPz3JHl9mRq12Cbxj599/59v6n8n4l+d/4r//x3Jxj9d7HszVZK/ZKfr/3hT/92K/9U4nefBKPMKWI1q+e0+r46sbPz7tpRvPv/FHe3/LjS1f1HPf/Vx689/9eX//1Ht+Y/WGuP/tHqd3v8TTe26vf6fTvZ/nVk/1M2ZvJyy9/++JC+7dx5Ivnca/8mm/rsV/2RX0leP/+Z68sfeWv7X9n8dycb/n7XMuLHGSvI92f9F7fb/my429b8T+7/q/Ffi7o66W2Tj3/6zdqvx/yGJe189/lFocf9famrX/fiHMGSv/9yy8T/Qtl5y//c9e/2famrX7fj/r5udAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALwERtN0IETxYOY6jgcHQzibXh8P+6Lpwmx+ulSe+WgphLE0PxeORDdL5elCKT+3UJ4t5gulUnkmhHNp+bHQFy2VypX8fOH2+Y2++qNbxcJiZbpYqIQQxtP8f4cD9b6m5yrzhdshhAsbZYfi8uLtW4WF/Ozc4ptDQ0NDYWJjDoej4ieV4kKlNnqtNITJjbYDUcPkkuKLG3PZH31YXl5cKJSS/EsNbUrlmUKpoc1UWvZFOBxVFpcXZgqVYr5UvlkfbyedTtOxiSvvXbk0vKX8elRLR1/stAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4ix6OvHEvhNBbu4pDCLko/SFKvzIePCqeyj+Zurs2cmJy9f7a41Z1AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4kx04EAAAAAAA8n9thKqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqirs0j9KxEAUB+A3o6Clx7AKSWcbUUQLI4In0GN4GD2Kl/AOFha2FsvC7gSW/IEQ2O77mgfz480bmAcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsNzdc/fyVDcRKc43ZxFfb98/h/lDqR/X0/0nK2aerujhOO4fu5vbuin/nkb5VTn6bfMu/f97f42J2vsc7Mlwn/bGc4bm9m3uff3ci0i5ioi25Jcp56padhcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGzZgQMBAAAAACD/10aoqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwg4cCwAAAAAI87eOom8DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB+BQAA//+j/Rsv") r0 = open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x14) r1 = open(&(0x7f00000000c0)='./file1\x00', 0x14927e, 0x6) fallocate(r1, 0x0, 0x0, 0x1001f0) r2 = open(&(0x7f00000001c0)='./file1\x00', 0x101000, 0x4) copy_file_range(r2, 0x0, r0, 0x0, 0x20000000008, 0x0) write$P9_RXATTRCREATE(r0, &(0x7f0000000200)={0x7, 0x21, 0x1}, 0x7) 1m21.231387237s ago: executing program 33 (id=262): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./bus\x00', 0x8c0, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x1, 0x4449, &(0x7f000000cd00)="$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") r0 = open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x14) r1 = open(&(0x7f00000000c0)='./file1\x00', 0x14927e, 0x6) fallocate(r1, 0x0, 0x0, 0x1001f0) r2 = open(&(0x7f00000001c0)='./file1\x00', 0x101000, 0x4) copy_file_range(r2, 0x0, r0, 0x0, 0x20000000008, 0x0) write$P9_RXATTRCREATE(r0, &(0x7f0000000200)={0x7, 0x21, 0x1}, 0x7) 42.457006163s ago: executing program 0 (id=549): mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000040)='configfs\x00', 0xa145cf, 0x0) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000ac0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1800011, &(0x7f0000000140)={[{@journal_async_commit}, {@sysvgroups}, {@norecovery}, {@abort}, {@nombcache}]}, 0x1, 0x618, &(0x7f0000000bc0)="$eJzs3c9rXNUeAPDvvfnZ5L2XtDzee30LGxBpQJs0aStFBFtwWUL9sXMVm7TUpk1JIppYMIW6EcSNC8GVC+t/oQW3Lty6cONKCkWkCyvFjtyZe9PJZCa/JxMnnw9M55xzJ/ecm+abc+bknDsBHFhD2T9pxNGIuJlEDFQd64z84FDldQ9/u3UpeyRRKr3xaxK3PkyWq8+V5M/9+Rf/ORDJD2nEkY619c4vLl2bnJmZnsvzowvXb47OLy6duHp98sr0lekb4y+Onz1z+szZsZM7ur7qqi/ceee9gY8n3vrqi8fJ2Nc/TSRxLp7kL8iuq/Zre3ZUc/Y9G4pSxaPq8uz7enaH594vfh8ofk6eSmoL2Lcu5z+P/4qI/8ZAdFT9bw7ER6+1tHFAU5WSKPqoXNGnl4C2l2wr0nt3vyHAHivGAcV7+3rvg9dKmzkkAfbIg/OVCYBK7HdFRBH/nZW5weiNrLTvYbJqnieJiJ3NzFVkdXz/3cSd7BEN5uGA5li+Xcxy1/b/STk2B6O3nOt7mK6K/7TqkZW/vs36h2ry4h/2zvLtiPhf3v93x5bif6gq/t/eZv3iHwAAAAAAAHbPvfMR8UK99X/pyvqf7jrrf/oj4twu1L/x3//S+3ki2YXqgCoPzke8XHf978oa38GOPPfP8nqAruTy1Znpk/meweHo6snytVt806rnE58c+bxR/dXr/7JHVn+xFjA/w/3Omo24U5MLk7tx7XDQPbgd8f/y+t9jecnq9T9Z/5/U6f+zuL65yTqOPHf3YqNjG8c/0CylLyOO1+3/nw63k/L9OaLR/TlGy+OB0WJUsNYzH3z6TaP6xT+0Ttb/960f/z1J9f165rd2/u6IOLXYWWp0fLvj/+7kzY7i/Jn3JxcW5sYiupMLa8vHt9ZmaFdFPBTxksX/8LPrz/+tjP+r4vBQRCxvss7/POn/udEx/T+0Thb/U+v3/4Or+//FpWsTw6+mc6tK1k2M3x38tlH9F1fFfzGLWNv/ny4fGM5LzP9BtbX349hMXG59NA8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAARP7JQf+IJB1ZSafpyEhEf0T8O/rSmdn5hecvz757Yyo7Vv78/7T4pN+BSj7J8mPl9NP8eE3+VEQcjojPOg6V8yOXZmemWn3xAAAAAAAAAAAAAAAAAAAAsE/0l/f8l3pq9/9nfulodeuApuvMn8U7HDydG77icamitrzU06w2AXtj4/gH2tXm47+rqe0A9l7j+H/0uP64H2gXxv9wcG0z/v25ANqA/h8Oqk3O6fU2ux1AK+j/AQAAAACgrRw+du/HJCKWXzpUfmS682MW+0N7S1vdAKBlrOGFg6tzttUtAFrFe3wgWUn9UXezf+PV/0lzGgQAAAAAAAAAAAAArHH8qP3/cFCtv//f2n5oZ+vs/68X/G4XAG2k8Ud/6Puh3XmPD2zU29v/DwAAAAAAAAAAAAD7QO/StcmZmem5+cW/X+KV/dGMrSWWJ/dFM3Y18aQ5Z+6KiP1xgXudKG7B0cJmtPj3EgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsOKvAAAA//9GjCFo") openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0/file0/../file0\x00', &(0x7f0000000080)={0x100, 0x0, 0x10}, 0x18) read$FUSE(0xffffffffffffffff, 0x0, 0x0) socket(0x10, 0x3, 0x0) ioctl$RTC_EPOCH_SET(0xffffffffffffffff, 0x4008700e, 0x94) 42.146060251s ago: executing program 0 (id=541): openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x42, 0x1ef) lsetxattr$security_capability(&(0x7f0000000200)='./file1\x00', &(0x7f0000000240), &(0x7f0000000280)=@v3={0x3000000, [{0x3, 0x3}, {0x3, 0x1ff}], 0xee01}, 0x18, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x1c8) lsetxattr$security_evm(&(0x7f0000000300)='./file1\x00', &(0x7f0000000340), &(0x7f0000000380)=@md5={0x1, "334e1428c82a002f9bb6c507fbe10cb2"}, 0x11, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file2\x00', 0x387) mount$overlay(0x0, &(0x7f0000000a00)='./file0\x00', &(0x7f0000000a40), 0x0, &(0x7f0000000ac0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) truncate(&(0x7f0000000b00)='./file0/file1\x00', 0xe2) 41.959364546s ago: executing program 0 (id=542): io_uring_register$IORING_REGISTER_SEND_MSG_RING(0xffffffffffffffff, 0x1f, 0x0, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x80000, 0x40) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000a40)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xfdef, &(0x7f0000001740)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xe74, 0x2, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0xe60, 0x0, @wg=@data={0x4, 0x7407, 0xfffffffffffffffd, "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"}}}}}}, 0x0) readv(r0, &(0x7f0000002600)=[{&(0x7f0000002640)=""/69, 0xe56}], 0x10000000000000b7) 41.815416119s ago: executing program 0 (id=543): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="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", @ANYRESOCT, @ANYRESDEC=0x0, @ANYRESHEX], 0xbf, 0x5534, &(0x7f0000006040)="$eJzs3EtvG1UUAODrpOmbEiEW7DpShZRItVWnSQW7AK14iFQRjwUr6tiO5db2RLHjhKxYsEQs+CcIJFYs+Q0sWLNDLEDskIo89wY1PCpQHJsk3ydNz8yd6zPnjqpEZyZyAM6s+ezXn0vhWrgUQpgNIVwNodgvpa2wGsMLIYTrIYSZJ7ZSGv9j4HwI4XII4dooecxZSqc+vzm8sfLTW798892Fc1e++Pr76a0amLYXQwjdrbi/240xb8X4MI3Xhu0idpeHKcYT3UfpOI9xt7lRZNitHcyrFfF2K87Pt3b6o7jZqdVHsdXeLMa3evGC/WHrIE/xgYe17eK40dwoYrufF7G1H+va248/2/b7g5inkfJ9VKQPg8FBjOPNvWZcz9ajItZ7gzQe8+aN5t4oDlNMlwv1vNMo6tg4yp3+f3u73dvZy4bN7X4772UrlepLleqdcnU7bzQHzeVyrdu4s5wttDqjaeVBs9ZdbeV5q9Os1PPuYrbQqtfL1Wq2cLe50a71smq1crtyq7yymPZuZq/ffz/rNLKFUXy13dsZtDv9bDPfzuInFrOlyu2XF7Mb1ezdtfVs/Z1799bW3/vw7gf3X1l787U06S9lZQtLt5aWytVb5aXq4sld/+h3/X9a/yep6DGuH46k9LSTDyZXB8AJov8HpmGi/f9cGHv/H/T/Y6H/P7Prf5wc7QZytj21/wcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4DT7Ye7LN4qd+Xh8JY0/k4aeS8elEMJMCOHx35gN5w/lnE155v5h/tyfavi2FIoMo2tcSNvlEMJq2n579rjvAgAAAJxeX318/bPYrcd/5qddEJMUH9rMXH0wpnylEMLc/I9jyBLSw6bw/NGrikb/v8+FvTFlKx5gXRxTsvjI7dy4sv0rs4fCxSdCKYaZg5nnJ1oXAABwnA53ApPtQgAAAJikT6ddANNRvGlNf4ufXvNdiCG9ELx06AgAAAA4gUrTLgAAAAA4dkX/7/v/AAAA4HSL3/8HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAL+zcze5aQNRAICfbVxo6Q+quu9VuoNj9AhddllxFY5Ar9ALcAa667a7CCLsSRSiECA2JiTfJ9nD2NbzA7GZmacBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAE7pbzmf/P71ddA0zmrdzCHvKJomCQAAAK/UspxPqg+juj9M1z+kS59TP4uIPCIeGrsX8WYrZpHilDueL+/l8CeiirB5Rz8d7yLiWzquPp36VwAAAICXazGdjdOqenUanTshulRP2uTvv7cUL4uIcvSvpWj55vTloEfX++eHNv/vXvzccTc7LrVqYisal8zcqKbcem1F26+4raRJzeBOk9VN3l06AABAV7ZHAh2OQgAAAOjYj3MnwHlUq56pFj8V8PfrJi0Ivt3qAQAAABfo2KpnAAAA4DkaPnq3Gv9fwP5/H//b/w8AAACerN7/DwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgFNalvPJYjobN42zWjfTzrcBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAArtmfdxSGYTAIg5tEeXVCF/D9b2kW7NatmxkQfPxbCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAK4/j5XnGqzGTbfQ6k7x7Xkk+nRrfTo1f58Y/yVh3/wYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADY2Z+XFAxhMAaA+R8q7qT3P6yE6hlEmIFCSOjiAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeKPP9fK9w6/hSPJv27C0HknWTg1bpzGHae+H8dgZAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDJzv37xk3FAQD/3vl8pQVECChDEKISAyw0vZaWrgygiIE/ASlKryVw5UebgVYVKAsbytwFwYgQEihs/R86t1KXsnW4oUhMDCD77OT1KOKgin0kn4/0/L62HL/vc6IoXz/nAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJgyfnMvzorNwiTuVsduP7i+XvR3pvrCze27y0Ur4s7fXP+L/Up8/r2Y7nSW2ksEAACAwyOr6/uIfuQ7q0XQXSjr/7w+p6j5v3l6Etf1/HTdX/d17V+0n3+6//zuQAuTcYqLXtgYDU/+NZVeto/znGfP/OMZvfLOl89esvIb0n1n67lxXt7Pzle3br3VL8MjTWQLAPwXJ+q+Cuq/h4p+0GZiABwavaoV7lX1f7bQbk4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAATehvxZN13ImI5d5eXLjz4Pp62U/t39y+u1y3szdubKfXLC6RR8SFjdHwZFMT+R+4cvXah2uj0fBy88FLEdHe6FXw3gznRLSZoeBxg271sz7bVx2PiPZzbj9o+RcTAAAHTl61oq6/l++sFsc6ixF/fPtw/f9KEkda/0/1af1///2zt9Ox0vp/0NgM59/K5qVPVq5cvfbaxqW1i8OLw49ePzV4Y3D63Jkz51bKZyUrnpgAAADwePpVS+v/7mLEeGr9/1gSx4z1/6dfDz5Px8rU/4+0t+jXdiYAAACH27PHf/u184jjnX4/Plvb3Lw8mGx3909Nti2k+q8dqVpa/2eLbWcFAAAANGG81Xlo/f98EseM6/9PfffCD+k1s4g4Wq3/n1j/eHS+uem05PeZzmri34n3faoAAADMtaNVS9f/8/L9/+7uKw/diHj15UlcfQzgTPV/9vaX36djpe//n25uinOpuzS5H2W/FNFbajsjAAAADrInqlYU+7/kO6sf/Hjs3b73/wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACa9mcAAAD//6iKRJw=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x183341, 0x84) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x1860, 0x0, 0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x158) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000004100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r0, 0xf501, 0x0) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r0, 0xf502, 0x0) 40.188740959s ago: executing program 0 (id=548): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) r2 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) mount(0x0, &(0x7f0000006b00)='.\x00', 0x0, 0x2390024, 0x0) 38.90853865s ago: executing program 0 (id=557): r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000005e00679a3601ffc4910710007e570966f4366ec9d4"], 0x1c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) recvmmsg$unix(r0, &(0x7f0000002380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 38.725006945s ago: executing program 34 (id=557): r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000005e00679a3601ffc4910710007e570966f4366ec9d4"], 0x1c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) recvmmsg$unix(r0, &(0x7f0000002380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 20.847880941s ago: executing program 7 (id=728): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./debug/tracing/trace_marker\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/tracing/trace_pipe\x00', 0x800, 0x0) write(r0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) read(r1, &(0x7f0000004000), 0x2000) 20.735223174s ago: executing program 7 (id=729): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'ip6_vti0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000002540)={@mcast1, @remote, @remote, 0x1, 0x2, 0x5, 0x400, 0xb7, 0xd30048, r1}) syz_emit_ethernet(0x7a, &(0x7f0000002600)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x80}, @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x40, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, '\x00', 0x40, 0x0, 0xff, @private1, @private2, [@hopopts={0x3a}], "f4c638bed6f068cc"}}}}}}}, 0x0) syz_emit_ethernet(0x66, &(0x7f00000027c0)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "fc414a", 0x30, 0x3c, 0x0, @private0, @local, {[@srh={0x2f, 0x4, 0x4, 0x2, 0xe5, 0x70, 0x5, [@private1, @private0]}], {0x4e24, 0x0, 0x8}}}}}}, 0x0) 20.446109831s ago: executing program 7 (id=731): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000024c80)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000024d40)=ANY=[@ANYBLOB="4400000010000d042abd7000077bf70000000000", @ANYRES32=r4, @ANYBLOB="01000000000000002400128009000100626f6e640000000014000280050001000600000008000b00", @ANYRES32=r1], 0x44}, 0x1, 0x0, 0x0, 0x40040}, 0x0) socket(0x1, 0x803, 0x0) 20.149393548s ago: executing program 7 (id=734): syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000400)='./file0\x00', 0x2040c5, &(0x7f00000002c0)={[{@fat=@fmask={'fmask', 0x3d, 0xd}}, {@shortname_mixed}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'macroman'}}, {@fat=@allow_utime={'allow_utime', 0x3d, 0x5}}, {@utf8}, {@utf8}, {@utf8}, {@shortname_winnt}, {@fat=@sys_immutable}, {@fat=@discard}, {@numtail}, {@numtail}]}, 0x0, 0x2c5, &(0x7f0000002a00)="$eJzs3EFrE1sYxvGnSZukKW2yKBfuhYsH3ehmaOMXMEgLYkCpjagLYWonGjImIRMjEbHdufVzFJeuFNQv0I079+KmCIKbLsRIM5k2baPG1nZS8/9BmdN5zzvnJDNT3hno2bjx7H6p4FkFu65IwigirWpTSm+1OkY620i7HVO3VZ2b+PL+/2s3b13O5nJzC8bMZxfPZ4wxU6deP3z8/PTb+sT1F1Ov4lpP3974nPmw/s/6vxvfFoOjVyTbLFUqdXvJdcxy0StZxlx1HdtzTLHsObW6sU0tiBfcSrXaNHZ5eTJZrTmeZ+xy05ScpqlXTL3WNPZdu1g2lmWZyaSGTfT3usel/NrCgp09qvng2I332lmrZe1oz2B+7TgmBQAABktY9f+9omeKnilXtur7n9T/EXXHf1H/S0Nd/x9U9cehnvUkTpat+j/ZuX93o/4HAAAAAAAAAAAAAAAAAAAAAOAk2Gy1Uq1WKxVsg5+4pISk4Pew54mjwfkfbl3/uJeQ3KeNfCPvb/14tqCiXDmaGZO+tq+HDr89fyk3N2Pa0nrjrnTyVxr5qOJBfiDdO3/Wzzfd+SsaU7J7/IxSmu6dn+mR38jHdPZMK94Z2ZGllN7dUUWultvX9U7+k1ljLl7J7ckfb/cDAAAAAOBvYJlt+57f23HLBMuG7In7O3feDyjV/X4gon3vB/zn6wvq5I/qv9HwPjcAAAAAAMPEi6lku65T85qPBrERk/SnDhgsZuvv0eEOKIX9/ST67Ty68x2+HIRz2m8jImlvaGzfnt6NqA41+idp930xHfrpPnCjFd2+Vj8+8O+AftLD/KsEAAAA4CgERf9I2BMBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGCI9buKWND/IIuQdQ0XDedTAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIPhewAAAP//H1oOyg==") r0 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00') mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1333404, 0x0) mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0/file0\x00', 0x0, 0x13481, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) read$FUSE(r0, &(0x7f0000000840)={0x2020}, 0x2020) 19.736877488s ago: executing program 7 (id=736): r0 = memfd_create(&(0x7f0000001c00)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9b5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\\\xb0:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85l\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7y`~7\x16\x02\x00(v\xe6`\"6\xfcgC\xb5\xf0\x13.zj\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1exQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+\xa0\x1c\x14\x01\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1.E\b1\xcb\xa2\xbe}\xb2\xe4y\xbb\xe6\x1f\x10\x95y\x8e\xa6\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x82\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_ASSOCIATE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x5c, r1, 0x1, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x96c}], @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x2, 0x2, 0x5, 0x0, {0x1, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x800, 0x1, 0xa}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000815}, 0x850) 2.838149541s ago: executing program 5 (id=856): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000200)) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) r1 = dup2(r0, r0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000400)={0x0, 0x0, 0x0, &(0x7f0000000300)=""/107, 0x0, 0x6000}) write$vhost_msg_v2(r1, &(0x7f0000000380)={0x2, 0x0, {&(0x7f0000000140)=""/116, 0xfccf, 0x0, 0x1, 0x2}}, 0x48) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000005c0)=0x1) 2.652314446s ago: executing program 5 (id=861): unshare(0x28000600) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) setpgid(r0, r0) setpgid(0x0, r0) wait4(r0, 0x0, 0x2, 0x0) setpgid(0x0, 0x0) 2.595417617s ago: executing program 4 (id=862): syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(0xffffffffffffffff, 0xc0445624, &(0x7f00000000c0)={0x140980001, 0x204, "bf5dff0f251ed700f61765c214525a2572ce1ced49e8981e103268fadc1433ae", 0x40, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, [0x10, 0x0, 0x4]}) r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000240)={@hyper}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000300)={{@hyper, 0x800000}, @my=0x1, 0x0, 0x0, 0x2, 0xfffffffffffffffe}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f00000000c0)={{@host, 0xffffffff}, @host, 0x0, 0x0, 0x1, 0x4}) close(r0) 1.942371892s ago: executing program 4 (id=868): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="0a00000004000000080000000a"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r0}, &(0x7f00000001c0), &(0x7f0000000200)}, 0x20) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000b40)=@base={0xa, 0x4, 0x4, 0x100, 0x0, 0x0}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x1, 0xc, &(0x7f0000000440)=@framed={{}, [@generic={0x61, 0x8, 0x1}, @map_fd={0x18, 0x1, 0x1, 0x0, r1}, @generic={0x15, 0x8, 0x0, 0x2}, @map_fd={0x18, 0x1, 0x1, 0x0, r2}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x1}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0xe, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3}, 0xc) 1.742499358s ago: executing program 2 (id=869): setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000008c0)={{{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, @in=@empty, 0x4e21, 0x1, 0x4e22, 0x800, 0xa, 0x90, 0xa0}, {0xa459, 0x5b, 0x5, 0x1, 0x3, 0x0, 0x100000000, 0x8}, {0x5, 0x8000000000000000, 0x0, 0x2}, 0x5c03, 0x6e6bbf, 0x0, 0x0, 0x0, 0x2}, {{@in=@multicast1, 0x4d4, 0x33}, 0x8, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3500, 0x3, 0x0, 0x8, 0x2, 0x1, 0xf4e}}, 0xe8) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x33, &(0x7f0000000040)=0x7, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000000600)=[{{&(0x7f0000000140)=@nfc_llcp, 0x0, &(0x7f0000000780)=[{&(0x7f0000000340)=""/180}, {&(0x7f0000000280)=""/122}, {&(0x7f0000000400)=""/165}, {&(0x7f00000004c0)=""/142}, {&(0x7f0000000640)=""/70}, {&(0x7f00000006c0)=""/179}], 0x0, &(0x7f0000000580)=""/70, 0x11}}], 0x40000000000029d, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f0000000100)=0x2, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 1.723136328s ago: executing program 4 (id=870): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000180)={0x2, 0x2383, @loopback}, 0x10) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x2383, @loopback}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x10, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xe, 0x6, &(0x7f0000000440)=@raw=[@map_fd={0x18, 0x2, 0x1, 0x0, r1}, @generic={0xb7, 0x3}, @generic={0xb7, 0x4}, @call={0x85, 0x0, 0x0, 0x34}, @exit], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000004c0)={@map=r1, r2, 0x5, 0x0, 0x0, @void, @value=0x0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r1, &(0x7f0000000540), &(0x7f0000000580)=@tcp=r0}, 0x20) recvfrom(r0, 0x0, 0x0, 0x10000, 0x0, 0x0) 1.66774857s ago: executing program 6 (id=871): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000020000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000000800000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="12000000010000000400000008"], 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000000c0)=r3, 0x4) sendmsg$unix(r2, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 1.582791672s ago: executing program 5 (id=872): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x140) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './cgroup'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './bus'}, 0x9) copy_file_range(r1, 0x0, r0, 0x0, 0xfffffffffffffff8, 0x0) 1.534415622s ago: executing program 6 (id=873): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x10) listen(r1, 0x1) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x3, 0x21, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000640)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b3', 0x0, 0x10000002, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.475799144s ago: executing program 4 (id=874): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000900)="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", 0xffffff5d, 0x12, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cdg', 0x54) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) recvfrom$inet(r0, &(0x7f0000000080), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x1500) shutdown(r0, 0x1) 1.430093365s ago: executing program 5 (id=875): timer_create(0x0, &(0x7f00000001c0)={0x0, 0x21, 0x2}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = syz_create_resource$futex(&(0x7f0000000000)=0x1) r1 = syz_create_resource$futex(&(0x7f0000000080)=0x1) futex(r1, 0xb, 0x1, 0x0, r0, 0x403) 1.25299981s ago: executing program 8 (id=876): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) r2 = socket$packet(0x11, 0x3, 0x300) bind$packet(r2, &(0x7f0000000200)={0x11, 0x0, r1, 0x1, 0x3, 0x6, @remote}, 0x14) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f00000000c0)=@req={0x1000, 0x4, 0x800, 0x8}, 0x10) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x4, 0x7}, 0x4) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3, 0x11, r2, 0x0) write(r2, &(0x7f0000000000)="010000000000000020", 0x9) 972.677517ms ago: executing program 8 (id=877): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bridge0\x00'}]}, 0x34}}, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000400)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x1d, &(0x7f0000000080)=0x6, 0x4) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000040)=0x1b32, 0x4) sendto$inet(r0, &(0x7f0000000540)='v', 0x1, 0x4040, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x14, 0x40000102, 0x0) 843.38808ms ago: executing program 8 (id=878): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x9, 0x3, 0x1d0, 0x0, 0xffffffff, 0xffffffff, 0x98, 0xffffffff, 0x0, 0xffffffff, 0xffffffff, 0x138, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x1, 0xffffffff, 0xffffffff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x230) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r1, &(0x7f0000000400)={@val={0x0, 0x891f}, @void, @eth={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x67, 0x6000, 0x3, 0x2f, 0x0, @private=0x1fe1, @multicast1}, {0xa000, 0x86dd, 0x8}}}}}}, 0x2e) 798.01964ms ago: executing program 2 (id=879): pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000400)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) syz_mount_image$fuse(0x0, &(0x7f0000000100)='./file0\x00', 0x1000000, 0x0, 0x1, 0x0, 0x0) r2 = dup(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracefs\x00', 0x1ff) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="38010000fe0000"], 0x138) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 617.519015ms ago: executing program 2 (id=880): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="200000006800e97800000000000000000a0000000000000008000500", @ANYRES32=r3], 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@ipv6_newrule={0x24, 0x18, 0x409, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x1}]}, 0x24}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@ipv4_newnexthop={0x28, 0x68, 0x501, 0x0, 0x0, {}, [@NHA_ID={0x8, 0x1, 0x1}, @NHA_OIF={0x8, 0x5, 0x1}]}, 0x38}}, 0x0) 536.979017ms ago: executing program 6 (id=881): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0x10, 0x10, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) sendmsg$inet(r4, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) 443.18428ms ago: executing program 6 (id=882): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x80000042, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000208500000007"], 0x0, 0x20, 0x0, 0x0, 0x0, 0x5d, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r2, r1, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xd81, 0x0, 0x0) 412.92297ms ago: executing program 8 (id=883): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{r1, 0xffffffffffffffff}, &(0x7f00000007c0), &(0x7f0000000640)=r0}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r1}, &(0x7f0000000240), &(0x7f0000000280)='%pS \x00'}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000001380)={r1, &(0x7f00000004c0)}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000180)={r2, &(0x7f0000000300)}, 0x20) 312.450593ms ago: executing program 8 (id=884): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) syz_mount_image$msdos(&(0x7f0000000180), &(0x7f00000003c0)='.\x00', 0x8084f8, &(0x7f0000000a40)=ANY=[@ANYRES8=0x0, @ANYRES16, @ANYRES8=0x0, @ANYRESOCT=0x0, @ANYRESDEC=0x0, @ANYRESHEX, @ANYRES16=r1, @ANYRES8, @ANYRESOCT=r0, @ANYRES8=0x0], 0x6, 0x0, &(0x7f0000000000)) r2 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000040)='.\x00', 0x18920f4, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, &(0x7f0000000000)) 292.306803ms ago: executing program 4 (id=885): ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, &(0x7f0000000640)=@vmx={0x1, 0x0, 0x2080, {0x10000, 0x8000000, {}, 0x0, 0x20000009a6}, {"d07ee511f368b2a747251cba4130c84d13bc1903e6882414875944b82f10a32adad59953b7a890eff248264533942a68add3cd784a01567c6b0d9560e938d5a95542f7c44ffc40a36a3fb7f4578b61af429294817929705e32b6b48f388e93ca051ed017c49a75ba08d2220e3c4a16845c32fbd0f1f02e1fa8845a8982a3ac2a241adabdb23500b7be45c2995db01232accacc0c6a6f39b3cbd4b8009b7608dadf3ae9bd27b6be4aaec5c2666b8d08df62b6b7187cc43faeeed57a95f17a81d8677b2f4b7dfd403adeaaa978afe637d027bcdc81ef81ee9345c362621d8eaefff4dac96def624351935f2ac6d573abae93a2ed5e1120a4e28a6f6a29fe2f8ee17582b17b682e66e576a5e42391d6b991f31795a7f3fb1a49a956d3d11d7b3ef39239065a548704677d9bc89f619fcd96d88b7a8674ae9d23da53c9c4a258fdc2d937213bd5b5e43f5550a0a4f4f5df6a428694a2b83b0cd2aeb1eb7dbae38c86f27292eae23e79a33a5264657ccf35ccd4507b8f0d879db556faf8278371ab25ac2c35d7d77fbe00dfdffeb722a90a2a6e78b56fa092bca0eb8a57e9784bedb38403903eaa0948c0611d30f8e2823daf14abd13207cc18f420d8ed21a29c53ee3c821ebefdddec8dd7e80bad1cca1acd2dfce368b6d3d87830517f5c06959ed3d9402664cf167998b3cf784c4787733f5d644e79b670952fb33b6be1f84ce73bd863b87d506dbd517dc247b1d54b6325bdf0f8cc026bb2c7aa64541e8e37c98cb17d5a7bbfe731994f780bcd91f5a7327d849bc718d3b669bde81bce23c0a516684b771dc961273a7e32917231a2b15a0554b3bc631efad8a807f8e8c910e788b59af76f28eddf3261856c2cad8330a0420b757872075201fd7e0a94761ffa10a26da432389e778ffd7d402cbcaed958f979a57fd82efc290d7540e7eff753606c663c046be13526e0a37faf74d9fb2f4518e83014403a74af69ad6987764d43cde4c295cc7c8720c642e72a6cb821b020385310af2cfc941131718d50c9f53ee807ba969db68a97bef3ebdc0c18c74b9ea64d91d408ca446d6ccf14c24f6153794721752f74ba44f575a1d66f002c49f18f7b35428f1bac27f758872c5624caa0ed3b76ca43a5907153dc0305c6080100000000000000775cb1db295b40f59c0d47f18a2a5b2449c8e7aff042cf6e38b956a9893d6e43b1a9e95c90a1c08326ddb6cf1beac903717d8c2b89be82a2db9f4a42eb6b43368988345689a7ec76c2da4865caff776ed09cc51e6c3343b6d39b1cf318e0d5c251e3c741e384b971b3901ab57b35bd6d517aae1935ddce6296e60109f43f78b3e3d8cc203992015feda1d8036748e1bfa2ccdb7c2939bc4221944974d01d6a31dd1bbf6a6b9b17decedd550f2a8f6d2cdc7410e893375bf363b69d765a285a57762216dd6428f9cc4b4e2fe4f89b1cc92c629e64b29700fe75fe4a7929424769db1de2974473c2ef68cb104e79132e1cf29432a57552472451c78455f14aa3bcd6e2f0afe298a399e232d8f3ce6075472e46d5fd22b0cf7f53005bc0a8fbc08bd88533c9a73d290b469b71d4f9f6fbc0c174f19b31dc05e54117d583d2879d90add5d2abbac1880f5459f9c501d39cdc85019401e87f4f1ff44675107e9db6e02bb8b894422cd95a1e1e133abd7a070f4184753973853613760743d618992f9515597297e345c5571731de7031e21faa156944f9cebcc2a2a2f81750766e9be2bc21d66ff24933cde48e387bac6e94f92f5a5beb261a7570d74782d5e7588c963a52b5f8d88b8abb60c9f3a1e23c5d803819a1c5523d23291164d33a4c1303963f420f07eb28e444cc5ac1e046a5c9682f1d050d03fc94720fa11f21fda510c32e2406c0f63e47860d59811af2a8d53b7acacecdbcfb60ee38897f02c7d72abab49a16e9c0711122f89a22d1f01db605804d270938a86973fdd517a7178912a8e7b9cc78c88700cf862e524c4d152d2d0201b1d5b080c97a58e25843c1b04e143937dcbd5d2875eb2c3b38003bd9c200a81367a9d6129a121375c89c782cbdb9b92ae006db33085df12dd65ec1e19ca013a284fc5666e8a0f66173c9dc7519a83349c0cea1ba33847ceb5ee150eddc6c7e823f43a336ff06690182515c8230e6ddf69c3e70e08c2900f1fdfe0ba4c6dd10e96cead6a7ed21a261d2e8e15bf041590439db57539d10cae9683a822dd2a6631abe3941a86b05d815ce91fdb0d7a783ef8870a81bda624f65b049b16ad2ec373e0d9af75132ab3cabd0dc424c004b5e90a732f6b6c7ac3c676e779de4a0561c52ffc880c170872143144b133886912263e56b7dfb97d23f0e2491ba46a5053c1a5e42cb0fac52970a834496f1d10310f3b0946e531aacacc9d526a337f77c5a0e35fe6d2ca8c9eb87fce0fcfb659a86dbdc0fe6ff1de1ae8549c29274ec7e2daac612e2e0194974c6b0a9e65e724a76e54d3ebede753cf9f027759c79529eaac74ba94ef0da27cbf2fbdc7f06cd08243716826f7c901e257c3b40cb6392726a523010c4a7f4023043c715973a39db3683804f309bfe045280d204ca000505aa9efe079819f63f08e23adea81e0f8fc73a8ab1827476509410917b0091aa0702dedaae8b1e8bb1aad23b97a23d010c3fec37e625820d9375304cb318a0cd3865ff56f96f19dfd9110fa1ba8ba17bdf992c5aebf165053ce2e2245af1dda0b6af2770e968116ea6735e2f2136ca09d42a43da54801395b9ac182475ec6b2c4ccddec16d8fce4252352bcb9dfdcef2ab1770f8f6707f4ea1630d58edfdb200e5e8ade514b750721ab7c52c614ba51cd437fa238e9ae3b09f78c712febe138c754b27bafdbe8859ce1e5133e825ea8d8bd68684a8d2c4db066203f336b54207761b8ce0ed940a8ea494ed18b46c891c4b9c4b580c44cc04e53007a289f734db4d7dbb80d7b5183cf466c549af7ae3a9394e6b6c9fc2cb9e732a66c38acc858a8e12077d2de8827adf521661edfd317887fd9f1d4b8f17478ca2a7d1463c681a12f6abd70d8d12a3aff448182e0e08e1263d9edbad4d0c29aac3794a24e85d47defa58659b945d6add52b074220bc88423a5379819044274be0c23a7e08c08b7411337ddd2a6b3bed2647cf467c2edb78add7410b723577b7eb9a3a368829d250ffd173978b7e0066fe577586c2584442349cd1962104e22b128db56e7a7f1ab59ee963cee9e463647aafb0ba9ef90169c69fcbb2851d8340597f478d7201c67e8990b85f1d47a8dc78d5fe4ef321bdd8d52f79bc7ecb2ec3c29ddb0ab2859074af6635e3bec5e1679ace0b088e76a7f5232cbf93eb52b5435e58d3ae5bb8f9cf26966264243909a8dafc62989eda979a0a05b8e562d518fa3e2d92eafe1f2831a77d06abd69817644519576fb07a88c17f52fc74de32f140d8cc53ba673c7434c328cfd58f343f8ed0f19840ae80f0aaefeede42b74b4b5d0870280e6233890f41e9147bb4a1d8d15f62e4a1d0254b3463402b1300c078f251c8a336e80d003318d8e5b5e2e0afd7dbe3b57022adebc1de85209d24949c63af34bbab681747ef5960f58fd8db1b0c6a99fe0ae8c84b9b6e260cf71f8151bdce47b2a694bf7932b6a30639275a612c77f589101f571221bf0d4e64ce2a23301c53a380c53175fcca302563efb50452d3f4419f1f81e9dfd8e40bede6f9c73dfcb79edc8b8c60ffa738718765fd0b65859da8542e67f6ba3556d595cf8859810a83ca6161ef8381d348d7342c3b66edb402e323af4aef6684a7f72f3b49e5dc3c20c154db11fe4807dbb7876c7c7d84e5cf831da693e65b7769950872578ce87ff1696b2f26a8ae900154fd129a62c3dce2620cb753a7f1c96c6628df7b338a00ba20557ab15f8623b7c1bdf3f15e9b662bb65e1bb8dfaadf407d97f468b51dc7817a1f3978848996f99c62bdd12ceeadf2be3d4bbc3e83c01bab738899568f1d90c799b9170c107645f543633e5cca5ba598ce28da37312e50dd3cc1413cb21c596920ab8d5779200682d527267e6564a93549b1ca13a10f57e593de6edfb9e1cd68108903f54e5a78a4c68cdffb31048c735161991fa149268fff0967c379ef1645f7716610c3230b452488f13632563a0d86d02d0e47546123d1e6b1dbeb8d1a38c6d2752c570142a30fbdb1e1daff58d065403dc731a650bf65e9f94492c4ff60ced6a0631cf1d9ddc9318bf067d4d28a0845b6b0b2b448f6c7d22b8490e17fcd602bdf954f7ec0183cb0f6df78935829d0c00372dee9102c9ff0f5423767b9d62d9a8ffd92d3af25fccc23e7961f5fd218903a136478754c53adf93e355ed5f12060c4bb707cd4875015617ab5f1f232a7cf044b7f50a1590613ec30be930edc70cb391d400a1406b02d612918a5c1d99bce875f260e40a3b779b38a1daa1054ad50f9a96d0204d7ce7ee96b3d03ae5c13e0ac53f374676fb457de8dc978c7331810dadbc6444f5fa7596a943b7f7836654e8387cfd07170134eac21428609bac2b85619d87789c51396fb04afefdea95848cc55054b0d3099f974ffee828e255be1a13d7e6a17e81562e55eca306d438f36cd5a9863c77f9d519b0d0af0900000000000000b9b8d130339193893c4937cab0b3619f775ff538696c30b9964bd04e2be4b8aaa90a7891c6e8a2806ead78cb170db650c68a7a844590c578788caf13f48d8b375dd725eee00bd0b17b0d2a87418c684ece2fd66db58eb7b601257ad692e8a6f27125f5cf77287a6da495ce839aad3fc9077abfb28e28ef09a1fd103045310e62faaa36198a6a22810585d90599f8d7988ad786057d57888cddb48152afcbcca3979bad2f2a498e96f11855be2481bfa17218c10f8962ca094d898e1f2a60cb7d663569739cd1195fbcb436c9cdbf729206d1d937276b4e67d47ef325c3e1abf7defd3bd69f4b5f47b05ef86f501527694fa16f17d266f4de07654c4e547908da3b8ebf89e87cd633509261418f6009cf53f6d73d4df249642dc9b65e1d762376c9a75ad057871b26479c9fd42b9fff1eb59f6817251014f1777a9be2d249dcd3eea21e92444c0e13a019100b7effb9d0c6c95448a72a1ae7ad520fe8809683545052fbe5dbad18ed399e317a0dbfd738f53b2405239b9ef60b076f768274da79bb674782f10789e506c38713d27c7996b6bfe516ac6dbf0fe1188ce65150ffa4e000d9dc1c28b7a8b00830719666c1d6b927fdebf23533be84b8250850f98160e2de1a97221aec2726e64677951dc1af88a1ad05ab3dabbb6407894661648f92e082b8c8cedb3c894c95bdfeea0218f16ed942b9bf7be2ecbae1df061c0