last executing test programs: 8m4.377892596s ago: executing program 3 (id=164): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$AUDIT_USER_AVC(r4, &(0x7f00000002c0)={&(0x7f0000000080), 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x18, 0x453, 0x4, 0x70bd26, 0x25dfdbfb, "c9c0c3cf51ab", ["", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x245a4f21c8508287}, 0x14000841) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r5, &(0x7f0000000200)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000900)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x4}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xa0}, 0x1, 0x0, 0x0, 0x4000080}, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r6, &(0x7f0000000040)={0x1f, 0x5, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) write$P9_RSTATFS(0xffffffffffffffff, &(0x7f0000000180)={0x43, 0x9, 0x1, {0x6, 0xfff, 0x8000000000000000, 0x2, 0x8000, 0x5d2, 0x2, 0x71, 0x3}}, 0x43) sendmmsg$inet(r6, &(0x7f0000002b00), 0x400000000000358, 0x40844) 8m3.159292805s ago: executing program 3 (id=166): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0x7005, 0x0) syz_open_procfs(0x0, 0x0) ptrace(0x10, 0x0) ptrace$getenv(0x4201, 0x0, 0xfffffffffffffff9, &(0x7f0000000000)) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, 0x0, 0x9, &(0x7f00000006c0)=""/5) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/x86/pat_memtype_list\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="3daa00000000000071101d000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x94) 7m59.887250045s ago: executing program 3 (id=170): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f00000002c0)={0x1, 0x0, 'client1\x00', 0x0, "cfe40365a4c60b52", "0d91240e3f2a118b7b1e756c18a0fcdb9602d47c096d1eda1a797ec7a2ce6255", 0x1, 0x4}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000240), 0x40001, 0x0) write$binfmt_misc(r4, &(0x7f00000000c0), 0xff86) 7m58.620273536s ago: executing program 3 (id=174): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000884, &(0x7f0000000480)={[{@shortname_winnt}, {@iocharset={'iocharset', 0x3d, 'iso8859-7'}}, {@shortname_win95}, {@shortname_win95}, {@fat=@dmask={'dmask', 0x3d, 0x7fffffff}}, {@uni_xlateno}, {@utf8}, {@utf8}, {@shortname_lower}, {@fat=@codepage={'codepage', 0x3d, '862'}}, {@iocharset={'iocharset', 0x3d, 'cp932'}}, {@numtail}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'cp936'}}, {@shortname_win95}, {@utf8no}]}, 0x2, 0x289, &(0x7f00000001c0)="$eJzs3c1qA1UUAOAzzaRJdJEsXInQAV24Kq1P0CIVxIKgZKEutNgUpAmFFgJVMXblE7hx6/O4EV/AB1Dc2YU4ks7kTyctkbQp+n2bHs69J/fM3KHtZm4+eWVwfnpxdXbz5c/RbCaxdRAHcZtEJ7Zi4uuo9NOv1XkA4Jm7zfP4LS80itT14oz6ksp069GbAwAexfzf/033AgA8jfc/+PCdw+Pjo/eyrBkx+GbYTaL4WYwfnsVn0Y9e7EU7/ojIp4r4rbePjyLNxjrx2mA07I4rBx//UH7+4S8Rd/X70Y5Odf1+VpirHw279XihXP+gH713v492vFRd/8as/jYv66O7Ha+/Otf/brTjx0/jIvpxGsX/OpP6r/az7M3829+/+GicHdcno2G3EacLdyqvPfXeAAAAAAAAAAAAAAAAAAAAAADw37WbTXUWz9+ZHPx/z/g95wON5s7n2cuyLE+K+bP6NF5OI93ktQMAAAAAAAAAAAAAAAAAAMBzcXX9+flJv9+7XGswea2/Yij+XMw0ImLJ56QPr7WzaodRK1vrJxGrXVc9GneVD0+urXjHWuN+epdJGuvbgmSaac0P7USx1jjTKoK5zGpLfPfPjWvGXTB5us5PkmWbOwmaVQ/JGoK84vGrLa3a/numVV5BxeTWPatvv/ives7bS4aSiKhPb2Y51KqeXF/vPXy630EAAAAAAAAAAAAAAAAAAEBh9tJvxeDNBhoCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgA2Yff//CsGoLF42J6+NgzTKzIYvEQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgP+BvwIAAP//XAxp4w==") r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="60040000", @ANYRES16=r1, @ANYBLOB="010000000000000000000f00000008000300", @ANYRES32=r2, @ANYBLOB="08000c006400000008000d0002000000080026006c09000028000e0080000000ffffffffffff02000000000002000000000000000000000000006400"], 0x460}}, 0x0) 7m58.217021556s ago: executing program 3 (id=177): r0 = socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x400) syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000000)='./file2\x00', 0x0, &(0x7f0000005880)={[{@noinline_xattr}, {@user_xattr, 0x0}, {@nolazytime}, {@grpjquota={'grpjquota', 0x3d, 'rootcontext'}}, {@checkpoint_merge}, {@heap}, {@discard_unit_section}, {@fsync_mode_strict}, {@quota}, {@background_gc_off}, {@age_extent_cache}, {@heap}, {@test_dummy_encryption}, {@checkpoint_merge}], [{@func={'func', 0x3d, 'FILE_MMAP'}}, {@subj_role={'subj_role', 0x3d, '\xb2L\xed\xf8;\xf6\b\x00Y\x8e\x9d\xfcRX\xdfC\x91\xb8w\x99\xc9\x85\xd7\x85\x91\xa9\xa90`\x16;q}\x9c\x9d\xfci\x83\x9b\xaeK\xdf\xd9\xac\x8fC\x04\x97\x84\xe4\xc0+!v\ar2\x0f\xe2\xe6\xeb\xeet\xd4\x8e\xd8\x87\x8a\xe7\x1b\xcb\x1b\x06\xfb\x1c-\x86\x8f\xd6\xd4\x1e\xc5f\xdc\x90\xf8\x10\xfb\xec0uS*sg\xf8\xa4>\xdbp\vU\x8f}|\xbd\xbb\x120;@\xe0\x80\x96\x98\x18\xfe\x81j\xf1\x81U#\x8e\b\x0e,\x11\xdf\x7f\x97z\x85\xd0\x9d\xbf\xd6\x1f<4\xed\x9a>C\x90\x93\x13\x0f~*B/w\xc1/\x99\x18\xde\xa2\xbc\xf2,\v\")F&\xfd\xc0\xa2u_\xed\xb7\xd3~\x86\x90U\xcc\xf6)\x8ep\t\x7fW\xa59\x99\xe2\x1e\xcb\xfd\xf1Y\x18|\xb6O\xc8D\xfa\x8ff\xf1\a\x1d\xb62b\"\xef\x8c\xe7\xb7\xda|\xd0\r$9\xc7\x95'}}, {@euid_gt}, {@smackfsdef={'smackfsdef', 0x3d, '/YN\x16\xb1G]\xb7\xcd\xa2\xee;\x18\xabR\x80mp\xf3\x8e\xdf\xdc@\xb9\xd9j\xae\xd0\x89\xe2Q\n\xe3O\xba\xebD\xfd\xd0\xde\xb9eu\x94\x17\xc5Ej\x1b\xb3%\x9d\xedP\xc0\xd6\x17\xbe\xde+\xec\xb9\xa6@\xf6h\xdb\xbe\x7f\x84\x88\xb2s`LYk\xcb\x17m\x8b\x15\xa6\xb4\x98\x14\xa0\x92\xd2\xb2c\x00\xff\xba\xbf\xde\xe8\x8e\x8f\xdf\xca\b0%R\x1e\x11G%\xf2\xc7\xd4\f\x1a|\xd1\xd5\x996\xfd\xed\xa4\x8eh\xb7\x01\xa08%\xf7s\xaaw\xb6\x99\x00X\x05\xf0\b\x18x\x8d\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00rJ\x7f\xbe\xa1S\xbd\xe7zKdS\xf4\xdf\x19\x8f\x1f\xa28J(\xe0\xd6\xcf\xcfN\x01\x03\xd7\xf8\x01\xf7\xb4\x15V\xfdH\xa4\x03}7\x1bNC\xb1\x15\xbb\\\xbf\xb5r\vU\xdd\xca\xad\x9f\xf1\xe7M#2W%\x9aj\"_ \x03 i\xd1y\x8e\xc2\xfaJ\xfeu\xa7\xdan)\x1d\x06\x7f\xe6;\xc84\'\xde\x97t\x80\xe7\xdf\x01\x00\x00\x00\x1e\x8eV\xd9iww\xcb\x81\\\x9c\xd1\x02`\x89!J\xa3B\x00\x00\x00\x00\x00\x00\x00'}}, {@smackfshat}]}, 0xf7, 0x5548, &(0x7f0000000180)="$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") sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) setsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f0000000000)={@private1}, 0xb0) 7m56.151173016s ago: executing program 3 (id=181): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0x7005, 0x0) syz_open_procfs(0x0, 0x0) ptrace(0x10, 0x0) ptrace$getenv(0x4201, 0x0, 0xfffffffffffffff9, &(0x7f0000000000)) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, 0x0, 0x9, &(0x7f00000006c0)=""/5) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/x86/pat_memtype_list\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="3daa00000000000071101d000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x94) 7m41.128894141s ago: executing program 32 (id=181): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0x7005, 0x0) syz_open_procfs(0x0, 0x0) ptrace(0x10, 0x0) ptrace$getenv(0x4201, 0x0, 0xfffffffffffffff9, &(0x7f0000000000)) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, 0x0, 0x9, &(0x7f00000006c0)=""/5) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/x86/pat_memtype_list\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="3daa00000000000071101d000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x94) 4.916644518s ago: executing program 0 (id=1629): mmap$KVM_VCPU(&(0x7f0000ff5000/0x3000)=nil, 0x930, 0x100000f, 0x24132, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000f0f000/0x2000)=nil, 0x2000) munmap(&(0x7f00004a0000/0x2000)=nil, 0x2000) munmap(&(0x7f000075a000/0xb000)=nil, 0xb000) munmap(&(0x7f0000482000/0x2000)=nil, 0x2000) munmap(&(0x7f00004ff000/0x1000)=nil, 0x1000) munmap(&(0x7f0000e8b000/0x4000)=nil, 0x4000) munmap(&(0x7f0000ec1000/0x3000)=nil, 0x3000) munmap(&(0x7f00006b3000/0x2000)=nil, 0x2000) mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x930, 0x2, 0x8032, 0xffffffffffffffff, 0x0) openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_80211_join_ibss(0x0, &(0x7f0000000040), 0x0, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r2 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r2, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x11, 0x888e, r1, 0x1, 0x0, 0x6, @random="080211000001"}, 0x14) sendto$packet(r2, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x11, 0x888e, 0x0, 0x1, 0x0, 0x6, @random="08021100"}, 0x14) 4.863752829s ago: executing program 2 (id=1631): syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() syz_mount_image$f2fs(&(0x7f00000000c0), &(0x7f0000000040)='./file1\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x1, 0x5531, &(0x7f0000000b00)="$eJzs3EtvG1UUAODrpOmbEiEW7DpShZRItVWnSQW7AK14iFQRjwUr6tiO5db2RLHjhKxYsEQs+CcIJFYs+Q0sWLNDLEDskIo89wY1PCpQHJsk3ydNz8yd6zPnjqpEZyZyAM6s+ezXn0vhWrgUQpgNIVwNodgvpa2wGsMLIYTrIYSZJ7ZSGv9j4HwI4XII4dooecxZSqc+vzm8sfLTW798892Fc1e++Pr76a0amLYXQwjdrbi/240xb8X4MI3Xhu0idpeHKcYT3UfpOI9xt7lRZNitHcyrFfF2K87Pt3b6o7jZqdVHsdXeLMa3evGC/WHrIE/xgYe17eK40dwoYrufF7G1H+va248/2/b7g5inkfJ9VKQPg8FBjOPNvWZcz9ajItZ7gzQe8+aN5t4oDlNMlwv1vNMo6tg4yp3+f3u73dvZy4bN7X4772UrlepLleqdcnU7bzQHzeVyrdu4s5wttDqjaeVBs9ZdbeV5q9Os1PPuYrbQqtfL1Wq2cLe50a71smq1crtyq7yymPZuZq/ffz/rNLKFUXy13dsZtDv9bDPfzuInFrOlyu2XF7Mb1ezdtfVs/Z1799bW3/vw7gf3X1l787U06S9lZQtLt5aWytVb5aXq4sld/+h3/X9a/yep6DGuH46k9LSTDyZXB8AJov8HpmGi/f9cGHv/H/T/Y6H/P7Prf5wc7QZytj21/wcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4DT7Ye7LN4qd+Xh8JY0/k4aeS8elEMJMCOHx35gN5w/lnE155v5h/tyfavi2FIoMo2tcSNvlEMJq2n579rjvAgAAAJxeX318/bPYrcd/5qddEJMUH9rMXH0wpnylEMLc/I9jyBLSw6bw/NGrikb/v8+FvTFlKx5gXRxTsvjI7dy4sv0rs4fCxSdCKYaZg5nnJ1oXAABwnA53ApPtQgAAAJikT6ddANNRvGlNf4ufXvNdiCG9ELx06AgAAAA4gUrTLgAAAAA4dkX/7/v/AAAA4HSL3/8HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAL+zcze5aQNRAICfDS609AdV3fcq3cExeoQuu4y4CkcgV8gFOAPZZZtdBBH2JAoRhBAbE6Lvk+xhbOvxjPDijUcDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABzTdTEbX1787teNs1zV08zdAAAAANssitm4/DCs+oN0/Fs69DP1s4jII2Jb7d6JTxsxOylOseP64lkOVxFlhPV39NL2JSL+pO3ux7F/BQAAAPi45pPpqKrWq93w1AnRpmrQJv/6t6F4WUQUw5uGouXr3a9XXbraPz60/n934/+Os9lhqZUDW1F7ysyDcsit21S0/TrpcX9s+k+arGry9tIBAADaslkJtFiFAAAA0LJ/p06A0yjfeqa5+GkCf69q0gvBzxs9AAAA4AwdOusZAAAAeI8GL54t6/8zWP/v+631/wAAAODNqvX/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOKZFMRvPJ9NR3TjLVT3N3A0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAPfvzjsIwDAZhcJMor07oAr7/Lc2C3bp1MwOCj38rAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABceRwvzzNejZlso9eZ5N3zSvLp1Ph2avw6N/5Jxrr7NwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA7+/OSAiEQBFEwZ/zvpO9/WEnQM4gQAQ2PKmrRAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAF/3ul/8TU+NMMnfaWDoeSdauGltXjb0HjaMH4+3fAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXO/fvGzcVBwD8e+fzlRYQIaAMQYhKDLDQ9FpaujKAIgb+BKQovZbAlR9tBlpVoCxsKHMXBCNCSKCw9X/o3EpdytbhhiIxMYDss5PXo4iDKvaRfD7S8/vacvy+z4mifP2cAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKA2fnMvzorNwiTuVsduP7i+XvR3pvrCze27y0Ur4s7fXP+L/Up8/r2Y7nSW2ksEAACAwyOr6/uIfuQ7q0XQXSjr/7w+p6j5v3l6Etf1/HTdX/d17V+0n3+6//zuQAuTcYqLXtgYDU/+NZVeto/znGfP/OMZvfLOl89esvIb0n1n67lxXt7Pzle3br3VL8MjTWQLAPwXJ+q+Cuq/h4p+0GZiABwavaoV7lX1f7bQbk4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAATehvxZN13ImI5d5eXLjz4Pp62U/t39y+u1y3szdubKfXLC6RR8SFjdHwZFMT+R+4cvXah2uj0fBy88FLEdHe6FXw3gznRLSZoeBxg271sz7bVx2PiPZzbj9o+RcTAAAHTl61oq6/l++sFsc6ixF/fPtw/f9KEkda/0/1af1///2zt9Ox0vp/0NgM59/K5qVPVq5cvfbaxqW1i8OLw49ePzV4Y3D63Jkz51bKZyUrnpgAAADwePpVS+v/7mLEeGr9/1gSx4z1/6dfDz5Px8rU/4+0t+jXdiYAAACH27PHf/u184jjnX4/Plvb3Lw8mGx3909Nti2k+q8dqVpa/2eLbWcFAAAANGG81Xlo/f98EseM6/9PfffCD+k1s4g4Wq3/n1j/eHS+uem05PeZzmri34n3faoAAADMtaNVS9f/8/L9/+7uKw/diHj15UlcfQzgTPV/9vaX36djpe//n25uinOpuzS5H2W/FNFbajsjAAAADrInqlYU+7/kO6sf/Hjs3b73/wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACa9mcAAAD//6vIRLE=") sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) inotify_init1(0x0) r3 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x3, 0x0, 0x8000000200007, 0x282b, 0x20103, 0x80001, {0x200007, 0x10005c63, 0x203, 0x1000000000, 0x83, 0x4, 0x10000006, 0x6, 0x0, 0x0, 0x0, 0xee00, 0x0, 0x8, 0x1}}, {0x0, 0xa}}}, 0xa0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20000050) sendfile(r3, r3, &(0x7f0000000100)=0x4, 0x8112) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x585d}, [@IFLA_AF_SPEC={0x8, 0x1a, 0x0, 0x1, [@AF_INET6={0x4}]}, @IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x1}, @IFLA_IPVLAN_MODE={0x6}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x840}, 0x0) socket$igmp6(0xa, 0x3, 0x2) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, &(0x7f0000002b80)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}, 0x1, &(0x7f0000002a80)=[{0x3, 0x0, 0x0, 0x0, 0x0, 0xde563ffa027530ab}]}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8014}, 0xc0c0) syz_emit_ethernet(0x4f, &(0x7f0000000a80)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd6c370c890019"], 0x0) setgroups(0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@union={0x0, 0x0, 0x0, 0x5, 0x0, 0x1800}]}}, 0x0, 0x26, 0x0, 0x2, 0x20000000}, 0x28) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x18}}, 0x20004000) 3.702958798s ago: executing program 1 (id=1634): openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nullb/nullb1/zoned\x00', 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x1, 0x7ffffffd, 0x1, 0xfa11, 0xffffffff}, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000000)=0x10000) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000100)={0x6, @loopback, 0x15, 0x0, 'rr\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000200)={{0x6, @loopback, 0x15, 0x0, 'rr\x00'}, {@loopback, 0x15, 0x0, 0x1}}, 0x44) setsockopt(r2, 0x0, 0x483, &(0x7f0000000300), 0x0) 3.654839309s ago: executing program 0 (id=1635): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_STATION(r0, 0x0, 0x0) 3.137417672s ago: executing program 4 (id=1636): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f0000000040)=0x10000001, 0x4) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1, 0xe0, 0x0, 0x0) 3.109333612s ago: executing program 2 (id=1637): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x40) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000500)={0x0}) 3.046986854s ago: executing program 1 (id=1638): symlinkat(&(0x7f0000000180)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000140)={[{@dioread_nolock}]}, 0x1, 0x5cb, &(0x7f0000000940)="$eJzs3T1sG20dAPD/ne0mfd++NEggPvQOFSAV6dXrfLSFwkK7IipV6oDEROQ4URQnrvJRmihSk71CdECAupQNBkYQAwNiYWRlgTIxIFU0AqnpUIzOPrsmcVonJDbUv5908fPcc+f//3x+ntyd7uQARtal7E8a8bmIuJ1EXOxqK0beeKm13P7eduXl3nYliUbjzt+TSCLixd52pb18kr++HxE7EfHZiPhdKeKjtPOW59qFtc2tpdlarbqa1yfXl+9Orm1ufby4PLtQXaiuXPnq165dv3ptema6O92Xje5a6Xjb+vDPj77/8A/ffPLo57/4cKfyw9nPPP3rvXZb93acptZnUoobB+ZfPYtgQ5QMOwFOpJD386wrfTouRiHv9ZlvHFi20T04jA0sReCMNMYiGh1dRWAkPDjxmu1BBPh/1D4OyM5/29Mgjz+e3WydgGRx9/e2Kw+iHb/YujYR481zk/f+kXSdmbTONycGmSjvpJ3diJgqFg9//5P8+3dyU29f5JhXsDhtv73Z2lGH93/aGX+ix/hzoX3t9L/UHv/28/Fvv0f8whHj3+0+Y7z6zl9+cmT83bH4fM/4SSd+0iN+GhHf7TP+42//+vpRbY2fRlyO3vHbkjdfH56cX6xVpybnF19Ve/e431z+8OutUvFQ2/ls246I37pmO95MpHv7z+U5pX1u/69+/8sv7BzR9mw34stffPP+7/X5Z3n/oM/4n3zxs28d1fZsN3meHQUcd/8nUYonfcb/yo1Lf8qLrhoCAAAAAAAAAMApSpv3siVpuVNO03K59Qzvp+K9tFZfW/9ovr6xMte6520iSmnzfqtoPSs8EaUkq0/n9+O26zOtx4M79SuFPGDhfLNertRrc8PddAAAAAAAAAAAAAAAAAAAAPif8f6B5///WWg+/38jYuaDYecGDMDhn0UCRoX+D6PrP/t/MrQ8gMHz/x9GVkP/h9Gl/8Po0v9hdBV7lIDR0LPXnx98HsDgHer/48PJAxg8R/0AAAAAAAAAAAAAAAAAAAAAAAAAAHAmbt+6lU2Nl3vblaw+V9zcWKrf+3iuurZUXt6olCv11bvlhXp9oVYtV+rLb3u/pF6/OxUrG/cn16ulfF59Y6X9m6KdeQAAAAAAAAAAAAAAAAAAAMBrF5pTkpYjSq16mpbLER9ExEQSyfxirToVEZ+IiD8WSmNZfXrYSQMAAAAAAAAAAAAAAAAAAMA7Zm1za2m2Vquunl2hmIfqb62n62eaT/E4C0fEzummkb3jsdcq5R9gc874me+vd7tQ6PN7OPKFIQ5KAAAAAAAAAAAAAAAAAAAwol4/9NvvGv8624QAAAAAAAAAAAAAAAAAAABgJKV/SyIimy5f/NKFg63nkv1C8zUivvf4zo/uz66vr05n85935q//OJ8/M4z8gX61+2kaEVk/BgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF5b29xamq3VqqtvK4zlKxxoGutj9SFvIgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMCJ/DsAAP//0TzDxw==") r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000180)={0x20, 0xff, 0x89, 0x2, 0xfd, 0x0, 0x7, 0x0, 0x0, 0x0, 0xff, 0x3, 0x0, 0x93}, 0xe) prlimit64(0x0, 0xe, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) sendto$inet6(r0, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) shutdown(r0, 0x1) 3.046618964s ago: executing program 4 (id=1639): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x300001a, &(0x7f00000010c0)=ANY=[], 0xfc, 0x2c7, &(0x7f0000000100)="$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") sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0xe, 0x492f, 0x7f, 0x1, 0x1}, 0x50) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000003700)={&(0x7f0000000440)={0x44, r4, 0x1, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME={0x24, 0x33, @probe_request={{{0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x1c00}, @broadcast, @device_a, @initial, {0x6, 0x1}}, @val={0x0, 0x6, @default_ap_ssid}, @void, @void, @void, @void}}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x44}}, 0x28008004) 3.018127965s ago: executing program 0 (id=1640): write(0xffffffffffffffff, &(0x7f0000000140), 