last executing test programs: 19.760845306s ago: executing program 3 (id=865): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_io_uring_setup(0x111, 0x0, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="fc0000001900e1f6ddedabc4ac5c000000000000000000000000000000000001ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=r1, @ANYRES32=0x0, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000000000000100000006000000000000000000000000000000010000000000000044000500ac1414aa000000000000000000000000000000003c000000020000000a01010200000000000000000000000006000000040300"], 0xfc}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r5 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) sendmmsg$inet6(r5, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x36, 0x0, 0x0, 0x20000000}, 0xa}], 0x400000000000172, 0x0) 17.30802473s ago: executing program 1 (id=872): r0 = socket$pppl2tp(0x18, 0x1, 0x1) syz_io_uring_setup(0x213c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r4, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r5, 0xffffffffffffffff, 0x0) keyctl$setperm(0x5, 0x0, 0x4010) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000) 16.266844442s ago: executing program 1 (id=874): syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000080)='./file1\x00', 0x80, &(0x7f0000000180)=ANY=[@ANYBLOB="747970653dc3a0c61b000000000000006465636f6d706f73652c6e6f626172726965722c6e6f626172726965722c6769643d8fe10d9215200f9d73df8c17cf7b19", @ANYRESOCT=0x0, @ANYRES16=0x0], 0x44, 0x703, &(0x7f0000000c00)="$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") open(&(0x7f0000000000)='./file2\x00', 0x4000, 0x0) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x1008014, &(0x7f0000000000)=ANY=[], 0x3, 0x7e9, &(0x7f0000001f80)="$eJzs3U1sHPXZAPBnHDsfRm+EeF/lRVEIk0ClIAWz3kColQMs67EzdL1r7a6rRFVFEXGQhQMIilpygagStFWrqqf2Rrly661VpVZqpdJTpXLopTckThWV+iVQVcnVzO46a8cfwUkcKL+flf3Pzj7/+T8z3syzs96dCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgkvp0pTKZRCNvLpxLN1efbrfmtnh8sLxfrWnWeHzNuBFJ8S/274+P/t6b939XHz5U3ByPI717R2J/0eyPy3ccuvPM/46ODPpvkdBOHbvOuCTix/1klxdfWv/ovpuf2C303V984i4frxS3s1kz70Q+V5vN0rzTSqdOn648dHamk87kjaxzvtPN5tJ6O6t1W+30RP2BdHJq6lSaTZxvLTRnp2uNbDDz0Qerlcrp9MmJ+azW7rSaDz0ZnfrZvNHIm7NlTLXyjShiHk3rg6dIbS5NLy4tL57aLtUiaHLtrD1x9TY9cv+dH7zy/t+WFosn5GYLSfqjVicnq9XJ049MPfJopTJarVSrMTRjT0RUhkURUXaJkYiiyy150vIZcnN23HATjPTrfzQij2YsxLlIN/gZi3pMRztaMVfc/+PYNRF9g/r/hYf+8vutxh2u/4Mqf/fVhw9HWf+P9u4d3az+b5jrbv68HK/G5Xguno7lWI7FeOm2Z7TNz8iNLiFZc282smhGHp1oRR5zUSvnpP05aUzF6TgdlXgqzsZMdCKNmcijEVl04nx0ohtZ+YyqRzuyqEU3WtGONE5EPR6INCZjKqbiVKSRxUScj1YsRDNmYzpq5VIuxlK53U+ty/LQgfj5s3/44K1iejVocqvVer14IReL8dctglaL+XD9XzNjuPavrBSvF9ZHqP+fd7dgLw47szKo/wAAAMB/raR89704/h+Le8qpmbyRfWXLLh+vlHYvSQAAAOCGlH/5P1I0Y8XUPZEUx/+VDSLf2/XcAAAAgJsjKb9jl0TEeNzbm7oYS/F6LMZGbwIAAAAAn0Hl3/+PFs14xGvljMHpUiq9jwQAAAAAn3Xf3uwc++8PzrHbmd+X/HIsIsaSK/Pn7k8u1Yq42qU9vX795surS+zOHE4O9hdSNqdHL9+RRMRoPTuSDM5++e99vfbD8vbw6Gr3zc71n7TbWyYQWydQ3ovvxbFezLELZXNHv8to0htlfCZvZBP1VuNMeUrE4l/3leeXvhlRjP6d5tzBJC4uLS9OPPPC8oUylytF9ysH+idQvOY8ilvkstLfAnHPxms8Vn4Roz/ueG/cyvD6j/S6j2w9ZjI85htxvBdzfLzXjg8e6Y25vxhzcuLMZNRqB0e62bnuKytDa9/PYnJ1zceuXNrBmr8R9/Vi7jtxX6/ZIIvqmiyevzaL6tD2v85tMXiWbZvFW8deO/fP37aS7NR2WZzaKIvRjbNY2ROxflsA3C4Xy7P+XK1CB8oq9K+V/il+kiR6dbcoVrVeQN82+9piL/ePq6Osvso40P+jwlCtG4311f3qHvT6qvtK9PbofSd6rydGD29QVyob7NFfXHrx3f4e/eF3fvSTrx793U/LcXdU3d6JB3ox/Sbu+vW6LM68u7C3yKJY5++vq6pvFz3e3nTcTqOaxJWIPV+/9GIcevnVyw8uXXr62cX/WXy+WtSghyuVR6p71/2CNs0UgM+v7a+xs2nEoM4kD687qo4La+vuXasfKZiIZ+KFWI4LcbL8tkFE3LvxuONDH0M4uc1R6/jQFV5ObnNseTW2em1sEpvEnhraYv//w7L56Jb8OgBgVxzfoA7/pn9h223q/+o78yfjRC9ik+PutbV83dFxbF7LN/LFoWlXLQKAncnaHybj3TeTdjuff2pyamqy1j2bpe1W/UtpO5+ezdK9zW7Wrp+tNWezdL445K8P3jiezjppZ2F+vtXupjOtdhojnfxceeX3tLO/HzNXa3bzeme+kdU6WVpvNbu1ejedzjv1dH7hiUbeOZu1y86d+ayez+T1WjdvNdNOa6FdzybStJNlQ4H5dNbs5jN5MdlM59v5XK19JSIaC3NZOp116u18vtvqLXAwVt6cabXnysVOXLv6f97NbQ0AnxYvv3r5uaeXlxdf2tnEn64n+HavIwCwlioNAAAAAAAAAAAAAACffquf/79zMFHMvYFvBH6yiX1xfcFjcQNjrfRPFHTrV+dTNXHNKg8u53i7E9vNia899thzQ3MODMc88drdZ69vOXG935SNNw9G7P3ZD3pzHt88+Fs39XfxXsRO/oOsJFvErNlN7N3FXRIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAbOo/AQAA//86f0/X") socket$inet_sctp(0x2, 0x1, 0x84) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8d}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x9, 0x4, 0x7ffc0002}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pivot_root(&(0x7f0000000000)='.\x00', &(0x7f00000004c0)='./file1\x00') bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0xe, 0x4, &(0x7f00000000c0)=@framed={{0x18, 0x2}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x43}]}, &(0x7f0000000400)='syzkaller\x00'}, 0x80) r0 = gettid() rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) timer_create(0x2, &(0x7f0000000100)={0x0, 0x14, 0x4, @tid=r0}, &(0x7f0000044000)) timer_settime(0x0, 0xffffffffffffffff, &(0x7f0000000080)={{0x77359400}, {0x0, 0x9}}, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xffffffffffffffff]}, 0x8, 0x0) read$FUSE(r1, &(0x7f0000001a00)={0x2020}, 0x2020) lchown(0x0, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, 0x0) 16.265334542s ago: executing program 4 (id=875): close(0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r1, 0xe846d000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000800)=@newqdisc={0xa0, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r5, {}, {0xffff, 0xffff}, {0x2, 0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x70, 0x2, [@TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x2}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x4}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x8, 0x4, 0x0, 0x0, 0x8, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0x0, 0x0, 0x3], [0xffff, 0x8, 0x0, 0x0, 0x0, 0x2]}}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x5}]}}]}, 0xa0}}, 0x0) 15.11288147s ago: executing program 4 (id=877): r0 = socket$key(0xf, 0x3, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x39, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0xc6882) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002eb0e00000000000000000105000600200000000a00000040010000000500e50000070000001f00001a000000030000a95a6e870200010000e9ff070040000200000000050005000000cc580a"], 0x80}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x400008a, 0x0) 13.568232571s ago: executing program 4 (id=879): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) 13.477842856s ago: executing program 4 (id=880): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x2, 0x0, &(0x7f0000000000)) openat$rtc(0xffffff9c, 0x0, 0x40400, 0x0) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/clear_refs\x00', 0x1, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x5) connect$unix(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) clock_gettime(0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000180)={@private0, 0x8000000, 0x2, 0xff, 0x1, 0x1}, 0x20) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) 13.454496558s ago: executing program 1 (id=881): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) keyctl$get_persistent(0x16, 0xffffffffffffffff, 0x0) r3 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a3, @local, 0x4f1}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, &(0x7f0000001a00)=ANY=[@ANYBLOB="03000000000000000a004e2300000010ff010000000000000000000000000001f8ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b0000000a004e2000000008fe8000000000000000000000000000aa05000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000010000000c0000000000000000000000000000000104000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ad94e2100000073fe8000000000000000000000000000aa09"], 0x610) r4 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0x88f}}, {{0xa, 0x4e08, 0x4a3, @private2, 0x4f0}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r4, 0x29, 0x30, &(0x7f0000000780)={0x3, {{0xa, 0x4e23, 0x9, @mcast1, 0x8}}}, 0x90) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r5, 0xffffffffffffffff, 0x0) 12.301312975s ago: executing program 1 (id=882): r0 = socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$UI_SET_MSCBIT(0xffffffffffffffff, 0x40045568, 0x21) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendto(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, &(0x7f0000000140)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast1}, 0x9}}, 0x26) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r6, 0x325, 0x0, 0x0, {0x8}}, 0x14}}, 0x0) 10.86065713s ago: executing program 0 (id=887): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r5, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000000280)={r6, 0x3ff}, 0x8) 10.794731594s ago: executing program 4 (id=889): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$udf(&(0x7f0000000280), &(0x7f00000001c0)='./file0\x00', 0x10004d0, &(0x7f0000000340)=ANY=[@ANYBLOB="73686f72746164000000006d653d3030303030303030303030303030303030b030342c6e6f6164696e6963622c7569643d00", @ANYRES8, @ANYRESHEX], 0x2, 0xa1b, &(0x7f0000001f80)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_io_uring_setup(0x40f, &(0x7f0000000000), &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_setup(0x2bac, &(0x7f0000000340), &(0x7f0000000100)=0x0, &(0x7f0000000000)) syz_io_uring_submit(r6, r5, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0xc, 0x4000, @fd_index=0x6, 0x8, 0x0, 0x0, 0x4}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x80000004, 0x0, 0x4) io_uring_enter(r3, 0x349e, 0xe5a7, 0x9, 0x0, 0x0) 9.726097457s ago: executing program 3 (id=890): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'wlan1\x00'}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x28, r1, 0x5, 0x3, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x28}}, 0x0) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x2c, r10, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r12}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98f}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) 9.67399746s ago: executing program 0 (id=891): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800, &(0x7f0000000700), 0xff, 0x49b, &(0x7f0000001040)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) getpid() socket(0x10, 0x803, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f00000001c0)=ANY=[@ANYBLOB="0200000001000000000000000400000000000000100000000000000020"], 0x24, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x40081, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3130025, 0x0, 0x3, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 8.600746933s ago: executing program 4 (id=893): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r3, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r3, 0x0) r4 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r4, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) write$binfmt_elf64(r4, &(0x7f0000000240)=ANY=[], 0x40000) r5 = accept4$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f0000000c00)=[{{0x0, 0x0, &(0x7f0000000b00)}, 0x1ff}], 0x1, 0x20022, 0x0) recvfrom$unix(r5, &(0x7f00000004c0)=""/249, 0xf9, 0x40, 0x0, 0x0) 8.168232599s ago: executing program 3 (id=894): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newtfilter={0x58, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0xa, 0x4}, {}, {0x7, 0xb}}, [@filter_kind_options=@f_basic={{0xa}, {0x28, 0x2, [@TCA_BASIC_EMATCHES={0x24, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x7, 0x7, 0x6}, {{0x0, 0x0, 0x1}, {0x0, 0x0, 0x1}}}}]}]}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20041090}, 0x8000) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r9) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r10, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000600)="f17537802358a01796ee05d709", 0xd}], 0x1}, 0x40004844) 7.573107424s ago: executing program 2 (id=895): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x10, 0x803, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb2570000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0e000000040000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x20040054) 7.447996431s ago: executing program 0 (id=896): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) io_setup(0x2, &(0x7f0000000080)=0x0) r6 = socket$phonet_pipe(0x23, 0x5, 0x2) io_submit(r5, 0x1, &(0x7f00000001c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r6, &(0x7f00000000c0)="9a", 0x1}]) clock_nanosleep(0x8, 0x0, &(0x7f0000000280), 0x0) 5.707615624s ago: executing program 3 (id=897): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = socket$inet6_dccp(0xa, 0x6, 0x0) bind$inet6(r3, &(0x7f0000000340)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) listen(r3, 0x3) r4 = socket(0x10, 0x3, 0x0) write(r4, &(0x7f0000000580)="240000001e005f031400ff01000000f80700b3586ff606c2e553797c080008e467dc0000", 0x24) recvmmsg(r4, &(0x7f0000005180), 0x400000000000166, 0x1a000, 0x0) 5.664567626s ago: executing program 0 (id=898): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket$unix(0x1, 0x1, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0x10, 0xfff1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x2, 0x81, 0x7, 0x8, 0x8}, {0x6, 0x1, 0xd, 0x6, 0x6, 0xfb8e000}, 0x6, 0x4, 0x111e}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x24000011}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0x6}, {0x2, 0xb}, {0xffe0, 0xb}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10, 0xf, 0x0, 0x4}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2404c0f1}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 5.519601975s ago: executing program 2 (id=899): r0 = socket(0x840000000002, 0x3, 0xff) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000080), &(0x7f00000000c0)=0xc) ioctl$BLKROSET(0xffffffffffffffff, 0x125d, &(0x7f0000000080)=0x3f) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000140)={@initdev={0xac, 0x1e, 0x1, 0x0}, @local}, 0xc) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000440)=ANY=[@ANYBLOB="e00000017f"], 0x14) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) ppoll(&(0x7f0000000080)=[{r3, 0x8108}], 0x1, 0x0, 0x0, 0x0) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x8012, r3, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r3, 0xc0045006, &(0x7f00000001c0)=0x5) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x503, 0x0, 0xfffffffc, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}, @IFLA_MASTER={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x8000c62) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x1002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0xb, 0xc, &(0x7f0000000840)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 5.324389317s ago: executing program 0 (id=900): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0xa1001) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, 0x0) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000000)=0x17680000) socket$inet6_tcp(0xa, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.dequeue\x00', 0x275a, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) creat(&(0x7f0000000240)='./file0\x00', 0x122) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="9400000013004f0a000200"/20, @ANYRES32=r3, @ANYRES8], 0x94}, 0x1, 0x0, 0x0, 0x8080}, 0x20008841) write$binfmt_misc(r4, &(0x7f0000000000), 0xfffffecc) splice(r3, 0x0, r5, 0x0, 0x8201, 0x4) 5.156006846s ago: executing program 1 (id=901): mkdir(0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) read$FUSE(0xffffffffffffffff, &(0x7f0000002500)={0x2020}, 0x2020) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x3e, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x6) setgroups(0x0, 0x0) setregid(0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) ioctl$TIOCSERGETLSR(r3, 0x5459, &(0x7f0000000000)) 4.103406668s ago: executing program 3 (id=902): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x0) r2 = syz_usb_connect$cdc_ncm(0x1, 0x6e, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r2) connect$can_bcm(r0, &(0x7f0000000140)={0x1d, r1}, 0x10) socket$alg(0x26, 0x5, 0x0) r3 = syz_io_uring_setup(0xbda, &(0x7f0000000640)={0x0, 0xec25, 0x8, 0x1, 0x40000333}, &(0x7f0000000dc0)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r3, 0x847ba, 0x0, 0xe, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x1d, r1}, 0x10, &(0x7f0000000100)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4044) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) r8 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) write$FUSE_INIT(r8, &(0x7f0000004200)={0x50, 0x0, 0x0, {0x7, 0x21, 0xffffffff, 0x50339398, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, 0x40, 0x6}}, 0x50) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=@getchain={0x24, 0x11, 0x1, 0x0, 0x2000001, {0x0, 0x0, 0x0, r7, {0x1}, {0x9, 0xc}, {0xfff2, 0x6}}}, 0x24}}, 0x40044) 4.062237171s ago: executing program 2 (id=903): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x6) socket$pppl2tp(0x18, 0x1, 0x1) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) socket$netlink(0x10, 0x3, 0x8000000004) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000000203010400000000ffffffff000000000800010001"], 0x28}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x1c, 0x2, 0x3, 0x201, 0x0, 0x0, {0x7}, [@NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x2427}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000810}, 0x20004090) 4.061699171s ago: executing program 0 (id=904): setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r2 = socket(0x1, 0x803, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="7fff0000000000002800128009000100766c616e000000001800028006000100340200000c0002001f0000001e00000008000500", @ANYRES32=r3], 0x50}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002bad700000400000130000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080003000000000008000b0003000000"], 0x4c}}, 0x4040000) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="500000001000210400000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa888e16000002800128009000100766c616e00000000180002800c0002000e0000000a000000060001000004000008000500", @ANYRES32=r9], 0x50}}, 0x2) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r10}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 4.058871971s ago: executing program 1 (id=905): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0xb, 0x0, &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0) syz_mount_image$jfs(&(0x7f0000000080), &(0x7f00000024c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000001000)=ANY=[], 0xfd, 