d7a6c5f491605c1161deb626eba3587d17610f13cc3aa4bfda536cffcbee7a22de7826ba43047ed98f0474fc24d42246dcad449d346f21f557043099c5bbae70286a09c37f6976d11b31ac6af6e07b87bcf1949e777374314fbc807dfd88c9f0740728898fa88d93ab45731e41cc09ce235fbb4458a65510c67ae3909ed5d5fc56980436dccebedc51b0ca383d2868438c5a10435ec8d13b67f0171b6d67ba15db4d66ddcaec6227d1e3b1d0c9fcd72b99fced4b76e8f6bd4dfb8cd2adec2593d5933fcaff774136da3d754523bbfb68fc388dba10000bf11238e2536178ba9a480bb5abeba376fcebeb1403e0d223e3afc1a6a6688352056671a3ecde86cc9b7a6b08c1c096c024e12d40410a00487dcafed8520599f678b1f6b74f08ee595534fdd455baf5f7b6400", "d07ee59115bfee5345dc58b23cffc5c643e81123cf65a8d185a9e53e7f9d20a2020cabd00e6cd5420c4fc8fe61efbb8012fec281c1550aa7087060b41a484b5b682068eca9d6936960d6477a239fe120e7433936c058ffa20f15e2ed6c32ae4bd9de18fd5fe31f20ab85f2fb01b792873e66a5cf610bb34322c830d921ca201a82c1557b5a2d7ba0c22555f03c65cc8d2df42064f60eef20d09c493c84c11857ffa5eb8130764e6e21b41a0fb263aedfc3c9be3390087ef0222481b049f72a52ad49e908223a367b40d567a52fde9fc9cc245e733edfdd1b4442a55ed7fe18226e3f7fd28b8d5fd88907fca2350c968c2918f0fe093c91cba0b87bb954b3280a000023025602d77ef2605b9d2720c269744d29ef36a79f700c0eab33eec64c5b8341d3143cc0d382133e6961216b5802820929b94a7bcb1f581110df1b4c52293b478694f8d147476bb3bc5e5a5018481950c395d42b423899a7c4e06b6befa46e2a67a70194a2d2e80234385db03c4ba693c61b84ff80571643f204ae1c7d42f5461f209f7b559bbb5a0c45d5ead100f30f615dbbccb6139a4afe8fa59496b1aaed900299f1c335ab35ee56a333fa22455c05b1ebb1b9bc3b0ca1e02abe0732b24a4ef6f9310db4dcaf37382f4a69e02829eb46bcf9a8132906f7e5c46afbac699a9618130cb39489d3ae793d8fcc43213198bc2cbe8a0fcffd1b69450d61e9c8e9ce80c19218335c48788ddde3d97c694611c783125d96392ad0295bd9600076978c64ec511106f9422e019b08041a43ef0b8abaec4cef8b8041b773f57068a38690056837008cfe86c143b821ddd9e4d517a2f6ca2e21bbbc3b1f0ea5f6d855c37f8814f15a00df3031328c804e360ca966287cce40b4d57e533e575263d48759428ca6df4154f4699d8f41b8c8e076aa225e0c1c0f278e21463a205bfc0a334f3516eae2c5222f87b57ef5e424505b9993d24a8d225b89517ed3015d5a64950bd265412d07a397bd454698571ab002ac752f7d0c8959025065eba27ea44574379a6a387ef7344a90f828a08afe8c27032c8431d30f323b56e7cbe9edb3c9327a2cabc3ea0dceccf4ec25b2861d5f8940823b57def9c184083586c6534f3402ba8d9d6ba1cfff07fba22d24d40bca43c96c56489ea10500b32b7359c2c296181ac4d5f7872377c40a819a8093859a42fa02a0a4f4b2ce4f44d87cabdb2433dcbc530a03516856417d25b06c38952c80f5348c96bf2549c72c8bb4735f958bf7e02c7a67e530611f2d80d547810bae4f52799a9eb6be5da14693d9d7c84dc0b2bef18e11c87a6977a669608ae4f1d1367687cfbeaec2308d1f2b24a95d8b25e4fe6c7cd47fc5800cc59c2467c778de641662e9a83431b5c014ff3a8cb777b92b5847318a8a525e44d45058fb03db60112a4b35b4370e9cc8e142a216308d987eea38d7b91f29b26535792c28ee9e9f7beb3668b765ca388cd3269f6f017d169196f55eea8f16280ceee95eafb1990b2eaacdb6a36386936a02a70cc8baed1ed7f75df629f618de95ccf62ca5f27fef54a22a94d313f1688526f34a834f14472c5a2d5fe91d828fb228c142c3bda3a7463a528d34d37ac32fa27e9b47fc9d817d91fb2dcec4c5c051cc46cfa47ee94f7843cfb8faa99da3569095245cd88674e5503ff2921852bde363894bfab4a13195c960e75940ea3625b3c6780580bc4694b5fe9bc118afa261bf51b8a5f79397cf4b27e84a15339bfe5f04f477ca9b0038a6a309c9ea89261e5da441f35598ee644eb7544d99b1e07f8a0e71b4f70e0faf47413518795a3d247e5f37863a80e83111bc8265dc7ab304e3097a8a825334ab4e507895be0862f5d219bff68ab180c307c6726b74e9197972da8bdc53f70e43c91406349b97d124622b4896c7471421047c8eca382953347c98df1959bcb269814ded7ee1e1bd5d724ba5d0a1af9d87ae96853de2de0798e7ae879513f2a561d3d7be2e04d382bfd2d0a27052c3e14aeae844cb6fcac2737d3f9f916715026a3d19c7401d2162add82a16b8e172c96ee8f0e4e645e7a201bcdf34271ee87eede9d36439c1962bb44b6433b19bad3c3bc841955be66176ceec74c5173a838a77fcc58ece7a7653c87f344c758278eb53b24142bf87472a6cb1367b0940154aac55dcc81dc8032987e9ea9856a5c844853616ffe3daaae85d50a20994126065e79e8e91022a5c8678a10870410361b74a0e37f9acc773c876f50da6776d43dcd80b3850fcbdd22d03cacad58fb8b408388efec93d42385fb266044178235fc5fe59dc35aef3eb8e89ada9c0ceb8f9379d9fe9045248196e918411bba64eb740337c0c8015540bebf581465d382f1e214f2f8a7b21b4983d8567de985d5e709ad9a8e0113be44e5f8f6aa9e592115669a494d1eddb3186a688a122ad66cc289e249c47d90168d499cac3fea3f2cac52eb840760837b485c6ce32e6ab2c4e1d2bce37f5105a1da6b34215bc19440189fbce47b4bf386c1ecde35ea39024fcf75e3b92a4d45a12452b8df5fd302faa71ab130d3d350907ff28dc4d62f01912eb5cfa84d2d818937d0ba7af08470128a92fb10e86d8a636c65be67c967f3bdd039a5eed1700e335ed92261b3600fb0f5ba72a8f5f86eaad9d51b8fc3c7fcc9ec7645079c4164398805cde129e8b7bf90c91d7bbdc411228a7f072920f40ab43074558ce7b48f9ef77f5fe6e845dcf0d23b12f3d61ea6435bf16b886bc9fb0af755fa472929f5536aa4a643783dc2749c33e4ec3c0ebf1824fcebceee319d346f34f1569b04dba2284bbe06f6c81794a94b6e470260290fea50c0a3645989ed557feef306815b67bc18025df1a3182b44d805903f438e70ff4dd59cecca60e755b7297c665462c768a1942b447e76d2a244e17295e94e77176f79f32b4734081138cc64f27243c1a2ebe7a094bf81b74208184b3212b769d55531d898eda1ac80c02b4c9564c9f2fd7882b605a445c963f40115908fd07587c4feed6253ba295922495e24d9a6779a8f1ed80ddac801b329ddb5ff32f654cde6c6faf1f917a036937a5d936b2bde8c547362322044d51ba758834a786814aec35c72c5c4f28a49cdb663876f0e82e73024f183823a4f12898bf6a71ec7bbe599e36f2c03186e8187b37856060d4f5d598e72b80672b8eed4206569c2d593b37d9c6cb64eec7d783c3d506c0568c0b205aa548bcac773732b56f8a0910f6c8b6a5cf846e84db67465ed7c3a88909d5ea256300566dc8bcdb279a36eb028e0577f3eedc7f0ae6111cef1445e29f0bf0a92b7c6601e75aecad62a9f21e5e1a4d744b652d4c60b434b9220b7f8169df36d5c172ea6ded7eabed08f91305e9f0748ae9cd56ed50418dc6eab2bc6d153a3d61834f16b3739d93afa510f2ddd26d3f913b6ef9278cb4c81c5b470b1002b63ef31432ca969c27fa3f463b3f3824cabeccfb35c8493d3b4d4dcad1305f37e607359ad219e4598ba7713aa3ca89f0b4ff710b83acf64ac1306d21a450422cc8bc9d0e4526655359ba2c3967dc0b4f7853b83043f66b2bab33d34510829e951cd13036474b2934fbea89b30137f0258b4c22d9e061e76c5cec96d72801295e47a1121bdd526196ce9ea6942197ae990c59a3a71447192ab4bc0bf0904b83a52413c157625a5df9547bc7015f3b48729eb1fcb462c1fe9fbcb2ea9d921107d5dadbce9a2a7f5fce1502b5132500b86978d4132e903f907c62d91d85cf5f5a315f7b8dcd9e143e5b7a66dcdd1411515586b13401b6038af4f4b01f76f438171aec9bfd0b45baf14301d54aa00e6936869f0c92109ec1a509000000000000008f0da6d47a8e5e24d92e678f63572371f85486ee1dcc071df165f0695df15f8b60587765f4cd49819880a779a7290cbd65b8df57c3f2d1139e8fc8383d9aee5466fbb97d66a85c7ab7091fe00806f862a39a51d998c6efec7727d953fe4e72f218858c5e848456429aeda5e92c40480d9e84e87ee61ade1a82f8838fe1f28bd294af45b9a2fe12462c78dde15bec8723c74825d0d83e9d071f91d57ebe0ba2fc1e6e75d6ef6859289b22fe9d90819d1e99043a365c608dd6ce89c23f62f9772fe6ad59383e01b8bbba61e836d66e7ba91e1e246c9755f023f6b05c452fdcb167b7ebe5e0a113c8681397316761e66239911ba677baf7552090d316bd75cd05fb0caf235c523cf607157b7d4cde8b144d49df4f339a65411a92ee68a4f1c2ddf9fbc3d22ffb986059b3ed0d3f82501554919b37e66cbb5bd75401dfda96092d114bc259860438cfb79ea33607ca30798ddaefef2715a3d91946fc26f94bd269ba7567dcd9c50ad11ee96347bccba629a784c7b662873a866f73f1dda2aa2082ba26d270d6471236823dc05b788de80f94e5c294af129128d34cfb44105a8b40d4f8441c21a098eb04e48bca616dc6915b52fa6a9fb0ab5eef802fd3d8dcf182258567951be20a0ebf49116216432e91033f6085fbf72ed1d60717739f3499b52b6b684e0d42e33f736657a898cb3fa5da70e8710d35fb11e2996031a82cce1d55d8fa4bead1a35e458b8811fd7ad70c566146daf8d9ac29288ca45ab50f7779526be7741ad9f39daac4195fa13914b7151115b06d2d07dd1a4af6efe38a225f7f8b183a43797d5a1d7c046613d78b19bf9d2316fbcdfc935fc54477b095295553bb417e527e3814d165cdeb43c552f05b1f66d13aca2496327760c93b8a1427c2272c405d8b94f8eb275249a0947c332049ee0bad7136669c7df63dc120ea62c79d04a39db50af4d76e9dd5dcd74a77b8fcd1981b6f138a048970e94fe6c4082b49f7e397e0f9b9fc7368aebaf3ba0c051d08f6770e6ddca26f8eca0415552bbe7b1c41e1e87f52981f2de74bded1a1d5bc41e60d19e4e05de1db2e9700256741fd6e86028fd21aaae7d3978d09baa4ebdf9a39aee448d344f2e5c050fe3293c6c74a7cb16755554747b010f10bff9b6f02c82da4f78b5b5596aafa01b5027ccaad437c125390416f36f1df42ef52a1d5af117e7866cc9f61b950ce922e3a1a6ff586e14add3e14781116d643e74124e570392572393c56e78906a24cec1ef196ccd22a7e492084a04b8ca069b95d5e12ad19e76b4ced072ce0bff78d7fe3a3750fe541ed053fb3fe08f29a773cb68d2cb8418f1b3bd4949720ae4104ed20d9aa5d2541317367d02db5f60f6b8df2ff596bd166692cee510b59da757532d88ddf3e8944f01a63ca0657ed24ea5b8110cb53731c539e94633e41d71fa59919d96287a505e8c4e9ac3d9b5e9180b93b670e37aeeec29bdabaac747f8bdf2a5275b61cb8f2081c5655fb047e9036d2273d4674e0382c5d5ebb50448ac02b07d851d66f8836fec1ac3e42c5405adcecb31f50b20e6573dad067999b78f7351bea9e8ca6536fc304eede9cdb905c24f475141349a1b00ad68198ca88898f29afcfb63ebf63d7d037529cf8219dbdb85d01cf5fc3d4b045c9400f672a6deb1ff4d197a28b2a7304e751541a046bc4812ba2fa9e430c79a0b34ab764933148ed337d34dfabf055608109bfd85c739f9c2353f1137582bc73a8d4310cb8ca1dd192b9335ce4ffca52907f37f29fd50e96be21e33b5074f0e16d11a08b274150eb876024ae815e67f3c13c6a3f158c4fd7a26bb2f5d19a2f097235d2fc235f67bdc9b11ffeef3168eb360388749f2f8b91fc3249edc58a959577aa205a105af400"}}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, 0x0, 0x0) capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000000c0)={0x200000, 0x200000, 0x7}) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x7, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="08000000040000000400000009"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x8, &(0x7f0000000580)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7030000070000008500000021000000b70000000000000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 269.035933ms ago: executing program 6 (id=886): r0 = socket$inet6(0xa, 0x1, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x200000, 0x0, 0x0, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', 0x9801) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000440)='./file0\x00') umount2(&(0x7f0000000080)='./file0\x00', 0x8) setxattr$security_ima(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), &(0x7f00000002c0)=@v2={0x5, 0x1, 0x7, 0x10, 0xd4, "a08f25b44c1149d6e0cb466c963276e6f8fe0c7cfd918bb9e75e4ff81d32a37f0049e1f93288b627692f5838ee43815c830b0c52a5b6688b81deeb16117d79d930a538a79c254d9345f52a7fa8971adfb188963853fa9d9e257f07522973f6a84b4e9a26e4fda2b2507f9f7e4884a351702c7bd52a749f0bfa79870e41d6d131e22cb0ca1d391e7271da17c0da9863c21b6b4f45e6a6b034088caaeacae9450d52b97a2a09727c183609ae978a9fa7f6f17763c4612874d38a486c475e511c989f1306ba6aee23b62b5a946c7c947f94f898376a"}, 0xdd, 0x3) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0) 241.509065ms ago: executing program 2 (id=887): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x7a, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x4040000) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xc, 0x0, 0x0) 150.167227ms ago: executing program 4 (id=888): r0 = userfaultfd(0x80801) pipe2(&(0x7f0000001040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RGETLOCK(r2, 0x0, 0xffffff6a) pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r1, r4, 0x3, 0x8) tee(r1, r4, 0x60000000000, 0x8) vmsplice(r3, &(0x7f0000000340)=[{&(0x7f0000000000)="b0", 0x1}], 0x1, 0x9) close_range(r0, 0xffffffffffffffff, 0x0) 137.618737ms ago: executing program 8 (id=889): mkdir(&(0x7f0000000000)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000200)='./my_configfs/usb_gadget/g1\x00', 0x1ff) mkdir(&(0x7f0000000300)='./my_configfs/usb_gadget/g1/functions/tcm.usb0\x00', 0x1ff) mkdir(&(0x7f0000000400)='./my_configfs/target/usb_gadget\x00', 0x1ff) mkdir(&(0x7f0000000500)='./my_configfs/target/usb_gadget/naa.1234567890abcdef\x00', 0x1ff) mkdir(&(0x7f0000000600)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1\x00', 0x1ff) rmdir(&(0x7f0000000040)='./my_configfs/usb_gadget/g1/functions/tcm.usb0\x00') 104.547408ms ago: executing program 2 (id=890): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = eventfd2(0x5, 0x80000) write(r1, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x13, 0x0) 61.405338ms ago: executing program 6 (id=891): rt_sigprocmask(0x0, &(0x7f00000000c0)={[0xfffffeffffffffff]}, 0x0, 0x8) r0 = gettid() timer_create(0x1, &(0x7f0000000100)={0x0, 0x12, 0x4, @tid=r0}, &(0x7f0000000380)) timer_settime(0x0, 0x1, &(0x7f0000000080)={{}, {0x0, 0x989680}}, 0x0) r1 = gettid() r2 = socket$inet6_tcp(0xa, 0x1, 0x0) write(r2, 0x0, 0x0) tkill(r1, 0x16) 0s ago: executing program 2 (id=892): r0 = memfd_secret(0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x11, r0, 0x0) ftruncate(r0, 0x51a9495) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002180)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r1, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): e fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.371792][ T4174] udevd[4174]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 95.393066][ T4202] udevd[4202]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 95.452695][ T5120] batman_adv: batadv0: Interface activated: syzkaller0 [ 95.527173][ T5119] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 95.586570][ T5119] batman_adv: batadv0: Removing interface: syzkaller0 [ 95.866219][ T5114] loop4: detected capacity change from 0 to 32768 [ 95.961382][ T5114] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.179 (5114) [ 95.979156][ T4269] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 96.100779][ T5114] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 96.139464][ T5114] BTRFS info (device loop4): setting nodatacow, compression disabled [ 96.150112][ T4713] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 96.159624][ T5114] BTRFS info (device loop4): setting datasum, datacow enabled [ 96.167411][ T5114] BTRFS info (device loop4): force clearing of disk cache [ 96.204285][ T5114] BTRFS info (device loop4): enabling ssd optimizations [ 96.226477][ T5114] BTRFS info (device loop4): using spread ssd allocation scheme [ 96.247496][ T5114] BTRFS info (device loop4): turning on sync discard [ 96.269145][ T4269] usb 1-1: Using ep0 maxpacket: 16 [ 96.280005][ T5114] BTRFS info (device loop4): turning on flush-on-commit [ 96.287005][ T5114] BTRFS info (device loop4): not using ssd optimizations [ 96.326392][ T5114] BTRFS info (device loop4): not using spread ssd allocation scheme [ 96.358795][ T5114] BTRFS info (device loop4): using free space tree [ 96.379039][ T5114] BTRFS info (device loop4): has skinny extents [ 96.419252][ T4269] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 96.448799][ T4269] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 96.482771][ T4269] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 96.509199][ T4713] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 96.523165][ T4269] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 96.532804][ T4269] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.546615][ T4269] usb 1-1: config 0 descriptor?? [ 96.593595][ T4713] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 96.648873][ T4713] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 96.689057][ T4713] usb 3-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 96.698144][ T4713] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.763185][ T5114] BTRFS info (device loop4): clearing free space tree [ 96.825593][ T5114] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 96.839503][ T5114] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 96.923973][ T5198] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 96.930157][ T5114] BTRFS info (device loop4): creating free space tree [ 96.956060][ T5114] BTRFS info (device loop4): setting compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 96.979127][ T5114] BTRFS info (device loop4): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 97.054710][ T4269] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0002/input/input6 [ 97.118417][ T4269] microsoft 0003:045E:07DA.0002: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 97.279297][ T4713] cxacru 3-1:1.0: send of cm 0x91 failed (-71) [ 97.287675][ T4713] ATM dev 0: cxacru_atm_start: CARD_GET_MAC_ADDRESS returned -71 [ 97.305870][ T4269] usb 1-1: USB disconnect, device number 3 [ 97.335567][ T4713] ATM dev 0: usbatm_atm_init: atm_start failed: -71! [ 97.396914][ T4713] cxacru: probe of 3-1:1.0 failed with error -71 [ 97.435494][ T4713] usb 3-1: USB disconnect, device number 3 [ 97.722457][ T5211] process 'syz.3.204' launched './file0' with NULL argv: empty string added [ 98.487171][ T5248] tipc: Started in network mode [ 98.501427][ T5248] tipc: Node identity 2000004, cluster identity 4711 [ 98.510443][ T5248] tipc: Node number set to 33554436 [ 98.850289][ T5265] netlink: 4 bytes leftover after parsing attributes in process `syz.5.219'. [ 98.964071][ T5229] loop0: detected capacity change from 0 to 32768 [ 99.397492][ T5283] netlink: 7 bytes leftover after parsing attributes in process `syz.4.227'. [ 99.464782][ T5286] loop5: detected capacity change from 0 to 512 [ 99.555597][ T5286] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 99.589227][ T4292] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 99.697540][ T5286] EXT4-fs (loop5): mounted filesystem without journal. Opts: barrier=0x0000000000000081,minixdf,discard,delalloc,dioread_nolock,noquota,,errors=continue. Quota mode: writeback. [ 99.750524][ T5286] ext4 filesystem being mounted at /22/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 100.009433][ T4292] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 100.041889][ T4292] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 100.182383][ T4292] usb 3-1: New USB device found, idVendor=9710, idProduct=7810, bcdDevice= 1.00 [ 100.202648][ T4292] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 100.218240][ T4292] usb 3-1: Product: syz [ 100.226953][ T4292] usb 3-1: Manufacturer: syz [ 100.312168][ T4292] mos7840 3-1:1.0: Moschip 7840/7820 USB Serial Driver converter detected [ 100.496552][ T5316] loop4: detected capacity change from 0 to 256 [ 101.287968][ T5312] loop5: detected capacity change from 0 to 32768 [ 101.343106][ T5312] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 scanned by syz.5.236 (5312) [ 101.408661][ T5312] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 101.429082][ T5312] BTRFS info (device loop5): using free space tree [ 101.443816][ T5227] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 101.459876][ T5312] BTRFS info (device loop5): has skinny extents [ 101.668713][ T5312] BTRFS info (device loop5): enabling ssd optimizations [ 101.872787][ T5366] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 101.889380][ T5227] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 101.928454][ T5227] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 101.955682][ T4292] mos7840: probe of ttyUSB0 failed with error -71 [ 102.040208][ T4292] usb 3-1: USB disconnect, device number 4 [ 102.066783][ T4292] mos7840 3-1:1.0: device disconnected [ 102.103963][ T4174] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 9 /dev/loop5 scanned by udevd (4174) [ 102.169548][ T5227] usb 5-1: New USB device found, idVendor=0644, idProduct=800f, bcdDevice= 0.40 [ 102.202116][ T5227] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.237918][ T5343] loop3: detected capacity change from 0 to 40427 [ 102.257574][ T5227] usb 5-1: Product: syz [ 102.266651][ T5227] usb 5-1: Manufacturer: syz [ 102.300470][ T5343] F2FS-fs (loop3): Invalid SB checksum offset: 0 [ 102.314089][ T5227] usb 5-1: SerialNumber: syz [ 102.362345][ T5343] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 102.454352][ T5343] F2FS-fs (loop3): invalid crc value [ 102.495529][ T5343] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 102.650534][ T5396] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 102.650812][ T5343] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 102.691931][ T5343] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 102.749481][ T5227] usb 5-1: 0:1 : does not exist [ 102.767437][ T5227] usb 5-1: unit 2 not found! [ 102.851914][ T5227] usb 5-1: cannot get ctl value: req = 0x81, wValue = 0x100, wIndex = 0x600, type = 0 [ 102.968654][ T5227] usb 5-1: USB disconnect, device number 5 [ 102.991582][ T4550] attempt to access beyond end of device [ 102.991582][ T4550] loop3: rw=524288, want=45072, limit=40427 [ 103.052148][ T4202] udevd[4202]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 103.098853][ T4550] attempt to access beyond end of device [ 103.098853][ T4550] loop3: rw=0, want=45072, limit=40427 [ 103.262543][ T4711] attempt to access beyond end of device [ 103.262543][ T4711] loop3: rw=2049, want=45120, limit=40427 [ 103.581537][ T5409] loop0: detected capacity change from 0 to 32768 [ 103.591677][ T5429] UBIFS error (pid: 5429): cannot open "./file0", error -22 [ 103.689193][ T4292] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 103.700965][ T9] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.767110][ T9] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.812348][ T5409] XFS (loop0): Mounting V5 Filesystem [ 103.923857][ T5227] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 103.938287][ T9] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.985141][ T5409] XFS (loop0): Ending clean mount [ 104.005808][ T9] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.109726][ T4292] usb 6-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 104.140076][ T4292] usb 6-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 104.178140][ T4292] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.242264][ T5216] XFS (loop0): Metadata CRC error detected at xfs_agfl_read_verify+0x189/0x240, xfs_agfl block 0x3 [ 104.255445][ T5227] usb 5-1: Using ep0 maxpacket: 32 [ 104.298137][ T5216] XFS (loop0): Unmount and run xfs_repair [ 104.306973][ T4292] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 104.337127][ T5216] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 104.368007][ T5216] 00000000: 58 41 46 4c 00 00 00 00 d7 dc 42 4e 07 00 00 00 XAFL......BN.... [ 104.409385][ T5227] usb 5-1: config 2 has an invalid interface number: 88 but max is 0 [ 104.417488][ T5227] usb 5-1: config 2 has no interface number 0 [ 104.423918][ T5216] 00000010: 9f 91 9c b7 20 0a 10 1d 00 00 00 00 00 00 00 00 .... ........... [ 104.469163][ T5227] usb 5-1: config 2 interface 88 altsetting 25 bulk endpoint 0x6 has invalid maxpacket 256 [ 104.484822][ T5216] 00000020: e6 0a 0e bb ff ff ff ff 00 00 0b f0 00 00 0b f1 ................ [ 104.494233][ T5216] 00000030: 00 00 0b f2 00 00 0b f3 00 00 0b f4 00 00 0b f5 ................ [ 104.503516][ T5227] usb 5-1: config 2 interface 88 has no altsetting 0 [ 104.515808][ T5216] 00000040: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 104.525512][ T5216] 00000050: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 104.538074][ T5216] 00000060: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 104.547260][ T5216] 00000070: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 104.557026][ T5409] XFS (loop0): metadata I/O error in "xfs_alloc_read_agfl+0x1dc/0x390" at daddr 0x3 len 1 error 74 [ 104.583965][ T5458] loop2: detected capacity change from 0 to 512 [ 104.609612][ T5409] XFS (loop0): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x515/0x8b0 (fs/xfs/xfs_trans_buf.c:296). Shutting down filesystem. [ 104.628129][ T5409] XFS (loop0): Please unmount the filesystem and rectify the problem(s) [ 104.679604][ T5227] usb 5-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.06 [ 104.696610][ T5227] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=1 [ 104.709412][ T5227] usb 5-1: Product: syz [ 104.713603][ T5227] usb 5-1: Manufacturer: syz [ 104.723600][ T5227] usb 5-1: SerialNumber: syz [ 104.742175][ T5458] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 104.769298][ T5435] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 104.852293][ T4184] XFS (loop0): Unmounting Filesystem [ 104.901461][ T5458] EXT4-fs error (device loop2): ext4_iget_extra_inode:4573: inode #15: comm syz.2.266: corrupted in-inode xattr [ 104.944485][ T5458] EXT4-fs (loop2): Remounting filesystem read-only [ 104.995236][ T5435] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 105.021735][ T5458] EXT4-fs error (device loop2): ext4_orphan_get:1415: comm syz.2.266: couldn't read orphan inode 15 (err -117) [ 105.059853][ T5458] EXT4-fs (loop2): Remounting filesystem read-only [ 105.067712][ T5458] EXT4-fs (loop2): mounted filesystem without journal. Opts: journal_dev=0x0000000000000006,inode_readahead_blks=0x0000000008000000,errors=remount-ro,noload,user_xattr,mblk_io_submit,noinit_itable,noblock_validity,max_dir_size_kb=0x0000000000000009,init_itable=0x0000000000000fff,. Quota mode: none. [ 105.069084][ T5454] rxe_eth0 speed is unknown, defaulting to 1000 [ 105.445104][ T4292] gspca_stv0680: usb_control_msg error 2, request = 0x6, error = -32 [ 105.589012][ C1] net_ratelimit: 56 callbacks suppressed [ 105.619250][ T4292] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 105.638846][ T4292] stv0680 6-1:4.0: last error: 86, command = 0x78 [ 105.675406][ T4292] usb 6-1: USB disconnect, device number 2 [ 106.079478][ T5494] loop2: detected capacity change from 0 to 1024 [ 106.329310][ T5227] asix 5-1:2.88 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 106.349020][ T5227] asix 5-1:2.88 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 106.361678][ T5227] asix: probe of 5-1:2.88 failed with error -71 [ 106.373610][ T5227] usb 5-1: USB disconnect, device number 6 [ 106.499517][ T9] device hsr_slave_0 left promiscuous mode [ 106.529308][ T9] device hsr_slave_1 left promiscuous mode [ 106.535274][ T5480] loop0: detected capacity change from 0 to 32768 [ 106.554489][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 106.579416][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 106.605030][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 106.622723][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 106.630403][ T5227] Bluetooth: hci1: command 0x0409 tx timeout [ 106.654116][ T9] device bridge_slave_1 left promiscuous mode [ 106.660669][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.680961][ T5480] XFS (loop0): Mounting V5 Filesystem [ 106.697847][ T9] device bridge_slave_0 left promiscuous mode [ 106.707256][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.744116][ T5480] XFS (loop0): Ending clean mount [ 106.791940][ T9] device veth1_macvtap left promiscuous mode [ 106.798130][ T9] device veth0_macvtap left promiscuous mode [ 106.806685][ T9] device veth1_vlan left promiscuous mode [ 106.814252][ T9] device veth0_vlan left promiscuous mode [ 106.921151][ T5524] loop4: detected capacity change from 0 to 1024 [ 107.032263][ T5524] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsv0,max_dir_size_kb=0x0000000000000004,jqfmt=vfsv1,delalloc,dioread_lock,init_itable,errors=remount-ro,. Quota mode: none. [ 107.070063][ T5524] ext4 filesystem being mounted at /53/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 107.094674][ T4184] XFS (loop0): Unmounting Filesystem [ 107.134804][ T5524] EXT4-fs error (device loop4): ext4_map_blocks:741: inode #15: block 3: comm syz.4.277: lblock 3 mapped to illegal pblock 3 (length 3) [ 107.222388][ T5524] EXT4-fs (loop4): Remounting filesystem read-only [ 107.238529][ T5527] EXT4-fs error (device loop4): ext4_map_blocks:631: inode #15: block 3: comm syz.4.277: lblock 3 mapped to illegal pblock 3 (length 1) [ 107.273978][ T5527] EXT4-fs (loop4): Remounting filesystem read-only [ 107.314584][ T5523] EXT4-fs error (device loop4): ext4_map_blocks:631: inode #15: block 3: comm syz.4.277: lblock 3 mapped to illegal pblock 3 (length 1) [ 107.377838][ T5523] EXT4-fs (loop4): Remounting filesystem read-only [ 107.399806][ T5527] EXT4-fs error (device loop4): ext4_map_blocks:631: inode #15: block 3: comm syz.4.277: lblock 3 mapped to illegal pblock 3 (length 1) [ 107.429678][ T5527] EXT4-fs (loop4): Remounting filesystem read-only [ 107.471514][ T5523] EXT4-fs error (device loop4): ext4_map_blocks:631: inode #15: block 3: comm syz.4.277: lblock 3 mapped to illegal pblock 3 (length 1) [ 107.531636][ T5523] EXT4-fs (loop4): Remounting filesystem read-only [ 107.540174][ T5527] EXT4-fs error (device loop4): ext4_map_blocks:631: inode #15: block 3: comm syz.4.277: lblock 3 mapped to illegal pblock 3 (length 1) [ 107.559491][ T5527] EXT4-fs (loop4): Remounting filesystem read-only [ 107.566168][ T5523] EXT4-fs error (device loop4): ext4_map_blocks:631: inode #15: block 3: comm syz.4.277: lblock 3 mapped to illegal pblock 3 (length 1) [ 107.600414][ T5523] EXT4-fs (loop4): Remounting filesystem read-only [ 107.615949][ T5527] EXT4-fs error (device loop4): ext4_map_blocks:631: inode #15: block 3: comm syz.4.277: lblock 3 mapped to illegal pblock 3 (length 1) [ 107.648896][ T5527] EXT4-fs (loop4): Remounting filesystem read-only [ 107.668400][ T9] team0 (unregistering): Port device team_slave_1 removed [ 107.676864][ T5523] EXT4-fs error (device loop4): ext4_map_blocks:631: inode #15: block 3: comm syz.4.277: lblock 3 mapped to illegal pblock 3 (length 1) [ 107.705263][ T5523] EXT4-fs (loop4): Remounting filesystem read-only [ 107.721347][ T9] team0 (unregistering): Port device team_slave_0 removed [ 107.729943][ T5527] EXT4-fs error (device loop4): ext4_map_blocks:631: inode #15: block 3: comm syz.4.277: lblock 3 mapped to illegal pblock 3 (length 1) [ 107.770714][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 107.779180][ T5527] EXT4-fs (loop4): Remounting filesystem read-only [ 107.856952][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 108.125170][ T9] bond0 (unregistering): Released all slaves [ 108.287532][ T5454] chnl_net:caif_netlink_parms(): no params data found [ 108.669343][ T5553] netlink: 72 bytes leftover after parsing attributes in process `syz.2.284'. [ 108.682414][ T5553] netlink: 12 bytes leftover after parsing attributes in process `syz.2.284'. [ 108.709177][ T4292] Bluetooth: hci1: command 0x041b tx timeout [ 108.785163][ T5454] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.859239][ T5454] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.900426][ T5454] device bridge_slave_0 entered promiscuous mode [ 108.942346][ T5454] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.986541][ T5454] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.024311][ T5454] device bridge_slave_1 entered promiscuous mode [ 109.196020][ T5454] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 109.260127][ T5454] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 109.469884][ T5454] team0: Port device team_slave_0 added [ 109.500722][ T5454] team0: Port device team_slave_1 added [ 109.677069][ T5454] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 109.708888][ T5454] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 109.708915][ T5454] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 109.840495][ T5454] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 109.886042][ T5454] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 109.986359][ T5454] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 110.211010][ T5454] device hsr_slave_0 entered promiscuous mode [ 110.236687][ T5454] device hsr_slave_1 entered promiscuous mode [ 110.269177][ T5454] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 110.298751][ T5454] Cannot create hsr debugfs directory [ 110.709087][ C1] net_ratelimit: 61 callbacks suppressed [ 110.799354][ T4292] Bluetooth: hci1: command 0x040f tx timeout [ 110.868504][ T5619] nbd2: detected capacity change from 0 to 63 [ 110.940154][ T5597] loop0: detected capacity change from 0 to 32768 [ 110.959633][ T5621] block nbd2: NBD_DISCONNECT [ 110.988485][ T5621] block nbd2: Disconnected due to user request. [ 110.999286][ T5621] block nbd2: shutting down sockets [ 111.134987][ T5597] JBD2: Ignoring recovery information on journal [ 111.142210][ T4292] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 111.230089][ C1] blk_update_request: I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 111.241454][ C1] Buffer I/O error on dev nbd2, logical block 0, async page read [ 111.259731][ C1] blk_update_request: I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 111.271020][ C1] Buffer I/O error on dev nbd2, logical block 1, async page read [ 111.278993][ C1] blk_update_request: I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 111.290028][ C1] Buffer I/O error on dev nbd2, logical block 2, async page read [ 111.298124][ C1] blk_update_request: I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 111.308974][ C1] Buffer I/O error on dev nbd2, logical block 3, async page read [ 111.317234][ T150] blk_update_request: I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 