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x10) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800000, 0x0) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) r0 = syz_io_uring_setup(0x134b8, &(0x7f0000000740)={0x0, 0x2730, 0x20000, 0x10000802, 0x86}, &(0x7f0000000180)=0x0, &(0x7f00000004c0)=0x0, &(0x7f0000000240)=0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x34000, 0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000040)=@IORING_OP_CLOSE={0x13, 0x48, 0x0, r0}) r4 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r4, 0xe0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x39, &(0x7f0000000340), &(0x7f00000003c0), 0x0, 0xd1, &(0x7f0000000400)=[{}, {}], 0x10, 0x10, &(0x7f0000000440), &(0x7f0000000480), 0x1, 0x800ed, 0x8, 0x8, &(0x7f0000000500)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, r4}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x121302, 0x0) write$binfmt_register(r7, &(0x7f0000000040)={0x3a, 'syz2', 0x3a, 'E', 0x3a, 0x0, 0x3a, 'tracefs\x00', 0x3a, '*:@{\':', 0x3a, './trace'}, 0x35) 2.885490208s ago: executing program 2 (id=1641): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000100)={0x20, r3, 0x1, 0x1, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x10040014}, 0x0) 2.666627374s ago: executing program 1 (id=1642): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$AUDIT_USER_AVC(r4, &(0x7f00000002c0)={&(0x7f0000000080), 0xc, 0x0, 0x1, 0x0, 0x0, 0x245a4f21c8508287}, 0x14000841) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r5, &(0x7f0000000200)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000900)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x4}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xa0}, 0x1, 0x0, 0x0, 0x4000080}, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r6, &(0x7f0000000040)={0x1f, 0x5, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) write$P9_RSTATFS(0xffffffffffffffff, &(0x7f0000000180)={0x43, 0x9, 0x1, {0x6, 0xfff, 0x8000000000000000, 0x2, 0x8000, 0x5d2, 0x2, 0x71, 0x3}}, 0x43) sendmmsg$inet(r6, &(0x7f0000002b00), 0x400000000000358, 0x40844) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0xff, 0xfe, 0x7fff0006}]}) openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r6, 0xc00c642d, &(0x7f0000000300)={0x0, 0x80000}) 1.756310756s ago: executing program 4 (id=1643): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000240)='./dev\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev/sda\x00', 0x101042, 0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 1.683557578s ago: executing program 4 (id=1644): mmap$KVM_VCPU(&(0x7f0000ff5000/0x3000)=nil, 0x930, 0x100000f, 0x24132, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000f0f000/0x2000)=nil, 0x2000) munmap(&(0x7f00004a0000/0x2000)=nil, 0x2000) munmap(&(0x7f000075a000/0xb000)=nil, 0xb000) munmap(&(0x7f0000482000/0x2000)=nil, 0x2000) munmap(&(0x7f00004ff000/0x1000)=nil, 0x1000) munmap(&(0x7f0000e8b000/0x4000)=nil, 0x4000) munmap(&(0x7f0000ec1000/0x3000)=nil, 0x3000) munmap(&(0x7f00006b3000/0x2000)=nil, 0x2000) mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x930, 0x2, 0x8032, 0xffffffffffffffff, 0x0) openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_80211_join_ibss(0x0, &(0x7f0000000040), 0x0, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r2 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r2, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x11, 0x888e, r1, 0x1, 0x0, 0x6, @random="080211000001"}, 0x14) sendto$packet(r2, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x11, 0x888e, 0x0, 0x1, 0x0, 0x6, @random="08021100"}, 0x14) 1.682453938s ago: executing program 2 (id=1652): write(0xffffffffffffffff, &(0x7f0000000140), 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x10) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800000, 0x0) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) r0 = syz_io_uring_setup(0x134b8, &(0x7f0000000740)={0x0, 0x2730, 0x20000, 0x10000802, 0x86}, &(0x7f0000000180)=0x0, &(0x7f00000004c0)=0x0, &(0x7f0000000240)=0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x34000, 0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000040)=@IORING_OP_CLOSE={0x13, 0x48, 0x0, r0}) r4 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r4, 0xe0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x39, &(0x7f0000000340), &(0x7f00000003c0), 0x0, 0xd1, &(0x7f0000000400)=[{}, {}], 0x10, 0x10, &(0x7f0000000440), &(0x7f0000000480), 0x1, 0x800ed, 0x8, 0x8, &(0x7f0000000500)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, r4}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x121302, 0x0) write$binfmt_register(r7, &(0x7f0000000040)={0x3a, 'syz2', 0x3a, 'E', 0x3a, 0x0, 0x3a, 'tracefs\x00', 0x3a, '*:@{\':', 0x3a, './trace'}, 0x35) 1.681859558s ago: executing program 0 (id=1645): syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() syz_mount_image$f2fs(&(0x7f00000000c0), &(0x7f0000000040)='./file1\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x1, 0x5531, &(0x7f0000000b00)="$eJzs3EtvG1UUAODrpOmbEiEW7DpShZRItVWnSQW7AK14iFQRjwUr6tiO5db2RLHjhKxYsEQs+CcIJFYs+Q0sWLNDLEDskIo89wY1PCpQHJsk3ydNz8yd6zPnjqpEZyZyAM6s+ezXn0vhWrgUQpgNIVwNodgvpa2wGsMLIYTrIYSZJ7ZSGv9j4HwI4XII4dooecxZSqc+vzm8sfLTW798892Fc1e++Pr76a0amLYXQwjdrbi/240xb8X4MI3Xhu0idpeHKcYT3UfpOI9xt7lRZNitHcyrFfF2K87Pt3b6o7jZqdVHsdXeLMa3evGC/WHrIE/xgYe17eK40dwoYrufF7G1H+va248/2/b7g5inkfJ9VKQPg8FBjOPNvWZcz9ajItZ7gzQe8+aN5t4oDlNMlwv1vNMo6tg4yp3+f3u73dvZy4bN7X4772UrlepLleqdcnU7bzQHzeVyrdu4s5wttDqjaeVBs9ZdbeV5q9Os1PPuYrbQqtfL1Wq2cLe50a71smq1crtyq7yymPZuZq/ffz/rNLKFUXy13dsZtDv9bDPfzuInFrOlyu2XF7Mb1ezdtfVs/Z1799bW3/vw7gf3X1l787U06S9lZQtLt5aWytVb5aXq4sld/+h3/X9a/yep6DGuH46k9LSTDyZXB8AJov8HpmGi/f9cGHv/H/T/Y6H/P7Prf5wc7QZytj21/wcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4DT7Ye7LN4qd+Xh8JY0/k4aeS8elEMJMCOHx35gN5w/lnE155v5h/tyfavi2FIoMo2tcSNvlEMJq2n579rjvAgAAAJxeX318/bPYrcd/5qddEJMUH9rMXH0wpnylEMLc/I9jyBLSw6bw/NGrikb/v8+FvTFlKx5gXRxTsvjI7dy4sv0rs4fCxSdCKYaZg5nnJ1oXAABwnA53ApPtQgAAAJikT6ddANNRvGlNf4ufXvNdiCG9ELx06AgAAAA4gUrTLgAAAAA4dkX/7/v/AAAA4HSL3/8HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAL+zcze5aQNRAICfDS609AdV3fcq3cExeoQuu4y4CkcgV8gFOAPZZZtdBBH2JAoRhBAbE6Lvk+xhbOvxjPDijUcDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABzTdTEbX1787teNs1zV08zdAAAAANssitm4/DCs+oN0/Fs69DP1s4jII2Jb7d6JTxsxOylOseP64lkOVxFlhPV39NL2JSL+pO3ux7F/BQAAAPi45pPpqKrWq93w1AnRpmrQJv/6t6F4WUQUw5uGouXr3a9XXbraPz60/n934/+Os9lhqZUDW1F7ysyDcsit21S0/TrpcX9s+k+arGry9tIBAADaslkJtFiFAAAA0LJ/p06A0yjfeqa5+GkCf69q0gvBzxs9AAAA4AwdOusZAAAAeI8GL54t6/8zWP/v+631/wAAAODNqvX/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOKZFMRvPJ9NR3TjLVT3N3A0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAPfvzjsIwDAZhcJMor07oAr7/Lc2C3bp1MwOCj38rAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABceRwvzzNejZlso9eZ5N3zSvLp1Ph2avw6N/5Jxrr7NwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA7+/OSAiEQBFEwZ/zvpO9/WEnQM4gQAQ2PKmrRAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAF/3ul/8TU+NMMnfaWDoeSdauGltXjb0HjaMH4+3fAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXO/fvGzcVBwD8e+fzlRYQIaAMQYhKDLDQ9FpaujKAIgb+BKQovZbAlR9tBlpVoCxsKHMXBCNCSKCw9X/o3EpdytbhhiIxMYDss5PXo4iDKvaRfD7S8/vacvy+z4mifP2cAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKA2fnMvzorNwiTuVsduP7i+XvR3pvrCze27y0Ur4s7fXP+L/Up8/r2Y7nSW2ksEAACAwyOr6/uIfuQ7q0XQXSjr/7w+p6j5v3l6Etf1/HTdX/d17V+0n3+6//zuQAuTcYqLXtgYDU/+NZVeto/znGfP/OMZvfLOl89esvIb0n1n67lxXt7Pzle3br3VL8MjTWQLAPwXJ+q+Cuq/h4p+0GZiABwavaoV7lX1f7bQbk4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAATehvxZN13ImI5d5eXLjz4Pp62U/t39y+u1y3szdubKfXLC6RR8SFjdHwZFMT+R+4cvXah2uj0fBy88FLEdHe6FXw3gznRLSZoeBxg271sz7bVx2PiPZzbj9o+RcTAAAHTl61oq6/l++sFsc6ixF/fPtw/f9KEkda/0/1af1///2zt9Ox0vp/0NgM59/K5qVPVq5cvfbaxqW1i8OLw49ePzV4Y3D63Jkz51bKZyUrnpgAAADwePpVS+v/7mLEeGr9/1gSx4z1/6dfDz5Px8rU/4+0t+jXdiYAAACH27PHf/u184jjnX4/Plvb3Lw8mGx3909Nti2k+q8dqVpa/2eLbWcFAAAANGG81Xlo/f98EseM6/9PfffCD+k1s4g4Wq3/n1j/eHS+uem05PeZzmri34n3faoAAADMtaNVS9f/8/L9/+7uKw/diHj15UlcfQzgTPV/9vaX36djpe//n25uinOpuzS5H2W/FNFbajsjAAAADrInqlYU+7/kO6sf/Hjs3b73/wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACa9mcAAAD//6vIRLE=") sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) inotify_init1(0x0) r3 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x3, 0x0, 0x8000000200007, 0x282b, 0x20103, 0x80001, {0x200007, 0x10005c63, 0x203, 0x1000000000, 0x83, 0x4, 0x10000006, 0x6, 0x0, 0x0, 0x0, 0xee00, 0x0, 0x8, 0x1}}, {0x0, 0xa}}}, 0xa0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20000050) sendfile(r3, r3, &(0x7f0000000100)=0x4, 0x8112) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x585d}, [@IFLA_AF_SPEC={0x8, 0x1a, 0x0, 0x1, [@AF_INET6={0x4}]}, @IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x1}, @IFLA_IPVLAN_MODE={0x6}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x840}, 0x0) socket$igmp6(0xa, 0x3, 0x2) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8014}, 0xc0c0) syz_emit_ethernet(0x4f, &(0x7f0000000a80)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd6c370c890019"], 0x0) setgroups(0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@union={0x0, 0x0, 0x0, 0x5, 0x0, 0x1800}]}}, 0x0, 0x26, 0x0, 0x2, 0x20000000}, 0x28) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x18}}, 0x20004000) 1.502228442s ago: executing program 1 (id=1646): openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nullb/nullb1/zoned\x00', 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x1, 0x7ffffffd, 0x1, 0xfa11, 0xffffffff}, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000000)=0x10000) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000100)={0x6, @loopback, 0x15, 0x0, 'rr\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000200)={{0x6, @loopback, 0x15, 0x0, 'rr\x00'}, {@loopback, 0x15, 0x0, 0x1}}, 0x44) setsockopt(r2, 0x0, 0x483, &(0x7f0000000300), 0x0) 488.963268ms ago: executing program 0 (id=1647): mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000500)='./proc\x00', &(0x7f0000000140)='proc\x00', 0x10, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./proc/sys/net/ipv6/conf/syz_tun/addr_gen_mode\x00', 0x3, 0x14) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r1, {}, {0x5}, {0xfff3}}}, 0x24}}, 0x0) 488.853668ms ago: executing program 4 (id=1648): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f0000000040)=0x10000001, 0x4) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1, 0xe0, 0x0, 0x0) 488.670237ms ago: executing program 1 (id=1649): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_STATION(r0, 0x0, 0x0) 413.954879ms ago: executing program 2 (id=1650): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) 335.335291ms ago: executing program 4 (id=1651): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x300001a, &(0x7f00000010c0)=ANY=[], 0xfc, 0x2c7, &(0x7f0000000100)="$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") sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0xe, 0x492f, 0x7f, 0x1, 0x1}, 0x50) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000003700)={&(0x7f0000000440)={0x44, r4, 0x1, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME={0x24, 0x33, @probe_request={{{0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x1c00}, @broadcast, @device_a, @initial, {0x6, 0x1}}, @val={0x0, 0x6, @default_ap_ssid}, @void, @void, @void, @void}}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x44}}, 0x28008004) 176.343145ms ago: executing program 2 (id=1653): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r3 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000100)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000200)={'wlan0\x00', 0x1}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x1}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x1}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x6, 0x13, [{0xc}, {0x12}]}]}, 0x40}}, 0x0) 57.149218ms ago: executing program 0 (id=1654): openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r1, &(0x7f0000000000), 0x10) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f00000000c0), 0xf00) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) bind$can_raw(r1, &(0x7f0000000080)={0x1d, r2}, 0x10) 0s ago: executing program 1 (id=1655): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$AUDIT_USER_AVC(r4, &(0x7f00000002c0)={&(0x7f0000000080), 0xc, 0x0, 0x1, 0x0, 0x0, 0x245a4f21c8508287}, 0x14000841) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r5, &(0x7f0000000200)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000900)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x4}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xa0}, 0x1, 0x0, 0x0, 0x4000080}, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r6, &(0x7f0000000040)={0x1f, 0x5, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) write$P9_RSTATFS(0xffffffffffffffff, &(0x7f0000000180)={0x43, 0x9, 0x1, {0x6, 0xfff, 0x8000000000000000, 0x2, 0x8000, 0x5d2, 0x2, 0x71, 0x3}}, 0x43) sendmmsg$inet(r6, &(0x7f0000002b00), 0x400000000000358, 0x40844) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0xff, 0xfe, 0x7fff0006}]}) openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r6, 0xc00c642d, &(0x7f0000000300)={0x0, 0x80000}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.66' (ED25519) to the list of known hosts. [ 79.538939][ T5760] cgroup: Unknown subsys name 'net' [ 79.673540][ T5760] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 81.388672][ T5760] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 83.214511][ T5783] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 83.222708][ T5783] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 83.231871][ T5783] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 83.239991][ T5783] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 83.247061][ T5782] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 83.250331][ T5783] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 83.262010][ T5783] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 83.274642][ T5788] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 83.294307][ T5788] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 83.306238][ T5786] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 83.310474][ T5787] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 83.315662][ T5788] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 83.328192][ T5786] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 83.336827][ T5788] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 83.346001][ T5786] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 83.353699][ T5788] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 83.361367][ T5786] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 83.369709][ T5787] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 83.394295][ T5787] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 83.401479][ T5787] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 83.409723][ T5786] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 83.417624][ T5786] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 83.440518][ T51] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 83.448029][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 83.941191][ T5772] chnl_net:caif_netlink_parms(): no params data found [ 83.996979][ T5773] chnl_net:caif_netlink_parms(): no params data found [ 84.041370][ T5774] chnl_net:caif_netlink_parms(): no params data found [ 84.187859][ T5771] chnl_net:caif_netlink_parms(): no params data found [ 84.200172][ T5772] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.208293][ T5772] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.216029][ T5772] bridge_slave_0: entered allmulticast mode [ 84.223511][ T5772] bridge_slave_0: entered promiscuous mode [ 84.274742][ T5772] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.281938][ T5772] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.289472][ T5772] bridge_slave_1: entered allmulticast mode [ 84.297036][ T5772] bridge_slave_1: entered promiscuous mode [ 84.340883][ T5774] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.348194][ T5774] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.355846][ T5774] bridge_slave_0: entered allmulticast mode [ 84.363338][ T5774] bridge_slave_0: entered promiscuous mode [ 84.371726][ T5773] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.379105][ T5773] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.386924][ T5773] bridge_slave_0: entered allmulticast mode [ 84.394717][ T5773] bridge_slave_0: entered promiscuous mode [ 84.423562][ T5774] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.430872][ T5774] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.438427][ T5774] bridge_slave_1: entered allmulticast mode [ 84.446105][ T5774] bridge_slave_1: entered promiscuous mode [ 84.453136][ T5773] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.460756][ T5773] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.468202][ T5773] bridge_slave_1: entered allmulticast mode [ 84.475859][ T5773] bridge_slave_1: entered promiscuous mode [ 84.543705][ T5772] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.562449][ T5774] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.587429][ T5772] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.620964][ T5774] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.643436][ T5773] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.657550][ T5773] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.699796][ T5771] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.707292][ T5771] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.714999][ T5771] bridge_slave_0: entered allmulticast mode [ 84.722020][ T5771] bridge_slave_0: entered promiscuous mode [ 84.743527][ T5772] team0: Port device team_slave_0 added [ 84.753027][ T5772] team0: Port device team_slave_1 added [ 84.762416][ T5774] team0: Port device team_slave_0 added [ 84.771678][ T5774] team0: Port device team_slave_1 added [ 84.778111][ T5771] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.785800][ T5771] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.793063][ T5771] bridge_slave_1: entered allmulticast mode [ 84.800357][ T5771] bridge_slave_1: entered promiscuous mode [ 84.833050][ T5773] team0: Port device team_slave_0 added [ 84.889314][ T5773] team0: Port device team_slave_1 added [ 84.907590][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.914670][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.940691][ T5774] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.955857][ T5771] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.968492][ T5771] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.978721][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.985870][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.012131][ T5772] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.044735][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.051773][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.079142][ T5774] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.102537][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.109753][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.136381][ T5772] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.168634][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.175893][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.202722][ T5773] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.231977][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.239123][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.265237][ T5773] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.293199][ T5771] team0: Port device team_slave_0 added [ 85.303377][ T5771] team0: Port device team_slave_1 added [ 85.374995][ T51] Bluetooth: hci1: command tx timeout [ 85.395658][ T5772] hsr_slave_0: entered promiscuous mode [ 85.402210][ T5772] hsr_slave_1: entered promiscuous mode [ 85.428839][ T5774] hsr_slave_0: entered promiscuous mode [ 85.435932][ T5774] hsr_slave_1: entered promiscuous mode [ 85.442184][ T5774] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 85.451125][ T5774] Cannot create hsr debugfs directory [ 85.463805][ T5773] hsr_slave_0: entered promiscuous mode [ 85.470938][ T5773] hsr_slave_1: entered promiscuous mode [ 85.478424][ T5773] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 85.486324][ T5773] Cannot create hsr debugfs directory [ 85.495308][ T5771] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.502352][ T5771] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.531044][ T5771] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.548708][ T51] Bluetooth: hci0: command tx timeout [ 85.554292][ T5787] Bluetooth: hci3: command tx timeout [ 85.554763][ T5787] Bluetooth: hci2: command tx timeout [ 85.600347][ T5771] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.607526][ T5771] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.634027][ T5771] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.813037][ T5771] hsr_slave_0: entered promiscuous mode [ 85.820241][ T5771] hsr_slave_1: entered promiscuous mode [ 85.827293][ T5771] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 85.835240][ T5771] Cannot create hsr debugfs directory [ 86.141101][ T5774] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 86.172380][ T5774] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 86.186180][ T5774] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 86.200424][ T5774] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 86.260246][ T5772] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 86.285773][ T5772] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 86.304156][ T5772] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 86.316366][ T5772] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 86.419168][ T5773] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 86.442556][ T5773] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 86.457336][ T5773] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 86.467915][ T5773] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 86.549503][ T5774] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.592885][ T5771] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 86.618705][ T5771] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 86.633455][ T5771] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 86.648262][ T5771] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 86.663546][ T5774] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.708943][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.716340][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.763829][ T5772] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.793830][ T1093] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.801075][ T1093] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.849819][ T5772] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.893595][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.900852][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.942535][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.949734][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.028781][ T5773] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.150386][ T5773] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.190213][ T77] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.197510][ T77] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.267320][ T5771] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.289980][ T77] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.297233][ T77] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.412390][ T5771] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.454662][ T5787] Bluetooth: hci1: command tx timeout [ 87.488900][ T70] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.496135][ T70] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.573037][ T34] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.580327][ T34] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.616653][ T5786] Bluetooth: hci0: command tx timeout [ 87.616665][ T51] Bluetooth: hci3: command tx timeout [ 87.629073][ T5787] Bluetooth: hci2: command tx timeout [ 87.831650][ T5771] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 87.892785][ T5772] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.922806][ T5774] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.123797][ T5772] veth0_vlan: entered promiscuous mode [ 88.162891][ T5774] veth0_vlan: entered promiscuous mode [ 88.181592][ T5772] veth1_vlan: entered promiscuous mode [ 88.203512][ T5774] veth1_vlan: entered promiscuous mode [ 88.253282][ T5774] veth0_macvtap: entered promiscuous mode [ 88.308546][ T5774] veth1_macvtap: entered promiscuous mode [ 88.318294][ T5772] veth0_macvtap: entered promiscuous mode [ 88.331963][ T5773] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.351161][ T5772] veth1_macvtap: entered promiscuous mode [ 88.377594][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.413185][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.425027][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.437269][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.449827][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.478450][ T5774] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.488607][ T5774] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.498457][ T5774] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.507634][ T5774] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.532112][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.542893][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.555168][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.595688][ T5773] veth0_vlan: entered promiscuous mode [ 88.609805][ T5772] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.619106][ T5772] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.628287][ T5772] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.637426][ T5772] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.689490][ T5771] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.720283][ T5773] veth1_vlan: entered promiscuous mode [ 88.766051][ T1097] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.788668][ T1097] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.916521][ T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.926535][ T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.949413][ T5773] veth0_macvtap: entered promiscuous mode [ 88.961408][ T5771] veth0_vlan: entered promiscuous mode [ 88.974374][ T34] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.982264][ T34] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.997979][ T5773] veth1_macvtap: entered promiscuous mode [ 89.068394][ T5771] veth1_vlan: entered promiscuous mode [ 89.113307][ T77] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.122228][ T77] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.172918][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.191953][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.203081][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.215176][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.253165][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.291921][ T5771] veth0_macvtap: entered promiscuous mode [ 89.317787][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.331694][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.347954][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.363105][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.388800][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.412988][ T5771] veth1_macvtap: entered promiscuous mode [ 89.450272][ T5773] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.465986][ T5773] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.477916][ T5773] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.487066][ T5773] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.535697][ T5787] Bluetooth: hci1: command tx timeout [ 89.570349][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.592836][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.644421][ T5846] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 89.695572][ T5787] Bluetooth: hci3: command tx timeout [ 89.701774][ T5786] Bluetooth: hci2: command tx timeout [ 89.707895][ T5787] Bluetooth: hci0: command tx timeout [ 89.720493][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.751628][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.768555][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.783235][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.825197][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.924530][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.986426][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.011819][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.030903][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.042781][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.062565][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.080578][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.227265][ T5771] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.256344][ T5771] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.287698][ T5771] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.312783][ T5771] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.385519][ T34] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.454948][ T34] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.583950][ C1] sched: RT throttling activated [ 90.614565][ T1093] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.648557][ T5856] syz.2.8[5856]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 90.678258][ T1093] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.728756][ T5856] loop2: detected capacity change from 0 to 256 [ 90.833375][ T5856] FAT-fs (loop2): Unrecognized mount option "utf8=" or missing value [ 90.905905][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.965240][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.179213][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.267989][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.621772][ T51] Bluetooth: hci1: command tx timeout [ 91.784000][ T51] Bluetooth: hci0: command tx timeout [ 91.789501][ T51] Bluetooth: hci2: command tx timeout [ 91.795677][ T5787] Bluetooth: hci3: command tx timeout [ 92.203023][ T5870] loop3: detected capacity change from 0 to 4096 [ 92.254909][ T8] cfg80211: failed to load regulatory.db [ 94.009932][ T5860] loop0: detected capacity change from 0 to 32768 [ 94.111326][ T5860] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 94.160258][ T5860] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 94.219766][ T5860] gfs2: fsid=syz:syz.0: journal 0 mapped with 3 extents in 0ms [ 94.290898][ T5817] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 94.304509][ T5836] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 94.326564][ T5817] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 94.395526][ T5817] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 68ms [ 94.415579][ T5817] gfs2: fsid=syz:syz.0: jid=0: Done [ 94.421482][ T5860] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 94.460021][ T5860] gfs2: fsid=syz:syz.0: can't create logd thread: -4 [ 94.504700][ T5836] usb 4-1: Using ep0 maxpacket: 16 [ 94.521328][ T5836] usb 4-1: config 1 has an invalid interface number: 193 but max is 0 [ 94.534249][ T5836] usb 4-1: config 1 has no interface number 0 [ 94.540443][ T5836] usb 4-1: config 1 interface 193 has no altsetting 0 [ 94.572770][ T5836] usb 4-1: New USB device found, idVendor=0a5c, idProduct=2033, bcdDevice= 3.b3 [ 94.598740][ T5836] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.617359][ T5836] usb 4-1: Product: syz [ 94.621613][ T5836] usb 4-1: Manufacturer: syz [ 94.666482][ T5836] usb 4-1: SerialNumber: syz [ 94.940602][ T5886] loop2: detected capacity change from 0 to 256 [ 94.977030][ T5886] FAT-fs (loop2): Unrecognized mount option "utf8=" or missing value [ 95.074805][ T5836] usb 4-1: USB disconnect, device number 2 [ 96.048448][ T5906] loop2: detected capacity change from 0 to 4096 [ 97.291923][ T5914] loop2: detected capacity change from 0 to 256 [ 97.352385][ T5914] FAT-fs (loop2): Unrecognized mount option "utf8=" or missing value [ 97.438794][ T5914] netlink: 1092 bytes leftover after parsing attributes in process `syz.2.25'. [ 97.816943][ T5918] loop2: detected capacity change from 0 to 128 [ 98.216144][ T5920] netlink: 'syz.2.26': attribute type 11 has an invalid length. [ 99.037117][ T5923] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 99.084190][ T5923] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 99.187848][ T5912] loop3: detected capacity change from 0 to 32768 [ 99.242014][ T5912] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 99.259126][ T5912] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 99.316723][ T5912] gfs2: fsid=syz:syz.0: journal 0 mapped with 3 extents in 0ms [ 99.358531][ T5775] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 99.384496][ T5775] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 99.494580][ T5775] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 110ms [ 99.522916][ T5775] gfs2: fsid=syz:syz.0: jid=0: Done [ 99.546142][ T5912] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 99.981475][ T5912] gfs2: fsid=syz:syz.0: found 1 quota changes [ 100.152675][ T5771] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error [ 100.152675][ T5771] inode = 11 2339 [ 100.152675][ T5771] function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 421 [ 100.174455][ T5775] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 