0x631c, &(0x7f00000027c0)="$eJzs3c1vHGcdB/Df7JtfQlurh6pUCLkvvJTSJE5KCBRoe4ADlx5Qj6BGrltFpIASg9LKIq584cCJvwCExBEhjogDNy49cOXGiRORbCRQTwwa7/Mks5vd2IntnY3n85Gcmd88s/Yz+53Zl8zOPgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAxHe/8721IiLe/llasBLxqehGdCKWqno1IpZWV/L6vYh4Ovab46mI6C9EVLff/+eJiFci4uPHI3b3ttarxRcO2Y9v/+Hvv/3BmTf/9vv+uf/+cbP76rT1bt785X/+dOto2wwAAABtU5ZlWaS3+c+k9/edpjsFAMxEfv4vk7z81Ne/+uebf56n/qjVarVaPYO6rpzsVr2IiO36barXDE7HA8AjZjs+aboLNEj+rdaLiDMPc8PF4+8LMFuHPddfnHA/aMbu3tZ6kfIt6s8Hq8P2vH+M5L9d3Lm+Y9r0IOP73az2r53oxpNT+rM0nP3rjLoyF3L+nfH83x62D9J6982/OHr+szIt/8Hw0qfWyfl3x/Mfc9LH/6zsRGdi/m2V8+89UP5d+QMAAAAAwBzL//+/0vD534Wjb8qh3O/87+qM+gAAAAAAAAAAx+2o4//dYfw/AAAAmFvVe/XKrx+/u2zad7FVy98qIh4bWx9omXSxzHLT/QAAAAAAAAAAAACANukNP8P7VhHRj4jHlpfLsqx+6sbrB3XU2z/q2r790A7FxKVNP8gDAMDQx4+PXctfRCxGxFvpu/76y8vLZbm4tFwul0sL+fXsYGGxXKq9r83TatnC4BAvk3uDsvpli7Xb1R30fvmg9vHfV/2tQdk9RMeOST/dm1OaGwobAJLhs9GuZ6RTpiyfmPbiA0Y4/k+hlVhper9i/jW9mwIAAAAnryzLskhf5/1MOuffabpTAMBM5Of/8fMCR6o7U9ojjuf3q9VqtVqtfqi6rpzsVr2IiO36barXDIbjB4BHzHZ80nQXaJD8W60XEU833QlgrhVNd4ATsbu3tV6kfIv680Ea3z1/FmQk/+1i/3b59pOmBxn/jMms9q+d6MaTU/rz1Iz6ME9y/p3x/N8etg/Seied/6xMy3+wf8lc++T8u+P5jzk9+Xcm5t9WOf/eA+XflT8AAAAAAMyx/P//K4c5/9tLxSk9/7s6oz4AAAAAAAAAwHHb3dtaz9e95vP/n5mwnus/T6ecf/Gg+S+lefk/0nL+nbH8vzi2Xrc2f/uNu8f/v/e21n+3+a9P5+lh81/IM0Xas4q0RxTpLxXpw0bH/MGgnX53UP2lftHp9tJnfso7nTk/sm4n3R9l/924GtdiI9ZG2que9kfaL4y09+5pvzjS3k/fO1Au5fazsR4/jmvxzn77YPRun2jxgPunPKA959/1+N9KOf9e7afKfzm1F2PTyu2POvcc9/vTGE4n/Z3Xr372F+dPfnMOtBPdO9tWV23fcw30Z/8+OTOIn97YuH725pXNzetrkSYjSy9EmhyznH9//2fh7uP/88P2/ABUP15vfzSYnP/m9PznxU70pub/fG2+2t4XZ9y3JuT8B+kn5/9Oap98/D/K+U8//l9qoD8AAAAAAAAAAAAAAABwP2VZ7l8i+npEXErX/zR1bSYAMFuvLw6f/8skL1cfe/39MxHz1B+1Wq1Wt7CuKyd7rV5ExF/qt6leM/x80i8DAObZ/yLiH013gsbIv8Xy9/1V0xea7gwwUzc++PCHV65d27h+o+meAAAAAAAAAAAPK4//uVob//mFiFgZW29k/Nc3YvWo43/28sydAUaPeaDvKXY6g26nNtz4s7E/PvfZ4fjb947//VzcO/53HhO3W9+OKfoHtA8OaF84oH1x4tK7aU280KMm5/9sbbzzKv9nxoZfb8P4r+Nj3rdBzv+52v5c5f+FsfXq+Ze/mbv8tw+74k50RvI/t/n+T87d+ODDl6++f+W9jfc2fnRxbe38xUuXLl++fO7dq9c2zg//PZlez4Gcfx772udA2yXnnzOXf7vk/D+Xavm3S87/86mWf7vk/PPrPfm3S84/v/eRf7vk/F9MtfzbJef/pVTLv11297YWqvxfSrX82yUf/19OtfzbJef/cqrl3y45/7Opln+75PzPpfoQ+ft6+FMk55/PcDn+2yXnv5Zq+bdLzv9CquXfLjn/i6mWf7vk/F9JtfzbJef/lVTLv11y/pdSLf92yfl/NdXyb5ec/+VUy79dcv5fS7X82yXn//VUy79dcv6vplr+7ZLz/0aq5d8uOf9vplr+7ZLz/1aq5d8uOf/XUi3/drn7/f9mzJgxk2eafmQCAAAAAAAAAAAAAMbN4uPETW8jAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPyfHTgQAAAAAADyf22EqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqKuzAgQAAAAAAkP9rI1RVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVh7+5i5Drr+4Gf2TevHZIYCMHJ38AmMSEkS3ZtJ37h3xQT3gOUAgmFvuC43rVZ6tjGa5dAkWxqKJEwKqqoml60BYTaSFWFVXFBK0pzUfXlqrQX9KaiqoTUqAooREVqK8hWM+d5np2ZnZ2z6x2vz5zz+UjJb3fmnDnPnHnO2fnt+jsHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANrd9qb5zzWyLGv+1/rf9ix7UfPrrVPbW7e9/lqPEAAAANion7b+/9yN6YZDa1ipbZm/e+U/fmNpaWkp++Do745/aWkp3TGVZeNbsqx1X3T53z/UaF8muJhNNkbavh8p2Pxowf1jBfePF9w/UXD/loL7JwvuX7EDVtia/z6m9WC7Wl9uz3dpdlM23rpvV4+1Lja2jIzE3+W0NFrrLI0fyxayE9l8NtuxfL5so7X8t25rbuvtWdzWSNu2djZnyI8+dTSOoRH28a6ObS0/ZvSDN2ZTz//oU0f/+Oyzt/Sqhbuh4/Hycd51e3Ocnwm35GNtZFvSPonjHGkb584er8loxzgbrfWaX3eP87k1jnN0eZibqvs1n8xGWl9/p7Wfxtp/rZf2085w23/fkWXZheVhdy+zYlvZSLat45aR5ddnMp+RzcdoTqWXZGPrmqe3rWGeNuvcrs552n1MxNf/trDe2CpjaH+ZfvDpiRWv+3rnadR81qsdK91zcNDHSlnmYJwX32k96Sd6zsFd4fl/6s7V52DPudNjDqbn3TYHby+agyMTo60xpxeh0VpneQ7u7lh+tLWlRqs+c2f/OThz9rHTM4uf+OTrFh47cnz++PzJvbt3z+7dt+/AgQMzxxZOzM/m/7/CvV1+27KRdAzcHvZdPAZe07Vs+1Rd+srgjsPJPsfh9q5lB30cjnU/ucbmHJAr53R+bDzc3OmTl0ayVY6x1utz98aPw/S8247DsbbjsOfPlB7H4dgajsPmMqfvXtt7lrG2/3qN4Wr9LNjeNge73490z8FBvx8pyxycDPPiX+9e/WfBzjDeJ6bX+35kdMUcTE83nHuat6T3+5MHWqXXvLy1ecd1E9m5xfkz9z5+5OzZM7uzUDbFS9vmSvd83db2nLIV83Vk3fP10MIrn7i1x+3bw76afF3zf5OrvlbNZe67t/9r1frp1nt/dty6JwtlwDZ7f/b6ad7cn6mX7LM/m8t8Zmbj78VTX9p2/h1f5fwb+/4X8u2lh7o4Oj6WH7+jae+Md5yPO1+qsda5q9Ha9nMzazsfj4f/Nvt8fFOf8/GOrmUHfT4e735y8XzcKPptx8Z0v56TYZ6cmO1/Pm4us2PPeufkWN/z8R2hNsL+f23oFFJf1DZ3Vpu3aVtjY+PheY3FLXTO070dy4+H3qy5raf2XNk8veuO/LFG07NbtlnzdKpr2UHP03S+Wm2eNop++3Zlll/PuFfzeXHT3v7ztLnM0/dt/Ny5NX7Zdu6cKJqD46MTzdGOp0mYn++XtsY5eG92NDuVncjmWvdOtOZTo7Wt6fvXNgcnwn+bfa7c0WcO3tW17KDnYPo5ttrca4ytfPID0P16ToZ58eT9/edgc5k37x/se9e7wi1pmbb3rt2/X1vtd163du2mq/k7r+Y4/2Z//9/NNpc5cWC9fWb//XRPuOW6/KaJ9v3UffyudkzNZZuzn3aEcT57YPX91BxPc5kvHVzjfDqUZdn5jz3Y+n1v+PvKn5/77jc6/u7S62865z/24A+vP/a36xk/AMPvhbxsy3/Wtf1lai1//wcAAACGQuz7R0JN9P8AAABQGbHvj/8qPNH/AwAAQGXEvn8s1KQm/f+ONz+78ML5LCXzl4J4f9oND+XLxYzrbPh+amlZ8/YHvzb/4788v7Ztj2RZ9pOHfqPn8jseiuPKTYVxXn5L5+0rVzy/pu0/+sjycu359S+Hx4/PZ63ToFcEdzbLsm/d+IXWdqY+dKlVn37o0VZ934UnLjaXee5g/n1c/5mX5sv/QQj/Hjp2pGP9Z8J++H6os+/svT/iel+/9Nqd+z+wvL24XuP2G1pP+8kP548bPyfnixfz5eN+Xm38f/X5p77eXP7xV/ce//mR3uN/Kjzu10L9n1fky7e/Bs3v43qfDeOP24vr3fvVb/cc/+XP5cuffmu+3KOhxu3fFb7f9dZnF9r31+ONIx3PK3tbvlzc/ux3f7t1f3y8+Pjd4588fKljf3TPj6f/OX+cma7l4+1xO9FfdG2/+Tjt8zNu/6nferRjPxdt//L7nnlF83G7t39P13KjXet3f2LTH372Cz23F8dz6M9OdzyfQ+8Nx3HY/pMfDvMx3P+/l7/Qsd3o0fd2nn/i8l/efr7j+URvfz7f/uU3HG/V/5j68e9f96Lrb7jwqua+y7LvvD9/vKLtH/+jUx3j/8rNd7dej3h/zOh3b381cftnPj598tTiuYW5tr3a+uycd+Xj2TK5dVtzvDeGc2v394dPnf3I/Jmp2anZLJuq7kfoXbGvhvrDvFxY7/p3PxJez1t/71vb7vynz8fb/+Xh/PZL78x/br0mLPfFcPv2/PVbamxw+0/ednPr+G48nX/fkWMfgJ27/vPAmhYMz7/7fUGc76df9pHWfmje1/q5EY/rDY7/e3P543wz7Nel8MnMt9+8vL325eNnI1x6f368b3j/hdNcfF3/JLze7/5+/vhxXPH5fi+8j/n2js7zXZwf3zw/0v34rU/xuBDOJ9mF/P64VNzfl567uefw4ueQZBduaX3/O+lxblnX01zN4icWZ04snDz3+MzZ+cWzM4uf+OThx06dO3n2cOuzPA9/tGj95fPTttb5aW5+333Z7NYsy05ls5twwhr4+NMHAq1t/KcfOTq3f/bOufljR84dO/vI6fkzx48uLh6dn1u888ixY/MfL1p/Ye6B3XsO7t2/Z/r4wtwDBw4e3HtweuHkqeZuzAdVYN/sr02fPHO4tcriA/cd3H3//ffNTj92am7+gf2zs9PnitZv/Wyabq7969Nn5k8cObvw2Pz04sIn5x/YfXDfvj2Fnwb42Olji1MzZ86dnDm3OH9mJn8uU2dbNzd/9hWtTzUt/lv+frZbI/8gvuw99+xLn8/a9LVPr/pQ+SJdHyD6bPgsmn948ekDa/k+9v3joSY16f8BAACgDmLfPxFqov8HAACAyoh9/5ZQE/0/AAAAVEbs+ydDTWrS/8v/y/+vLf+f3y//X6/8/+mP5bnSYc//x/y8/H89XOP8/4a3L/8v/1+9/H/zqyHN/69z/PL/8v+sVLb8f+z7t2ZZLft/AAAAqIPY928LNdH/AwAAQGXEvv+6UBP9PwAAAFRG7PtfFGpSk/7/auf/x/tse4jy/3uKAlfVz/+7/r/8fzac+f/44sj/18a68/cfeLjjW/n/QP5f/l/+X/5f/p8NW70bvFb5/9j3Xx9qUpP+HwAAAOog9v03hJro/wEAAKAyYt9/Y6iJ/h8AAAAqI/b920NNatL/u/6/6//L/8v/Vzr/v9Hr/7cNRv5/OLj+f3/rzv9vkf9fW/5/Uv5/GPP/44Mdf7nz/4XDl//nqijb9f9j3//iUJOa9P8AAABQB7Hvf0moif4fAAAAKiP2/S8NNdH/AwAAQGXEvv+mUJOa9P/y//L/dc7/P5V/AKj8v/x/z+0XX/8//0r+v1zk//tz/f8Crv9fr/z/gMdf7vz/oK//P/6W7vXl/+mlbPn/2Pe/LNSkJv0/AAAA1EHs+28ONdH/AwAAQGXEvv/loSb6fwAAAKiM2PfvCDWpSf8v/y//X+f8fyT/L//fa/vF+f+c/H+5yP/3J/9fYHs2Eb6S/5f/l//vl//v8eZX/p9eivL/P93k/H/s+28JNalJ/w8AAAB1EPv+W0NN9P8AAABQGbHv/3+hJvp/AAAAqIzY9+8MNalJ/y//L/8v/1+v/P89E/L/8v/VVs38/+DelMj/F3D9f/n/sub/l17oPBh72Nzr/6+0nvz/lqIHozKK8v/v2eT8f+z7XxFqbsdYXfp/AAAAqIPY978y1ET/DwAAAJUR+/5XhZro/wEAAKAyYt8/FWpSk/5f/r9a+f8//esnX5VtLP9/Uf6/2vn/Cl//P04D+f+aG8L8f0cM1vX/hyr/P5LJ/3eQ/6/R9f97cP1/eilb/j/2/beFmtSk/wcAAIA6iH3/7aEm+n8AAACojNj33xFqov8HAACAyoh9/65Qk5r0//L/1cr/R67/L//fb/sVzf8n8v/1NoT5/w5XJf/fdpDK/xdw/X/5/9rn/+O7X/l/BqNs+f/Y97861KQm/T8AAADUQez77ww10f8DAABAZcS+/zWhJvp/AAAAqIzY998ValKT/l/+X/5f/l/+X/6/9/bl/4eT/H9/683/T8j/y//L/9cs/+/6/wxW2fL/se9/bahJTfp/AAAAqIPY998daqL/BwAAgMqI/34z/3ev+n8AAACootj3T4ea1KT/vzr5/8k1bVv+X/5/s/P/Dfl/+X/5/8qT/+/P9f8LyP/L/8v/r8z/byl86i3y//RStvx/7PtfF2pSk/4fAAAA6iD2/feGmuj/AQAAoDJi3z8TaqL/BwAAgMqIff9sqElN+n/X/5f/r1P+v/zX/+/Micr/5+T/5f/XQ/6/P/n/AvL/8v9Vy/9n2RXn/3e7/j8DULb8f+z7d4eaFDR+g/55DAAAAFw9se/fE2pSk7//AwAAQB3Evn9vqIn+HwAAACoj9v33hZrUpP+X/69q/n8pk/8fxvy/6//L/8v/b5T8f3/y/wWGKf/fXEn+v1TjL2X+fxDX/5f/ZwPKlv+Pff/9oSY16f8BAACgDmLfvy/URP8PAAAAlRH7/v2hJqH/7/XvugEAAIDhEvv+A6EmNfn7v/x/RfL/v/n3Hdt2/X/5/37bH0z+f6v8f6jy/+VS0fx/92FxxeT/CwxT/t/1/0s3fvl/+X9WKlv+P/b9B0NNatL/AwAAQB3Evv/1oSb6fwAAAKiM2Pf//1AT/T8AAABURuz7fybUpCb9v/x/RfL/XeT/5f/7bd/1/+X/q6yi+f+BqVT+f0T+X/6/XOOX/5f/Z6Wrn/+PX60t/x/7/gdCTWrS/wMAAEAdxL7/Z0NN9P8AAABQGbHvf0Ooif4fAAAAKiP2/YdCTWrS/8v/y//L/8v/X538/xuybmXM/zcnj/x/tcj/91ep/L/r/8v/l2z88v/y/6xUtuv/x77/jaEmNen/AQAAoA5i3/9gqIn+HwAAACoj9v1vCjXR/wMAAEBlxL7/zaEmQ93/rz3rJv8v/y//L//v+v+9ty//P5zk//uT/y8g/y//L/8v/89AlS3/H/v+t4SaDHX/DwAAALSLff9bQ030/wAAAFAZse9/W6iJ/h8AAAAqI/b9bw81qUn/L/8v/y//L/8v/997+/L/w0n+vz/5/wLy//L/8v/y/wxU2fL/se9/R6hJTfp/AAAAqIPY9z8UaqL/BwAAgMqIff87Q030/wAAAFAZse9/V6hJTfp/+X/5f/l/+X/5/97bl/8fTvL//cn/Fxja/P/Eup7maq51fn7Yxy//L//PSmXL/8e+/92hJjXp/wEAAKAOYt//c6Em+n8AAACojNj3vyfURP8PAAAAlRH7/p8PNalJ/y//L/9frvz/0vn29eT/5f+zQeX/myutLf+fQrTy/8NJ/r8/+f8CPfL/W4Yi/+/6/2UYv/y//D8rlS3/H/v+94aa1KT/BwAAgDqIff/7Qk30/wAAAFAZse9/f6iJ/h8AAAAqI/b9D4ea1KT/v/r5/4kbVtt2tfP/W8uc/09PuXz5f9f/l/93/X/5/42R/+9P/r/A0F7/X/6/DOOX/5f/Z6Wy5f9j3/9IqMHzA/5xCwAAAFxDse//QKhJTf7+DwAAAHUQ+/5fCDXR/wMAAEBlxL7/g6EmNen/ryj/H0Ovrv+fuP5/5/jl/6OxjvlRp/z/ZNvrmeal/L/8/yaQ/+9P/r+A/L/8f5nz/2E2b11lffl/yqhs+f/Y938o1KQm/T8AAADUQez7fzHURP8PAAAAw2BxLQvFvv+XQk30/wAAAFAZse//5VCTmvT/V//6/6uT/5f/L1/+/x2u/1/f6/83T4Ly/xUg/9+f/H8B+X/5/zLn/wvI/1NGZcv/x77/V0JNVm38fvhfa3iaAAAAQInEvv/DoSY1+fs/AAAA1EHs+w+Hmuj/AQAAoDJi3/9oqElN+n/5/+78f7yiqvx/PfP/g77+f+f8kP8vdf7f9f8rYnD5/5dfn2Xy//L/8v/y/5uZ/x+R/6dyypb/j33/kVCTmvT/AAAAUAex7//VUBP9PwAAAFRG7PuPhpro/wEAAKAyYt8/F2pSxf6/O1R7bfP/4+XM/7v+/5Xm/38i/1+1/P/5TP5f/n8Iuf5/f/L/BeT/5f9d/789/7/9SvL/zXkq/09Utvx/7PvnQ02q2P8DAABAvaRfB8e+/1ioif4fAAAAKiP2/cdDTfT/AAAAUBmx7/9IqElN+v/C/H+8HH5trv8v/+/6/5uR/x/rWL6k+f8yX/+/tYr8v/x/L/L//cn/F5D/l/+X/3f9fwaqbPn/2PcvhJrUpP8HAACAOoh9/0dDTfT/8H/s3UeTHed1x+EGiDBT5Sr7I3jtlZf2iv4I3njhnau8tOlI5UBSOUtUpLJE5ZxzonLOOVM5R1KJYhVUGJxzMOGiL4Dpmdv9vs+z8BFQBGeGHNL+G/XTCwAA0Izc/f8Rt9j/AAAA0Izc/f8Zt3Sy/zf4/r/+X/8/i/7/xDDc6P3/xfX/O/T/+v9V9P/j9P9r6P/1//p//T+Tmlv/n7v/urilk/0PAAAAPcjd/19xi/0PAAAAzcjd/99xi/0PAAAAzcjd/z9xSyf7X/+v/++9/x828v7/3j9e/3+B/l//P4UD/f2p1X/cpaLwS/b/f/8P1/+b/l//r/8fpf/X/+v/2W9u/X/u/v+NWzrZ/wAAANCD3P3/F7fY/wAAANCM3P3/H7fY/wAAANCM3P3Xxy2d7H/9v/5f/6//39P/36b/1/8vm/f/x+n/19D/6//1//p/JjW3/j93/z3ilk72PwAAAPQgd/894xb7HwAAAJqRu/9ecYv9DwAAAM3I3X/vuKWT/a//b7n/39L/N9X/n/H+/76vR/+v/19F/z9O/7+G/l//r//X/zOpufX/ufvvE7d0sv8BAACgB7n77xu32P8AAADQjNz994tb7H8AAABoRu7++8ctnex//X/L/b/3/9vq/4/p/X/9v/5/4W4dLv474bj7/zMT/PcP6P/n3f8Pg/5/zGX386u/vOV8/peg/9f/c9Dc+v/c/Q+IW/5pGM5c7RcJAAAAzEru/gfGLZ38/j8AAAD0IHf/DXGL/Q8AAADNyN1/Y9zSyf7X/+v/r67/v/D9ov/X/+v/9f9z4/3/cYfv///ub6779377f+//j/P+/9T9//nvDP0/yza3/j93/01xSyf7HwAAAHqQu/9BcYv9DwAAAM3I3f/guMX+BwAAgGbk7n9I3NLJ/tf/t9b/X7Pn1+3q/3dqF+//6//1//r/1un/x3n/f42df81t1w/1//p/7//r/zmcufX/ufsfGrd0sv8BAACgB7n7Hxa32P8AAADQjNz9D49b7H8AAABoRu7+R8Qty9v/W1fzi/T/rfX/e3/d0b3/r//X/+v/D9f/D/r/I6L/H6f/X+Ny3v+/ZgH9/1V+12y6nz+sTX/++n/9PwfNrf/P3f/IuGV5+x8AAAC4hNz9j4pb7H8AAABoRu7+R8ct9j8AAAA0I3f/Y+KWTva//l//v4z+Pz+C/l//f/T9f/L+/zLp/8fp/9e4nP7f+/+XpP/X/+v/2W9u/X/u/sfGLZ3sfwAAAOhB7v7HxS32PwAAADQjd//j4xb7HwAAAJqRu/8JcUsn+1//r/9fRv/v/X/9f2vv/+v/j4r+f5z+fw39v/5f/6//Z1Jz6/9z998ct3Sy/wEAAKAHufufGLfY/wAAANCM3P1PilvsfwAAAGhG7v4nxy2d7H/9v/5f/6//1/+v/vj6/2XS/4/T/6+h/9f/6//1/0xqRv3/rl+1NTwlbulk/wMAAEAPcvc/NW6x/wEAAKAZufufFrfY/wAAANCM3P23xC2d7H/9/zT9/9aKn7vC/n8n52ur/98ehkH/P3Ta/2/v+vtZ35f6f/3/MdD/j9P/r3H+H8hzJ/T/+n/9v/6fiRxv/3/+3/nj/30AufufHrd0sv8BAACgB7n7nxG32P8AAADQjNz9z4xb7H8AAABoRu7+Z8Utnex//b/3/73/r//3/v/qj6//Xyb9/zj9/xre/z90P39y0P/v6v9P6//1/7073v5//Y9z9z87bjpz+qq/RAAAAGBmcvc/J27p5Pf/AQAAoAe5+58bt9j/AAAAsFA3H/iZ3P3Pi1s62f/6/2n7/zO7fk7/r//f//2h/9f/6/+Pnv5/nP5/Df2/9/+9/6//Z1Jz6/9z9z8/bulk/wMAAEAPcvffGrfY/wAAANCM3P0viFvsfwAAAGhG7v4Xxi2d7H/9v/f/9f/6f/3/6o+v/18m/f84/f8a+n/9/2b7/7MX/+Oq/n/8XylX0v9vr/j1+n+OwhX0/+fOnbvhyPv/3P0vils62f8AAADQg9z9L45b7H8AAABoRu7+l8Qt9j8AAAA0I3f/S+OWTva//r/T/j+/1ZfV/984DPp//b/+X/8/Tv8/Tv+/hv5f/+/9f/0/k5rb+/+5+18Wt3Sy/wEAAKAHuftfHrfY/wAAANCM3P2viFvsfwAAAGhG7v5Xxi2d7H/9f6f9v/f/9f/6/+Pu/+8a9P/HYhH9/6qHt8Pc+/+b9P/6/xHd9f///I97fqj/1/9z0Nz6/9z9r4pbOtn/AAAA0IPc/a+OW+x/AAAAaEbu/tfELfY/AAAANCN3/2vjplOd7H/9v/5f/6//1/+v/vjH/P7/mWEY9P8TWET/P2Lu/f807//v/6f8Iv2//n/Jn7/+X//PQXPr/3P3vy5u6WT/AwAAQA9y978+brH/AQAAoBm5+98Qt9j/AAAA0Izc/W+MWzrZ//p//b/+X//ffP9/0yL6f+//T+TWvT/U/+8zj/7/0vT/+v8lf/6b6P+3d/1n/T9Lsqn+P3f/m+KWTvY/AAAA9CB3/5vjFvsfAAAAmpG7/y1xi/0PAAAAzcjd/9a4pZP9r//X/19J/5+fp/6/rf7/7Oz6/609f75O3v/X/0/E+//j9P9rzLX/P3Hx6P/n+/k38v7/zfp/pjS39/9z978tbulk/wMAAEAPcve/PW79v27tfwAAAGhG7v53xC32PwAAADQjd/8745ZO9r/+X//v/X/9f/Pv/+v/u6L/H6f/X2Ou/X/Q/8/782+k//f+P5OaW/+fu/9dcUsn+x8AAAB6kLv/3XGL/Q8AAADNyN3/nrjF/gcAAIBm5O6/LW7pZP/r//X/+n/9v/7/wt9D/X8b9P/jjqf/39b/6/+rnz8R/xTo//vu/0+cWveradXc+v/c/e+NWzrZ/wAAANCD3P3vi1vsfwAAAGhG7v73xy32PwAAACzSquwkd/8H4pZO9r/+X/+v/9f/6/9Xf3z9/zJtpP/Pbwr9v/f/Qz/9/9/u+dHS3v/f/7+/9P/e/2d6c+v/c/d/MG7pZP8DAABAD3L3fyhusf8BAACgGbn7Pxy32P8AAADQjNz9H4lbOtn/+n/9v/5f/z/S/w/DLSf0/0H/vwze/x+n/19D/7/R9/OX/vnr//X/HDS3/j93/0fjlk72PwAAAPQgd//H4hb7HwAAAJqRu//jcYv9DwAAAM3Y2f0Zl3W4/6fp/0/p/1f8nP5f/7//+2OB/b/3//X/i6P/H6f/X0P/r//X/+v/mdRh+/9d/3fhJP3/J3Z+1dbwybilk/0PAAAAPcjd/6m4xf4HAACAZuTu/3TcYv8DAABAM3L3fyZu6WT/e/9f/7+M/v/cuXM36P/1/3u/nov9/+36f4r+f5z+fw39v/5f/6//Z1Jze/8/d/9n45ZO9j8AAAD0IHf/5+IW+x8AAACakbv/83GL/Q8AAADNyN3/hbilk/2v/59B/7912P5/+8DHbq//9/6//r+X9/9P6v8PSf8/Tv+/Rov9/9blf/mb7ucPa9Ofv/5f/89Bc+v/c/d/MW7pZP8DAABAD3L3fylusf8BAACgGbn7vxy32P8AAADQjNz9X4lbOtn/+v/j6//P/7Xr5f3/7WH156//1//r/73/f9T0/+P0/2u02P9fgU3380v//PX/+n8Omlv/n7v/q3HL3uF3+sq+SgAAAGBOcvd/LW7p5Pf/AQAAoAe5+78et9j/AAAA0Izc/d+IWzrZ//r/Gbz/32D/7/3/1d8f+v9Z9/8nN9T/7/xp9P/T0f+P0/+vof/X/+v/J+r/87tZ/9+7tf3/9nCs/X/u/m/GLZ3sfwAAAOhB7v5vxS32PwAAADQjd/+34xb7HwAAAJqRu//2uGXX/l/VdrdC/6//1//r//X/qz++9/+XSf8/7nL7/7PD4fr/pP/X/+v/e+3/vf/PBXN7/z93/3fiFr//DwAAAItz+hI/n7v/u3GL/Q8AAADNyN3/vbjF/gcAAIBm5O7/ftxyx8lNfUrHSv+v/9f/6//1/6s/vv5/mfT/47z/v4b+f4p+/lr9fxv9/zDo/zm8ufX/uft/ELf4/X8AAABoRu7+H8Yt9j8AAAA0I3f/j+IW+x8AAACakbv/x3FLJ/tf/6//P2T/v5Nm6v8vaLf/zz+D/n/K/v+vdv1V1f9PR/8/Tv+/hv7f+//6f+//M6m59f+5+38St3Sy/wEAAKAHuft/GrfY/wAAANCM3P0/i1vsfwAAAGhG7v6fxy2d7P+N9f/xl1r/v/j+3/v/R97/n//qNt3/p377/+01/f++wncl7/8fD/3/OP3/Gvp//X9H/f+/7Pux/p+jMLf+P3f/L+KWTvY/AAAA9CB3/y/jFvsfAAAAmpG7/1dxi/0PAAAAzcjd/+u4pZP97/1//b/+f+79/xze/0+T9//DMNLf3x13Dv3/cATv/+v/j4b+f5z+f7X6G6X/1/931P/vp//nKMyt/8/d/5u4pZP9DwAAAD3I3f/buMX+BwAAgGbk7r8jbrH/AQAAoBm5+++MWzrZ//p//b/+X//v/f/VH1//v0z6/3Gb7P//9a/Xf1jv/2+8/89PQf8/Xf9/zXD1/f/ZQf/Pws2t/79zz6/ub/8DAABAD3638z+3ht/HLfY/AAAANCN3/x/iFvsfAAAAmpG7/49xSyf7f03/f7b+QP3/KP3/3s9f/7/6+0P/r//X/x89/f+48f5/1z/Nnb3/X/T/3v/3/r/+n0nNrf/P3f+nuKWT/Q8AAAA9yN1/V9xi/wMAAEAzcvf/OW6x/wEAAKAZufvvjls62f/e/19S/3+t/l//r//X/+v/19D/j9vk+/+XQ/+v/1/y56//1/9z0Nz6/9z9fwkAAP//EtJHVQ==") syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x85a4c8, 0x0, 0xff, 0x0, &(0x7f0000000040)) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x18808, 0x0, 0xf7, 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x2) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10004893}, 0x80) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 3.024897422s ago: executing program 2 (id=906): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f00000005c0)='..&-^\x00', &(0x7f0000000640)='/selinux/status\x00', 0x0) socket(0x1e, 0x805, 0x0) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x2) r4 = dup2(r3, r3) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000000)={'\x00', 0x40, 0xe, 0x1, 0x5, 0x10}) ioctl$BLKTRACESTART(r3, 0x1274, 0x0) ioctl$BLKTRACESTOP(r4, 0x1275, 0x0) 1.504826832s ago: executing program 2 (id=907): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) timerfd_settime(0xffffffffffffffff, 0x3, 0x0, 0x0) write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, 0x0, 0x0) socket$nl_audit(0x10, 0x3, 0x9) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f, {0x0, 0x0, 0x0, 0xffffffff, 0xfffffff6}}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), r4) sendmsg$FOU_CMD_GET(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)={0x40, r5, 0x1, 0x70bd26, 0x25dfdbff, {}, [@FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e23}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @private0={0xfc, 0x0, '\x00', 0x1}}, @FOU_ATTR_AF={0x5, 0x2, 0xa}]}, 0x40}}, 0x4) 285.346043ms ago: executing program 2 (id=908): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) r6 = openat$cgroup_subtree(r5, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) write$cgroup_subtree(r6, 0x0, 0x0) 0s ago: executing program 3 (id=909): r0 = timerfd_create(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setns(0xffffffffffffffff, 0x24020000) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/fib_triestat\x00') lseek(r4, 0x10000000005, 0x0) timerfd_settime(r0, 0x3, &(0x7f0000000140), 0x0) clock_adjtime(0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.141' (ED25519) to the list of known hosts. [ 48.670543][ T4173] cgroup: Unknown subsys name 'net' [ 48.817463][ T4173] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 49.950954][ T4173] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 51.715321][ T4194] chnl_net:caif_netlink_parms(): no params data found [ 51.739716][ T4186] chnl_net:caif_netlink_parms(): no params data found [ 51.774360][ T4185] chnl_net:caif_netlink_parms(): no params data found [ 51.814319][ T4187] chnl_net:caif_netlink_parms(): no params data found [ 51.824360][ T4197] chnl_net:caif_netlink_parms(): no params data found [ 51.911093][ T4194] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.919149][ T4194] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.927463][ T4194] device bridge_slave_0 entered promiscuous mode [ 51.954919][ T4194] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.961979][ T4194] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.970182][ T4194] device bridge_slave_1 entered promiscuous mode [ 51.989704][ T4186] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.996857][ T4186] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.005164][ T4186] device bridge_slave_0 entered promiscuous mode [ 52.030748][ T4185] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.038066][ T4185] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.045889][ T4185] device bridge_slave_0 entered promiscuous mode [ 52.052836][ T4186] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.059891][ T4186] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.067927][ T4186] device bridge_slave_1 entered promiscuous mode [ 52.097481][ T4185] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.104666][ T4185] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.112182][ T4185] device bridge_slave_1 entered promiscuous mode [ 52.120555][ T4194] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.138661][ T4194] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.148088][ T4197] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.155467][ T4197] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.163076][ T4197] device bridge_slave_0 entered promiscuous mode [ 52.182223][ T4187] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.189455][ T4187] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.197050][ T4187] device bridge_slave_0 entered promiscuous mode [ 52.206620][ T4186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.218965][ T4197] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.226368][ T4197] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.234341][ T4197] device bridge_slave_1 entered promiscuous mode [ 52.247682][ T4187] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.254933][ T4187] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.262400][ T4187] device bridge_slave_1 entered promiscuous mode [ 52.277897][ T4186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.291549][ T4185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.314725][ T4194] team0: Port device team_slave_0 added [ 52.335200][ T4185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.353890][ T4186] team0: Port device team_slave_0 added [ 52.360832][ T4194] team0: Port device team_slave_1 added [ 52.368921][ T4187] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.380198][ T4197] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.398008][ T4186] team0: Port device team_slave_1 added [ 52.409292][ T4187] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.419726][ T4197] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.454644][ T4185] team0: Port device team_slave_0 added [ 52.472905][ T4194] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.480145][ T4194] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.506235][ T4194] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.524465][ T4194] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.531432][ T4194] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.557633][ T4194] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.570066][ T4197] team0: Port device team_slave_0 added [ 52.577459][ T4185] team0: Port device team_slave_1 added [ 52.584344][ T4197] team0: Port device team_slave_1 added [ 52.590327][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.597552][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.623461][ T4186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.636510][ T4187] team0: Port device team_slave_0 added [ 52.642745][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.649746][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.675882][ T4186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.703895][ T4187] team0: Port device team_slave_1 added [ 52.755062][ T4197] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.762020][ T4197] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.788297][ T4197] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.808794][ T4194] device hsr_slave_0 entered promiscuous mode [ 52.815672][ T4194] device hsr_slave_1 entered promiscuous mode [ 52.822570][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.830071][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.856199][ T4185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.874998][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.881939][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.908105][ T4185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.919213][ T4197] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.926461][ T4197] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.952359][ T4197] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.965355][ T4186] device hsr_slave_0 entered promiscuous mode [ 52.971832][ T4186] device hsr_slave_1 entered promiscuous mode [ 52.979461][ T4186] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 52.987467][ T4186] Cannot create hsr debugfs directory [ 53.006698][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.013846][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.039999][ T4187] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.081457][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.088586][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.114928][ T4187] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.157530][ T4197] device hsr_slave_0 entered promiscuous mode [ 53.164495][ T4197] device hsr_slave_1 entered promiscuous mode [ 53.171070][ T4197] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 53.178706][ T4197] Cannot create hsr debugfs directory [ 53.195770][ T4185] device hsr_slave_0 entered promiscuous mode [ 53.202263][ T4185] device hsr_slave_1 entered promiscuous mode [ 53.209549][ T4185] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 53.217456][ T4185] Cannot create hsr debugfs directory [ 53.253786][ T4187] device hsr_slave_0 entered promiscuous mode [ 53.260333][ T4187] device hsr_slave_1 entered promiscuous mode [ 53.266743][ T4187] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 53.274602][ T4187] Cannot create hsr debugfs directory [ 53.374231][ T1111] Bluetooth: hci1: command 0x0409 tx timeout [ 53.453670][ T13] Bluetooth: hci4: command 0x0409 tx timeout [ 53.459720][ T13] Bluetooth: hci3: command 0x0409 tx timeout [ 53.481547][ T13] Bluetooth: hci0: command 0x0409 tx timeout [ 53.487888][ T13] Bluetooth: hci2: command 0x0409 tx timeout [ 53.551162][ T4194] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 53.563225][ T4194] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 53.574015][ T4194] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 53.583914][ T4194] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 53.619849][ T4186] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 53.633600][ T4186] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 53.649302][ T4186] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 53.658789][ T4186] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 53.708544][ T4187] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 53.717042][ T4187] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 53.737310][ T4187] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 53.766631][ T4187] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 53.788318][ T4197] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 53.801543][ T4197] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 53.831755][ T4197] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 53.840406][ T4197] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 53.870344][ T4194] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.931628][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 53.941455][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 53.949850][ T4185] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 53.959252][ T4185] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 53.970689][ T4185] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 53.982742][ T4194] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.992942][ T4185] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 54.010814][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 54.021258][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 54.030229][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.037373][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.048545][ T4186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.070119][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 54.079590][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 54.088280][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 54.097922][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.104999][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.112492][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 54.121309][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 54.141847][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 54.149991][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 54.168290][ T4186] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.186401][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 54.196137][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 54.204842][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 54.216270][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 54.226681][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 54.235099][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.242199][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.251578][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 54.276911][ T4187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.285676][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 54.295224][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 54.306599][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 54.315683][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 54.324101][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.331118][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.341922][ T4197] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.356400][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 54.365759][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 54.374464][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 54.382714][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 54.394530][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 54.409767][ T4194] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 54.420502][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 54.428842][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 54.449585][ T4187] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.459948][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 54.469978][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 54.479168][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 54.501420][ T4197] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.518840][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 54.529799][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 54.540010][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 54.557542][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.564656][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.575400][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 54.582931][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 54.590813][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 54.599381][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 54.608182][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.615239][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.622725][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 54.631268][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 54.639706][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 54.656714][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 54.666591][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 54.683752][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 54.692239][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 54.704293][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.711355][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.720744][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 54.729488][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 54.745965][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.753030][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.774782][ T4185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.784458][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 54.792660][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 54.801831][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 54.810412][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 54.818794][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 54.835691][ T4186] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 54.867798][ T4185] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.874910][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 54.883345][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 54.894616][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 54.902941][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 54.917419][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 54.926249][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 54.934779][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 54.942923][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 54.951262][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 54.959830][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 54.968148][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 54.977215][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 54.986088][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 54.996143][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 55.005228][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 55.012707][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.020428][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 55.028851][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 55.037705][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 55.047313][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 55.061701][ T4197] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 55.073192][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 55.089704][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 55.100881][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.108000][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.124080][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 55.135910][ T4187] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 55.150098][ T4187] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 55.167608][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 55.177990][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 55.189153][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 55.198505][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 55.228411][ T4194] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.246019][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 55.265977][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 55.277932][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.285050][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.314142][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 55.322948][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 55.337201][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 55.346117][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 55.355250][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 55.363938][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 55.419443][ T4185] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 55.435316][ T4185] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 55.453800][ T2357] Bluetooth: hci1: command 0x041b tx timeout [ 55.459875][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 55.474740][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 55.486280][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 55.495047][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 55.503121][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 55.512507][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 55.520967][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 55.536560][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 55.544318][ T2357] Bluetooth: hci2: command 0x041b tx timeout [ 55.544373][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 55.555493][ T2357] Bluetooth: hci0: command 0x041b tx timeout [ 55.558803][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 55.569132][ T2357] Bluetooth: hci3: command 0x041b tx timeout [ 55.577206][ T2357] Bluetooth: hci4: command 0x041b tx timeout [ 55.593060][ T4186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.621331][ T4187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.629962][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 55.639293][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 55.647157][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 55.656008][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 55.664675][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 55.672111][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 55.681463][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 55.689785][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 55.714479][ T4194] device veth0_vlan entered promiscuous mode [ 55.735763][ T4197] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.749876][ T4194] device veth1_vlan entered promiscuous mode [ 55.777345][ T1226] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 55.798139][ T1226] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 55.807974][ T1226] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 55.822386][ T1226] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 55.865844][ T1226] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 55.875649][ T1226] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 55.884959][ T1226] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 55.894438][ T1226] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 55.903135][ T1226] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 55.911642][ T1226] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 55.919583][ T1226] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 55.928200][ T1226] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 55.937758][ T4186] device veth0_vlan entered promiscuous mode [ 55.950094][ T4185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.975696][ T1226] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 55.986734][ T1226] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 55.996902][ T4194] device veth0_macvtap entered promiscuous mode [ 56.015094][ T4186] device veth1_vlan entered promiscuous mode [ 56.038909][ T4194] device veth1_macvtap entered promiscuous mode [ 56.059668][ T4197] device veth0_vlan entered promiscuous mode [ 56.074808][ T4197] device veth1_vlan entered promiscuous mode [ 56.092361][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.101521][ T1226] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 56.109833][ T1226] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 56.120057][ T1226] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 56.128185][ T1226] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 56.136099][ T1226] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 56.145807][ T1226] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 56.154326][ T1226] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 56.162251][ T1226] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 56.170583][ T1226] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 56.179244][ T1226] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 56.187753][ T1226] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 56.196417][ T1226] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 56.212568][ T4186] device veth0_macvtap entered promiscuous mode [ 56.245337][ T1226] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 56.253086][ T1226] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 56.262323][ T1226] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 