last executing test programs: 8.918682777s ago: executing program 0 (id=184): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r3 = dup(r2) sendmsg$nl_route_sched(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000dc0), 0x6df8}}, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r3}, 0x8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000140), 0x4) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r4, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000040)={0x1, 0x1, 0x0, &(0x7f0000001600)=""/65, 0x0, 0x4}) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000001a80)) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000400)=""/185, 0x0, 0x9000}) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f00000001c0)={0x1, 0x1, 0x0, 0x0, 0x0, 0xf0ffffffffff0000}) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="00f8fdff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ffffffff000000000100"/28], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x6, 0x10, &(0x7f0000000e40)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000300000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b704000008000000850000001c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000100)={r6, r1, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xfdef, &(0x7f0000000fc0)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2a}, @void, {@ipv6={0x86dd, @udp={0x7, 0x6, "2f1db0", 0x10, 0x11, 0x1, @mcast1, @private1={0xfc, 0x1, '\x00', 0x1}, {[], {0x4e23, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x1, 0x0, 0x1, 0x100}}}}}}}}, 0x0) syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x208404, &(0x7f0000000280)={[{@nogrpid}, {@jqfmt_vfsv0}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@debug}, {@nombcache}, {@quota}, {}]}, 0x3, 0x43b, &(0x7f0000000300)="$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") setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000c80)=r6, 0x4) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x58e, &(0x7f0000000180), 0x1, 0x451, &(0x7f0000000780)="$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") chdir(&(0x7f0000000040)='./file0\x00') renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r6, 0xf503, 0x0) 8.048006364s ago: executing program 4 (id=191): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x60}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) unshare(0x2040400) r0 = socket(0x2, 0x80805, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x61, 0x11, 0x78}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x70) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = socket(0x15, 0x5, 0x0) getsockopt(r4, 0x200000000114, 0x2711, 0x0, &(0x7f0000000080)=0xfffffd9d) r5 = fsmount(r3, 0x0, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r2, r5, 0x16, 0x0, @void}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, 0x0, 0x0) 7.839041871s ago: executing program 3 (id=193): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000080)={0x10000, 0x9, {0xffffffffffffffff}, {0xffffffffffffffff}, 0x0, 0x950}) ptrace$ARCH_MAP_VDSO_64(0x1e, r0, 0x7, 0x2003) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x8) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xd, &(0x7f0000000140)=0xffffffff, 0x4) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000340)=ANY=[@ANYRESHEX=r2], 0x14}, 0x1, 0x0, 0x0, 0x404c000}, 0x80d1) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) fanotify_mark(0xffffffffffffffff, 0x219, 0x183b, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) ioctl$AUTOFS_IOC_FAIL(r5, 0x4c80, 0xfffffffc) 7.784024052s ago: executing program 0 (id=194): r0 = syz_genetlink_get_family_id$ipvs(&(0x7f00000006c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000010140)={0x50, r0, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_NETMASK={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}]}, 0x50}}, 0x0) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000140)='./file2\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYRES16=0x0, @ANYRES8, @ANYRES64, @ANYBLOB="b71fe84fda50cf6fbefac5a5891d03a05027c0e6658ea94f09636160112a47b688552b72051bf0111daffbe0adef82589ee2fac726c31d20f98aa1f9761873cd604dab0d22b4b321f4c20044c5a8e018b51e52342814e4c33a7f4807781862b524b303c604203d95ef2faa04cfd7ddc4f2edca0adeae0088a8e16969e9000a6a9d85bf9d4ee333cf03763ad6506f66797f154f0923a63f106d908d1cf2a884e57ab63950b9883c40449a94847df80ca39e9394f8de077bfd7f0c81e773158bd33c339a0f92997d172adcde0c53c97cce8a0f42c862a0c88c9a25ccf6799b85dadc245f608d6cb5ded47e4a20ad821132952cc1884e1473794144bbd01594b306a04fc39f13202b4447f8bbccc51a6c4b555b46a2df7f0fe979ef6c31ef8c81a81c26e71f96ea1d8ed245277259bdf970db1f41c75d8384b6b23cf44e9b04527874daf6c34e4deda0da670addd7c8f5eab4410908517c88940d", @ANYRES16], 0xfe, 0x1518, &(0x7f00000022c0)="$eJzs3AuYjtX6MPB1r7UehqS3SQ7Dutf98KbBMkmSQ0IOSZIkSU4JSZMkCYkhp6QhCTlOmhyGkBymMWmcz4eckyZbmiQJySlZ38Vub7uv/W/v/7f39/e/9ty/61rXrPt93nu99zP3XPOu55lr3u96jqrXon7tZkQk/iXw5y9JQogYIcQwIcR1QohACFEptlLspeP5FCT9ay/C/r0eTrvaFbCrifufu3H/czfuf+7G/c/duP+5G/c/d+P+527cf8Zys22zi13PI/cOvv+fm/H7/3+QnPKTv9pQ/sZe/40U7n/uxv3P3bj/uRv3P3fj/udu3P//fLX+4Bj3P3fj/jOWm/31XvAF7/3/gvvRPP5nx9X++WOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxljuc9VdoIcRf5le7LsYYY4wxxhhjjP37+LxXuwLGGGOMMcYYY4z9/wdCCiW0CEQekVfEiHwiv7hGFBDXioLiOhER14tYcYMoJG4UhUURUVQUE3GiuCghjEBhBYlQlBSlRFTcJEqLm0W8KCPKinLCifIiQdwiKohbRUVxm6gkbheVxR2iiqgqqonq4k5RQ9wlaopaora4W9QRdUU9UV/cIxqIe0VDcZ9oJO4XjcUDool4UDQVD4lm4mHRXDwiWohHRUvxmGglWos2oq1o9/+U/5LoK14W/UR/kSQGiIHiFTFIDBZDxFAxTLwqhovXxAjxukgWI8Uo8YYYLd4UY8RbYqwYJ8aLt8UEMVFMEpPFFDFVpIh3xDTxrkgV74npYoaYKWaJNDFbzBHvi7linpgvPhALxIdioVgkFoslIl18JDLEUpEpPhbLxCciSywXK8RKsUqsFmvEWrFOrBcbxEaxSWwWW8RWsU18KraLHWKn2CV2iz1ir/hM7BOfi/3iC5Etvvxv5p/5v/J7gQABEiRo0JAH8kAMxEB+yA8FoAAUhIIQgQjEQiwUgkJQGApDUSgKcRAHJaAEICAQEJSEkhCFKJSG0hAP8VAWyoIDBwmQABXgVqgIFaESVILKUBmqQFWoCtWhOtSAGlATakJtqA11oA7Ug3pwD9wD90JDaAiNoBE0hsbQBJpAU2gKzaAZNIfm0AJaQEtoCa2gFbSBNtAO2kF7aA8doAN0gk7QGTpDF+gCiZAIXaErdINu0B26Qw/oAT2hJ/SC3tAbXoKX4GV4GfpDHTkABsJAGASDYAgMhaHwKgyH1+A1eB2SYSSMgjfgDXgTxsBpGAvjYDyMhxpyIkyCyUByKqRACkyDaZAKqTAdZsAMmAVpMBvmwByYC/NgHnwAC+BD+BAWwSJYAumQDhmwFDIhE5bBGciC5bACVsIqWA2rYC2sg7WwATbCBtgMm2ErbIVP4VPYATtgF+yCPbAHPoPP4HP4HJIhG7LhAByAg3AQDsEhyIEcOAyH4QgcgaNwFI7BMTgOJ+AknIBTcApOwxk4C2fhPJyHC/BC3DfN95RZnyzkJVpqmUfmkTEyRuaX+WUBWUAWlAVlREZkrIyVhWQhWVgWlkVlURkn42QJWUKiREkylCVlSRmVUVlalpbxMl6WlWWlk04myARZQVaQFWVFWUneLivLO2QVWVV2dNVldVlDdnI1ZS1ZW9aWdWRdWU/Wl/VlA9lANpQNZSPZSDaWjWUT+aBsKgfAEHhYXupMCzkSWspR0Eq2lm1kW/kmPC7byzHQQXaUneSTchyMhS6yvUuUz8iuchJ0k8/JyfC87CGnQk/5ouwle8s+8iXZV3Zw/WR/OR0GyIFyFgySg+UQOVTOhbryUsfqyddlshwpR8k35BJ4U46Rb8mxcpwcL9+WE+REOUlOllPkVJki35HT5LsyVb4np8sZcqacJdPkbDlHvi/nynlyvvxALpAfyoVykVwsl8h0+ZHMkEtlpvxYLpOfyCy5XK6QK+UquVqukWvlOrlebpAb5Sa5WW6RW+U2+ancLnfInXKX3C33yL3yM7lPfi73yy9ktvxSHpB/kgflV/KQ/FrmyG/kYfmtPCK/k0fl9/KY/EEelyfkSfmjPCV/kqflGXlWnpPn5c/ygvxFXpReCgVKKqW0ClQelVfFqHwqv7pGFVDXqoLqOhVR16tYdYMqpG5UhVURVVQVU3GquCqhjEJlFalQlVSlVFTdpEqrm1W8KqPKqnLKqfIqQd2iKqhbVUV1m6qkbleV1R2qiqqqqqnq6k5VQ92laqpaqra6W9VRdVU9VV/doxqoe1VDdZ9qpO5XjdUDqol6UDVVD6lm6mHVXD2iWqhHVUv1mGqlWqs2qq1qpx5X7dUTqoPqqDqpJ1Vn9ZTqop5WieoZ1VU9q7qp51R39bzqoV5QPdWLqpfqrfqoX9RF5VU/1V8lqQFqoHpFDVKD1RA1VA1Tr6rh6jU1Qr2uktVINUq9oUarN9UY9ZYaq8ap8eptNUFNVJPUZDVFTVUp6h01Tb2rUtV7arqaoWaqWSpNzVZDfl1p/j+R/+7fyR9x+dW3qm3qU7Vd7VA71S61W+1Re9VetU/tU/vVfpWtstUBdUAdVAfVIXVI5agcdVgdVkfUEXVUHVXH1DF1XJ1Q59SP6pT6SZ1WZ9QZdU6dV+fVhV+/B0KDllpprQOdR+fVMTqfzq+v0QX0tbqgvk5H9PU6Vt+gC+kbdWFdRBfVxXScLq5LaKNRW0061CV1KR3VN+nS+mYdr8vosrqcdrq8TtC3/Mv5/6i+drqdbq/b6w66g+6kO+nOurPuorvoRJ2ou+quupvuprvr7rqH7qF76p66l+6l++g+uq/uq/vpfjpJJ+mB+hU9SA/WQ/RQPUy/qofr4XqEHqGTdbIepUfp0Xq0HqPH6LF6rB6vx+sJeoKepCfpKXqKTtEpepqeplN1qp6up+uZeqZO02l6jp6j5+q5er6erxfoBXqhXqgX68U6XafrDJ2hM3WmXqaX6Sy9XC/XK/VKvVqv1mv1Wr1er9cb9Ua9WW/WWXqb3qa36+16p96pd+vdeq/eq/fpfXq/3q+zdbY+oA/og/qgPqQP6Rydow/rw/qIPqKP6qP6mD6mj+vj+qQ+qU/pU/q0Pq3P6rP6vD6vL+gL+qK+eGnbF8hABjrQQZ4gTxATxAT5g/xBgaBAUDAoGESCSBAbxAaFghuDwkGRoGhQLIgLigclAhNgYAMKwqBkUCqIBjcFpYObg/igTFA2KBe4oHyQENwSVAhuDSoGtwWVgtuDysEdQZWgalAtqB7cGdQI7gpqBrWC2sHdQZ2g7l/+DhXcGzQM7gsaBfcHjYMHgibBg0HT4KGgWfBw0Dx4JGgRPBq0DB4LWgWtgzZB26DdP7t+UC+oH9wTNPjD9b0/XeQJ18/0N0lmgBloXjGDzGAzxAw1w8yrZrh5zYwwr5tkM9KMMm+Y0eZNM8a8ZcaacWa8edtMMBPNJDPZTDFTTYp5x0wz75pU856ZbmaYmWaWSTOzzRzzvplr5pn55gOzwHxoFppFZrFZYtLNRybDLDWZ5mOzzHxissxys8KsNKvMarPGrDXrzHqzwWw0m8xms8VsNdvMp2a72WF2ml1mt9lj9prPzD7zudlvvjDZ5ktzwPzJHDRfmUPma5NjvjGHzbfmiPnOHDXfm2PmB3PcnDAnzY/mlPnJnDZnzFlzzpw3P5sL5hdz0fhLm/tLb++oUWMezIMxGIP5MT8WwAJYEAtiBCMYi7FYCAthYSyMRbEoxmEclsASeAkhYUksiVGMYmksjfEYj2WxLDp0mIAJWAErYEWsiJWwElbGylgFq2A1rIZ34p14F96FtbAW3o13Y12si/WxPjbABtgQG2IjbISNsTE2wSbYFJtiM2yGzbE5tsAW2BJbYitshW2wDbbDdtge22MH7ICdsBN2xs7YBbtgIiZiV+yK3bAbdsfu2AN7YE/sib2wF/bBPtgX+2K/c/0wCZNwIA7EQTgIh+AQHIbDcDgOxxE4ApMxGUfhKByNo3EMjsGxOA7H49s4ASfiJJyMU3AqpmAKTsNpmIqpOB2n40yciWmYhnNwDs7FuTgf5+MCXIALcSEuxsWYjumYgRmYiZm4DJdhFmbhClyBq3AVrsE1uA7X4QbcgJtwE27BLbgNt+F23I47cSfuxt24F/fiPtyH+3E/ZmM2HsADeBAP4iE8hDmYg4fxMB7BI3gUj+IxPIbH8TiexJN4Ck/haTyNZ/Esnsef8QL+ghfRY4yVIr+9xhaw19qC9jobY/PZv42L2mI2zha3JayxhW2R38RorY23ZWxZW846W94m2Ft+F1exVW01W93eaWvYu2zN38UN7L22ob3PNrL32/r2nt/Eje0Dtol91Da1j9lmtrVtbtvaFvZR29I+ZlvZ1raNbWs726dsF/u0TbTP2K722d/FGXapXWfX2w12o91nP7dn7Tl7xH5nz9ufbT/b3w6zr9rh9jU7wr5ukxuN/G1sR9rx9m07wU60k+xkO8VO/V08086yaXa2nWPft3PtvN/F6fYju8Bm2oV2kV1sl1yOL9WUaT+2y+wnNssutyvsSrvKrrZr7Nq/1rrSbrZb7Fa7135mt9sddqfdZXfbPZfjS+ex335hs+2X9rD91h60X9lD9qjNsd9cji+d31H7vT1mf7DH7Ql70v5oT9mf7Gl75vL5Xzr3H+0v9qL1VhCQJEWaAspDeSmG8lF+uoYK0LVUkK6jCF1PsXQDFaIbqTAVoaJUjOKoOJUgQ0iWiEIqSaUoSjdRabqZ4qkMlaVy5Kg8JdAtVIFupYp0G1Wi26ky3UFVqCpVo+p0J9Wgu6gm1aLadDfVobpUj+rTPdSA7qWGdB81ovupMT1ATehBakoPUTN6mJrTI9SCHqWW9Bi1otbUhtpSO3qc2tMT1IE6Uid6kjrTU9SFnqZEeoa60rPUjZ6j7vQ89aAXqCe9SL2oN/Whl6gvvUz9qD8l0QAaSK/QIBpMQ2goDaNXaTi9RiPodUqmkTSK3qDR9CaNobdoLI2j8fQ2TaCJNIkm0xSaSin0Dk2jdymV3qPpNINm0ixKo9k0h96nuTSP5tMHtIA+pIW0iBbTEkqnjyiDllImfUzL6BPKouW0glbSKlpNa2gtraP1tIE20ibaTFtoK22jT2k77aCdtIt20x7aS5/RPvqc9tMXlE1f0gH6Ex2kr+gQfU059A0dpm/pCH1HR+l7OkY/0HE6QSfpRzpFP9FpOkNn6Rydp5/pAv1CF8mTCCGUoQp1GIR5wrxhTJgvzB9eExYIrw0LhteFkfD6MDa8ISwU3hgWDouERcNiYVxYPCwRmhBDG1IYhiXDUmE0vCksHd4cxodlwrJhudCF5cOE8JawQnhrWDG8LawU3h5WDu8Iq4RVw0fvrx7eGdYI7wprhrXC2uHdYZ2wblgvrB/eEzYI7w0bhveFjcL7w4rhA2GT8MGwafhQ2Cx8OGwePhK2CB8NW4aPha3C1mGbsG3YLnw8bB8+EXYIO4adwifDzuFTYZfw6TAxfCbsGj77D48nhQPCgeEr4Suh9/epxdEl0fToR9GM6NJoZvTj6LLoJ9Gs6PLoiujK6Kro6uia6Nrouuj66Iboxuim6ObolujWqPf18woHTjrltAtcHpfXxbh8Lr+7xhVw17qC7joXcde7WHeDK+RudIVdEVfUFXNxrrgr4YxDZx250JV0pVzU3eRKu5tdvCvjyrpyzrnyLsG1de1cO9fePeE6uI6uk3vSPemeck+5p93T7hnX1T3rurnnXHf3vOvhXnAvuBddL9fb9XEvub7uZdfP9XdJLskNdAPdIDfIDXFD8vy6B3Mj3AiX7JLdKDfKjXaj3Rg3xo11Y914N95NcBPcJDfJTXFTXIpLcdPcNJfqUt10N93NdDNdmktzc9wcN9fNdfPdfLcgfoFb6Ba6xW6xS3fpLsNluEyX6Za5ZS7LZbkVboVb5Va5NW6NW+fWuQ1ug9vkNrktbovb5ra57W672+l2ut1ut9vr9rp9bp/b7/a7bJftDrgD7qA76A65r12O+8Yddt+6I+47d9R97465H9xxd8KddD+6U+4nd9qdcWfdOXfe/ewuuF/cReddSuSdyLTIu5HUyHuR6ZEZkZmRWZG0yOzInMj7kbmReZH5kQ8iCyIfRhZGFkUWR5ZE0iMfRTIiSyOZkY8jyyKfRLIiyyMrIisjqyKrI94X3x76kr6Uj/qbfGl/s4/3ZXxZX847X94n+Ft8BX+rr+hv85X87b6yv8NX8VV9Nf+Yb+Vb+za+rW/nH/ft/RO+g+/oO/knfWf/lO/in/aJ/hnf1T/ru/nnfHf/vO/hX/A9/Yu+l+/t+/iXfF//su/n+/skP8AP9K/4QX6wH+KH+mH+VT/cv+ZH+Nd9sh/pR/k3/Gj/ph/j3/Jj/Tg/3r/tJ/iJfpKf7Kf4qT7Fv+On+Xd9qn/PT/cz/Ew/y6f52X6Of9/P9fP8fP+BX+A/9Av9Ir/YL/Hp/iOf4Zf6TP+xX+Y/8Vl+uV/hV/pVfrVf49f6dX693+A3+k1+s9/it/pt/lO/3e/wO/0uv9vv8Xv9Z36f/9zv91/4bP+lP+D/5A/6r/wh/7XP8d/4w/5bf8R/54/67/0x/4M/7k/4k/5Hf8r/5E/7M/6sP+fP+5/9Bf+Lv8j/s8YYY4wx9k9JPfTHxwf8ncfkr+OSgUKIa3cUy/nb41oIsanwn+eDZVzniBDimf49H/7LqFMnKSnp1+dmKRGUWiSEiFzJv3wZ8mu8XHQST4lE0VFU+Lv1DZa9z9MfrA/HvY/eLkT+v8mJEVfiK+vf+l+s//iT4zMqh2djf7v+hV/3m5fqjy4SIr7UlZx84kp8Zf2K/8X6Rdr/Uf1ZSuT7KkWIDn+TU0Bcia+snyCeEM+KxN88kzHGGGOMMcYY+7PBslr3f3D9efn6PE5fDi8/nFf8Nf6H1+eMMcYYY4wxxhi7+p7v3efpxxMTO3bnCU94wpO/Tq72bybGGGOMMcbYv9uVTf/VroQxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGMu9/ic+TuxqnyNjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDF2tf2fAAAA///9QkNA") rename(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000140)='./file1\x00') sync() r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x40) write$binfmt_script(r2, &(0x7f0000000200)={'#! ', './file1'}, 0xb) 7.783887723s ago: executing program 1 (id=195): r0 = syz_io_uring_setup(0x478e, &(0x7f0000000400)={0x0, 0xc593, 0x8, 0x1, 0x309}, 0x0, 0x0, &(0x7f0000000500)) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d1d7a440041601801f44010203010902120001000000000904"], 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x3, 0x82040) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r1, 0xc0045520, &(0x7f0000000040)=0x1) io_uring_register$IORING_REGISTER_RING_FDS(r0, 0x14, &(0x7f0000000540), 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r4, r3, 0x0, 0x23b) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000008c0)={'bridge_slave_1\x00'}) syz_open_dev$I2C(&(0x7f0000000000), 0x7f, 0x404002) r5 = openat$kvm(0xffffff9c, &(0x7f0000002f80), 0x80000, 0x0) ioctl$KVM_CHECK_EXTENSION(r5, 0xae03, 0x4c) r6 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000034709d405f0530c6acb60102030109021200fd000000000904"], 0x0) r7 = socket$unix(0x1, 0x5, 0x0) bind$unix(r7, 0x0, 0x0) socket$unix(0x1, 0x5, 0x0) syz_usb_control_io$hid(r6, 0x0, &(0x7f0000000380)={0x2c, &(0x7f0000000400)={0x20, 0x0, 0x1, "af"}, 0x0, 0x0, 0x0, 0x0}) socket$inet_mptcp(0x2, 0x1, 0x106) 7.759994684s ago: executing program 4 (id=196): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x3d, 0x1, 0x1, 0x10002b}, {0x1d, 0x0, 0x0, 0x10000000}, {0x6, 0x7}]}) 7.324592807s ago: executing program 4 (id=197): syz_usb_connect(0x0, 0x5a, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000060f94d100d05020027230102030109024840020000000009047d04031d5abf0009050400005539000009050b00000000000009050200000005000009047d01013481af0009a00e00230000690009047d02"], 0x0) syz_usb_connect(0x6, 0x24, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000003280)={0x0, 0x10, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="60000000020601040000000000000000010000031400078005001400fd7900000800084000000044050001000700000005000400040000000900020073797a3000000000050005000a00000011000300686173683a6970"], 0x60}, 0x1, 0x0, 0x0, 0x44885}, 0x8010) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000006c0001f526bd7000fedbdf2500000000", @ANYRES32, @ANYBLOB="867000000024000008000500", @ANYRES32, @ANYBLOB="080013"], 0x30}}, 0x44) 6.91667759s ago: executing program 3 (id=198): timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, 0x0) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000200)=@req3={0x2, 0xf1e, 0x596, 0xfffffff7, 0x0, 0x401, 0x7}, 0x1c) r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000380)={&(0x7f0000a1d000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000100)=""/140, 0x8c, 0x0, &(0x7f0000000280)=""/241, 0xf1}, &(0x7f0000000440)=0x40) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat$dsp1(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f00000000c0)=0x17) ioctl$SNDCTL_DSP_GETFMTS(r2, 0x8004500b, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000006, 0x10012, r2, 0x90b92000) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5800000010001fff2dbd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="000002008d020600300012800b000100697036746e6c000020000280ff000300fe8000000000000000000000000000aa05000900040000000800040000000100"], 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x0) 6.112371246s ago: executing program 0 (id=199): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)}, 0x20004081) r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000180091"], 0xfdef) 6.111809666s ago: executing program 3 (id=200): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e1d, 0x1, @mcast1, 0x8}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000000)=0x28, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x400ad80, &(0x7f00000000c0)={0xa, 0x4e23, 0x5b3, @ipv4={'\x00', '\xff\xff', @loopback}, 0x8}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000001ec0)=[{{0x0, 0x0, &(0x7f0000000540)=[{0x0}], 0x1}}], 0x1, 0x0) 5.628475401s ago: executing program 3 (id=211): r0 = socket(0x26, 0x1, 0x8) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000140)={r3, 0x1}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000100)={r3, @in={{0x2, 0x4e22, @multicast1}}, [0x1, 0x4, 0x7fff, 0x3, 0x97f, 0x9, 0x40, 0x711, 0x7, 0x498, 0x2e7, 0x3, 0x800, 0xa, 0x7]}, &(0x7f0000000200)=0x100) write(r0, &(0x7f00000000c0)="240000001e005f0214fffffffffffff8070000000000000000000000080009001d000000", 0x24) recvfrom$inet6(r0, &(0x7f00000007c0)=""/184, 0xb8, 0x40000000, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44000010203010902bf0002010650000900000000020d00000524060001082400a9b30d240f010a0000000300ff000606241a05001407240a050905580c240c00000000a90c09000304240202042402000424060244"], 0x0) syz_usb_connect$printer(0x6, 