100.219208][ T5771] gfs2: fsid=syz:syz.0: G: s:EX n:2/923 f:qobnN t:EX d:EX/0 a:0 v:0 r:3 m:20 p:1 [ 100.248506][ T5771] gfs2: fsid=syz:syz.0: H: s:EX f:H e:0 p:5771 [syz-executor] gfs2_quota_sync+0x411/0x5a0 [ 100.273996][ T5771] gfs2: fsid=syz:syz.0: I: n:11/2339 t:0 f:0x00 d:0x00000000 s:0 p:0 [ 100.303168][ T5771] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 100.338469][ T5771] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 100.349807][ T5771] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 100.361777][ T5771] gfs2: fsid=syz:syz.0: File system withdrawn [ 100.370929][ T5771] CPU: 1 PID: 5771 Comm: syz-executor Not tainted syzkaller #0 [ 100.378530][ T5771] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 100.388647][ T5771] Call Trace: [ 100.391973][ T5771] [ 100.394948][ T5771] dump_stack_lvl+0x18c/0x250 [ 100.399687][ T5771] ? show_regs_print_info+0x20/0x20 [ 100.404947][ T5771] ? load_image+0x420/0x420 [ 100.409505][ T5771] ? kobject_uevent_env+0x368/0x890 [ 100.414765][ T5771] gfs2_withdraw+0xe16/0x1400 [ 100.419595][ T5771] ? gfs2_lm+0x240/0x240 [ 100.423895][ T5771] ? preempt_schedule+0xc0/0xd0 [ 100.428802][ T5771] ? gfs2_consist_inode_i+0xf5/0x110 [ 100.434144][ T5771] gfs2_inode_refresh+0xb3c/0x11a0 [ 100.439315][ T5771] ? gfs2_inode_metasync+0xf0/0xf0 [ 100.444500][ T5771] ? gfs2_glock_nq+0xe2e/0x1440 [ 100.449438][ T5771] gfs2_instantiate+0x162/0x220 [ 100.454352][ T5771] gfs2_glock_wait+0x1d4/0x2a0 [ 100.459175][ T5771] do_sync+0x4b8/0xd90 [ 100.463285][ T5771] ? gfs2_quota_sync+0x411/0x5a0 [ 100.468297][ T5771] ? bh_get+0x760/0x760 [ 100.472522][ T5771] ? gfs2_quota_sync+0x318/0x5a0 [ 100.477518][ T5771] ? gfs2_quota_sync+0x411/0x5a0 [ 100.482507][ T5771] ? do_raw_spin_unlock+0x121/0x230 [ 100.487771][ T5771] ? do_raw_spin_unlock+0x121/0x230 [ 100.493039][ T5771] gfs2_quota_sync+0x411/0x5a0 [ 100.497868][ T5771] gfs2_sync_fs+0x4c/0xb0 [ 100.502258][ T5771] sync_filesystem+0xea/0x220 [ 100.506987][ T5771] generic_shutdown_super+0x6f/0x2b0 [ 100.512330][ T5771] kill_block_super+0x44/0x90 [ 100.517055][ T5771] deactivate_locked_super+0x97/0x100 [ 100.522473][ T5771] cleanup_mnt+0x3d7/0x460 [ 100.526953][ T5771] task_work_run+0x1d4/0x260 [ 100.531596][ T5771] ? task_work_cancel+0x220/0x220 [ 100.536690][ T5771] ? exit_to_user_mode_loop+0x3b/0x110 [ 100.542210][ T5771] exit_to_user_mode_loop+0xe6/0x110 [ 100.547577][ T5771] exit_to_user_mode_prepare+0xee/0x180 [ 100.553196][ T5771] syscall_exit_to_user_mode+0x1a/0x50 [ 100.556103][ T5775] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 100.558691][ T5771] do_syscall_64+0x61/0xb0 [ 100.570131][ T5775] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 100.574048][ T5771] ? clear_bhb_loop+0x40/0x90 [ 100.574071][ T5771] ? clear_bhb_loop+0x40/0x90 [ 100.574094][ T5771] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 100.574127][ T5771] RIP: 0033:0x7f25d099f397 [ 100.574147][ T5771] Code: a2 c7 05 5c 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 100.574164][ T5771] RSP: 002b:00007fff25396178 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 100.594161][ T5775] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 100.599210][ T5771] RAX: 0000000000000000 RBX: 00007f25d0a344bb RCX: 00007f25d099f397 [ 100.603726][ T5775] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 100.623272][ T5771] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff25396230 [ 100.623289][ T5771] RBP: 00007fff25396230 R08: 00007fff25397230 R09: 00000000ffffffff [ 100.623303][ T5771] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff253972c0 [ 100.623317][ T5771] R13: 00007f25d0a344bb R14: 0000000000017ae7 R15: 00007fff25397300 [ 100.693777][ T5771] [ 100.764046][ T5775] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.866232][ T5775] usb 1-1: config 0 descriptor?? [ 101.303346][ T5775] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 101.359864][ T5775] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 101.787093][ T5935] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 101.831073][ T5818] usb 1-1: USB disconnect, device number 2 [ 102.078427][ T5945] loop3: detected capacity change from 0 to 4096 [ 102.713871][ T5949] loop2: detected capacity change from 0 to 256 [ 102.741432][ T5949] FAT-fs (loop2): Unrecognized mount option "utf8=" or missing value [ 102.837771][ T5949] netlink: 1092 bytes leftover after parsing attributes in process `syz.2.36'. [ 103.038291][ T5951] loop3: detected capacity change from 0 to 128 [ 103.284371][ T5953] sctp: [Deprecated]: syz.2.39 (pid 5953) Use of struct sctp_assoc_value in delayed_ack socket option. [ 103.284371][ T5953] Use struct sctp_sack_info instead [ 103.481796][ T5958] netlink: 'syz.3.37': attribute type 11 has an invalid length. [ 104.269316][ T5962] loop2: detected capacity change from 0 to 256 [ 104.316363][ T5962] FAT-fs (loop2): Unrecognized mount option "utf8=" or missing value [ 104.351693][ T5962] netlink: 1092 bytes leftover after parsing attributes in process `syz.2.48'. [ 104.735256][ T5955] loop1: detected capacity change from 0 to 32768 [ 104.789124][ T5955] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 104.814386][ T5955] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 104.890021][ T5955] gfs2: fsid=syz:syz.0: journal 0 mapped with 3 extents in 0ms [ 104.943004][ T5775] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 104.951018][ T5775] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 105.009309][ T5775] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 58ms [ 105.034308][ T5775] gfs2: fsid=syz:syz.0: jid=0: Done [ 105.039688][ T5955] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 106.225059][ T5955] gfs2: fsid=syz:syz.0: found 1 quota changes [ 106.315951][ T5774] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error [ 106.315951][ T5774] inode = 11 2339 [ 106.315951][ T5774] function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 421 [ 106.349644][ T5977] vcan0: tx drop: invalid da for name 0xffffffffffffffff [ 106.355102][ T5774] gfs2: fsid=syz:syz.0: G: s:EX n:2/923 f:qobnN t:EX d:EX/0 a:0 v:0 r:3 m:20 p:1 [ 106.374113][ T5774] gfs2: fsid=syz:syz.0: H: s:EX f:H e:0 p:5774 [syz-executor] gfs2_quota_sync+0x411/0x5a0 [ 106.394000][ T5774] gfs2: fsid=syz:syz.0: I: n:11/2339 t:0 f:0x00 d:0x00000000 s:0 p:0 [ 106.412567][ T5774] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 106.440340][ T5774] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 106.464534][ T5774] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 106.471359][ T5774] gfs2: fsid=syz:syz.0: File system withdrawn [ 106.503598][ T5774] CPU: 1 PID: 5774 Comm: syz-executor Not tainted syzkaller #0 [ 106.511249][ T5774] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 106.521360][ T5774] Call Trace: [ 106.524703][ T5774] [ 106.527678][ T5774] dump_stack_lvl+0x18c/0x250 [ 106.532459][ T5774] ? show_regs_print_info+0x20/0x20 [ 106.537722][ T5774] ? load_image+0x420/0x420 [ 106.542312][ T5774] ? kobject_uevent_env+0x368/0x890 [ 106.547584][ T5774] gfs2_withdraw+0xe16/0x1400 [ 106.552371][ T5774] ? gfs2_lm+0x240/0x240 [ 106.556684][ T5774] ? preempt_schedule+0xc0/0xd0 [ 106.561589][ T5774] ? gfs2_consist_inode_i+0xf5/0x110 [ 106.566932][ T5774] gfs2_inode_refresh+0xb3c/0x11a0 [ 106.572090][ T5774] ? gfs2_inode_metasync+0xf0/0xf0 [ 106.577248][ T5774] ? gfs2_glock_nq+0xe2e/0x1440 [ 106.582144][ T5774] gfs2_instantiate+0x162/0x220 [ 106.587055][ T5774] gfs2_glock_wait+0x1d4/0x2a0 [ 106.591905][ T5774] do_sync+0x4b8/0xd90 [ 106.596023][ T5774] ? gfs2_quota_sync+0x411/0x5a0 [ 106.601028][ T5774] ? bh_get+0x760/0x760 [ 106.605227][ T5774] ? gfs2_quota_sync+0x318/0x5a0 [ 106.610213][ T5774] ? gfs2_quota_sync+0x411/0x5a0 [ 106.615615][ T5774] ? do_raw_spin_unlock+0x121/0x230 [ 106.620868][ T5774] ? do_raw_spin_unlock+0x121/0x230 [ 106.626114][ T5774] gfs2_quota_sync+0x411/0x5a0 [ 106.630941][ T5774] gfs2_sync_fs+0x4c/0xb0 [ 106.635322][ T5774] sync_filesystem+0xea/0x220 [ 106.640044][ T5774] generic_shutdown_super+0x6f/0x2b0 [ 106.645370][ T5774] kill_block_super+0x44/0x90 [ 106.650088][ T5774] deactivate_locked_super+0x97/0x100 [ 106.655529][ T5774] cleanup_mnt+0x3d7/0x460 [ 106.659993][ T5774] task_work_run+0x1d4/0x260 [ 106.664632][ T5774] ? task_work_cancel+0x220/0x220 [ 106.669712][ T5774] ? exit_to_user_mode_loop+0x3b/0x110 [ 106.675239][ T5774] exit_to_user_mode_loop+0xe6/0x110 [ 106.680570][ T5774] exit_to_user_mode_prepare+0xee/0x180 [ 106.686168][ T5774] syscall_exit_to_user_mode+0x1a/0x50 [ 106.691681][ T5774] do_syscall_64+0x61/0xb0 [ 106.696147][ T5774] ? clear_bhb_loop+0x40/0x90 [ 106.700857][ T5774] ? clear_bhb_loop+0x40/0x90 [ 106.705581][ T5774] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 106.711516][ T5774] RIP: 0033:0x7f269539f397 [ 106.715973][ T5774] Code: a2 c7 05 5c 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 106.735623][ T5774] RSP: 002b:00007fff9f81b198 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 106.744079][ T5774] RAX: 0000000000000000 RBX: 00007f26954344bb RCX: 00007f269539f397 [ 106.752101][ T5774] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff9f81b250 [ 106.760167][ T5774] RBP: 00007fff9f81b250 R08: 00007fff9f81c250 R09: 00000000ffffffff [ 106.768652][ T5774] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff9f81c2e0 [ 106.776663][ T5774] R13: 00007f26954344bb R14: 0000000000019313 R15: 00007fff9f81c320 [ 106.784691][ T5774] [ 107.321325][ T5978] loop2: detected capacity change from 0 to 32768 [ 107.339280][ T5978] ======================================================= [ 107.339280][ T5978] WARNING: The mand mount option has been deprecated and [ 107.339280][ T5978] and is ignored by this kernel. Remove the mand [ 107.339280][ T5978] option from the mount to silence this warning. [ 107.339280][ T5978] ======================================================= [ 107.519683][ T5978] JBD2: Ignoring recovery information on journal [ 107.626328][ T5978] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 107.784668][ T28] audit: type=1800 audit(1791185268.034:2): pid=5978 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.45" name="file1" dev="loop2" ino=17058 res=0 errno=0 [ 108.121058][ T5772] ocfs2: Unmounting device (7,2) on (node local) [ 108.238759][ T5989] loop1: detected capacity change from 0 to 4096 [ 109.288458][ T5993] loop2: detected capacity change from 0 to 256 [ 109.310689][ T5993] FAT-fs (loop2): Unrecognized mount option "utf8=" or missing value [ 109.366565][ T5993] netlink: 1092 bytes leftover after parsing attributes in process `syz.2.50'. [ 109.400061][ T5995] loop1: detected capacity change from 0 to 128 [ 109.820412][ T6001] netlink: 'syz.1.49': attribute type 11 has an invalid length. [ 113.818498][ T6027] loop3: detected capacity change from 0 to 256 [ 113.851639][ T6027] FAT-fs (loop3): Unrecognized mount option "utf8=" or missing value [ 113.941709][ T6025] loop2: detected capacity change from 0 to 4096 [ 114.044493][ T6028] netlink: 1092 bytes leftover after parsing attributes in process `syz.3.62'. [ 114.541070][ T6017] loop1: detected capacity change from 0 to 32768 [ 114.624242][ T6017] JBD2: Ignoring recovery information on journal [ 114.727911][ T6017] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 114.897230][ T28] audit: type=1800 audit(1791185275.154:3): pid=6017 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.58" name="file1" dev="loop1" ino=17058 res=0 errno=0 [ 115.265648][ T6017] syz.1.58 (6017) used greatest stack depth: 18520 bytes left [ 115.366295][ T5774] ocfs2: Unmounting device (7,1) on (node local) [ 115.658965][ T6035] loop0: detected capacity change from 0 to 128 [ 116.137728][ T6045] netlink: 'syz.0.63': attribute type 11 has an invalid length. [ 116.657408][ T6046] loop1: detected capacity change from 0 to 4096 [ 119.755159][ T6062] loop1: detected capacity change from 0 to 256 [ 119.766592][ T6062] FAT-fs (loop1): Unrecognized mount option "utf8=" or missing value [ 119.865557][ T6063] netlink: 1092 bytes leftover after parsing attributes in process `syz.1.72'. [ 120.823280][ T6069] loop1: detected capacity change from 0 to 40427 [ 120.874516][ T6069] F2FS-fs (loop1): Fix alignment : done, start(4096) end(16896) block(12288) [ 120.892221][ T6069] F2FS-fs (loop1): invalid crc value [ 120.900097][ T6069] F2FS-fs (loop1): invalid crc value [ 120.905749][ T6069] F2FS-fs (loop1): Failed to get valid F2FS checkpoint [ 122.387845][ T6071] loop3: detected capacity change from 0 to 32768 [ 122.429889][ T6071] JBD2: Ignoring recovery information on journal [ 122.654610][ T6071] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 123.832119][ T6092] loop1: detected capacity change from 0 to 4096 [ 125.830265][ T5771] ocfs2: Unmounting device (7,3) on (node local) [ 125.919710][ T6097] file system registered [ 125.985810][ T6097] ffs_data_put(): freeing [ 126.312467][ T6104] netlink: 1028 bytes leftover after parsing attributes in process `syz.0.81'. [ 126.342533][ T6103] loop1: detected capacity change from 0 to 4096 [ 126.378735][ T6103] ntfs3: loop1: Different NTFS sector size (2048) and media sector size (512). [ 126.493238][ T6103] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 126.664901][ T6103] ntfs3: loop1: Failed to load $Extend (-22). [ 126.689448][ T6103] ntfs3: loop1: Failed to initialize $Extend. [ 128.702073][ T6112] loop2: detected capacity change from 0 to 32768 [ 128.789129][ T6112] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 scanned by syz.2.86 (6112) [ 128.876731][ T6112] BTRFS info (device loop2): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 128.906411][ T6112] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 128.938949][ T6112] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 128.979151][ T6112] BTRFS info (device loop2): use zstd compression, level 3 [ 129.003615][ T6112] BTRFS info (device loop2): using free space tree [ 129.217011][ T6112] BTRFS info (device loop2): enabling ssd optimizations [ 129.254101][ T6112] BTRFS info (device loop2): auto enabling async discard [ 129.710073][ T5772] BTRFS info (device loop2): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 130.619635][ T51] Bluetooth: hci3: link tx timeout [ 130.630347][ T51] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 131.233442][ T6152] loop2: detected capacity change from 0 to 256 [ 131.267526][ T6152] FAT-fs (loop2): Unrecognized mount option "utf8=" or missing value [ 131.391912][ T6152] netlink: 1028 bytes leftover after parsing attributes in process `syz.2.92'. [ 132.808941][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 133.061577][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.441188][ T6158] loop2: detected capacity change from 0 to 32768 [ 133.486841][ T6158] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 scanned by syz.2.95 (6158) [ 133.927358][ T6160] loop3: detected capacity change from 0 to 40427 [ 133.962503][ T6158] BTRFS info (device loop2): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 133.983468][ T6160] F2FS-fs (loop3): Fix alignment : done, start(4096) end(16896) block(12288) [ 133.993571][ T6160] F2FS-fs (loop3): invalid crc value [ 133.999485][ T6160] F2FS-fs (loop3): invalid crc value [ 134.004917][ T6160] F2FS-fs (loop3): Failed to get valid F2FS checkpoint [ 134.020336][ T6158] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 134.029952][ T6158] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 134.051289][ T6158] BTRFS info (device loop2): use zstd compression, level 3 [ 134.066279][ T6158] BTRFS info (device loop2): using free space tree [ 134.894322][ T6158] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 134.904657][ T6158] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 134.985806][ T6158] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 135.070694][ T6158] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 135.209299][ T6158] BTRFS error (device loop2): open_ctree failed: -12 [ 135.609081][ T6162] loop1: detected capacity change from 0 to 32768 [ 135.638363][ T6162] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 scanned by syz.1.97 (6162) [ 135.730473][ T6162] BTRFS info (device loop1): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 135.772188][ T6162] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 135.784145][ T6162] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 135.824515][ T6162] BTRFS info (device loop1): use zstd compression, level 3 [ 135.864175][ T6162] BTRFS info (device loop1): using free space tree [ 135.958631][ T6162] BTRFS info (device loop1): enabling ssd optimizations [ 135.965833][ T6162] BTRFS info (device loop1): auto enabling async discard [ 136.295425][ T6184] loop3: detected capacity change from 0 to 32768 [ 136.316603][ T5774] BTRFS info (device loop1): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 136.353887][ T6184] JBD2: Ignoring recovery information on journal [ 136.477285][ T6184] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 136.720833][ T28] audit: type=1800 audit(1791185296.974:4): pid=6184 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.100" name="file1" dev="loop3" ino=17058 res=0 errno=0 [ 137.113002][ T6215] loop2: detected capacity change from 0 to 4096 [ 138.465524][ T6223] netlink: 1028 bytes leftover after parsing attributes in process `syz.1.104'. [ 138.576308][ T6184] syz.3.100 (6184) used greatest stack depth: 18264 bytes left [ 138.928822][ T5771] ocfs2: Unmounting device (7,3) on (node local) [ 141.523598][ T6240] loop2: detected capacity change from 0 to 40427 [ 141.555671][ T6240] F2FS-fs (loop2): Fix alignment : done, start(4096) end(16896) block(12288) [ 141.576057][ T6240] F2FS-fs (loop2): invalid crc value [ 141.587090][ T6240] F2FS-fs (loop2): invalid crc value [ 141.592527][ T6240] F2FS-fs (loop2): Failed to get valid F2FS checkpoint [ 144.619380][ T6266] loop1: detected capacity change from 0 to 4096 [ 145.186072][ T6254] loop3: detected capacity change from 0 to 32768 [ 145.304308][ T6254] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 scanned by syz.3.112 (6254) [ 145.344338][ T6271] netlink: 1028 bytes leftover after parsing attributes in process `syz.0.116'. [ 145.440888][ T6254] BTRFS info (device loop3): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 145.497213][ T6254] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 145.563661][ T6254] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 145.615185][ T6254] BTRFS info (device loop3): use zstd compression, level 3 [ 145.643819][ T6254] BTRFS info (device loop3): using free space tree [ 145.662140][ T6275] Zero length message leads to an empty skb [ 145.756653][ T6275] erspan1: entered allmulticast mode [ 146.136592][ T6254] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 147.719395][ T6254] BTRFS error (device loop3): open_ctree failed: -12 [ 149.019883][ T6314] loop1: detected capacity change from 0 to 256 [ 149.050124][ T6314] FAT-fs (loop1): Unrecognized mount option "utf8=" or missing value [ 149.234652][ T6314] netlink: 1028 bytes leftover after parsing attributes in process `syz.1.128'. [ 150.035020][ T6319] netlink: 580 bytes leftover after parsing attributes in process `syz.1.129'. [ 150.079427][ T6319] netlink: 188 bytes leftover after parsing attributes in process `syz.1.129'. [ 150.099425][ T6319] netlink: 8 bytes leftover after parsing attributes in process `syz.1.129'. [ 152.290494][ T6343] loop3: detected capacity change from 0 to 256 [ 152.354442][ T6343] FAT-fs (loop3): Unrecognized mount option "utf8=" or missing value [ 152.418790][ T5789] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 152.452238][ T6343] netlink: 1028 bytes leftover after parsing attributes in process `syz.3.138'. [ 154.749335][ T5818] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 155.704726][ T5818] usb 4-1: config 1 descriptor has 1 excess byte, ignoring [ 155.712248][ T5818] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 155.770826][ T5818] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 155.793988][ T5818] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 155.802073][ T5818] usb 4-1: SerialNumber: syz [ 156.182044][ T6366] loop2: detected capacity change from 0 to 40427 [ 156.242170][ T6366] F2FS-fs (loop2): Fix alignment : done, start(4096) end(16896) block(12288) [ 156.255048][ T6366] F2FS-fs (loop2): invalid crc value [ 156.263858][ T6366] F2FS-fs (loop2): invalid crc value [ 156.269409][ T6366] F2FS-fs (loop2): Failed to get valid F2FS checkpoint [ 156.293422][ T5818] usb 4-1: bad CDC descriptors [ 157.471072][ T6377] process 'syz.2.147' launched './file0' with NULL argv: empty string added [ 157.789195][ T5815] usb 4-1: USB disconnect, device number 3 [ 157.885053][ T6379] loop2: detected capacity change from 0 to 256 [ 157.936267][ T6379] FAT-fs (loop2): Unrecognized mount option "utf8=" or missing value [ 158.101463][ T6379] netlink: 1028 bytes leftover after parsing attributes in process `syz.2.148'. [ 159.469733][ T5816] IPVS: starting estimator thread 0... [ 160.364767][ T6388] loop2: detected capacity change from 0 to 4096 [ 160.985430][ T6392] IPVS: using max 16 ests per chain, 38400 per kthread [ 161.471101][ T6390] IPVS: rr: SCTP 127.0.0.1:20000 - no destination available [ 161.666946][ T6388] ntfs3: loop2: Failed to read $AttrDef (-4). [ 162.249572][ T6401] loop3: detected capacity change from 0 to 40427 [ 162.286808][ T6401] F2FS-fs (loop3): Fix alignment : done, start(4096) end(16896) block(12288) [ 162.313035][ T6401] F2FS-fs (loop3): invalid crc value [ 162.319340][ T6401] F2FS-fs (loop3): invalid crc value [ 162.324869][ T6401] F2FS-fs (loop3): Failed to get valid F2FS checkpoint [ 163.951003][ T6411] Console: switching to colour VGA+ 80x25 [ 164.188736][ T6411] Console: switching to colour frame buffer device 128x48 [ 164.292776][ T6409] loop1: detected capacity change from 0 to 4096 [ 166.058288][ T6422] loop1: detected capacity change from 0 to 256 [ 166.078463][ T6422] FAT-fs (loop1): Unrecognized mount option "utf8=" or missing value [ 166.149109][ T6422] netlink: 1028 bytes leftover after parsing attributes in process `syz.1.161'. [ 168.225210][ T6439] loop1: detected capacity change from 0 to 40427 [ 168.276118][ T6439] F2FS-fs (loop1): Fix alignment : done, start(4096) end(16896) block(12288) [ 168.287298][ T6439] F2FS-fs (loop1): invalid crc value [ 168.293159][ T6439] F2FS-fs (loop1): invalid crc value [ 168.298585][ T6439] F2FS-fs (loop1): Failed to get valid F2FS checkpoint [ 169.953747][ T6445] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5774] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[6445] [ 170.971169][ T6447] loop1: detected capacity change from 0 to 512 [ 171.032688][ T6447] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 171.145878][ T6447] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 171.389048][ T6447] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c118, mo2=0002] [ 171.686130][ T6447] System zones: 1-12 [ 172.084041][ T6447] EXT4-fs error (device loop1): ext4_orphan_get:1434: comm syz.1.169: bad orphan inode 131072 [ 172.125412][ T6447] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 172.162490][ T6460] loop3: detected capacity change from 0 to 256 [ 172.187157][ T6460] FAT-fs (loop3): Unrecognized mount option "utf8=" or missing value [ 172.329530][ T6460] netlink: 1028 bytes leftover after parsing attributes in process `syz.3.174'. [ 172.627284][ T5774] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.709163][ T6470] loop3: detected capacity change from 0 to 40427 [ 173.722457][ T6470] F2FS-fs (loop3): Fix alignment : done, start(4096) end(16896) block(12288) [ 173.794868][ T6470] F2FS-fs (loop3): invalid crc value [ 173.800741][ T6470] F2FS-fs (loop3): invalid crc value [ 173.807408][ T6470] F2FS-fs (loop3): Failed to get valid F2FS checkpoint [ 177.251176][ T6493] loop1: detected capacity change from 0 to 4096 [ 178.908317][ T6498] loop2: detected capacity change from 0 to 256 [ 178.955246][ T6498] FAT-fs (loop2): Unrecognized mount option "utf8=" or missing value [ 179.065555][ T6498] netlink: 1028 bytes leftover after parsing attributes in process `syz.2.185'. [ 179.785020][ T6507] loop2: detected capacity change from 0 to 40427 [ 179.878095][ T6507] F2FS-fs (loop2): Fix alignment : done, start(4096) end(16896) block(12288) [ 179.907665][ T6507] F2FS-fs (loop2): invalid crc value [ 179.916414][ T6507] F2FS-fs (loop2): invalid crc value [ 179.921910][ T6507] F2FS-fs (loop2): Failed to get valid F2FS checkpoint [ 180.874008][ T5775] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 181.196000][ T5775] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 181.244577][ T6514] netlink: 20 bytes leftover after parsing attributes in process `syz.0.191'. [ 181.268023][ T5775] usb 2-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 181.328611][ T5775] usb 2-1: config 0 interface 0 has no altsetting 0 [ 181.348664][ T5775] usb 2-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 181.370566][ T5775] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.411700][ T5775] usb 2-1: config 0 descriptor?? [ 181.512246][ T6516] loop2: detected capacity change from 0 to 512 [ 181.575201][ T6516] EXT4-fs: Ignoring removed oldalloc option [ 181.632584][ T6516] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 181.701815][ T6516] EXT4-fs (loop2): 1 truncate cleaned up [ 181.857638][ T6516] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 182.619505][ T5772] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 182.945333][ T5775] usbhid 2-1:0.0: can't add hid device: -71 [ 182.966500][ T5775] usbhid: probe of 2-1:0.0 failed with error -71 [ 183.001464][ T5775] usb 2-1: USB disconnect, device number 2 [ 183.769635][ T6535] loop1: detected capacity change from 0 to 4096 [ 184.984050][ T51] Bluetooth: hci3: link tx timeout [ 184.989252][ T51] Bluetooth: hci3: killing stalled connection 10:aa:aa:aa:aa:aa [ 185.009343][ T5786] Bluetooth: hci3: link tx timeout [ 185.014642][ T5786] Bluetooth: hci3: killing stalled connection 10:aa:aa:aa:aa:aa [ 185.024236][ T5786] Bluetooth: hci3: link tx timeout [ 185.029423][ T5786] Bluetooth: hci3: killing stalled connection 10:aa:aa:aa:aa:aa [ 185.061164][ T5786] Bluetooth: hci3: link tx timeout [ 185.066490][ T5786] Bluetooth: hci3: killing stalled connection 10:aa:aa:aa:aa:aa [ 185.075909][ T5786] Bluetooth: hci3: link tx timeout [ 185.081086][ T5786] Bluetooth: hci3: killing stalled connection 10:aa:aa:aa:aa:aa [ 185.083416][ T6542] loop1: detected capacity change from 0 to 256 [ 185.106029][ T5786] Bluetooth: hci3: link tx timeout [ 185.111285][ T5786] Bluetooth: hci3: killing stalled connection 10:aa:aa:aa:aa:aa [ 185.119498][ T5786] Bluetooth: hci3: link tx timeout [ 185.124932][ T5786] Bluetooth: hci3: killing stalled connection 10:aa:aa:aa:aa:aa [ 185.132624][ T5786] Bluetooth: hci3: link tx timeout [ 185.147006][ T5786] Bluetooth: hci3: killing stalled connection 10:aa:aa:aa:aa:aa [ 185.155129][ T5786] Bluetooth: hci3: link tx timeout [ 185.160291][ T5786] Bluetooth: hci3: killing stalled connection 10:aa:aa:aa:aa:aa [ 185.307861][ T6542] FAT-fs (loop1): Unrecognized mount option "utf8=" or missing value [ 185.438882][ T6542] netlink: 1028 bytes leftover after parsing attributes in process `syz.1.197'. [ 185.769060][ T6546] loop2: detected capacity change from 0 to 40427 [ 185.834970][ T6546] F2FS-fs (loop2): Fix alignment : done, start(4096) end(16896) block(12288) [ 185.845902][ T6546] F2FS-fs (loop2): invalid crc value [ 185.855672][ T6546] F2FS-fs (loop2): invalid crc value [ 185.861052][ T6546] F2FS-fs (loop2): Failed to get valid F2FS checkpoint [ 186.343120][ T6551] loop1: detected capacity change from 0 to 8 [ 187.054904][ T5786] Bluetooth: hci3: command 0x0406 tx timeout [ 188.599836][ T6565] binder: 6564:6565 ioctl c0306201 0 returned -14 [ 189.717864][ T6575] loop2: detected capacity change from 0 to 256 [ 189.753112][ T6575] FAT-fs (loop2): Unrecognized mount option "utf8=" or missing value [ 190.037586][ T6576] loop1: detected capacity change from 0 to 4096 [ 190.547097][ T6575] netlink: 1028 bytes leftover after parsing attributes in process `syz.2.209'. [ 192.598370][ T5786] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 192.607736][ T5786] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 192.616276][ T5786] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 192.626456][ T5786] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 192.636024][ T5786] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 192.644132][ T5786] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 194.547141][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.785261][ T51] Bluetooth: hci4: command tx timeout [ 195.943819][ T6588] chnl_net:caif_netlink_parms(): no params data found [ 196.332174][ T6588] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.374141][ T6588] bridge0: port 1(bridge_slave_0) entered disabled state [ 196.381511][ T6588] bridge_slave_0: entered allmulticast mode [ 196.401800][ T6588] bridge_slave_0: entered promiscuous mode [ 196.442700][ T6588] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.470620][ T6614] trusted_key: encrypted_key: keylen parameter is missing [ 196.480841][ T6588] bridge0: port 2(bridge_slave_1) entered disabled state [ 196.511295][ T6588] bridge_slave_1: entered allmulticast mode [ 196.529671][ T6588] bridge_slave_1: entered promiscuous mode [ 196.943484][ T51] Bluetooth: hci4: command tx timeout [ 196.984180][ T6617] loop2: detected capacity change from 0 to 4096 [ 197.997825][ T6588] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 198.861158][ T6588] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 198.974064][ T51] Bluetooth: hci4: command tx timeout [ 199.272111][ T1093] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.346607][ T6628] netlink: 31 bytes leftover after parsing attributes in process `syz.0.223'. [ 199.517179][ T1093] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.608452][ T6588] team0: Port device team_slave_0 added [ 199.658552][ T6588] team0: Port device team_slave_1 added [ 199.850356][ T6633] loop1: detected capacity change from 0 to 40427 [ 199.877878][ T6633] F2FS-fs (loop1): Fix alignment : done, start(4096) end(16896) block(12288) [ 199.889560][ T6633] F2FS-fs (loop1): invalid crc value [ 199.906587][ T6633] F2FS-fs (loop1): invalid crc value [ 199.911977][ T6633] F2FS-fs (loop1): Failed to get valid F2FS checkpoint [ 199.921587][ T1093] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.297574][ T1093] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.449251][ T6588] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 200.473938][ T6588] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 200.583968][ T6588] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 200.626365][ T6588] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 200.663934][ T6588] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 200.794108][ T6588] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 201.103941][ T5786] Bluetooth: hci4: command tx timeout [ 201.113839][ T6638] loop2: detected capacity change from 0 to 256 [ 201.147593][ T6638] FAT-fs (loop2): Unrecognized mount option "utf8=" or missing value [ 202.018035][ T6588] hsr_slave_0: entered promiscuous mode [ 202.109127][ T6588] hsr_slave_1: entered promiscuous mode [ 202.154465][ T6588] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 202.162102][ T6588] Cannot create hsr debugfs directory [ 202.369209][ T6643] binder: 6642:6643 ioctl c0306201 0 returned -14 [ 203.996657][ T6648] netlink: 4 bytes leftover after parsing attributes in process `syz.1.228'. [ 205.366890][ T6672] loop2: detected capacity change from 0 to 4096 [ 206.833963][ T5787] Bluetooth: hci1: command 0x0406 tx timeout [ 206.836472][ T5781] Bluetooth: hci2: command 0x0406 tx timeout [ 207.274229][ T6324] syz.3.130 (6324) used greatest stack depth: 17672 bytes left [ 207.865345][ T6681] loop2: detected capacity change from 0 to 40427 [ 207.934251][ T6681] F2FS-fs (loop2): Fix alignment : done, start(4096) end(16896) block(12288) [ 207.944295][ T6681] F2FS-fs (loop2): invalid crc value [ 207.950162][ T6681] F2FS-fs (loop2): invalid crc value [ 207.955581][ T6681] F2FS-fs (loop2): Failed to get valid F2FS checkpoint [ 208.968475][ T6691] loop1: detected capacity change from 0 to 256 [ 209.020021][ T6691] FAT-fs (loop1): Unrecognized mount option "utf8=" or missing value [ 209.386397][ T6588] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 209.434885][ T6588] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 209.534826][ T6588] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 209.669749][ T6588] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 210.486530][ T6588] 8021q: adding VLAN 0 to HW filter on device bond0 [ 210.598512][ T6588] 8021q: adding VLAN 0 to HW filter on device team0 [ 210.728800][ T77] bridge0: port 1(bridge_slave_0) entered blocking state [ 210.736607][ T77] bridge0: port 1(bridge_slave_0) entered forwarding state [ 210.852017][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 210.859274][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 211.124552][ T1093] hsr_slave_0: left promiscuous mode [ 211.184718][ T1093] hsr_slave_1: left promiscuous mode [ 211.205738][ T1093] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 211.213258][ T1093] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 211.250335][ T1093] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 211.259182][ T1093] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 211.289659][ T1093] bridge_slave_1: left allmulticast mode [ 211.295537][ T1093] bridge_slave_1: left promiscuous mode [ 