56.270790][ T1226] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 56.281996][ T1226] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 56.290542][ T1226] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 56.299096][ T1226] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 56.308088][ T1226] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 56.316553][ T1226] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 56.324825][ T1226] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 56.332819][ T1226] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 56.341561][ T1226] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 56.349237][ T1226] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 56.358705][ T4186] device veth1_macvtap entered promiscuous mode [ 56.367730][ T4197] device veth0_macvtap entered promiscuous mode [ 56.377649][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.395736][ T4194] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.404777][ T4194] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.414652][ T4194] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.423351][ T4194] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.434361][ T1226] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 56.442208][ T1226] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 56.450197][ T1226] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 56.458881][ T1226] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 56.467712][ T1226] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 56.476215][ T1226] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 56.486928][ T4187] device veth0_vlan entered promiscuous mode [ 56.497022][ T4197] device veth1_macvtap entered promiscuous mode [ 56.517271][ T1226] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 56.526442][ T1226] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 56.534102][ T1226] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 56.541953][ T4185] device veth0_vlan entered promiscuous mode [ 56.556125][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.567296][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.578799][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.609411][ T4185] device veth1_vlan entered promiscuous mode [ 56.617963][ T1226] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 56.626877][ T1226] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 56.635644][ T1226] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 56.645263][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.656816][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.668321][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.678459][ T4187] device veth1_vlan entered promiscuous mode [ 56.702478][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.713054][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.727562][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.739454][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.750101][ T4197] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.759621][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 56.768320][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 56.776461][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 56.785949][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 56.794771][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 56.803052][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 56.812813][ T4186] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.822283][ T4186] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.831363][ T4186] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.840216][ T4186] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.857839][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.871233][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.882891][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.895363][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.906387][ T4197] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.918260][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 56.926801][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 56.935584][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 56.966688][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 56.976748][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 56.993303][ T4197] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.006950][ T4197] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.015989][ T4197] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.024728][ T4197] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.065746][ T1226] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.084926][ T1226] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.105518][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.113764][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.118996][ T4185] device veth0_macvtap entered promiscuous mode [ 57.134574][ T4187] device veth0_macvtap entered promiscuous mode [ 57.149103][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 57.160413][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 57.168248][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 57.178216][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 57.186745][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 57.194940][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 57.212672][ T4187] device veth1_macvtap entered promiscuous mode [ 57.244581][ T4185] device veth1_macvtap entered promiscuous mode [ 57.323830][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.326249][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.331761][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.350767][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.362645][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.373257][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.383583][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.394105][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.406703][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.417277][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.427908][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.438376][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.448951][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.460033][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.470650][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.486954][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.496223][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.508093][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.518485][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.528965][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.539241][ T2357] Bluetooth: hci1: command 0x040f tx timeout [ 57.545945][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.556495][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.566793][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.580829][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.592174][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.614154][ T2357] Bluetooth: hci4: command 0x040f tx timeout [ 57.622639][ T2357] Bluetooth: hci3: command 0x040f tx timeout [ 57.635135][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 57.643031][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 57.650904][ T2357] Bluetooth: hci0: command 0x040f tx timeout [ 57.657215][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 57.663491][ T2357] Bluetooth: hci2: command 0x040f tx timeout [ 57.670472][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 57.679859][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 57.689537][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 57.699054][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 57.707860][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 57.716849][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 57.726730][ T4187] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.736010][ T4187] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.744921][ T4187] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.754577][ T4187] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.765782][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.776884][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.787208][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.797936][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.808254][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.818894][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.828758][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.839174][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.849664][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.864800][ T4185] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.874357][ T4185] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.883123][ T4185] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.892265][ T4185] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.905820][ T1226] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 57.917415][ T1226] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 57.942907][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.952694][ T1226] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.958980][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.967711][ T1226] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.989683][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 57.997780][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 58.086781][ T1226] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.120189][ T1226] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.155292][ T4271] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.172834][ T4271] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.185080][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 58.229099][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 58.237709][ T4299] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.264651][ T4299] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.284506][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.299121][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.311710][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.321532][ T1226] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 58.332327][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.335002][ T1226] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 58.353320][ T4300] device syzkaller0 entered promiscuous mode [ 58.369817][ T1226] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 58.441345][ T4302] loop2: detected capacity change from 0 to 8192 [ 59.730724][ T4305] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1'. [ 59.880583][ T4295] Bluetooth: hci1: command 0x0419 tx timeout [ 59.886739][ T4295] Bluetooth: hci2: command 0x0419 tx timeout [ 59.892848][ T4295] Bluetooth: hci0: command 0x0419 tx timeout [ 59.899028][ T4295] Bluetooth: hci3: command 0x0419 tx timeout [ 59.905187][ T4295] Bluetooth: hci4: command 0x0419 tx timeout [ 62.641081][ T4336] sched: RT throttling activated [ 63.167389][ T4343] loop3: detected capacity change from 0 to 1024 [ 64.634493][ T4343] ======================================================= [ 64.634493][ T4343] WARNING: The mand mount option has been deprecated and [ 64.634493][ T4343] and is ignored by this kernel. Remove the mand [ 64.634493][ T4343] option from the mount to silence this warning. [ 64.634493][ T4343] ======================================================= [ 64.839756][ T4343] EXT4-fs (loop3): mounted filesystem without journal. Opts: stripe=0x0000000000008001,auto_da_alloc,nombcache,nobarrier,init_itable,errors=remount-ro,. Quota mode: none. [ 64.880838][ T4360] tipc: Started in network mode [ 65.007796][ T4360] tipc: Node identity ea8e0ce8c6c7, cluster identity 4711 [ 65.482074][ T4360] tipc: Enabled bearer , priority 0 [ 65.763947][ T4365] device syzkaller0 entered promiscuous mode [ 65.818775][ T4379] tipc: Resetting bearer [ 66.703553][ T4378] loop2: detected capacity change from 0 to 512 [ 67.155145][ T4379] tipc: Disabling bearer [ 67.212722][ T4378] EXT4-fs (loop2): Ignoring removed bh option [ 67.234068][ T4378] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 67.261668][ T4240] tipc: Node number set to 742984936 [ 67.280381][ T4378] EXT4-fs (loop2): 1 truncate cleaned up [ 67.286749][ T4378] EXT4-fs (loop2): mounted filesystem without journal. Opts: noload,max_dir_size_kb=0x0000000000000001,bh,noload,data_err=ignore,usrjquota=,,errors=continue. Quota mode: none. [ 69.251385][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #39a!!! [ 69.262528][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #39a!!! [ 69.341521][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #302!!! [ 69.361429][ T4394] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 69.455757][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 69.464893][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 69.832523][ T4401] loop4: detected capacity change from 0 to 8192 [ 70.067812][ T4401] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 70.450012][ T4419] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 71.081027][ T1430] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.087787][ T1430] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.110264][ T4401] REISERFS (device loop4): using ordered data mode [ 71.165991][ T4401] reiserfs: using flush barriers [ 71.232881][ T4401] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 71.312593][ T4401] REISERFS (device loop4): checking transaction log (loop4) [ 71.403878][ T4401] REISERFS (device loop4): Using r5 hash to sort names [ 71.441427][ T4401] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 73.808721][ T25] audit: type=1326 audit(1768888913.979:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4437 comm="syz.1.36" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8b5c1bfcb9 code=0x0 [ 75.957541][ T1326] cfg80211: failed to load regulatory.db [ 76.007432][ T4459] tipc: Started in network mode [ 76.012334][ T4459] tipc: Node identity 6ea99787634d, cluster identity 4711 [ 76.163657][ T4459] tipc: Enabled bearer , priority 0 [ 76.267096][ T4459] tipc: Resetting bearer [ 76.296878][ T4471] device syzkaller0 entered promiscuous mode [ 76.649884][ T4471] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 77.033027][ T4457] tipc: Resetting bearer [ 77.339051][ T4457] tipc: Disabling bearer [ 77.447177][ T4493] xt_NFQUEUE: number of total queues is 0 [ 79.445403][ T4505] loop2: detected capacity change from 0 to 512 [ 79.599645][ T4325] tipc: Node number set to 233084807 [ 79.612261][ T4505] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 79.635598][ T4505] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 79.657941][ T4505] EXT4-fs (loop2): 1 truncate cleaned up [ 79.664262][ T4505] EXT4-fs (loop2): mounted filesystem without journal. Opts: usrquota,usrjquota="data=ordered,noload,grpid,grpjquota="init_itable,jqfmt=vfsold,noblock_validity,,errors=continue. Quota mode: writeback. [ 80.350046][ T4523] EXT4-fs error (device loop2): ext4_append:79: inode #2: comm syz.2.50: Logical block already allocated [ 80.470757][ T4529] netlink: 16 bytes leftover after parsing attributes in process `syz.1.55'. [ 80.482809][ T4525] lo speed is unknown, defaulting to 1000 [ 80.489007][ T4525] lo speed is unknown, defaulting to 1000 [ 80.496460][ T4525] lo speed is unknown, defaulting to 1000 [ 80.506533][ T4525] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 80.519288][ T4525] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 80.545017][ T4525] lo speed is unknown, defaulting to 1000 [ 80.551895][ T4525] lo speed is unknown, defaulting to 1000 [ 80.559884][ T4525] lo speed is unknown, defaulting to 1000 [ 80.641271][ T4525] lo speed is unknown, defaulting to 1000 [ 80.648146][ T4525] lo speed is unknown, defaulting to 1000 [ 80.865701][ T4539] loop2: detected capacity change from 0 to 512 [ 80.895399][ T4536] tipc: Enabled bearer , priority 0 [ 80.916556][ T4536] device syzkaller0 entered promiscuous mode [ 80.984800][ T4536] tipc: Resetting bearer [ 81.037519][ T4535] tipc: Resetting bearer [ 81.054215][ T4539] EXT4-fs (loop2): Ignoring removed oldalloc option [ 81.072836][ T4539] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 81.090853][ T4539] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 81.104132][ T4539] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2806: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 81.118923][ T4539] EXT4-fs (loop2): 1 truncate cleaned up [ 81.125388][ T4539] EXT4-fs (loop2): mounted filesystem without journal. Opts: quota,oldalloc,barrier=0x0000000000000003,debug_want_extra_isize=0x000000000000007c,block_validity,jqfmt=vfsv1,,errors=continue. Quota mode: writeback. [ 81.136278][ T4535] tipc: Disabling bearer [ 81.205853][ T4550] tipc: Enabling of bearer rejected, failed to enable media [ 81.309265][ T4543] sch_tbf: burst 1 is lower than device syzkaller0 mtu (1514) ! [ 82.211478][ T4562] loop0: detected capacity change from 0 to 1024 [ 83.141571][ T4569] tipc: Enabled bearer , priority 0 [ 83.364531][ T4573] ufs: You didn't specify the type of your ufs filesystem [ 83.364531][ T4573] [ 83.364531][ T4573] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 83.364531][ T4573] [ 83.364531][ T4573] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 83.396082][ T4573] ufs: ufstype=old is supported read-only [ 83.402964][ T4573] blk_update_request: I/O error, dev loop5, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 86.861419][ T4421] hfsplus: b-tree write err: -5, ino 4 [ 87.675443][ T4569] tipc: Disabling bearer [ 88.504281][ T4586] loop4: detected capacity change from 0 to 512 [ 88.863930][ T4585] loop0: detected capacity change from 0 to 4096 [ 88.924950][ T4586] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 89.048600][ T4596] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 89.136139][ T4592] ceph: No mds server is up or the cluster is laggy [ 89.191005][ T4586] EXT4-fs (loop4): orphan cleanup on readonly fs [ 89.191255][ T4586] EXT4-fs error (device loop4): ext4_ext_check_inode:501: inode #3: comm syz.4.70: pblk 0 bad header/extent: invalid eh_max - magic f30a, entries 7, max 0(0), depth 0(0) [ 89.202234][ T4586] EXT4-fs error (device loop4): ext4_quota_enable:6445: comm syz.4.70: Bad quota inode: 3, type: 0 [ 89.220017][ T4586] EXT4-fs warning (device