111.329070][ T150] Buffer I/O error on dev nbd2, logical block 0, async page read [ 111.336956][ T150] blk_update_request: I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 3 prio class 0 [ 111.348109][ T150] Buffer I/O error on dev nbd2, logical block 1, async page read [ 111.355997][ T150] Buffer I/O error on dev nbd2, logical block 2, async page read [ 111.364225][ T150] Buffer I/O error on dev nbd2, logical block 3, async page read [ 111.374086][ T150] blk_update_request: I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 0 [ 111.385480][ T150] Buffer I/O error on dev nbd2, logical block 0, async page read [ 111.393283][ T150] Buffer I/O error on dev nbd2, logical block 1, async page read [ 111.402271][ T150] blk_update_request: I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 0 [ 111.413913][ T150] blk_update_request: I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 0 [ 111.425079][ T150] blk_update_request: I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 0 [ 111.436762][ T4202] ldm_validate_partition_table(): Disk read failed. [ 111.479802][ T4202] Dev nbd2: unable to read RDB block 0 [ 111.505127][ T5454] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 111.541424][ T4202] nbd2: unable to read partition table [ 111.565708][ T5597] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 111.620234][ T5454] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 111.652592][ T4202] ldm_validate_partition_table(): Disk read failed. [ 111.706650][ T4202] Dev nbd2: unable to read RDB block 0 [ 111.713293][ T5454] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 111.729430][ T4292] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 111.741268][ T4202] nbd2: unable to read partition table [ 111.782030][ T4292] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 111.823821][ T5454] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 111.861498][ T4292] usb 6-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 111.916243][ T4292] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.977807][ T4292] usb 6-1: config 0 descriptor?? [ 112.344854][ T5597] (syz.0.297,5597,1):ocfs2_remount:624 ERROR: Cannot change heartbeat mode on remount [ 112.426691][ T5454] 8021q: adding VLAN 0 to HW filter on device bond0 [ 112.485167][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 112.502432][ T4292] playstation 0003:054C:0DF2.0003: unknown main item tag 0x0 [ 112.536798][ T4292] playstation 0003:054C:0DF2.0003: unknown main item tag 0x0 [ 112.546784][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 112.585653][ T4292] playstation 0003:054C:0DF2.0003: unknown main item tag 0x0 [ 112.611957][ T5454] 8021q: adding VLAN 0 to HW filter on device team0 [ 112.636525][ T4184] ocfs2: Unmounting device (7,0) on (node local) [ 112.644790][ T4292] playstation 0003:054C:0DF2.0003: unknown main item tag 0x0 [ 112.680894][ T4292] playstation 0003:054C:0DF2.0003: unknown main item tag 0x0 [ 112.736353][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 112.745059][ T4292] playstation 0003:054C:0DF2.0003: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.5-1/input0 [ 112.768736][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 112.831907][ T4276] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.839678][ T4276] bridge0: port 1(bridge_slave_0) entered forwarding state [ 112.869657][ T1111] Bluetooth: hci1: command 0x0419 tx timeout [ 112.916714][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 112.961460][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 112.998833][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 113.023833][ T4276] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.030994][ T4276] bridge0: port 2(bridge_slave_1) entered forwarding state [ 113.096637][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 113.178687][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 113.217361][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 113.274453][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 113.289381][ T4292] playstation 0003:054C:0DF2.0003: Invalid gyro calibration data for axis (5), disabling calibration. [ 113.303112][ T4292] playstation 0003:054C:0DF2.0003: Invalid accelerometer calibration data for axis (0), disabling calibration. [ 113.344747][ T4292] playstation 0003:054C:0DF2.0003: Invalid accelerometer calibration data for axis (1), disabling calibration. [ 113.375401][ T4292] playstation 0003:054C:0DF2.0003: Invalid accelerometer calibration data for axis (2), disabling calibration. [ 113.398769][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 113.426771][ T4292] input: HID 054c:0df2 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:054C:0DF2.0003/input/input7 [ 113.441831][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 113.458594][ T5454] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 113.471587][ T5454] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 113.485960][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 113.495572][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 113.511397][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 113.530901][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 113.544695][ T5662] loop2: detected capacity change from 0 to 40427 [ 113.553528][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 113.596574][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 113.613309][ T4292] input: HID 054c:0df2 Motion Sensors as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:054C:0DF2.0003/input/input8 [ 113.671168][ T5662] F2FS-fs (loop2): build fault injection attr: rate: 771, type: 0x1ffff [ 113.686368][ T4292] input: HID 054c:0df2 Touchpad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:054C:0DF2.0003/input/input9 [ 113.724149][ T5662] F2FS-fs (loop2): invalid crc value [ 113.776423][ T5662] F2FS-fs (loop2): Found nat_bits in checkpoint [ 113.811568][ T4292] playstation 0003:054C:0DF2.0003: Registered DualSense controller hw_version=0x00000000 fw_version=0x00000000 [ 113.877704][ T4292] usb 6-1: USB disconnect, device number 3 [ 114.091848][ T5662] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 114.198218][ T5454] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 114.234069][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 114.257123][ T5707] fido_id[5707]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/report_descriptor': No such file or directory [ 114.273602][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 114.416772][ T5722] netlink: 'syz.5.323': attribute type 1 has an invalid length. [ 114.459987][ T5722] netlink: 'syz.5.323': attribute type 2 has an invalid length. [ 114.498201][ T4186] attempt to access beyond end of device [ 114.498201][ T4186] loop2: rw=2049, want=45112, limit=40427 [ 114.514399][ T5722] netlink: 8 bytes leftover after parsing attributes in process `syz.5.323'. [ 114.974886][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 114.994052][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 115.101626][ T5746] syz.4.330 sent an empty control message without MSG_MORE. [ 115.128241][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 115.159700][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 115.225167][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 115.258453][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 115.298012][ T5454] device veth0_vlan entered promiscuous mode [ 115.343721][ T5758] loop2: detected capacity change from 0 to 16 [ 115.383326][ T5454] device veth1_vlan entered promiscuous mode [ 115.394444][ T5758] erofs: (device loop2): mounted with root inode @ nid 36. [ 115.451159][ T5758] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 115.544388][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 115.564646][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 115.593612][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 115.625386][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 115.640549][ T5454] device veth0_macvtap entered promiscuous mode [ 115.744994][ T5454] device veth1_macvtap entered promiscuous mode [ 115.823135][ T5454] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 115.833736][ C1] net_ratelimit: 47 callbacks suppressed [ 115.879064][ T4713] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 115.899164][ T5454] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.929053][ T5454] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 115.967434][ T5454] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.992776][ T5454] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 116.009745][ T5786] loop2: detected capacity change from 0 to 4096 [ 116.031249][ T5454] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.053037][ T5454] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 116.072531][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 116.129691][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 116.171044][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 116.187721][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 116.227710][ T5454] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 116.253851][ T5454] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.266884][ T4713] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 116.273486][ T5454] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 116.277114][ T4713] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 116.293113][ T5454] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.315093][ T5454] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 116.330421][ T5454] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.333283][ T4713] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 116.351645][ T5454] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 116.366804][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 116.379483][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 116.391633][ T5371] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 116.411344][ T5454] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.419601][ T4713] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 116.438413][ T5454] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.465747][ T5454] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.474500][ T4713] usb 6-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 116.486432][ T5454] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.509265][ T4713] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.720449][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.728656][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.769467][ T5371] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 116.799480][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 116.807941][ T5371] usb 5-1: New USB device found, idVendor=8087, idProduct=0025, bcdDevice= 0.01 [ 116.845744][ T5371] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.929367][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.937219][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.972483][ T4711] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 117.184263][ T5227] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 117.210515][ T5371] usb 5-1: USB disconnect, device number 7 [ 117.314975][ T5825] netlink: 28 bytes leftover after parsing attributes in process `syz.2.349'. [ 117.328226][ T5825] netlink: 28 bytes leftover after parsing attributes in process `syz.2.349'. [ 117.403504][ T5834] loop6: detected capacity change from 0 to 736 [ 117.489242][ T5227] usb 1-1: Using ep0 maxpacket: 16 [ 117.620498][ T5227] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 117.641827][ T5227] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 117.686819][ T4713] [drm] Initialized gud 1.0.0 20200422 for 6-1:1.0 on minor 2 [ 117.759480][ T5227] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 117.770097][ T5227] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 117.778610][ T5227] usb 1-1: SerialNumber: syz [ 117.827274][ T5849] Illegal XDP return value 1814769901, expect packet loss! [ 117.862240][ T5227] usb 1-1: 0:2 : does not exist [ 118.020548][ T4713] gud 6-1:1.0: [drm] fb1: guddrmfb frame buffer device [ 118.079475][ T4713] usb 6-1: USB disconnect, device number 4 [ 118.126870][ T5852] loop2: detected capacity change from 0 to 4096 [ 118.433652][ T5872] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 118.492267][ T5876] loop5: detected capacity change from 0 to 128 [ 118.593064][ T5876] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 118.637470][ T5876] ext4 filesystem being mounted at /42/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 118.758738][ T5227] usb 1-1: USB disconnect, device number 4 [ 119.381732][ T5895] netlink: 16 bytes leftover after parsing attributes in process `syz.0.365'. [ 119.573114][ T5900] capability: warning: `syz.2.363' uses 32-bit capabilities (legacy support in use) [ 119.647861][ T5862] loop4: detected capacity change from 0 to 65536 [ 119.796231][ T5918] loop5: detected capacity change from 0 to 16 [ 119.830135][ T5918] erofs: (device loop5): mounted with root inode @ nid 36. [ 119.867555][ T5862] XFS (loop4): Mounting V5 Filesystem [ 120.149093][ T5862] XFS (loop4): Ending clean mount [ 120.155952][ T5885] loop6: detected capacity change from 0 to 40427 [ 120.200934][ T5885] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12 [ 120.208135][ T5862] XFS (loop4): Quotacheck needed: Please wait. [ 120.232293][ T5885] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 120.309083][ T4713] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 120.333523][ T5885] F2FS-fs (loop6): Found nat_bits in checkpoint [ 120.348771][ T5862] XFS (loop4): Quotacheck: Done. [ 120.498671][ T5885] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 120.519320][ T5885] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 120.559030][ T4713] usb 3-1: Using ep0 maxpacket: 32 [ 120.636369][ T4198] XFS (loop4): Unmounting Filesystem [ 120.679272][ T4713] usb 3-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 120.695600][ T4713] usb 3-1: config 0 interface 0 has no altsetting 0 [ 120.713171][ T4713] usb 3-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 120.737233][ T4713] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.756518][ T5885] F2FS-fs (loop6): invalid namelen(0), ino:0, run fsck to fix. [ 120.756567][ T5885] F2FS-fs (loop6): invalid namelen(0), ino:0, run fsck to fix. [ 120.822811][ T4713] usb 3-1: config 0 descriptor?? [ 120.836732][ T5885] F2FS-fs (loop6): invalid namelen(0), ino:0, run fsck to fix. [ 120.836756][ T5885] F2FS-fs (loop6): invalid namelen(0), ino:0, run fsck to fix. [ 120.890847][ T5885] F2FS-fs (loop6): invalid namelen(0), ino:0, run fsck to fix. [ 120.890869][ T5885] F2FS-fs (loop6): invalid namelen(0), ino:0, run fsck to fix. [ 120.920225][ T5885] F2FS-fs (loop6): invalid namelen(0), ino:0, run fsck to fix. [ 120.987120][ T5454] F2FS-fs (loop6): invalid namelen(0), ino:0, run fsck to fix. [ 120.987137][ T5454] F2FS-fs (loop6): invalid namelen(0), ino:0, run fsck to fix. [ 121.028999][ C1] net_ratelimit: 96 callbacks suppressed [ 121.040526][ T5454] F2FS-fs (loop6): invalid namelen(0), ino:0, run fsck to fix. [ 121.770192][ T5966] udc-core: couldn't find an available UDC or it's busy [ 121.777173][ T5966] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 121.875604][ T5966] udc-core: couldn't find an available UDC or it's busy [ 121.916284][ T5966] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 121.974874][ T4713] corsair-cpro 0003:1B1C:0C10.0004: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.2-1/input0 [ 122.089603][ T5370] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 122.175140][ T5957] loop0: detected capacity change from 0 to 32768 [ 122.210946][ T4713] corsair-cpro: probe of 0003:1B1C:0C10.0004 failed with error -71 [ 122.315146][ T5957] XFS (loop0): Mounting V5 Filesystem [ 122.342390][ T5370] usb 6-1: Using ep0 maxpacket: 16 [ 122.437953][ T4713] usb 3-1: USB disconnect, device number 5 [ 122.469368][ T5370] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 122.489207][ T4292] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 122.489247][ T5370] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 122.498716][ T5957] XFS (loop0): Ending clean mount [ 122.520348][ T5370] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 122.555450][ T5370] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 122.581231][ T5370] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.590545][ T5984] fido_id[5984]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 122.601160][ T5957] XFS (loop0): Quotacheck needed: Please wait. [ 122.617444][ T5370] usb 6-1: config 0 descriptor?? [ 122.721749][ T5957] XFS (loop0): Quotacheck: Done. [ 122.739421][ T4292] usb 5-1: Using ep0 maxpacket: 32 [ 122.859424][ T4292] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 122.905792][ T4292] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 122.926624][ T4292] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 122.979242][ T4292] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.026583][ T4184] XFS (loop0): Unmounting Filesystem [ 123.041383][ T4292] usb 5-1: config 0 descriptor?? [ 123.125068][ T5370] input: HID 045e:07da as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:045E:07DA.0005/input/input10 [ 123.141136][ T4292] hub 5-1:0.0: USB hub found [ 123.187648][ T5370] microsoft 0003:045E:07DA.0005: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0 [ 123.369441][ T4292] hub 5-1:0.0: 1 port detected [ 123.542844][ T5227] usb 6-1: USB disconnect, device number 5 [ 123.778015][ T6014] af_packet: packet size is too long (65554 > 2016) [ 124.033521][ T6028] loop0: detected capacity change from 0 to 512 [ 124.097504][ T6028] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 124.162504][ T6028] System zones: 1-12 [ 124.180128][ T4292] hub 5-1:0.0: activate --> -90 [ 124.191505][ T6028] EXT4-fs error (device loop0): ext4_xattr_inode_iget:401: inode #12: comm syz.0.390: missing EA_INODE flag [ 124.208252][ T6028] EXT4-fs error (device loop0): ext4_xattr_inode_iget:406: comm syz.0.390: error while reading EA inode 12 err=-117 [ 124.230614][ T6028] EXT4-fs (loop0): 1 orphan inode deleted [ 124.236392][ T6028] EXT4-fs (loop0): mounted filesystem without journal. Opts: debug,resuid=0x000000000000ee01,,errors=continue. Quota mode: writeback. [ 124.284148][ T6028] syz.0.390 (pid 6028) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 124.319163][ T6028] fscrypt: key with description 'fscrypt:e8dab99234bb312e' has invalid payload [ 124.360597][ T6028] fscrypt: key with description 'fscrypt:e8dab99234bb312e' has invalid payload [ 124.558151][ T6049] rxe_eth0 speed is unknown, defaulting to 1000 [ 124.626520][ T4713] usb 5-1: USB disconnect, device number 8 [ 124.752154][ T5370] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 125.013271][ T5370] usb 6-1: Using ep0 maxpacket: 8 [ 125.299338][ T5370] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 125.319431][ T5370] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.327904][ T5370] usb 6-1: Product: syz [ 125.409764][ T5370] usb 6-1: Manufacturer: syz [ 125.414376][ T5370] usb 6-1: SerialNumber: syz [ 125.444012][ T6079] netlink: 'syz.4.401': attribute type 4 has an invalid length. [ 125.469447][ T5370] usb 6-1: config 0 descriptor?? [ 125.541794][ T6082] loop6: detected capacity change from 0 to 256 [ 125.742557][ T5370] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 126.069026][ C1] net_ratelimit: 50 callbacks suppressed [ 126.079186][ T5216] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 126.089649][ T5370] dvb_usb_rtl28xxu: probe of 6-1:0.0 failed with error -71 [ 126.118687][ T5370] usb 6-1: USB disconnect, device number 6 [ 126.359170][ T5216] usb 3-1: Using ep0 maxpacket: 16 [ 126.504105][ T5216] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 126.532886][ T5216] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 126.569001][ T5216] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 126.634258][ T5216] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 126.669662][ T5216] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.697453][ T5216] usb 3-1: config 0 descriptor?? [ 127.188500][ T5216] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0006/input/input11 [ 127.248718][ T5216] microsoft 0003:045E:07DA.0006: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 127.486477][ T5216] usb 3-1: USB disconnect, device number 6 [ 127.505102][ T4202] udevd[4202]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory [ 128.274103][ T6125] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 128.330217][ T6125] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 128.353925][ T6125] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 128.398735][ T6125] device bridge_slave_0 left promiscuous mode [ 128.411906][ T6132] loop2: detected capacity change from 0 to 512 [ 128.423117][ T6125] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.445651][ T6125] device bridge_slave_1 left promiscuous mode [ 128.453717][ T6125] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.480525][ T6125] bond0: (slave bond_slave_0): Releasing backup interface [ 128.507698][ T6132] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 128.529219][ T6125] bond0: (slave bond_slave_1): Releasing backup interface [ 128.544324][ T6132] ext4 filesystem being mounted at /102/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 128.634701][ T6116] loop6: detected capacity change from 0 to 32768 [ 128.657825][ T6125] team0: Port device team_slave_0 removed [ 128.681712][ T6125] team0: Port device team_slave_1 removed [ 128.727809][ T6125] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 128.773566][ T6116] XFS (loop6): Mounting V5 Filesystem [ 128.816199][ T6125] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 128.855736][ T6125] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 128.896706][ T6125] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 128.926516][ T6116] XFS (loop6): Ending clean mount [ 128.953880][ T6116] XFS (loop6): Quotacheck needed: Please wait. [ 128.966001][ T6129] bridge0: port 2(bridge_slave_1) entered blocking state [ 128.973446][ T6129] bridge0: port 2(bridge_slave_1) entered listening state [ 128.980888][ T6129] bridge0: port 1(bridge_slave_0) entered blocking state [ 128.987975][ T6129] bridge0: port 1(bridge_slave_0) entered listening state [ 129.020762][ T6129] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 129.201524][ T6116] XFS (loop6): Quotacheck: Done. [ 129.366801][ T6154] netlink: 'syz.0.418': attribute type 1 has an invalid length. [ 129.393757][ T6150] loop4: detected capacity change from 0 to 32768 [ 129.413148][ T6154] netlink: 'syz.0.418': attribute type 4 has an invalid length. [ 129.432149][ T6154] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.418'. [ 129.480372][ T5454] XFS (loop6): Unmounting Filesystem [ 129.482826][ T6150] loop4: p1 p3 < > [ 129.515158][ T6152] loop2: detected capacity change from 0 to 8192 [ 129.601641][ T6158] loop5: detected capacity change from 0 to 7 [ 129.636287][ T6158] loop5: p1 < > p3 p4 [ 129.640903][ T6158] loop5: partition table partially beyond EOD, truncated [ 129.646170][ T6152] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 129.658028][ T6158] loop5: p1 start 168 is beyond EOD, truncated [ 129.689980][ T6152] REISERFS (device loop2): using ordered data mode [ 129.695298][ T6158] loop5: p3 size 3645588866 extends beyond EOD, [ 129.696526][ T6152] reiserfs: using flush barriers [ 129.704286][ T6152] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 129.736529][ T6152] REISERFS (device loop2): checking transaction log (loop2) [ 129.813871][ T6158] truncated [ 129.841841][ T6158] loop5: p4 start 33554432 is beyond EOD, truncated [ 129.860749][ T6152] REISERFS (device loop2): Using tea hash to sort names [ 129.873135][ T6152] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 130.029340][ T5227] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 130.309365][ T5227] usb 5-1: Using ep0 maxpacket: 16 [ 130.321366][ T4174] udevd[4174]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 130.340086][ T4202] udevd[4202]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 130.449649][ T5227] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 130.476849][ T5227] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 130.519608][ T5227] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 130.569469][ T5227] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 130.588526][ T5227] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.612703][ T5227] usb 5-1: config 0 descriptor?? [ 130.672765][ T6188] overlayfs: failed to set xattr on upper [ 130.680737][ T6188] overlayfs: ...falling back to index=off,metacopy=off. [ 130.688421][ T6188] overlayfs: NFS export requires "index=on", falling back to nfs_export=off. [ 131.115111][ T6204] net_ratelimit: 63 callbacks suppressed [ 131.133116][ T5227] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.0007/input/input12 [ 131.163116][ T5227] microsoft 0003:045E:07DA.0007: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 131.307734][ T6213] loop6: detected capacity change from 0 to 128 [ 131.316753][ T6214] ip_tables: iptables: counters copy to user failed while replacing table [ 131.408111][ T6217] TCP: tcp_parse_options: Illegal window scaling value 132 > 14 received [ 131.419494][ T6213] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 131.440653][ T6213] ext4 filesystem being mounted at /22/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 131.453408][ T4713] usb 5-1: USB disconnect, device number 9 [ 131.461241][ T6219] loop0: detected capacity change from 0 to 512 [ 131.552672][ T6219] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 131.595569][ T6219] ext4 filesystem being mounted at /93/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 131.706917][ T6227] netlink: 12 bytes leftover after parsing attributes in process `syz.6.443'. [ 131.812056][ T6231] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 132.034291][ T6237] netlink: 16 bytes leftover after parsing attributes in process `syz.4.448'. [ 132.461911][ T6259] loop5: detected capacity change from 0 to 8192 [ 132.502208][ T6259] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 132.617770][ C1] Unknown status report in ack skb [ 132.637191][ T6268] loop6: detected capacity change from 0 to 512 [ 132.672525][ T6265] APIC base relocation is unsupported by KVM [ 132.693142][ T6265] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=3873901568 (7747803136 ns) > initial count (12 ns). Using initial count to start timer. [ 132.802991][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.811664][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.924421][ T6268] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 132.948419][ T6268] ext4 filesystem being mounted at /28/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 133.032166][ T6284] loop2: detected capacity change from 0 to 16 [ 133.054209][ T6284] erofs: (device loop2): mounted with root inode @ nid 36. [ 133.354668][ T6297] tipc: Started in network mode [ 133.375103][ T6297] tipc: Node identity 2000004, cluster identity 4711 [ 133.408196][ T6297] tipc: Node number set to 33554436 [ 133.436137][ T6300] FAT-fs (loop2): Invalid FSINFO signature: 0x41613352, 0x61417272 (sector = 1) [ 133.479559][ T5370] hid (null): global environment stack underflow [ 133.487837][ T5370] hid (null): global environment stack underflow [ 133.509695][ T5370] hid-generic 0000:0000:0000.0008: global environment stack underflow [ 133.525161][ T5370] hid-generic 0000:0000:0000.0008: item 0 2 1 11 parsing failed [ 133.533710][ T5370] hid-generic: probe of 0000:0000:0000.0008 failed with error -22 [ 133.827249][ T6305] set_capacity_and_notify: 1 callbacks suppressed [ 133.827259][ T6305] loop6: detected capacity change from 0 to 32768 [ 133.869107][ T4292] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 133.900272][ T6305] JBD2: Ignoring recovery information on journal [ 133.958227][ T6305] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 134.022408][ T6305] syz.6.471 (6305) used greatest stack depth: 18528 bytes left [ 134.054986][ T5454] ocfs2: Unmounting device (7,6) on (node local) [ 134.134803][ T4292] usb 5-1: Using ep0 maxpacket: 16 [ 134.289479][ T4292] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 134.301656][ T4292] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 134.315252][ T4292] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 134.328363][ T4292] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 134.338796][ T4292] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.356406][ T4292] usb 5-1: config 0 descriptor?? [ 134.548672][ T6328] loop5: detected capacity change from 0 to 512 [ 134.592093][ T6324] kvm: emulating exchange as write [ 134.731451][ T6328] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 134.751923][ T6328] ext4 filesystem being mounted at /71/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 134.858098][ T4292] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.0009/input/input13 [ 134.892596][ T4292] microsoft 0003:045E:07DA.0009: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 135.164911][ T4713] usb 5-1: USB disconnect, device number 10 [ 135.278777][ T6353] loop6: detected capacity change from 0 to 256 [ 135.392249][ T6353] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000001) [ 135.453041][ T6353] FAT-fs (loop6): Filesystem has been set read-only [ 135.662933][ T6370] netlink: 'syz.6.488': attribute type 4 has an invalid length. [ 135.739875][ T6374] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 135.788012][ T6374] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 135.965595][ T5370] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 136.003035][ T6381] FAULT_INJECTION: forcing a failure. [ 136.003035][ T6381] name failslab, interval 1, probability 0, space 0, times 0 [ 136.047563][ T6381] CPU: 0 PID: 6381 Comm: syz.4.491 Not tainted syzkaller #0 [ 136.054902][ T6381] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 136.064978][ T6381] Call Trace: [ 136.068441][ T6381] [ 136.071390][ T6381] dump_stack_lvl+0x188/0x250 [ 136.076087][ T6381] ? show_regs_print_info+0x20/0x20 [ 136.081303][ T6381] ? load_image+0x410/0x410 [ 136.085827][ T6381] ? __might_sleep+0xf0/0xf0 [ 136.090442][ T6381] ? __lock_acquire+0x7d40/0x7d40 [ 136.095484][ T6381] should_fail+0x383/0x4b0 [ 136.099929][ T6381] should_failslab+0x5/0x20 [ 136.104452][ T6381] slab_pre_alloc_hook+0x51/0xc0 [ 136.109405][ T6381] ? op_alloc+0x26/0x4f0 [ 136.113669][ T6381] kmem_cache_alloc+0x3d/0x280 [ 136.118548][ T6381] ? rcu_lock_release+0x20/0x20 [ 136.123415][ T6381] op_alloc+0x26/0x4f0 [ 136.127543][ T6381] orangefs_mount+0xdc/0xed0 [ 136.132156][ T6381] ? aa_get_newest_label+0xf5/0x5a0 [ 136.132193][ T6381] ? fsid_key_table_finalize+0x10/0x10 [ 136.132227][ T6381] legacy_get_tree+0xe6/0x180 [ 136.132244][ T6381] ? fsid_key_table_finalize+0x10/0x10 [ 136.143522][ T6381] vfs_get_tree+0x88/0x270 [ 136.153973][ T6381] vfs_fsconfig_locked+0x22f/0x400 [ 136.154001][ T6381] __se_sys_fsconfig+0x69e/0x7e0 [ 136.154023][ T6381] ? __x64_sys_fsconfig+0xc0/0xc0 [ 136.154049][ T6381] ? lockdep_hardirqs_on+0x94/0x140 [ 136.154069][ T6381] ? __x64_sys_fsconfig+0x1c/0xc0 [ 136.154087][ T6381] do_syscall_64+0x4c/0xa0 [ 136.154103][ T6381] ? clear_bhb_loop+0x30/0x80 [ 136.189043][ C1] net_ratelimit: 57 callbacks suppressed [ 136.193512][ T6381] ? clear_bhb_loop+0x30/0x80 [ 136.193542][ T6381] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 136.209725][ T6381] RIP: 0033:0x7fc8d9965559 [ 136.214161][ T6381] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 136.233866][ T6381] RSP: 002b:00007fc8d7bbd028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 136.233894][ T6381] RAX: ffffffffffffffda RBX: 00007fc8d9becfa0 RCX: 00007fc8d9965559 [ 136.233906][ T6381] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000003 [ 136.233917][ T6381] RBP: 00007fc8d99fc8b0 R08: 0000000000000000 R09: 0000000000000000 [ 136.233927][ T6381] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 136.233937][ T6381] R13: 00007fc8d9bed038 R14: 00007fc8d9becfa0 R15: 00007ffc860a02a8 [ 136.233965][ T6381] [ 136.331504][ T6381] op_alloc: kmem_cache_zalloc failed! [ 136.350135][ T5370] usb 6-1: Using ep0 maxpacket: 32 [ 136.473163][ T5370] usb 6-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 136.509149][ T5370] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.535912][ T5370] usb 6-1: config 0 descriptor?? [ 136.611568][ T5370] gspca_main: sunplus-2.14.0 probing 041e:400b [ 136.730114][ T6405] loop0: detected capacity change from 0 to 256 [ 136.750221][ T6366] loop2: detected capacity change from 0 to 40427 [ 136.882132][ T6366] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 136.908266][ T6366] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 136.994427][ T6413] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 137.004768][ T6366] F2FS-fs (loop2): Found nat_bits in checkpoint [ 137.210529][ T6366] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 137.217768][ T6366] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 137.245383][ T6429] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 137.302683][ T6429] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 137.368291][ C1] Unknown status report in ack skb [ 137.479612][ T5370] gspca_sunplus: reg_w_riv err -71 [ 137.485142][ T5370] sunplus: probe of 6-1:0.0 failed with error -71 [ 137.538172][ T5370] usb 6-1: USB disconnect, device number 7 [ 137.622985][ T6366] f2fs_fill_dentries: 4 callbacks suppressed [ 137.622999][ T6366] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix. [ 137.634011][ T6366] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix. [ 137.654392][ T6366] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix. [ 137.654416][ T6366] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix. [ 137.670513][ T6366] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix. [ 137.672778][ T6366] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix. [ 137.694301][ T6366] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix. [ 137.694701][ T6449] loop4: detected capacity change from 0 to 2048 [ 137.777745][ T6449] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 137.811135][ T4186] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix. [ 137.811152][ T4186] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix. [ 137.848808][ T4186] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix. [ 137.861215][ T6449] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 137.901858][ T6449] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 138.559294][ T5227] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 138.858510][ T6496] loop2: detected capacity change from 0 to 1024 [ 138.979305][ T5227] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 138.991283][ T6496] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsv0,max_dir_size_kb=0x0000000000000004,jqfmt=vfsv1,delalloc,dioread_lock,init_itable,errors=remount-ro,. Quota mode: none. [ 138.999248][ T5227] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 139.020351][ T5227] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 139.033903][ T5227] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 139.043455][ T5227] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.063831][ T5227] usb 7-1: config 0 descriptor?? [ 139.102898][ T6499] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 139.116803][ T6506] VIDIOC_TRY_EXT_CTRLS: error -25: which=0x980000, count=8, error_idx=4, request_fd=3, name=Strobe, id/size=0x9c0903/2, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0 [ 139.134260][ T6496] ext4 filesystem being mounted at /119/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 139.173568][ T6499] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 139.185238][ T6499] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 139.255269][ T6491] loop5: detected capacity change from 0 to 40427 [ 139.285356][ T6499] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 139.308292][ T6496] EXT4-fs error (device loop2): ext4_map_blocks:741: inode #15: block 3: comm syz.2.521: lblock 3 mapped to illegal pblock 3 (length 3) [ 139.343061][ T6512] FAULT_INJECTION: forcing a failure. [ 139.343061][ T6512] name failslab, interval 1, probability 0, space 0, times 0 [ 139.364969][ T6496] EXT4-fs (loop2): Remounting filesystem read-only [ 139.374066][ T6512] CPU: 1 PID: 6512 Comm: syz.0.524 Not tainted syzkaller #0 [ 139.381644][ T6512] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 139.392189][ T6512] Call Trace: [ 139.392286][ T6512] [ 139.392297][ T6512] dump_stack_lvl+0x188/0x250 [ 139.392325][ T6512] ? show_regs_print_info+0x20/0x20 [ 139.392349][ T6512] ? load_image+0x410/0x410 [ 139.399081][ T6512] ? __lock_acquire+0x7d40/0x7d40 [ 139.399114][ T6512] should_fail+0x383/0x4b0 [ 139.413558][ T6512] should_failslab+0x5/0x20 [ 139.427667][ T6512] slab_pre_alloc_hook+0x51/0xc0 [ 139.432641][ T6512] __kmalloc+0x6b/0x340 [ 139.436921][ T6512] ? apply_wqattrs_prepare+0xb3/0xad0 [ 139.439696][ T6491] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 139.442471][ T6512] apply_wqattrs_prepare+0xb3/0xad0 [ 139.455531][ T6512] ? mutex_lock_io_nested+0x60/0x60 [ 139.460851][ T6512] apply_workqueue_attrs+0xd0/0x170 [ 139.466093][ T6512] alloc_workqueue+0xf1e/0x1450 [ 139.470971][ T6512] ? vsnprintf+0x1b22/0x1c20 [ 139.472824][ T6491] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 139.475858][ T6512] ? snprintf+0xe5/0x140 [ 139.488264][ T6512] ? apply_workqueue_attrs+0x170/0x170 [ 139.493842][ T6512] nci_register_device+0x3fc/0x9f0 [ 139.498983][ T6512] ? nci_free_device+0x90/0x90 [ 139.503766][ T6512] ? nci_hci_allocate+0x1dd/0x2a0 [ 139.508809][ T6512] ? nci_allocate_device+0x241/0x350 [ 139.508839][ T6512] virtual_ncidev_open+0x55/0xc0 [ 139.519055][ T6512] ? virtual_ncidev_ioctl+0x90/0x90 [ 139.524416][ T6512] misc_open+0x31f/0x390 [ 139.528677][ T6512] chrdev_open+0x585/0x5f0 [ 139.533125][ T6512] ? cd_forget+0x160/0x160 [ 139.533155][ T6512] ? fsnotify_perm+0x3a7/0x560 [ 139.533175][ T6512] ? cd_forget+0x160/0x160 [ 139.533193][ T6512] do_dentry_open+0x7f7/0xf90 [ 139.533213][ T6512] ? vfs_open+0x2b/0x80 [ 139.533274][ T6512] path_openat+0x2718/0x2fb0 [ 139.533318][ T6512] ? __kasan_slab_alloc+0xa9/0xc0 [ 139.533347][ T6512] ? do_filp_open+0x400/0x400 [ 139.533383][ T6512] do_filp_open+0x1df/0x400 [ 139.533406][ T6512] ? vfs_tmpfile+0x300/0x300 [ 139.533445][ T6512] ? _raw_spin_unlock+0x24/0x40 [ 139.533463][ T6512] ? alloc_fd+0x59e/0x650 [ 139.533486][ T6512] do_sys_openat2+0x14b/0x500 [ 139.533502][ T6512] ? __lock_acquire+0x7d40/0x7d40 [ 139.533521][ T6512] ? do_sys_open+0xe0/0xe0 [ 139.533539][ T6512] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 139.533564][ T6512] ? lock_chain_count+0x20/0x20 [ 139.533589][ T6512] __x64_sys_openat+0x135/0x160 [ 139.533611][ T6512] do_syscall_64+0x4c/0xa0 [ 139.533627][ T6512] ? clear_bhb_loop+0x30/0x80 [ 139.566456][ T6512] ? clear_bhb_loop+0x30/0x80 [ 139.566488][ T6512] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 139.566510][ T6512] RIP: 0033:0x7f37311c5559 [ 139.576083][ T6512] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 139.585510][ T6512] RSP: 002b:00007f372f41d028 EFLAGS: 00000246 [ 139.594504][ T6512] ORIG_RAX: 0000000000000101 [ 139.594516][ T6512] RAX: ffffffffffffffda RBX: 00007f373144cfa0 RCX: 00007f37311c5559 [ 139.594531][ T6512] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 139.594541][ T6512] RBP: 00007f373125c8b0 R08: 0000000000000000 R09: 0000000000000000 [ 139.604365][ T6512] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 139.604401][ T6512] R13: 00007f373144d038 R14: 00007f373144cfa0 R15: 00007fff0b2e89e8 [ 139.604431][ T6512] [ 139.736198][ T5227] plantronics 0003:047F:FFFF.000A: No inputs registered, leaving [ 139.749134][ T6504] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 139.777496][ T6496] EXT4-fs error (device loop2): ext4_map_blocks:631: inode #15: block 3: comm syz.2.521: lblock 3 mapped to illegal pblock 3 (length 1) [ 139.795222][ T6504] EXT4-fs (loop2): Remounting filesystem read-only [ 139.806192][ T6491] F2FS-fs (loop5): Found nat_bits in checkpoint [ 139.872062][ T6496] EXT4-fs (loop2): Remounting filesystem read-only [ 139.878890][ T6496] EXT4-fs error (device loop2): ext4_map_blocks:631: inode #15: block 3: comm syz.2.521: lblock 3 mapped to illegal pblock 3 (length 1) [ 139.922283][ T6496] EXT4-fs (loop2): Remounting filesystem read-only [ 139.944753][ T6496] EXT4-fs error (device loop2): ext4_map_blocks:631: inode #15: block 3: comm syz.2.521: lblock 3 mapped to illegal pblock 3 (length 1) [ 139.965045][ T6491] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 139.973535][ T6491] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 139.995970][ T6496] EXT4-fs (loop2): Remounting filesystem read-only [ 140.019223][ T5227] plantronics 0003:047F:FFFF.000A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 140.260062][ T6533] loop2: detected capacity change from 0 to 512 [ 140.388236][ T6533] EXT4-fs error (device loop2): dx_probe:823: inode #2: comm syz.2.526: Directory hole found for htree index block 0 [ 140.464885][ T6533] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 140.500668][ T6533] EXT4-fs (loop2): mounted filesystem without journal. Opts: dioread_lock,noblock_validity,auto_da_alloc=0x0000000000000009,jqfmt=vfsold,nolazytime,grpjquota=.journal_async_commit,resuid=0x0000000000000000,barrier=0x0000000000000000,grpid,,,errors=continue. Quota mode: writeback. [ 140.595208][ T6542] loop0: detected capacity change from 0 to 8192 [ 140.604596][ T6533] EXT4-fs error (device loop2): dx_probe:823: inode #2: comm syz.2.526: Directory hole found for htree index block 0 [ 140.655635][ T6542] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 140.666495][ T6542] REISERFS (device loop0): using ordered data mode [ 140.673505][ T6542] reiserfs: using flush barriers [ 140.679975][ T6542] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 140.698054][ T6542] REISERFS (device loop0): checking transaction log (loop0) [ 140.759907][ T5218] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 140.827509][ T5227] usb 7-1: USB disconnect, device number 2 [ 140.887079][ T6542] REISERFS (device loop0): Using tea hash to sort names [ 140.924291][ T6542] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 141.079169][ T5218] usb 5-1: Using ep0 maxpacket: 16 [ 141.236130][ T5218] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 141.274362][ T5218] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 141.283512][ C0] net_ratelimit: 55 callbacks suppressed [ 141.409611][ T5218] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 141.438933][ T5218] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 141.478344][ T5218] usb 5-1: SerialNumber: syz [ 141.562669][ T5218] usb 5-1: 0:2 : does not exist [ 141.659607][ T1111] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 141.939211][ T1111] usb 6-1: Using ep0 maxpacket: 32 [ 142.059472][ T1111] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 142.101463][ T1111] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 142.125557][ T6573] loop2: detected capacity change from 0 to 65536 [ 142.151973][ T6584] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 142.159817][ T1111] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 142.209217][ T1111] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.223534][ T1111] usb 6-1: config 0 descriptor?? [ 142.263361][ T6584] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 142.274121][ T6573] XFS (loop2): Mounting V5 Filesystem [ 142.286508][ T6584] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 142.300663][ T6584] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 142.311945][ T6584] device bridge_slave_0 left promiscuous mode [ 142.319104][ T6584] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.329140][ T1111] hub 6-1:0.0: USB hub found [ 142.353889][ T6584] device bridge_slave_1 left promiscuous mode [ 142.369245][ T6584] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.404664][ T6584] bond0: (slave bond_slave_0): Releasing backup interface [ 142.412486][ T6573] XFS (loop2): Ending clean mount [ 142.471986][ T6584] bond0: (slave bond_slave_1): Releasing backup interface [ 142.539369][ T1111] hub 6-1:0.0: 1 port detected [ 142.571635][ T5218] usb 5-1: USB disconnect, device number 11 [ 142.615166][ T4186] XFS (loop2): Unmounting Filesystem [ 142.704925][ T6584] team0: Port device team_slave_0 removed [ 142.737581][ T6584] team0: Port device team_slave_1 removed [ 142.745381][ T6584] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 142.753083][ T6584] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 142.762666][ T6584] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 142.772161][ T6584] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 142.785743][ T6584] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 142.877210][ T6604] loop0: detected capacity change from 0 to 1024 [ 142.972685][ T6604] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (7780!=20869) [ 143.039979][ T6604] EXT4-fs (loop0): can't mount with journal_async_commit, fs mounted w/o journal [ 143.269325][ T1111] hub 6-1:0.0: activate --> -90 [ 143.439161][ T5218] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 143.543580][ T6602] loop4: detected capacity change from 0 to 32768 [ 143.661328][ T6602] XFS (loop4): Mounting V5 Filesystem [ 143.695533][ T5370] usb 6-1: USB disconnect, device number 8 [ 143.790903][ T6602] XFS (loop4): Ending clean mount [ 143.849688][ T5218] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 143.879062][ T5218] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 143.888630][ T5218] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.922408][ T5218] usb 7-1: config 0 descriptor?? [ 144.036901][ T4292] XFS (loop4): Metadata CRC error detected at xfs_agfl_read_verify+0x189/0x240, xfs_agfl block 0x3 [ 144.056743][ T4292] XFS (loop4): Unmount and run xfs_repair [ 144.064679][ T4292] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 144.079360][ T4292] 00000000: 58 41 46 4c 00 00 00 00 d7 dc 42 4e 07 00 00 00 XAFL......BN.... [ 144.088272][ T4292] 00000010: 9f 91 9c b7 20 0a 10 1d 00 00 00 00 00 00 00 00 .... ........... [ 144.117312][ T4292] 00000020: e6 0a 0e bb ff ff ff ff 00 00 0b f0 00 00 0b f1 ................ [ 144.130118][ T4292] 00000030: 00 00 0b f2 00 00 0b f3 00 00 0b f4 00 00 0b f5 ................ [ 144.142646][ T4292] 00000040: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 144.174628][ T4292] 00000050: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 144.204742][ T4292] 00000060: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 144.229476][ T4292] 00000070: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 144.238537][ T6602] XFS (loop4): metadata I/O error in "xfs_alloc_read_agfl+0x1dc/0x390" at daddr 0x3 len 1 error 74 [ 144.288462][ T6623] loop0: detected capacity change from 0 to 40427 [ 144.299300][ T5218] usbhid 7-1:0.0: can't add hid device: -71 [ 144.305648][ T5218] usbhid: probe of 7-1:0.0 failed with error -71 [ 144.336916][ T6602] XFS (loop4): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x515/0x8b0 (fs/xfs/xfs_trans_buf.c:296). Shutting down filesystem. [ 144.362109][ T5218] usb 7-1: USB disconnect, device number 3 [ 144.392351][ T6623] F2FS-fs (loop0): Invalid SB checksum offset: 0 [ 144.429155][ T6623] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 144.437603][ T6602] XFS (loop4): Please unmount the filesystem and rectify the problem(s) [ 144.476985][ T6623] F2FS-fs (loop0): invalid crc value [ 144.518926][ T6623] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 144.538083][ T6640] loop5: detected capacity change from 0 to 8192 [ 144.594720][ T6640] REISERFS (device loop5): found reiserfs format "3.6" with non-standard journal [ 144.703306][ T6640] REISERFS (device loop5): using ordered data mode [ 144.714172][ T6640] reiserfs: using flush barriers [ 144.724802][ T4198] XFS (loop4): Unmounting Filesystem [ 144.781956][ T6623] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0 [ 144.823190][ T6640] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 144.841444][ T5218] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 144.849670][ T6623] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 144.928773][ T6640] REISERFS (device loop5): checking transaction log (loop5) [ 145.017949][ T4184] attempt to access beyond end of device [ 145.017949][ T4184] loop0: rw=524288, want=45072, limit=40427 [ 145.056659][ T4184] attempt to access beyond end of device [ 145.056659][ T4184] loop0: rw=0, want=45072, limit=40427 [ 145.132406][ T4796] attempt to access beyond end of device [ 145.132406][ T4796] loop0: rw=2049, want=45120, limit=40427 [ 145.235338][ T6640] REISERFS (device loop5): Using tea hash to sort names [ 145.253323][ T6640] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage. [ 145.283353][ T5218] usb 7-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 145.301195][ T5218] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 256 [ 145.322405][ T5218] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 145.370227][ T6655] loop4: detected capacity change from 0 to 256 [ 145.517884][ T6655] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000001) [ 145.526506][ T5218] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice= 1.00 [ 145.545693][ T5218] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.566044][ T6655] FAT-fs (loop4): Filesystem has been set read-only [ 145.577039][ T5218] usb 7-1: Product: syz [ 145.587923][ T5218] usb 7-1: Manufacturer: syz [ 145.627338][ T5218] usb 7-1: SerialNumber: syz [ 145.791802][ T6658] loop4: detected capacity change from 0 to 128 [ 145.809938][ T4796] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.859340][ T6658] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 145.899181][ T6658] ext4 filesystem being mounted at /109/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 146.061006][ T4796] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.204957][ T4796] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.324373][ T4796] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.389036][ C1] net_ratelimit: 49 callbacks suppressed [ 146.792498][ T6692] loop2: detected capacity change from 0 to 128 [ 146.870927][ T6692] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 146.913683][ T6692] ext4 filesystem being mounted at /133/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 147.092391][ T6701] rxe_eth0 speed is unknown, defaulting to 1000 [ 147.232113][ T5216] usb 7-1: USB disconnect, device number 4 [ 148.019852][ T6738] netlink: 28 bytes leftover after parsing attributes in process `syz.2.577'. [ 148.055310][ T6738] netlink: 28 bytes leftover after parsing attributes in process `syz.2.577'. [ 148.126084][ T6744] netlink: 28 bytes leftover after parsing attributes in process `syz.2.577'. [ 148.144657][ T6744] netlink: 28 bytes leftover after parsing attributes in process `syz.2.577'. [ 148.515215][ T6701] chnl_net:caif_netlink_parms(): no params data found [ 148.806578][ T6772] syz.2.586 uses obsolete (PF_INET,SOCK_PACKET) [ 148.858903][ T4796] device hsr_slave_0 left promiscuous mode [ 148.889436][ T4796] device hsr_slave_1 left promiscuous mode [ 148.896599][ T4796] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 148.911073][ T4796] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 148.939809][ T4796] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 148.947266][ T4796] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 149.000100][ T4796] device bridge_slave_1 left promiscuous mode [ 149.017469][ T4796] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.036664][ T4796] device bridge_slave_0 left promiscuous mode [ 149.047105][ T4796] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.109189][ T4292] Bluetooth: hci0: command 0x0409 tx timeout [ 149.137360][ T4796] device veth1_macvtap left promiscuous mode [ 149.146125][ T4796] device veth0_macvtap left promiscuous mode [ 149.168871][ T4796] device veth1_vlan left promiscuous mode [ 149.224671][ T4796] device veth0_vlan left promiscuous mode [ 150.401544][ T4796] team0 (unregistering): Port device team_slave_1 removed [ 150.448027][ T4796] team0 (unregistering): Port device team_slave_0 removed [ 150.483656][ T4796] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 150.549597][ T4796] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 150.841558][ T4796] bond0 (unregistering): Released all slaves [ 150.878443][ T6822] 9pnet: p9_fd_create_unix (6822): problem connecting socket: ./file0: -5 [ 150.979853][ T6819] netlink: 4 bytes leftover after parsing attributes in process `syz.5.599'. [ 151.061155][ T6701] bridge0: port 1(bridge_slave_0) entered blocking state [ 151.068840][ T6701] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.077593][ T6701] device bridge_slave_0 entered promiscuous mode [ 151.087404][ T6701] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.094980][ T6701] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.103578][ T6701] device bridge_slave_1 entered promiscuous mode [ 151.189210][ T4292] Bluetooth: hci0: command 0x041b tx timeout [ 151.249188][ T6701] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 151.312385][ T6701] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 151.492622][ T6839] net_ratelimit: 54 callbacks suppressed [ 151.529710][ T6701] team0: Port device team_slave_0 added [ 151.581647][ T6701] team0: Port device team_slave_1 added [ 151.727464][ T6701] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 151.738867][ T6701] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 151.883776][ T6701] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 151.942577][ T6701] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 151.972012][ T6701] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 152.061615][ T6825] loop4: detected capacity change from 0 to 32768 [ 152.088746][ T6701] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 152.114237][ T6825] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop4 scanned by syz.4.602 (6825) [ 152.211042][ T6825] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 152.273076][ T6825] BTRFS info (device loop4): using free space tree [ 152.298879][ T6825] BTRFS info (device loop4): has skinny extents [ 152.429147][ T5370] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 152.546690][ T6701] device hsr_slave_0 entered promiscuous mode [ 152.577915][ T6701] device hsr_slave_1 entered promiscuous mode [ 152.649240][ T6701] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 152.672969][ T6701] Cannot create hsr debugfs directory [ 152.694907][ T6825] BTRFS info (device loop4): enabling ssd optimizations [ 152.794864][ T5370] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 152.834403][ T5370] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 152.909060][ T5370] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 152.921933][ T6846] loop6: detected capacity change from 0 to 32768 [ 152.953625][ T5370] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 153.031623][ T5370] usb 3-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 153.059112][ T5370] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.125339][ T6846] XFS (loop6): Mounting V5 Filesystem [ 153.169152][ T5218] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 153.269499][ T4292] Bluetooth: hci0: command 0x040f tx timeout [ 153.304318][ T6846] XFS (loop6): Ending clean mount [ 153.439308][ T5218] usb 6-1: Using ep0 maxpacket: 8 [ 153.599415][ T5218] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 153.619033][ T5218] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 153.639139][ T5218] usb 6-1: New USB device found, idVendor=0d46, idProduct=2011, bcdDevice= 1.00 [ 153.658626][ T5218] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.752416][ T5218] kobil_sct 6-1:1.0: KOBIL USB smart card terminal converter detected [ 153.763076][ T5454] XFS (loop6): Unmounting Filesystem [ 153.840460][ T5218] usb 6-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 154.236799][ T6701] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 154.286604][ T6701] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 154.356014][ T6701] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 154.402970][ T6701] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 154.550685][ T5370] [drm] Initialized gud 1.0.0 20200422 for 3-1:1.0 on minor 2 [ 154.672624][ T5381] usb 6-1: USB disconnect, device number 9 [ 154.705975][ T5381] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 154.724795][ T6701] 8021q: adding VLAN 0 to HW filter on device bond0 [ 154.745138][ T5381] kobil_sct 6-1:1.0: device disconnected [ 154.809331][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 154.832845][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 154.872172][ T6701] 8021q: adding VLAN 0 to HW filter on device team0 [ 154.919199][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 154.945713][ T5370] gud 3-1:1.0: [drm] fb1: guddrmfb frame buffer device [ 154.953988][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 154.987646][ T5370] usb 3-1: USB disconnect, device number 7 [ 155.010595][ T155] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.017925][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 155.100243][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 155.136495][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 155.179363][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 155.220586][ T155] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.227720][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 155.272035][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 155.314741][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 155.352622][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 155.361008][ T5218] Bluetooth: hci0: command 0x0419 tx timeout [ 155.398892][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 155.465790][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 155.512419][ T4711] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 155.545378][ T4711] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 155.589136][ T6944] tipc: Started in network mode [ 155.594303][ T6944] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711 [ 155.655431][ T6944] tipc: Enabled bearer , priority 10 [ 155.694590][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 155.717801][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 155.776166][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 155.816842][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 155.850409][ T6701] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 156.012413][ T6960] bridge0: port 3(vlan1) entered blocking state [ 156.032321][ T6960] bridge0: port 3(vlan1) entered disabled state [ 156.053654][ T6960] device vlan1 entered promiscuous mode [ 156.074774][ T6960] device geneve0 entered promiscuous mode [ 156.412818][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 156.438120][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 156.484098][ T6701] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 156.567142][ T6993] netlink: 4 bytes leftover after parsing attributes in process `syz.5.638'. [ 156.798314][ T5381] tipc: Node number set to 4269801488 [ 157.046619][ T7025] syz.5.647[7025] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 157.046783][ T7025] syz.5.647[7025] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 157.109013][ C1] net_ratelimit: 46 callbacks suppressed [ 157.114902][ T4796] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 157.156405][ T4796] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 157.223653][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 157.264378][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 157.286892][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 157.305744][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 157.334065][ T6701] device veth0_vlan entered promiscuous mode [ 157.386982][ T6701] device veth1_vlan entered promiscuous mode [ 157.514684][ T4711] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 157.544515][ T4711] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 157.587109][ T6701] device veth0_macvtap entered promiscuous mode [ 157.626441][ T6701] device veth1_macvtap entered promiscuous mode [ 157.717910][ T6701] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 157.756583][ T6701] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.790845][ T6701] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 157.803739][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 157.850063][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 157.870152][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 157.900865][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 157.937197][ T6701] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 157.972435][ T6701] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.984334][ T7057] FAULT_INJECTION: forcing a failure. [ 157.984334][ T7057] name failslab, interval 1, probability 0, space 0, times 0 [ 158.018419][ T6701] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 158.026603][ T7057] CPU: 0 PID: 7057 Comm: syz.5.656 Not tainted syzkaller #0 [ 158.033915][ T7057] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 158.043989][ T7057] Call Trace: [ 158.047287][ T7057] [ 158.050228][ T7057] dump_stack_lvl+0x188/0x250 [ 158.054926][ T7057] ? show_regs_print_info+0x20/0x20 [ 158.060146][ T7057] ? load_image+0x410/0x410 [ 158.064674][ T7057] ? __lock_acquire+0x7d40/0x7d40 [ 158.069807][ T7057] should_fail+0x383/0x4b0 [ 158.074248][ T7057] should_failslab+0x5/0x20 [ 158.078762][ T7057] slab_pre_alloc_hook+0x51/0xc0 [ 158.083805][ T7057] ? ceph_msg_new2+0x3c/0x4a0 [ 158.088510][ T7057] kmem_cache_alloc+0x3d/0x280 [ 158.093301][ T7057] ceph_msg_new2+0x3c/0x4a0 [ 158.097833][ T7057] ceph_monc_init+0x4f9/0xa00 [ 158.102549][ T7057] ceph_create_client+0x221/0x300 [ 158.107600][ T7057] ceph_get_tree+0xf6/0x1290 [ 158.112213][ T7057] ? bpf_lsm_capable+0x5/0x10 [ 158.116925][ T7057] ? security_capable+0x85/0xb0 [ 158.121804][ T7057] vfs_get_tree+0x88/0x270 [ 158.126254][ T7057] vfs_fsconfig_locked+0x22f/0x400 [ 158.131391][ T7057] __se_sys_fsconfig+0x69e/0x7e0 [ 158.136356][ T7057] ? __x64_sys_fsconfig+0xc0/0xc0 [ 158.141499][ T7057] ? lockdep_hardirqs_on+0x94/0x140 [ 158.146729][ T7057] ? __x64_sys_fsconfig+0x1c/0xc0 [ 158.151907][ T7057] do_syscall_64+0x4c/0xa0 [ 158.156345][ T7057] ? clear_bhb_loop+0x30/0x80 [ 158.161043][ T7057] ? clear_bhb_loop+0x30/0x80 [ 158.161079][ T7057] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 158.161101][ T7057] RIP: 0033:0x7f0a2ae63559 [ 158.161121][ T7057] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 158.161135][ T7057] RSP: 002b:00007f0a290bb028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 158.161155][ T7057] RAX: ffffffffffffffda RBX: 00007f0a2b0eafa0 RCX: 00007f0a2ae63559 [ 158.161168][ T7057] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004 [ 158.161177][ T7057] RBP: 00007f0a2aefa8b0 R08: 0000000000000000 R09: 0000000000000000 [ 158.161186][ T7057] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 158.172404][ T7057] R13: 00007f0a2b0eb038 R14: 00007f0a2b0eafa0 R15: 00007fff30241898 [ 158.172436][ T7057] [ 158.172487][ C0] vkms_vblank_simulate: vblank timer overrun [ 158.196604][ C0] vkms_vblank_simulate: vblank timer overrun [ 158.259986][ C0] vkms_vblank_simulate: vblank timer overrun [ 158.266013][ C0] hrtimer: interrupt took 93558235 ns [ 158.349526][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 158.359587][ C0] vkms_vblank_simulate: vblank timer overrun [ 158.445535][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 158.474804][ T7067] 9pnet: p9_errstr2errno: server reported unknown error @¬¿Ê6)ÎxÑ$)8k‹îh½H& ‘ÙB—J‘$ÜûI’Ýå [ 158.500661][ T6701] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.541938][ T6701] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.576227][ T6701] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.600096][ T6701] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.824509][ T7079] loop6: detected capacity