211.302938][ T1093] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.360660][ T1093] bridge_slave_0: left allmulticast mode [ 211.374036][ T1093] bridge_slave_0: left promiscuous mode [ 211.379903][ T1093] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.478162][ T1093] veth1_macvtap: left promiscuous mode [ 211.504272][ T1093] veth0_macvtap: left promiscuous mode [ 211.510112][ T1093] veth1_vlan: left promiscuous mode [ 211.528683][ T1093] veth0_vlan: left promiscuous mode [ 212.536347][ T1093] team0 (unregistering): Port device team_slave_1 removed [ 212.598523][ T1093] team0 (unregistering): Port device team_slave_0 removed [ 212.652097][ T1093] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 212.710416][ T1093] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 213.101650][ T1093] bond0 (unregistering): Released all slaves [ 213.622738][ T6588] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 214.040507][ T6588] veth0_vlan: entered promiscuous mode [ 214.060441][ T6588] veth1_vlan: entered promiscuous mode [ 214.123631][ T6588] veth0_macvtap: entered promiscuous mode [ 214.141250][ T6588] veth1_macvtap: entered promiscuous mode [ 214.167473][ T6588] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 214.180759][ T6588] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.196130][ T6588] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 214.209146][ T6588] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.220380][ T6588] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 214.231271][ T6588] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.243185][ T6588] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 214.266800][ T6588] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 214.277963][ T6588] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.289148][ T6588] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 214.299821][ T6588] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.310061][ T6588] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 214.320768][ T6588] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.333232][ T6588] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 214.351675][ T6588] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.361306][ T6588] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.371183][ T6588] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.380079][ T6588] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.478076][ T3431] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 214.491366][ T3431] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 214.544439][ T3431] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 214.552330][ T3431] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 215.069794][ T6749] loop1: detected capacity change from 0 to 40427 [ 215.240753][ T6749] F2FS-fs (loop1): Fix alignment : done, start(4096) end(16896) block(12288) [ 215.252216][ T6749] F2FS-fs (loop1): invalid crc value [ 215.262133][ T6749] F2FS-fs (loop1): invalid crc value [ 215.267565][ T6749] F2FS-fs (loop1): Failed to get valid F2FS checkpoint [ 217.132563][ T6784] binder: 6782:6784 ioctl c0306201 0 returned -14 [ 219.287992][ T6800] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5772] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[6800] [ 219.968411][ T6810] loop4: detected capacity change from 0 to 256 [ 220.105714][ T6810] FAT-fs (loop4): Unrecognized mount option "utf8=" or missing value [ 222.621988][ T6828] device-mapper: ioctl: name not supplied when creating device [ 222.634943][ T28] audit: type=1326 audit(1791185382.884:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6827 comm="syz.1.256" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f269539e159 code=0x0 [ 224.596081][ T6850] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[6588] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[6850] [ 225.705631][ T6856] loop2: detected capacity change from 0 to 4096 [ 226.163297][ T6861] loop4: detected capacity change from 0 to 256 [ 227.011842][ T6861] FAT-fs (loop4): Unrecognized mount option "utf8=" or missing value [ 230.856609][ T6896] loop2: detected capacity change from 0 to 40427 [ 230.867179][ T6896] F2FS-fs (loop2): Fix alignment : done, start(4096) end(16896) block(12288) [ 230.877373][ T6896] F2FS-fs (loop2): invalid crc value [ 230.883818][ T6896] F2FS-fs (loop2): invalid crc value [ 230.889289][ T6896] F2FS-fs (loop2): Failed to get valid F2FS checkpoint [ 232.020869][ T6911] loop2: detected capacity change from 0 to 4096 [ 232.227716][ T6911] ntfs3: loop2: Different NTFS sector size (1024) and media sector size (512). [ 232.524043][ T6911] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 232.572057][ T6911] ntfs3: loop2: Failed to load $Extend (-22). [ 232.638713][ T6911] ntfs3: loop2: Failed to initialize $Extend. [ 232.698935][ T6911] ntfs3: loop2: ino=0, attr_set_size [ 233.131046][ T6928] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5773] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[6928] [ 234.025303][ T6926] loop2: detected capacity change from 0 to 4096 [ 235.067076][ T6936] netlink: 992 bytes leftover after parsing attributes in process `syz.0.275'. [ 236.269713][ T5815] IPVS: starting estimator thread 0... [ 236.666224][ T6968] loop1: detected capacity change from 0 to 40427 [ 236.758891][ T6968] F2FS-fs (loop1): Fix alignment : done, start(4096) end(16896) block(12288) [ 236.768921][ T6968] F2FS-fs (loop1): invalid crc value [ 236.775171][ T6968] F2FS-fs (loop1): invalid crc value [ 236.781776][ T6968] F2FS-fs (loop1): Failed to get valid F2FS checkpoint [ 236.814100][ T6966] IPVS: using max 17 ests per chain, 40800 per kthread [ 238.645153][ T6996] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 239.490329][ T7007] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5774] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[7007] [ 240.209373][ T7015] netlink: 992 bytes leftover after parsing attributes in process `syz.0.289'. [ 241.569458][ T7033] loop2: detected capacity change from 0 to 40427 [ 241.608648][ T7033] F2FS-fs (loop2): Fix alignment : done, start(4096) end(16896) block(12288) [ 241.623772][ T7033] F2FS-fs (loop2): invalid crc value [ 241.629976][ T7033] F2FS-fs (loop2): invalid crc value [ 241.635515][ T7033] F2FS-fs (loop2): Failed to get valid F2FS checkpoint [ 242.274269][ T7052] loop4: detected capacity change from 0 to 256 [ 242.282139][ T7052] FAT-fs (loop4): Unrecognized mount option "utf8=" or missing value [ 242.491760][ T7056] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 243.115441][ T7052] netlink: 992 bytes leftover after parsing attributes in process `syz.4.300'. [ 245.188577][ T7081] loop4: detected capacity change from 0 to 40427 [ 245.203615][ T7081] F2FS-fs (loop4): Fix alignment : done, start(4096) end(16896) block(12288) [ 245.213706][ T7081] F2FS-fs (loop4): invalid crc value [ 245.219914][ T7081] F2FS-fs (loop4): invalid crc value [ 245.225345][ T7081] F2FS-fs (loop4): Failed to get valid F2FS checkpoint [ 247.503507][ T7107] loop4: detected capacity change from 0 to 256 [ 247.596056][ T7107] FAT-fs (loop4): Unrecognized mount option "utf8=" or missing value [ 248.152558][ T7116] loop2: detected capacity change from 0 to 40427 [ 248.231657][ T7116] F2FS-fs (loop2): Fix alignment : done, start(4096) end(16896) block(12288) [ 248.251272][ T7116] F2FS-fs (loop2): invalid crc value [ 248.260497][ T7116] F2FS-fs (loop2): invalid crc value [ 248.267739][ T7116] F2FS-fs (loop2): Failed to get valid F2FS checkpoint [ 249.165239][ T5786] Bluetooth: hci4: link tx timeout [ 249.173270][ T5786] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 249.844759][ T7143] loop1: detected capacity change from 0 to 4096 [ 249.862779][ T7143] EXT4-fs: Ignoring removed nobh option [ 250.125181][ T7143] EXT4-fs: Ignoring removed bh option [ 250.205137][ T7143] EXT4-fs (loop1): Test dummy encryption mode enabled [ 250.325241][ T7143] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 250.706318][ T7161] loop4: detected capacity change from 0 to 4096 [ 250.715900][ T28] audit: type=1800 audit(1791185410.974:6): pid=7143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.325" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 251.363462][ T5786] Bluetooth: hci4: command 0x0406 tx timeout [ 251.786943][ T5774] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 251.993387][ T7171] loop1: detected capacity change from 0 to 256 [ 252.006920][ T7171] FAT-fs (loop1): Unrecognized mount option "utf8=" or missing value [ 252.486150][ T7174] loop4: detected capacity change from 0 to 40427 [ 252.494755][ T6758] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 252.503680][ T7174] F2FS-fs (loop4): Fix alignment : done, start(4096) end(16896) block(12288) [ 252.514939][ T7174] F2FS-fs (loop4): invalid crc value [ 252.520786][ T7174] F2FS-fs (loop4): invalid crc value [ 252.526199][ T7174] F2FS-fs (loop4): Failed to get valid F2FS checkpoint [ 252.714917][ T6758] usb 3-1: Using ep0 maxpacket: 8 [ 252.738879][ T6758] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 252.760746][ T6758] usb 3-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 252.782984][ T6758] usb 3-1: config 179 has no interface number 0 [ 252.797397][ T6758] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 252.821564][ T6758] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid wMaxPacketSize 0 [ 252.844672][ T6758] usb 3-1: config 179 interface 65 altsetting 12 has 1 endpoint descriptor, different from the interface descriptor's value: 23 [ 252.875100][ T6758] usb 3-1: config 179 interface 65 has no altsetting 0 [ 252.890623][ T6758] usb 3-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 252.910951][ T6758] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.945492][ T6758] usb 3-1: can't set config #179, error -71 [ 252.999521][ T6758] usb 3-1: USB disconnect, device number 2 [ 253.058651][ T7040] udevd[7040]: setting owner of /dev/bus/usb/003/002 to uid=0, gid=0 failed: No such file or directory [ 253.173972][ T2134] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 253.286010][ T7189] loop2: detected capacity change from 0 to 4096 [ 253.506128][ T7194] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 254.544620][ T2134] usb 5-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 254.553743][ T2134] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.582196][ T2134] usb 5-1: config 0 descriptor?? [ 254.813994][ T2134] usb 5-1: string descriptor 0 read error: -71 [ 254.862734][ T2134] gspca_main: sunplus-2.14.0 probing 055f:c420 [ 254.899858][ T2134] gspca_sunplus: reg_w_riv err -71 [ 254.919909][ T2134] sunplus: probe of 5-1:0.0 failed with error -71 [ 254.959243][ T2134] usb 5-1: USB disconnect, device number 2 [ 255.024031][ T7211] loop2: detected capacity change from 0 to 4096 [ 255.033280][ T7211] EXT4-fs: Ignoring removed nobh option [ 255.054535][ T7211] EXT4-fs: Ignoring removed bh option [ 255.879153][ T7211] EXT4-fs (loop2): Test dummy encryption mode enabled [ 255.922791][ T7211] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 255.956260][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.018776][ T7228] loop1: detected capacity change from 0 to 256 [ 256.087305][ T7228] FAT-fs (loop1): Unrecognized mount option "utf8=" or missing value [ 256.311171][ T5772] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 256.654888][ T7234] loop4: detected capacity change from 0 to 40427 [ 256.735920][ T7234] F2FS-fs (loop4): Fix alignment : done, start(4096) end(16896) block(12288) [ 256.748412][ T7234] F2FS-fs (loop4): invalid crc value [ 256.758331][ T7234] F2FS-fs (loop4): invalid crc value [ 256.763715][ T7234] F2FS-fs (loop4): Failed to get valid F2FS checkpoint [ 259.403645][ T7277] loop1: detected capacity change from 0 to 4096 [ 263.322972][ T7317] loop2: detected capacity change from 0 to 4096 [ 264.035275][ T7324] loop4: detected capacity change from 0 to 256 [ 264.048490][ T7324] FAT-fs (loop4): Unrecognized mount option "utf8=" or missing value [ 266.912743][ T7343] loop4: detected capacity change from 0 to 40427 [ 266.922994][ T7343] F2FS-fs (loop4): Fix alignment : done, start(4096) end(16896) block(12288) [ 266.938749][ T7343] F2FS-fs (loop4): invalid crc value [ 266.954810][ T7343] F2FS-fs (loop4): invalid crc value [ 266.960266][ T7343] F2FS-fs (loop4): Failed to get valid F2FS checkpoint [ 268.866999][ T7361] loop4: detected capacity change from 0 to 4096 [ 268.885820][ T7361] EXT4-fs: Ignoring removed nobh option [ 269.057575][ T7361] EXT4-fs: Ignoring removed bh option [ 269.094878][ T7361] EXT4-fs (loop4): Test dummy encryption mode enabled [ 269.656873][ T7361] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 270.433060][ T7386] loop2: detected capacity change from 0 to 4096 [ 272.222183][ T6588] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 272.544017][ T5836] IPVS: starting estimator thread 0... [ 272.601076][ T7396] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 272.651163][ T7394] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 272.691685][ T7396] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 272.739350][ T7395] IPVS: using max 16 ests per chain, 38400 per kthread [ 276.055626][ T7434] loop2: detected capacity change from 0 to 256 [ 276.076901][ T7431] loop1: detected capacity change from 0 to 4096 [ 276.089968][ T7431] EXT4-fs: Ignoring removed nobh option [ 276.096921][ T7434] FAT-fs (loop2): Unrecognized mount option "utf8=" or missing value [ 276.122556][ T7431] EXT4-fs: Ignoring removed bh option [ 276.137030][ T7431] EXT4-fs (loop1): Test dummy encryption mode enabled [ 276.186193][ T7431] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 277.587517][ T7441] loop4: detected capacity change from 0 to 4096 [ 279.181382][ T5774] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 279.575286][ T7454] batman_adv: batadv0: Adding interface: dummy0 [ 279.594862][ T7454] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 279.651402][ T7454] batman_adv: batadv0: Interface activated: dummy0 [ 279.863474][ T7454] batadv0: mtu less than device minimum [ 279.892133][ T7454] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 279.905243][ T7454] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 279.917814][ T7454] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 279.930358][ T7454] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 279.942939][ T7454] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 279.955586][ T7454] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 279.968131][ T7454] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 279.980734][ T7454] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 279.993332][ T7454] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 282.831458][ T7497] loop4: detected capacity change from 0 to 4096 [ 283.646330][ T7510] loop2: detected capacity change from 0 to 40427 [ 283.663588][ T7510] F2FS-fs (loop2): Fix alignment : done, start(4096) end(16896) block(12288) [ 283.675298][ T7510] F2FS-fs (loop2): invalid crc value [ 283.682937][ T7510] F2FS-fs (loop2): invalid crc value [ 283.688555][ T7510] F2FS-fs (loop2): Failed to get valid F2FS checkpoint [ 285.268057][ T7527] loop2: detected capacity change from 0 to 256 [ 285.321682][ T7527] FAT-fs (loop2): Unrecognized mount option "utf8=" or missing value [ 290.152982][ T7573] loop4: detected capacity change from 0 to 4096 [ 290.772411][ T7579] loop1: detected capacity change from 0 to 40427 [ 290.826085][ T7579] F2FS-fs (loop1): Fix alignment : done, start(4096) end(16896) block(12288) [ 290.849447][ T7579] F2FS-fs (loop1): invalid crc value [ 290.858545][ T7579] F2FS-fs (loop1): invalid crc value [ 290.864028][ T7579] F2FS-fs (loop1): Failed to get valid F2FS checkpoint [ 290.972857][ T7587] netlink: 1028 bytes leftover after parsing attributes in process `syz.0.418'. [ 291.194475][ T7585] I/O error, dev loop1, sector 40192 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 291.344043][ T5434] veth1_vlan: left promiscuous mode [ 291.748821][ T7597] loop2: detected capacity change from 0 to 512 [ 291.982167][ T7597] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 292.036668][ T7597] ext4 filesystem being mounted at /123/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 293.589187][ T7597] capability: warning: `syz.2.422' uses 32-bit capabilities (legacy support in use) [ 293.865221][ T7615] CIFS: Attempting to mount //127.0.0.1/share [ 293.888612][ T5772] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 294.062066][ T7622] CIFS: VFS: \\127.0.0.1 SMB response too short (0 bytes) [ 294.120062][ T7628] loop4: detected capacity change from 0 to 256 [ 294.194786][ T7628] FAT-fs (loop4): Unrecognized mount option "utf8=" or missing value [ 294.279169][ T7628] netlink: 1028 bytes leftover after parsing