loop4): ext4_enable_quotas:6486: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 89.220074][ T4586] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 89.220155][ T4586] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 89.715271][ T4599] netlink: 28 bytes leftover after parsing attributes in process `syz.3.73'. [ 89.718789][ T4599] netlink: 28 bytes leftover after parsing attributes in process `syz.3.73'. [ 90.034040][ T4599] device bond0 entered promiscuous mode [ 90.034057][ T4599] device bond_slave_0 entered promiscuous mode [ 90.034189][ T4599] device bond_slave_1 entered promiscuous mode [ 90.043133][ T4599] device bridge0 entered promiscuous mode [ 90.053116][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): hsr1: link becomes ready [ 91.684960][ T4629] device syzkaller0 entered promiscuous mode [ 92.665031][ T4643] netlink: 'syz.1.81': attribute type 9 has an invalid length. [ 92.672888][ T4643] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.81'. [ 92.938476][ T4646] syz.0.84 uses obsolete (PF_INET,SOCK_PACKET) [ 94.236268][ T4661] loop2: detected capacity change from 0 to 512 [ 94.499369][ T4666] netlink: 4 bytes leftover after parsing attributes in process `syz.4.87'. [ 94.521670][ T4666] device gretap0 entered promiscuous mode [ 94.527968][ T4666] device macvtap1 entered promiscuous mode [ 96.002951][ T4673] device syzkaller0 entered promiscuous mode [ 96.087284][ T4668] device syzkaller0 entered promiscuous mode [ 96.177221][ T4661] EXT4-fs error (device loop2): ext4_orphan_get:1400: inode #15: comm syz.2.90: inode has both inline data and extents flags [ 96.252424][ T4661] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.90: couldn't read orphan inode 15 (err -117) [ 96.595707][ T4661] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 97.378654][ T4680] tipc: Started in network mode [ 97.720823][ T4680] tipc: Node identity 0a818c15082b, cluster identity 4711 [ 98.252322][ T4680] tipc: Enabled bearer , priority 0 [ 98.324600][ T4680] tipc: Resetting bearer [ 98.392672][ T4683] device syzkaller0 entered promiscuous mode [ 98.431169][ T4683] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 98.495439][ T4679] tipc: Resetting bearer [ 98.518775][ T4679] tipc: Disabling bearer [ 98.538803][ T4691] loop0: detected capacity change from 0 to 64 [ 104.172445][ T4746] netlink: 'syz.1.110': attribute type 10 has an invalid length. [ 105.075623][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!! [ 105.084993][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 105.178278][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 105.238781][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 105.280582][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!! [ 107.760232][ T4746] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 107.839394][ T4746] syz.1.110 (4746) used greatest stack depth: 20336 bytes left [ 110.722220][ T4791] netlink: 'syz.4.121': attribute type 10 has an invalid length. [ 110.952636][ T4791] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 113.269974][ T4807] ODEBUG: Out of memory. ODEBUG disabled [ 114.754092][ T4824] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 115.773265][ T4846] netlink: 'syz.4.135': attribute type 10 has an invalid length. [ 115.864139][ T4846] team0: Port device dummy0 added [ 116.830059][ T4835] x_tables: duplicate underflow at hook 1 [ 117.131231][ T4855] loop0: detected capacity change from 0 to 32768 [ 117.421590][ T4863] netlink: 4 bytes leftover after parsing attributes in process `syz.2.142'. [ 117.447555][ T4863] netlink: 4 bytes leftover after parsing attributes in process `syz.2.142'. [ 120.730020][ T25] audit: type=1800 audit(1768888958.579:3): pid=4866 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.139" name="file1" dev="loop0" ino=7 res=0 errno=0 [ 122.659370][ T4877] tipc: Enabled bearer , priority 0 [ 123.127096][ T4877] tipc: Resetting bearer [ 123.220954][ T4889] loop1: detected capacity change from 0 to 32798 [ 123.245343][ T4874] tipc: Disabling bearer [ 123.326481][ T4889] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 123.335028][ T4889] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 123.364440][ T4889] gfs2: fsid=syz:syz.0: fatal: invalid metadata block [ 123.364440][ T4889] bh = 2073 (magic number) [ 123.364440][ T4889] function = gfs2_meta_buffer, file = fs/gfs2/meta_io.c, line = 493 [ 123.383736][ T4889] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 123.391137][ T4889] gfs2: fsid=syz:syz.0: File system withdrawn [ 123.397273][ T4889] CPU: 0 PID: 4889 Comm: syz.1.147 Not tainted syzkaller #0 [ 123.404572][ T4889] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 123.414640][ T4889] Call Trace: [ 123.417935][ T4889] [ 123.420883][ T4889] dump_stack_lvl+0x188/0x250 [ 123.425585][ T4889] ? kobject_uevent_env+0x371/0x890 [ 123.430809][ T4889] ? show_regs_print_info+0x20/0x20 [ 123.436029][ T4889] ? load_image+0x400/0x400 [ 123.440556][ T4889] ? kobject_uevent_env+0x371/0x890 [ 123.445776][ T4889] ? load_image+0x400/0x400 [ 123.450308][ T4889] gfs2_withdraw+0x1149/0x1490 [ 123.455114][ T4889] ? gfs2_lm+0x240/0x240 [ 123.459381][ T4889] ? gfs2_meta_read+0x8a9/0xa60 [ 123.464258][ T4889] ? gfs2_meta_new+0x160/0x160 [ 123.469050][ T4889] gfs2_meta_check_ii+0x6e/0x80 [ 123.473927][ T4889] gfs2_meta_buffer+0x232/0x310 [ 123.478798][ T4889] gfs2_inode_refresh+0xbb/0xff0 [ 123.483767][ T4889] ? do_promote+0x71a/0xab0 [ 123.488294][ T4889] ? gfs2_inode_metasync+0xf0/0xf0 [ 123.493430][ T4889] ? __lock_acquire+0x7d10/0x7d10 [ 123.498491][ T4889] inode_go_lock+0x127/0x470 [ 123.503110][ T4889] do_promote+0x741/0xab0 [ 123.507472][ T4889] finish_xmote+0x4df/0xb00 [ 123.512012][ T4889] do_xmote+0x7b6/0x1120 [ 123.516290][ T4889] gfs2_glock_nq+0xc7a/0x1550 [ 123.521016][ T4889] gfs2_lookupi+0x416/0x600 [ 123.525538][ T4889] ? verify_lock_unused+0x140/0x140 [ 123.530762][ T4889] ? gfs2_lookup_simple+0x100/0x100 [ 123.535987][ T4889] ? gfs2_lookupi+0x40e/0x600 [ 123.540693][ T4889] ? crc32_le_base+0x755/0xcf0 [ 123.545483][ T4889] gfs2_lookup_simple+0xab/0x100 [ 123.550449][ T4889] ? gfs2_lookup_by_inum+0xf0/0xf0 [ 123.555581][ T4889] ? memset+0x1e/0x40 [ 123.559584][ T4889] ? number+0xd08/0xf60 [ 123.563778][ T4889] init_journal+0x1c3/0x22f0 [ 123.568392][ T4889] ? pointer+0xc90/0xc90 [ 123.572660][ T4889] ? format_decode+0xb0b/0x1300 [ 123.577544][ T4889] ? end_bio_io_page+0x100/0x100 [ 123.582501][ T4889] ? vsnprintf+0x1b21/0x1c20 [ 123.587127][ T4889] ? snprintf+0xe5/0x140 [ 123.591400][ T4889] ? vscnprintf+0x80/0x80 [ 123.595752][ T4889] ? gfs2_glock_nq_num+0x17a/0x1b0 [ 123.600888][ T4889] init_inodes+0xdb/0x320 [ 123.605247][ T4889] gfs2_fill_super+0x16b2/0x1f00 [ 123.610221][ T4889] ? gfs2_reconfigure+0xd30/0xd30 [ 123.615272][ T4889] ? gfs2_glock_nq_num+0x82/0x1b0 [ 123.620338][ T4889] ? sb_set_blocksize+0xa5/0xe0 [ 123.625222][ T4889] get_tree_bdev+0x3f1/0x610 [ 123.629841][ T4889] ? gfs2_reconfigure+0xd30/0xd30 [ 123.634892][ T4889] gfs2_get_tree+0x4d/0x1e0 [ 123.639428][ T4889] vfs_get_tree+0x88/0x270 [ 123.643875][ T4889] do_new_mount+0x24a/0xa40 [ 123.648411][ T4889] __se_sys_mount+0x2e3/0x3d0 [ 123.653114][ T4889] ? __x64_sys_mount+0xc0/0xc0 [ 123.657907][ T4889] ? lockdep_hardirqs_on+0x94/0x140 [ 123.663134][ T4889] ? __x64_sys_mount+0x1c/0xc0 [ 123.667922][ T4889] do_syscall_64+0x4c/0xa0 [ 123.672358][ T4889] ? clear_bhb_loop+0x30/0x80 [ 123.677059][ T4889] ? clear_bhb_loop+0x30/0x80 [ 123.681762][ T4889] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 123.687674][ T4889] RIP: 0033:0x7f8b5c1c0f4a [ 123.692115][ T4889] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 123.711737][ T4889] RSP: 002b:00007f8b5a3f9e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 123.720172][ T4889] RAX: ffffffffffffffda RBX: 00007f8b5a3f9ee0 RCX: 00007f8b5c1c0f4a [ 123.728168][ T4889] RDX: 00002000000000c0 RSI: 0000200000012500 RDI: 00007f8b5a3f9ea0 [ 123.736166][ T4889] RBP: 00002000000000c0 R08: 00007f8b5a3f9ee0 R09: 0000000000200001 [ 123.744159][ T4889] R10: 0000000000200001 R11: 0000000000000246 R12: 0000200000012500 [ 123.752153][ T4889] R13: 00007f8b5a3f9ea0 R14: 0000000000012615 R15: 00002000000005c0 [ 123.760169][ T4889] [ 123.764483][ T4889] gfs2: fsid=syz:syz.0: can't lookup journal index: 0 [ 126.769778][ T4929] Option '2 O€ÉÇ—Wz [ 126.769778][ T4929] ­ f:ó–ã5úÉùÔAŠÀ- [ 126.769778][ T4929] ¶ÉØ)‰dÁÕ::ûÞl]GYï;ŸÌmÁ~Rã N+o¸ý{j\°' to dns_resolver key: bad/missing value [ 127.840544][ T4931] loop3: detected capacity change from 0 to 2048 [ 130.630916][ T25] audit: type=1326 audit(1768888970.639:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4944 comm="syz.0.162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4cb3e3cb9 code=0x7ffc0000 [ 130.657043][ T25] audit: type=1326 audit(1768888970.639:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4944 comm="syz.0.162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4cb3e3cb9 code=0x7ffc0000 [ 130.761698][ T25] audit: type=1326 audit(1768888970.649:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4944 comm="syz.0.162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=305 compat=0 ip=0x7fc4cb3e3cb9 code=0x7ffc0000 [ 132.043378][ T25] audit: type=1326 audit(1768888970.649:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4944 comm="syz.0.162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4cb3e3cb9 code=0x7ffc0000 [ 132.087465][ T25] audit: type=1326 audit(1768888970.649:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4944 comm="syz.0.162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4cb3e3cb9 code=0x7ffc0000 [ 132.111798][ T25] audit: type=1326 audit(1768888970.649:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4944 comm="syz.0.162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7fc4cb3e3cb9 code=0x7ffc0000 [ 132.135010][ T25] audit: type=1326 audit(1768888970.649:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4944 comm="syz.0.162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4cb3e3cb9 code=0x7ffc0000 [ 132.157350][ T25] audit: type=1326 audit(1768888970.649:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4944 comm="syz.0.162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc4cb3e3cb9 code=0x7ffc0000 [ 133.459612][ T25] audit: type=1326 audit(1768888970.649:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4944 comm="syz.0.162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4cb3e3cb9 code=0x7ffc0000 [ 133.467034][ T1430] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.490471][ T1430] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.490509][ T25] audit: type=1326 audit(1768888970.649:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4944 comm="syz.0.162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=327 compat=0 ip=0x7fc4cb3e3cb9 code=0x7ffc0000 [ 134.728651][ T4972] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 134.827834][ T4972] overlayfs: failed to look up (tracing) for ino (-66) [ 136.434867][ T4983] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 138.580046][ T4993] device syzkaller0 entered promiscuous mode [ 138.610281][ T4993] TC_ACT_REPEAT abuse ? [ 142.035452][ T5020] tipc: Started in network mode [ 142.035538][ T5020] tipc: Node identity d6804a84e2ae, cluster identity 4711 [ 142.036853][ T5020] tipc: Enabled bearer , priority 0 [ 142.056624][ T5018] xt_NFQUEUE: number of queues (8) out of range (got 65537) [ 142.092612][ T5018] lo speed is unknown, defaulting to 1000 [ 142.403909][ T5017] device syzkaller0 entered promiscuous mode [ 143.438138][ T1108] tipc: Node number set to 875448964 [ 145.636472][ T5036] tipc: Resetting bearer [ 145.826398][ T5036] tipc: Resetting bearer [ 145.856543][ T5043] loop2: detected capacity change from 0 to 1024 [ 145.877726][ T5036] tipc: Disabling bearer [ 146.072433][ T5043] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 146.089863][ T5043] EXT4-fs (loop2): Mount option "noacl" will be removed by 3.5 [ 146.089863][ T5043] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 146.089863][ T5043] [ 146.287205][ T5046] loop3: detected capacity change from 0 to 32768 [ 146.312379][ T5043] EXT4-fs (loop2): Ignoring removed oldalloc option [ 147.426058][ T5043] EXT4-fs (loop2): mounted filesystem without journal. Opts: mblk_io_submit,abort,noacl,oldalloc,bsddf,max_dir_size_kb=0x00000000000007b1,nolazytime,nodelalloc,abort,nodelalloc,inode_readahead_blks=0x0000000000000400,,errors=continue. Quota mode: none. [ 147.463736][ T5057] loop0: detected capacity change from 0 to 2048 [ 147.815116][ T5057] EXT4-fs (loop0): mounted filesystem without journal. Opts: nobarrier,noinit_itable,i_version,init_itable,,errors=continue. Quota mode: none. [ 148.056921][ T4325] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 148.273829][ T5057] ext4 filesystem being mounted at /29/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 148.637277][ T4325] usb 5-1: Using ep0 maxpacket: 8 [ 148.805280][ T5052] fs-verity: sha512 using implementation "sha512-avx2" [ 149.220581][ T4325] usb 5-1: string descriptor 0 read error: -71 [ 149.235405][ T4325] usb 5-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.08 [ 149.244466][ T4325] usb 5-1: New USB device strings: Mfr=1, Product=0, SerialNumber=0 [ 150.488515][ T5075] netlink: 'syz.1.196': attribute type 2 has an invalid length. [ 151.237230][ T4325] usb 5-1: config 0 descriptor?? [ 151.286794][ T4325] usb 5-1: can't set config #0, error -71 [ 151.420777][ T5080] loop3: detected capacity change from 0 to 512 [ 151.462435][ T4325] usb 5-1: USB disconnect, device number 2 [ 151.954061][ T5080] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 152.253046][ T5080] EXT4-fs (loop3): 1 truncate cleaned up [ 152.302247][ T5080] EXT4-fs (loop3): mounted filesystem without journal. Opts: nouid32,errors=remount-ro,user_xattr,init_itable,nodiscard,noquota,. Quota mode: none. [ 152.409567][ T5091] tipc: Enabled bearer , priority 0 [ 152.437982][ T5091] device syzkaller0 entered promiscuous mode [ 152.516059][ T5091] tipc: Resetting bearer [ 152.613875][ T5090] tipc: Resetting bearer [ 152.651890][ T5090] tipc: Disabling bearer [ 163.342956][ T5148] netlink: 4 bytes leftover after parsing attributes in process `syz.1.213'. [ 163.438471][ T5148] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 164.831178][ T5148] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 166.172752][ T5192] loop1: detected capacity change from 0 to 8192 [ 167.604851][ T5192] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 167.614591][ T5192] REISERFS (device loop1): using ordered data mode [ 167.621466][ T5192] reiserfs: using flush barriers [ 167.634436][ T5192] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 167.652109][ T5192] REISERFS (device loop1): checking transaction log (loop1) [ 168.131481][ T5192] REISERFS (device loop1): Using tea hash to sort names [ 168.140741][ T5192] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 168.964018][ T5208] device syzkaller0 entered promiscuous mode [ 171.708173][ T5230] xt_l2tp: v2 doesn't support IP mode [ 172.993242][ T5250] netlink: 'syz.2.236': attribute type 7 has an invalid length. [ 173.081589][ T5250] netlink: 'syz.2.236': attribute type 8 has an invalid length. [ 174.122100][ T5246] netlink: 4 bytes leftover after parsing attributes in process `syz.3.248'. [ 174.142083][ T5246] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 175.008954][ T5246] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 175.283679][ T5277] loop2: detected capacity change from 0 to 8 [ 178.172457][ T5297] delete_channel: no stack [ 179.369391][ T5139] Bluetooth: hci1: command 0x0406 tx timeout [ 179.387626][ T5139] Bluetooth: hci4: command 0x0406 tx timeout [ 179.429148][ T5324] loop2: detected capacity change from 0 to 1024 [ 179.447198][ T5139] Bluetooth: hci2: command 0x0406 tx timeout [ 179.472245][ T5139] Bluetooth: hci3: command 0x0406 tx timeout [ 181.271136][ T5335] loop3: detected capacity change from 0 to 1024 [ 181.662194][ T4430] hfsplus: b-tree write err: -5, ino 4 [ 182.188123][ T5312] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.196367][ T5312] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.748193][ T5312] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 184.986546][ T5312] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.995849][ T5312] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.004717][ T5312] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.013692][ T5312] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.077705][ T5320] netlink: 856 bytes leftover after parsing attributes in process `syz.4.254'. [ 191.591465][ T5410] loop2: detected capacity change from 0 to 256 [ 192.314896][ T5410] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 192.534456][ T5418] delete_channel: no stack [ 192.540707][ T5418] loop1: detected capacity change from 0 to 22 [ 192.717383][ T5419] loop4: detected capacity change from 0 to 256 [ 193.754741][ T5410] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 193.762718][ T5418] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 193.793718][ T5418] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 193.883597][ T5410] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62d793a, utbl_chksum : 0xe619d30d) [ 196.640355][ T5444] xt_recent: Unsupported userspace flags (000000de) [ 196.875493][ T5440] loop1: detected capacity change from 0 to 32768 [ 197.429379][ T5440] XFS: ikeep mount option is deprecated. [ 197.532889][ T5440] XFS (loop1): DAX enabled. Warning: EXPERIMENTAL, use at your own risk [ 197.542024][ T5440] XFS (loop1): DAX unsupported by block device. Turning off DAX. [ 197.549867][ T5440] XFS (loop1): DAX and reflink cannot be used together! [ 197.768535][ T5459] device syzkaller0 entered promiscuous mode [ 198.027799][ T1430] ieee802154 phy0 wpan0: encryption failed: -22 [ 198.094041][ T1430] ieee802154 phy1 wpan1: encryption failed: -22 [ 198.449218][ T5463] loop0: detected capacity change from 0 to 2048 [ 198.668429][ T5467] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 200.169696][ T5463] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 200.187239][ T5487] tipc: Enabled bearer , priority 0 [ 200.478082][ T5489] device syzkaller0 entered promiscuous mode [ 202.750374][ T5489] netlink: 44 bytes leftover after parsing attributes in process `syz.4.299'. [ 202.789711][ T4291] tipc: Node number set to 44731413 [ 202.811409][ T5504] loop1: detected capacity change from 0 to 512 [ 202.826510][ T5487] tipc: Resetting bearer [ 202.846902][ T5504] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities [ 202.849790][ T5501] loop3: detected capacity