change from 0 to 256 [ 158.845491][ T7079] exfat: Deprecated parameter 'utf8' [ 158.853782][ T7079] exfat: Deprecated parameter 'namecase' [ 158.899637][ T4796] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 158.934651][ T4796] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 158.954276][ T7079] exFAT-fs (loop6): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc232f927, utbl_chksum : 0xe619d30d) [ 159.006820][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 159.036313][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 159.049375][ T5218] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 159.053004][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 159.117395][ T4711] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 159.142538][ T7087] device-mapper: ioctl: Invalid target message parameters. [ 159.438646][ T7105] loop2: detected capacity change from 0 to 2048 [ 159.469654][ T5218] usb 5-1: unable to get BOS descriptor or descriptor too short [ 159.477531][ T5218] usb 5-1: no configurations [ 159.503165][ T5218] usb 5-1: can't read configurations, error -22 [ 159.532414][ T7105] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found! [ 159.584718][ T7105] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 159.604401][ T7113] loop6: detected capacity change from 0 to 1024 [ 159.666084][ T7113] EXT4-fs (loop6): inline encryption not supported [ 159.760339][ T7113] EXT4-fs (loop6): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,quota,debug_want_extra_isize=0x0000000000000080,inlinecrypt,grpid,usrjquota=,nouid32,,errors=continue. Quota mode: writeback. [ 159.925877][ T7124] loop7: detected capacity change from 0 to 64 [ 160.439785][ T7146] loop2: detected capacity change from 0 to 128 [ 160.619885][ T7146] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 160.659204][ T7146] ext4 filesystem being mounted at /160/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 160.747460][ T7146] fscrypt (loop2, inode 12): Unsupported encryption flags (0x46) [ 160.859178][ T5227] usb 7-1: new full-speed USB device number 5 using dummy_hcd [ 160.995013][ T7176] FAULT_INJECTION: forcing a failure. [ 160.995013][ T7176] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 161.025775][ T7176] CPU: 0 PID: 7176 Comm: syz.5.690 Not tainted syzkaller #0 [ 161.033130][ T7176] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 161.043199][ T7176] Call Trace: [ 161.046493][ T7176] [ 161.046504][ T7176] dump_stack_lvl+0x188/0x250 [ 161.046529][ T7176] ? show_regs_print_info+0x20/0x20 [ 161.046547][ T7176] ? load_image+0x410/0x410 [ 161.046568][ T7176] ? __lock_acquire+0x7d40/0x7d40 [ 161.046594][ T7176] should_fail+0x383/0x4b0 [ 161.054775][ T7176] prepare_alloc_pages+0x1e3/0x5b0 [ 161.064462][ T7176] __alloc_pages+0x11b/0x480 [ 161.073919][ T7176] ? zone_statistics+0x170/0x170 [ 161.083580][ T7176] ? alloc_pages+0x452/0x560 [ 161.093069][ T7176] kimage_alloc_pages+0xc6/0x360 [ 161.093091][ T7176] ? __might_sleep+0xf0/0xf0 [ 161.102671][ T7176] kimage_alloc_page+0x8d/0x910 [ 161.102693][ T7176] ? __might_fault+0xb3/0x110 [ 161.112192][ T7176] ? _copy_from_user+0x111/0x170 [ 161.112213][ T7176] kimage_load_segment+0x605/0xa20 [ 161.122247][ T7176] do_kexec_load+0x46b/0x630 [ 161.122272][ T7176] __se_sys_kexec_load+0x170/0x1c0 [ 161.131942][ T7176] do_syscall_64+0x4c/0xa0 [ 161.131964][ T7176] ? clear_bhb_loop+0x30/0x80 [ 161.141045][ T7176] ? clear_bhb_loop+0x30/0x80 [ 161.141068][ T7176] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 161.151608][ T7176] RIP: 0033:0x7f0a2ae63559 [ 161.151629][ T7176] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 161.151643][ T7176] RSP: 002b:00007f0a290bb028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f6 [ 161.151663][ T7176] RAX: ffffffffffffffda RBX: 00007f0a2b0eafa0 RCX: 00007f0a2ae63559 [ 161.151677][ T7176] RDX: 00002000000002c0 RSI: 0000000000000001 RDI: 0000000000000002 [ 161.151687][ T7176] RBP: 00007f0a2aefa8b0 R08: 0000000000000000 R09: 0000000000000000 [ 161.151697][ T7176] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 161.151706][ T7176] R13: 00007f0a2b0eb038 R14: 00007f0a2b0eafa0 R15: 00007fff30241898 [ 161.176223][ T7176] [ 161.176282][ C0] vkms_vblank_simulate: vblank timer overrun [ 161.395605][ T5227] usb 7-1: config 4 has an invalid interface number: 44 but max is 0 [ 161.410915][ T5227] usb 7-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 161.431810][ T5227] usb 7-1: config 4 has no interface number 0 [ 161.448197][ T5227] usb 7-1: config 4 interface 44 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 161.629680][ T5227] usb 7-1: New USB device found, idVendor=1044, idProduct=7001, bcdDevice= 5.20 [ 161.643753][ T5227] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.668246][ T5227] usb 7-1: Product: syz [ 161.682437][ T5227] usb 7-1: Manufacturer: syz [ 161.695428][ T5227] usb 7-1: SerialNumber: syz [ 161.724966][ T7210] netlink: 24 bytes leftover after parsing attributes in process `syz.2.701'. [ 162.072044][ T7226] bridge0: port 1(vlan2) entered blocking state [ 162.078607][ T7226] bridge0: port 1(vlan2) entered disabled state [ 162.189302][ T5227] dvb-usb: found a 'Gigabyte U7000' in warm state. [ 162.209603][ T5227] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 162.229051][ C1] net_ratelimit: 81 callbacks suppressed [ 162.259659][ T5227] dvbdev: DVB: registering new adapter (Gigabyte U7000) [ 162.266747][ T5227] usb 7-1: media controller created [ 162.344395][ T5227] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 162.459502][ T7151] i2c i2c-1: Invalid block size returned: 78 [ 162.514422][ T5227] DVB: Unable to find symbol dib7000p_attach() [ 162.521140][ T5227] dvb-usb: no frontend was attached by 'Gigabyte U7000' [ 162.533523][ T7244] bridge0: port 2(bridge_slave_1) entered blocking state [ 162.540821][ T7244] bridge0: port 2(bridge_slave_1) entered listening state [ 162.548232][ T7244] bridge0: port 1(bridge_slave_0) entered blocking state [ 162.555786][ T7244] bridge0: port 1(bridge_slave_0) entered listening state [ 162.584016][ T7244] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 162.628331][ T7244] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 162.649386][ T5227] rc_core: IR keymap rc-dib0700-rc5 not found [ 162.656983][ T5227] Registered IR keymap rc-empty [ 162.667774][ T5227] dvb-usb: could not initialize remote control. [ 162.674549][ T5227] dvb-usb: Gigabyte U7000 successfully initialized and connected. [ 162.714933][ T5227] usb 7-1: USB disconnect, device number 5 [ 162.836560][ T5227] dvb-usb: Gigabyte U7000 successfully deinitialized and disconnected. [ 163.169080][ T7260] FAULT_INJECTION: forcing a failure. [ 163.169080][ T7260] name failslab, interval 1, probability 0, space 0, times 0 [ 163.239678][ T7260] CPU: 1 PID: 7260 Comm: syz.4.719 Not tainted syzkaller #0 [ 163.246998][ T7260] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 163.257191][ T7260] Call Trace: [ 163.260484][ T7260] [ 163.263449][ T7260] dump_stack_lvl+0x188/0x250 [ 163.268153][ T7260] ? show_regs_print_info+0x20/0x20 [ 163.273641][ T7260] ? load_image+0x410/0x410 [ 163.278287][ T7260] ? __might_sleep+0xf0/0xf0 [ 163.278315][ T7260] ? __lock_acquire+0x7d40/0x7d40 [ 163.278341][ T7260] should_fail+0x383/0x4b0 [ 163.278365][ T7260] should_failslab+0x5/0x20 [ 163.288065][ T7260] slab_pre_alloc_hook+0x51/0xc0 [ 163.296972][ T7260] ? getname_flags+0xb7/0x4f0 [ 163.297002][ T7260] kmem_cache_alloc+0x3d/0x280 [ 163.297025][ T7260] getname_flags+0xb7/0x4f0 [ 163.297050][ T7260] __se_sys_acct+0x3b/0x7b0 [ 163.297074][ T7260] ? lockdep_hardirqs_on+0x94/0x140 [ 163.306691][ T7260] do_syscall_64+0x4c/0xa0 [ 163.316215][ T7260] ? clear_bhb_loop+0x30/0x80 [ 163.325906][ T7260] ? clear_bhb_loop+0x30/0x80 [ 163.336087][ T7260] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 163.346623][ T7260] RIP: 0033:0x7fc8d9965559 [ 163.346645][ T7260] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 163.370639][ T7260] RSP: 002b:00007fc8d7bbd028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a3 [ 163.370668][ T7260] RAX: ffffffffffffffda RBX: 00007fc8d9becfa0 RCX: 00007fc8d9965559 [ 163.370680][ T7260] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00002000000001c0 [ 163.370690][ T7260] RBP: 00007fc8d99fc8b0 R08: 0000000000000000 R09: 0000000000000000 [ 163.370702][ T7260] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 163.370712][ T7260] R13: 00007fc8d9bed038 R14: 00007fc8d9becfa0 R15: 00007ffc860a02a8 [ 163.370737][ T7260] [ 163.875765][ T7277] loop4: detected capacity change from 0 to 512 [ 164.007646][ T7277] EXT4-fs (loop4): mounted filesystem without journal. Opts: quota,noload,init_itable,,errors=continue. Quota mode: writeback. [ 164.023704][ T7277] ext4 filesystem being mounted at /153/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 164.232506][ T7277] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 164.429564][ T7267] loop5: detected capacity change from 0 to 32768 [ 164.619631][ T7267] XFS (loop5): Mounting V5 Filesystem [ 164.830962][ T7267] XFS (loop5): Ending clean mount [ 164.988210][ T7308] 8021q: adding VLAN 0 to HW filter on device bond1 [ 164.999603][ T7306] device syzkaller1 entered promiscuous mode [ 165.038602][ T4744] XFS (loop5): Unmounting Filesystem [ 165.225156][ T4173] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 165.285507][ T7317] loop7: detected capacity change from 0 to 128 [ 165.479078][ T4173] usb 7-1: Using ep0 maxpacket: 8 [ 165.558737][ T6701] FAT-fs (loop7): error, corrupted directory (invalid entries) [ 165.590174][ T6701] FAT-fs (loop7): error, corrupted directory (invalid entries) [ 165.600438][ T4173] usb 7-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 128, changing to 11 [ 165.639031][ T4173] usb 7-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 165.694494][ T4173] usb 7-1: config 0 interface 0 has no altsetting 0 [ 165.721273][ T4173] usb 7-1: New USB device found, idVendor=0518, idProduct=0002, bcdDevice= 0.00 [ 165.744357][ T4173] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.792313][ T4173] usb 7-1: config 0 descriptor?? [ 166.135929][ T4796] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.208211][ T4796] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.297796][ T4173] input: HID 0518:0002 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:0518:0002.000B/input/input15 [ 166.328462][ T4796] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.389212][ T5227] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 166.417561][ T4173] ezkey 0003:0518:0002.000B: input,hiddev0,hidraw0: USB HID v0.01 Device [HID 0518:0002] on usb-dummy_hcd.6-1/input0 [ 166.441311][ T4796] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.606184][ T7360] loop4: detected capacity change from 0 to 2048 [ 166.770183][ T7360] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 166.808078][ T7360] ext4 filesystem being mounted at /156/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 166.819222][ T5227] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 166.839009][ T5227] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 166.859357][ T5227] usb 6-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 166.868432][ T5227] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.881167][ T5227] usb 6-1: config 0 descriptor?? [ 166.929832][ T7361] rxe_eth0 speed is unknown, defaulting to 1000 [ 167.014748][ T5216] usb 7-1: USB disconnect, device number 6 [ 167.269002][ C1] net_ratelimit: 60 callbacks suppressed [ 167.318469][ T7381] loop2: detected capacity change from 0 to 256 [ 167.372132][ T5227] playstation 0003:054C:0DF2.000C: unknown main item tag 0x0 [ 167.391736][ T5227] playstation 0003:054C:0DF2.000C: unknown main item tag 0x0 [ 167.399664][ T5227] playstation 0003:054C:0DF2.000C: unknown main item tag 0x0 [ 167.434587][ T5227] playstation 0003:054C:0DF2.000C: unknown main item tag 0x0 [ 167.453455][ T5227] playstation 0003:054C:0DF2.000C: unknown main item tag 0x0 [ 167.473902][ T5227] playstation 0003:054C:0DF2.000C: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.5-1/input0 [ 167.921382][ T7361] chnl_net:caif_netlink_parms(): no params data found [ 168.039422][ T5227] playstation 0003:054C:0DF2.000C: Invalid gyro calibration data for axis (3), disabling calibration. [ 168.078794][ T5227] playstation 0003:054C:0DF2.000C: Invalid gyro calibration data for axis (4), disabling calibration. [ 168.097613][ T5227] playstation 0003:054C:0DF2.000C: Invalid gyro calibration data for axis (5), disabling calibration. [ 168.115374][ T5227] playstation 0003:054C:0DF2.000C: Invalid accelerometer calibration data for axis (0), disabling calibration. [ 168.146707][ T5227] playstation 0003:054C:0DF2.000C: Invalid accelerometer calibration data for axis (1), disabling calibration. [ 168.165007][ T5227] playstation 0003:054C:0DF2.000C: Invalid accelerometer calibration data for axis (2), disabling calibration. [ 168.180916][ T5227] input: HID 054c:0df2 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:054C:0DF2.000C/input/input16 [ 168.231225][ T5227] input: HID 054c:0df2 Motion Sensors as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:054C:0DF2.000C/input/input17 [ 168.288738][ T5227] input: HID 054c:0df2 Touchpad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:054C:0DF2.000C/input/input18 [ 168.324391][ T5227] playstation 0003:054C:0DF2.000C: Registered DualSense controller hw_version=0x00000000 fw_version=0x00000000 [ 168.381468][ T5227] usb 6-1: USB disconnect, device number 10 [ 168.489860][ T7409] netlink: 1363 bytes leftover after parsing attributes in process `syz.2.753'. [ 168.571724][ T7424] fido_id[7424]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/report_descriptor': No such file or directory [ 168.709978][ T4292] Bluetooth: hci0: command 0x0409 tx timeout [ 168.864214][ T7361] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.872427][ T7361] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.881107][ T7361] device bridge_slave_0 entered promiscuous mode [ 168.917434][ T7361] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.933750][ T7361] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.968841][ T7361] device bridge_slave_1 entered promiscuous mode [ 169.171382][ T7361] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 169.242212][ T7361] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 169.467329][ T7361] team0: Port device team_slave_0 added [ 169.511504][ T7361] team0: Port device team_slave_1 added [ 169.569380][ T4796] device hsr_slave_0 left promiscuous mode [ 169.581432][ T4796] device hsr_slave_1 left promiscuous mode [ 169.598119][ T4796] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 169.616017][ T4796] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 169.637333][ T4796] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 169.661420][ T4796] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 169.695707][ T4796] device bridge_slave_1 left promiscuous mode [ 169.708713][ T4796] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.729593][ T7464] 9pnet: p9_errstr2errno: server reported unknown error @cD†üB€|˜ÿÿÿÿ [ 169.766528][ T4796] device bridge_slave_0 left promiscuous mode [ 169.796691][ T4796] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.840336][ T4796] device veth1_macvtap left promiscuous mode [ 169.860098][ T4796] device veth0_macvtap left promiscuous mode [ 169.875062][ T4796] device veth1_vlan left promiscuous mode [ 169.898010][ T4796] device veth0_vlan left promiscuous mode [ 170.086862][ T7481] loop6: detected capacity change from 0 to 512 [ 170.203921][ T7481] EXT4-fs (loop6): 1 truncate cleaned up [ 170.222986][ T7481] EXT4-fs (loop6): mounted filesystem without journal. Opts: bsdgroups,grpquota,debug_want_extra_isize=0x000000000000005c,noauto_da_alloc,nolazytime,discard,grpjquota=,errors=remount-ro,nobarrier,. Quota mode: writeback. [ 170.565446][ T4796] bond1 (unregistering): Released all slaves [ 170.799373][ T13] Bluetooth: hci0: command 0x041b tx timeout [ 171.000634][ T4796] team0 (unregistering): Port device team_slave_1 removed [ 171.045777][ T4796] team0 (unregistering): Port device team_slave_0 removed [ 171.090913][ T4796] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 171.158312][ T7506] loop5: detected capacity change from 0 to 32768 [ 171.166165][ T4796] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 171.277982][ T7506] JBD2: Ignoring recovery information on journal [ 171.319090][ T7506] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 171.519122][ T4796] bond0 (unregistering): Released all slaves [ 171.610690][ T7361] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 171.617656][ T7361] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 171.650162][ T7361] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 172.037322][ T7491] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.044642][ T7491] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.370819][ T7491] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 172.405427][ T7491] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 172.474964][ T4276] net_ratelimit: 55 callbacks suppressed [ 172.682449][ T7491] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.691470][ T7491] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.701111][ T7491] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.710093][ T7491] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.823944][ T7504] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 172.836686][ T7504] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 172.862949][ T7504] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 172.879402][ T5216] Bluetooth: hci0: command 0x040f tx timeout [ 172.915254][ T7504] bridge0: port 1(vlan2) entered disabled state [ 172.948529][ T7512] tipc: New replicast peer: 172.20.20.187 [ 172.968356][ T7512] tipc: Enabled bearer , priority 10 [ 172.986690][ T7361] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 173.019042][ T7361] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 173.061988][ T7361] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 173.184664][ T4744] ocfs2: Unmounting device (7,5) on (node local) [ 173.273550][ T7523] loop6: detected capacity change from 0 to 512 [ 173.314989][ T7361] device hsr_slave_0 entered promiscuous mode [ 173.356241][ T7361] device hsr_slave_1 entered promiscuous mode [ 173.450912][ T7523] EXT4-fs (loop6): 1 truncate cleaned up [ 173.457061][ T7361] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 173.469110][ T7523] EXT4-fs (loop6): mounted filesystem without journal. Opts: noauto_da_alloc,grpquota,,errors=continue. Quota mode: writeback. [ 173.512163][ T7361] Cannot create hsr debugfs directory [ 173.584016][ T7523] EXT4-fs (loop6): shut down requested (1) [ 173.926157][ T7542] loop5: detected capacity change from 0 to 256 [ 173.943559][ T7537] loop2: detected capacity change from 0 to 512 [ 174.036396][ T7542] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 174.108770][ T7537] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 174.241241][ T7537] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e002e018, mo2=0002] [ 174.322901][ T7537] System zones: 0-2, 18-18, 34-34 [ 174.462228][ T7537] EXT4-fs (loop2): 1 orphan inode deleted [ 174.468013][ T7537] EXT4-fs (loop2): mounted filesystem without journal. Opts: mb_optimize_scan=0x0000000000000001,debug,user_xattr,dioread_nolock,stripe=0x0000000000000003,,errors=continue. Quota mode: writeback. [ 174.624375][ T7537] ext4 filesystem being mounted at /190/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 174.794701][ T7563] netlink: 'syz.6.794': attribute type 11 has an invalid length. [ 174.821734][ T7361] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 174.959398][ T4292] Bluetooth: hci0: command 0x0419 tx timeout [ 175.169314][ T7361] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 175.265609][ T7361] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 175.463688][ T7361] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 175.548187][ T7587] netlink: 12 bytes leftover after parsing attributes in process `syz.6.799'. [ 175.646067][ T7591] netlink: 'syz.6.799': attribute type 1 has an invalid length. [ 176.016537][ T7361] 8021q: adding VLAN 0 to HW filter on device bond0 [ 176.065475][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 176.097562][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 176.113523][ T7361] 8021q: adding VLAN 0 to HW filter on device team0 [ 176.143362][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 176.177870][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 176.227330][ T155] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.235282][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 176.245813][ T7609] loop5: detected capacity change from 0 to 2048 [ 176.306273][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 176.356771][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 176.397771][ T7609] EXT4-fs (loop5): mounted filesystem without journal. Opts: dioread_lock,,errors=continue. Quota mode: none. [ 176.415794][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 176.456541][ T155] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.463926][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 176.531484][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 176.554665][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 176.564164][ T13] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 176.576110][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 176.591011][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 176.602280][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 176.615938][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 176.646779][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 176.663830][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 176.706244][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 176.746996][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 176.791803][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 176.828560][ T7361] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 176.836148][ T13] usb 5-1: Using ep0 maxpacket: 8 [ 176.990072][ T13] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 177.020721][ T13] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 177.071815][ T13] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 177.113118][ T13] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 177.179494][ T13] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 177.205158][ T13] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.437315][ T4711] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 177.479381][ T13] usb 5-1: GET_CAPABILITIES returned 0 [ 177.485886][ T13] usbtmc 5-1:16.0: can't read capabilities [ 177.498715][ T4711] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 177.564346][ T7361] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 177.599046][ C0] net_ratelimit: 24 callbacks suppressed [ 177.806341][ T7652] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 177.833422][ T7652] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 177.856858][ T7656] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 177.903711][ T7656] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 178.430310][ T4711] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 178.463994][ T4711] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 178.528060][ T4711] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 178.544748][ T5370] usb 5-1: USB disconnect, device number 14 [ 178.572750][ T4711] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 178.662040][ T7361] device veth0_vlan entered promiscuous mode [ 178.676072][ T4711] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 178.696281][ T4711] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 178.712613][ T7361] device veth1_vlan entered promiscuous mode [ 178.790339][ T7361] device veth0_macvtap entered promiscuous mode [ 178.819853][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 178.838429][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 178.872728][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 178.925797][ T7361] device veth1_macvtap entered promiscuous mode [ 179.040475][ T7361] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 179.093176][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 179.116808][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 179.149891][ T7706] netlink: 156 bytes leftover after parsing attributes in process `syz.2.821'. [ 179.160047][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 179.240746][ T7361] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 179.279768][ T7361] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.334173][ T7361] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.372937][ T7361] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.394205][ T7361] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.474807][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 179.504011][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 179.804573][ T4283] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 179.831265][ T4283] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 179.916283][ T4711] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 179.939631][ T7551] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 179.956223][ T7551] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 179.987403][ T4711] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 180.238027][ T7710] loop6: detected capacity change from 0 to 40427 [ 180.289223][ T7710] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12 [ 180.322075][ T7710] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 180.397548][ T7710] F2FS-fs (loop6): invalid crc value [ 180.428443][ T7753] netlink: 24 bytes leftover after parsing attributes in process `syz.5.831'. [ 180.451402][ T7710] F2FS-fs (loop6): Found nat_bits in checkpoint [ 180.634376][ T7710] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 180.667717][ T7710] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 180.968268][ T7710] Invalid argument reading file caps for ./file0 [ 181.008138][ T7784] netlink: 'syz.8.838': attribute type 5 has an invalid length. [ 181.056922][ T7784] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 181.066849][ T7784] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 181.076223][ T7784] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 181.085323][ T7784] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 181.221078][ T7784] netdevsim netdevsim8 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 181.230431][ T7784] netdevsim netdevsim8 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 181.239835][ T7784] netdevsim netdevsim8 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 181.248730][ T7784] netdevsim netdevsim8 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 181.669129][ T7806] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 181.948369][ T7821] netlink: 24 bytes leftover after parsing attributes in process `syz.6.842'. [ 182.063751][ T7821] netlink: 12 bytes leftover after parsing attributes in process `syz.6.842'. [ 182.311727][ T7832] loop6: detected capacity change from 0 to 8192 [ 182.490093][ T7846] overlayfs: upper fs does not support file handles, falling back to index=off. [ 182.709006][ C1] net_ratelimit: 65 callbacks suppressed [ 183.330962][ T7893] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 183.381396][ T7893] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 183.416616][ T7898] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 183.449850][ T7898] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 185.352083][ T7981] [ 185.354451][ T7981] ====================================================== [ 185.354618][ T4171] nf_conntrack: normal packet for ffff88801fc40300 [ 185.361563][ T7981] WARNING: possible circular locking dependency detected [ 185.361585][ T7981] syzkaller #0 Not tainted [ 185.361594][ T7981] ------------------------------------------------------ [ 185.361599][ T7981] syz.8.889/7981 is trying to acquire lock: [ 185.361607][ T7981] ffff88801db15080 (&sb->s_type->i_mutex_key#26){++++}-{3:3}, at: configfs_depend_item_unlocked+0x14c/0x450 [ 185.361660][ T7981] [ 185.361660][ T7981] but task is already holding lock: [ 185.361665][ T7981] ffffffff8dd20988 (tpg_instances_lock){+.+.}-{3:3}, at: usbg_make_tpg+0xf5/0x550 [ 185.361704][ T7981] [ 185.361704][ T7981] which lock already depends on the new lock. [ 185.361704][ T7981] [ 185.361710][ T7981] [ 185.361710][ T7981] the existing dependency chain (in reverse order) is: [ 185.361716][ T7981] [ 185.361716][ T7981] -> #3 (tpg_instances_lock){+.+.}-{3:3}: [ 185.361746][ T7981] __mutex_lock_common+0x1e5/0x2400 [ 185.361762][ T7981] mutex_lock_nested+0x17/0x20 [ 185.361776][ T7981] tcm_alloc_inst+0x61/0x190 [ 185.378560][ T4171] tcp_in_window: START [ 185.380610][ T7981] usb_get_function_instance+0xd9/0x2e0 [ 185.380639][ T7981] function_make+0x118/0x350 [ 185.380653][ T7981] configfs_mkdir+0x511/0x9e0 [ 185.380668][ T7981] vfs_mkdir+0x386/0x570 [ 185.380683][ T7981] do_mkdirat+0x1dd/0x5c0 [ 185.380697][ T7981] __x64_sys_mkdir+0x6a/0x80 [ 185.387948][ T4171] tcp_in_window: [ 185.394022][ T7981] do_syscall_64+0x4c/0xa0 [ 185.394050][ T7981] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 185.394067][ T7981] [ 185.394067][ T7981] -> #2 (func_lock){+.+.}-{3:3}: [ 185.394092][ T7981] __mutex_lock_common+0x1e5/0x2400 [ 185.406384][ T4171] seq=1315048430 ack=240761225+(0) sack=240761225+(0) win=24569 end=1315063798 [ 185.414110][ T7981] mutex_lock_nested+0x17/0x20 [ 185.414138][ T7981] usb_get_function_instance+0x2a/0x2e0 [ 185.414152][ T7981] function_make+0x118/0x350 [ 185.414165][ T7981] configfs_mkdir+0x511/0x9e0 [ 185.423406][ T4171] tcp_in_window: sender end=1315048430 maxend=1318194158 maxwin=3144832 scale=7 receiver end=240761225 maxend=243906057 maxwin=3224792 scale=7 [ 185.433755][ T7981] vfs_mkdir+0x386/0x570 [ 185.433784][ T7981] do_mkdirat+0x1dd/0x5c0 [ 185.433797][ T7981] __x64_sys_mkdirat+0x85/0x90 [ 185.433811][ T7981] do_syscall_64+0x4c/0xa0 [ 185.442860][ T4171] tcp_in_window: [ 185.450700][ T7981] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 185.450730][ T7981] [ 185.450730][ T7981] -> #1 (gadget_subsys.su_mutex [ 185.456466][ T4171] seq=1315048430 ack=240761225+(0) sack=240761225+(0) win=24569 end=1315063798 [ 185.462083][ T7981] ){+.+.}-{3:3}: [ 185.462097][ T7981] __mutex_lock_common+0x1e5/0x2400 [ 185.462117][ T7981] mutex_lock_nested+0x17/0x20 [ 185.462129][ T7981] uvcg_streaming_header_allow_link+0x6d/0x4a0 [ 185.467326][ T4171] tcp_in_window: sender end=1315048430 maxend=1318194158 maxwin=3144832 scale=7 receiver end=240761225 maxend=243906057 maxwin=3224792 scale=7 [ 185.471584][ T7981] configfs_symlink+0x5a4/0x13b0 [ 185.471609][ T7981] vfs_symlink+0x245/0x3d0 [ 185.471625][ T7981] do_symlinkat+0x1ab/0x6b0 [ 185.477969][ T4171] tcp_in_window: I=1 II=1 III=1 IV=1 [ 185.483207][ T7981] __x64_sys_symlinkat+0x95/0xa0 [ 185.483236][ T7981] do_syscall_64+0x4c/0xa0 [ 185.483252][ T7981] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 185.488557][ T4171] tcp_in_window: res=1 sender end=1315063798 maxend=1318194158 maxwin=3144832 receiver end=240761225 maxend=243906057 maxwin=3224792 [ 185.493396][ T7981] [ 185.493396][ T7981] -> #0 (&sb->s_type->i_mutex_key#26){++++}-{3:3}: [ 185.493425][ T7981] __lock_acquire+0x38f7/0x7d40 [ 185.493447][ T7981] lock_acquire+0x19f/0x400 [ 185.498377][ T4171] tcp_conntracks: [ 185.503477][ T7981] down_write+0x38/0x60 [ 185.503508][ T7981] configfs_depend_item_unlocked+0x14c/0x450 [ 185.503526][ T7981] usbg_make_tpg+0x1dd/0x550 [ 185.507238][ T4171] syn=0 ack=1 fin=0 rst=0 old=3 new=3 [ 185.512247][ T7981] target_fabric_make_tpg+0xa0/0x6d0 [ 185.512274][ T7981] configfs_mkdir+0x511/0x9e0 [ 185.512287][ T7981] vfs_mkdir+0x386/0x570 [ 185.512302][ T7981] do_mkdirat+0x1dd/0x5c0 [ 185.519191][ C0] nf_conntrack: normal packet for ffff888076b0b200 [ 185.526012][ T7981] __x64_sys_mkdir+0x6a/0x80 [ 185.526043][ T7981] do_syscall_64+0x4c/0xa0 [ 185.531800][ C0] tcp_in_window: START [ 185.540679][ T7981] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 185.540710][ T7981] [ 185.540710][ T7981] other info that might help us debug this: [ 185.540710][ T7981] [ 185.540716][ T7981] Chain exists of: [ 185.540716][ T7981] &sb->s_type->i_mutex_key [ 185.546096][ C0] tcp_in_window: [ 185.552406][ T7981] #26 --> func_lock --> tpg_instances_lock [ 185.552406][ T7981] [ 185.552446][ T7981] Possible unsafe locking scenario: [ 185.552446][ T7981] [ 185.552450][ T7981] CPU0 CPU1 [ 185.552454][ T7981] ---- ---- [ 185.552457][ T7981] lock(tpg_instances_lock); [ 185.552467][ T7981] lock(func_lock); [ 185.552478][ T7981] lock(tpg_instances_lock [ 185.557615][ C0] seq=1612962947 ack=1145258562+(0) sack=1145258562+(0) win=64240 end=1612962948 [ 185.562786][ T7981] ); [ 185.562793][ T7981] lock(&sb->s_type->i_mutex_key#26); [ 185.562807][ T7981] [ 185.562807][ T7981] *** DEADLOCK *** [ 185.562807][ T7981] [ 185.562811][ T7981] 4 locks held by syz.8.889/7981: [ 185.562821][ T7981] #0: ffff888146890460 [ 185.580104][ C0] tcp_in_window: sender end=1612962948 maxend=1612962948 maxwin=64240 scale=7 receiver end=1145258562 maxend=1145322802 maxwin=1 scale=14 [ 185.584991][ T7981] (sb_writers [ 185.589962][ C0] tcp_in_window: [ 185.595512][ T7981] #21){.