0x2d, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0x7, 0x1, 0x3, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x7, 0x0, 0x7f, "", [{{0x9, 0x4, 0x0, 0x8c, 0x2, 0x0, 0x0, 0x0, 0x6, "", {{{0x9, 0x5, 0x1, 0x2, 0x400, 0x4, 0x9a, 0x9}}}}}]}}]}}, 0x0) syz_usb_connect(0x0, 0xf5, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0) 5.488922236s ago: executing program 2 (id=201): r0 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000001c0)="d5314f65c092bfa37f099906d035a523e47956fb2598a23c8772d5d938d17e3dd62dcf0b07de0515e1574dba60fc72451f31eb3db1249ea965bc86f42ff760fb0d52422a", 0x44}], 0x1, &(0x7f0000000340)=[{0xb8, 0x1a, 0xfffffff8, "8c8a697ae31fa5dcb0287f18f3934963b996271bd3c3b3205281a1f8784d90d17175eafc138150e7b1b57d6533000eebed8357241fbccdf8f3e3c49f4c04eb71318127937328f9027802e091f863bb27cb6d01d70459ff9e57a5ebf2fa3a2b0ad8b96d9315ecdab60895da5a50d8702f22b62e3d14e4e0971ea9ac814efe96b7ec0e5670cd8b15217ae2ec877719baee5943ba734b4a748ada35c4f4a82b42796149a98952e73162"}, {0xb8, 0x118, 0x9, "cd4fec08c58852c1ca04abfc88ddde581cc8cdf0e0d86633fc9dce0a9043e7e8fb0f49ddb381a2d1276e08bc1dcc6f010e1b3af22be980607dad6a6bc54f91a87d74a19c341f535895e83d8d6fe7cf795094c842ea535508b5758fe3cb601fe2aedf24014bc302a6f8213c6fa992266e6db1314541c8cc01ba7745f6e0b1623dae01e33c37ead766bf0de4c0613761d47ff6497747589e3ba3375d0d0b409d45492f"}], 0x170}, 0x4040) r1 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x0, 0x4, @private2, 0x8000000}}, 0x80, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000100100000100000000000000000000001000000000000000100100000b"], 0x28}, 0x4044454) close(0x3) r2 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') read$FUSE(r2, &(0x7f000000a3c0)={0x2020}, 0x2020) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x83, &(0x7f0000000300)=@assoc_value={0x0}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000000100)={r5, 0x80, 0x2a1}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp6_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f0000000180)=@assoc_value={r6, 0x100005}, 0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f00000000c0)={r5, 0x1000}, 0x8) 5.436044508s ago: executing program 0 (id=202): capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7}) r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = socket$inet(0xa, 0x801, 0x84) ioctl$F2FS_IOC_GARBAGE_COLLECT(r1, 0x4004f506, &(0x7f0000000240)) listen(r1, 0x8) r2 = socket$inet(0xa, 0x801, 0x84) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) listen(r3, 0x100) listen(r2, 0x8) r4 = socket$inet(0xa, 0x801, 0x84) listen(r4, 0x1) r5 = socket$netlink(0x10, 0x3, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r5) r6 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r7 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfc, 0x2ffffffff}, 0xc) setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r7, 0x10e, 0x4, &(0x7f0000000180)=0x10000800, 0x4) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$unix(0x1, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r7) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)={0x44, r10, 0x1, 0x70bd28, 0x25dfdc00, {{}, {@void, @val={0x8, 0x3, r11}, @val={0xc, 0x99, {0x803, 0x56}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}]}, 0x44}, 0x1, 0x0, 0x0, 0x91}, 0x24044884) writev(r5, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1) 5.133086117s ago: executing program 0 (id=204): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000840)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00220f000000540b4550182195f51584b3"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGUCODE(r1, 0xc018480d, &(0x7f0000000280)={0x3, 0x100, 0x10000000, 0x4, 0x80000, 0x3}) r2 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab1204000000000000010902240001b30000040904410c17ff5d810009050f1f05e13f000009058303", @ANYRESDEC], 0x0) setuid(0xee00) clock_adjtime(0x0, &(0x7f0000000040)={0xffffffff}) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$rtl8150(r2, &(0x7f0000000200)={0x14, &(0x7f00000000c0)={0x0, 0x19, 0xe7, {0xe7, 0x9, "b31ea8a70b5a6254adcc0f338a78069091cdc0072ebe81391ab905ae329ed10490889d93db016d64735c4e312a6bf2acea706fdd0c5bcec2333de933541b222d6a54ab264a26ce1bc096005cde767394730c0d78e919bc4692ef003d81534fb09578ba29e845d10b7de2be0a701181272979bda823f51736dbc601984bca849c11e66e0d8a60775a943e8564bd95b559b605d34c4d0f6467f1b812a6360bc04e1b70d0d7e2278c67e3ab7e83e30e1c358fc30981788f4f98de5b1340cde4dea16226156ffe6eb51f84b5dcfd03a26b656c9860dd65be9bbf8b79b8571ced48d40e3edc29df"}}, &(0x7f00000001c0)={0x0, 0x3, 0xc, @string={0xc, 0x3, "736577120985705b0394"}}}, &(0x7f0000000480)={0x2c, &(0x7f00000002c0)={0x20, 0x14, 0xad, "7c15573e221f96dcf02b0efecad6c24ad923e65f76916cfebc420ca08a446207046b2873226c6c681769d32ef29dc2daa202af426002376a6e2194190c716ad1da67df0d3b5dae64dcede945f84f0edc2baf9c6ffc49e787a24bc5a28eebbda6ae81f10f1789974d9bc18a9405f4791cc13183a81a86351db127be86b472d11065f858b4e322f48b7072c71e44109013b6e4bbcb8d85cbf1538821d928a81f562312b9b84d583485127827bebb"}, &(0x7f0000000380)={0x0, 0xa, 0x1, 0x3}, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000400)={0xc0, 0x5, 0x4, "8093dd67"}, &(0x7f0000000440)={0x40, 0x5, 0x2, "f000"}}) timer_create(0x0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 4.684531452s ago: executing program 2 (id=205): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x100000, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}, 0x300}, &(0x7f00000001c0)=0x9c) 4.43473359s ago: executing program 1 (id=206): r0 = socket$inet_sctp(0x2, 0x1, 0x84) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000000)) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/consoles\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r1, 0x4c03, &(0x7f0000000080)) ioctl$F2FS_IOC_GET_PIN_FILE(r0, 0x8004f50e, &(0x7f0000000140)) close_range(r0, r1, 0x0) ioctl$DRM_IOCTL_PANTHOR_GROUP_CREATE(r1, 0xc0386447, &(0x7f00000001c0)={{0x8, 0x5, &(0x7f0000000180)=[{0x9, 0x0, 0x8}, {0x47}, {0xe, 0x0, 0x8}, {0x69, 0x0, 0x9}, {0xc6, 0x0, 0x7}]}, 0x5, 0x81, 0x17, 0x2, 0x0, 0x68, 0x9f3, 0x7fffffff, 0x0, 0x0}) ioctl$DRM_IOCTL_PANTHOR_GROUP_GET_STATE(r1, 0xc010644a, &(0x7f0000000200)={r2}) splice(r1, &(0x7f0000000240)=0x40, r1, &(0x7f0000000280)=0x5, 0x6, 0x8) sendmsg$OSF_MSG_REMOVE(r1, &(0x7f0000000a80)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000a40)={&(0x7f0000000300)={0x710, 0x1, 0x5, 0x301, 0x0, 0x0, {0x5, 0x0, 0x4}, [{{0x254, 0x1, {{0x2, 0x9}, 0x31, 0xf6, 0xffff, 0x8, 0x28, 'syz0\x00', "9f49ee3e163a9a2804ad4ae15336120b60703826198c8b3878f1082fcdf1365e", "623c09a30f2f7ea9f0f29b02b15a3ed3e798faad8424b0e9811a8d055abf39c6", [{0x5, 0x6, {0x3, 0x2c}}, {0x8, 0x0, {0x1, 0x5}}, {0x2, 0x8001, {0x2, 0xa}}, {0x2, 0xfffc, {0x3, 0x7fffffff}}, {0x8, 0x1, {0x5, 0x7}}, {0x0, 0xfffb, {0x1, 0x6}}, {0x8d, 0x9, {0x1, 0xc96}}, {0x176, 0x1, {0x2, 0xb12}}, {0x90bb, 0x0, {0x3, 0xfffffff8}}, {0x8, 0xffff, {0x3}}, {0x9, 0x2, {0x1, 0x6}}, {0x8, 0x7f, {0x3, 0x690}}, {0x9, 0x2, {0x0, 0xc}}, {0x8, 0x6b6, {0x0, 0x7f}}, {0x6, 0x2, {0x3, 0xffffff13}}, {0x101, 0x101, {0x2}}, {0x2, 0x6, {0x2, 0xc519}}, {0x800, 0x4, {0x3, 0x6}}, {0x2, 0x6, {0x3, 0x7}}, {0x3, 0xb, {0x3, 0xb}}, {0x0, 0x2, {0x3, 0x200}}, {0xac9, 0x3, {0x3, 0x3}}, {0x7, 0x10, {0x0, 0x7ff}}, {0x2, 0x4, {0x2, 0x39b7}}, {0x1ff, 0x401, {0x0, 0x1}}, {0xa6, 0x5, {0x3, 0x3}}, {0x81, 0x7ff, {0x1, 0x1}}, {0x0, 0xacce, {0x3, 0x7}}, {0x40, 0x5d, {0x2, 0x8}}, {0x9, 0x6, {0x2}}, {0x5, 0x74, {0x2}}, {0xfffc, 0xb, {0x3, 0x3}}, {0x4, 0x37e, {0x1, 0x6}}, {0x2, 0x3, {0x2, 0x8}}, {0xa00d, 0x9000, {0x1, 0x2540f5a3}}, {0xfc01, 0x200, {0x3, 0x3}}, {0x7e77, 0x9}, {0x4, 0x101, {0x0, 0x2}}, {0x3, 0x7, {0x3, 0xa66b}}, {0x8000, 0x6, {0x2}}]}}}, {{0x254, 0x1, {{0x0, 0xb1}, 0x6, 0x10, 0x2, 0x0, 0x19, 'syz1\x00', "b5bd1c76129a1fd2bc59bab13505523d70261f694c729724a43cda8d0870a64f", "eed59a8e02b9dc660f2a2e7a5aa1041eebd4563663fe1cad7177c0a9e43302c7", [{0x9, 0x2, {0x2, 0x400}}, {0x1ff, 0x1, {0x0, 0x7}}, {0x53, 0x8, {0x1, 0x9}}, {0x1, 0x51be, {0x0, 0x8}}, {0xa, 0xa307, {0x2, 0xbb}}, {0x3, 0x1, {0x1, 0xfffffff5}}, {0x63, 0x7f, {0x1, 0xffff}}, {0x7d6, 0x1, {0x1, 0x3}}, {0xfff8, 0x7, {0x0, 0x1}}, {0x0, 0x0, {0x3, 0x8130}}, {0x101, 0x8d16, {0x1, 0x80000000}}, {0x7, 0x2, {0x1, 0x2}}, {0x4, 0x7, {0x2, 0x80000000}}, {0x1, 0x100, {0x0, 0xfd}}, {0x200, 0xc, {0x3, 0x8}}, {0x6, 0x5, {0x2, 0x4}}, {0x4, 0x20, {0x0, 0x3}}, {0x3, 0x2, {0x1, 0x9}}, {0x4, 0x7}, {0x0, 0x0, {0x2, 0xfffffff9}}, {0x0, 0x81, {0x1, 0x6}}, {0x9, 0x2, {0x3, 0x9}}, {0x9, 0xfffd, {0x3, 0x7}}, {0x3, 0x4, {0x2, 0x6}}, {0xf, 0x47, {0x0, 0x68}}, {0x8, 0x1cfb, {0x0, 0xb}}, {0x4, 0x1ee3, {0x2, 0xffffffff}}, {0xfff8, 0x0, {0x3, 0x22}}, {0x8, 0x100, {0x0, 0xd}}, {0x1, 0xfffc, {0x1, 0x6}}, {0x2a, 0x2, {0x2, 0x6}}, {0x8, 0x3, {0x3, 0x9}}, {0xfbff, 0x982, {0x0, 0x9}}, {0x9, 0xfffa, {0x2, 0x1}}, {0x6, 0x7, {0x0, 0x4}}, {0x9, 0x9, {0x1, 0x3}}, {0x7, 0x7, {0x2, 0xffffff96}}, {0x5, 0x8, {0x0, 0x2}}, {0x5, 0x0, {0x3, 0x20}}, {0xffff, 0x8, {0x1, 0xd5}}]}}}, {{0x254, 0x1, {{0x1, 0x1}, 0x3, 0x5, 0x5, 0x8, 0x15, 'syz1\x00', "a7ab4f4f9370dc8743d84fc42a49c1817d8a26e32bd658c5ee5b37cb26d434c6", "e2504b144fe5efb9fbadc7075f8aa026f3a967332cd72909f80004e04d61b2c9", [{0x1, 0x0, {0x2, 0x7c5}}, {0x1000, 0x6, {0x3, 0x8}}, {0x1, 0xb, {0x0, 0x8}}, {0x8fd, 0x6, {0x1, 0x7622}}, {0x101, 0x1, {0x1, 0x8}}, {0x7ff, 0x3, {0x0, 0x9}}, {0x4, 0x80, {0x0, 0x9}}, {0x2, 0x7, {0x0, 0xe7}}, {0x7, 0x1, {0x1, 0x1ff}}, {0x4, 0x1, {0x1, 0x2}}, {0x2, 0x2, {0x3, 0x7fff}}, {0x8, 0x7f, {0x3, 0x53}}, {0x7, 0x400, {0x3}}, {0x80, 0x1, {0x3, 0x80000000}}, {0x3800, 0x7, {0x3, 0x9d}}, {0x5, 0x1ff, {0x1, 0xb}}, {0x2, 0x8, {0x3, 0x300000}}, {0x3, 0x1, {0x1, 0x9}}, {0x4, 0x7, {0x0, 0x2}}, {0x7, 0x2}, {0x8a, 0x60, {0x0, 0xffffffff}}, {0x3, 0x3, {0x1, 0x1ff}}, {0x80, 0x8, {0x0, 0x3}}, {0x6, 0x7, {0x2, 0xfffffffc}}, {0x39c, 0x1, {0x1, 0x10}}, {0x2, 0x1, {0x2, 0x9}}, {0x8, 0x100, {0x0, 0x8}}, {0x0, 0x10, {0x1}}, {0xb, 0x8}, {0x9, 0x1, {0x0, 0xcd}}, {0x40, 0x9, {0x3, 0x3}}, {0x3, 0x4, {0x3, 0x5}}, {0x9, 0xa6, {0x0, 0x8}}, {0x1674, 0xffff, {0x3, 0x8}}, {0x3e, 0x4, {0x2, 0x8}}, {0x1, 0x1, {0x3, 0x47}}, {0x3, 0x2, {0x2, 0x5}}, {0x2}, {0x400, 0x1, {0x1}}, {0x3, 0x4, {0x0, 0x9}}]}}}]}, 0x710}, 0x1, 0x0, 0x0, 0x11}, 0x20000080) r3 = socket$kcm(0x29, 0x0, 0x0) ioctl$DRM_IOCTL_PANTHOR_BO_CREATE(r1, 0xc0186445, &(0x7f0000000ac0)={0x6, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_PANTHOR_BO_MMAP_OFFSET(r1, 0xc0106446, &(0x7f0000000b00)={r4}) ioctl$DRM_IOCTL_PANTHOR_BO_QUERY_INFO(r1, 0xc0106450, &(0x7f0000000b40)={r4, 0x0, 0x3}) write$P9_RREADDIR(r1, &(0x7f0000000b80)={0xc5, 0x29, 0x2, {0x0, [{{0x1, 0x4, 0x8}, 0x2, 0x6, 0x7, './file0'}, {{0x4, 0x4, 0x7}, 0x9, 0x3, 0x7, './file0'}, {{0xc}, 0xac, 0x7, 0x7, './file0'}, {{0x8, 0x2, 0x1}, 0x0, 0x40, 0x7, './file0'}, {{0x20, 0x2, 0x4}, 0xbb, 0x7f, 0x7, './file0'}, {{0x4, 0x2, 0x5}, 0x6, 0x6, 0x7, './file0'}]}}, 0xc5) ioctl$COMEDI_CANCEL(r1, 0x6407) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000c80)={0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000cc0)=0x1c) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000d00)={r5, 0x9}, &(0x7f0000000d40)=0x8) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f0000000dc0)={0x6, &(0x7f0000000d80)=[{}, {}, {}, {0x0}, {}, {}]}) ioctl$DRM_IOCTL_LOCK(r1, 0x4008642a, &(0x7f0000000e00)={r6, 0xe}) copy_file_range(r1, &(0x7f0000000e40)=0x7, r3, &(0x7f0000000e80)=0x80000000, 0x4, 0x0) ioctl$SIOCX25SENDCALLACCPT(r1, 0x89e9) ioctl$BTRFS_IOC_SUBVOL_SYNC_WAIT(0xffffffffffffffff, 0x40109441, &(0x7f0000000ec0)={0x28b, 0x0, 0x5}) mount$overlay(0x0, &(0x7f0000000f00)='./file0\x00', &(0x7f0000000f40), 0x100002, &(0x7f0000000f80)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@metacopy_off}, {@default_permissions}, {@default_permissions}, {@uuid_null}, {@redirect_dir_nofollow}], [{@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@smackfsroot={'smackfsroot', 0x3d, 'syz0\x00'}}, {@measure}]}) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x20010, r0, 0x6d02a000) ioctl$DRM_IOCTL_GET_MAGIC(r1, 0x80046402, &(0x7f0000001040)=0x5d6a) ioctl$DRM_IOCTL_PANTHOR_VM_CREATE(r1, 0xc0106441, &(0x7f0000001080)={0x0, 0x0, 0x80000000}) ioctl$DRM_IOCTL_PANTHOR_BO_CREATE(r1, 0xc0186445, &(0x7f00000010c0)={0x5, 0x1, r7}) close(r0) close_range(r1, r0, 0x0) 4.347056432s ago: executing program 4 (id=207): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000a3b370086d04ae08581101020301090212000d000000000904"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f0000000300)={'mangle\x00', 0x0, [0x40000, 0x7, 0xffffffff, 0xffff2cdf, 0xb322]}, &(0x7f0000000180)=0x54) syz_usb_control_io(r0, 0x0, &(0x7f0000000e80)={0x84, &(0x7f0000000440)={0x40, 0x11}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000840)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000001240)={0x1c, &(0x7f0000000240)={0x20, 0xe, 0x32, "883e1c70a04cf4a7765c40f1c7c69f74c914309d6a5d4efeaa1a2f0b5da1fa728ca26c8e26361f043f83d960d0d6667620a1"}, 0x0, 0x0}) 4.263154105s ago: executing program 1 (id=208): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r1 = socket$kcm(0xa, 0x2, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$sock(r1, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4f23, 0xe0000000, @private0={0xfc, 0x0, '\x00', 0x1}, 0xfffffffc}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 4.263006865s ago: executing program 1 (id=209): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000080)={0x10000, 0x9, {0xffffffffffffffff}, {0xffffffffffffffff}, 0x0, 0x950}) ptrace$ARCH_MAP_VDSO_64(0x1e, r0, 0x7, 0x2003) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x8) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xd, &(0x7f0000000140)=0xffffffff, 0x4) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000340)=ANY=[@ANYRESHEX=r3], 0x14}, 0x1, 0x0, 0x0, 0x404c000}, 0x80d1) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) fanotify_mark(0xffffffffffffffff, 0x219, 0x183b, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) ioctl$AUTOFS_IOC_FAIL(r6, 0x4c80, 0xfffffffc) 3.754043501s ago: executing program 1 (id=210): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire={0x630c}], 0x0, 0x0, 0x0}) 3.673199664s ago: executing program 2 (id=212): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000080)={0x10000, 0x9, {0xffffffffffffffff}, {0xffffffffffffffff}, 0x0, 0x950}) ptrace$ARCH_MAP_VDSO_64(0x1e, r0, 0x7, 0x2003) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x8) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xd, &(0x7f0000000140)=0xffffffff, 0x4) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000340)=ANY=[@ANYRESHEX=r2], 0x14}, 0x1, 0x0, 0x0, 0x404c000}, 0x80d1) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) fanotify_mark(0xffffffffffffffff, 0x219, 0x183b, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) ioctl$AUTOFS_IOC_FAIL(r5, 0x4c80, 0xfffffffc) 3.673016314s ago: executing program 3 (id=213): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x700, 0x69, 0x10, 0x87}, [@ldst={0x4}]}, &(0x7f0000000080)='GPL\x00', 0x2, 0x3f7, &(0x7f000000cf3d)=""/195}, 0x48) 1.560004251s ago: executing program 2 (id=214): r0 = socket$nl_route(0x10, 0x3, 0x0) socket(0x2a, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000780)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000005000000003a00000008000300", @ANYRES32=r3, @ANYBLOB="05005b"], 0x24}}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REQ_SET_REG(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)={0x24, r4, 0x5, 0x70bd2d, 0x25dfdbfc, {}, [@NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x810}, 0x20000080) socket$kcm(0x11, 0x3, 0x0) socket$kcm(0x11, 0x3, 0x300) r6 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="39000000140081ae10003c000500018311001f9f660fcf066505acb612f691f3bd3508abca1be6eeb89c44ebb37358582bdbb7d553b4e92155", 0x39}], 0x1}, 0x0) recvmsg$kcm(r6, &(0x7f0000001040)={0x0, 0x0, 0x0}, 0x40000040) r7 = socket$nl_generic(0x10, 0x3, 0x10) close_range(r0, r0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x40, 0x7, &(0x7f0000006680)) r8 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r8, 0x11b, 0x2, &(0x7f0000000180)=0x29191, 0x4) r9 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) setsockopt$sock_int(r9, 0x1, 0x2e, &(0x7f0000000040)=0x8001, 0x4) r10 = epoll_create(0x1ff) r11 = inotify_init1(0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r11, &(0x7f00000000c0)={0x60002011}) epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r9, &(0x7f0000000080)={0x9e2696008603fac1}) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x22, 0x0) syz_clone(0x100, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_DISASSOCIATE(r7, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f00000001c0)={0x154, r2, 0x10, 0x70bd27, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_IE={0x3b, 0x2a, [@cf={0x4, 0x6, {0x3, 