attributes in process `syz.4.427'. [ 294.389937][ T7615] CIFS: VFS: cifs_mount failed w/return code = -112 [ 295.880006][ T7645] loop2: detected capacity change from 0 to 4096 [ 296.745628][ T7641] syzkaller0: Number of in use tx queues changed invalidating tc mappings. Priority traffic classification disabled! [ 297.961471][ T7672] loop1: detected capacity change from 0 to 256 [ 297.977553][ T7672] FAT-fs (loop1): Unrecognized mount option "utf8=" or missing value [ 298.132779][ T7676] netlink: 1100 bytes leftover after parsing attributes in process `syz.1.437'. [ 298.355688][ T7678] ceph: No mds server is up or the cluster is laggy [ 298.366904][ T23] libceph: connect (1)[c::]:6789 error -101 [ 298.373718][ T23] libceph: mon0 (1)[c::]:6789 connect error [ 298.446311][ T7683] CIFS: Attempting to mount //127.0.0.1/share [ 298.662257][ T7689] CIFS: VFS: \\127.0.0.1 SMB response too short (0 bytes) [ 299.698666][ T7683] CIFS: VFS: \\127.0.0.1 Send error in SessSetup = -11 [ 299.707997][ T7683] CIFS: VFS: cifs_mount failed w/return code = -11 [ 300.121038][ T7710] loop4: detected capacity change from 0 to 512 [ 300.191095][ T7710] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 300.230308][ T7710] ext4 filesystem being mounted at /48/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 300.507004][ T6588] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 300.546583][ T7705] loop1: detected capacity change from 0 to 32768 [ 300.562503][ T7705] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.444 (7705) [ 300.690604][ T7705] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 300.927049][ T7705] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 301.118687][ T7705] BTRFS info (device loop1): setting nodatasum [ 301.304236][ T7705] BTRFS info (device loop1): force zlib compression, level 3 [ 301.361126][ T7705] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_LZO (0x8) [ 301.393948][ T7705] BTRFS info (device loop1): use lzo compression, level 0 [ 301.432766][ T7722] loop4: detected capacity change from 0 to 256 [ 301.446980][ T7705] BTRFS info (device loop1): turning on flush-on-commit [ 301.455358][ T7705] BTRFS info (device loop1): enabling auto defrag [ 301.462179][ T7705] BTRFS info (device loop1): max_inline at 4096 [ 301.488177][ T7722] FAT-fs (loop4): Unrecognized mount option "utf8=" or missing value [ 301.504262][ T7705] BTRFS info (device loop1): using free space tree [ 301.558816][ T7722] netlink: 1080 bytes leftover after parsing attributes in process `syz.4.449'. [ 301.755872][ T7705] BTRFS info (device loop1): enabling ssd optimizations [ 303.187787][ T51] Bluetooth: hci4: link tx timeout [ 303.198449][ T51] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 303.393696][ T5774] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 304.008354][ T7756] loop4: detected capacity change from 0 to 4096 [ 305.304460][ T51] Bluetooth: hci4: command 0x0406 tx timeout [ 305.965585][ T7774] loop2: detected capacity change from 0 to 256 [ 306.234699][ T7774] FAT-fs (loop2): Unrecognized mount option "utf8=" or missing value [ 306.375047][ T7599] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 306.393440][ T7774] netlink: 1080 bytes leftover after parsing attributes in process `syz.2.460'. [ 306.707518][ T7780] CIFS: Attempting to mount //127.0.0.1/share [ 307.506252][ T7788] CIFS: VFS: \\127.0.0.1 SMB response too short (0 bytes) [ 307.527937][ T7780] CIFS: VFS: \\127.0.0.1 Send error in SessSetup = -11 [ 307.544071][ T7780] CIFS: VFS: cifs_mount failed w/return code = -11 [ 308.924280][ T51] Bluetooth: hci4: command 0x0406 tx timeout [ 309.786384][ T7808] loop2: detected capacity change from 0 to 4096 [ 309.812678][ T7813] loop1: detected capacity change from 0 to 256 [ 309.887651][ T7813] FAT-fs (loop1): Unrecognized mount option "utf8=" or missing value [ 310.062645][ T7599] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 310.358827][ T7813] netlink: 1080 bytes leftover after parsing attributes in process `syz.1.471'. [ 313.855803][ T7848] CIFS: Attempting to mount //127.0.0.1/share [ 314.414076][ T5786] Bluetooth: hci4: command 0x0406 tx timeout [ 314.812795][ T7854] CIFS: VFS: \\127.0.0.1 SMB response too short (0 bytes) [ 314.822238][ T7848] CIFS: VFS: \\127.0.0.1 Send error in SessSetup = -11 [ 314.829594][ T7848] CIFS: VFS: cifs_mount failed w/return code = -11 [ 315.425007][ T7865] loop2: detected capacity change from 0 to 256 [ 315.652844][ T7865] FAT-fs (loop2): Unrecognized mount option "utf8=" or missing value [ 316.105278][ T7865] netlink: 1092 bytes leftover after parsing attributes in process `syz.2.483'. [ 316.231845][ T7873] loop1: detected capacity change from 0 to 40427 [ 316.249306][ T7873] F2FS-fs (loop1): Fix alignment : done, start(4096) end(16896) block(12288) [ 316.269465][ T7873] F2FS-fs (loop1): invalid crc value [ 316.281485][ T7873] F2FS-fs (loop1): invalid crc value [ 316.286952][ T7873] F2FS-fs (loop1): Failed to get valid F2FS checkpoint [ 316.514055][ T5786] Bluetooth: hci4: command 0x0406 tx timeout [ 317.385773][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.279690][ T7876] loop4: detected capacity change from 0 to 32768 [ 318.318996][ T7876] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.486 (7876) [ 318.375357][ T7876] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 318.420853][ T7876] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 318.441179][ T7876] BTRFS info (device loop4): setting nodatasum [ 318.460971][ T7876] BTRFS info (device loop4): force zlib compression, level 3 [ 318.496432][ T7876] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_LZO (0x8) [ 318.533959][ T7876] BTRFS info (device loop4): use lzo compression, level 0 [ 318.541157][ T7876] BTRFS info (device loop4): turning on flush-on-commit [ 318.576994][ T7876] BTRFS info (device loop4): enabling auto defrag [ 318.583555][ T7876] BTRFS info (device loop4): max_inline at 4096 [ 318.613941][ T7876] BTRFS info (device loop4): using free space tree [ 318.758629][ T7876] BTRFS info (device loop4): enabling ssd optimizations [ 319.046611][ T6588] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 319.228115][ T7934] loop2: detected capacity change from 0 to 2048 [ 319.301827][ T7599] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 320.663883][ T5786] Bluetooth: hci4: command 0x0406 tx timeout [ 320.899269][ T7945] loop2: detected capacity change from 0 to 128 [ 323.514102][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 323.812742][ T7958] loop1: detected capacity change from 0 to 256 [ 323.871036][ T7958] FAT-fs (loop1): Unrecognized mount option "utf8=" or missing value [ 323.988914][ T7962] netlink: 1092 bytes leftover after parsing attributes in process `syz.1.496'. [ 324.440238][ T7967] loop2: detected capacity change from 0 to 40427 [ 324.498824][ T7967] F2FS-fs (loop2): Fix alignment : done, start(4096) end(16896) block(12288) [ 324.508602][ T7967] F2FS-fs (loop2): invalid crc value [ 324.514609][ T7967] F2FS-fs (loop2): invalid crc value [ 324.519973][ T7967] F2FS-fs (loop2): Failed to get valid F2FS checkpoint [ 324.726740][ T7960] loop4: detected capacity change from 0 to 32768 [ 325.420864][ T7960] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 326.285329][ T7960] XFS (loop4): Ending clean mount [ 326.368441][ T7960] XFS (loop4): Quotacheck needed: Please wait. [ 326.524284][ T7960] XFS (loop4): Quotacheck: Done. [ 326.823220][ T6588] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 327.023197][ T7999] loop1: detected capacity change from 0 to 256 [ 327.275019][ T7999] FAT-fs (loop1): Unrecognized mount option "utf8=" or missing value [ 327.701427][ T8005] netlink: 1092 bytes leftover after parsing attributes in process `syz.1.507'. [ 327.852477][ T7992] loop2: detected capacity change from 0 to 32768 [ 327.859258][ T51] Bluetooth: hci4: command 0x0406 tx timeout [ 327.884307][ T7992] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.503 (7992) [ 327.921663][ T7992] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 327.934876][ T7992] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 327.951118][ T7992] BTRFS info (device loop2): setting nodatasum [ 327.958144][ T7992] BTRFS info (device loop2): force zlib compression, level 3 [ 327.970702][ T7992] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_LZO (0x8) [ 328.039989][ T7992] BTRFS info (device loop2): use lzo compression, level 0 [ 328.077739][ T7992] BTRFS info (device loop2): turning on flush-on-commit [ 328.108624][ T7992] BTRFS info (device loop2): enabling auto defrag [ 328.153300][ T7992] BTRFS info (device loop2): max_inline at 4096 [ 328.192876][ T7992] BTRFS info (device loop2): using free space tree [ 328.225887][ T8010] netlink: 12 bytes leftover after parsing attributes in process `syz.1.510'. [ 328.592586][ T6758] IPVS: starting estimator thread 0... [ 328.894029][ T8028] IPVS: using max 16 ests per chain, 38400 per kthread [ 329.690421][ T7992] BTRFS error (device loop2): open_ctree failed: -4 [ 330.078894][ T8039] loop4: detected capacity change from 0 to 4096 [ 331.674444][ T8059] loop4: detected capacity change from 0 to 256 [ 331.949592][ T8059] FAT-fs (loop4): Unrecognized mount option "utf8=" or missing value [ 332.654131][ T51] Bluetooth: hci4: command 0x0406 tx timeout [ 334.345410][ T8067] loop2: detected capacity change from 0 to 32768 [ 334.565166][ T8067] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 335.588027][ T8067] XFS (loop2): Ending clean mount [ 335.669730][ T8067] XFS (loop2): Quotacheck needed: Please wait. [ 335.833478][ T8093] loop1: detected capacity change from 0 to 4096 [ 335.911461][ T8067] XFS (loop2): Quotacheck: Done. [ 336.033649][ T5772] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 336.894521][ T5786] Bluetooth: hci4: command 0x0406 tx timeout [ 337.528025][ T8108] loop1: detected capacity change from 0 to 256 [ 337.545480][ T8108] FAT-fs (loop1): Unrecognized mount option "utf8=" or missing value [ 338.184808][ T8121] loop1: detected capacity change from 0 to 256 [ 338.324456][ T8121] FAT-fs (loop1): Unrecognized mount option "utf8=" or missing value [ 341.439284][ T8143] loop2: detected capacity change from 0 to 40427 [ 341.461249][ T8143] F2FS-fs (loop2): Fix alignment : done, start(4096) end(16896) block(12288) [ 341.471343][ T8143] F2FS-fs (loop2): invalid crc value [ 341.477181][ T8143] F2FS-fs (loop2): invalid crc value [ 341.482596][ T8143] F2FS-fs (loop2): Failed to get valid F2FS checkpoint [ 341.534012][ T51] Bluetooth: hci4: command 0x0406 tx timeout [ 341.542059][ T8144] loop1: detected capacity change from 0 to 4096 [ 342.326007][ T8154] loop1: detected capacity change from 0 to 256 [ 342.374497][ T8154] FAT-fs (loop1): Unrecognized mount option "utf8=" or missing value [ 344.378623][ T8178] loop4: detected capacity change from 0 to 4096 [ 344.569491][ T8184] loop1: detected capacity change from 0 to 256 [ 344.615946][ T8184] FAT-fs (loop1): Unrecognized mount option "utf8=" or missing value [ 344.778191][ T7599] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 345.594420][ T5786] Bluetooth: hci4: command 0x0406 tx timeout [ 346.864600][ T8197] loop1: detected capacity change from 0 to 32768 [ 347.182897][ T8197] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 347.746853][ T8197] XFS (loop1): Ending clean mount [ 347.881268][ T8197] XFS (loop1): Quotacheck needed: Please wait. [ 348.027052][ T8197] XFS (loop1): Quotacheck: Done. [ 348.266819][ T5774] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 348.447761][ T8231] loop2: detected capacity change from 0 to 256 [ 348.469324][ T8231] FAT-fs (loop2): Unrecognized mount option "utf8=" or missing value [ 348.922668][ T8238] loop1: detected capacity change from 0 to 4096 [ 349.071092][ T8240] loop4: detected capacity change from 0 to 128 [ 349.385180][ T5786] Bluetooth: hci4: command 0x0406 tx timeout [ 349.885412][ T8244] Illegal XDP return value 4294967274 on prog (id 16) dev N/A, expect packet loss! [ 351.094154][ T8258] loop1: detected capacity change from 0 to 256 [ 351.115519][ T8258] FAT-fs (loop1): Unrecognized mount option "utf8=" or missing value [ 352.369996][ T8272] loop1: detected capacity change from 0 to 4096 [ 354.912452][ T8301] loop2: detected capacity change from 0 to 256 [ 354.953795][ T8301] FAT-fs (loop2): Unrecognized mount option "utf8=" or missing value [ 354.987821][ T8276] loop1: detected capacity change from 0 to 40427 [ 355.214907][ T8276] F2FS-fs (loop1): Fix alignment : done, start(4096) end(16896) block(12288) [ 355.240315][ T8276] F2FS-fs (loop1): invalid crc value [ 355.250762][ T8276] F2FS-fs (loop1): invalid crc value [ 355.256658][ T8276] F2FS-fs (loop1): Failed to get valid F2FS checkpoint [ 355.294029][ T5786] Bluetooth: hci4: command 0x0406 tx timeout [ 361.464865][ T8364] loop2: detected capacity change from 0 to 256 [ 361.479674][ T8364] FAT-fs (loop2): Unrecognized mount option "utf8=" or missing value [ 362.011936][ T8371] loop1: detected capacity change from 0 to 4096 [ 363.232600][ T8381] loop1: detected capacity change from 0 to 4096 [ 364.905980][ T8399] loop2: detected capacity change from 0 to 256 [ 364.922115][ T8399] FAT-fs (loop2): Unrecognized mount option "utf8=" or missing value [ 365.617645][ T8406] loop1: detected capacity change from 0 to 256 [ 365.625757][ T8406] FAT-fs (loop1): Unrecognized mount option "utf8=" or missing value [ 365.690215][ T8373] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 367.035190][ T8418] loop2: detected capacity change from 0 to 4096 [ 368.212263][ T8435] loop4: detected capacity change from 0 to 16 [ 369.556940][ T8442] loop4: detected capacity change from 0 to 256 [ 369.758175][ T8442] FAT-fs (loop4): Unrecognized mount option "utf8=" or missing value [ 372.373889][ T8451] loop2: detected capacity change from 0 to 4096 [ 372.850605][ T8466] netlink: 20 bytes leftover after parsing attributes in process `syz.4.640'. [ 374.869785][ T8486] loop1: detected capacity change from 0 to 256 [ 374.880793][ T8368] udevd[8368]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 374.893484][ T8486] FAT-fs (loop1): Unrecognized mount option "utf8=" or missing value [ 374.973731][ T8373] udevd[8373]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 378.036498][ T8510] loop1: detected capacity change from 0 to 4096 [ 378.835350][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 381.075531][ T8533] loop1: detected capacity change from 0 to 16 [ 382.571368][ T8529] netlink: 20 bytes leftover after parsing attributes in process `syz.2.659'. [ 383.021954][ T8368] udevd[8368]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 383.081890][ T8470] udevd[8470]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 384.382176][ T8565] loop1: detected capacity change from 0 to 4096 [ 387.099881][ T8584] loop1: detected capacity change from 0 to 4096 [ 387.204237][ T8586] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 387.361706][ T8584] overlayfs: upper fs does not support tmpfile. [ 387.579642][ T8584] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 387.604221][ T8584] overlayfs: failed to set xattr on upper [ 387.610014][ T8584] overlayfs: ...falling back to redirect_dir=nofollow. [ 387.637730][ T8584] overlayfs: ...falling back to index=off. [ 387.643652][ T8584] overlayfs: ...falling back to uuid=null. [ 389.259419][ T8614] netlink: 20 bytes leftover after parsing attributes in process `syz.1.675'. [ 390.242504][ T8373] udevd[8373]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 390.298039][ T8470] udevd[8470]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 394.383517][ T8664] netlink: 16 bytes leftover after parsing attributes in process `syz.4.699'. [ 394.411349][ T8666] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.700'. [ 398.319209][ T28] audit: type=1326 audit(1791185558.574:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8711 comm="syz.1.717" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f269539e159 code=0x7ffc0000 [ 398.365334][ T28] audit: type=1326 audit(1791185558.604:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8711 comm="syz.1.717" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f269539e159 code=0x7ffc0000 [ 398.609953][ T28] audit: type=1326 audit(1791185558.604:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8711 comm="syz.1.717" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f269539e159 code=0x7ffc0000 [ 398.746985][ T28] audit: type=1326 audit(1791185558.604:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8711 comm="syz.1.717" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f269539e159 code=0x7ffc0000 [ 398.866573][ T28] audit: type=1326 audit(1791185558.604:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8711 comm="syz.1.717" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f269539e159 code=0x7ffc0000 [ 399.005790][ T28] audit: type=1326 audit(1791185558.604:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8711 comm="syz.1.717" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f269539e159 code=0x7ffc0000 [ 399.044687][ T28] audit: type=1326 audit(1791185558.614:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8711 comm="syz.1.717" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f269539e159 code=0x7ffc0000 [ 399.117339][ T28] audit: type=1326 audit(1791185558.614:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8711 comm="syz.1.717" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f269539e159 code=0x7ffc0000 [ 399.161353][ T28] audit: type=1326 audit(1791185558.614:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8711 comm="syz.1.717" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f269539e159 code=0x7ffc0000 [ 399.331966][ T28] audit: type=1326 audit(1791185558.614:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8711 comm="syz.1.717" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f269539e159 code=0x7ffc0000 [ 403.885273][ T8774] netlink: 8 bytes leftover after parsing attributes in process `syz.0.739'. [ 404.662745][ T8787] warning: `syz.1.744' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 409.988124][ T8840] netlink: 20 bytes leftover after parsing attributes in process `syz.1.761'. [ 410.079052][ T8840] bridge0: port 2(bridge_slave_1) entered disabled state [ 410.086874][ T8840] bridge0: port 1(bridge_slave_0) entered disabled state [ 412.152939][ T5786] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 418.194839][ T8951] fuse: Bad value for 'fd' [ 437.994634][ T9149] netlink: 8 bytes leftover after parsing attributes in process `syz.0.869'. [ 438.087432][ T9150] netlink: 4 bytes leftover after parsing attributes in process `syz.1.868'. [ 440.374456][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.537158][ T9189] netlink: 4 bytes leftover after parsing attributes in process `syz.2.881'. [ 441.707750][ T9190] overlayfs: failed to clone upperpath [ 445.616418][ T9228] netlink: 4 bytes leftover after parsing attributes in process `syz.0.895'. [ 450.500704][ T9289] netlink: 4 bytes leftover after parsing attributes in process `syz.4.909'. [ 453.728971][ T9332] netlink: 4 bytes leftover after parsing attributes in process `syz.0.925'. [ 471.509149][ T9495] xt_hashlimit: size too large, truncated to 1048576 [ 476.807992][ T9534] xt_hashlimit: size too large, truncated to 1048576 [ 479.666662][ T9564] net_ratelimit: 10 callbacks suppressed [ 479.666749][ T9564] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:00bb with DS=0x1a [ 483.065629][ T9580] xt_hashlimit: size too large, truncated to 1048576 [ 486.421719][ T9611] xt_hashlimit: size too large, truncated to 1048576 [ 501.699668][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 507.438301][ T9840] ip_tables: iptables: counters copy to user failed while replacing table [ 515.042872][ T9914] (null): rxe_set_mtu: Set mtu to 1024 [ 515.051402][ T9914] rdma_rxe: rxe_newlink: failed to add syz_tun [ 525.469315][T10027] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1154'. [ 528.436708][T10068] netlink: 'syz.1.1166': attribute type 4 has an invalid length. [ 532.247910][T10096] netlink: 'syz.2.1179': attribute type 4 has an invalid length. [ 535.271742][T10143] netlink: 'syz.0.1190': attribute type 4 has an invalid length. [ 541.203560][T10202] netlink: 'syz.4.1203': attribute type 4 has an invalid length. [ 543.598365][T10225] Could not find key with description: [syz] [ 543.610715][T10225] process_request_key_err: No key [ 543.630062][T10225] Could not find valid key in user session keyring for sig specified in mount option: [syz] [ 543.654060][T10225] One or more global auth toks could not properly register; rc = [-2] [ 543.673031][T10225] Error parsing options; rc = [-2] [ 545.086681][T10248] netlink: 'syz.1.1222': attribute type 4 has an invalid length. [ 556.873448][T10435] tipc: Started in network mode [ 556.911258][T10435] tipc: Node identity 4, cluster identity 4711 [ 556.930188][T10435] tipc: Node number set to 4 [ 559.205026][T10470] Invalid ELF header magic: != ELF [ 563.137387][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 567.169346][T10557] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 567.282954][T10559] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1322'. [ 569.293171][T10588] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1331'. [ 570.781164][T10606] netlink: 'syz.2.1338': attribute type 4 has an invalid length. [ 575.329921][T10664] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1355'. [ 580.967190][T10729] fuse: Bad value for 'fd' [ 594.056641][ T5786] Bluetooth: hci3: unexpected cc 0x204b length: 34 > 3 [ 597.306958][ T5786] Bluetooth: hci2: unexpected cc 0x204b length: 34 > 3 [ 597.320267][T10950] ip_tables: iptables: counters copy to user failed while replacing table [ 597.327268][ T5786] Bluetooth: hci2: unexpected event for opcode 0x204b [ 598.114541][ T5786] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 598.123365][ T5786] Bluetooth: hci3: Injecting HCI hardware error event [ 598.133481][ T5786] Bluetooth: hci3: hardware error 0x00 [ 600.289590][ T5786] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 600.576755][ T5786] Bluetooth: hci1: unexpected cc 0x204b length: 34 > 3 [ 600.605395][ T5786] Bluetooth: hci1: unexpected event for opcode 0x204b [ 600.869072][T11003] fuse: Bad value for 'fd' [ 601.374416][ T5786] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 601.384846][ T5786] Bluetooth: hci2: Injecting HCI hardware error event [ 601.393635][ T5786] Bluetooth: hci2: hardware error 0x00 [ 601.855325][T11024] Error parsing options; rc = [-22] [ 603.454117][ T5786] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 603.690792][ T5786] Bluetooth: hci4: unexpected cc 0x204b length: 34 > 3 [ 603.700006][ T5786] Bluetooth: hci4: unexpected event for opcode 0x204b [ 604.654553][ T5786] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 604.663362][ T5786] Bluetooth: hci1: Injecting HCI hardware error event [ 604.673445][ T5786] Bluetooth: hci1: hardware error 0x00 [ 607.253819][ T5786] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 607.776230][ T5786] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 607.786280][ T5786] Bluetooth: hci4: Injecting HCI hardware error event [ 607.795550][ T51] Bluetooth: hci4: hardware error 0x00 [ 609.698833][T11126] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1509'. [ 609.934243][ T51] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 613.310846][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 613.310926][ T28] audit: type=1326 audit(1791185774.564:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11156 comm="syz.1.1523" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f269539e159 code=0x0 [ 615.879126][T11194] syz.1.1534 uses obsolete (PF_INET,SOCK_PACKET) [ 616.853592][T11212] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1541'. [ 619.594629][T11239] No such timeout policy "syz1" [ 620.995177][T11239] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 621.011359][T11241] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 624.590495][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 627.994516][T11333] fuse: Bad value for 'fd' [ 631.421188][T11378] futex_wake_op: syz.2.1581 tries to shift op by 144; fix this program [ 639.231657][T11473] ip_tables: iptables: counters copy to user failed while replacing table [ 645.820136][T11540] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1632'. [ 647.705758][T11563] jffs2: notice: (11563) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 649.174600][T11581] jffs2: notice: (11581) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 650.232677][T11591] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1647'. [ 650.622203][T11604] ------------[ cut here ]------------ [ 650.628449][T11604] WARNING: CPU: 1 PID: 11604 at net/mac80211/iface.c:530 ieee80211_do_stop+0x1ae9/0x2030 [ 650.638687][T11604] Modules linked in: [ 650.642599][T11604] CPU: 1 PID: 11604 Comm: syz.2.1653 Not tainted syzkaller #0 [ 650.650357][T11604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 650.660924][T11604] RIP: 0010:ieee80211_do_stop+0x1ae9/0x2030 [ 650.667338][T11604] Code: f7 49 81 c5 d8 06 00 00 4c 89 e8 48 c1 e8 03 42 0f b6 04 20 84 c0 0f 85 fd 04 00 00 41 ff 4d 00 e9 ed f5 ff ff e8 d7 49 80 f7 <0f> 0b e9 af e8 ff ff e8 cb 49 80 f7 43 0f b6 04 27 84 c0 0f 85 12 [ 650.687262][T11604] RSP: 0018:ffffc9000ba7f5e0 EFLAGS: 00010287 [ 650.693358][T11604] RAX: ffffffff8a0746d9 RBX: 0000000000000001 RCX: 0000000000080000 [ 650.701619][T11604] RDX: ffffc9000d413000 RSI: 0000000000022f87 RDI: 0000000000022f88 [ 650.709667][T11604] RBP: ffffc9000ba7f7c8 R08: ffffc9000ba7f487 R09: 1ffff9200174fe90 [ 650.717969][T11604] R10: dffffc0000000000 R11: fffff5200174fe91 R12: dffffc0000000000 [ 650.726043][T11604] R13: ffffc9000ba7f730 R14: 0000000000000001 R15: ffff88805c26a930 [ 650.734228][T11604] FS: 00007fcaaf7556c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 650.743202][T11604] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 650.749909][T11604] CR2: 000000110c25878e CR3: 000000007815c000 CR4: 00000000003506e0 [ 650.757971][T11604] Call Trace: [ 650.761371][T11604] [ 650.764424][T11604] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 650.770549][T11604] ? rcu_is_watching+0x15/0xb0 [ 650.775444][T11604] ? trace_contention_end+0x39/0xe0 [ 650.780676][T11604] ? __mutex_lock+0x30d/0xc80 [ 650.785608][T11604] ? ieee80211_sdata_stop+0x80/0x80 [ 650.790887][T11604] ? mutex_lock_nested+0x20/0x20 [ 650.795965][T11604] ? __local_bh_enable_ip+0x13a/0x1c0 [ 650.801409][T11604] ? dev_deactivate_many+0xb4d/0xcd0 [ 650.806848][T11604] ieee80211_stop+0x423/0x490 [ 650.811545][T11604] ? dev_deactivate_many+0x246/0xcd0 [ 650.817000][T11604] ? ieee80211_open+0x200/0x200 [ 650.821870][T11604] __dev_close_many+0x1d5/0x2b0 [ 650.826824][T11604] ? dev_close_many+0x410/0x410 [ 650.831773][T11604] __dev_change_flags+0x2cd/0x6a0 [ 650.836932][T11604] ? dev_get_flags+0x1c0/0x1c0 [ 650.841772][T11604] ? apparmor_capable+0x137/0x1a0 [ 650.846921][T11604] dev_change_flags+0x7c/0x1a0 [ 650.851709][T11604] devinet_ioctl+0x949/0x1d70 [ 650.856462][T11604] ? inet_ifa_byprefix+0x2a0/0x2a0 [ 650.861593][T11604] ? _copy_from_user+0xa5/0xe0 [ 650.866473][T11604] ? get_user_ifreq+0x12b/0x180 [ 650.871349][T11604] inet_ioctl+0x42b/0x560 [ 650.875739][T11604] ? tomoyo_path_number_perm+0x217/0x5e0 [ 650.881398][T11604] ? inet_shutdown+0x370/0x370 [ 650.886365][T11604] ? slab_free_freelist_hook+0x130/0x1a0 [ 650.892080][T11604] ? tomoyo_path_number_perm+0x4b7/0x5e0 [ 650.897815][T11604] ? __kmem_cache_free+0xba/0x1f0 [ 650.902894][T11604] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 650.908515][T11604] sock_do_ioctl+0xfc/0x310 [ 650.913043][T11604] ? sock_show_fdinfo+0xb0/0xb0 [ 650.918051][T11604] sock_ioctl+0x5be/0x7e0 [ 650.922426][T11604] ? sock_poll+0x3e0/0x3e0 [ 650.926900][T11604] ? bpf_lsm_file_ioctl+0x9/0x10 [ 650.931873][T11604] ? security_file_ioctl+0x80/0xa0 [ 650.937065][T11604] ? sock_poll+0x3e0/0x3e0 [ 650.941526][T11604] __se_sys_ioctl+0xfd/0x170 [ 650.946172][T11604] do_syscall_64+0x55/0xb0 [ 650.950627][T11604] ? clear_bhb_loop+0x40/0x90 [ 650.955403][T11604] ? clear_bhb_loop+0x40/0x90 [ 650.960098][T11604] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 650.966046][T11604] RIP: 0033:0x7fcaae79e159 [ 650.970475][T11604] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 650.990232][T11604] RSP: 002b:00007fcaaf755028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 650.998743][T11604] RAX: ffffffffffffffda RBX: 00007fcaaea25fa0 RCX: 00007fcaae79e159 [ 651.006809][T11604] RDX: 0000200000000100 RSI: 0000000000008914 RDI: 0000000000000004 [ 651.014921][T11604] RBP: 00007fcaae83506b R08: 0000000000000000 R09: 0000000000000000 [ 651.022925][T11604] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 651.031048][T11604] R13: 00007fcaaea26038 R14: 00007fcaaea25fa0 R15: 00007ffc5bd8f388 [ 651.039089][T11604] [ 651.042202][T11604] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 651.049493][T11604] CPU: 1 PID: 11604 Comm: syz.2.1653 Not tainted syzkaller #0 [ 651.056953][T11604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 651.067025][T11604] Call Trace: [ 651.070311][T11604] [ 651.073270][T11604] dump_stack_lvl+0x18c/0x250 [ 651.077976][T11604] ? show_regs_print_info+0x20/0x20 [ 651.083190][T11604] ? load_image+0x420/0x420 [ 651.087748][T11604] panic+0x2ca/0x720 [ 651.091664][T11604] ? bpf_jit_dump+0xd0/0xd0 [ 651.096206][T11604] __warn+0x2e0/0x470 [ 651.100195][T11604] ? ieee80211_do_stop+0x1ae9/0x2030 [ 651.105491][T11604] ? ieee80211_do_stop+0x1ae9/0x2030 [ 651.110801][T11604] report_bug+0x2be/0x4f0 [ 651.115135][T11604] ? ieee80211_do_stop+0x1ae9/0x2030 [ 651.120426][T11604] ? ieee80211_do_stop+0x1ae9/0x2030 [ 651.125733][T11604] ? ieee80211_do_stop+0x1aeb/0x2030 [ 651.131027][T11604] handle_bug+0xcf/0x120 [ 651.135274][T11604] exc_invalid_op+0x1a/0x50 [ 651.139800][T11604] asm_exc_invalid_op+0x1a/0x20 [ 651.144664][T11604] RIP: 0010:ieee80211_do_stop+0x1ae9/0x2030 [ 651.150569][T11604] Code: f7 49 81 c5 d8 06 00 00 4c 89 e8 48 c1 e8 03 42 0f b6 04 20 84 c0 0f 85 fd 04 00 00 41 ff 4d 00 e9 ed f5 ff ff e8 d7 49 80 f7 <0f> 0b e9 af e8 ff ff e8 cb 49 80 f7 43 0f b6 04 27 84 c0 0f 85 12 [ 651.170264][T11604] RSP: 0018:ffffc9000ba7f5e0 EFLAGS: 00010287 [ 651.176341][T11604] RAX: ffffffff8a0746d9 RBX: 0000000000000001 RCX: 0000000000080000 [ 651.184322][T11604] RDX: ffffc9000d413000 RSI: 0000000000022f87 RDI: 0000000000022f88 [ 651.192307][T11604] RBP: ffffc9000ba7f7c8 R08: ffffc9000ba7f487 R09: 1ffff9200174fe90 [ 651.200289][T11604] R10: dffffc0000000000 R11: fffff5200174fe91 R12: dffffc0000000000 [ 651.208267][T11604] R13: ffffc9000ba7f730 R14: 0000000000000001 R15: ffff88805c26a930 [ 651.216251][T11604] ? ieee80211_do_stop+0x1ae9/0x2030 [ 651.221558][T11604] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 651.227553][T11604] ? rcu_is_watching+0x15/0xb0 [ 651.232348][T11604] ? trace_contention_end+0x39/0xe0 [ 651.237562][T11604] ? __mutex_lock+0x30d/0xc80 [ 651.242252][T11604] ? ieee80211_sdata_stop+0x80/0x80 [ 651.247467][T11604] ? mutex_lock_nested+0x20/0x20 [ 651.252411][T11604] ? __local_bh_enable_ip+0x13a/0x1c0 [ 651.257798][T11604] ? dev_deactivate_many+0xb4d/0xcd0 [ 651.263091][T11604] ieee80211_stop+0x423/0x490 [ 651.267778][T11604] ? dev_deactivate_many+0x246/0xcd0 [ 651.273070][T11604] ? ieee80211_open+0x200/0x200 [ 651.277928][T11604] __dev_close_many+0x1d5/0x2b0 [ 651.282798][T11604] ? dev_close_many+0x410/0x410 [ 651.287668][T11604] __dev_change_flags+0x2cd/0x6a0 [ 651.292704][T11604] ? dev_get_flags+0x1c0/0x1c0 [ 651.297480][T11604] ? apparmor_capable+0x137/0x1a0 [ 651.302524][T11604] dev_change_flags+0x7c/0x1a0 [ 651.307313][T11604] devinet_ioctl+0x949/0x1d70 [ 651.312011][T11604] ? inet_ifa_byprefix+0x2a0/0x2a0 [ 651.317145][T11604] ? _copy_from_user+0xa5/0xe0 [ 651.321915][T11604] ? get_user_ifreq+0x12b/0x180 [ 651.326784][T11604] inet_ioctl+0x42b/0x560 [ 651.331153][T11604] ? tomoyo_path_number_perm+0x217/0x5e0 [ 651.336803][T11604] ? inet_shutdown+0x370/0x370 [ 651.341576][T11604] ? slab_free_freelist_hook+0x130/0x1a0 [ 651.347231][T11604] ? tomoyo_path_number_perm+0x4b7/0x5e0 [ 651.352877][T11604] ? __kmem_cache_free+0xba/0x1f0 [ 651.357938][T11604] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 651.363419][T11604] sock_do_ioctl+0xfc/0x310 [ 651.367938][T11604] ? sock_show_fdinfo+0xb0/0xb0 [ 651.372817][T11604] sock_ioctl+0x5be/0x7e0 [ 651.377159][T11604] ? sock_poll+0x3e0/0x3e0 [ 651.381598][T11604] ? bpf_lsm_file_ioctl+0x9/0x10 [ 651.386540][T11604] ? security_file_ioctl+0x80/0xa0 [ 651.391664][T11604] ? sock_poll+0x3e0/0x3e0 [ 651.396093][T11604] __se_sys_ioctl+0xfd/0x170 [ 651.400698][T11604] do_syscall_64+0x55/0xb0 [ 651.405137][T11604] ? clear_bhb_loop+0x40/0x90 [ 651.409829][T11604] ? clear_bhb_loop+0x40/0x90 [ 651.414534][T11604] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 651.420456][T11604] RIP: 0033:0x7fcaae79e159 [ 651.424876][T11604] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 651.444504][T11604] RSP: 002b:00007fcaaf755028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 651.452924][T11604] RAX: ffffffffffffffda RBX: 00007fcaaea25fa0 RCX: 00007fcaae79e159 [ 651.460899][T11604] RDX: 0000200000000100 RSI: 0000000000008914 RDI: 0000000000000004 [ 651.468877][T11604] RBP: 00007fcaae83506b R08: 0000000000000000 R09: 0000000000000000 [ 651.476852][T11604] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 651.484827][T11604] R13: 00007fcaaea26038 R14: 00007fcaaea25fa0 R15: 00007ffc5bd8f388 [ 651.492812][T11604] [ 651.496443][T11604] Kernel Offset: disabled [ 651.500891][T11604] Rebooting in 86400 seconds..