+.+}-{0:0}, at: mnt_want_write+0x3d/0x90 [ 185.602076][ C0] seq=1612962947 ack=1145258562+(0) sack=1145258562+(0) win=64240 end=1612962948 [ 185.605757][ T7981] #1: ffff8880616264c0 [ 185.613057][ C0] tcp_in_window: sender end=1612962948 maxend=1612962948 maxwin=64240 scale=7 receiver end=1145258562 maxend=1145322802 maxwin=1 scale=14 [ 185.620469][ T7981] (&sb->s_type->i_mutex_key#7/1){+.+.}-{3:3}, at: filename_create+0x20b/0x450 [ 185.630403][ C0] tcp_in_window: I=1 II=1 III=1 IV=1 [ 185.633906][ T7981] #2: ffffffff8da24450 [ 185.639649][ C0] tcp_in_window: res=1 sender end=1612962948 maxend=1612962948 maxwin=64240 receiver end=1145258562 maxend=1145322802 maxwin=1 [ 185.644891][ T7981] (&subsys->su_mutex){+.+.}-{3:3}, at: configfs_mkdir+0x4b5/0x9e0 [ 185.651655][ C0] tcp_conntracks: [ 185.666738][ T7981] #3: ffffffff8dd20988 (tpg_instances_lock){+.+.}-{3:3}, at: usbg_make_tpg+0xf5/0x550 [ 185.666804][ T7981] [ 185.666804][ T7981] stack backtrace: [ 185.666811][ T7981] CPU: 1 PID: 7981 Comm: syz.8.889 Not tainted syzkaller #0 [ 185.666828][ T7981] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 185.672599][ C0] syn=1 ack=1 fin=0 rst=0 old=2 new=2 [ 185.679250][ T7981] Call Trace: [ 185.679286][ T7981] [ 185.679294][ T7981] dump_stack_lvl+0x188/0x250 [ 185.696122][ T4171] No more buffers in queue [ 185.701088][ T7981] ? load_image+0x410/0x410 [ 185.701115][ T7981] ? show_regs_print_info+0x20/0x20 [ 185.701136][ T7981] ? print_circular_bug+0x12b/0x1a0 [ 185.708060][ T4171] eth0: xmit ffff88801fbdaae8 42:01:0a:80:00:01 [ 185.721919][ T7981] check_noncircular+0x2f8/0x400 [ 185.721952][ T7981] ? print_deadlock_bug+0x5d0/0x5d0 [ 185.721965][ T7981] ? lockdep_lock+0xf1/0x1f0 [ 185.721983][ T7981] ? mark_lock+0x94/0x320 [ 185.721996][ T7981] ? _find_first_zero_bit+0xd1/0xf0 [ 185.730822][ T4171] Added buffer head 17 to ffff888147cc2b00 [ 185.736318][ C0] virtqueue callback for ffff888147cc2b00 (ffffffff854980c0) [ 185.736310][ T7981] __lock_acquire+0x38f7/0x7d40 [ 185.736351][ T7981] ? verify_lock_unused+0x140/0x140 [ 185.741781][ C0] Sent skb ffff88801fbdaae8 [ 185.745827][ T7981] ? __mutex_trylock_common+0x15c/0x260 [ 185.750527][ C0] No more buffers in queue [ 185.756975][ T7981] ? rcu_lock_release+0x20/0x20 [ 185.757001][ C0] virtqueue callback for ffff88801ee44900 (ffffffff84450960) [ 185.757019][ T7981] lock_acquire+0x19f/0x400 [ 185.757036][ T7981] ? configfs_depend_item_unlocked+0x14c/0x450 [ 185.757055][ T7981] ? __might_sleep+0xf0/0xf0 [ 185.757060][ C0] virtqueue interrupt with no work for ffff88801ee44800 [ 185.757072][ C0] virtqueue interrupt with no work for ffff88801ee44700 [ 185.757070][ T7981] ? __kasan_kmalloc+0xc6/0xe0 [ 185.757087][ T7981] ? read_lock_is_recursive+0x10/0x10 [ 185.757104][ T7981] ? mutex_lock_io_nested+0x60/0x60 [ 185.763032][ T7989] kcov: kcov_start: t = ffff88801f038000, size = 524288, area = ffffc9000f2be000 [ 185.767609][ T7981] down_write+0x38/0x60 [ 185.776336][ T5220] Added buffer head 0 to ffff88801ee44900 [ 185.780375][ T7981] ? configfs_depend_item_unlocked+0x14c/0x450 [ 185.780403][ T7981] configfs_depend_item_unlocked+0x14c/0x450 [ 185.780428][ T7981] usbg_make_tpg+0x1dd/0x550 [ 185.801784][ T4171] nf_conntrack: normal packet for ffff88801fc40300 [ 185.802796][ T7981] ? mutex_lock_io_nested+0x60/0x60 [ 185.807942][ T4171] tcp_in_window: START [ 185.812143][ T7981] ? usbg_drop_tport+0x20/0x20 [ 185.812166][ T7981] ? vscnprintf+0x80/0x80 [ 185.812185][ T7981] target_fabric_make_tpg+0xa0/0x6d0 [ 185.812208][ T7981] ? target_fabric_release_wwn+0xa0/0xa0 [ 185.819166][ T4171] tcp_in_window: [ 185.829895][ T7981] configfs_mkdir+0x511/0x9e0 [ 185.829930][ T7981] vfs_mkdir+0x386/0x570 [ 185.829949][ T7981] do_mkdirat+0x1dd/0x5c0 [ 185.838256][ T4171] seq=1315063798 ack=240761225+(0) sack=240761225+(0) win=24569 end=1315073654 [ 185.841888][ T7981] ? vfs_mkdir+0x570/0x570 [ 185.841910][ T7981] ? getname_flags+0x1f9/0x4f0 [ 185.841925][ T7981] __x64_sys_mkdir+0x6a/0x80 [ 185.841940][ T7981] do_syscall_64+0x4c/0xa0 [ 185.841957][ T7981] ? clear_bhb_loop+0x30/0x80 [ 185.850189][ T4171] tcp_in_window: sender end=1315063798 maxend=1318194158 maxwin=3144832 scale=7 receiver end=240761225 maxend=243906057 maxwin=3224792 scale=7 [ 185.857611][ T7981] ? clear_bhb_loop+0x30/0x80 [ 185.857649][ T7981] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 185.863260][ T4171] tcp_in_window: [ 185.868581][ T7981] RIP: 0033:0x7f1a88996559 [ 185.873485][ T4171] seq=1315063798 ack=240761225+(0) sack=240761225+(0) win=24569 end=1315073654 [ 185.879842][ T7981] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 185.879877][ T7981] RSP: 002b:00007f1a86bee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 185.879897][ T7981] RAX: ffffffffffffffda RBX: 00007f1a88c1dfa0 RCX: 00007f1a88996559 [ 185.887254][ T4171] tcp_in_window: sender end=1315063798 maxend=1318194158 maxwin=3144832 scale=7 receiver end=240761225 maxend=243906057 maxwin=3224792 scale=7 [ 185.897014][ T7981] RDX: 0000000000000000 RSI: 00000000000001ff RDI: 0000200000000600 [ 185.897037][ T7981] RBP: 00007f1a88a2d8b0 R08: 0000000000000000 R09: 0000000000000000 [ 185.897046][ T7981] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 185.897055][ T7981] R13: 00007f1a88c1e038 R14: 00007f1a88c1dfa0 R15: 00007fff562cae48 [ 185.897073][ T7981] [ 185.897150][ C1] virtqueue callback for ffff888147cc2c00 (ffffffff85497fd0) [ 185.899698][ T4171] tcp_in_window: I=1 II=1 III=1 IV=1 [ 185.906828][ C1] No more buffers in queue [ 185.914040][ T4171] tcp_in_window: res=1 sender end=1315073654 maxend=1318194158 maxwin=3144832 receiver end=240761225 maxend=243906057 maxwin=3224792 [ 185.919403][ C1] Receiving skb proto 0x0800 len 52 type 0 [ 185.923605][ T4171] tcp_conntracks: [ 185.938310][ C1] Receiving skb proto 0x0800 len 52 type 0 [ 185.942480][ T4171] syn=0 ack=1 fin=0 rst=0 old=3 new=3 [ 185.946136][ C1] Receiving skb proto 0x0800 len 40 type 0 [ 185.953122][ C0] tcp_in_window: START [ 185.961974][ C1] No more buffers in queue [ 185.966206][ C0] tcp_in_window: [ 185.980326][ C1] tcp_in_window: START [ 185.989576][ C0] seq=0 ack=0+(0) sack=0+(0) win=65495 end=0 [ 185.994847][ C1] tcp_in_window: [ 185.999000][ C0] tcp_in_window: sender end=0 maxend=65495 maxwin=65495 scale=0 receiver end=0 maxend=65495 maxwin=65495 scale=0 [ 186.012096][ C1] seq=240761225 ack=1315048430+(0) sack=1315048430+(0) win=24576 end=240761226 [ 186.019976][ C0] tcp_in_window: [ 186.019985][ C0] seq=0 ack=0+(0) sack=0+(0) win=65495 end=0 [ 186.023683][ C1] tcp_in_window: sender end=240761225 maxend=243906057 maxwin=3224792 scale=7 receiver end=1315073654 maxend=1318194158 maxwin=3144832 scale=7 [ 186.033399][ C0] tcp_in_window: sender end=0 maxend=65495 maxwin=65495 scale=0 receiver end=0 maxend=65495 maxwin=65495 scale=0 [ 186.040329][ C1] tcp_in_window: [ 186.048729][ C0] tcp_in_window: I=1 II=1 III=1 IV=1 [ 186.059112][ C1] seq=240761225 ack=1315048430+(0) sack=1315048430+(0) win=24576 end=240761226 [ 186.064499][ C0] tcp_in_window: res=1 sender end=0 maxend=65495 maxwin=65495 receiver end=0 maxend=65495 maxwin=65495 [ 186.067762][ C1] tcp_in_window: sender end=240761225 maxend=243906057 maxwin=3224792 scale=7 receiver end=1315073654 maxend=1318194158 maxwin=3144832 scale=7 [ 186.070713][ C0] tcp_conntracks: [ 186.075516][ C1] tcp_in_window: I=1 II=1 III=1 IV=1 [ 186.080098][ C0] syn=0 ack=1 fin=0 rst=0 old=3 new=3 [ 186.085084][ C1] tcp_in_window: res=1 sender end=240761226 maxend=243906057 maxwin=3224792 receiver end=1315073654 maxend=1318194158 maxwin=3144832 [ 186.091084][ C0] tcp_in_window: START [ 186.096306][ C1] tcp_conntracks: [ 186.104328][ C0] tcp_in_window: [ 186.109581][ C1] syn=0 ack=1 fin=1 rst=0 old=3 new=4 [ 186.115072][ C0] seq=4294967295 ack=0+(0) sack=0+(0) win=65495 end=4294967295 [ 186.119856][ C1] tcp_in_window: START [ 186.119866][ C1] tcp_in_window: [ 186.124260][ C0] tcp_in_window: sender end=0 maxend=65495 maxwin=65495 scale=0 receiver end=0 maxend=65495 maxwin=65495 scale=0 [ 186.129709][ C1] seq=240761225 ack=1315048430+(0) sack=1315048430+(0) win=24576 end=240761226 [ 186.136421][ C0] tcp_in_window: [ 186.143922][ C1] tcp_in_window: sender end=240761226 maxend=243906057 maxwin=3224792 scale=7 receiver end=1315073654 maxend=1318194158 maxwin=3144832 scale=7 [ 186.148926][ C0] seq=4294967295 ack=0+(0) sack=0+(0) win=65495 end=4294967295 [ 186.154193][ C1] tcp_in_window: [ 186.158653][ C0] tcp_in_window: sender end=0 maxend=65495 maxwin=65495 scale=0 receiver end=0 maxend=65495 maxwin=65495 scale=0 [ 186.164921][ C1] seq=240761225 ack=1315048430+(0) sack=1315048430+(0) win=24576 end=240761226 [ 186.169345][ C0] tcp_in_window: I=1 II=1 III=1 IV=1 [ 186.174280][ C1] tcp_in_window: sender end=240761226 maxend=243906057 maxwin=3224792 scale=7 receiver end=1315073654 maxend=1318194158 maxwin=3144832 scale=7 [ 186.174310][ C1] tcp_in_window: I=1 II=1 III=1 IV=1 [ 186.174323][ C1] tcp_in_window: res=1 sender end=240761226 maxend=243906057 maxwin=3224792 receiver end=1315073654 maxend=1318194158 maxwin=3144832 [ 186.182748][ C0] tcp_in_window: res=1 sender end=0 maxend=65495 maxwin=65495 receiver end=0 maxend=65495 maxwin=65495 [ 186.187556][ C1] tcp_conntracks: [ 186.193976][ C0] tcp_conntracks: [ 186.198570][ C1] syn=0 ack=1 fin=1 rst=0 old=4 new=6 [ 186.205525][ C0] syn=0 ack=1 fin=0 rst=0 old=3 new=3 [ 186.212853][ C1] tcp_conntracks: [ 186.223096][ T5220] Bluetooth: hci4: command 0x0406 tx timeout [ 186.223628][ C1] syn=0 ack=0 fin=0 rst=1 old=6 new=8 [ 186.235284][ T4197] hci4 cmd_cnt 1 cmd queued 0 [ 186.262335][ T5370] nf_conntrack: new packet for ffff888077f80480 [ 186.361397][ T7992] kcov: kcov_start: t = ffff88801f03d940, size = 524288, area = ffffc9000c921000 [ 186.374440][ T5370] nf_nat: Already setup manip DST for ct ffff888077f80480 (status bits 0x188) [ 186.389224][ T7991] kcov: kcov_start: t = ffff88801f03bb80, size = 524288, area = ffffc9000deb9000 [ 186.393507][ T5370] nf_nat: Already setup manip SRC for ct ffff888077f80480 (status bits 0x188) [ 186.427674][ T7938] kcov: kcov_task_exit: t = ffff88805bc20000, kcov->t = ffff88805bc20000 [ 186.431701][ C1] nf_conntrack: new packet for ffff888070520d80 [ 186.449551][ T7994] kcov: kcov_start: t = ffff88802a7b5940, size = 524288, area = ffffc9000eebd000 [ 186.453979][ C1] nf_nat: Already setup manip DST for ct ffff888070520d80 (status bits 0x188) [ 186.500272][ T3849] lapb19: bond_netdev_event received NETDEV_PRE_UP [ 186.503889][ C1] nf_nat: Already setup manip SRC for ct ffff888070520d80 (status bits 0x188) [ 186.508290][ T3849] net lapb19: siw: event 14 [ 186.522670][ T5377] Bluetooth: hci2: command 0x0406 tx timeout [ 186.534996][ T7991] configfs: configfs tcm.usb0: dropping attrs for dir [ 186.539920][ T5371] nf_conntrack: new packet for ffff888077f81080 [ 186.543686][ T4197] hci2 cmd_cnt 1 cmd queued 0 [ 186.549428][ T5371] nf_nat: Already setup manip DST for ct ffff888077f81080 (status bits 0x188) [ 186.558978][ C0] wireguard: wg0: Handshake for peer 44 ([::1]:20003/0%0) did not complete after 5 seconds, retrying (try 6) [ 186.561689][ T5371] nf_nat: Already setup manip SRC for ct ffff888077f81080 (status bits 0x188) [ 186.566329][ T154] nf_conntrack: new packet for ffff888076b0bb00 [ 186.574513][ T4171] No more buffers in queue [ 186.575375][ T154] nf_nat: Already setup manip DST for ct ffff888076b0bb00 (status bits 0x188) [ 186.587474][ T4171] eth0: xmit ffff88801fbdad68 42:01:0a:80:00:01 [ 186.596500][ T154] nf_nat: Already setup manip SRC for ct ffff888076b0bb00 (status bits 0x188) [ 186.600402][ T4171] Added buffer head 6 to ffff888147cc2d00 [ 186.608089][ C1] virtqueue callback for ffff888147cc2d00 (ffffffff854980c0) [ 186.608109][ C1] virtqueue callback for ffff888147cc2c00 (ffffffff85497fd0) [ 186.669234][ T3849] lapb19: bond_netdev_event received NETDEV_UP [ 186.680220][ C1] Sent skb ffff88801fbdad68 [ 186.680240][ C1] No more buffers in queue [ 186.718446][ T3849] net lapb19: siw: event 1 [ 186.721543][ C1] No more buffers in queue [ 186.729233][ T13] nf_conntrack: normal packet for ffff888070521980 [ 186.734366][ C1] Receiving skb proto 0x0800 len 40 type 0 [ 186.754991][ C0] virtqueue callback for ffff88801ee44900 (ffffffff84450960) [ 186.763414][ C1] No more buffers in queue [ 186.767078][ C0] virtqueue interrupt with no work for ffff88801ee44800 [ 186.781739][ C1] tcp_conntracks: [ 186.789176][ C0] virtqueue interrupt with no work for ffff88801ee44700 [ 186.789470][ T5220] Added buffer head 0 to ffff88801ee44900 [ 186.792806][ C1] syn=0 ack=0 fin=0 rst=1 old=8 new=8 [ 186.834443][ T7991] configfs: o tcm.usb0 removing done (3) [ 186.844054][ T4171] nf_conntrack: normal packet for ffff88801fc40300 [ 186.855699][ T5220] nf_conntrack: normal packet for ffff88801959f980 [ 186.866597][ T4171] tcp_in_window: START [ 186.869727][ T7988] kcov: kcov_start: t = ffff8880219b3b80, size = 524288, area = ffffc9000e2ba000 [ 186.872548][ T4171] tcp_in_window: [ 186.884415][ T7987] kcov: kcov_start: t = ffff88802b2ebb80, size = 524288, area = ffffc90003d73000 [ 186.887936][ T4171] seq=1315073654 ack=240761226+(0) sack=240761226+(0) win=24569 end=1315073654 [ 186.904611][ T7992] kcov: kcov_task_exit: t = ffff88801f03d940, kcov->t = ffff88801f03d940 [ 186.904639][ T4171] tcp_in_window: sender end=1315073654 maxend=1318194158 maxwin=3144832 scale=7 receiver end=240761226 maxend=243906057 maxwin=3224792 scale=7 [ 186.925998][ T7994] kcov: kcov_task_exit: t = ffff88802a7b5940, kcov->t = ffff88802a7b5940 [ 186.929694][ T4171] tcp_in_window: [ 186.955840][ T7995] kcov: kcov_start: t = ffff888024dd5940, size = 524288, area = ffffc90010ec2000 [ 186.956894][ T4171] seq=1315073654 ack=240761226+(0) sack=240761226+(0) win=24569 end=1315073654 [ 187.009339][ T7987] kcov: kcov_task_exit: t = ffff88802b2ebb80, kcov->t = ffff88802b2ebb80 [ 187.015482][ T4171] tcp_in_window: sender end=1315073654 maxend=1318194158 maxwin=3144832 scale=7 receiver end=240761226 maxend=243906057 maxwin=3224792 scale=7 [ 187.028543][ T7991] config_item tcm.usb0: cleaning up [ 187.035356][ T4171] tcp_in_window: I=1 II=1 III=1 IV=1 [ 187.035378][ T4171] tcp_in_window: res=1 sender end=1315073654 maxend=1318194158 maxwin=3144832 receiver end=240761226 maxend=243906058 maxwin=3224792 [ 187.063745][ T7988] kcov: kcov_task_exit: t = ffff8880219b3b80, kcov->t = ffff8880219b3b80 [ 187.066520][ T4171] tcp_conntracks: [ 187.099208][ T7989] kcov: kcov_task_exit: t = ffff88801f038000, kcov->t = ffff88801f038000 [ 187.103785][ T4171] syn=0 ack=1 fin=0 rst=0 old=8 new=8 [ 187.131913][ T7995] kcov: kcov_task_exit: t = ffff888024dd5940, kcov->t = ffff888024dd5940 [ 187.140009][ T7991] kcov: kcov_task_exit: t = ffff88801f03bb80, kcov->t = ffff88801f03bb80 [ 187.393752][ T5371] nf_conntrack: new packet for ffff888077f80480 [ 187.398861][ T7981] kcov: kcov_task_exit: t = ffff88804cff9dc0, kcov->t = ffff88804cff9dc0 [ 187.400101][ T5371] nf_nat: Already setup manip DST for ct ffff888077f80480 (status bits 0x188) [ 187.417912][ T5371] nf_nat: Already setup manip SRC for ct ffff888077f80480 (status bits 0x188) [ 187.428585][ T4171] No more buffers in queue [ 187.433068][ T4171] eth0: xmit ffff888062572dc0 42:01:0a:80:00:01 [ 187.439365][ T4171] Added buffer head 6 to ffff888147cc2d00 [ 187.445098][ C1] virtqueue callback for ffff888147cc2d00 (ffffffff854980c0) [ 187.445130][ C1] virtqueue callback for ffff888147cc2c00 (ffffffff85497fd0) [ 187.460174][ C1] Sent skb ffff888062572dc0 [ 187.464882][ C1] No more buffers in queue [ 187.469355][ C1] No more buffers in queue [ 187.473818][ C1] Receiving skb proto 0x0800 len 40 type 0 [ 187.480508][ C1] No more buffers in queue [ 187.484961][ C1] tcp_conntracks: [ 187.484979][ C1] syn=0 ack=0 fin=0 rst=1 old=8 new=8 [ 187.499455][ T4170] tcp_in_window: START [ 187.503657][ T4170] tcp_in_window: [ 187.503674][ T4170] seq=52968477 ack=1787818776+(0) sack=1787818776+(0) win=501 end=52968593 [ 187.505488][ T4183] kcov: kcov_task_exit: t = ffff88801b99d940, kcov->t = ffff88801b99d940 [ 187.507329][ T4170] tcp_in_window: sender end=52968477 maxend=53032605 maxwin=64768 scale=7 receiver end=1787818776 maxend=1787882904 maxwin=65408 scale=7 [ 187.516042][ C1] nf_conntrack: new packet for ffff888070520d80 [ 187.524421][ T4170] tcp_in_window: [ 187.538445][ C1] nf_nat: Already setup manip DST for ct ffff888070520d80 (status bits 0x188) [ 187.545125][ T4170] seq=52968477 ack=1787818776+(0) sack=1787818776+(0) win=501 end=52968593 [ 187.548762][ C1] nf_nat: Already setup manip SRC for ct ffff888070520d80 (status bits 0x188) [ 187.557667][ T4170] tcp_in_window: sender end=52968477 maxend=53032605 maxwin=64768 scale=7 receiver end=1787818776 maxend=1787882904 maxwin=65408 scale=7 [ 187.566576][ T5447] kcov: kcov_task_exit: t = ffff88807d4d9dc0, kcov->t = ffff88807d4d9dc0 [ 187.575583][ T4170] tcp_in_window: I=1 II=1 III=1 IV=1 [ 187.590708][ T7350] kcov: kcov_task_exit: t = ffff88807d769dc0, kcov->t = ffff88807d769dc0 [ 187.598270][ T4170] tcp_in_window: res=1 sender end=52968593 maxend=53032605 maxwin=64768 receiver end=1787818776 maxend=1787882904 maxwin=65408 [ 187.603643][ T4738] kcov: kcov_task_exit: t = ffff888020df5940, kcov->t = ffff888020df5940 [ 187.612478][ T4170] tcp_conntracks: [ 187.625948][ T4181] kcov: kcov_task_exit: t = ffff888079651dc0, kcov->t = ffff888079651dc0 [ 187.633989][ T4170] syn=0 ack=1 fin=0 rst=0 old=3 new=3 [ 187.658802][ T5370] nf_conntrack: new packet for ffff888077f81080 [ 187.665121][ T5370] nf_nat: Already setup manip DST for ct ffff888077f81080 (status bits 0x188) [ 187.674310][ T5370] nf_nat: Already setup manip SRC for ct ffff888077f81080 (status bits 0x188) [ 187.679077][ C0] nf_conntrack: normal packet for ffff888076b0b200 [ 187.690744][ C0] tcp_in_window: START [ 187.696033][ C0] tcp_in_window: [ 187.696048][ C0] seq=1612962947 ack=1145258562+(0) sack=1145258562+(0) win=64240 end=1612962948 [ 187.708806][ C0] tcp_in_window: sender end=1612962948 maxend=1612962948 maxwin=64240 scale=7 receiver end=1145258562 maxend=1145322802 maxwin=1 scale=14 [ 187.722909][ C0] tcp_in_window: [ 187.722927][ C0] seq=1612962947 ack=1145258562+(0) sack=1145258562+(0) win=64240 end=1612962948 [ 187.735764][ C0] tcp_in_window: sender end=1612962948 maxend=1612962948 maxwin=64240 scale=7 receiver end=1145258562 maxend=1145322802 maxwin=1 scale=14 [ 187.749873][ C0] tcp_in_window: I=1 II=1 III=1 IV=1 [ 187.755187][ C0] virtqueue callback for ffff88801ee44900 (ffffffff84450960) [ 187.755248][ C0] virtqueue interrupt with no work for ffff88801ee44800 [ 187.755259][ C0] virtqueue interrupt with no work for ffff88801ee44700 [ 187.777069][ C0] tcp_in_window: res=1 sender end=1612962948 maxend=1612962948 maxwin=64240 receiver end=1145258562 maxend=1145322802 maxwin=1 [ 187.790295][ C0] tcp_conntracks: [ 187.790312][ C0] syn=1 ack=1 fin=0 rst=0 old=2 new=2 [ 187.811443][ T5220] Added buffer head 0 to ffff88801ee44900 [ 187.821012][ C0] net_ratelimit: 44 callbacks suppressed [ 187.821030][ C0] wireguard: wg1: Receiving keepalive packet from peer 57 ([::1]:20001/0%0) [ 187.828997][ C1] wireguard: wg0: Handshake for peer 20 ([::1]:20003/0%0) did not complete after 5 seconds, retrying (try 8) [ 187.847592][ T4711] wireguard: wg0: Sending handshake initiation to peer 20 ([::1]:20003/0%0) [ 187.879546][ T4711] nf_conntrack: new packet for ffff888076b0ad80 [ 187.885853][ T4711] nf_nat: Already setup manip DST for ct ffff888076b0ad80 (status bits 0x188) [ 187.894837][ T4711] nf_nat: Already setup manip SRC for ct ffff888076b0ad80 (status bits 0x188) SYZFAIL: failed to send rpc fd=3 want=56 sent=0 n=-1 (errno 32: Broken pipe) [ 187.961486][ T4170] No more buffers in queue [ 187.965951][ T4170] eth0: xmit ffff88801fbdb268 42:01:0a:80:00:01 [ 187.972355][ T4170] Added buffer head 6 to ffff888147cc2d00 [ 187.972385][ C1] virtqueue callback for ffff888147cc2d00 (ffffffff854980c0) [ 187.978107][ C1] virtqueue callback for ffff888147cc2c00 (ffffffff85497fd0) [ 187.993259][ C1] Sent skb ffff88801fbdb268 [ 187.997780][ C1] No more buffers in queue [ 188.002360][ C1] No more buffers in queue [ 188.006848][ C1] Receiving skb proto 0x0800 len 52 type 0 [ 188.013043][ C1] No more buffers in queue [ 188.018276][ C1] nf_conntrack: normal packet for ffff88801fc40180 [ 188.025126][ C1] tcp_in_window: START [ 188.029212][ C1] tcp_in_window: [ 188.029227][ C1] seq=1787818776 ack=52968593+(0) sack=52968593+(0) win=501 end=1787818776 [ 188.042364][ C1] tcp_in_window: sender end=1787818776 maxend=1787882904 maxwin=65408 scale=7 receiver end=52968593 maxend=53032605 maxwin=64768 scale=7 [ 188.056489][ C1] tcp_in_window: [ 188.056507][ C1] seq=1787818776 ack=52968593+(0) sack=52968593+(0) win=501 end=1787818776 [ 188.068908][ C1] tcp_in_window: sender end=1787818776 maxend=1787882904 maxwin=65408 scale=7 receiver end=52968593 maxend=53032605 maxwin=64768 scale=7 [ 188.082986][ C1] tcp_in_window: I=1 II=1 III=1 IV=1 [ 188.088293][ C1] tcp_in_window: res=1 sender end=1787818776 maxend=1787882904 maxwin=65408 receiver end=52968593 maxend=53032721 maxwin=64768 [ 188.101719][ C1] tcp_conntracks: [ 188.101738][ C1] syn=0 ack=1 fin=0 rst=0 old=3 new=3 [ 188.132736][ T7541] ffff88805dd3c000 name hci1 bus 0 [ 188.169720][ T4170] tcp_in_window: START [ 188.173849][ T4170] tcp_in_window: [ 188.173864][ T4170] seq=52968593 ack=1787818776+(0) sack=1787818776+(0) win=501 end=52968645 [ 188.187415][ T4170] tcp_in_window: sender end=52968593 maxend=53032721 maxwin=64768 scale=7 receiver end=1787818776 maxend=1787882904 maxwin=65408 scale=7 [ 188.201827][ T4170] tcp_in_window: [ 188.201840][ T4170] seq=52968593 ack=1787818776+(0) sack=1787818776+(0) win=501 end=52968645 [ 188.215151][ T4170] tcp_in_window: sender end=52968593 maxend=53032721 maxwin=64768 scale=7 receiver end=1787818776 maxend=1787882904 maxwin=65408 scale=7 [ 188.229162][ T4170] tcp_in_window: I=1 II=1 III=1 IV=1 [ 188.234456][ T4170] tcp_in_window: res=1 sender end=52968645 maxend=53032721 maxwin=64768 receiver end=1787818776 maxend=1787882904 maxwin=65408 [ 188.247780][ T4170] tcp_conntracks: [ 188.247797][ T4170] syn=0 ack=1 fin=0 rst=0 old=3 new=3 [ 188.258216][ T3849] lapb20: bond_netdev_event received NETDEV_PRE_UP [ 188.265030][ T7541] hci1 ffff88805dd3c000 [ 188.274036][ T7541] hci1: err 0x13 [ 188.277637][ T7541] hci1: cancelling interleave scan [ 188.290221][ T3849] net lapb20: siw: event 14 [ 188.295102][ T3849] lapb20: bond_netdev_event received NETDEV_UP [ 188.311181][ T7541] hci1 state 0 -> 0 [ 188.315036][ T7541] All LE pending actions cleared [ 188.330287][ T7541] hdev hci1 [ 188.330676][ T3849] net lapb20: siw: event 1 [ 188.333676][ T7541] hcon ffff88807475c000 reason 22 [ 188.350508][ T5393] ffff88807b4d8000 name hci3 bus 0 [ 188.370074][ T7541] hcon ffff88807475c000 conn ffff88806072f800, err 103 [ 188.377115][ T7541] hci1 hcon ffff88807475c000 chan ffff88805be5b100 [ 188.384085][ T5393] hci3 ffff88807b4d8000 [ 188.388553][ T5393] hci3: err 0x13 [ 188.394188][ T5393] hci3: cancelling interleave scan [ 188.400348][ T5393] hci3 state 0 -> 0 [ 188.404507][ T5393] All LE pending actions cleared [ 188.410060][ T5393] hdev hci3 [ 188.413445][ T4170] No more buffers in queue [ 188.417897][ T4170] eth0: xmit ffff88801fbdb4e8 42:01:0a:80:00:01 [ 188.424801][ T4170] Added buffer head 17 to ffff888147cc2b00 [ 188.424833][ C0] virtqueue callback for ffff888147cc2b00 (ffffffff854980c0) [ 188.424945][ C1] virtqueue callback for ffff888147cc2c00 (ffffffff85497fd0) [ 188.430774][ C0] Sent skb ffff88801fbdb4e8 [ 188.438030][ C1] No more buffers in queue [ 188.445359][ C0] No more buffers in queue [ 188.449998][ C1] Receiving skb proto 0x0800 len 52 type 0 [ 188.455317][ T7541] hci1 hcon ffff88807475c000 handle 201 [ 188.458770][ C1] No more buffers in queue [ 188.464933][ T5393] hcon ffff88807a152000 reason 22 [ 188.470932][ C1] nf_conntrack: normal packet for ffff88801fc40180 [ 188.478301][ T4170] tcp_in_window: START [ 188.490935][ T4170] tcp_in_window: [ 188.490944][ T4170] seq=52968645 ack=1787818776+(0) sack=1787818776+(0) win=501 end=52968717 [ 188.505088][ T4170] tcp_in_window: sender end=52968645 maxend=53032721 maxwin=64768 scale=7 receiver end=1787818776 maxend=1787882904 maxwin=65408 scale=7 [ 188.519654][ T4170] tcp_in_window: [ 188.519667][ T4170] seq=52968645 ack=1787818776+(0) sack=1787818776+(0) win=501 end=52968717 [ 188.531862][ T4170] tcp_in_window: sender end=52968645 maxend=53032721 maxwin=64768 scale=7 receiver end=1787818776 maxend=1787882904 maxwin=65408 scale=7 [ 188.546042][ T4170] tcp_in_window: I=1 II=1 III=1 IV=1 [ 188.551451][ T4170] tcp_in_window: res=1 sender end=52968717 maxend=53032721 maxwin=64768 receiver end=1787818776 maxend=1787882904 maxwin=65408 [ 188.565505][ T4170] tcp_conntracks: [ 188.565518][ T4170] syn=0 ack=1 fin=0 rst=0 old=3 new=3 [ 188.576305][ C1] tcp_in_window: START [ 188.577879][ T7541] hcon ffff88807475c000 [ 188.580952][ C1] tcp_in_window: [ 188.580963][ C1] seq=1787818776 ack=52968645+(0) sack=52968645+(0) win=501 end=1787818776 [ 188.580983][ C1] tcp_in_window: sender end=1787818776 maxend=1787882904 maxwin=65408 scale=7 receiver end=52968717 maxend=53032721 maxwin=64768 scale=7 [ 188.581004][ C1] tcp_in_window: [ 188.581012][ C1] seq=1787818776 ack=52968645+(0) sack=52968645+(0) win=501 end=1787818776 [ 188.581032][ C1] tcp_in_window: sender end=1787818776 maxend=1787882904 maxwin=65408 scale=7 receiver end=52968717 maxend=53032721 maxwin=64768 scale=7 [ 188.581055][ C1] tcp_in_window: I=1 II=1 III=1 IV=1 [ 188.581069][ C1] tcp_in_window: res=1 sender end=1787818776 maxend=1787882904 maxwin=65408 receiver end=52968717 maxend=53032773 maxwin=64768 [ 188.587537][ T5393] hcon ffff88807a152000 conn ffff8880221ae000, err 103 [ 188.589862][ C1] tcp_conntracks: [ 188.598457][ T5393] hci3 hcon ffff88807a152000 chan ffff888024f04500 [ 188.614253][ C1] syn=0 ack=1 fin=0 rst=0 old=3 new=3 [ 188.614616][ C1] wireguard: wg0: Sending keepalive packet to peer 19 ([::1]:20002/0%0) [ 188.657452][ T4170] No more buffers in queue [ 188.660224][ C1] wireguard: wg0: Sending keepalive packet to peer 37 ([::1]:20002/0%0) [ 188.668263][ T4170] eth0: xmit ffff88801fbdb768 42:01:0a:80:00:01 [ 188.672266][ C1] nf_conntrack: new packet for ffff888070520d80 [ 188.679375][ T4170] Added buffer head 17 to ffff888147cc2b00 [ 188.684914][ C0] virtqueue callback for ffff888147cc2b00 (ffffffff854980c0) [ 188.684914][ C1] virtqueue callback for ffff888147cc2c00 (ffffffff85497fd0) [ 188.684953][ C1] nf_nat: Already setup manip DST for ct ffff888070520d80 (status bits 0x188) [ 188.693618][ C0] Sent skb ffff88801fbdb768 [ 188.697948][ C1] nf_nat: Already setup manip SRC for ct ffff888070520d80 (status bits 0x188) [ 188.707418][ C0] No more buffers in queue [ 188.713839][ C1] virtqueue callback for ffff888147cc2c00 (ffffffff85497fd0) [ 188.723549][ C0] nf_conntrack: normal packet for ffff888076b0b200 [ 188.726178][ C1] wireguard: wg0: Sending keepalive packet to peer 43 ([::1]:20002/0%0) [ 188.734173][ C0] tcp_in_window: START [ 188.742529][ C1] wireguard: wg0: Sending keepalive packet to peer 55 ([::1]:20002/0%0) [ 188.751452][ C0] tcp_in_window: [ 188.755963][ C0] virtqueue callback for ffff88801ee44900 (ffffffff84450960) [ 188.756005][ C0] virtqueue interrupt with no work for ffff88801ee44800 [ 188.756015][ C0] virtqueue interrupt with no work for ffff88801ee44700 [ 188.756504][ C1] No more buffers in queue [ 188.764970][ C0] seq=1612962947 ack=1145258562+(0) sack=1145258562+(0) win=64240 end=1612962948 [ 188.770712][ C1] Receiving skb proto 0x0800 len 52 type 0 [ 188.778042][ C0] tcp_in_window: sender end=1612962948 maxend=1612962948 maxwin=64240 scale=7 receiver end=1145258562 maxend=1145322802 maxwin=1 scale=14 [ 188.784961][ C1] Receiving skb proto 0x0800 len 88 type 0 [ 188.793784][ C0] tcp_in_window: [ 188.797889][ C1] Receiving skb proto 0x0800 len 112 type 0 [ 188.806214][ C0] seq=1612962947 ack=1145258562+(0) sack=1145258562+(0) win=64240 end=1612962948 [ 188.809944][ C1] Receiving skb proto 0x0800 len 52 type 0 [ 188.817183][ C0] tcp_in_window: sender end=1612962948 maxend=1612962948 maxwin=64240 scale=7 receiver end=1145258562 maxend=1145322802 maxwin=1 scale=14 [ 188.824128][ C1] Receiving skb proto 0x0800 len 52 type 0 [ 188.831048][ C0] tcp_in_window: I=1 II=1 III=1 IV=1 [ 188.835444][ C1] No more buffers in queue [ 188.845851][ C0] tcp_in_window: res=1 sender end=1612962948 maxend=1612962948 maxwin=64240 receiver end=1145258562 maxend=1145322802 maxwin=1 [ 188.852320][ C1] nf_conntrack: normal packet for ffff88801fc40180 [ 188.866786][ C0] tcp_conntracks: [ 188.872611][ C1] tcp_in_window: START [ 188.876620][ C0] syn=1 ack=1 fin=0 rst=0 old=2 new=2 [ 188.882828][ C1] tcp_in_window: [ 188.894523][ T4292] Added buffer head 0 to ffff88801ee44900 [ 188.899520][ C1] seq=1787818776 ack=52968717+(0) sack=52968717+(0) win=501 end=1787818776 [ 188.929673][ C1] virtqueue callback for ffff888147cc2c00 (ffffffff85497fd0) [ 188.952554][ T7541] hci1: conn ffff88807475c000 [ 188.953676][ C1] tcp_in_window: sender end=1787818776 maxend=1787882904 maxwin=65408 scale=7 receiver end=52968717 maxend=53032773 maxwin=64768 scale=7 [ 188.957997][ T7541] device: 'hci1:201': device_unregister [ 188.963589][ C1] tcp_in_window: [ 188.967733][ T7541] kernfs runtime_status: removing [ 188.972927][ C1] seq=1787818776 ack=52968717+(0) sack=52968717+(0) win=501 end=1787818776 [ 188.981957][ T7541] kernfs control: removing [ 188.989021][ C1] tcp_in_window: sender end=1787818776 maxend=1787882904 maxwin=65408 scale=7 receiver end=52968717 maxend=53032773 maxwin=64768 scale=7 [ 188.993935][ T7541] kernfs runtime_suspended_time: removing [ 189.007750][ C1] tcp_in_window: I=1 II=1 III=1 IV=1 [ 189.013593][ T7541] kernfs runtime_active_time: removing [ 189.016994][ C1] tcp_in_window: res=1 sender end=1787818776 maxend=1787882904 maxwin=65408 receiver end=52968717 maxend=53032845 maxwin=64768 [ 189.022191][ T7541] kernfs autosuspend_delay_ms: removing [ 189.030620][ C1] tcp_conntracks: [ 189.030630][ C1] syn=0 ack=1 fin=0 rst=0 old=3 new=3 [ 189.035348][ T7541] kernfs power: removing [ 189.049290][ C1] nf_conntrack: normal packet for ffff88801fc40180 [ 189.055247][ T7541] kernfs device: removing [ 189.060302][ C1] tcp_in_window: START [ 189.066281][ T7541] kernfs subsystem: removing [ 189.080220][ C1] tcp_in_window: [ 189.080237][ C1] seq=1787818776 ack=52968717+(0) sack=52968717+(0) win=501 end=1787818812 [ 189.086239][ T7541] kernfs hci1:201: removing [ 189.089481][ C1] tcp_in_window: sender end=1787818776 maxend=1787882904 maxwin=65408 scale=7 receiver end=52968717 maxend=53032845 maxwin=64768 scale=7 [ 189.095078][ T7541] kernfs uevent: removing [ 189.099092][ C1] tcp_in_window: [ 189.105734][ T7541] PM: Removing info for No Bus:hci1:201 [ 189.109901][ C1] seq=1787818776 ack=52968717+(0) sack=52968717+(0) win=501 end=1787818812 [ 189.115641][ T7541] kobject: 'hci1:201' (ffff88807475c420): kobject_uevent_env [ 189.119863][ C1] tcp_in_window: sender end=1787818776 maxend=1787882904 maxwin=65408 scale=7 receiver end=52968717 maxend=53032845 maxwin=64768 scale=7 [ 189.123980][ T7541] kobject: 'hci1:201' (ffff88807475c420): fill_kobj_path: path = '/devices/virtual/bluetooth/hci1/hci1:201' [ 189.132258][ C1] tcp_in_window: I=1 II=1 III=1 IV=1 [ 189.139428][ T7541] kernfs hci1:201: removing [ 189.150730][ C1] tcp_in_window: res=1 sender end=1787818812 maxend=1787882904 maxwin=65408 receiver end=52968717 maxend=53032845 maxwin=64768 [ 189.189062][ T7541] kobject: 'hci1:201' (ffff88807475c420): kobject_cleanup, parent 0000000000000000 [ 189.194505][ C1] tcp_conntracks: [ 189.239732][ C1] syn=0 ack=1 fin=0 rst=0 old=3 new=3 [ 189.248858][ C1] nf_conntrack: normal packet for ffff88801fc40180 [ 189.250506][ T7541] kobject: 'hci1:201' (ffff88807475c420): calling ktype release [ 189.255748][ C1] tcp_in_window: START [ 189.268016][ C1] tcp_in_window: [ 189.268032][ C1] seq=1787818812 ack=52968717+(0) sack=52968717+(0) win=501 end=1787818872 [ 189.280311][ C1] tcp_in_window: sender end=1787818812 maxend=1787882904 maxwin=65408 scale=7 receiver end=52968717 maxend=53032845 maxwin=64768 scale=7 [ 189.290219][ T7541] kobject: 'hci1:201': free name [ 189.294505][ C1] tcp_in_window: [ 189.299492][ C1] seq=1787818812 ack=52968717+(0) sack=52968717+(0) win=501 end=1787818872 [ 189.311746][ C1] tcp_in_window: sender end=1787818812 maxend=1787882904 maxwin=65408 scale=7 receiver end=52968717 maxend=53032845 maxwin=64768 scale=7 [ 189.319023][ T7541] hci1 orig refcnt 10 [ 189.325768][ C1] tcp_in_window: I=1 II=1 III=1 IV=1 [ 189.325783][ C1] tcp_in_window: res=1 sender end=1787818872 maxend=1787882904 maxwin=65408 receiver end=52968717 maxend=53032845 maxwin=64768 [ 189.325806][ C1] tcp_conntracks: [ 189.325812][ C1] syn=0 ack=1 fin=0 rst=0 old=3 new=3 [ 189.325840][ C1] nf_conntrack: normal packet for ffff88801fc40180 [ 189.325856][ C1] tcp_in_window: START [ 189.341057][ T4186] ffff8880790d8000 name hci2 bus 0 [ 189.348598][ C1] tcp_in_window: [ 189.373520][ C1] seq=1787818872 ack=52968717+(0) sack=52968717+(0) win=501 end=1787818873 [ 189.385781][ C1] virtqueue callback for ffff888147cc2c00 (ffffffff85497fd0) [ 189.388031][ T4186] hci2 ffff8880790d8000 [ 189.394030][ C1] tcp_in_window: sender end=1787818872 maxend=1787882904 maxwin=65408 scale=7 receiver end=52968717 maxend=53032845 maxwin=64768 scale=7 [ 189.394061][ C1] tcp_in_window: [ 189.394068][ C1] seq=1787818872 ack=52968717+(0) sack=52968717+(0) win=501 end=1787818873 [ 189.394090][ C1] tcp_in_window: sender end=1787818872 maxend=1787882904 maxwin=65408 scale=7 receiver end=52968717 maxend=53032845 maxwin=64768 scale=7 [ 189.394113][ C1] tcp_in_window: I=1 II=1 III=1 IV=1 [ 189.394127][ C1] tcp_in_window: res=1 sender end=1787818873 maxend=1787882904 maxwin=65408 receiver end=52968717 maxend=53032845 maxwin=64768 [ 189.400794][ T4186] hci2: err 0x13 [ 189.412288][ C1] tcp_conntracks: [ 189.412305][ C1] syn=0 ack=1 fin=1 rst=0 old=3 new=4 [ 189.412333][ C1] nf_conntrack: normal packet for ffff88801fc40180 [ 189.412347][ C1] tcp_in_window: START [ 189.412353][ C1] tcp_in_window: [ 189.412359][ C1] seq=1787818872 ack=52968717+(0) sack=52968717+(0) win=501 end=1787818873 [ 189.412394][ C1] tcp_in_window: sender end=1787818873 maxend=1787882904 maxwin=65408 scale=7 receiver end=52968717 maxend=53032845 maxwin=64768 scale=7 [ 189.412417][ C1] tcp_in_window: [ 189.412424][ C1] seq=1787818872 ack=52968717+(0) sack=52968717+(0) win=501 end=1787818873 [ 189.429062][ T4186] hci2: cancelling interleave scan [ 189.439211][ C1] tcp_in_window: sender end=1787818873 maxend=1787882904 maxwin=65408 scale=7 receiver end=52968717 maxend=53032845 maxwin=64768 scale=7 [ 189.439243][ C1] tcp_in_window: I=1 II=1 III=1 IV=1 [ 189.439255][ C1] tcp_in_window: res=1 sender end=1787818873 maxend=1787882904 maxwin=65408 receiver end=52968717 maxend=53032845 maxwin=64768 [ 189.439277][ C1] tcp_conntracks: [ 189.439285][ C1] syn=0 ack=1 fin=1 rst=0 old=4 new=6 [ 189.439465][ C1] tcp_in_window: START [ 189.455847][ C0] virtqueue callback for ffff888147cc2a00 (ffffffff85497fd0) [ 189.457748][ C1] tcp_in_window: [ 189.461292][ C0] No more buffers in queue [ 189.464981][ C1] seq=52968717 ack=1787818812+(0) sack=1787818812+(0) win=501 end=52968717 [ 189.470382][ C0] Receiving skb proto 0x0806 len 28 type 1 [ 189.476816][ C1] tcp_in_window: sender end=52968717 maxend=53032845 maxwin=64768 scale=7 receiver end=1787818873 maxend=1787882904 maxwin=65408 scale=7 [ 189.480881][ C0] No more buffers in queue [ 189.484488][ C1] tcp_in_window: [ 189.493183][ C0] No more buffers in queue [ 189.507013][ C1] seq=52968717 ack=1787818812+(0) sack=1787818812+(0) win=501 end=52968717 [ 189.510643][ C0] eth0: xmit ffff88807b3c9a00 42:01:0a:80:00:01 [ 189.519213][ C1] tcp_in_window: sender end=52968717 maxend=53032845 maxwin=64768 scale=7 receiver end=1787818873 maxend=1787882904 maxwin=65408 scale=7 [ 189.524306][ C0] Added buffer head 17 to ffff888147cc2b00 [ 189.538492][ C0] virtqueue callback for ffff888147cc2b00 (ffffffff854980c0) [ 189.538489][ C1] tcp_in_window: I=1 II=1 III=1 IV=1 [ 189.538513][ C1] tcp_in_window: res=1 sender end=52968717 maxend=53032845 maxwin=64768 receiver end=1787818873 maxend=1787882940 maxwin=65408 [ 189.689602][ C1] tcp_conntracks: [ 189.689615][ C1] syn=0 ack=1 fin=0 rst=0 old=6 new=7 [ 189.699303][ C1] No more buffers in queue [ 189.704049][ C1] eth0: xmit ffff888062370b40 42:01:0a:80:00:01 [ 189.710310][ C1] Added buffer head 6 to ffff888147cc2d00 [ 189.716024][ C1] virtqueue callback for ffff888147cc2d00 (ffffffff854980c0) [ 189.724123][ C1] tcp_in_window: START [ 189.724158][ C0] wireguard: wg0: Sending keepalive packet to peer 44 ([::1]:20003/0%0) [ 189.728628][ C1] tcp_in_window: [ 189.736979][ C1] seq=52968717 ack=1787818872+(0) sack=1787818872+(0) win=501 end=52968717 [ 189.737217][ C0] Sent skb ffff88807b3c9a00 [ 189.740869][ C1] tcp_in_window: sender end=52968717 maxend=53032845 maxwin=64768 scale=7 receiver end=1787818873 maxend=1787882940 maxwin=65408 scale=7 [ 189.749484][ C0] No more buffers in queue [ 189.753944][ C1] tcp_in_window: [ 189.767932][ C0] virtqueue callback for ffff88801ee44900 (ffffffff84450960) [ 189.772321][ C1] seq=52968717 ack=1787818872+(0) sack=1787818872+(0) win=501 end=52968717 [ 189.775964][ C0] virtqueue interrupt with no work for ffff88801ee44800 [ 189.783299][ C1] tcp_in_window: sender end=52968717 maxend=53032845 maxwin=64768 scale=7 receiver end=1787818873 maxend=1787882940 maxwin=65408 scale=7 [ 189.791852][ C0] virtqueue interrupt with no work for ffff88801ee44700 [ 189.792734][ C0] wireguard: wg0: Sending keepalive packet to peer 56 ([::1]:20003/0%0) [ 189.799628][ C1] tcp_in_window: I=1 II=1 III=1 IV=1 [ 189.815428][ T4292] Added buffer head 0 to ffff88801ee44900 [ 189.820629][ C1] tcp_in_window: res=1 sender end=52968717 maxend=53032845 maxwin=64768 receiver end=1787818873 maxend=1787883000 maxwin=65408 [ 189.855044][ C1] tcp_conntracks: [ 189.855057][ C1] syn=0 ack=1 fin=0 rst=0 old=7 new=7 [ 189.864810][ C1] Sent skb ffff888062370b40 [ 189.869423][ C1] No more buffers in queue [ 189.874529][ C1] eth0: xmit ffff8880623703c0 42:01:0a:80:00:01 [ 189.880879][ C1] Added buffer head 6 to ffff888147cc2d00 [ 189.887128][ C1] virtqueue callback for ffff888147cc2d00 (ffffffff854980c0) [ 189.895904][ T5393] hci3 hcon ffff88807a152000 handle 201 [ 189.897450][ T5370] nf_conntrack: new packet for ffff888077f80480 [ 189.907916][ T5370] nf_nat: Already setup manip DST for ct ffff888077f80480 (status bits 0x188) [ 189.909007][ T7541] hcon ffff88805e410000 reason 22 [ 189.917334][ T5370] nf_nat: Already setup manip SRC for ct ffff888077f80480 (status bits 0x188) [ 189.925760][ T5393] hcon ffff88807a152000 [ 189.933726][ T5377] nf_conntrack: new packet for ffff888077f81080 [ 189.935772][ T4186] hci2 state 0 -> 0 [ 189.941835][ T5377] nf_nat: Already setup manip DST for ct ffff888077f81080 (status bits 0x188) [ 189.954516][ T5377] nf_nat: Already setup manip SRC for ct ffff888077f81080 (status bits 0x188) [ 189.969030][ T4186] All LE pending actions cleared [ 189.974006][ T4186] hdev hci2 [ 189.977202][ T7541] hcon ffff88805e410000 conn ffff888060728800, err 103 [ 189.978508][ C1] wireguard: wg1: Sending keepalive packet to peer 21 ([::1]:20001/0%0) [ 189.989145][ T5220] nf_conntrack: new packet for ffff888076b0bb00 [ 189.992611][ C1] wireguard: wg1: Handshake for peer 46 (127.0.0.1:20003) did not complete after 5 seconds, retrying (try 9) [ 189.998738][ T5220] nf_nat: Already setup manip DST for ct ffff888076b0bb00 (status bits 0x188) [ 190.010701][ C1] nf_conntrack: new packet for ffff888070520d80 [ 190.019218][ T5220] nf_nat: Already setup manip SRC for ct ffff888076b0bb00 (status bits 0x188) [ 190.025537][ C1] nf_nat: Already setup manip DST for ct ffff888070520d80 (status bits 0x188) [ 190.034791][ T13] nf_conntrack: normal packet for ffff888070521980 [ 190.043261][ C1] nf_nat: Already setup manip SRC for ct ffff888070520d80 (status bits 0x188) [ 190.050422][ T4292] wireguard: wg2: No route to 127.0.0.1:20002, error -101 [ 190.059802][ C1] Sent skb ffff8880623703c0 [ 190.071220][ C1] No more buffers in queue [ 190.076085][ C1] No more buffers in queue [ 190.080663][ C1] Receiving skb proto 0x0800 len 148 type 0 [ 190.086583][ C1] Receiving skb proto 0x0800 len 148 type 0 [ 190.087842][ T4198] ffff88807dcd8000 name hci4 bus 0 [ 190.092502][ C1] No more buffers in queue [ 190.102056][ C1] nf_conntrack: normal packet for ffff88801fc40180 [ 190.109026][ T7541] hci1 hcon ffff88805e410000 chan ffff88805be5be00 [ 190.110081][ C1] tcp_in_window: START [ 190.120714][ C1] tcp_in_window: [ 190.120731][ C1] seq=1787818776 ack=52968717+(0) sack=52968717+(0) win=501 end=1787818873 [ 190.134363][ C1] tcp_in_window: sender end=1787818873 maxend=1787883000 maxwin=65408 scale=7 receiver end=52968717 maxend=53032845 maxwin=64768 scale=7 [ 190.149104][ T4198] hci4 ffff88807dcd8000 [ 190.149449][ C1] tcp_in_window: [ 190.153574][ T4198] hci4: err 0x13 [ 190.153573][ C1] seq=1787818776 ack=52968717+(0) sack=52968717+(0) win=501 end=1787818873 [ 190.157229][ T4198] hci4: cancelling interleave scan [ 190.160890][ C1] tcp_in_window: sender end=1787818873 maxend=1787883000 maxwin=65408 scale=7 receiver end=52968717 maxend=53032845 maxwin=64768 scale=7 [ 190.179008][ T7968] ffff88805a188000 name hci0 bus 0 [ 190.189089][ C1] tcp_in_window: I=1 II=1 III=1 IV=1 [ 190.199666][ C1] tcp_in_window: res=1 sender end=1787818873 maxend=1787883000 maxwin=65408 receiver end=52968717 maxend=53032845 maxwin=64768 [ 190.204448][ T7968] hci0 ffff88805a188000 [ 190.212818][ C1] tcp_conntracks: [ 190.212832][ C1] syn=0 ack=1 fin=1 rst=0 old=7 new=7 [ 190.220312][ T4198] hci4 state 0 -> 0 [ 190.220856][ C1] nf_conntrack: normal packet for ffff88801fc40180 [ 190.226424][ T4198] All LE pending actions cleared [ 190.230452][ C1] tcp_in_window: START [ 190.245972][ C1] virtqueue callback for ffff888147cc2c00 (ffffffff85497fd0) [ 190.253364][ C1] tcp_in_window: [ 190.253373][ C1] seq=1787818776 ack=52968717+(0) sack=52968717+(0) win=501 end=1787818873 [ 190.265779][ C1] tcp_in_window: sender end=1787818873 maxend=1787883000 maxwin=65408 scale=7 receiver end=52968717 maxend=53032845 maxwin=64768 scale=7 [ 190.279768][ C1] tcp_in_window: [ 190.279779][ C1] seq=1787818776 ack=52968717+(0) sack=52968717+(0) win=501 end=1787818873 [ 190.291995][ C1] tcp_in_window: sender end=1787818873 maxend=1787883000 maxwin=65408 scale=7 receiver end=52968717 maxend=53032845 maxwin=64768 scale=7 [ 190.306206][ C1] tcp_in_window: I=1 II=1 III=1 IV=1 [ 190.312813][ C1] tcp_in_window: res=1 sender end=1787818873 maxend=1787883000 maxwin=65408 receiver end=52968717 maxend=53032845 maxwin=64768 [ 190.325944][ C1] tcp_conntracks: [ 190.325955][ C1] syn=0 ack=1 fin=1 rst=0 old=7 new=7 [ 190.335107][ T4170] tcp_in_window: START [ 190.335961][ C1] No more buffers in queue [ 190.339207][ T4170] tcp_in_window: [ 190.339217][ T4170] seq=52968717 ack=1787818873+(0) sack=1787818873+(0) win=501 end=52968717 [ 190.343616][ C1] No more buffers in queue [ 190.347263][ T4170] tcp_in_window: sender end=52968717 maxend=53032845 maxwin=64768 scale=7 receiver end=1787818873 maxend=1787883000 maxwin=65408 scale=7 [ 190.355887][ C1] Receiving skb proto 0x0800 len 52 type 0 [ 190.360264][ T4170] tcp_in_window: [ 190.374524][ C1] No more buffers in queue [ 190.380352][ T4170] seq=52968717 ack=1787818873+(0) sack=1787818873+(0) win=501 end=52968717 [ 190.384004][ C1] nf_conntrack: normal packet for ffff88801fc40180 [ 190.388370][ T4170] tcp_in_window: sender end=52968717 maxend=53032845 maxwin=64768 scale=7 receiver end=1787818873 maxend=1787883000 maxwin=65408 scale=7 [ 190.417851][ T4170] tcp_in_window: I=1 II=1 III=1 IV=1 [ 190.423152][ T4170] tcp_in_window: res=1 sender end=52968717 maxend=53032845 maxwin=64768 receiver end=1787818873 maxend=1787883001 maxwin=65408 [ 190.436259][ T4170] tcp_conntracks: [ 190.436271][ T4170] syn=0 ack=1 fin=0 rst=0 old=7 new=7 [ 190.445518][ C1] tcp_in_window: START [ 190.445576][ T5393] hci3: conn ffff88807a152000 [ 190.450056][ C1] tcp_in_window: [ 190.454721][ C1] seq=1787818872 ack=52968717+(0) sack=52968717+(0) win=501 end=1787818873 [ 190.456606][ T5393] device: 'hci3:201': device_unregister [ 190.458361][ C1] tcp_in_window: sender end=1787818873 maxend=1787883001 maxwin=65408 scale=7 receiver end=52968717 maxend=53032845 maxwin=64768 scale=7 [ 190.466966][ T5393] kernfs runtime_status: removing [ 190.472514][ C1] tcp_in_window: [ 190.487063][ T5393] kernfs control: removing [ 190.492066][ C1] seq=1787818872 ack=52968717+(0) sack=52968717+(0) win=501 end=1787818873 [ 190.496214][ T5393] kernfs runtime_suspended_time: removing [ 190.500625][ C1] tcp_in_window: sender end=1787818873 maxend=1787883001 maxwin=65408 scale=7 receiver end=52968717 maxend=53032845 maxwin=64768 scale=7 [ 190.509328][ T5393] kernfs runtime_active_time: removing [ 190.515005][ C1] tcp_in_window: I=1 II=1 III=1 IV=1 [ 190.529100][ T5393] kernfs autosuspend_delay_ms: removing [ 190.534506][ C1] tcp_in_window: res=1 sender end=1787818873 maxend=1787883001 maxwin=65408 receiver end=52968717 maxend=53032845 maxwin=64768 [ 190.539823][ T5393] kernfs power: removing [ 190.545341][ C1] tcp_conntracks: [ 190.558510][ T5393] kernfs device: removing [ 190.562715][ C1] syn=0 ack=1 fin=1 rst=0 old=7 new=7 [ 190.566446][ T5393] kernfs subsystem: removing [ 190.572775][ T4198] hdev hci4 [ 190.576153][ T5393] kernfs hci3:201: removing [ 190.580803][ T7968] hci0: err 0x13 [ 190.583916][ T5393] kernfs uevent: removing [ 190.597104][ T5393] PM: Removing info for No Bus:hci3:201 [ 190.600986][ T5377] nf_conntrack: new packet for ffff888077f80c00 [ 190.606129][ T5393] kobject: 'hci3:201' (ffff88807a152420): kobject_uevent_env [ 190.609356][ T5377] nf_nat: Already setup manip DST for ct ffff888077f80c00 (status bits 0x188) [ 190.616903][ T5393] kobject: 'hci3:201' (ffff88807a152420): fill_kobj_path: path = '/devices/virtual/bluetooth/hci3/hci3:201' [ 190.626099][ T5377] nf_nat: Already setup manip SRC for ct ffff888077f80c00 (status bits 0x188) [ 190.642416][ T1111] nf_conntrack: normal packet for ffff88801959f980 [ 190.648570][ T3518] sd 0:0:1:0: cmd ffff8880245cd128 CDB: 0x2a [ 190.654181][ T7968] hci0: cancelling interleave scan [ 190.654210][ T7968] hci0 state 0 -> 0 [ 190.654252][ T7968] channel 3 len 10 [ 190.654283][ T7968] All LE pending actions cleared [ 190.654292][ T7968] hdev hci0 [ 190.654390][ T4292] nf_conntrack: normal packet for ffff88801959fc80 [ 190.660324][ T3518] Added buffer head 25 to ffff88801f9f7e00 [ 190.693845][ T4711] nf_conntrack: new packet for ffff888077f80c00 [ 190.697533][ T5393] kernfs hci3:201: removing [ 190.700146][ C1] virtqueue callback for ffff88801f9f7e00 (ffffffff8506e140) [ 190.704968][ T5393] kobject: 'hci3:201' (ffff88807a152420): kobject_cleanup, parent 0000000000000000 [ 190.712689][ C1] sd 0:0:1:0: cmd ffff8880245cd128 response 0 status 0x0 sense_len 0 [ 190.712718][ C1] No more buffers in queue [ 190.712772][ T4711] nf_nat: Already setup manip DST for ct ffff888077f80c00 (status bits 0x188) [ 190.723441][ T5393] kobject: 'hci3:201' (ffff88807a152420): calling ktype release [ 190.730128][ T4711] nf_nat: Already setup manip SRC for ct ffff888077f80c00 (status bits 0x188) [ 190.738108][ T5393] kobject: 'hci3:201': free name [ 190.743798][ T5377] nf_conntrack: new packet for ffff888077f81800 [ 190.754692][ C0] virtqueue callback for ffff88801ee44900 (ffffffff84450960) [ 190.760367][ T5377] nf_nat: Already setup manip DST for ct ffff888077f81800 (status bits 0x188) [ 190.765407][ C0] virtqueue interrupt with no work for ffff88801ee44800 [ 190.771758][ T5377] nf_nat: Already setup manip SRC for ct ffff888077f81800 (status bits 0x188) [ 190.779046][ C0] virtqueue interrupt with no work for ffff88801ee44700 [ 190.779352][ T1111] Added buffer head 0 to ffff88801ee44900 [ 190.791383][ T4170] No more buffers in queue [ 190.797764][ T5393] hci3 orig refcnt 10 [ 190.803863][ T4170] eth0: xmit ffff88805f9fd000 42:01:0a:80:00:01 [ 190.803885][ T4170] Added buffer head 6 to ffff888147cc2d00 [ 190.811107][ C1] virtqueue callback for ffff888147cc2d00 (ffffffff854980c0) [ 190.811629][ T150] sd 0:0:1:0: cmd ffff8880221a9128 CDB: 0x35 [ 190.816874][ C1] Sent skb ffff88805f9fd000 [ 190.821400][ T150] Added buffer head 25 to ffff88801f9f7e00 [ 190.825289][ C1] No more buffers in queue [ 190.837211][ C1] virtqueue callback for ffff88801f9f7e00 (ffffffff8506e140) [ 190.837238][ C1] sd 0:0:1:0: cmd ffff8880221a9128 response 0 status 0x0 sense_len 0 [ 190.837261][ C1] No more buffers in queue [ 190.885918][ T264] sd 0:0:1:0: cmd ffff8880245e5d28 CDB: 0x2a [ 190.891985][ T264] Added buffer head 25 to ffff88801f9f7e00 [ 190.897930][ T4170] tcp_in_window: START [ 190.899422][ T7541] hci1 hcon ffff88805e410000 handle 200 [ 190.902051][ T4170] tcp_in_window: [ 190.907778][ T4170] seq=52968717 ack=1787818873+(0) sack=1787818873+(0) win=501 end=52968717 [ 190.908123][ T4186] hcon ffff88801879a000 reason 22 [ 190.911594][ T4170] tcp_in_window: sender end=52968717 maxend=53032845 maxwin=64768 scale=7 receiver end=1787818873 maxend=1787883001 maxwin=65408 scale=7 [ 190.911621][ T4170] tcp_in_window: [ 190.911627][ T4170] seq=52968717 ack=1787818873+(0) sack=1787818873+(0) win=501 end=52968717 [ 190.911644][ T4170] tcp_in_window: sender end=52968717 maxend=53032845 maxwin=64768 scale=7 receiver end=1787818873 maxend=1787883001 maxwin=65408 scale=7 [ 190.911667][ T4170] tcp_in_window: I=1 II=1 III=1 IV=1 [ 190.911679][ T4170] tcp_in_window: res=1 sender end=52968717 maxend=53032845 maxwin=64768 receiver end=1787818873 maxend=1787883001 maxwin=65408 [ 190.911698][ T4170] tcp_conntracks: [ 190.911705][ T4170] syn=0 ack=1 fin=0 rst=0 old=7 new=7 [ 190.915334][ T4170] No more buffers in queue [ 190.924781][ T7541] hcon ffff88805e410000 [ 190.925890][ C1] virtqueue callback for ffff88801f9f7e00 (ffffffff8506e140) [ 190.942802][ T3849] lapb21: bond_netdev_event received NETDEV_PRE_UP [ 190.943957][ C1] sd 0:0:1:0: cmd ffff8880245e5d28 response 0 status 0x0 sense_len 0 [ 190.953996][ T3849] net lapb21: siw: event 14 [ 190.966654][ C1] No more buffers in queue [ 190.966713][ T4170] eth0: xmit ffff88801c582c80 42:01:0a:80:00:01 [ 190.966736][ T4170] Added buffer head 6 to ffff888147cc2d00 [ 190.966778][ C1] virtqueue callback for ffff888147cc2d00 (ffffffff854980c0) [ 190.967287][ C1] Sent skb ffff88801c582c80 [ 190.972390][ C0] nf_conntrack: normal packet for ffff888076b0b200 [ 190.985339][ C1] No more buffers in queue [ 190.989129][ C0] tcp_in_window: START [ 190.996793][ T5377] nf_conntrack: new packet for ffff888077f80480 [ 190.998888][ C0] tcp_in_window: [ 191.003058][ T5377] nf_nat: Already setup manip DST for ct ffff888077f80480 (status bits 0x188) [ 191.010509][ C0] seq=1612962947 ack=1145258562+(0) sack=1145258562+(0) win=64240 end=1612962948 [ 191.017291][ T5377] nf_nat: Already setup manip SRC for ct ffff888077f80480 (status bits 0x188) [ 191.025568][ C0] tcp_in_window: sender end=1612962948 maxend=1612962948 maxwin=64240 scale=7 receiver end=1145258562 maxend=1145322802 maxwin=1 scale=14 [ 191.030240][ T264] sd 0:0:1:0: cmd ffff8880221a9128 CDB: 0x35 [ 191.034474][ C0] tcp_in_window: [ 191.040898][ T264] Added buffer head 25 to ffff88801f9f7e00 [ 191.046584][ C0] seq=1612962947 ack=1145258562+(0) sack=1145258562+(0) win=64240 end=1612962948 [ 191.054160][ C1] virtqueue callback for ffff88801f9f7e00 (ffffffff8506e140) [ 191.058534][ C0] tcp_in_window: sender end=1612962948 maxend=1612962948 maxwin=64240 scale=7 receiver end=1145258562 maxend=1145322802 maxwin=1 scale=14 [ 191.065734][ C1] sd 0:0:1:0: cmd ffff8880221a9128 response 0 status 0x0 sense_len 0 [ 191.065761][ C1] No more buffers in queue [ 191.066107][ C1] nf_conntrack: new packet for ffff888070520d80 [ 191.070185][ C0] tcp_in_window: I=1 II=1 III=1 IV=1 [ 191.074502][ C1] nf_nat: Already setup manip DST for ct ffff888070520d80 (status bits 0x188) [ 191.080728][ C0] tcp_in_window: res=1 sender end=1612962948 maxend=1612962948 maxwin=64240 receiver end=1145258562 maxend=1145322802 maxwin=1 [ 191.084362][ C1] nf_nat: Already setup manip SRC for ct ffff888070520d80 (status bits 0x188) [ 191.093183][ C0] tcp_conntracks: [ 191.093192][ C0] syn=1 ack=1 fin=0 rst=0 old=2 new=2 [ 191.104666][ T4170] tcp_in_window: START [ 191.111473][ C0] wireguard: wg2: Handshake for peer 60 (127.0.0.1:20002) did not complete after 5 seconds, retrying (try 2) [ 191.125396][ T4170] tcp_in_window: [ 191.131490][ C0] nf_conntrack: new packet for ffff8880243f9b00 [ 191.134996][ T4170] seq=52968717 ack=1787818873+(0) sack=1787818873+(0) win=501 end=52968717 [ 191.140886][ C0] tcp_in_window: START [ 191.150764][ T4170] tcp_in_window: sender end=52968717 maxend=53032845 maxwin=64768 scale=7 receiver end=1787818873 maxend=1787883001 maxwin=65408 scale=7 [ 191.158298][ C0] tcp_in_window: [ 191.172647][ T4170] tcp_in_window: [ 191.180823][ C0] seq=4294967295 ack=0+(0) sack=0+(0) win=512 end=4294967295 [ 191.185223][ T4170] seq=52968717 ack=1787818873+(0) sack=1787818873+(0) win=501 end=52968717 [ 191.191452][ C0] tcp_in_window: sender end=4294967295 maxend=511 maxwin=512 scale=0 receiver end=0 maxend=512 maxwin=0 scale=0 [ 191.196714][ T4170] tcp_in_window: sender end=52968717 maxend=53032845 maxwin=64768 scale=7 receiver end=1787818873 maxend=1787883001 maxwin=65408 scale=7 [ 191.205737][ C0] tcp_in_window: [ 191.219232][ T4170] tcp_in_window: I=1 II=1 III=1 IV=1 [ 191.228065][ C0] seq=4294967295 ack=0+(0) sack=0+(0) win=512 end=4294967295 [ 191.231800][ T4170] tcp_in_window: res=1 sender end=52968717 maxend=53032845 maxwin=64768 receiver end=1787818873 maxend=1787883001 maxwin=65408 [ 191.237182][ C0] tcp_in_window: sender end=4294967295 maxend=511 maxwin=512 scale=0 receiver end=0 maxend=512 maxwin=0 scale=0 [ 191.241273][ T4170] tcp_conntracks: [ 191.241283][ T4170] syn=0 ack=1 fin=0 rst=0 old=7 new=7 [ 191.252811][ C0] tcp_in_window: I=1 II=1 III=1 IV=1 [ 191.259002][ T4170] No more buffers in queue [ 191.262793][ C0] tcp_in_window: res=1 sender end=4294967295 maxend=511 maxwin=512 receiver end=0 maxend=512 maxwin=0 [ 191.271656][ T4170] eth0: xmit ffff888024b4edc0 42:01:0a:80:00:01 [ 191.275720][ C0] tcp_conntracks: [ 191.289689][ T4170] Added buffer head 6 to ffff888147cc2d00 [ 191.293295][ C0] syn=0 ack=1 fin=0 rst=0 old=3 new=3 [ 191.293299][ C1] virtqueue callback for ffff888147cc2d00 (ffffffff854980c0) [ 191.293325][ C0] nf_nat: Already setup manip DST for ct ffff8880243f9b00 (status bits 0x188) [ 191.296962][ C1] Sent skb ffff888024b4edc0 [ 191.304782][ C0] nf_nat: Already setup manip SRC for ct ffff8880243f9b00 (status bits 0x188) [ 191.314159][ C1] No more buffers in queue [ 191.328619][ T1111] nf_conntrack: new packet for ffff888076b0ad80 [ 191.340936][ T5377] nf_conntrack: new packet for ffff888077f81080 [ 191.344003][ T1111] nf_nat: Already setup manip DST for ct ffff888076b0ad80 (status bits 0x188) [ 191.349737][ T5377] nf_nat: Already setup manip DST for ct ffff888077f81080 (status bits 0x188) [ 191.357152][ T1111] nf_nat: Already setup manip SRC for ct ffff888076b0ad80 (status bits 0x188) [ 191.370254][ T5377] nf_nat: Already setup manip SRC for ct ffff888077f81080 (status bits 0x188) [ 191.384338][ T4170] tcp_in_window: START [ 191.392411][ T4186] hcon ffff88801879a000 conn ffff888078dba800, err 103 [ 191.396528][ T4170] tcp_in_window: [ 191.396536][ T4170] seq=52968717 ack=1787818873+(0) sack=1787818873+(0) win=501 end=52968717 [ 191.402811][ T5370] nf_conntrack: normal packet for ffff888070521b00 [ 191.412887][ T4170] tcp_in_window: sender end=52968717 maxend=53032845 maxwin=64768 scale=7 receiver end=1787818873 maxend=1787883001 maxwin=65408 scale=7 [ 191.421307][ T4186] hci2 hcon ffff88801879a000 chan ffff88802ba6a500 [ 191.423009][ T4170] tcp_in_window: [ 191.429217][ T3849] lapb21: bond_netdev_event received NETDEV_UP [ 191.434239][ T4170] seq=52968717 ack=1787818873+(0) sack=1787818873+(0) win=501 end=52968717 [ 191.446671][ T3849] net lapb21: siw: event 1 [ 191.450757][ T4170] tcp_in_window: sender end=52968717 maxend=53032845 maxwin=64768 scale=7 receiver end=1787818873 maxend=1787883001 maxwin=65408 scale=7 [ 191.607863][ T4170] tcp_in_window: I=1 II=1 III=1 IV=1 [ 191.613553][ T4170] tcp_in_window: res=1 sender end=52968717 maxend=53032845 maxwin=64768 receiver end=1787818873 maxend=1787883001 maxwin=65408 [ 191.626784][ T4170] tcp_conntracks: [ 191.626798][ T4170] syn=0 ack=1 fin=0 rst=0 old=7 new=7 [ 191.640199][ T4170] No more buffers in queue [ 191.644650][ T4170] eth0: xmit ffff888061b7d140 42:01:0a:80:00:01 [ 191.650947][ T4170] Added buffer head 17 to ffff888147cc2b00 [ 191.656758][ C0] virtqueue callback for ffff888147cc2b00 (ffffffff854980c0) [ 191.664227][ C0] Sent skb ffff888061b7d140 [ 191.668757][ C0] No more buffers in queue [ 191.669591][ C1] bridge0: port 2(bridge_slave_1) forward delay timer [ 191.673445][ C0] bridge0: port 1(bridge_slave_0) forward delay timer [ 191.679941][ C1] bridge0: port 2(bridge_slave_1) event 16 [ 191.692542][ C1] bridge0: br_fill_info event 16 port bridge_slave_1 master bridge0 [ 191.700582][ C0] bridge0: port 1(bridge_slave_0) event 16 [ 191.706417][ C0] bridge0: br_fill_info event 16 port bridge_slave_0 master bridge0 [ 191.714713][ T1111] nf_conntrack: normal packet for ffff888070521980 [ 191.717596][ T3849] lapb22: bond_netdev_event received NETDEV_PRE_UP [ 191.721338][ T4292] nf_conntrack: normal packet for ffff888070521b00 [ 191.732220][ T4168] tcp_in_window: START [ 191.736077][ T7541] hci1: conn ffff88805e410000 [ 191.738602][ T4168] tcp_in_window: [ 191.738610][ T4168] seq=52968717 ack=1787818873+(0) sack=1787818873+(0) win=501 end=52968718 [ 191.744353][ T7541] device: 'hci1:200': device_unregister [ 191.746936][ T4168] tcp_in_window: sender end=52968717 maxend=53032845 maxwin=64768 scale=7 receiver end=1787818873 maxend=1787883001 maxwin=65408 scale=7 [ 191.755579][ C0] virtqueue callback for ffff88801ee44900 (ffffffff84450960) [ 191.755624][ C0] virtqueue interrupt with no work for ffff88801ee44800 [ 191.755635][ C0] virtqueue interrupt with no work for ffff88801ee44700 [ 191.757092][ T3849] net lapb22: siw: event 14 [ 191.761297][ T4168] tcp_in_window: [ 191.761306][ T4168] seq=52968717 ack=1787818873+(0) sack=1787818873+(0) win=501 end=52968718 [ 191.761325][ T4168] tcp_in_window: sender end=52968717 maxend=53032845 maxwin=64768 scale=7 receiver end=1787818873 maxend=1787883001 maxwin=65408 scale=7 [ 191.776998][ T7541] kernfs runtime_status: removing [ 191.782787][ T4168] tcp_in_window: I=1 II=1 III=1 IV=1 [ 191.782802][ T4168] tcp_in_window: res=1 sender end=52968718 maxend=53032845 maxwin=64768 receiver end=1787818873 maxend=1787883001 maxwin=65408 [ 191.782821][ T4168] tcp_conntracks: [ 191.782828][ T4168] syn=0 ack=1 fin=1 rst=0 old=7 new=7 [ 191.782878][ T1111] Added buffer head 0 to ffff88801ee44900 [ 191.786782][ T4168] No more buffers in queue [ 191.791544][ T7541] kernfs control: removing [ 191.797026][ T4168] eth0: xmit ffff88801fbdb9e8 42:01:0a:80:00:01 [ 191.801801][ T3849] lapb22: bond_netdev_event received NETDEV_UP [ 191.805187][ T4168] Added buffer head 17 to ffff888147cc2b00 [ 191.813768][ C1] virtqueue callback for ffff888147cc2c00 (ffffffff85497fd0) [ 191.813767][ C0] virtqueue callback for ffff888147cc2b00 (ffffffff854980c0) [ 191.815128][ C1] No more buffers in queue [ 191.827841][ C0] Sent skb ffff88801fbdb9e8 [ 191.832824][ C1] Receiving skb proto 0x0800 len 52 type 0 [ 191.838062][ C0] No more buffers in queue [ 191.851241][ C1] No more buffers in queue [ 191.856147][ T7541] kernfs runtime_suspended_time: removing [ 191.860341][ C1] nf_conntrack: normal packet for ffff88801fc40180 [ 191.866052][ T7541] kernfs runtime_active_time: removing [ 191.870449][ C1] tcp_in_window: START [ 191.870459][ C1] tcp_in_window: [ 191.875276][ T7541] kernfs autosuspend_delay_ms: removing [ 191.881102][ C1] seq=1787818873 ack=52968718+(0) sack=52968718+(0) win=501 end=1787818873 [ 191.887805][ T7541] kernfs power: removing [ 191.893081][ C1] tcp_in_window: sender end=1787818873 maxend=1787883001 maxwin=65408 scale=7 receiver end=52968718 maxend=53032845 maxwin=64768 scale=7 [ 191.893107][ C1] tcp_in_window: [ 191.893114][ C1] seq=1787818873 ack=52968718+(0) sack=52968718+(0) win=501 end=1787818873 [ 191.893134][ C1] tcp_in_window: sender end=1787818873 maxend=1787883001 maxwin=65408 scale=7 receiver end=52968718 maxend=53032845 maxwin=64768 scale=7 [ 191.893159][ C1] tcp_in_window: I=1 II=1 III=1 IV=1 [ 191.893172][ C1] tcp_in_window: res=1 sender end=1787818873 maxend=1787883001 maxwin=65408 receiver end=52968718 maxend=53032846 maxwin=64768 [ 191.902520][ T7541] kernfs device: removing [ 191.907985][ C1] tcp_conntracks: [ 191.912687][ T7541] kernfs subsystem: removing [ 191.916949][ C1] syn=0 ack=1 fin=0 rst=0 old=7 new=7 [ 191.924082][ T7541] kernfs hci1:200: removing [ 191.927630][ T4186] hci2 hcon ffff88801879a000 handle 201 [ 191.932209][ T7541] kernfs uevent: removing [ 191.937403][ T4198] hcon ffff888075130000 reason 22 [ 191.944216][ T4186] hcon ffff88801879a000 [ 191.949560][ T4198] hcon ffff888075130000 conn ffff88807f376000, err 103 [ 191.953912][ T7541] PM: Removing info for No Bus:hci1:200 [ 191.959923][ T4198] hci4 hcon ffff888075130000 chan ffff88801fac2a00 [ 191.963131][ T3849] net lapb22: siw: event 1 [ 191.978515][ T7541] kobject: 'hci1:200' (ffff88805e410420): kobject_uevent_env [ 191.991124][ T4186] hci2: conn ffff88801879a000 [ 191.995151][ T7541] kobject: 'hci1:200' (ffff88805e410420): fill_kobj_path: path = '/devices/virtual/bluetooth/hci1/hci1:200' [ 192.003016][ T4186] device: 'hci2:201': device_unregister [ 192.016843][ T4198] hci4 hcon ffff888075130000 handle 201 [ 192.024902][ T7968] hcon ffff88805f1a4000 reason 22 [ 192.035877][ T4198] hcon ffff888075130000 [ 192.042428][ T4186] kernfs runtime_status: removing [ 192.049115][ T7968] hcon ffff88805f1a4000 conn ffff888060b1b000, err 103 [ 192.060426][ T4186] kernfs control: removing [ 192.066465][ T4198] hci4: conn ffff888075130000 [ 192.068418][ T4186] kernfs runtime_suspended_time: removing [ 192.073091][ C1] nf_conntrack: new packet for ffff888070520d80 [ 192.073110][ C1] nf_nat: Already setup manip DST for ct ffff888070520d80 (status bits 0x188) [ 192.073139][ C1] nf_nat: Already setup manip SRC for ct ffff888070520d80 (status bits 0x188) [ 192.076911][ T5377] nf_conntrack: new packet for ffff888077f80480 [ 192.078138][ T4186] kernfs runtime_active_time: removing [ 192.084198][ T5377] nf_nat: Already setup manip DST for ct ffff888077f80480 (status bits 0x188) [ 192.090068][ T7968] hci0 hcon ffff88805f1a4000 chan ffff888057a54700 [ 192.096245][ T5377] nf_nat: Already setup manip SRC for ct ffff888077f80480 (status bits 0x188) [ 192.101100][ T4186] kernfs autosuspend_delay_ms: removing [ 192.119006][ T4198] device: 'hci4:201': device_unregister [ 192.129036][ T7541] kernfs hci1:200: removing [ 192.247285][ T7968] hci0 hcon ffff88805f1a4000 handle 201 [ 192.250814][ T5393] hcon ffff88805ff6a000 reason 22 [ 192.253377][ T7968] hcon ffff88805f1a4000 [ 192.257868][ T5393] hcon ffff88805ff6a000 conn ffff8880221ad800, err 103 [ 192.263646][ T4186] kernfs power: removing [ 192.269115][ T5393] hci3 hcon ffff88805ff6a000 chan ffff888024f04600 [ 192.273585][ T3849] netdevsim netdevsim7 eth13: bond_netdev_event received NETDEV_CHANGE [ 192.289022][ T7541] kobject: 