0x55, 0x400, 0xa3e2}}, @cf={0x4, 0x6, {0x0, 0x2, 0x4, 0x5}}, @erp={0x2a, 0x1, {0x0, 0x1}}, @ssid={0x0, 0x6, @default_ibss_ssid}, @ht={0x2d, 0x1a, {0x10, 0x3, 0x6, 0x0, {0x800, 0x4, 0x0, 0xd, 0x0, 0x1, 0x0, 0x1}, 0x6, 0x0, 0x6}}]}, @NL80211_ATTR_IE={0xf1, 0x2a, [@challenge={0x10, 0x1, 0x49}, @random={0x2, 0xa5, "e1c25c5b4134b8501651852ff3e5265627fa583d77eda1ea7f3d5f183477f6acaa36b9a0ce1cca32c03c5c5f64768434b5ff8351c018756628a46832d8727d68b6a94dde473da5ae994e11bb8d40de5ed8860f910b5427fe152bea96a7bf0605558b6d036ec1a0fac3555feeb92ed8e35e5ab3000ae228af3793d7e6bba7c2c5ed2b05f77fe7c4d8aef5705d41fa5e57fafaa6bbaf2a0b5999664a073bc8217bfe1ea6a481"}, @rann={0x7e, 0x15, {{0x1, 0x3}, 0x6, 0x5, @device_a, 0x5, 0xfffffff4, 0xc}}, @peer_mgmt={0x75, 0x16, {0x0, 0x6160, @void, @val=0x11, @val="355bc97354b6bfc93fa96fa8539ec4e6"}}, @ibss={0x6, 0x2, 0x3}, @random={0x2, 0x6, "994d9a1a62cf"}, @mesh_chsw={0x76, 0x6, {0xbe, 0x0, 0x38, 0x8}}]}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}]}, 0x154}, 0x1, 0x0, 0x0, 0x24000001}, 0x40000) 1.559370271s ago: executing program 3 (id=215): syz_mount_image$f2fs(&(0x7f0000000180), &(0x7f0000000000)='./file0\x00', 0x2000000, &(0x7f00000001c0)=ANY=[@ANYBLOB="7768696e745f6d6f64653d757365722d62617365642c6e6f666c7573685f6d657267652c646973636172645f756e69743d626c6f636b2c636f6d70726573735f63616368652c646973636172642c636f6d70726573735f636163686500636f6d70726573735f63616368652c6e6f646973636172642c6e04000000000000006b67726f756e645f67633d6f66662c6673796e635f6d6f64653d7374726963742c617467632c636865636b706f696e743d64697361626c652c6661756c745f747970653d30303030303030303030303030303030303030362c000bfd62d218a444a68c74f026d4ccec66093eece27fe167b75e67ed0f3b3a51c2b8d1857ec135096f87f1bea6b5fea173b82a6a331ed6a20e7966a79114d49d58aca09dc4cbc08f2ce2ad2c6d576d3babdbc296014f0cb17e6a9d720beaf7459568b858cba1b2d2e6744922594ac14b0b6d4b160405a05c9b7a14f6b9a37c8ffc9f9b20987a60171b9e5541d7eadf86a1d102cb83caeaf0ff064bd27bb32db4263cfc9821d083fc479cf94b113fa6156274d93a65ff0f4f63353fc7665ee930b84a92d125ac10ffae140b80ad0569bf76f43d8d490968f8fb5798875bfab54caf996afbd97d0b93b9626acf1b881c6f5d55072164d2e3eff342bb846739c949e1", @ANYRESOCT], 0xfd, 0x551b, &(0x7f0000000500)="$eJzs3M1rI2UYAPB3+rHb/XAt4sHbDixCC5vQ9GPRW9Vd/MAuZdWDJ02TachukilNmtaePHgUD/4nouDJo3+DB8/exIPiTVAy71S3uoLQtLHb3w8mz8w7b5553lACz0xJAC6s+fTXn5NwI1wJIUyHEK6HUOwn5VZYj+GFEMLNEMLUY1tSjv85cCmEcDWEcGOUPOZMylOf3x7eWvvprV+++e7yzLUvvv5+cqsGJm30tdLdifv73RjzVowPy/H6sF3E7uqwjPFEZy6e7+ZxfD/bKjLs14/m1Yu40orz8529/ihud+qNUWy1t4vxnV68YH/YOspTvOFhfbc4bmZbRWz38yK2DuN1Dw7jd9thfxDzNMt8HxXpw2BwFON4dpDF9ew8KmKjNyjHY968mR2M4rCM5eVCI+80izq2TvBB/8+93e7tHaTDbLffznvpWrX2UrV2p1LbzZvZIFut1LvNO6vpQqszmlYZZPXueivPW52s2si7i+lCq9Go1Grpwt1sq13vpbVadaW6VFlbLPdup6/ffy/tNNOFUXy13dsbtDv9dDvfTeM7FtPl6srLi+mtWvrOxma6+eDevY3Ndz+4+/79VzbefK2c9I+y0oXlpeXlSm2pslxbvEDr/6QseozrhxNJJl0AwPmj/wcm4cUT9P/dR+XxE/v/3QchnH7/H/T/Y3Gu+t+L3v+fwvrhRPT/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAX1g+zX75R7MzH42vl+DPl0HPlcRJCmAoh/P4E0+HSsZzTZZ7Zf5k/+7cavk1CkWF0jcvldjWEsF5uvz172p8CAAAAPL2++vjmZ7Fbjy/zky6IsxRv2kxd/3BM+ZIQwuz8j2PKNjV6eX5MyYq/75lwMKZsxQ2suTEli7fcZsaV7T+ZPhbmHgtJDFNnWg4AAHAmjncCZ9uFAAAAcJY+nXQBTEYSjh5lHj0LLv7z/q8HgleOHQEAAADnUDLpAgAAAIBTV/T/fv8PAAAAnm7x9/8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIA/2Lmf28SBKA7AzwYv7D8tWu19W9kblLEl5JhjRAFpggJyoIY0QA3klhIiiPA4BCIOkTy2lej7JGcylvnxBsFhZqQBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACALj1U6ypu/t62zdnt28kzGgAAAOCSbbVe1P/MUv97c/9nc+t30y8iooyIS3P3UXw5yxw1OdXr83enz1dvariPqBMO7zFprm8R8a+5nn51/SkAAADA57VZruZptp7+zIYuiD6lRZvyx/9MeUVEVLPHTGnlIe9PprD6+z2O60xp9QLWNFNYWnIb50p7l/rnfly1m540RWrKiy87Fplt7AAAQI9GZ02/sxAAAAD6dDV0AQyjiJetzONW4CQ1zfbe17MeAAAA8AEVQxcAAAAAdK6e//d0/t/e+X8AAAAwjHT+HwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF3aVuvFZrmat83Z7dvJMxoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOCZ/XlHgRAIgzDYu74zmfsfVho0NTWpAuHjbwwGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAN7/7y/+JqXEmmXttLD2PJGunxtapsXduHP1hfP0aAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC725yUFQiAIomDO+N9J3/+wkqBnECECGh5V1KIBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOCLfvfL/4mpcSaZO20sHY8ka1eNravG3oPG0YPx9m8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC527udFbioOAPhLMpnaqjiuMocVUfCgFzud1tbexIOyePBPEJbttK6d+qPdgy1F3Is32XMvokcRQVlv/R96bqGXeuthDhXE40gyyUzaLjormKS7nw+8vG9CyPu+BJb95mUXAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoDR5dxEn2aY3i+Pi2O0H1zey/s4jfebmzt3VrGVxVGfST4aXqztRv7lEAAAAODySsr4PIdxLd9eyPu7l9X9anpPV/N8/O4vLev7Rur/sy9o/a7/9ev/F+UC92TjZRc9vjkcnHk+l8//Nst2e+9czOvmdz9+9JPkDiT/YfmGS5vcz+vbWrfe6eXikjmwBgP/ieNkXQfn7UNYPm0wMgEOjUym8y/o/6TWbEwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEAdJtvh6TKOQgirnUWcufPg+sZe/c2du6tlO3Pjxk74enHN7BJpCOH85nh0otbZtNuVq9curo/Ho8v1B6+EEJoa/Z1i+hc/WuLkEBq5P/sP/mpHGm0L4uJhtyWfJyNo8IcSAAAHUlq0rK6/l+6uZceilRCmPzxc/79eicOS9f/9j8/cro5Vrf+Htc2w/QZblz4fXLl67c3NS+sXRhdGn751cvj28NTZ06fPDvJ3JQNvTAAAANi36XQ6ne90i1at/+OVx9f/j1XisGT9/8V3w6+qAyfq/z0tFv2azgQAAOBwe/7VP/+I9jgedbvhy/WtrcvD2Xa+f3K2bSDVfTtStGr9n6w0nRUAAABQh8l29ND6/7lKHJZc/3/mx5d+rl4zCSEcLdb/j298Nj5X33RarY4/J256jgAAADTraNGq6/9p/v1/PP/kIQ4hvPHaLC7+DeA/1v9pUf8n73/zU3Ws6vf/p+qbYivF/dn9yPt+CJ1+0xkBAABwkD1VtKzY/z3dXfvkl2Mfdn3/DwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFC3vwMAAP//A1BAnw==") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) io_setup(0x3, &(0x7f0000000600)=0x0) r2 = inotify_init1(0x80000) inotify_add_watch(r2, &(0x7f00000001c0)='./file1\x00', 0x20000508) io_submit(r1, 0x1, &(0x7f00000003c0)=[&(0x7f0000000080)={0x0, 0x0, 0x10, 0x7, 0x0, r0, 0x0, 0x0, 0x100000000, 0x0, 0x2, r0}]) r3 = syz_open_dev$evdev(&(0x7f0000000100), 0x2, 0x862b01) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000003c0)={0x54, 0x0, 0x0, {0xffff, 0x1}, {0x4d, 0x2}, @period={0x58, 0x0, 0xfffd, 0x8, 0x4, {0x2, 0x6, 0x5, 0x1}, 0x0, 0x0}}) write$char_usb(r3, &(0x7f0000000040)="e2", 0x2250) 1.559031091s ago: executing program 1 (id=216): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x2, 0x5505, &(0x7f0000002480)="$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") sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x440200, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r0, 0x80045017, &(0x7f0000000080)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f00000002c0)=@file={0x1, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) 1.558808731s ago: executing program 2 (id=217): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000cc0)=ANY=[@ANYBLOB="2400000029000100000000c16ed74da8bab7710099e99c00000001016200000600158055"], 0x24}], 0x1}, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40003}, 0x4040850) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a4c000000030a0fdb00000000000000000a0020050900030073797a30000000000900010073797a31000000001400048008000240e7b140bb08000140000000030a000700726f75746500000014000000110001"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r2 = socket(0xa, 0x3, 0xff) sendmsg$inet6(r2, &(0x7f0000001c00)={&(0x7f0000000000)={0xa, 0xa, 0x7, @mcast2}, 0x1c, &(0x7f00000004c0)=[{&(0x7f0000000040)="671723d7c6012b", 0x7}, {&(0x7f0000000140)="9e91d93a92dc7c8fff658bb539e2a1485d4c9223a7dfe538a2e2fea2", 0x1c}, {&(0x7f0000000200)='\x00\x00\x00\x00\x00', 0x5}, {&(0x7f0000000840)="418a", 0x2}], 0x4}, 0x20008b88) r3 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000380)={[{@nojournal_checksum}, {@nombcache}, {@barrier}, {@nogrpid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@nodelalloc}, {@usrquota}, {@jqfmt_vfsold}, {@bsdgroups}, {@init_itable}]}, 0xff, 0x55c, &(0x7f0000000440)="$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") chdir(&(0x7f0000000000)='./file0\x00') (async) openat(r3, &(0x7f0000000080)='./file1\x00', 0x80, 0x44) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) (async) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85) lseek(r4, 0x104, 0x1) (async) getdents64(r4, 0x0, 0x4f) 1.378135546s ago: executing program 2 (id=218): r0 = syz_io_uring_setup(0x478e, &(0x7f0000000400)={0x0, 0xc593, 0x8, 0x1, 0x309}, 0x0, 0x0, &(0x7f0000000500)) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d1d7a440041601801f44010203010902120001000000000904"], 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x3, 0x82040) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r1, 0xc0045520, &(0x7f0000000040)=0x1) io_uring_register$IORING_REGISTER_RING_FDS(r0, 0x14, &(0x7f0000000540), 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r4, r3, 0x0, 0x23b) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000008c0)={'bridge_slave_1\x00'}) syz_open_dev$I2C(&(0x7f0000000000), 0x7f, 0x404002) r5 = openat$kvm(0xffffff9c, &(0x7f0000002f80), 0x80000, 0x0) ioctl$KVM_CHECK_EXTENSION(r5, 0xae03, 0x4c) r6 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000034709d405f0530c6acb60102030109021200fd000000000904"], 0x0) r7 = socket$unix(0x1, 0x5, 0x0) bind$unix(r7, 0x0, 0x0) socket$unix(0x1, 0x5, 0x0) syz_usb_control_io$hid(r6, 0x0, &(0x7f0000000380)={0x2c, &(0x7f0000000400)={0x20, 0x0, 0x1, "af"}, 0x0, 0x0, 0x0, 0x0}) socket$inet_mptcp(0x2, 0x1, 0x106) 937.03687ms ago: executing program 0 (id=219): syz_usb_connect(0x0, 0x5a, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000060f94d100d05020027230102030109024840020000000009047d04031d5abf0009050400005539000009050b00000000000009050200000005000009047d01013481af0009a00e00230000690009047d02"], 0x0) syz_usb_connect(0x6, 0x24, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000003280)={0x0, 0x10, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="60000000020601040000000000000000010000031400078005001400fd7900000800084000000044050001000700000005000400040000000900020073797a3000000000050005000a00000011000300686173683a6970"], 0x60}, 0x1, 0x0, 0x0, 0x44885}, 0x8010) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000006c0001f526bd7000fedbdf2500000000", @ANYRES32, @ANYBLOB="867000000024000008000500", @ANYRES32, @ANYBLOB="080013"], 0x30}}, 0x44) 936.818441ms ago: executing program 4 (id=220): syz_mount_image$hfs(&(0x7f0000000180), &(0x7f0000000080)='./file1\x00', 0x84, &(0x7f0000000000)=ANY=[], 0x8b, 0x2d5, &(0x7f0000025dc0)="$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") r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f00000004c0)=0x1, 0x4) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) epoll_create(0x7e) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xffffffffffffffce, 0x0, 0xfffffffffffffffd, 0x1000001000, 0x46}, 0x0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000340)="b7f2288a911993f0", 0x8) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000ac0), r4) sendmsg$NLBL_CALIPSO_C_REMOVE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, r5, 0x1, 0x70bd25, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40005}, 0x8000) rmdir(0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) fdatasync(r6) 0s ago: executing program 4 (id=221): r0 = syz_usb_connect$hid(0x3, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = openat$dir(0xffffffffffffff9c, 0x0, 0x20000, 0x18) open_tree(r1, &(0x7f00000000c0)='./file0\x00', 0x1001) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x2c, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x18, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @remote}}}]}]}, 0x2c}}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) ioctl$TIOCPKT(r6, 0x5420, &(0x7f0000000100)=0x9) ioctl$TIOCSPTLCK(r6, 0x40045431, &(0x7f0000000000)) r7 = syz_usb_connect(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="120100006325a640402000498b4d000000010902240001000000000904000002214c6a0009050702000000da000905890e"], 0x0) syz_usb_control_io(r7, 0x0, &(0x7f0000000640)={0x84, &(0x7f00000001c0)={0x40, 0xf, 0x2e, "af0da48115c2ad8a8b93223bc2577cf1dbb18da561645455014b3e207d31d376998d4e60f5a1a359f5d223839ef8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r7, &(0x7f0000000440)={0x14, &(0x7f0000000200)={0x40, 0x23, 0x38, {0x38, 0x11, "bfb9574cfd78cc053fea34653de1e8a0c8c8e74cb801e2ac23e71a33e124aaf824cc8c6a05a07ac6dbbd8798a32e02caa6ae260e4dcc"}}, &(0x7f0000000340)={0x0, 0x3, 0x49, @string={0x49, 0x3, "e8dea0264ac6332465f705c888cbcd759b0f7ea3be459766b7306783804d4eb7b4c75cf431fbb5190663a901a1be8f2d6d0e1b41064492d75d11d14f0ac00cf18f061923c64699"}}}, &(0x7f00000007c0)={0x2c, &(0x7f0000000580)={0x40, 0x7, 0xbf, "9ad53723ee213a51301caabd6494a996cc0e3869f2bac13ba49f013d04f9544ad315fa49b00c449edd796cc89532da0f8ceb3353a0ddbd9be5b65e21f93f159e6c868ef8562b5087ab418f4c6f3bc10bb7a1e695767a6ce66c11bd9ebfa33976fb9462109022e102b4dd3f983d82cc0a885504f0a8393c86f8c083a2d62f15b5b083c0921d5a6100c64cd5d7df827c7c32ffda03640efe3b8cc2640258374a3231a1bf13e9a12471134c7afdd7b25c90fd6a94a90fdf0ebf794016e1ced4a0"}, &(0x7f00000006c0)={0x0, 0xa, 0x1}, &(0x7f0000000700)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000740)={0xc0, 0x5, 0x6, "66e72748ad59"}, &(0x7f0000000780)={0x40, 0x5, 0x2, "a796"}}) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r5) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x20004004}, 0x0) socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000540)={'syzkaller0\x00'}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.10.19' (ED25519) to the list of known hosts. [ 64.783629][ T4175] cgroup: Unknown subsys name 'net' [ 64.925212][ T4175] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 66.372794][ T4175] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 67.887632][ T4190] chnl_net:caif_netlink_parms(): no params data found [ 67.906198][ T4191] chnl_net:caif_netlink_parms(): no params data found [ 67.923181][ T4189] chnl_net:caif_netlink_parms(): no params data found [ 67.949511][ T4188] chnl_net:caif_netlink_parms(): no params data found [ 67.977682][ T4187] chnl_net:caif_netlink_parms(): no params data found [ 68.133017][ T4190] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.144517][ T4190] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.153011][ T4190] device bridge_slave_0 entered promiscuous mode [ 68.165556][ T4189] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.172828][ T4189] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.181281][ T4189] device bridge_slave_0 entered promiscuous mode [ 68.202023][ T4191] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.209329][ T4191] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.217471][ T4191] device bridge_slave_0 entered promiscuous mode [ 68.239037][ T4190] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.246683][ T4190] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.255272][ T4190] device bridge_slave_1 entered promiscuous mode [ 68.263609][ T4189] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.270919][ T4189] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.279312][ T4189] device bridge_slave_1 entered promiscuous mode [ 68.293612][ T4191] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.300874][ T4191] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.309099][ T4191] device bridge_slave_1 entered promiscuous mode [ 68.322728][ T4187] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.329995][ T4187] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.338130][ T4187] device bridge_slave_0 entered promiscuous mode [ 68.365838][ T4188] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.373303][ T4188] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.381596][ T4188] device bridge_slave_0 entered promiscuous mode [ 68.395208][ T4187] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.402542][ T4187] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.410947][ T4187] device bridge_slave_1 entered promiscuous mode [ 68.420522][ T4190] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.436644][ T4188] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.444359][ T4188] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.452659][ T4188] device bridge_slave_1 entered promiscuous mode [ 68.462051][ T4191] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.479554][ T4190] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.497723][ T4189] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.508604][ T4191] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.519829][ T4189] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.557697][ T4187] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.589589][ T4188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.605995][ T4190] team0: Port device team_slave_0 added [ 68.614291][ T4187] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.632506][ T4188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.644192][ T4189] team0: Port device team_slave_0 added [ 68.652379][ T4190] team0: Port device team_slave_1 added [ 68.666170][ T4191] team0: Port device team_slave_0 added [ 68.675175][ T4191] team0: Port device team_slave_1 added [ 68.690033][ T4189] team0: Port device team_slave_1 added [ 68.737320][ T4188] team0: Port device team_slave_0 added [ 68.744439][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.751629][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.777795][ T4190] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.792104][ T4187] team0: Port device team_slave_0 added [ 68.799122][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.806118][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.832400][ T4190] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.857669][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.864958][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.891246][ T4191] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.904500][ T4188] team0: Port device team_slave_1 added [ 68.913124][ T4187] team0: Port device team_slave_1 added [ 68.933445][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.940548][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.966926][ T4189] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.982962][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.991825][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.018051][ T4191] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.071965][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.079053][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.105468][ T4189] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.127248][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.134410][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.160384][ T4187] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.176248][ T4191] device hsr_slave_0 entered promiscuous mode [ 69.183332][ T4191] device hsr_slave_1 entered promiscuous mode [ 69.199958][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.206955][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.233419][ T4188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.247903][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.255153][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.281409][ T4187] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.312736][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.320453][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.346751][ T4188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.376872][ T4190] device hsr_slave_0 entered promiscuous mode [ 69.384093][ T4190] device hsr_slave_1 entered promiscuous mode [ 69.391196][ T4190] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.399434][ T4190] Cannot create hsr debugfs directory [ 69.420658][ T4189] device hsr_slave_0 entered promiscuous mode [ 69.427862][ T4189] device hsr_slave_1 entered promiscuous mode [ 69.434959][ T4189] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.442691][ T4189] Cannot create hsr debugfs directory [ 69.509325][ T7] Bluetooth: hci2: command 0x0409 tx timeout [ 69.516044][ T7] Bluetooth: hci0: command 0x0409 tx timeout [ 69.530675][ T4187] device hsr_slave_0 entered promiscuous mode [ 69.537545][ T4187] device hsr_slave_1 entered promiscuous mode [ 69.544668][ T4187] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.552467][ T4187] Cannot create hsr debugfs directory [ 69.576368][ T4188] device hsr_slave_0 entered promiscuous mode [ 69.578630][ T4196] Bluetooth: hci3: command 0x0409 tx timeout [ 69.582971][ T7] Bluetooth: hci4: command 0x0409 tx timeout [ 69.598880][ T7] Bluetooth: hci1: command 0x0409 tx timeout [ 69.605922][ T4188] device hsr_slave_1 entered promiscuous mode [ 69.616023][ T4188] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.623848][ T4188] Cannot create hsr debugfs directory [ 69.947262][ T4191] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 69.964743][ T4191] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 69.977832][ T4191] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 70.000793][ T4189] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 70.010813][ T4191] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 70.020190][ T4189] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 70.039678][ T4189] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 70.050746][ T4189] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 70.116692][ T4190] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 70.136852][ T4190] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 70.151000][ T4190] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 70.173414][ T4190] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 70.246074][ T4187] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 70.277936][ T4187] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 70.295035][ T4187] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 70.307112][ T4187] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 70.331492][ T4191] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.347554][ T4189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.372154][ T4188] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 70.383155][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 70.394944][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.413564][ T4188] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 70.423264][ T4188] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 70.438719][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 70.447036][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.460241][ T4189] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.471303][ T4188] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 70.489169][ T4191] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.497982][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 70.507557][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.517377][ T4215] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.524780][ T4215] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.551594][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 70.560810][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 70.570074][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.578842][ T4215] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.586032][ T4215] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.595467][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 70.617915][ T4190] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.643300][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 70.653309][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.663393][ T4215] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.670542][ T4215] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.683592][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 70.692094][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 70.723246][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 70.733739][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.743131][ T4215] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.750256][ T4215] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.763737][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 70.773507][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 70.782556][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 70.792167][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 70.803302][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 70.823888][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 70.834389][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 70.842790][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.862503][ T4190] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.877374][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 70.887107][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 70.896634][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 70.907060][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.916266][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.923418][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.932828][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 70.944661][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 70.958914][ T4187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.969050][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 70.979566][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 70.991521][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 71.000540][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.010164][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.019166][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.026309][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.036584][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 71.045371][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.068172][ T4188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.084908][ T4189] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 71.098921][ T4187] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.117573][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.125922][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.133836][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 71.143876][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.153664][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 71.165895][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.174859][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.184248][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.191420][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.201204][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.213157][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 71.221827][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.232939][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.261489][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.268045][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.291981][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.302507][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.311395][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.321171][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.330373][ T4215] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.337482][ T4215] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.347128][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 71.360829][ T4188] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.392576][ T4191] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 71.405077][ T4191] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 71.417231][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.430165][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 71.445960][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.455061][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 71.470697][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.486164][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 71.496770][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.515521][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 71.525843][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.535441][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 71.544020][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 71.579034][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.587843][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.596874][ T4192] Bluetooth: hci0: command 0x041b tx timeout [ 71.603146][ T4192] Bluetooth: hci2: command 0x041b tx timeout [ 71.613643][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.621111][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.629833][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.639055][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.647633][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.654795][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.662749][ T4236] Bluetooth: hci1: command 0x041b tx timeout [ 71.669438][ T4236] Bluetooth: hci3: command 0x041b tx timeout [ 71.675551][ T4236] Bluetooth: hci4: command 0x041b tx timeout [ 71.684459][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 71.693879][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.703194][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 71.712075][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.722770][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 71.736438][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.748438][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 71.757516][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 71.769919][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 71.777613][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.792089][ T4190] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 71.810094][ T4190] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 71.839633][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.859202][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 71.869470][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.888077][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 71.897088][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.913387][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 71.925726][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.942241][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 71.955561][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.965164][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 71.974307][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.985875][ T4187] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 72.006675][ T4189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.030138][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 72.044684][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 72.065965][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.097233][ T4188] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 72.110879][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 72.124831][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 72.163409][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.179261][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.198965][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 72.206513][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 72.229626][ T4191] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.253468][ T4190] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.276799][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 72.303348][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.325445][ T4189] device veth0_vlan entered promiscuous mode [ 72.348749][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 72.362455][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 72.403283][ T4189] device veth1_vlan entered promiscuous mode [ 72.422325][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 72.439393][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.452466][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.518777][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 72.527987][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 72.544362][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.556316][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 72.567171][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 72.575238][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 72.584050][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 72.592628][ T4191] device veth0_vlan entered promiscuous mode [ 72.604634][ T4187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.620497][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 72.631051][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 72.642685][ T4189] device veth0_macvtap entered promiscuous mode [ 72.680701][ T4191] device veth1_vlan entered promiscuous mode [ 72.694828][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 72.704556][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 72.714810][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 72.724024][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 72.737732][ T4189] device veth1_macvtap entered promiscuous mode [ 72.763657][ T4188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.786331][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 72.796985][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 72.805443][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.814795][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.825183][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 72.834766][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 