change from 0 to 64 [ 202.872209][ T5486] tipc: Resetting bearer [ 203.438725][ T5486] tipc: Disabling bearer [ 204.603955][ T5519] netlink: 856 bytes leftover after parsing attributes in process `syz.1.306'. [ 208.008965][ T5548] loop4: detected capacity change from 0 to 32768 [ 209.199168][ T25] kauditd_printk_skb: 5 callbacks suppressed [ 209.199238][ T25] audit: type=1800 audit(1768889044.050:19): pid=5559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.314" name="file1" dev="loop4" ino=7 res=0 errno=0 [ 209.374190][ T5547] loop1: detected capacity change from 0 to 4096 [ 209.869043][ T5547] ntfs3: loop1: Different NTFS' sector size (1024) and media sector size (512) [ 211.497982][ T5547] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 214.563447][ T5587] netlink: 856 bytes leftover after parsing attributes in process `syz.2.324'. [ 214.603923][ T5589] netlink: 4 bytes leftover after parsing attributes in process `syz.4.325'. [ 214.625979][ T5589] blk_update_request: I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 214.638398][ T5589] exFAT-fs (loop4): unable to read boot sector [ 214.644840][ T5589] exFAT-fs (loop4): failed to read boot sector [ 214.651156][ T5589] exFAT-fs (loop4): failed to recognize exfat type [ 216.454164][ T5606] loop1: detected capacity change from 0 to 512 [ 217.131617][ T5604] loop2: detected capacity change from 0 to 4096 [ 217.484268][ T5604] ntfs3: loop2: Different NTFS' sector size (1024) and media sector size (512) [ 217.578111][ T5606] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 217.741017][ T5606] ext4 filesystem being mounted at /62/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 220.418681][ T5604] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 221.986814][ T5646] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 223.797007][ T5644] loop0: detected capacity change from 0 to 8192 [ 224.044037][ T5644] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 224.053681][ T5644] REISERFS (device loop0): using ordered data mode [ 224.060344][ T5644] reiserfs: using flush barriers [ 224.072195][ T5644] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 224.089967][ T5644] REISERFS (device loop0): checking transaction log (loop0) [ 226.979304][ T5661] Process accounting resumed [ 227.008731][ T5644] REISERFS (device loop0): Using tea hash to sort names [ 227.039393][ T5644] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 227.922510][ T5677] loop4: detected capacity change from 0 to 1024 [ 228.254207][ T5677] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 229.287968][ T5679] netlink: 4 bytes leftover after parsing attributes in process `syz.1.348'. [ 229.920304][ T5695] netlink: 4 bytes leftover after parsing attributes in process `syz.2.351'. [ 230.153036][ T5695] device bond_slave_0 entered promiscuous mode [ 230.159546][ T5695] device bond_slave_1 entered promiscuous mode [ 230.736817][ T5695] device macvtap1 entered promiscuous mode [ 230.745317][ T5695] device bond0 entered promiscuous mode [ 230.776674][ T5695] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 230.972692][ T5700] device bond0 left promiscuous mode [ 231.015613][ T5700] device bond_slave_0 left promiscuous mode [ 231.021629][ T5700] device bond_slave_1 left promiscuous mode [ 231.175466][ T5715] loop0: detected capacity change from 0 to 16 [ 231.191284][ T5713] tipc: Enabled bearer , priority 0 [ 231.265591][ T5715] erofs: (device loop0): mounted with root inode @ nid 36. [ 231.374140][ T5719] device syzkaller0 entered promiscuous mode [ 232.368582][ T5713] tipc: Resetting bearer [ 232.424142][ T5712] tipc: Resetting bearer [ 232.609864][ T5712] tipc: Disabling bearer [ 234.632282][ T5740] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 242.792839][ T5801] device syzkaller0 entered promiscuous mode [ 244.883880][ T25] audit: type=1326 audit(1768889155.652:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5816 comm="syz.2.380" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc8ffdcccb9 code=0x0 [ 246.490284][ T5832] Zero length message leads to an empty skb [ 246.519685][ T5835] netlink: 4 bytes leftover after parsing attributes in process `syz.4.386'. [ 250.276568][ T5866] loop3: detected capacity change from 0 to 1024 [ 251.225013][ T5872] xt_CT: No such helper "netbios-ns" [ 251.312591][ T5864] device syzkaller0 entered promiscuous mode [ 251.383802][ T5866] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities [ 252.171001][ T5857] Process accounting resumed [ 252.652704][ T5886] loop1: detected capacity change from 0 to 512 [ 252.713944][ T5886] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 252.736157][ T5886] EXT4-fs (loop1): Test dummy encryption mode enabled [ 252.836868][ T5886] EXT4-fs (loop1): Can't change test_dummy_encryption on remount [ 254.774453][ T5885] loop1: detected capacity change from 0 to 32768 [ 254.794606][ T5885] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 scanned by syz.1.398 (5885) [ 254.820220][ T5885] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 254.830600][ T5885] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 254.840254][ T5885] BTRFS info (device loop1): use zstd compression, level 3 [ 254.847447][ T5885] BTRFS info (device loop1): using free space tree [ 254.853922][ T5885] BTRFS info (device loop1): has skinny extents [ 255.039617][ T5903] loop0: detected capacity change from 0 to 4096 [ 255.585898][ T5903] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 255.636131][ T5885] BTRFS info (device loop1): enabling ssd optimizations [ 257.291560][ T5935] loop3: detected capacity change from 0 to 2048 [ 257.336219][ T5935] EXT4-fs (loop3): Ignoring removed bh option [ 259.159832][ T5935] EXT4-fs (loop3): mounted filesystem without journal. Opts: discard,bh,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none. [ 262.242001][ T5958] loop2: detected capacity change from 0 to 4096 [ 262.315444][ T5974] loop0: detected capacity change from 0 to 512 [ 262.425234][ T5974] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 262.432454][ T5974] EXT4-fs (loop0): Test dummy encryption mode enabled [ 262.448039][ T5958] EXT4-fs (loop2): can't mount with data=, fs mounted w/o journal [ 262.477800][ T5974] EXT4-fs (loop0): Can't change test_dummy_encryption on remount [ 264.144020][ T1430] ieee802154 phy0 wpan0: encryption failed: -22 [ 264.144089][ T1430] ieee802154 phy1 wpan1: encryption failed: -22 [ 264.574129][ T5974] loop0: detected capacity change from 0 to 8 [ 265.921181][ T6000] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 266.116314][ T6009] process 'syz.4.417' launched './file0' with NULL argv: empty string added [ 267.032273][ T6007] device syzkaller0 entered promiscuous mode [ 270.020235][ T6050] netlink: 8 bytes leftover after parsing attributes in process `syz.1.431'. [ 270.043646][ T6047] loop3: detected capacity change from 0 to 512 [ 270.098133][ T6042] Cannot find add_set index 0 as target [ 270.105800][ T6047] EXT4-fs error (device loop3): ext4_orphan_get:1400: inode #15: comm syz.3.433: inode has both inline data and extents flags [ 270.266984][ T6047] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.433: couldn't read orphan inode 15 (err -117) [ 270.375997][ T6055] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 270.390886][ T6047] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 280.032636][ T6107] tipc: Started in network mode [ 280.037693][ T6107] tipc: Node identity 024a6fd7b032, cluster identity 4711 [ 280.045305][ T6107] tipc: Enabled bearer , priority 0 [ 280.054027][ T6107] device syzkaller0 entered promiscuous mode [ 280.450027][ T6111] tipc: Resetting bearer [ 281.963140][ T6111] tipc: Disabling bearer [ 282.298527][ T2357] tipc: Node number set to 2994237399 [ 284.218153][ T6156] netlink: 8 bytes leftover after parsing attributes in process `syz.3.461'. [ 284.227882][ T6156] netlink: 28 bytes leftover after parsing attributes in process `syz.3.461'. [ 284.466201][ T1108] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 284.808151][ T1108] usb 5-1: Using ep0 maxpacket: 32 [ 284.920104][ T6160] loop0: detected capacity change from 0 to 1024 [ 285.013709][ T6160] EXT4-fs (loop0): Ignoring removed bh option [ 285.055620][ T6160] EXT4-fs (loop0): Ignoring removed nobh option [ 285.061943][ T6160] EXT4-fs (loop0): Ignoring removed bh option [ 285.112985][ T6160] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 285.171559][ T1108] usb 5-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 285.180654][ T1108] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 285.418340][ T6168] netlink: 76 bytes leftover after parsing attributes in process `syz.1.465'. [ 285.547814][ T6160] EXT4-fs (loop0): mounted filesystem without journal. Opts: delalloc,data_err=abort,bh,dioread_lock,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 285.744909][ T1108] usb 5-1: Product: syz [ 285.749189][ T1108] usb 5-1: Manufacturer: syz [ 285.753803][ T1108] usb 5-1: SerialNumber: syz [ 285.765161][ T1108] usb 5-1: config 0 descriptor?? [ 285.878329][ T6177] loop2: detected capacity change from 0 to 512 [ 285.921667][ T1108] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 286.594850][ T6181] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:3887: comm syz.0.462: Allocating blocks 497-513 which overlap fs metadata [ 287.272406][ T6177] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 287.293141][ T6181] EXT4-fs (loop0): pa ffff888073cf38c0: logic 128, phys. 385, len 8 [ 287.302810][ T6181] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:4904: group 0, free 0, pa_free 1 [ 287.403178][ T1108] gspca_ov534_9: reg_w failed -110 [ 287.417999][ T6187] hugetlbfs: syz.1.478 (6187): Using mlock ulimits for SHM_HUGETLB is deprecated [ 287.440182][ T6177] EXT4-fs error (device loop2): xattr_find_entry:297: inode #15: comm syz.2.466: corrupted xattr entries [ 287.530201][ T6177] EXT4-fs (loop2): 1 orphan inode deleted [ 287.555670][ T6177] EXT4-fs (loop2): mounted filesystem without journal. Opts: mb_optimize_scan=0x0000000000000000,min_batch_time=0x0000000000000002,debug_want_extra_isize=0x0000000000000068,nobarrier,nodiscard,journal_ioprio=0x0000000000000002,,errors=continue. Quota mode: none. [ 290.324704][ T6195] loop3: detected capacity change from 0 to 2048 [ 291.773040][ T6195] hpfs: filesystem error: dir band size mismatch: dir_band_start==7b318cc2, dir_band_end==7b318cc3, n_dir_band==00000000; already mounted read-only [ 292.226380][ T1108] gspca_ov534_9: Unknown sensor 0000 [ 292.226445][ T1108] ov534_9: probe of 5-1:0.0 failed with error -22 [ 293.811230][ T6216] binder: 6209:6216 ioctl c0306201 0 returned -14 [ 294.714839][ T1108] usb 5-1: USB disconnect, device number 3 [ 295.459836][ T6236] loop4: detected capacity change from 0 to 8192 [ 295.536729][ T6247] loop2: detected capacity change from 0 to 1024 [ 295.572388][ T6237] loop3: detected capacity change from 0 to 8192 [ 295.601546][ T6236] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 295.629260][ T6236] REISERFS (device loop4): using ordered data mode [ 295.635809][ T6236] reiserfs: using flush barriers [ 295.646267][ T6247] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 295.663765][ T6236] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 295.693403][ T6236] REISERFS (device loop4): checking transaction log (loop4) [ 295.744918][ T6237] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 296.388032][ T6237] REISERFS (device loop3): using ordered data mode [ 297.049634][ T6237] reiserfs: using flush barriers [ 297.097138][ T6237] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 297.243159][ T6237] REISERFS (device loop3): checking transaction log (loop3) [ 297.267784][ T6236] REISERFS (device loop4): Using r5 hash to sort names [ 297.298757][ T6236] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 297.451744][ T6261] cgroup: fork rejected by pids controller in /syz2 [ 298.494476][ T6956] loop0: detected capacity change from 0 to 512 [ 298.556361][ T6237] REISERFS (device loop3): Using tea hash to sort names [ 298.563608][ T6237] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 298.594841][ T6958] device syzkaller0 entered promiscuous mode [ 299.074803][ T6956] Quota error (device loop0): v2_read_file_info: Can't read info structure [ 299.186443][ T6956] EXT4-fs warning (device loop0): ext4_enable_quotas:6486: Failed to enable quota tracking (type=1, err=-5, ino=4). Please run e2fsck to fix. [ 299.504840][ T6968] overlayfs: failed to resolve './bus': -2 [ 299.559555][ T6956] EXT4-fs (loop0): mount failed [ 299.576907][ T6967] loop2: detected capacity change from 0 to 16 [ 299.588664][ T6971] loop1: detected capacity change from 0 to 512 [ 299.619827][ T6967] erofs: (device loop2): mounted with root inode @ nid 36. [ 299.637382][ T6971] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 299.672899][ T6971] EXT4-fs error (device loop1): xattr_find_entry:297: inode #15: comm syz.1.494: corrupted xattr entries [ 299.768339][ T6971] EXT4-fs (loop1): 1 orphan inode deleted [ 299.774383][ T6971] EXT4-fs (loop1): mounted filesystem without journal. Opts: mb_optimize_scan=0x0000000000000000,min_batch_time=0x0000000000000002,debug_want_extra_isize=0x0000000000000068,nobarrier,nodiscard,journal_ioprio=0x0000000000000002,,errors=continue. Quota mode: none. [ 300.763281][ T6956] input: syz1 as /devices/virtual/input/input5 [ 302.707597][ T6999] loop3: detected capacity change from 0 to 1024 [ 302.866322][ T6999] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 303.470335][ T7010] delete_channel: no stack [ 303.545727][ T7016] cgroup: fork rejected by pids controller in /syz3 [ 304.482116][ T7690] loop4: detected capacity change from 0 to 64 [ 306.084870][ T7710] netlink: 8 bytes leftover after parsing attributes in process `syz.2.512'. [ 307.873166][ T7715] netlink: 8 bytes leftover after parsing attributes in process `syz.2.512'. [ 307.939840][ T7715] netlink: 8 bytes leftover after parsing attributes in process `syz.2.512'. [ 310.080762][ T1108] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 310.280884][ T7757] loop0: detected capacity change from 0 to 128 [ 310.817164][ T7757] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 311.277632][ T7757] ext4 filesystem being mounted at /97/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 311.349433][ T1108] usb 3-1: Using ep0 maxpacket: 8 [ 311.891930][ T7776] PKCS7: Unknown OID: [4] 0.38.35.0.951690.11253 [ 311.898430][ T7776] PKCS7: Only support pkcs7_signedData type [ 312.664683][ T1108] usb 3-1: New USB device found, idVendor=1397, idProduct=00bd, bcdDevice=d2.54 [ 312.673771][ T1108] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 312.678307][ T7779] netlink: 76 bytes leftover after parsing attributes in process `syz.2.528'. [ 312.689393][ T1108] usb 3-1: Product: syz [ 312.694912][ T1108] usb 3-1: Manufacturer: syz [ 312.708735][ T1108] usb 3-1: config 0 descriptor?? [ 312.721859][ T7781] netlink: 24 bytes leftover after parsing attributes in process `syz.1.538'. [ 312.739189][ T1108] usb 3-1: can't set config #0, error -71 [ 312.755649][ T1108] usb 3-1: USB disconnect, device number 2 [ 312.960805][ T7785] loop2: detected capacity change from 0 to 512 [ 313.070181][ T7785] EXT4-fs error (device loop2): ext4_orphan_get:1400: inode #15: comm syz.2.529: inode has both inline data and extents flags [ 313.205011][ T7785] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.529: couldn't read orphan inode 15 (err -117) [ 313.240415][ T7785] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 314.642606][ T7801] cgroup: Invalid name [ 314.941726][ T7802] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 314.953207][ T7802] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 315.804785][ T7808] loop2: detected capacity change from 0 to 128 [ 315.869342][ T7808] EXT4-fs warning (device loop2): ext4_fill_super:4022: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 315.896669][ T4175] udevd[4175]: incorrect jbd checksum on /dev/loop2 [ 315.915549][ T7808] EXT4-fs (loop2): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 316.204201][ T4175] udevd[4175]: incorrect jbd checksum on /dev/loop2 [ 317.460491][ T7819] loop3: detected capacity change from 0 to 256 [ 317.507832][ T7820] loop2: detected capacity change from 0 to 24 [ 317.634114][ T7820] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 317.757540][ T7820] VFS: Can't find a romfs filesystem on dev loop2. [ 317.757540][ T7820] [ 318.709950][ T25] audit: type=1800 audit(1768889224.572:21): pid=7822 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.537" name="file1" dev="loop3" ino=1048591 res=0 errno=0 [ 322.177468][ T7849] loop0: detected capacity change from 0 to 512 [ 322.509368][ T7849] EXT4-fs error (device loop0): ext4_orphan_get:1400: inode #15: comm syz.0.546: inode has both inline data and extents flags [ 322.710371][ T7849] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.546: couldn't read orphan inode 15 (err -117) [ 322.883422][ T7849] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 323.472679][ T7861] netlink: 'syz.3.551': attribute type 1 has an invalid length. [ 324.356443][ T7855] loop1: detected capacity change from 0 to 4096 [ 324.709394][ T7855] ntfs3: loop1: Different NTFS' sector size (1024) and media sector size (512) [ 325.187428][ T7855] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 326.285071][ T7872] loop3: detected capacity change from 0 to 512 [ 326.488406][ T7872] EXT4-fs (loop3): Ignoring removed oldalloc option [ 326.506899][ T7872] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 326.545941][ T7872] EXT4-fs (loop3): 1 truncate cleaned up [ 326.595486][ T7872] EXT4-fs (loop3): mounted filesystem without journal. Opts: quota,oldalloc,barrier=0x0000000000000003,debug_want_extra_isize=0x0000000000000080,block_validity,jqfmt=vfsv1,,errors=continue. Quota mode: writeback. [ 327.793726][ T7887] siw: device registration error -23 [ 329.258408][ T7901] netlink: 8 bytes leftover after parsing attributes in process `syz.0.562'. [ 329.682333][ T1430] ieee802154 phy0 wpan0: encryption failed: -22 [ 329.688646][ T1430] ieee802154 phy1 wpan1: encryption failed: -22 [ 329.999829][ T7906] loop1: detected capacity change from 0 to 512 [ 331.626388][ T7920] loop3: detected capacity change from 0 to 512 [ 331.652836][ T7922] device syzkaller0 entered promiscuous mode [ 331.668490][ T7906] EXT4-fs error (device loop1): ext4_orphan_get:1400: inode #15: comm syz.1.564: inode has both inline data and extents flags [ 331.699753][ T7906] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.564: couldn't