'hci1:200' (ffff88805e410420): kobject_cleanup, parent 0000000000000000 [ 192.289045][ T7968] hci0: conn ffff88805f1a4000 [ 192.298837][ T4198] kernfs runtime_status: removing [ 192.303700][ T7968] device: 'hci0:201': device_unregister [ 192.308365][ T3849] net eth13: siw: event 4 [ 192.313776][ C0] wireguard: wg0: Handshake for peer 44 ([::1]:20003/0%0) did not complete after 5 seconds, retrying (try 7) [ 192.313951][ C0] wireguard: wg0: Retrying handshake with peer 44 ([::1]:20003/0%0) because we stopped hearing back after 15 seconds [ 192.314351][ T5393] hci3 hcon ffff88805ff6a000 handle 200 [ 192.318878][ T4711] nf_conntrack: new packet for ffff888076b0bb00 [ 192.330832][ T4198] kernfs control: removing [ 192.342820][ T4711] nf_nat: Already setup manip DST for ct ffff888076b0bb00 (status bits 0x188) [ 192.349800][ T4186] kernfs device: removing [ 192.354605][ T4711] nf_nat: Already setup manip SRC for ct ffff888076b0bb00 (status bits 0x188) [ 192.362007][ T7968] kernfs runtime_status: removing [ 192.368026][ T5371] nf_conntrack: new packet for ffff888077f81380 [ 192.372476][ T5393] hcon ffff88805ff6a000 [ 192.381114][ T5371] nf_nat: Already setup manip DST for ct ffff888077f81380 (status bits 0x188) [ 192.381136][ T5371] nf_nat: Already setup manip SRC for ct ffff888077f81380 (status bits 0x188) [ 192.383365][ T7541] kobject: 'hci1:200' (ffff88805e410420): calling ktype release [ 192.388020][ T4198] kernfs runtime_suspended_time: removing [ 192.392904][ T5370] nf_conntrack: new packet for ffff888077f81080 [ 192.397792][ T4186] kernfs subsystem: removing [ 192.406435][ T5370] nf_nat: Already setup manip DST for ct ffff888077f81080 (status bits 0x188) [ 192.406463][ T5370] nf_nat: Already setup manip SRC for ct ffff888077f81080 (status bits 0x188) [ 192.408751][ T7541] kobject: 'hci1:200': free name [ 192.427078][ T7968] kernfs control: removing [ 192.429186][ T7541] hci1 orig refcnt 7 [ 192.436647][ T5393] hci3: conn ffff88805ff6a000 [ 192.440104][ T7541] hdev hci1 event 4 [ 192.449174][ T5393] device: 'hci3:200': device_unregister [ 192.457609][ T7541] hdev 0000000000000000 len 8 [ 192.469032][ T4198] kernfs runtime_active_time: removing [ 192.472183][ T7541] hdev hci1 event 8 [ 192.475395][ T4198] kernfs autosuspend_delay_ms: removing [ 192.479386][ T7541] hci1 orig refcnt 6 [ 192.487307][ T4186] kernfs hci2:201: removing [ 192.493200][ T7541] channel 3 len 6 [ 192.495207][ T7968] kernfs runtime_suspended_time: removing [ 192.499510][ T7541] channel 3 len 8 [ 192.505633][ T7968] kernfs runtime_active_time: removing [ 192.509247][ T3849] sctp: sctp_addr_wq_mgmt: add new entry for cmd:0, addr:fe80::b8e3:43e4:aaf4:1fb6 in wq:ffffffff974d9858 [ 192.514546][ T4198] kernfs power: removing [ 192.516731][ T7541] hdev hci1 event 2 [ 192.522671][ T4186] kernfs uevent: removing [ 192.526284][ T3849] IPv6: now = 4294956373, schedule = 4294968397, rounded schedule = 4294968497 => 4294968397 [ 192.531973][ T5393] kernfs runtime_status: removing [ 192.544627][ T7541] hdev 0000000000000000 len 8 [ 192.547187][ T7968] kernfs autosuspend_delay_ms: removing [ 192.580904][ T4198] kernfs device: removing [ 192.585363][ T5393] kernfs control: removing [ 192.591353][ T5393] kernfs runtime_suspended_time: removing [ 192.597109][ T5393] kernfs runtime_active_time: removing [ 192.603357][ T5393] kernfs autosuspend_delay_ms: removing [ 192.609179][ T4186] PM: Removing info for No Bus:hci2:201 [ 192.610227][ T5393] kernfs power: removing [ 192.614728][ T4186] kobject: 'hci2:201' (ffff88801879a420): kobject_uevent_env [ 192.619100][ T5393] kernfs device: removing [ 192.631093][ T4186] kobject: 'hci2:201' (ffff88801879a420): fill_kobj_path: path = '/devices/virtual/bluetooth/hci2/hci2:201' [ 192.640180][ T3849] netdevsim netdevsim7 eth14: bond_netdev_event received NETDEV_CHANGE [ 192.642656][ T4198] kernfs subsystem: removing [ 192.642699][ T4198] kernfs hci4:201: removing [ 192.642732][ T4198] kernfs uevent: removing [ 192.642751][ T4198] PM: Removing info for No Bus:hci4:201 [ 192.642769][ T4198] kobject: 'hci4:201' (ffff888075130420): kobject_uevent_env [ 192.642798][ T4198] kobject: 'hci4:201' (ffff888075130420): fill_kobj_path: path = '/devices/virtual/bluetooth/hci4/hci4:201' [ 192.642894][ T4198] kernfs hci4:201: removing [ 192.653259][ T3849] net eth14: siw: event 4 [ 192.657388][ T7541] kernfs runtime_status: removing [ 192.704437][ T7541] kernfs control: removing [ 192.708874][ T7541] kernfs runtime_suspended_time: removing [ 192.716962][ T4186] kernfs hci2:201: removing [ 192.721594][ T4186] kobject: 'hci2:201' (ffff88801879a420): kobject_cleanup, parent 0000000000000000 [ 192.721631][ T5393] kernfs subsystem: removing [ 192.732255][ T4186] kobject: 'hci2:201' (ffff88801879a420): calling ktype release [ 192.735620][ T4198] kobject: 'hci4:201' (ffff888075130420): kobject_cleanup, parent 0000000000000000 [ 192.752728][ T7968] kernfs power: removing [ 192.752854][ T3849] sctp: sctp_addr_wq_mgmt: add new entry for cmd:0, addr:fe80::935c:2b45:3b69:4514 in wq:ffffffff974d9858 [ 192.756983][ C0] virtqueue callback for ffff88801ee44900 (ffffffff84450960) [ 192.768581][ T4186] kobject: 'hci2:201': free name [ 192.775702][ C0] virtqueue interrupt with no work for ffff88801ee44800 [ 192.775715][ C0] virtqueue interrupt with no work for ffff88801ee44700 [ 192.776890][ T1111] Added buffer head 0 to ffff88801ee44900 [ 192.781487][ T3849] IPv6: now = 4294956399, schedule = 4294968497, rounded schedule = 4294968597 => 4294968497 [ 192.787760][ T4198] kobject: 'hci4:201' (ffff888075130420): calling ktype release [ 192.796178][ T4186] hci2 orig refcnt 10 [ 192.801158][ C0] nf_conntrack: normal packet for ffff888076b0b200 [ 192.817493][ T4186] hcon ffff88801c602000 reason 22 [ 192.818696][ C0] tcp_in_window: START [ 192.829101][ T4186] hcon ffff88801c602000 conn ffff888078dba000, err 103 [ 192.829336][ C0] tcp_in_window: [ 192.834312][ T4186] hci2 hcon ffff88801c602000 chan ffff88802ba6a400 [ 192.838464][ C0] seq=1612962947 ack=1145258562+(0) sack=1145258562+(0) win=64240 end=1612962948 [ 192.845828][ T4198] kobject: 'hci4:201': free name [ 192.848971][ C0] tcp_in_window: sender end=1612962948 maxend=1612962948 maxwin=64240 scale=7 receiver end=1145258562 maxend=1145322802 maxwin=1 scale=14 [ 192.848996][ C0] tcp_in_window: [ 192.849003][ C0] seq=1612962947 ack=1145258562+(0) sack=1145258562+(0) win=64240 end=1612962948 [ 192.849023][ C0] tcp_in_window: sender end=1612962948 maxend=1612962948 maxwin=64240 scale=7 receiver end=1145258562 maxend=1145322802 maxwin=1 scale=14 [ 192.849044][ C0] tcp_in_window: I=1 II=1 III=1 IV=1 [ 192.849058][ C0] tcp_in_window: res=1 sender end=1612962948 maxend=1612962948 maxwin=64240 receiver end=1145258562 maxend=1145322802 maxwin=1 [ 192.849080][ C0] tcp_conntracks: [ 192.849086][ C0] syn=1 ack=1 fin=0 rst=0 old=2 new=2 [ 192.849351][ T7541] kernfs runtime_active_time: removing [ 192.856268][ T4198] hci4 orig refcnt 10 [ 192.870145][ T7968] kernfs device: removing [ 192.870717][ T3849] netdevsim netdevsim7 eth15: bond_netdev_event received NETDEV_CHANGE [ 192.886984][ T4186] hci2 hcon ffff88801c602000 handle 200 [ 192.891147][ T4198] hcon ffff88807513c000 reason 22 [ 192.898309][ T4186] hcon ffff88801c602000 [ 192.913294][ T3849] net eth15: siw: event 4 [ 192.918514][ T7968] kernfs subsystem: removing [ 192.940898][ T4198] hcon ffff88807513c000 conn ffff88807f375800, err 103 [ 192.950167][ C1] nf_conntrack: new packet for ffff888070520600 [ 192.950191][ C1] nf_nat: Already setup manip DST for ct ffff888070520600 (status bits 0x188) [ 192.950213][ C1] nf_nat: Already setup manip SRC for ct ffff888070520600 (status bits 0x188) [ 192.950514][ C1] geneve1: no route to fc00:0000:0000:0000:0000:0000:0000:0001 [ 192.950569][ T5393] kernfs hci3:200: removing [ 192.950622][ T5393] kernfs uevent: removing [ 192.950641][ T5393] PM: Removing info for No Bus:hci3:200 [ 192.950660][ T5393] kobject: 'hci3:200' (ffff88805ff6a420): kobject_uevent_env [ 192.950694][ T5393] kobject: 'hci3:200' (ffff88805ff6a420): fill_kobj_path: path = '/devices/virtual/bluetooth/hci3/hci3:200' [ 192.950802][ T5393] kernfs hci3:200: removing [ 192.950817][ T5393] kobject: 'hci3:200' (ffff88805ff6a420): kobject_cleanup, parent 0000000000000000 [ 192.950833][ T5393] kobject: 'hci3:200' (ffff88805ff6a420): calling ktype release [ 192.950864][ T5393] kobject: 'hci3:200': free name [ 192.950879][ T5393] hci3 orig refcnt 7 [ 192.950889][ T5393] hdev hci3 event 4 [ 192.950912][ T5393] hdev 0000000000000000 len 8 [ 192.951043][ T5393] hdev hci3 event 8 [ 192.951054][ T5393] hci3 orig refcnt 6 [ 192.951080][ T5393] channel 3 len 6 [ 192.951118][ T5393] channel 3 len 8 [ 192.951142][ T5393] hdev hci3 event 2 [ 192.956201][ C1] nf_nat: Already setup manip DST for ct ffff888070520600 (status bits 0x188) [ 192.964224][ T7541] kernfs autosuspend_delay_ms: removing [ 192.969572][ C1] nf_nat: Already setup manip SRC for ct ffff888070520600 (status bits 0x188) [ 192.977363][ T4186] hci2: conn ffff88801c602000 [ 192.980340][ T4198] hci4 hcon ffff88807513c000 chan ffff88801fac2b00 [ 192.986388][ T4186] device: 'hci2:200': device_unregister [ 192.988070][ T5393] hdev 0000000000000000 len 8 [ 192.996053][ T7968] kernfs hci0:201: removing [ 193.001389][ T4198] hci4 hcon ffff88807513c000 handle 200 [ 193.011476][ T4186] kernfs runtime_status: removing [ 193.019002][ C1] sctp: sctp_addr_wq_timeout_handler: the first ent in wq:ffffffff974d9858 is addr:fe80::b8e3:43e4:aaf4:1fb6 for cmd:0 at entry:ffff888060e7f280 [ 193.019047][ C1] sctp: sctp_addr_wq_timeout_handler: the first ent in wq:ffffffff974d9858 is addr:fe80::935c:2b45:3b69:4514 for cmd:0 at entry:ffff8880232c2e80 [ 193.031455][ T4198] hcon ffff88807513c000 [ 193.033469][ T7968] kernfs uevent: removing [ 193.109028][ C1] net_ratelimit: 41 callbacks suppressed [ 193.109044][ C1] wireguard: wg0: Sending keepalive packet to peer 19 ([::1]:20002/0%0) [ 193.112551][ T7968] PM: Removing info for No Bus:hci0:201 [ 193.114250][ C1] nf_conntrack: new packet for ffff888070520d80 [ 193.117976][ T7968] kobject: 'hci0:201' (ffff88805f1a4420): kobject_uevent_env [ 193.126829][ C1] nf_nat: Already setup manip DST for ct ffff888070520d80 (status bits 0x188) [ 193.126867][ C1] nf_nat: Already setup manip SRC for ct ffff888070520d80 (status bits 0x188) [ 193.133072][ T7968] kobject: 'hci0:201' (ffff88805f1a4420): fill_kobj_path: path = '/devices/virtual/bluetooth/hci0/hci0:201' [ 193.141657][ T7541] kernfs power: removing [ 193.282798][ C1] wireguard: wg0: Sending keepalive packet to peer 37 ([::1]:20002/0%0) [ 193.289165][ T4186] kernfs control: removing [ 193.291650][ T4713] nf_conntrack: new packet for ffff888077f80480 [ 193.297671][ T4198] hci4: conn ffff88807513c000 [ 193.301800][ T4713] nf_nat: Already setup manip DST for ct ffff888077f80480 (status bits 0x188) [ 193.301823][ T4713] nf_nat: Already setup manip SRC for ct ffff888077f80480 (status bits 0x188) [ 193.305905][ C1] wireguard: wg1: Receiving keepalive packet from peer 39 ([::1]:20001/0%0) [ 193.308025][ T4198] device: 'hci4:200': device_unregister [ 193.323928][ T3849] sctp: sctp_addr_wq_mgmt: add new entry for cmd:0, addr:fe80::16be:7ca3:343e:94cb in wq:ffffffff974d9858 [ 193.325874][ T7968] kernfs hci0:201: removing [ 193.333546][ T3849] IPv6: now = 4294956454, schedule = 4294968497, rounded schedule = 4294968597 => 4294968497 [ 193.340409][ T5393] kernfs runtime_status: removing [ 193.371205][ T4186] kernfs runtime_suspended_time: removing [ 193.376960][ T4186] kernfs runtime_active_time: removing [ 193.383831][ T7968] kobject: 'hci0:201' (ffff88805f1a4420): kobject_cleanup, parent 0000000000000000 [ 193.384232][ T5393] kernfs control: removing [ 193.394988][ T7968] kobject: 'hci0:201' (ffff88805f1a4420): calling ktype release [ 193.398227][ T3849] netdevsim netdevsim7 eth16: bond_netdev_event received NETDEV_CHANGE [ 193.415336][ T4198] kernfs runtime_status: removing [ 193.420870][ T7541] kernfs device: removing [ 193.425259][ T4186] kernfs autosuspend_delay_ms: removing [ 193.427462][ T7968] kobject: 'hci0:201': free name [ 193.430865][ C1] wireguard: wg0: Sending keepalive packet to peer 55 ([::1]:20002/0%0) [ 193.430926][ C1] wireguard: wg0: Sending keepalive packet to peer 43 ([::1]:20002/0%0) [ 193.431357][ T4186] kernfs power: removing [ 193.436045][ T4173] nf_conntrack: new packet for ffff888077f81080 [ 193.445450][ T4198] kernfs control: removing [ 193.452663][ T4173] nf_nat: Already setup manip DST for ct ffff888077f81080 (status bits 0x188) [ 193.457206][ T5393] kernfs runtime_suspended_time: removing [ 193.463139][ T4173] nf_nat: Already setup manip SRC for ct ffff888077f81080 (status bits 0x188) [ 193.465121][ T7968] hci0 orig refcnt 10 [ 193.467665][ C0] wireguard: wg1: Receiving keepalive packet from peer 57 ([::1]:20001/0%0) [ 193.476483][ T3849] net eth16: siw: event 4 [ 193.489022][ T4186] kernfs device: removing [ 193.492309][ T7968] hcon ffff888025078000 reason 22 [ 193.495050][ T4186] kernfs subsystem: removing [ 193.504509][ T7968] hcon ffff888025078000 conn ffff888060b19800, err 103 [ 193.509521][ T4198] kernfs runtime_suspended_time: removing [ 193.514113][ T7968] hci0 hcon ffff888025078000 chan ffff888057a54d00 [ 193.517536][ T5393] kernfs runtime_active_time: removing [ 193.546731][ T7968] hci0 hcon ffff888025078000 handle 200 [ 193.547470][ T5393] kernfs autosuspend_delay_ms: removing [ 193.559076][ T7968] hcon ffff888025078000 [ 193.563340][ T7541] kernfs subsystem: removing [ 193.568695][ T7968] hci0: conn ffff888025078000 [ 193.573635][ T4186] kernfs hci2:200: removing [ 193.578151][ T7541] kernfs rfkill26: removing [ 193.583096][ T7968] device: 'hci0:200': device_unregister [ 193.588680][ T4198] kernfs runtime_active_time: removing [ 193.594179][ C1] wireguard: wg0: Handshake for peer 20 ([::1]:20003/0%0) did not complete after 5 seconds, retrying (try 9) [ 193.601760][ T3849] sctp: sctp_addr_wq_mgmt: add new entry for cmd:0, addr:fe80::c47f:330e:8ca:e150 in wq:ffffffff974d9858 [ 193.606945][ T4711] wireguard: wg0: Sending handshake initiation to peer 20 ([::1]:20003/0%0) [ 193.617609][ T5393] kernfs power: removing [ 193.626885][ T4711] nf_conntrack: new packet for ffff888076b0ad80 [ 193.633170][ T4186] kernfs uevent: removing [ 193.636881][ T4711] nf_nat: Already setup manip DST for ct ffff888076b0ad80 (status bits 0x188) [ 193.641661][ T3849] IPv6: now = 4294956485, schedule = 4294968500, rounded schedule = 4294968600 => 4294968500 [ 193.650114][ T4711] nf_nat: Already setup manip SRC for ct ffff888076b0ad80 (status bits 0x188) [ 193.662419][ T4186] PM: Removing info for No Bus:hci2:200 [ 193.669122][ C0] wireguard: wg0: Sending keepalive packet to peer 38 ([::1]:20003/0%0) [ 193.670180][ T7968] kernfs runtime_status: removing [ 193.674787][ T4292] nf_conntrack: normal packet for ffff88801959f980 [ 193.684915][ T4198] kernfs autosuspend_delay_ms: removing [ 193.689624][ C0] wireguard: wg2: Receiving keepalive packet from peer 41 ([::1]:20001/0%0) [ 193.695951][ T7541] kernfs uevent: removing [ 193.700133][ T4186] kobject: 'hci2:200' (ffff88801c602420): kobject_uevent_env [ 193.708985][ T7541] kernfs name: removing [ 193.722396][ T4186] kobject: 'hci2:200' (ffff88801c602420): fill_kobj_path: path = '/devices/virtual/bluetooth/hci2/hci2:200' [ 193.729254][ T5393] kernfs device: removing [ 193.740775][ T7541] kernfs type: removing [ 193.744955][ T7541] kernfs index: removing [ 193.749468][ T7541] kernfs persistent: removing [ 193.754170][ T4186] kernfs hci2:200: removing [ 193.758683][ C0] virtqueue callback for ffff88801ee44900 (ffffffff84450960) [ 193.758732][ C0] virtqueue interrupt with no work for ffff88801ee44800 [ 193.758741][ C0] virtqueue interrupt with no work for ffff88801ee44700 [ 193.780431][ T1111] Added buffer head 0 to ffff88801ee44900 [ 193.786719][ T4186] kobject: 'hci2:200' (ffff88801c602420): kobject_cleanup, parent 0000000000000000 [ 193.786765][ T7968] kernfs control: removing [ 193.796077][ T4186] kobject: 'hci2:200' (ffff88801c602420): calling ktype release [ 193.796130][ T4186] kobject: 'hci2:200': free name [ 193.796148][ T4186] hci2 orig refcnt 7 [ 193.796160][ T4186] hdev hci2 event 4 [ 193.796188][ T4186] hdev 0000000000000000 len 8 [ 193.796359][ T4186] hdev hci2 event 8 [ 193.804185][ T7968] kernfs runtime_suspended_time: removing [ 193.818991][ T4186] hci2 orig refcnt 6 [ 193.829616][ T5393] kernfs subsystem: removing [ 193.830033][ T7541] kernfs state: removing [ 193.836816][ T4186] channel 3 len 6 [ 193.839408][ C1] sctp: sctp_addr_wq_timeout_handler: the first ent in wq:ffffffff974d9858 is addr:fe80::16be:7ca3:343e:94cb for cmd:0 at entry:ffff888062f64d80 [ 193.845076][ T4186] channel 3 len 8 [ 193.848194][ C1] sctp: sctp_addr_wq_timeout_handler: the first ent in wq:ffffffff974d9858 is addr:fe80::c47f:330e:8ca:e150 for cmd:0 at entry:ffff88806253b580 [ 193.851893][ T4186] hdev hci2 event 2 [ 193.867441][ T5393] kernfs rfkill23: removing [ 193.872502][ T4186] hdev 0000000000000000 len 8 [ 193.885835][ T4198] kernfs power: removing [ 193.902345][ T7968] kernfs runtime_active_time: removing [ 193.907909][ T7541] kernfs soft: removing [ 193.913807][ T5393] kernfs uevent: removing [ 193.918163][ T7541] kernfs hard: removing [ 193.922460][ T7541] kernfs hard_block_reasons: removing [ 193.927875][ T7541] PM: Removing info for No Bus:rfkill26 [ 193.927928][ T4186] kernfs runtime_status: removing [ 193.933783][ T7541] kobject: 'rfkill26' (ffff88801ffd6108): kobject_uevent_env [ 193.940581][ T5393] kernfs name: removing [ 193.949045][ T7541] kobject: 'rfkill26' (ffff88801ffd6108): fill_kobj_path: path = '/devices/virtual/bluetooth/hci1/rfkill26' [ 193.959082][ T7968] kernfs autosuspend_delay_ms: removing [ 193.967626][ T4186] kernfs control: removing [ 193.972397][ T4186] kernfs runtime_suspended_time: removing [ 193.978640][ T5393] kernfs type: removing [ 193.983657][ T4198] kernfs device: removing [ 193.988360][ T4198] kernfs subsystem: removing [ 193.993380][ T4198] kernfs hci4:200: removing [ 193.997900][ T7541] kernfs rfkill26: removing [ 194.002477][ T4186] kernfs runtime_active_time: removing [ 194.007960][ T5393] kernfs index: removing [ 194.008006][ T7541] kobject: 'rfkill26' (ffff88801ffd6108): kobject_cleanup, parent 0000000000000000 [ 194.014082][ T5393] kernfs persistent: removing [ 194.026564][ T7541] kobject: 'rfkill26' (ffff88801ffd6108): calling ktype release [ 194.030298][ T7968] kernfs power: removing [ 194.038901][ T7541] kobject: 'rfkill26': free name [ 194.044117][ T4198] kernfs uevent: removing [ 194.048696][ T7541] kernfs runtime_status: removing [ 194.054008][ T7541] kernfs control: removing [ 194.064471][ T4186] kernfs autosuspend_delay_ms: removing [ 194.071658][ T4186] kernfs power: removing [ 194.076664][ T4198] PM: Removing info for No Bus:hci4:200 [ 194.076671][ T4186] kernfs device: removing [ 194.076693][ T4186] kernfs subsystem: removing [ 194.090131][ T4198] kobject: 'hci4:200' (ffff88807513c420): kobject_uevent_env [ 194.099099][ T7968] kernfs device: removing [ 194.099517][ T4198] kobject: 'hci4:200' (ffff88807513c420): fill_kobj_path: path = '/devices/virtual/bluetooth/hci4/hci4:200' [ 194.105579][ T7968] kernfs subsystem: removing [ 194.121276][ T5393] kernfs state: removing [ 194.125566][ T7968] kernfs hci0:200: removing [ 194.131217][ T4186] kernfs rfkill7: removing [ 194.135682][ T4186] kernfs uevent: removing [ 194.140635][ T7541] kernfs runtime_suspended_time: removing [ 194.146431][ T7541] kernfs runtime_active_time: removing [ 194.149068][ C1] nf_conntrack: new packet for ffff888070520d80 [ 194.158158][ C1] nf_nat: Already setup manip DST for ct ffff888070520d80 (status bits 0x188) [ 194.167258][ T7541] kernfs autosuspend_delay_ms: removing [ 194.167284][ C1] nf_nat: Already setup manip SRC for ct ffff888070520d80 (status bits 0x188) [ 194.183707][ T5393] kernfs soft: removing [ 194.187888][ T4186] kernfs name: removing [ 194.192249][ T4198] kernfs hci4:200: removing [ 194.196954][ T7541] kernfs power: removing [ 194.202296][ T7541] kernfs subsystem: removing [ 194.206951][ T7541] kernfs hci1: removing [ 194.211196][ T7541] kernfs uevent: removing [ 194.215562][ T7541] PM: Removing info for No Bus:hci1 [ 194.215583][ T4198] kobject: 'hci4:200' (ffff88807513c420): kobject_cleanup, parent 0000000000000000 [ 194.220829][ T7968] kernfs uevent: removing [ 194.220857][ T7968] PM: Removing info for No Bus:hci0:200 [ 194.220877][ T7968] kobject: 'hci0:200' (ffff888025078420): kobject_uevent_env [ 194.220915][ T7968] kobject: 'hci0:200' (ffff888025078420): fill_kobj_path: path = '/devices/virtual/bluetooth/hci0/hci0:200' [ 194.221031][ T7968] kernfs hci0:200: removing [ 194.230863][ C1] wireguard: wg2: Sending keepalive packet to peer 23 ([::1]:20001/0%0) [ 194.233833][ T4198] kobject: 'hci4:200' (ffff88807513c420): calling ktype release [ 194.233870][ T4198] kobject: 'hci4:200': free name [ 194.233887][ T4198] hci4 orig refcnt 7 [ 194.233898][ T4198] hdev hci4 event 4 [ 194.233921][ T4198] hdev 0000000000000000 len 8 [ 194.234049][ T4198] hdev hci4 event 8 [ 194.234061][ T4198] hci4 orig refcnt 6 [ 194.234085][ T4198] channel 3 len 6 [ 194.234120][ T4198] channel 3 len 8 [ 194.234143][ T4198] hdev hci4 event 2 [ 194.234164][ T4198] hdev 0000000000000000 len 8 [ 194.234264][ T7541] kobject: 'hci1' (ffff88805dd3d740): kobject_uevent_env [ 194.234295][ T7541] kobject: 'hci1' (ffff88805dd3d740): fill_kobj_path: path = '/devices/virtual/bluetooth/hci1' [ 194.250531][ T906] Added buffer head 0 to ffff888147243d00 [ 194.252278][ T1420] No more buffers in queue [ 194.263640][ T4173] nf_conntrack: new packet for ffff888077f81200 [ 194.268029][ T1420] eth0: xmit ffff88807801ac80 ff:ff:ff:ff:ff:ff [ 194.276400][ T4173] nf_nat: Already setup manip DST for ct ffff888077f81200 (status bits 0x188) [ 194.284042][ T1420] Added buffer head 17 to ffff888147cc2b00 [ 194.288985][ C0] virtqueue callback for ffff888147cc2b00 (ffffffff854980c0) [ 194.288990][ T4173] nf_nat: Already setup manip SRC for ct ffff888077f81200 (status bits 0x188) [ 194.300902][ T4186] kernfs type: removing [ 194.301850][ C0] Sent skb ffff88807801ac80 [ 194.305370][ T5393] kernfs hard: removing [ 194.309290][ C0] No more buffers in queue [ 194.310357][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.315706][ T5370] nf_conntrack: new packet for ffff888077f80480 [ 194.316836][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.320588][ T5370] nf_nat: Already setup manip DST for ct ffff888077f80480 (status bits 0x188) [ 194.328232][ C0] virtqueue callback for ffff888147243d00 (ffffffff84596440) [ 194.332278][ T5370] nf_nat: Already setup manip SRC for ct ffff888077f80480 (status bits 0x188) [ 194.342858][ T5393] kernfs hard_block_reasons: removing [ 194.360701][ T154] nf_conntrack: new packet for ffff888077f81200 [ 194.429932][ T7541] kernfs hci1: removing [ 194.432158][ T154] nf_nat: Already setup manip DST for ct ffff888077f81200 (status bits 0x188) [ 194.442290][ T7541] hci1 orig refcnt 2 [ 194.448370][ T154] nf_nat: Already setup manip SRC for ct ffff888077f81200 (status bits 0x188) [ 194.449234][ T7968] kobject: 'hci0:200' (ffff888025078420): kobject_cleanup, parent 0000000000000000 [ 194.457706][ T4186] kernfs index: removing [ 194.466839][ T7968] kobject: 'hci0:200' (ffff888025078420): calling ktype release [ 194.470096][ T4198] kernfs runtime_status: removing [ 194.474059][ T5371] nf_conntrack: new packet for ffff888077f81080 [ 194.482802][ T7541] kobject: 'hci1' (ffff88805dd3d740): kobject_cleanup, parent 0000000000000000 [ 194.486255][ T5371] nf_nat: Already setup manip DST for ct ffff888077f81080 (status bits 0x188) [ 194.495275][ T5393] PM: Removing info for No Bus:rfkill23 [ 194.504446][ T5371] nf_nat: Already setup manip SRC for ct ffff888077f81080 (status bits 0x188) [ 194.506513][ T7968] kobject: 'hci0:200': free name [ 194.508910][ T4186] kernfs persistent: removing [ 194.516595][ T7968] hci0 orig refcnt 7 [ 194.521957][ T5393] kobject: 'rfkill23' (ffff88802ce13108): kobject_uevent_env [ 194.529387][ T7968] hdev hci0 event 4 [ 194.538250][ T4198] kernfs control: removing [ 194.557826][ T7968] hdev 0000000000000000 len 8 [ 194.561452][ T7541] kobject: 'hci1' (ffff88805dd3d740): calling ktype release [ 194.565297][ T5393] kobject: 'rfkill23' (ffff88802ce13108): fill_kobj_path: path = '/devices/virtual/bluetooth/hci3/rfkill23' [ 194.583947][ T7541] All LE connection parameters were removed [ 194.588692][ T7968] hdev hci0 event 8 [ 194.590607][ T7541] kobject: 'hci1': free name [ 194.602430][ T7968] hci0 orig refcnt 6 [ 194.613736][ T4186] kernfs state: removing [ 194.629056][ T7968] channel 3 len 6 [ 194.641774][ T7968] channel 3 len 8 [ 194.645480][ T7968] hdev hci0 event 2 [ 194.649781][ T5393] kernfs rfkill23: removing [ 194.650128][ T7968] hdev 0000000000000000 len 8 [ 194.656882][ T5393] kobject: 'rfkill23' (ffff88802ce13108): kobject_cleanup, parent 0000000000000000 [ 194.659136][ T4198] kernfs runtime_suspended_time: removing [ 194.659173][ T4198] kernfs runtime_active_time: removing [ 194.659195][ T4198] kernfs autosuspend_delay_ms: removing [ 194.659239][ T4198] kernfs power: removing [ 194.659261][ T4198] kernfs device: removing [ 194.659281][ T4198] kernfs subsystem: removing [ 194.668647][ T5393] kobject: 'rfkill23' (ffff88802ce13108): calling ktype release [ 194.674695][ T7541] syz_tun: bond_netdev_event received NETDEV_GOING_DOWN [ 194.695350][ T5393] kobject: 'rfkill23': free name [ 194.699895][ T7541] net syz_tun: siw: event 10 [ 194.709938][ T5393] kernfs runtime_status: removing [ 194.728007][ T4186] kernfs soft: removing [ 194.732981][ T4186] kernfs hard: removing [ 194.737205][ T4198] kernfs rfkill9: removing [ 194.742044][ T4198] kernfs uevent: removing [ 194.744522][ T7541] In tnode_resize ffff888057548820 inflate_threshold=50 threshold=25 [ 194.746432][ T4198] kernfs name: removing [ 194.754513][ C0] virtqueue callback for ffff88801ee44900 (ffffffff84450960) [ 194.754566][ C0] virtqueue interrupt with no work for ffff88801ee44800 [ 194.754576][ C0] virtqueue interrupt with no work for ffff88801ee44700 [ 194.754725][ T1111] Added buffer head 0 to ffff88801ee44900 [ 194.754873][ T7541] In tnode_resize ffff88807534d020 inflate_threshold=50 threshold=25 [ 194.760538][ T7968] kernfs runtime_status: removing [ 194.767291][ T7541] In tnode_resize ffff888058f73920 inflate_threshold=50 threshold=25 [ 194.774132][ T4186] kernfs hard_block_reasons: removing [ 194.789200][ T7541] In tnode_resize ffff888076fe9f20 inflate_threshold=50 threshold=25 [ 194.794657][ T5393] kernfs control: removing [ 194.801836][ T7541] In tnode_resize ffff88805a151920 inflate_threshold=50 threshold=25 [ 194.809160][ T4198] kernfs type: removing [ 194.819286][ T7541] In tnode_resize ffff88802b8bf220 inflate_threshold=50 threshold=25 [ 194.834736][ T7968] kernfs control: removing [ 194.837614][ T7541] In tnode_resize ffff88802b8bf020 inflate_threshold=50 threshold=25 [ 194.845784][ T5393] kernfs runtime_suspended_time: removing [ 194.851463][ T7541] In tnode_resize ffff888061bfda20 inflate_threshold=50 threshold=25 [ 194.858823][ T4186] PM: Removing info for No Bus:rfkill7 [ 194.864908][ T7541] In tnode_resize ffff88805f4a3420 inflate_threshold=50 threshold=25 [ 194.872680][ T4198] kernfs index: removing [ 194.879131][ C0] nf_conntrack: normal packet for ffff888076b0b200 [ 194.886258][ T7968] kernfs runtime_suspended_time: removing [ 194.890241][ C0] tcp_in_window: START [ 194.897191][ T7968] kernfs runtime_active_time: removing [ 194.902564][ C0] tcp_in_window: [ 194.902577][ C0] seq=1612962947 ack=1145258562+(0) sack=1145258562+(0) win=64240 end=1612962948 [ 194.902596][ C0] tcp_in_window: sender end=1612962948 maxend=1612962948 maxwin=64240 scale=7 receiver end=1145258562 maxend=1145322802 maxwin=1 scale=14 [ 194.906717][ T4186] kobject: 'rfkill7' (ffff888140fd9108): kobject_uevent_env [ 194.912114][ C0] tcp_in_window: [ 194.912122][ C0] seq=1612962947 ack=1145258562+(0) sack=1145258562+(0) win=64240 end=1612962948 [ 194.912140][ C0] tcp_in_window: sender end=1612962948 maxend=1612962948 maxwin=64240 scale=7 receiver end=1145258562 maxend=1145322802 maxwin=1 scale=14 [ 194.912161][ C0] tcp_in_window: I=1 II=1 III=1 IV=1 [ 194.912176][ C0] tcp_in_window: res=1 sender end=1612962948 maxend=1612962948 maxwin=64240 receiver end=1145258562 maxend=1145322802 maxwin=1 [ 194.917912][ T4186] kobject: 'rfkill7' (ffff888140fd9108): fill_kobj_path: path = '/devices/virtual/bluetooth/hci2/rfkill7' [ 194.925121][ C0] tcp_conntracks: [ 194.925129][ C0] syn=1 ack=1 fin=0 rst=0 old=2 new=2 [ 194.930237][ T7541] trie_flush found=1 [ 194.939887][ T4198] kernfs persistent: removing [ 194.947022][ T7541] In tnode_resize ffff888057548820 inflate_threshold=50 threshold=25 [ 194.950478][ T5393] kernfs runtime_active_time: removing [ 194.950500][ T5393] kernfs autosuspend_delay_ms: removing [ 194.950541][ T5393] kernfs power: removing [ 194.959847][ T7541] In tnode_resize ffff88807534d020 inflate_threshold=50 threshold=25 [ 194.959870][ T7541] In tnode_resize ffff888058f73920 inflate_threshold=50 threshold=25 [ 194.959887][ T7541] In tnode_resize ffff888076fe9f20 inflate_threshold=50 threshold=25 [ 194.959904][ T7541] In tnode_resize ffff88805a151920 inflate_threshold=50 threshold=25 [ 194.959920][ T7541] In tnode_resize ffff88802b8bf220 inflate_threshold=50 threshold=25 [ 194.976615][ T7968] kernfs autosuspend_delay_ms: removing [ 194.989012][ T7541] In tnode_resize ffff88802b8bf020 inflate_threshold=50 threshold=25 [ 194.994046][ T7968] kernfs power: removing [ 195.019075][ T7541] In tnode_resize ffff888061bfda20 inflate_threshold=50 threshold=25 [ 195.029965][ T4186] kernfs rfkill7: removing [ 195.032239][ T7541] In tnode_resize ffff88805f4a3420 inflate_threshold=50 threshold=25 [ 195.036678][ T4186] kobject: 'rfkill7' (ffff888140fd9108): kobject_cleanup, parent 0000000000000000 [ 195.041597][ T5393] kernfs subsystem: removing [ 195.041614][ T5393] kernfs hci3: removing [ 195.046956][ T4186] kobject: 'rfkill7' (ffff888140fd9108): calling ktype release [ 195.054309][ T7541] trie_flush found=1 [ 195.064383][ T4186] kobject: 'rfkill7': free name [ 195.071221][ T5393] kernfs uevent: removing [ 195.090288][ T7541] syz_tun: bond_netdev_event received NETDEV_DOWN [ 195.092764][ T7968] kernfs device: removing [ 195.101191][ T7541] net syz_tun: siw: event 2 [ 195.105080][ T4198] kernfs state: removing [ 195.120082][ T7541] sctp: sctp_addr_wq_mgmt: add new entry for cmd:2, addr:fe80::a8aa:aaff:feaa:aaaa in wq:ffff888062654198 [ 195.125824][ T4186] kernfs runtime_status: removing [ 195.141440][ T7541] sctp: sctp_addr_wq_mgmt: add new entry for cmd:2, addr:fe80::aa in wq:ffff888062654198 [ 195.145932][ T5393] PM: Removing info for No Bus:hci3 [ 195.155786][ T4186] kernfs control: removing [ 195.169126][ T5393] kobject: 'hci3' (ffff88807b4d9740): kobject_uevent_env [ 195.172999][ T7541] Deleting ac141400/24 tos=0 t=ffff8880205c4cb0 [ 195.175225][ T5393] kobject: 'hci3' (ffff88807b4d9740): fill_kobj_path: path = '/devices/virtual/bluetooth/hci3' [ 195.179931][ T7541] Deleting ac1414ff/32 tos=0 t=ffff8880205c4cb0 [ 195.189021][ T7968] kernfs subsystem: removing [ 195.195398][ C1] nf_conntrack: new packet for ffff888070520d80 [ 195.200579][ T4198] kernfs soft: removing [ 195.210093][ C1] nf_nat: Already setup manip DST for ct ffff888070520d80 (status bits 0x188) [ 195.215546][ T5393] kernfs hci3: removing [ 195.219714][ C1] nf_nat: Already setup manip SRC for ct ffff888070520d80 (status bits 0x188) [ 195.226897][ T4186] kernfs runtime_suspended_time: removing [ 195.236125][ T7541] Deleting ac1414aa/32 tos=0 t=ffff8880205c4cb0 [ 195.243808][ T7968] kernfs rfkill32: removing [ 195.252954][ T7541] In tnode_resize ffff88805f4a3420 inflate_threshold=50 threshold=25 [ 195.256310][ T5393] hci3 orig refcnt 2 [ 195.261073][ T7541] sctp: sctp_addr_wq_mgmt: add new entry for cmd:2, addr:172.20.20.170 in wq:ffff888062654198 [ 195.265007][ T4198] kernfs hard: removing [ 195.275593][ T7541] syz_tun (unregistering): bond_netdev_event received NETDEV_UNREGISTER [ 195.278374][ T5393] kobject: 'hci3' (ffff88807b4d9740): kobject_cleanup, parent 0000000000000000 [ 195.287536][ T7541] net syz_tun: siw: event 6 [ 195.292867][ T5393] kobject: 'hci3' (ffff88807b4d9740): calling ktype release