72.851453][ T4191] device veth0_macvtap entered promiscuous mode [ 72.867847][ T4191] device veth1_macvtap entered promiscuous mode [ 72.886809][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 72.898076][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 72.907350][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.916537][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.939669][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.957468][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 72.967492][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.976644][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 72.985890][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 72.996461][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.005217][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.014748][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.024731][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.033554][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.042160][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.056612][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.069936][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.081711][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.092821][ T4187] device veth0_vlan entered promiscuous mode [ 73.101948][ T4190] device veth0_vlan entered promiscuous mode [ 73.115950][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 73.126361][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.140624][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.149614][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.161262][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.172654][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.203687][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 73.215366][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 73.224362][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 73.233283][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 73.243044][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 73.252593][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.264842][ T4191] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.275082][ T4191] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.284790][ T4191] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.293894][ T4191] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.309879][ T4190] device veth1_vlan entered promiscuous mode [ 73.325364][ T4189] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.334304][ T4189] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.345278][ T4189] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.364426][ T4189] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.397151][ T4187] device veth1_vlan entered promiscuous mode [ 73.411368][ T4188] device veth0_vlan entered promiscuous mode [ 73.420899][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.429660][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.438151][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.446769][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.487827][ T4188] device veth1_vlan entered promiscuous mode [ 73.525049][ T4190] device veth0_macvtap entered promiscuous mode [ 73.534570][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 73.544173][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 73.555278][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.567749][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 73.598185][ T4187] device veth0_macvtap entered promiscuous mode [ 73.613000][ T4190] device veth1_macvtap entered promiscuous mode [ 73.634807][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 73.649223][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 73.657375][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 73.666073][ T2286] Bluetooth: hci2: command 0x040f tx timeout [ 73.672478][ T2286] Bluetooth: hci0: command 0x040f tx timeout [ 73.679506][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.688116][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 73.713592][ T4187] device veth1_macvtap entered promiscuous mode [ 73.739233][ T2286] Bluetooth: hci4: command 0x040f tx timeout [ 73.742092][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 73.754742][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 73.756888][ T2286] Bluetooth: hci3: command 0x040f tx timeout [ 73.765740][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.778534][ T2286] Bluetooth: hci1: command 0x040f tx timeout [ 73.785149][ T4188] device veth0_macvtap entered promiscuous mode [ 73.803916][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.815600][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.826905][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.838721][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.851177][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.870139][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.883890][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.897580][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.897877][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.919732][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.930532][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.940728][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.951723][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.963507][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.971824][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 73.980825][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 73.991167][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.000329][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 74.008190][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.016966][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.027324][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.043452][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.053446][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.069488][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.082009][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.098897][ T4188] device veth1_macvtap entered promiscuous mode [ 74.112307][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.123483][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.134622][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.146284][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.157368][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.168050][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.180994][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.188774][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 74.196915][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.205955][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.215844][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.225944][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.244072][ T4190] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.253808][ T4190] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.263347][ T4190] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.272351][ T4190] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.292636][ T4187] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.302945][ T4187] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.312087][ T4187] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.321531][ T4187] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.349469][ T4215] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.357348][ T4215] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.371001][ T4263] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.384073][ T4263] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.409961][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.423276][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.434101][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.445089][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.455241][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.466691][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.477341][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.488687][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.500411][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.514529][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 74.524485][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 74.533190][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.544377][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.562726][ T4263] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.576034][ T4263] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.588522][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.603223][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.625571][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.639421][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.649643][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.660708][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.671553][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.682634][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.694687][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.713070][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 74.731642][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.741922][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.762416][ T4188] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.771827][ T4188] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.781775][ T4188] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.790599][ T4188] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.916438][ T4215] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.964569][ T4215] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.217507][ T4251] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.226035][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 75.246842][ T4251] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.398234][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 75.849968][ T21] Bluetooth: hci0: command 0x0419 tx timeout [ 75.856187][ T21] Bluetooth: hci2: command 0x0419 tx timeout [ 75.874669][ T21] Bluetooth: hci1: command 0x0419 tx timeout [ 75.913738][ T21] Bluetooth: hci3: command 0x0419 tx timeout [ 75.920297][ T21] Bluetooth: hci4: command 0x0419 tx timeout [ 75.938466][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 76.073067][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.088019][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.099419][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 76.918239][ C0] sched: RT throttling activated [ 77.539512][ T4215] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.547395][ T4215] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.598551][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 77.606841][ T4215] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.621193][ T4215] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.655730][ T4251] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.664777][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 77.674210][ T4251] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.683048][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 78.698249][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 78.718247][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 78.728269][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 78.738262][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 78.748259][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 78.758260][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 78.778287][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 78.788265][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 78.798266][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 79.508524][ T2286] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 79.899513][ T2286] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 79.953553][ T2286] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 80.061454][ T2286] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 80.166453][ T2286] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 80.279929][ T2286] usb 3-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 80.377892][ T2286] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.628995][ T2286] usb 3-1: config 0 descriptor?? [ 80.918835][ T2286] usb 3-1: can't set config #0, error -71 [ 80.968503][ T2286] usb 3-1: USB disconnect, device number 2 [ 81.238292][ T4272] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 83.086679][ T4316] loop0: detected capacity change from 0 to 64 [ 83.531255][ T4272] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 83.633878][ T4272] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 83.644946][ T4272] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 83.654980][ T4272] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 83.665455][ T4272] usb 4-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 83.858302][ T4272] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.900072][ T4272] usb 4-1: config 0 descriptor?? [ 84.671250][ T26] audit: type=1800 audit(1779657378.012:2): pid=4320 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.12" name="file1" dev="loop0" ino=18 res=0 errno=0 [ 84.709962][ T4272] usb 4-1: can't set config #0, error -71 [ 84.718191][ T4272] usb 4-1: USB disconnect, device number 2 [ 84.912865][ T4323] loop4: detected capacity change from 0 to 64 [ 85.297182][ T4326] loop3: detected capacity change from 0 to 1024 [ 86.912876][ T4326] ======================================================= [ 86.912876][ T4326] WARNING: The mand mount option has been deprecated and [ 86.912876][ T4326] and is ignored by this kernel. Remove the mand [ 86.912876][ T4326] option from the mount to silence this warning. [ 86.912876][ T4326] ======================================================= [ 86.965179][ T1107] cfg80211: failed to load regulatory.db [ 87.717560][ T4333] loop4: detected capacity change from 0 to 64 [ 89.188103][ T26] audit: type=1800 audit(1779657382.522:3): pid=4338 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.20" name="file1" dev="loop4" ino=18 res=0 errno=0 [ 89.268383][ T2286] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 89.939337][ T2286] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 90.168285][ T2286] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 91.782836][ T2286] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 91.976452][ T2286] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 91.986650][ T2286] usb 3-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 92.015021][ T2286] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.458783][ T2286] usb 3-1: config 0 descriptor?? [ 94.574841][ T2286] usb 3-1: can't set config #0, error -71 [ 94.684510][ T2286] usb 3-1: USB disconnect, device number 3 [ 96.310598][ T4369] loop3: detected capacity change from 0 to 64 [ 98.899181][ T4378] netlink: 112 bytes leftover after parsing attributes in process `syz.3.31'. [ 98.929957][ T4380] loop0: detected capacity change from 0 to 64 [ 99.007077][ T4382] loop1: detected capacity change from 0 to 512 [ 99.185873][ T4382] EXT4-fs (loop1): Mount option "dioread_lock" incompatible with ext2 [ 102.218861][ T4390] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 102.725535][ T4403] kvm: vcpu 0: requested 3200 ns lapic timer period limited to 200000 ns [ 102.765276][ T4403] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3089888063 (3089888063 ns) > initial count (2126324423 ns). Using initial count to start timer. [ 104.180957][ T4408] kvm: pic: single mode not supported [ 104.181091][ T4408] kvm: pic: single mode not supported [ 104.186944][ T4408] kvm: pic: level sensitive irq not supported [ 104.247219][ T4408] kvm: pic: single mode not supported [ 104.253583][ T4408] kvm: pic: level sensitive irq not supported [ 104.259901][ T4408] kvm: pic: single mode not supported [ 104.266017][ T4408] kvm: pic: level sensitive irq not supported [ 104.271987][ T4408] kvm: pic: single mode not supported [ 104.278111][ T4408] kvm: pic: level sensitive irq not supported [ 104.284238][ T4408] kvm: pic: single mode not supported [ 104.290562][ T4408] kvm: pic: level sensitive irq not supported [ 104.298056][ T4408] kvm: pic: single mode not supported [ 104.304276][ T4408] kvm: pic: level sensitive irq not supported [ 104.520695][ T4423] pit: kvm: requested 129904 ns i8254 timer period limited to 200000 ns [ 