read orphan inode 15 (err -117) [ 331.742371][ T7920] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 331.759171][ T7922] tipc: Enabled bearer , priority 0 [ 331.775307][ T7906] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 331.788850][ T7921] tipc: Resetting bearer [ 331.898814][ T7921] tipc: Disabling bearer [ 331.907228][ T7920] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 332.110143][ T7920] EXT4-fs (loop3): 1 truncate cleaned up [ 332.277424][ T7920] EXT4-fs (loop3): mounted filesystem without journal. Opts: usrquota,usrjquota="data=ordered,noload,grpid,grpjquota="init_itable,jqfmt=vfsold,noblock_validity,,errors=continue. Quota mode: writeback. [ 332.628154][ T7930] EXT4-fs error (device loop3): ext4_append:79: inode #2: comm syz.3.567: Logical block already allocated [ 332.644153][ T7933] loop0: detected capacity change from 0 to 16 [ 332.686571][ T7933] erofs: (device loop0): mounted with root inode @ nid 36. [ 334.277863][ T7946] binder: 7941:7946 ioctl c00c620f 200000000040 returned -22 [ 336.491717][ T7957] loop4: detected capacity change from 0 to 512 [ 337.013915][ T7962] device syzkaller0 entered promiscuous mode [ 337.118379][ T7968] ubi31: attaching mtd0 [ 337.131899][ T7968] ubi31: scanning is finished [ 337.136660][ T7968] ubi31: empty MTD device detected [ 337.281392][ T7968] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 337.289251][ T7968] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 337.296779][ T7968] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 337.303963][ T7968] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 337.311539][ T7968] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 337.318548][ T7968] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 337.326776][ T7968] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 3796046098 [ 337.337012][ T7968] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 337.349439][ T7957] EXT4-fs error (device loop4): ext4_orphan_get:1400: inode #15: comm syz.4.576: inode has both inline data and extents flags [ 337.400449][ T7969] ubi31: background thread "ubi_bgt31d" started, PID 7969 [ 337.663110][ T7972] loop0: detected capacity change from 0 to 256 [ 338.058341][ T7957] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.576: couldn't read orphan inode 15 (err -117) [ 338.198164][ T7974] loop1: detected capacity change from 0 to 64 [ 338.312081][ T7957] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 338.500519][ T7972] FAT-fs (loop0): bogus number of FAT sectors [ 338.507087][ T7972] FAT-fs (loop0): Can't find a valid FAT filesystem [ 338.660525][ T7974] BFS-fs: bfs_fill_super(): loop1 is unclean, continuing [ 340.575565][ T7972] netlink: 'syz.0.579': attribute type 3 has an invalid length. [ 343.208088][ T8011] netlink: 4 bytes leftover after parsing attributes in process `syz.0.596'. [ 343.379752][ T8006] loop4: detected capacity change from 0 to 512 [ 344.178404][ T4226] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 344.257839][ T8006] EXT4-fs error (device loop4): ext4_orphan_get:1400: inode #15: comm syz.4.586: inode has both inline data and extents flags [ 344.294384][ T8006] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.586: couldn't read orphan inode 15 (err -117) [ 344.306799][ T8006] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 344.460010][ T4226] usb 1-1: device descriptor read/64, error -71 [ 345.898309][ T4226] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 347.958021][ T8041] Cannot find map_set index 0 as target [ 348.517020][ T8045] loop3: detected capacity change from 0 to 128 [ 348.923175][ T8045] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 349.109477][ T8045] ext4 filesystem being mounted at /139/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 350.946048][ T8066] loop3: detected capacity change from 0 to 128 [ 351.854209][ T8066] EXT4-fs warning (device loop3): ext4_fill_super:4022: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 352.325176][ T8066] EXT4-fs (loop3): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 352.361305][ T4175] udevd[4175]: incorrect jbd checksum on /dev/loop3 [ 352.432915][ T4175] udevd[4175]: incorrect jbd checksum on /dev/loop3 [ 354.390483][ T8086] device syzkaller0 entered promiscuous mode [ 354.485284][ T8091] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 355.879549][ T8105] loop2: detected capacity change from 0 to 128 [ 356.339366][ T8105] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 356.511868][ T8105] ext4 filesystem being mounted at /118/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 359.319198][ T8117] loop3: detected capacity change from 0 to 1024 [ 359.434591][ T8117] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 359.559163][ T8134] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 362.655551][ T8143] loop1: detected capacity change from 0 to 256 [ 362.970787][ T8140] netlink: 'syz.2.620': attribute type 10 has an invalid length. [ 363.027602][ T8140] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 364.109120][ T8165] ptrace attach of "./syz-executor exec"[4186] was attempted by ""[8165] [ 364.861633][ T8168] loop2: detected capacity change from 0 to 512 [ 364.887706][ T8168] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 364.918209][ T8170] loop1: detected capacity change from 0 to 256 [ 364.964162][ T8168] EXT4-fs error (device loop2): ext4_orphan_get:1400: inode #15: comm syz.2.629: inode has both inline data and extents flags [ 364.989087][ T8168] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.629: couldn't read orphan inode 15 (err -117) [ 365.012056][ T8168] EXT4-fs (loop2): mounted filesystem without journal. Opts: quota,,errors=continue. Quota mode: writeback. [ 366.801470][ T8190] loop1: detected capacity change from 0 to 128 [ 366.911891][ T8187] loop4: detected capacity change from 0 to 1024 [ 367.020542][ T8190] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 367.058613][ T8190] ext4 filesystem being mounted at /128/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 367.171219][ T8187] hfsplus: bad catalog entry used to create inode [ 367.178413][ T8187] hfsplus: failed to load root directory [ 371.767264][ T8218] device syzkaller0 entered promiscuous mode [ 372.635177][ T8218] tipc: Enabled bearer , priority 0 [ 372.871037][ T8216] tipc: Resetting bearer [ 373.537461][ T8216] tipc: Disabling bearer [ 373.790824][ T8251] device syzkaller0 entered promiscuous mode [ 373.868311][ T8258] dlm: no local IP address has been set [ 373.874301][ T8258] dlm: cannot start dlm midcomms -107 [ 374.774847][ T8261] device syzkaller0 entered promiscuous mode [ 374.810516][ T8265] block nbd3: shutting down sockets [ 377.031459][ T8285] netlink: 4 bytes leftover after parsing attributes in process `syz.0.659'. [ 378.485993][ T8294] kAFS: No cell specified [ 378.814638][ T8303] device syzkaller0 entered promiscuous mode [ 384.325629][ T8346] netlink: 'syz.2.676': attribute type 39 has an invalid length. [ 384.394495][ T4291] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 384.704483][ T4291] usb 1-1: Using ep0 maxpacket: 16 [ 384.843777][ T4291] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 384.889676][ T4291] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 385.153742][ T4291] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 385.188677][ T4291] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 385.301772][ T4291] usb 1-1: Product: syz [ 385.354967][ T4291] usb 1-1: Manufacturer: syz [ 385.612137][ T4291] usb 1-1: SerialNumber: syz [ 386.126397][ T4291] usb 1-1: 0:2 : does not exist [ 386.222640][ T4291] usb 1-1: USB disconnect, device number 4 [ 386.972923][ T8351] loop3: detected capacity change from 0 to 40427 [ 387.661876][ T8362] netlink: 24 bytes leftover after parsing attributes in process `syz.4.679'. [ 388.901950][ T8351] F2FS-fs (loop3): build fault injection attr: rate: 771, type: 0x1ffff [ 388.929384][ T8351] F2FS-fs (loop3): invalid crc value [ 388.979588][ T8363] autofs4:pid:8363:autofs_fill_super: called with bogus options [ 389.046788][ T8351] F2FS-fs (loop3): Found nat_bits in checkpoint [ 389.117169][ T4175] udevd[4175]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 389.148350][ T8360] loop2: detected capacity change from 0 to 1024 [ 389.275330][ T8360] EXT4-fs (loop2): inline encryption not supported [ 389.339220][ T8360] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 389.562744][ T8360] EXT4-fs (loop2): mounted filesystem without journal. Opts: dioread_nolock,data_err=abort,inlinecrypt,noauto_da_alloc,data_err=ignore,nojournal_checksum,errors=remount-ro,grpquota,noblock_validity,user_xattr,nombcache,errors=remount-ro,. Quota mode: writeback. [ 390.651388][ T8351] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 390.703537][ T8378] device syzkaller0 entered promiscuous mode [ 390.754787][ T8378] 0: reclassify loop, rule prio 0, protocol 800 [ 390.847425][ T8383] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 391.223839][ T8392] mip6: mip6_destopt_init_state: state's mode is not 2: 0 [ 391.234029][ T8392] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 391.260176][ T8392] CIFS mount error: No usable UNC path provided in device string! [ 391.260176][ T8392] [ 391.270428][ T8392] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 393.704258][ T8405] netlink: 12 bytes leftover after parsing attributes in process `syz.1.690'. [ 395.782489][ T1430] ieee802154 phy0 wpan0: encryption failed: -22 [ 395.788924][ T1430] ieee802154 phy1 wpan1: encryption failed: -22 [ 400.599381][ T8464] device syzkaller0 entered promiscuous mode [ 401.644988][ T4501] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 401.686714][ T8477] device syzkaller0 entered promiscuous mode [ 401.905819][ T4501] usb 4-1: Using ep0 maxpacket: 16 [ 402.055880][ T4501] usb 4-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 402.113427][ T4501] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 402.296928][ T4501] usb 4-1: config 0 descriptor?? [ 402.511444][ T4501] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 402.926555][ T8468] loop3: detected capacity change from 0 to 16 [ 403.274347][ T4501] gspca_sonixj: reg_r err -110 [ 403.279400][ T4501] sonixj: probe of 4-1:0.0 failed with error -110 [ 403.775538][ T8497] loop2: detected capacity change from 0 to 764 [ 403.801948][ T8468] erofs: (device loop3): mounted with root inode @ nid 36. [ 404.794090][ T8508] Symlink component flag not implemented [ 404.800219][ T8508] Symlink component flag not implemented [ 404.806784][ T8508] Symlink component flag not implemented (129) [ 404.813174][ T8508] Symlink component flag not implemented (6) [ 405.164398][ T4501] usb 4-1: USB disconnect, device number 2 [ 405.265660][ T8510] loop0: detected capacity change from 0 to 128 [ 405.419175][ T8514] loop3: detected capacity change from 0 to 128 [ 406.271759][ T8521] loop2: detected capacity change from 0 to 128 [ 408.076302][ T8525] loop1: detected capacity change from 0 to 512 [ 408.412405][ T8525] EXT4-fs (loop1): Ignoring removed oldalloc option [ 409.124925][ T8525] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: comm syz.1.721: inode #15947535: comm syz.1.721: iget: illegal inode # [ 409.172097][ T8525] EXT4-fs (loop1): Remounting filesystem read-only [ 409.181632][ T8525] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.721: error while reading EA inode 15947535 err=-117 [ 409.265461][ T8525] EXT4-fs (loop1): Remounting filesystem read-only [ 409.288753][ T8525] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: comm syz.1.721: inode #261888: comm syz.1.721: iget: illegal inode # [ 409.357400][ T8525] EXT4-fs (loop1): Remounting filesystem read-only [ 409.363939][ T8525] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.721: error while reading EA inode 261888 err=-117 [ 409.394348][ T8525] EXT4-fs (loop1): Remounting filesystem read-only [ 409.406264][ T8525] EXT4-fs (loop1): 1 orphan inode deleted [ 409.416722][ T8525] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,bsdgroups,debug_want_extra_isize=0x0000000000000022,noauto_da_alloc,jqfmt=vfsv1,oldalloc,init_itable,. Quota mode: none. [ 412.735229][ T5351] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 413.784030][ T8575] loop4: detected capacity change from 0 to 256 [ 413.792465][ T8577] loop1: detected capacity change from 0 to 512 [ 413.875672][ T8577] EXT4-fs error (device loop1): ext4_orphan_get:1400: inode #15: comm syz.1.734: inode has both inline data and extents flags [ 414.100132][ T8577] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.734: couldn't read orphan inode 15 (err -117) [ 414.114804][ T8577] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 414.962506][ T8575] FAT-fs (loop4): Directory bread(block 64) failed [ 414.993033][ T8575] FAT-fs (loop4): Directory bread(block 65) failed [ 415.014996][ T8575] FAT-fs (loop4): Directory bread(block 66) failed [ 415.042830][ T8575] FAT-fs (loop4): Directory bread(block 67) failed [ 415.195106][ T8575] FAT-fs (loop4): Directory bread(block 68) failed [ 415.357358][ T8575] FAT-fs (loop4): Directory bread(block 69) failed [ 415.363980][ T8575] FAT-fs (loop4): Directory bread(block 70) failed [ 415.370584][ T8575] FAT-fs (loop4): Directory bread(block 71) failed [ 415.377207][ T8575] FAT-fs (loop4): Directory bread(block 72) failed [ 415.383738][ T8575] FAT-fs (loop4): Directory bread(block 73) failed [ 416.185556][ T8596] overlayfs: failed to clone lowerpath [ 416.344109][ T8597] attempt to access beyond end of device [ 416.344109][ T8597] loop4: rw=2051, want=1256, limit=256 [ 416.531853][ T8603] loop2: detected capacity change from 0 to 128 [ 417.150688][ T8606] tipc: Enabled bearer , priority 10 [ 418.132807][ T8618] device syzkaller0 entered promiscuous mode [ 422.306458][ T8671] loop3: detected capacity change from 0 to 2048 [ 422.461047][ T8671] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 422.565699][ T8671] EXT4-fs (loop3): Ignoring removed nobh option [ 422.788480][ T8671] EXT4-fs (loop3): mounted filesystem without journal. Opts: nolazytime,errors=remount-ro,nomblk_io_submit,nouid32,usrquota,minixdf,nobh,. Quota mode: writeback. [ 423.182343][ T8677] 8021q: adding VLAN 0 to HW filter on device bond0 [ 423.193248][ T8677] bond0: (slave rose0): Enslaving as an active interface with an up link [ 423.232045][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 424.850763][ T8695] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 425.498322][ T8714] loop3: detected capacity change from 0 to 131072 [ 425.606819][ T8714] F2FS-fs (loop3): Wrong CP boundary, start(512) end(1536) blocks(0) [ 425.614934][ T8714] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 425.638415][ T8714] F2FS-fs (loop3): invalid crc value [ 425.742275][ T8714] F2FS-fs (loop3): Found nat_bits in checkpoint [ 425.797794][ T8714] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 425.804921][ T8714] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 429.540012][ T8747] device syzkaller0 entered promiscuous mode [ 431.620196][ T8766] loop3: detected capacity change from 0 to 1024 [ 431.708678][ T8766] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 433.946565][ T8794] netlink: 12 bytes leftover after parsing attributes in process `syz.3.782'. [ 434.032770][ T8794] netlink: 12 bytes leftover after parsing attributes in process `syz.3.782'. [ 435.715913][ T8811] loop3: detected capacity change from 0 to 512 [ 436.707662][ T8822] loop1: detected capacity change from 0 to 256 [ 436.825950][ T8822] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 436.838555][ T8811] EXT4-fs error (device loop3): ext4_orphan_get:1400: inode #15: comm syz.3.786: inode has both inline data and extents flags [ 436.910823][ T8822] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 436.977050][ T8822] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 436.992210][ T8811] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.786: couldn't read orphan inode 15 (err -117) [ 437.086917][ T8811] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 437.203413][ T8826] loop2: detected capacity change from 0 to 40427 [ 437.282578][ T8826] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 437.290336][ T8826] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 437.302806][ T8826] F2FS-fs (loop2): invalid crc value [ 437.505912][ T8826] F2FS-fs (loop2): Found nat_bits in checkpoint [ 437.643282][ T8847] xt_hashlimit: max too large, truncated to 1048576 [ 438.787175][ T8826] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 438.794288][ T8826] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 439.170485][ T8856] attempt to access beyond end of device [ 439.170485][ T8856] loop2: rw=2049, want=77960, limit=40427 [ 442.407094][ T8891] netlink: 12 bytes leftover after parsing attributes in process `syz.1.800'. [ 442.926210][ T8905] Set syz1 is full, maxelem 2 reached [ 444.772662][ T8921] loop2: detected capacity change from 0 to 512 [ 446.914169][ T8921] EXT4-fs error (device loop2): ext4_orphan_get:1400: inode #15: comm syz.2.805: inode has both inline data and extents flags [ 447.071622][ T8921] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.805: couldn't read orphan inode 15 (err -117) [ 447.272122][ T8921] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 449.980129][ T8953] netlink: 12 bytes leftover after parsing attributes in process `syz.2.814'. [ 450.816176][ T8953] netlink: 12 bytes leftover after parsing attributes in process `syz.2.814'. [ 453.338444][ T8991] loop1: detected capacity change from 0 to 1024 [ 454.961999][ T8989] loop2: detected capacity change from 0 to 256 [ 455.046437][ T8989] FAT-fs (loop2): bogus number of FAT sectors [ 455.052536][ T8989] FAT-fs (loop2): Can't find a valid FAT filesystem [ 455.210122][ T8989] netlink: 'syz.2.822': attribute type 3 has an invalid length. [ 455.218663][ T8991] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 456.512417][ T25] audit: type=1800 audit(2000000007.876:22): pid=8991 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.825" name="bus" dev="loop1" ino=18 res=0 errno=0 [ 456.523326][ T8991] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:3887: comm syz.1.825: Allocating blocks 385-513 which overlap fs metadata [ 456.594502][ T25] audit: type=1804 audit(2000000007.876:23): pid=9010 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.825" name="/newroot/164/file1/bus" dev="loop1" ino=18 res=1 errno=0 [ 457.760678][ T8991] EXT4-fs (loop1): pa ffff8880275492a0: logic 16, phys. 129, len 24 [ 457.769081][ T8991] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:4904: group 0, free 0, pa_free 8 [ 459.389976][ T9046] device syzkaller0 entered promiscuous mode [ 460.962350][ T1430] ieee802154 phy0 wpan0: encryption failed: -22 [ 460.968720][ T1430] ieee802154 phy1 wpan1: encryption failed: -22 [ 464.319998][ T9080] siw: device registration error -23 [ 466.341938][ T9099] binder: 9089:9099 ioctl c00c620f 200000000040 returned -22 [ 468.052319][ T9101] loop4: detected capacity change from 0 to 262144 [ 468.096077][ T9101] BTRFS: device fsid 7e32c2af-f87a-45a1-bcba-64dea7c56a53 devid 1 transid 8 /dev/loop4 scanned by syz.4.852 (9101) [ 468.189497][ T9101] BTRFS info (device loop4): using xxhash64 (xxhash64-generic) checksum algorithm [ 468.199500][ T9101] BTRFS info (device loop4): using free space tree [ 468.206023][ T9101] BTRFS info (device loop4): has skinny extents [ 468.212325][ T9101] BTRFS info (device loop4): flagging fs with big metadata feature [ 472.496653][ T9101] BTRFS error (device loop4): open_ctree failed: -12 [ 472.658076][ T9150] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 475.703096][ T9194] kAFS: unable to lookup cell '' [ 478.014065][ T9210] loop1: detected capacity change from 0 to 1024 [ 478.314263][ T9220] loop2: detected capacity change from 0 to 128 [ 478.942910][ T9220] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (34879!