104.594221][ T4423] pit: kvm: requested 129066 ns i8254 timer period limited to 200000 ns [ 104.630650][ T4438] loop3: detected capacity change from 0 to 512 [ 104.641912][ T4437] loop0: detected capacity change from 0 to 64 [ 104.662941][ T4423] pit: kvm: requested 5866 ns i8254 timer period limited to 200000 ns [ 104.676519][ T4423] pit: kvm: requested 16761 ns i8254 timer period limited to 200000 ns [ 104.687231][ T4423] pit: kvm: requested 34361 ns i8254 timer period limited to 200000 ns [ 104.726081][ T4438] EXT4-fs (loop3): Mount option "dioread_lock" incompatible with ext2 [ 104.760093][ T4423] pit: kvm: requested 38552 ns i8254 timer period limited to 200000 ns [ 104.805104][ T4423] pit: kvm: requested 82971 ns i8254 timer period limited to 200000 ns [ 104.894872][ T4423] pit: kvm: requested 136609 ns i8254 timer period limited to 200000 ns [ 104.971744][ T4423] pit: kvm: requested 129066 ns i8254 timer period limited to 200000 ns [ 107.765132][ T4452] loop1: detected capacity change from 0 to 64 [ 109.947257][ T26] audit: type=1800 audit(1779657403.282:4): pid=4460 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.48" name="file1" dev="loop1" ino=18 res=0 errno=0 [ 110.524885][ T4459] overlayfs: failed to resolve './file2': -2 [ 111.815616][ T4488] loop3: detected capacity change from 0 to 64 [ 111.943269][ T4492] loop4: detected capacity change from 0 to 64 [ 112.531506][ T4493] kvm: pic: non byte write [ 112.634573][ T26] audit: type=1800 audit(1779657405.882:5): pid=4488 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.57" name="file1" dev="loop3" ino=18 res=0 errno=0 [ 114.479980][ T4511] pit: kvm: requested 135771 ns i8254 timer period limited to 200000 ns [ 114.757716][ T4511] pit: kvm: requested 72914 ns i8254 timer period limited to 200000 ns [ 114.808898][ T4511] pit: kvm: requested 137447 ns i8254 timer period limited to 200000 ns [ 114.894201][ T4519] overlayfs: failed to resolve './file2': -2 [ 114.950865][ T4511] pit: kvm: requested 61180 ns i8254 timer period limited to 200000 ns [ 115.379764][ T4523] loop2: detected capacity change from 0 to 64 [ 115.388124][ T4521] loop4: detected capacity change from 0 to 512 [ 115.448025][ T4521] EXT4-fs (loop4): Mount option "dioread_lock" incompatible with ext2 [ 116.694261][ T26] audit: type=1800 audit(1779657410.022:6): pid=4531 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.66" name="file1" dev="loop2" ino=18 res=0 errno=0 [ 116.919475][ T4527] overlayfs: failed to resolve './file2': -2 [ 118.057316][ T4545] kvm: vcpu 0: requested 3200 ns lapic timer period limited to 200000 ns [ 118.171509][ T4545] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3089888063 (3089888063 ns) > initial count (2126324423 ns). Using initial count to start timer. [ 118.285460][ T4555] loop0: detected capacity change from 0 to 64 [ 119.576178][ T26] audit: type=1800 audit(1779657412.822:7): pid=4555 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.72" name="file1" dev="loop0" ino=18 res=0 errno=0 [ 119.690622][ T4557] loop4: detected capacity change from 0 to 1024 [ 120.924924][ T4565] loop1: detected capacity change from 0 to 64 [ 120.992579][ T4572] loop0: detected capacity change from 0 to 64 [ 121.074523][ T4573] kvm: pic: non byte write [ 128.298296][ T4238] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 130.690270][ T4624] loop1: detected capacity change from 0 to 64 [ 132.703116][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.709604][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.595937][ T7] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 133.854584][ T26] audit: type=1800 audit(1779657427.192:8): pid=4636 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.97" name="file1" dev="loop1" ino=18 res=0 errno=0 [ 134.448390][ T7] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 134.899809][ T7] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 134.909780][ T7] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 134.919642][ T7] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 134.929494][ T7] usb 4-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 134.939230][ T7] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.999907][ T7] usb 4-1: config 0 descriptor?? [ 138.219618][ T7] usb 4-1: can't set config #0, error -71 [ 138.244813][ T7] usb 4-1: USB disconnect, device number 3 [ 138.391987][ T4656] loop3: detected capacity change from 0 to 512 [ 138.474226][ T4656] FAT-fs (loop3): bogus number of FAT sectors [ 138.487061][ T4656] FAT-fs (loop3): Can't find a valid FAT filesystem [ 138.714566][ T4192] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 139.071969][ T4192] usb 5-1: Using ep0 maxpacket: 16 [ 139.280745][ T4192] usb 5-1: config index 0 descriptor too short (expected 16456, got 72) [ 139.468478][ T4192] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 139.517472][ T4192] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 139.564369][ T4664] device syzkaller0 entered promiscuous mode [ 139.578243][ T4192] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 139.622382][ T4665] FAULT_INJECTION: forcing a failure. [ 139.622382][ T4665] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 139.638230][ T4192] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 139.688246][ T4192] usb 5-1: config 0 has no interface number 0 [ 139.706937][ T4665] CPU: 1 PID: 4665 Comm: syz.3.110 Not tainted syzkaller #0 [ 139.714403][ T4665] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 139.724507][ T4665] Call Trace: [ 139.727824][ T4665] [ 139.730788][ T4665] dump_stack_lvl+0x188/0x250 [ 139.735533][ T4665] ? show_regs_print_info+0x20/0x20 [ 139.740770][ T4665] ? load_image+0x400/0x400 [ 139.745314][ T4665] ? __lock_acquire+0x7d10/0x7d10 [ 139.750388][ T4665] should_fail+0x38c/0x4c0 [ 139.754851][ T4665] _copy_from_user+0x2e/0x170 [ 139.759574][ T4665] __copy_msghdr_from_user+0x48a/0x630 [ 139.765186][ T4665] ? verify_lock_unused+0x140/0x140 [ 139.770455][ T4665] ? __ia32_sys_shutdown+0x1d0/0x1d0 [ 139.775803][ T4665] ___sys_sendmsg+0x19a/0x2e0 [ 139.780872][ T4665] ? __sys_sendmsg+0x2a0/0x2a0 [ 139.785687][ T4665] ? vfs_write+0x8b2/0xd60 [ 139.790159][ T4665] __se_sys_sendmsg+0x1af/0x290 [ 139.795052][ T4665] ? __x64_sys_sendmsg+0x80/0x80 [ 139.800029][ T4665] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 139.806067][ T4665] ? lockdep_hardirqs_on+0x94/0x140 [ 139.811308][ T4665] do_syscall_64+0x4c/0xa0 [ 139.815771][ T4665] ? clear_bhb_loop+0x30/0x80 [ 139.820482][ T4665] ? clear_bhb_loop+0x30/0x80 [ 139.825202][ T4665] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 139.831159][ T4665] RIP: 0033:0x7f5c25ba5e59 [ 139.835616][ T4665] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 139.855263][ T4665] RSP: 002b:00007f5c23dde028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 139.863739][ T4665] RAX: ffffffffffffffda RBX: 00007f5c25e1f090 RCX: 00007f5c25ba5e59 [ 139.872300][ T4665] RDX: 0000000020008110 RSI: 00002000000000c0 RDI: 0000000000000006 [ 139.880311][ T4665] RBP: 00007f5c23dde090 R08: 0000000000000000 R09: 0000000000000000 [ 139.888318][ T4665] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 139.896322][ T4665] R13: 00007f5c25e1f128 R14: 00007f5c25e1f090 R15: 00007ffca8dcf868 [ 139.904442][ T4665] [ 139.941296][ T4192] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 140.003858][ T4192] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 140.052730][ T4192] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 140.103641][ T4192] usb 5-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 140.188244][ T4192] usb 5-1: config 0 interface 125 has no altsetting 2 [ 140.396028][ T4192] usb 5-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 140.423811][ T4192] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.461866][ T4192] usb 5-1: Product: syz [ 140.476436][ T4192] usb 5-1: Manufacturer: syz [ 140.527141][ T4192] usb 5-1: SerialNumber: syz [ 140.569553][ T4192] usb 5-1: config 0 descriptor?? [ 140.644314][ T4192] usb 5-1: selecting invalid altsetting 2 [ 140.684700][ T4667] loop2: detected capacity change from 0 to 512 [ 140.747496][ T4667] EXT4-fs (loop2): Mount option "dioread_lock" incompatible with ext2 [ 143.314722][ T4237] usb 5-1: USB disconnect, device number 2 [ 143.436368][ T4677] loop4: detected capacity change from 0 to 64 [ 146.476643][ T26] audit: type=1800 audit(1779657439.812:9): pid=4688 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.113" name="file1" dev="loop4" ino=18 res=0 errno=0 [ 148.902232][ T4237] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 149.796884][ T1110] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 150.258581][ T4237] usb 5-1: device descriptor read/all, error -71 [ 150.945135][ T4713] syz.1.124 uses obsolete (PF_INET,SOCK_PACKET) [ 151.561206][ T4717] loop1: detected capacity change from 0 to 1024 [ 151.788447][ T4237] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 151.838283][ T7] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 152.016071][ T4722] netlink: 12 bytes leftover after parsing attributes in process `syz.3.122'. [ 152.038480][ T4237] usb 5-1: Using ep0 maxpacket: 16 [ 152.045816][ T4722] netlink: 12 bytes leftover after parsing attributes in process `syz.3.122'. [ 152.181058][ T4237] usb 5-1: config index 0 descriptor too short (expected 16456, got 72) [ 152.201131][ T4237] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 152.222162][ T4717] loop1: detected capacity change from 0 to 32768 [ 152.241746][ T4237] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 152.266283][ T4237] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 152.301452][ T4237] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 152.425940][ T4237] usb 5-1: config 0 has no interface number 0 [ 152.572395][ T4237] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 152.867539][ T4237] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 152.903461][ T4717] JFS: block map error in dbBackSplit [ 152.928487][ T4717] ERROR: (device loop1): dbDiscardAG: -EIO [ 152.928487][ T4717] [ 152.944356][ T4237] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 153.018459][ T4717] ERROR: (device loop1): remounting filesystem as read-only [ 153.161028][ T4237] usb 5-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 153.198526][ T4717] attempt to access beyond end of device [ 153.198526][ T4717] loop1: rw=2051, want=2637824, limit=32768 [ 153.278229][ T4237] usb 5-1: config 0 interface 125 has no altsetting 2 [ 153.305643][ T4717] JFS: sb_issue_discard(ffff888042488000, 328704, 1024, GFP_NOFS, 0) = -5 => failed! [ 153.389874][ T4717] blkno = 50400, nblocks = 400 [ 153.394715][ T4717] ERROR: (device loop1): dbFree: block to be freed is outside the map [ 153.394715][ T4717] [ 153.519113][ T4237] usb 5-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 153.538543][ T4237] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.567001][ T4237] usb 5-1: Product: syz [ 153.578883][ T4237] usb 5-1: Manufacturer: syz [ 153.587309][ T4237] usb 5-1: SerialNumber: syz [ 153.624271][ T4237] usb 5-1: config 0 descriptor?? [ 153.685653][ T4237] usb 5-1: selecting invalid altsetting 2 [ 153.723773][ T4724] loop3: detected capacity change from 0 to 32768 [ 153.776294][ T4724] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.122 (4724) [ 153.864063][ T4724] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 153.882704][ T4724] BTRFS info (device loop3): turning on sync discard [ 153.906603][ T21] usb 5-1: USB disconnect, device number 4 [ 153.933418][ T4724] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 153.950928][ T4724] BTRFS info (device loop3): use zstd compression, level 3 [ 153.961904][ T4724] BTRFS info (device loop3): turning on async discard [ 154.016406][ T4724] BTRFS warning (device loop3): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 154.071909][ T4724] BTRFS info (device loop3): trying to use backup root at mount time [ 154.109596][ T4724] BTRFS info (device loop3): enabling auto defrag [ 154.127734][ T4724] BTRFS info (device loop3): using free space tree [ 154.169465][ T4724] BTRFS info (device loop3): has skinny extents [ 154.208439][ T7] usb 1-1: unable to read config index 0 descriptor/all [ 154.215474][ T7] usb 1-1: can't read configurations, error -71 [ 154.247744][ T4742] loop1: detected capacity change from 0 to 64 [ 154.358271][ T9] BTRFS warning (device loop3): checksum verify failed on 5337088 wanted 0xe63dbdda found 0xc926492d level 0 [ 154.371173][ T4724] BTRFS warning (device loop3): failed to read root (objectid=2): -5 [ 154.381032][ T4299] BTRFS warning (device loop3): checksum verify failed on 5324800 wanted 0x9f73850b found 0x80379423 level 0 [ 154.395771][ T4724] BTRFS warning (device loop3): couldn't read tree root [ 154.405563][ T4724] BTRFS error (device loop3): parent transid verify failed on 5255168 wanted 5 found 7 [ 154.449620][ T4724] BTRFS warning (device loop3): couldn't read tree root [ 155.994461][ T4764] FAULT_INJECTION: forcing a failure. [ 155.994461][ T4764] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 156.007747][ T4764] CPU: 0 PID: 4764 Comm: syz.2.135 Not tainted syzkaller #0 [ 156.015086][ T4764] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 156.025175][ T4764] Call Trace: [ 156.028486][ T4764] [ 156.031444][ T4764] dump_stack_lvl+0x188/0x250 [ 156.036156][ T4764] ? show_regs_print_info+0x20/0x20 [ 156.041385][ T4764] ? load_image+0x400/0x400 [ 156.045923][ T4764] ? __lock_acquire+0x7d10/0x7d10 [ 156.050989][ T4764] should_fail+0x38c/0x4c0 [ 156.055438][ T4764] _copy_from_user+0x2e/0x170 [ 156.060145][ T4764] iovec_from_user+0x142/0x370 [ 156.064951][ T4764] __import_iovec+0x70/0x490 [ 156.069582][ T4764] import_iovec+0x6f/0xa0 [ 156.073945][ T4764] ___sys_sendmsg+0x1fd/0x2e0 [ 156.078661][ T4764] ? __sys_sendmsg+0x2a0/0x2a0 [ 156.083467][ T4764] ? vfs_write+0x8b2/0xd60 [ 156.087932][ T4764] __se_sys_sendmsg+0x1af/0x290 [ 156.092816][ T4764] ? __x64_sys_sendmsg+0x80/0x80 [ 156.097875][ T4764] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 156.103913][ T4764] ? lockdep_hardirqs_on+0x94/0x140 [ 156.109145][ T4764] do_syscall_64+0x4c/0xa0 [ 156.113601][ T4764] ? clear_bhb_loop+0x30/0x80 [ 156.118304][ T4764] ? clear_bhb_loop+0x30/0x80 [ 156.123020][ T4764] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 156.128959][ T4764] RIP: 0033:0x7f681d831e59 [ 156.133401][ T4764] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 156.153119][ T4764] RSP: 002b:00007f681ba49028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 156.161562][ T4764] RAX: ffffffffffffffda RBX: 00007f681daab180 RCX: 00007f681d831e59 [ 156.169565][ T4764] RDX: 0000000000004890 RSI: 00002000000003c0 RDI: 0000000000000008 [ 156.177564][ T4764] RBP: 00007f681ba49090 R08: 0000000000000000 R09: 0000000000000000 [ 156.185559][ T4764] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 156.193555][ T4764] R13: 00007f681daab218 R14: 00007f681daab180 R15: 00007fffd89722c8 [ 156.201580][ T4764] [ 156.657600][ T7] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 156.889200][ T4768] Illegal XDP return value 4294967274, expect packet loss! [ 157.563587][ T4773] loop2: detected capacity change from 0 to 256 [ 157.940761][ T4773] exFAT-fs (loop2): failed to load upcase table (idx : 0x00011a39, chksum : 0xd7c18d7b, utbl_chksum : 0xe619d30d) [ 158.273384][ T4773] exFAT-fs (loop2): error, invalid size(size(11) > aligned(9223372036854777344) [ 158.273384][ T4773] [ 158.524200][ T4773] exFAT-fs (loop2): Filesystem has been set read-only [ 158.794966][ T4724] BTRFS error (device loop3): open_ctree failed: -22 [ 158.810213][ T4790] loop0: detected capacity change from 0 to 64 [ 159.220236][ T4795] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.146'. [ 159.489631][ T4802] FAULT_INJECTION: forcing a failure. [ 159.489631][ T4802] name failslab, interval 1, probability 0, space 0, times 1 [ 159.535320][ T4802] CPU: 1 PID: 4802 Comm: syz.2.149 Not tainted syzkaller #0 [ 159.542685][ T4802] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 159.552777][ T4802] Call Trace: [ 159.556094][ T4802] [ 159.559049][ T4802] dump_stack_lvl+0x188/0x250 [ 159.563767][ T4802] ? show_regs_print_info+0x20/0x20 [ 159.569001][ T4802] ? load_image+0x400/0x400 [ 159.573534][ T4802] ? __might_sleep+0xf0/0xf0 [ 159.578150][ T4802] ? __lock_acquire+0x7d10/0x7d10 [ 159.583215][ T4802] should_fail+0x38c/0x4c0 [ 159.587671][ T4802] should_failslab+0x5/0x20 [ 159.592204][ T4802] slab_pre_alloc_hook+0x51/0xc0 [ 159.597181][ T4802] __kmalloc_node_track_caller+0x68/0x3a0 [ 159.603076][ T4802] ? alloc_skb_with_frags+0xa7/0x730 [ 159.608398][ T4802] ? kmem_cache_alloc_node+0x162/0x2d0 [ 159.613923][ T4802] ? __alloc_skb+0xf4/0x750 [ 159.618476][ T4802] ? alloc_skb_with_frags+0xa7/0x730 [ 159.623807][ T4802] __alloc_skb+0x22c/0x750 [ 159.628273][ T4802] alloc_skb_with_frags+0xa7/0x730 [ 159.633430][ T4802] ? __lock_acquire+0x7d10/0x7d10 [ 159.638495][ T4802] sock_alloc_send_pskb+0x87f/0x9a0 [ 159.643726][ T4802] ? __might_fault+0xb3/0x110 [ 159.648540][ T4802] ? sock_kzfree_s+0x50/0x50 [ 159.653178][ T4802] packet_sendmsg+0x343c/0x5060 [ 159.658093][ T4802] ? __might_sleep+0xf0/0xf0 [ 159.662744][ T4802] ? aa_sk_perm+0x7dc/0x910 [ 159.667275][ T4802] ? packet_getsockopt+0x9a0/0x9a0 [ 159.672426][ T4802] ? aa_sock_msg_perm+0x94/0x150 [ 159.677401][ T4802] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 159.682718][ T4802] ? security_socket_sendmsg+0x7c/0xa0 [ 159.688297][ T4802] __sys_sendto+0x46d/0x620 [ 159.692865][ T4802] ? __ia32_sys_getpeername+0x80/0x80 [ 159.698294][ T4802] ? __lock_acquire+0x7d10/0x7d10 [ 159.703551][ T4802] ? lock_chain_count+0x20/0x20 [ 159.708430][ T4802] ? vtime_user_exit+0x2c8/0x3e0 [ 159.713402][ T4802] __x64_sys_sendto+0xda/0xf0 [ 159.718128][ T4802] do_syscall_64+0x4c/0xa0 [ 159.722578][ T4802] ? clear_bhb_loop+0x30/0x80 [ 159.727285][ T4802] ? clear_bhb_loop+0x30/0x80 [ 159.731999][ T4802] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 159.737938][ T4802] RIP: 0033:0x7f681d831e59 [ 159.742469][ T4802] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 159.762103][ T4802] RSP: 002b:00007f681ba8b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 159.770555][ T4802] RAX: ffffffffffffffda RBX: 00007f681daaafa0 RCX: 00007f681d831e59 [ 159.778556][ T4802] RDX: 0000000000010000 RSI: 0000200000000180 RDI: 0000000000000003 [ 159.786559][ T4802] RBP: 00007f681ba8b090 R08: 0000200000000140 R09: 0000000000000014 [ 159.794560][ T4802] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 159.802564][ T4802] R13: 00007f681daab038 R14: 00007f681daaafa0 R15: 00007fffd89722c8 [ 159.810587][ T4802] [ 159.967958][ T4809] mmap: syz.4.150 (4809) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 159.996923][ T4811] loop1: detected capacity change from 0 to 512 [ 159.999184][ T4809] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 160.044942][ T4811] EXT4-fs (loop1): Mount option "dioread_lock" incompatible with ext2 [ 160.150125][ T4812] loop4: detected capacity change from 0 to 4096 [ 160.188276][ T4283] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 160.212691][ T4812] ntfs: (device loop4): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 161.719203][ T4283] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 161.736262][ T4812] ntfs: (device loop4): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 161.836192][ T4283] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 162.079757][ T4812] ntfs: (device loop4): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 162.119676][ T4800] loop0: detected capacity change from 0 to 32768 [ 162.171723][ T4812] ntfs: (device loop4): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 162.221267][ T4283] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 162.231414][ T4283] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 162.241486][ T4283] usb 4-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 162.250856][ T4283] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.265317][ T4812] ntfs: (device loop4): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 162.288614][ T4800] BTRFS: device fsid d4515e72-4b5f-44ec-805d-b3edf811e7f1 devid 1 transid 8 /dev/loop0 scanned by syz.0.147 (4800) [ 162.301729][ T4283] usb 4-1: config 0 descriptor?? [ 162.358998][ T4812] ntfs: volume version 3.1. [ 162.387021][ T4812] ntfs: (device loop4): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 162.402618][ T4800] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 162.425264][ T4812] ntfs: (device loop4): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 162.433841][ T4800] BTRFS error (device loop0): superblock checksum mismatch [ 162.449792][ T4367] udevd[4367]: incorrect btrfs checksum on /dev/loop0 [ 162.463429][ T4812] ntfs: (device loop4): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 162.487418][ T4800] BTRFS error (device loop0): open_ctree failed: -22 [ 162.508076][ T4812] ntfs: (device loop4): ntfs_read_locked_index_inode(): $INDEX_ROOT attribute is corrupt. [ 162.532786][ T4812] ntfs: (device loop4): ntfs_read_locked_index_inode(): Failed with error code -5 while reading index inode (mft_no 0x18, name_len 2. [ 162.558641][ T4283] hdpvr 4-1:0.0: firmware version 0xd dated ­";W|۱adTUK> }1vN`Y# [ 162.666712][ T4824] netlink: 12 bytes leftover after parsing attributes in process `syz.0.155'. [ 162.703691][ T4824] netlink: 12 bytes leftover after parsing attributes in process `syz.0.155'. [ 162.744265][ T4275] udevd[4275]: incorrect btrfs checksum on /dev/loop0 [ 162.854224][ T4829] loop4: detected capacity change from 0 to 64 [ 162.977659][ T4826] loop1: detected capacity change from 0 to 8192 [ 163.081499][ T4826] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 163.120340][ T4832] netlink: 8 bytes leftover after parsing attributes in process `syz.4.158'. [ 163.135987][ T4826] REISERFS (device loop1): using ordered data mode [ 163.143659][ T4826] reiserfs: using flush barriers [ 163.151742][ T4826] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 163.170071][ T4826] REISERFS (device loop1): checking transaction log (loop1) [ 163.182686][ T4826] REISERFS (device loop1): Using r5 hash to sort names [ 163.192841][ T4826] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 163.234184][ T4604] kernel write not supported for file task/105/net/ip_tables_matches (pid: 4604 comm: kworker/1:10) [ 163.429062][ T4283] hdpvr 4-1:0.0: Could not setup controls [ 163.457380][ T4283] hdpvr 4-1:0.0: registering videodev failed [ 163.506919][ T4283] hdpvr: probe of 4-1:0.0 failed with error -71 [ 163.558874][ T4283] usb 4-1: USB disconnect, device number 4 [ 163.596145][ T4827] loop0: detected capacity change from 0 to 32768 [ 163.664968][ T4827] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.155 (4827) [ 164.430188][ T4827] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 164.473669][ T4827] BTRFS info (device loop0): turning on sync discard [ 164.633139][ T4827] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 164.668305][ T4827] BTRFS info (device loop0): use zstd compression, level 3 [ 164.675900][ T4827] BTRFS info (device loop0): turning on async discard [ 164.683532][ T4853] netlink: 'syz.1.162': attribute type 4 has an invalid length. [ 164.759937][ T4827] BTRFS warning (device loop0): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 164.817332][ T4827] BTRFS info (device loop0): trying to use backup root at mount time [ 164.857413][ T4827] BTRFS info (device loop0): enabling auto defrag [ 164.885384][ T4827] BTRFS info (device loop0): using free space tree [ 164.892258][ T4827] BTRFS info (device loop0): has skinny extents [ 165.864089][ T4879] loop3: detected capacity change from 0 to 256 [ 165.984380][ T4879] exFAT-fs (loop3): failed to load upcase table (idx : 0x00011a39, chksum : 0xd7c18d7b, utbl_chksum : 0xe619d30d) [ 166.095378][ T4885] netlink: 'syz.4.165': attribute type 2 has an invalid length. [ 166.132161][ T4885] netlink: 132 bytes leftover after parsing attributes in process `syz.4.165'. [ 166.427756][ T4893] loop4: detected capacity change from 0 to 2048 [ 166.556220][ T4893] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 166.588707][ T4827] BTRFS error (device loop0): open_ctree failed: -12 [ 166.598274][ T4275] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by udevd (4275) [ 166.658501][ T7] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 166.671939][ T4893] netlink: 'syz.4.167': attribute type 2 has an invalid length. [ 166.898376][ T7] usb 2-1: Using ep0 maxpacket: 16 [ 166.922051][ T1110] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 166.930981][ T4907] FAULT_INJECTION: forcing a failure. [ 166.930981][ T4907] name failslab, interval 1, probability 0, space 0, times 0 [ 166.943989][ T4907] CPU: 1 PID: 4907 Comm: syz.0.170 Not tainted syzkaller #0 [ 166.951313][ T4907] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 166.961402][ T4907] Call Trace: [ 166.964712][ T4907] [ 166.967691][ T4907] dump_stack_lvl+0x188/0x250 [ 166.972473][ T4907] ? show_regs_print_info+0x20/0x20 [ 166.977720][ T4907] ? load_image+0x400/0x400 [ 166.982282][ T4907] ? is_bpf_text_address+0x254/0x270 [ 166.987615][ T4907] should_fail+0x38c/0x4c0 [ 166.992080][ T4907] should_failslab+0x5/0x20 [ 166.996631][ T4907] slab_pre_alloc_hook+0x51/0xc0 [ 167.001611][ T4907] ? skb_clone+0x1bd/0x350 [ 167.006085][ T4907] kmem_cache_alloc+0x3d/0x290 [ 167.010909][ T4907] skb_clone+0x1bd/0x350 [ 167.015189][ T4907] ? dev_queue_xmit_nit+0x1df/0xb00 [ 167.019126][ T7] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 101, changing to 10 [ 167.020421][ T4907] dev_queue_xmit_nit+0x2cc/0xb00 [ 167.036597][ T4907] ? validate_xmit_skb+0x7b3/0xe40 [ 167.041757][ T4907] dev_hard_start_xmit+0x13e/0x7e0 [ 167.047029][ T4907] __dev_queue_xmit+0x1a9b/0x2f80 [ 167.048812][ T7] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 17699, setting to 1024 [ 167.052112][ T4907] ? dev_queue_xmit+0x20/0x20 [ 167.068240][ T4907] ? memcpy+0x3c/0x60 [ 167.072268][ T4907] ? __copy_skb_header+0x3ba/0x4f0 [ 167.077427][ T4907] ? __skb_clone+0x480/0x790 [ 167.082067][ T4907] ? skb_clone+0x1f1/0x350 [ 167.086586][ T4907] __netlink_deliver_tap+0x53e/0x7c0 [ 167.091945][ T4907] netlink_deliver_tap+0x16c/0x180 [ 167.097142][ T4907] netlink_unicast+0x74f/0x920 [ 167.101949][ T4907] netlink_sendmsg+0x8ba/0xbe0 [ 167.106756][ T4907] ? netlink_getsockopt+0x570/0x570 [ 167.111990][ T4907] ? aa_sock_msg_perm+0x94/0x150 [ 167.116979][ T4907] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 167.122306][ T4907] ? security_socket_sendmsg+0x7c/0xa0 [ 167.127800][ T4907] ? netlink_getsockopt+0x570/0x570 [ 167.133041][ T4907] ____sys_sendmsg+0x5b7/0x8f0 [ 167.137856][ T4907] ? __sys_sendmsg_sock+0x30/0x30 [ 167.142940][ T4907] ? import_iovec+0x6f/0xa0 [ 167.147497][ T4907] ___sys_sendmsg+0x236/0x2e0 [ 167.152219][ T4907] ? __sys_sendmsg+0x2a0/0x2a0 [ 167.157035][ T4907] ? vfs_write+0x8b2/0xd60 [ 167.161514][ T4907] __se_sys_sendmsg+0x1af/0x290 [ 167.166406][ T4907] ? __x64_sys_sendmsg+0x80/0x80 [ 167.171375][ T4907] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 167.177406][ T4907] ? lockdep_hardirqs_on+0x94/0x140 [ 167.179758][ T7] usb 2-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 167.182650][ T4907] do_syscall_64+0x4c/0xa0 [ 167.193496][ T1110] usb 3-1: Using ep0 maxpacket: 16 [ 167.196111][ T4907] ? clear_bhb_loop+0x30/0x80 [ 167.205923][ T4907] ? clear_bhb_loop+0x30/0x80 [ 167.210649][ T4907] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 167.216581][ T4907] RIP: 0033:0x7fa880bfce59 [ 167.221036][ T4907] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 167.223670][ T7] usb 2-1: New USB device strings: Mfr=34, Product=0, SerialNumber=0 [ 167.240674][ T4907] RSP: 002b:00007fa87ee56028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 167.240703][ T4907] RAX: ffffffffffffffda RBX: 00007fa880e75fa0 RCX: 00007fa880bfce59 [ 167.240719][ T4907] RDX: 0000000000008040 RSI: 0000200000000240 RDI: 0000000000000003 [ 167.240733][ T4907] RBP: 00007fa87ee56090 R08: 0000000000000000 R09: 0000000000000000 [ 167.240747][ T4907] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 167.240759][ T4907] R13: 00007fa880e76038 R14: 00007fa880e75fa0 R15: 00007ffd216bd438 [ 167.240790][ T4907] [ 167.309678][ T4908] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 167.374053][ T4905] loop3: detected capacity change from 0 to 4096 [ 167.378840][ T1110] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 167.404906][ T1110] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 167.421953][ T4905] __ntfs_error: 2 callbacks suppressed [ 167.421970][ T4905] ntfs: (device loop3): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 167.472082][ T4905] ntfs: (device loop3): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 167.480311][ T7] usb 2-1: Manufacturer: syz [ 167.516044][ T4905] ntfs: (device loop3): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 167.543885][ T7] usb 2-1: config 0 descriptor?? [ 167.544586][ T4905] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 167.568624][ T4855] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 167.578520][ T1110] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 167.608337][ T1110] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.608372][ T4905] ntfs: (device loop3): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 167.649119][ T4905] ntfs: volume version 3.1. [ 167.668992][ T7] usb 2-1: can't set config #0, error -71 [ 167.678648][ T4905] ntfs: (device loop3): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 167.699450][ T7] usb 2-1: USB disconnect, device number 3 [ 167.733809][ T4905] ntfs: (device loop3): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 167.736048][ T1110] usb 3-1: Product: syz [ 167.777420][ T4905] ntfs: (device loop3): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 167.782487][ T1110] usb 3-1: Manufacturer: syz [ 167.806450][ T4911] netlink: 4 bytes leftover after parsing attributes in process `syz.1.172'. [ 167.837175][ T4905] ntfs: (device loop3): ntfs_read_locked_index_inode(): $INDEX_ROOT attribute is corrupt. [ 167.858431][ T1110] usb 3-1: SerialNumber: syz [ 167.894190][ T4905] ntfs: (device loop3): ntfs_read_locked_index_inode(): Failed with error code -5 while reading index inode (mft_no 0x18, name_len 2. [ 168.016039][ T4912] loop1: detected capacity change from 0 to 4096 [ 168.023027][ T4913] loop0: detected capacity change from 0 to 128 [ 168.229384][ T4917] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 169.378451][ T4283] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 169.784015][ T4934] netlink: 12 bytes leftover after parsing attributes in process `syz.2.178'. [ 169.857791][ T4934] netlink: 12 bytes leftover after parsing attributes in process `syz.2.178'. [ 169.958444][ T4887] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 169.966513][ T4283] usb 5-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 169.999301][ T4283] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.049905][ T4283] usb 5-1: Product: syz [ 170.072152][ T4283] usb 5-1: Manufacturer: syz [ 170.091418][ T4283] usb 5-1: SerialNumber: syz [ 170.129234][ T4283] usb 5-1: config 0 descriptor?? [ 170.249980][ T4887] usb 4-1: Using ep0 maxpacket: 16 [ 170.258614][ T1110] usb 3-1: 0:2 : does not exist [ 170.289217][ T4937] loop1: detected capacity change from 0 to 256 [ 170.358508][ T1110] usb 3-1: USB disconnect, device number 4 [ 170.400265][ T4937] exFAT-fs (loop1): failed to load upcase table (idx : 0x00011a39, chksum : 0xd7c18d7b, utbl_chksum : 0xe619d30d) [ 170.418581][ T4887] usb 4-1: config index 0 descriptor too short (expected 16456, got 72) [ 170.437426][ T4887] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 170.481542][ T4887] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 170.519825][ T4887] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 170.549597][ T4938] exFAT-fs (loop1): error, invalid size(size(11) > aligned(9223372036854777344) [ 170.549597][ T4938] [ 170.550386][ T4887] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 170.578100][ T4940] udc-core: couldn't find an available UDC or it's busy [ 170.605543][ T4938] exFAT-fs (loop1): Filesystem has been set read-only [ 170.612701][ T4940] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 170.623393][ T4887] usb 4-1: config 0 has no interface number 0 [ 170.643455][ T4887] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 170.668264][ T4887] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 170.713032][ T4613] udevd[4613]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 170.777420][ T4935] loop2: detected capacity change from 0 to 32768 [ 170.864853][ T4887] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 170.876259][ T4887] usb 4-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 170.889430][ T4887] usb 4-1: config 0 interface 125 has no altsetting 0 [ 171.178967][ T4887] usb 4-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 171.371881][ T4887] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.539042][ T4887] usb 4-1: Product: syz [ 171.543278][ T4887] usb 4-1: Manufacturer: syz [ 171.565296][ T4945] loop0: detected capacity change from 0 to 512 [ 171.592365][ T4887] usb 4-1: SerialNumber: syz [ 171.639235][ T4887] usb 4-1: config 0 descriptor?? [ 171.702133][ T4945] EXT4-fs error (device loop0): ext4_iget_extra_inode:4573: inode #15: comm syz.0.182: corrupted in-inode xattr [ 171.761975][ T4945] EXT4-fs error (device loop0): ext4_orphan_get:1411: comm syz.0.182: couldn't read orphan inode 15 (err -117) [ 171.803607][ T4945] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 171.938256][ C1] usb 4-1: async_complete: urb error -71 [ 171.944622][ C1] usb 4-1: async_complete: urb error -71 [ 171.950385][ C1] usb 4-1: async_complete: urb error -71 [ 171.956130][ C1] usb 4-1: async_complete: urb error -71 [ 172.126215][ T4887] get_1284_register: usb error -71 [ 172.698472][ T4887] usb 4-1: USB disconnect, device number 5 [ 172.708395][ T4947] EXT4-fs error (device loop0): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 172.739930][ T4935] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 172.760600][ T4935] BTRFS info (device loop2): turning on sync discard [ 172.796785][ T4935] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 172.806653][ T4935] BTRFS info (device loop2): use zstd compression, level 3 [ 172.814994][ T4935] BTRFS info (device loop2): turning on async discard [ 172.823058][ T4935] BTRFS warning (device loop2): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 172.834121][ T4935] BTRFS info (device loop2): trying to use backup root at mount time [ 172.843059][ T4935] BTRFS info (device loop2): enabling auto defrag [ 172.868359][ T4935] BTRFS info (device loop2): using free space tree [ 172.876650][ T4954] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 172.907734][ T4935] BTRFS info (device loop2): has skinny extents [ 173.150766][ T4972] loop0: detected capacity change from 0 to 512 [ 173.195148][ T4935] BTRFS error (device loop2): open_ctree failed: -12 [ 173.202629][ T4886] usb 5-1: USB disconnect, device number 5 [ 173.266271][ T4972] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 173.298306][ T4972] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 173.326137][ T4972] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 173.344180][ T4972] System zones: 1-12 [ 173.367258][ T4972] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2807: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 173.399522][ T4972] EXT4-fs (loop0): 1 truncate cleaned up [ 173.437353][ T4972] EXT4-fs (loop0): mounted filesystem without journal. Opts: nogrpid,jqfmt=vfsv0,debug_want_extra_isize=0x0000000000000068,debug,nombcache,quota,bsddf,,errors=continue. Quota mode: writeback. [ 173.518583][ T4986] misc userio: No port type given on /dev/userio [ 173.556660][ T4984] loop1: detected capacity change from 0 to 512 [ 173.613007][ T4984] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 173.667111][ T4984] EXT4-fs (loop1): 1 truncate cleaned up [ 173.695015][ T5000] IPv6: sit1: Disabled Multicast RS [ 173.708750][ T5000] Dead loop on virtual device ip6_vti0, fix it urgently! [ 173.719528][ T5000] capability: warning: `syz.2.192' uses deprecated v2 capabilities in a way that may be insecure [ 173.724226][ T4984] EXT4-fs (loop1): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000001,auto_da_alloc=0x0000000000000003,debug_want_extra_isize=0x0000000000000068,lazytime,discard,lazytime,debug_want_extra_isize=0x0000000000000006,,errors=continue. Quota mode: none. [ 173.731762][ T5000] sg_read: process 130 (syz.2.192) changed security contexts after opening file descriptor, this is not allowed. [ 173.976764][ T26] kauditd_printk_skb: 3 callbacks suppressed [ 173.976779][ T26] audit: type=1326 audit(1779657723.310:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5004 comm="syz.4.196" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f11392cbe59 code=0x0 [ 174.044237][ T5009] loop0: detected capacity change from 0 to 256 [ 174.359721][ T5009] exFAT-fs (loop0): failed to load upcase table (idx : 0x00011a39, chksum : 0xd7c18d7b, utbl_chksum : 0xe619d30d) [ 174.637686][ T4886] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 174.988035][ T5018] exFAT-fs (loop0): error, invalid size(size(11) > aligned(9223372036854777344) [ 174.988035][ T5018] [ 175.078553][ T5018] exFAT-fs (loop0): Filesystem has been set read-only [ 175.170553][ T21] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 175.320988][ T5017] Zero length message leads to an empty skb [ 175.397295][ T4886] usb 2-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 175.416851][ T4886] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.453879][ T4886] usb 2-1: Product: syz [ 175.458110][ T4886] usb 2-1: Manufacturer: syz [ 175.463067][ T21] usb 5-1: Using ep0 maxpacket: 16 [ 175.515453][ T4886] usb 2-1: SerialNumber: syz [ 175.553980][ T4886] usb 2-1: config 0 descriptor?? [ 175.620138][ T21] usb 5-1: config index 0 descriptor too short (expected 16456, got 72) [ 175.659840][ T21] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 175.724543][ T21] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 175.743160][ T5003] loop2: detected capacity change from 0 to 32768 [ 175.760462][ T21] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 175.818213][ T21] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 175.885417][ T21] usb 5-1: config 0 has no interface number 0 [ 175.907939][ T5003] XFS (loop2): Mounting V5 Filesystem [ 175.924526][ T21] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 175.967768][ T5030] udc-core: couldn't find an available UDC or it's busy [ 175.996346][ T5030] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 176.015219][ T21] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 176.098359][ T21] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 176.116405][ T5003] XFS (loop2): Ending clean mount [ 176.143813][ T21] usb 5-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 176.197901][ T21] usb 5-1: config 0 interface 125 has no altsetting 0 [ 176.270924][ T4189] XFS (loop2): Unmounting Filesystem [ 176.338276][ T7] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 176.408566][ T21] usb 5-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 176.427917][ T21] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.471644][ T21] usb 5-1: Product: syz [ 176.475885][ T21] usb 5-1: Manufacturer: syz [ 176.487435][ T21] usb 5-1: SerialNumber: syz [ 176.498865][ T21] usb 5-1: config 0 descriptor?? [ 176.708334][ T7] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 176.722358][ T7] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 176.743907][ T7] usb 4-1: config 220 has no interface number 2 [ 176.757127][ T7] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 176.785646][ T7] usb 4-1: config 220 interface 0 has no altsetting 0 [ 176.798289][ C1] usb 5-1: async_complete: urb error -71 [ 176.800720][ T7] usb 4-1: config 220 interface 76 has no altsetting 0 [ 176.804068][ C1] usb 5-1: async_complete: urb error -71 [ 176.816731][ C1] usb 5-1: async_complete: urb error -71 [ 176.822483][ C1] usb 5-1: async_complete: urb error -71 [ 176.825978][ T7] usb 4-1: config 220 interface 1 has no altsetting 0 [ 176.838267][ T1110] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 176.840929][ T21] get_1284_register: usb error -71 [ 176.864991][ T21] usb 5-1: USB disconnect, device number 6 [ 177.028435][ T7] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 177.044237][ T7] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.055752][ T7] usb 4-1: Product: syz [ 177.060407][ T7] usb 4-1: Manufacturer: syz [ 177.065122][ T7] usb 4-1: SerialNumber: syz [ 177.208364][ T1110] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 177.219505][ T4274] usb 2-1: USB disconnect, device number 4 [ 177.241508][ T1110] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 177.251844][ T1110] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 177.272213][ T1110] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 177.283929][ T1110] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.315558][ T1110] usb 1-1: config 0 descriptor?? [ 178.040755][ T5066] binder: 5065:5066 unknown command 0 [ 178.068467][ T5066] binder: 5065:5066 ioctl c0306201 2000000004c0 returned -22 [ 179.427840][ T5073] udc-core: couldn't find an available UDC or it's busy [ 179.496743][ T5073] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 179.938442][ T5082] loop2: detected capacity change from 0 to 1024 [ 180.117809][ T7] usb 4-1: selecting invalid altsetting 0 [ 180.127508][ T5082] EXT4-fs (loop2): mounted filesystem without journal. Opts: nojournal_checksum,nombcache,barrier,nogrpid,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,usrquota,jqfmt=vfsold,bsdgroups,init_itable,,errors=continue. Quota mode: writeback. [ 180.142342][ T7] usb 4-1: Found UVC 7.01 device syz (8086:0b07) [ 180.178330][ T7] usb 4-1: No valid video chain found. [ 180.227620][ T7] usb 4-1: selecting invalid altsetting 0 [ 180.248377][ T1110] usbhid 1-1:0.0: can't add hid device: -71 [ 180.254428][ T1110] usbhid: probe of 1-1:0.0 failed with error -71 [ 180.278271][ T7] usbtest: probe of 4-1:220.1 failed with error -22 [ 180.287343][ T1110] usb 1-1: USB disconnect, device number 5 [ 180.322958][ T7] usb 4-1: USB disconnect, device number 6 [ 180.338499][ T4238] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 180.584459][ T5079] loop1: detected capacity change from 0 to 40427 [ 180.609843][ T5078] loop3: detected capacity change from 0 to 40427 [ 180.630246][ T5078] F2FS-fs (loop3): Corrupted extension count (64 + 1 > 64) [ 180.639234][ T5078] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 180.651392][ T5078] F2FS-fs (loop3): invalid crc value [ 180.658261][ T5079] F2FS-fs (loop1): invalid crc value [ 180.671227][ T5078] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 180.683602][ T5079] F2FS-fs (loop1): Found nat_bits in checkpoint [ 180.708901][ T13] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 180.746699][ T5095] loop4: detected capacity change from 0 to 64 [ 180.853311][ T5079] F2FS-fs (loop1): Start checkpoint disabled! [ 180.878377][ T5078] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 180.898228][ T5078] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 181.079010][ T7] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 181.238953][ T13] usb 3-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 181.278103][ T13] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.338299][ T7] usb 1-1: Using ep0 maxpacket: 16 [ 181.365681][ T13] usb 3-1: Product: syz [ 181.406196][ T13] usb 3-1: Manufacturer: syz [ 181.455089][ T13] usb 3-1: SerialNumber: syz [ 181.461492][ T7] usb 1-1: config index 0 descriptor too short (expected 16456, got 72) [ 181.491613][ T7] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 181.571826][ T13] usb 3-1: config 0 descriptor?? [ 181.607890][ T7] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 181.616506][ T5079] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 181.664354][ T7] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 181.739617][ T7] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 181.780492][ T7] usb 1-1: config 0 has no interface number 0 [ 181.786660][ T7] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 181.816736][ T7] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 181.834902][ T7] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 181.845577][ T7] usb 1-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 181.864555][ T7] usb 1-1: config 0 interface 125 has no altsetting 0 [ 181.885777][ T4818] ------------[ cut here ]------------ [ 181.894383][ T4818] kernel BUG at fs/hfs/inode.c:447! [ 181.913135][ T4818] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 181.919270][ T4818] CPU: 0 PID: 4818 Comm: kworker/u4:15 Not tainted syzkaller #0 [ 181.926926][ T4818] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 181.937032][ T4818] Workqueue: writeback wb_workfn (flush-7:4) [ 181.943066][ T4818] RIP: 0010:hfs_write_inode+0xa1a/0xa20 [ 181.948643][ T4818] Code: 8d ff e9 09 fe ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 54 fe ff ff 4c 89 f7 e8 40 a0 8d ff e9 47 fe ff ff e8 76 81 48 ff <0f> 0b 0f 1f 40 00 55 41 57 41 56 41 54 53 48 89 fb 49 bf 00 00 00 [ 181.968278][ T4818] RSP: 0018:ffffc9000332f3c0 EFLAGS: 00010293 [ 181.974385][ T4818] RAX: ffffffff8230b49a RBX: ffff888079336318 RCX: ffff888024c70000 [ 181.982479][ T4818] RDX: 0000000000000000 RSI: ffffffff8c4e3600 RDI: 0000000000000000 [ 181.990485][ T4818] RBP: ffffc9000332f550 R08: ffff888024c70000 R09: 0000000000000003 [ 181.998483][ T4818] R10: 0000000000000004 R11: 0000000000000000 R12: dffffc0000000000 [ 182.006636][ T4818] R13: 1ffff92000665e7c R14: 0000000000000000 R15: ffff8880793362d8 [ 182.014646][ T4818] FS: 0000000000000000(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 182.023614][ T4818] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 182.030236][ T4818] CR2: 0000001b32a16ff8 CR3: 0000000049230000 CR4: 00000000003506f0 [ 182.038240][ T4818] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 182.046244][ T4818] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 182.054249][ T4818] Call Trace: [ 182.057564][ T4818] [ 182.060541][ T4818] ? hfs_inode_write_fork+0x1a0/0x1a0 [ 182.065987][ T4818] ? __writeback_single_inode+0x471/0xda0 [ 182.071746][ T4818] ? __rwlock_init+0x140/0x140 [ 182.076542][ T4818] __writeback_single_inode+0x6c3/0xda0 [ 182.082116][ T4818] writeback_sb_inodes+0xa4e/0x1680 [ 182.087353][ T4818] ? queue_io+0x550/0x550 [ 182.091718][ T4818] ? rcu_is_watching+0x11/0xa0 [ 182.096511][ T4818] wb_writeback+0x45d/0xbe0 [ 182.101053][ T4818] ? rcu_lock_release+0x20/0x20 [ 182.105930][ T4818] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 182.111949][ T4818] ? mark_lock+0x94/0x320 [ 182.116314][ T4818] ? _raw_spin_unlock_irq+0x1f/0x40 [ 182.121554][ T4818] wb_workfn+0x43a/0xf20 [ 182.125839][ T4818] ? inode_wait_for_writeback+0x220/0x220 [ 182.132044][ T4818] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 182.138064][ T4818] ? read_lock_is_recursive+0x10/0x10 [ 182.143481][ T4818] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 182.149406][ T4818] ? _raw_spin_unlock+0x40/0x40 [ 182.154285][ T4818] ? _raw_spin_unlock_irq+0x1f/0x40 [ 182.159516][ T4818] process_one_work+0x85f/0x1010 [ 182.164498][ T4818] ? worker_detach_from_pool+0x240/0x240 [ 182.170159][ T4818] ? lockdep_hardirqs_off+0x70/0x100 [ 182.175476][ T4818] ? _raw_spin_lock_irq+0xb7/0xf0 [ 182.180528][ T4818] ? _raw_spin_lock_irqsave+0x100/0x100 [ 182.186106][ T4818] ? wq_worker_running+0x97/0x170 [ 182.191174][ T4818] worker_thread+0xaa6/0x1290 [ 182.195906][ T4818] ? lockdep_hardirqs_on+0x94/0x140 [ 182.201143][ T4818] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 182.207074][ T4818] kthread+0x436/0x520 [ 182.211184][ T4818] ? rcu_lock_release+0x20/0x20 [ 182.216075][ T4818] ? kthread_blkcg+0xd0/0xd0 [ 182.220705][ T4818] ret_from_fork+0x1f/0x30 [ 182.225166][ T4818] [ 182.228237][ T4818] Modules linked in: [ 182.238442][ T4818] ---[ end trace 75dfbdf63e83e953 ]--- [ 182.244480][ T4818] RIP: 0010:hfs_write_inode+0xa1a/0xa20 [ 182.250398][ T4818] Code: 8d ff e9 09 fe ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 54 fe ff ff 4c 89 f7 e8 40 a0 8d ff e9 47 fe ff ff e8 76 81 48 ff <0f> 0b 0f 1f 40 00 55 41 57 41 56 41 54 53 48 89 fb 49 bf 00 00 00 [ 182.271158][ T5103] udc-core: couldn't find an available UDC or it's busy [ 182.278138][ T5103] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 182.287962][ T4818] RSP: 0018:ffffc9000332f3c0 EFLAGS: 00010293 [ 182.294432][ T4818] RAX: ffffffff8230b49a RBX: ffff888079336318 RCX: ffff888024c70000 [ 182.304701][ T4818] RDX: 0000000000000000 RSI: ffffffff8c4e3600 RDI: 0000000000000000 [ 182.315109][ T4818] RBP: ffffc9000332f550 R08: ffff888024c70000 R09: 0000000000000003 [ 182.325666][ T4818] R10: 0000000000000004 R11: 0000000000000000 R12: dffffc0000000000 [ 182.334107][ T7] usb 1-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 182.346091][ T4818] R13: 1ffff92000665e7c R14: 0000000000000000 R15: ffff8880793362d8 [ 182.354258][ T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.370199][ T4818] FS: 0000000000000000(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 182.379372][ T7] usb 1-1: Product: syz [ 182.383573][ T7] usb 1-1: Manufacturer: syz [ 182.390321][ T4818] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 182.396948][ T4818] CR2: 000000110c30d954 CR3: 00000000623b9000 CR4: 00000000003506f0 [ 182.405092][ T7] usb 1-1: SerialNumber: syz [ 182.421304][ T7] usb 1-1: config 0 descriptor?? [ 182.426513][ T4818] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 182.436795][ T4818] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 182.446934][ T4818] Kernel panic - not syncing: Fatal exception [ 182.453323][ T4818] Kernel Offset: disabled [ 182.457672][ T4818] Rebooting in 86400 seconds..