=39978) [ 478.952948][ T9220] EXT4-fs (loop2): group descriptors corrupted! [ 479.519444][ T25] audit: type=1800 audit(2000000029.399:24): pid=9210 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.874" name="file2" dev="loop1" ino=22 res=0 errno=0 [ 479.804557][ T4430] hfsplus: b-tree write err: -5, ino 4 [ 479.848202][ T25] audit: type=1326 audit(2000000029.605:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9206 comm="syz.1.874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b5c1bfcb9 code=0x7ffc0000 [ 479.991527][ T25] audit: type=1326 audit(2000000029.605:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9206 comm="syz.1.874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b5c1bfcb9 code=0x7ffc0000 [ 481.048139][ T25] audit: type=1326 audit(2000000029.605:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9206 comm="syz.1.874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8b5c1bfcb9 code=0x7ffc0000 [ 481.205368][ T25] audit: type=1326 audit(2000000029.605:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9206 comm="syz.1.874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b5c1bfcb9 code=0x7ffc0000 [ 481.312113][ T25] audit: type=1326 audit(2000000029.605:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9206 comm="syz.1.874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b5c1bfcb9 code=0x7ffc0000 [ 481.351795][ T9241] netlink: 8 bytes leftover after parsing attributes in process `syz.0.884'. [ 481.525338][ T25] audit: type=1326 audit(2000000029.605:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9206 comm="syz.1.874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=155 compat=0 ip=0x7f8b5c1bfcb9 code=0x7ffc0000 [ 482.417096][ T25] audit: type=1326 audit(2000000029.605:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9206 comm="syz.1.874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b5c1bfcb9 code=0x7ffc0000 [ 482.428898][ T9258] usb usb8: usbfs: interface 0 claimed by hub while 'syz.2.888' resets device [ 482.562333][ T9260] loop4: detected capacity change from 0 to 1024 [ 482.601641][ T25] audit: type=1326 audit(2000000029.605:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9206 comm="syz.1.874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b5c1bfcb9 code=0x7ffc0000 [ 482.664954][ T9258] loop2: detected capacity change from 0 to 4096 [ 482.717896][ T9258] ntfs: (device loop2): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 482.727416][ T9260] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 483.626974][ T9258] ntfs: volume version 3.1. [ 484.671715][ T9267] netlink: 'syz.3.890': attribute type 10 has an invalid length. [ 484.739436][ T9267] device wlan1 entered promiscuous mode [ 484.745601][ T9267] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 485.014425][ T9275] overlayfs: failed to clone upperpath [ 485.839907][ T9278] device syzkaller0 entered promiscuous mode [ 487.777607][ T9291] tipc: Enabled bearer , priority 0 [ 487.797794][ T9291] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 488.076408][ T9303] netlink: 116 bytes leftover after parsing attributes in process `syz.0.900'. [ 489.317589][ T9313] device vlan2 entered promiscuous mode [ 489.477368][ T9318] netlink: 8 bytes leftover after parsing attributes in process `syz.0.904'. [ 489.536379][ T9319] netlink: 12 bytes leftover after parsing attributes in process `syz.2.903'. [ 490.459798][ T9309] netlink: 4 bytes leftover after parsing attributes in process `syz.3.902'. [ 490.768396][ T9318] netlink: 4 bytes leftover after parsing attributes in process `syz.0.904'. [ 493.535190][ C1] ================================================================== [ 493.543631][ C1] BUG: KASAN: use-after-free in rose_timer_expiry+0x470/0x490 [ 493.551112][ C1] Read of size 2 at addr ffff88807d73242a by task syz.2.908/9330 [ 493.558841][ C1] [ 493.561177][ C1] CPU: 1 PID: 9330 Comm: syz.2.908 Not tainted syzkaller #0 [ 493.568465][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 493.578525][ C1] Call Trace: [ 493.581810][ C1] [ 493.584666][ C1] dump_stack_lvl+0x188/0x250 [ 493.589363][ C1] ? show_regs_print_info+0x20/0x20 [ 493.594570][ C1] ? _printk+0xda/0x130 [ 493.598738][ C1] ? rose_timer_expiry+0x470/0x490 [ 493.603863][ C1] ? load_image+0x400/0x400 [ 493.608389][ C1] print_address_description+0x60/0x2d0 [ 493.613955][ C1] ? rose_timer_expiry+0x470/0x490 [ 493.619075][ C1] kasan_report+0xdf/0x130 [ 493.623506][ C1] ? rose_timer_expiry+0x470/0x490 [ 493.628635][ C1] rose_timer_expiry+0x470/0x490 [ 493.633580][ C1] ? rose_start_t1timer+0xd0/0xd0 [ 493.638619][ C1] call_timer_fn+0x17b/0x540 [ 493.643222][ C1] ? rose_start_t1timer+0xd0/0xd0 [ 493.648255][ C1] ? __run_timers+0x7f0/0x7f0 [ 493.652960][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 493.658174][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 493.663383][ C1] ? rose_start_t1timer+0xd0/0xd0 [ 493.668422][ C1] __run_timers+0x53a/0x7f0 [ 493.672955][ C1] ? detach_timer+0x2b0/0x2b0 [ 493.677639][ C1] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 493.683641][ C1] ? sched_clock_cpu+0x15/0x3c0 [ 493.688504][ C1] ? ktime_get_real_ts64+0x440/0x440 [ 493.693810][ C1] run_timer_softirq+0x63/0xf0 [ 493.698585][ C1] handle_softirqs+0x339/0x830 [ 493.703364][ C1] ? __irq_exit_rcu+0x13b/0x230 [ 493.708233][ C1] ? do_softirq+0x210/0x210 [ 493.712762][ C1] __irq_exit_rcu+0x13b/0x230 [ 493.717452][ C1] ? irq_exit_rcu+0x20/0x20 [ 493.721984][ C1] irq_exit_rcu+0x5/0x20 [ 493.726232][ C1] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 493.731876][ C1] [ 493.734818][ C1] [ 493.737759][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 493.743752][ C1] RIP: 0010:lock_acquire+0x208/0x400 [ 493.749055][ C1] Code: f7 84 24 80 00 00 00 00 02 00 00 43 c6 44 3d 04 f8 0f 85 f1 00 00 00 41 f7 c6 00 02 00 00 74 01 fb 48 c7 44 24 60 0e 36 e0 45 <4b> c7 44 3d 00 00 00 00 00 43 c7 44 3d 08 00 00 00 00 65 48 8b 04 [ 493.768673][ C1] RSP: 0018:ffffc90003a675a0 EFLAGS: 00000206 [ 493.774752][ C1] RAX: 0000000000000001 RBX: 0000000000000000 RCX: c7353c4ed35d8900 [ 493.782730][ C1] RDX: 0000000000000000 RSI: ffffffff8a2b2ea0 RDI: ffffffff8a79ec00 [ 493.790713][ C1] RBP: ffffc90003a676a8 R08: dffffc0000000000 R09: 1ffffffff2037218 [ 493.798700][ C1] R10: dffffc0000000000 R11: fffffbfff2037219 R12: ffffffff8c31c720 [ 493.806692][ C1] R13: 1ffff9200074cec0 R14: 0000000000000246 R15: dffffc0000000000 [ 493.814706][ C1] ? __lock_acquire+0x7d10/0x7d10 [ 493.819765][ C1] ? read_lock_is_recursive+0x10/0x10 [ 493.825162][ C1] ? do_raw_spin_unlock+0x11d/0x230 [ 493.830386][ C1] ? apparmor_socket_sock_rcv_skb+0xb0/0xf0 [ 493.836299][ C1] rcu_lock_acquire+0x2a/0x30 [ 493.840996][ C1] ? rcu_lock_acquire+0x9/0x30 [ 493.845777][ C1] sk_filter_trim_cap+0x14c/0x810 [ 493.850818][ C1] ? init_wait_entry+0xd0/0xd0 [ 493.855602][ C1] ? __rwlock_init+0x140/0x140 [ 493.860379][ C1] ? lock_acquire+0xd/0x400 [ 493.864906][ C1] unix_dgram_sendmsg+0xafc/0x18a0 [ 493.870069][ C1] ? unix_dgram_poll+0x680/0x680 [ 493.875026][ C1] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 493.881465][ C1] ? aa_sock_msg_perm+0x94/0x150 [ 493.886423][ C1] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 493.891725][ C1] ? security_socket_sendmsg+0x7c/0xa0 [ 493.897197][ C1] ? unix_dgram_poll+0x680/0x680 [ 493.902156][ C1] ____sys_sendmsg+0x5b7/0x8f0 [ 493.906949][ C1] ? __sys_sendmsg_sock+0x30/0x30 [ 493.911995][ C1] ? rcu_is_watching+0x11/0xa0 [ 493.916772][ C1] ? import_iovec+0x6f/0xa0 [ 493.921297][ C1] ___sys_sendmsg+0x236/0x2e0 [ 493.926001][ C1] ? __sys_sendmsg+0x2a0/0x2a0 [ 493.930821][ C1] ? __might_fault+0xb3/0x110 [ 493.935514][ C1] __sys_sendmmsg+0x2ba/0x500 [ 493.940207][ C1] ? __ia32_sys_sendmsg+0x80/0x80 [ 493.945252][ C1] ? __context_tracking_exit+0x4c/0x80 [ 493.950738][ C1] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 493.956746][ C1] ? lock_chain_count+0x20/0x20 [ 493.961615][ C1] ? vtime_user_exit+0x2c8/0x3e0 [ 493.966576][ C1] __x64_sys_sendmmsg+0x9c/0xb0 [ 493.971447][ C1] do_syscall_64+0x4c/0xa0 [ 493.975880][ C1] ? clear_bhb_loop+0x30/0x80 [ 493.980579][ C1] ? clear_bhb_loop+0x30/0x80 [ 493.985284][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 493.991183][ C1] RIP: 0033:0x7fc8ffdcccb9 [ 493.995577][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 494.015157][ C1] RSP: 002b:00007fc8fe028028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 494.023543][ C1] RAX: ffffffffffffffda RBX: 00007fc900047fa0 RCX: 00007fc8ffdcccb9 [ 494.031503][ C1] RDX: 0000000000000651 RSI: 0000200000000000 RDI: 0000000000000004 [ 494.039462][ C1] RBP: 00007fc8ffe3abf7 R08: 0000000000000000 R09: 0000000000000000 [ 494.047452][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 494.055434][ C1] R13: 00007fc900048038 R14: 00007fc900047fa0 R15: 00007ffe31a118c8 [ 494.063436][ C1] [ 494.066468][ C1] [ 494.068801][ C1] Allocated by task 4197: [ 494.073129][ C1] __kasan_kmalloc+0xb5/0xf0 [ 494.077729][ C1] __alloc_skb+0x22c/0x750 [ 494.082150][ C1] __napi_alloc_skb+0x151/0x2d0 [ 494.087011][ C1] page_to_skb+0x26a/0xcf0 [ 494.091433][ C1] receive_buf+0x14db/0x58e0 [ 494.096039][ C1] virtnet_poll+0x571/0xf40 [ 494.100549][ C1] __napi_poll+0xc0/0x430 [ 494.104883][ C1] net_rx_action+0x4d4/0xa10 [ 494.109486][ C1] handle_softirqs+0x339/0x830 [ 494.114262][ C1] __irq_exit_rcu+0x13b/0x230 [ 494.118956][ C1] irq_exit_rcu+0x5/0x20 [ 494.123202][ C1] common_interrupt+0xb5/0xd0 [ 494.127887][ C1] asm_common_interrupt+0x22/0x40 [ 494.132921][ C1] [ 494.135255][ C1] Freed by task 4197: [ 494.139242][ C1] kasan_set_track+0x4b/0x70 [ 494.143839][ C1] kasan_set_free_info+0x1f/0x40 [ 494.148785][ C1] ____kasan_slab_free+0xd5/0x110 [ 494.153823][ C1] slab_free_freelist_hook+0xea/0x170 [ 494.159206][ C1] kfree+0xef/0x2a0 [ 494.163022][ C1] skb_release_data+0x6b8/0x800 [ 494.167879][ C1] __kfree_skb+0x4c/0x60 [ 494.172135][ C1] tcp_rcv_established+0xeb6/0x1ce0 [ 494.177344][ C1] tcp_v4_do_rcv+0x44b/0x9b0 [ 494.181944][ C1] tcp_v4_rcv+0x26d8/0x2d10 [ 494.186457][ C1] ip_protocol_deliver_rcu+0x3ad/0x770 [ 494.191924][ C1] ip_local_deliver_finish+0x1d5/0x320 [ 494.197397][ C1] NF_HOOK+0x303/0x390 [ 494.201487][ C1] ip_sublist_rcv+0xa33/0xd30 [ 494.206174][ C1] ip_list_rcv+0x3ee/0x440 [ 494.210599][ C1] __netif_receive_skb_list_core+0x57f/0x750 [ 494.216592][ C1] netif_receive_skb_list_internal+0x898/0xbd0 [ 494.222752][ C1] napi_complete_done+0x378/0x850 [ 494.227790][ C1] virtnet_poll+0x955/0xf40 [ 494.232308][ C1] __napi_poll+0xc0/0x430 [ 494.236647][ C1] net_rx_action+0x4d4/0xa10 [ 494.241244][ C1] handle_softirqs+0x339/0x830 [ 494.246023][ C1] __irq_exit_rcu+0x13b/0x230 [ 494.250715][ C1] irq_exit_rcu+0x5/0x20 [ 494.254966][ C1] common_interrupt+0xb5/0xd0 [ 494.259653][ C1] asm_common_interrupt+0x22/0x40 [ 494.264695][ C1] [ 494.267028][ C1] Last potentially related work creation: [ 494.272744][ C1] kasan_save_stack+0x35/0x60 [ 494.277432][ C1] kasan_record_aux_stack+0xb8/0x100 [ 494.282726][ C1] kvfree_call_rcu+0x105/0x7d0 [ 494.287501][ C1] drop_sysctl_table+0x359/0x4e0 [ 494.292446][ C1] drop_sysctl_table+0x348/0x4e0 [ 494.297389][ C1] unregister_sysctl_table+0x87/0x130 [ 494.302772][ C1] neigh_sysctl_unregister+0x74/0x90 [ 494.308066][ C1] inetdev_event+0x731/0x1370 [ 494.312754][ C1] raw_notifier_call_chain+0xcb/0x160 [ 494.318134][ C1] unregister_netdevice_many+0x1049/0x19f0 [ 494.323949][ C1] unregister_netdevice_queue+0x324/0x370 [ 494.329675][ C1] __tun_detach+0xd4a/0x1500 [ 494.334279][ C1] tun_chr_close+0x109/0x1b0 [ 494.338872][ C1] __fput+0x234/0x930 [ 494.342864][ C1] task_work_run+0x125/0x1a0 [ 494.347464][ C1] do_exit+0x626/0x20c0 [ 494.351627][ C1] do_group_exit+0x12e/0x300 [ 494.356224][ C1] get_signal+0x6ca/0x12c0 [ 494.360649][ C1] arch_do_signal_or_restart+0xe7/0x12c0 [ 494.366296][ C1] exit_to_user_mode_loop+0x9e/0x130 [ 494.371594][ C1] exit_to_user_mode_prepare+0xee/0x180 [ 494.377149][ C1] syscall_exit_to_user_mode+0x16/0x40 [ 494.382618][ C1] ret_from_fork+0x15/0x30 [ 494.387046][ C1] [ 494.389376][ C1] The buggy address belongs to the object at ffff88807d732400 [ 494.389376][ C1] which belongs to the cache kmalloc-512 of size 512 [ 494.403438][ C1] The buggy address is located 42 bytes inside of [ 494.403438][ C1] 512-byte region [ffff88807d732400, ffff88807d732600) [ 494.416632][ C1] The buggy address belongs to the page: [ 494.422260][ C1] page:ffffea0001f5cc00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7d730 [ 494.432425][ C1] head:ffffea0001f5cc00 order:2 compound_mapcount:0 compound_pincount:0 [ 494.440759][ C1] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 494.448761][ C1] raw: 00fff00000010200 ffffea00017ef900 0000000300000003 ffff888016c41c80 [ 494.457353][ C1] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 494.465948][ C1] page dumped because: kasan: bad access detected [ 494.472367][ C1] page_owner tracks the page as allocated [ 494.478089][ C1] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x1d2a20(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 4367, ts 64799863916, free_ts 64798344763 [ 494.497985][ C1] get_page_from_freelist+0x1bbd/0x1ca0 [ 494.503541][ C1] __alloc_pages+0x1ee/0x480 [ 494.508114][ C1] new_slab+0xc0/0x4b0 [ 494.512157][ C1] ___slab_alloc+0x80a/0xdd0 [ 494.516720][ C1] __kmalloc_node_track_caller+0x1fc/0x3a0 [ 494.522497][ C1] __alloc_skb+0x22c/0x750 [ 494.526883][ C1] __neigh_notify+0x142/0x2e0 [ 494.531531][ C1] neigh_cleanup_and_release+0x9d/0x250 [ 494.537048][ C1] neigh_remove_one+0x4e8/0x5f0 [ 494.541884][ C1] ___neigh_create+0x468/0x2250 [ 494.546705][ C1] ip6_neigh_lookup+0x3b3/0x470 [ 494.551528][ C1] ndisc_router_discovery+0xdca/0x3460 [ 494.556956][ C1] ndisc_rcv+0x3c9/0x4e0 [ 494.561174][ C1] icmpv6_rcv+0xf03/0x1650 [ 494.565565][ C1] ip6_protocol_deliver_rcu+0x8f6/0x12c0 [ 494.571167][ C1] ip6_input_finish+0xa2/0x130 [ 494.575911][ C1] page last free stack trace: [ 494.580569][ C1] free_unref_page_prepare+0x637/0x6c0 [ 494.586010][ C1] free_unref_page+0x8f/0x2a0 [ 494.590667][ C1] stack_depot_save+0x418/0x440 [ 494.595491][ C1] __kasan_slab_alloc+0xb3/0xd0 [ 494.600313][ C1] slab_post_alloc_hook+0x4c/0x380 [ 494.605397][ C1] kmem_cache_alloc_node+0x12d/0x2d0 [ 494.610652][ C1] __alloc_skb+0xf4/0x750 [ 494.614953][ C1] __neigh_notify+0x142/0x2e0 [ 494.619608][ C1] neigh_cleanup_and_release+0x9d/0x250 [ 494.625140][ C1] neigh_remove_one+0x4e8/0x5f0 [ 494.629969][ C1] ___neigh_create+0x468/0x2250 [ 494.634803][ C1] ip6_neigh_lookup+0x3b3/0x470 [ 494.639624][ C1] ndisc_router_discovery+0xdca/0x3460 [ 494.645051][ C1] ndisc_rcv+0x3c9/0x4e0 [ 494.649263][ C1] icmpv6_rcv+0xf03/0x1650 [ 494.653649][ C1] ip6_protocol_deliver_rcu+0x8f6/0x12c0 [ 494.659254][ C1] [ 494.661551][ C1] Memory state around the buggy address: [ 494.667152][ C1] ffff88807d732300: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 494.675197][ C1] ffff88807d732380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 494.683229][ C1] >ffff88807d732400: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 494.691259][ C1] ^ [ 494.696598][ C1] ffff88807d732480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 494.704633][ C1] ffff88807d732500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 494.712673][ C1] ================================================================== [ 494.720726][ C1] Disabling lock debugging due to kernel taint [ 494.726890][ C1] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 494.734080][ C1] CPU: 1 PID: 9330 Comm: syz.2.908 Tainted: G B syzkaller #0 [ 494.742756][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 494.752818][ C1] Call Trace: [ 494.756107][ C1] [ 494.758956][ C1] dump_stack_lvl+0x188/0x250 [ 494.763648][ C1] ? show_regs_print_info+0x20/0x20 [ 494.768858][ C1] ? load_image+0x400/0x400 [ 494.773374][ C1] panic+0x2e5/0x810 [ 494.777277][ C1] ? bpf_jit_dump+0xd0/0xd0 [ 494.781793][ C1] ? _raw_spin_unlock_irqrestore+0xbc/0x120 [ 494.787698][ C1] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 494.793604][ C1] ? _raw_spin_unlock+0x40/0x40 [ 494.798467][ C1] ? print_memory_metadata+0x314/0x400 [ 494.803946][ C1] ? rose_timer_expiry+0x470/0x490 [ 494.809069][ C1] check_panic_on_warn+0x80/0xa0 [ 494.814024][ C1] ? rose_timer_expiry+0x470/0x490 [ 494.819148][ C1] end_report+0x6d/0xf0 [ 494.823318][ C1] kasan_report+0x102/0x130 [ 494.827835][ C1] ? rose_timer_expiry+0x470/0x490 [ 494.832964][ C1] rose_timer_expiry+0x470/0x490 [ 494.837913][ C1] ? rose_start_t1timer+0xd0/0xd0 [ 494.842959][ C1] call_timer_fn+0x17b/0x540 [ 494.847567][ C1] ? rose_start_t1timer+0xd0/0xd0 [ 494.852597][ C1] ? __run_timers+0x7f0/0x7f0 [ 494.857277][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 494.862482][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 494.867701][ C1] ? rose_start_t1timer+0xd0/0xd0 [ 494.872739][ C1] __run_timers+0x53a/0x7f0 [ 494.877267][ C1] ? detach_timer+0x2b0/0x2b0 [ 494.881953][ C1] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 494.887953][ C1] ? sched_clock_cpu+0x15/0x3c0 [ 494.892811][ C1] ? ktime_get_real_ts64+0x440/0x440 [ 494.898113][ C1] run_timer_softirq+0x63/0xf0 [ 494.902890][ C1] handle_softirqs+0x339/0x830 [ 494.907671][ C1] ? __irq_exit_rcu+0x13b/0x230 [ 494.912538][ C1] ? do_softirq+0x210/0x210 [ 494.917057][ C1] __irq_exit_rcu+0x13b/0x230 [ 494.921742][ C1] ? irq_exit_rcu+0x20/0x20 [ 494.926261][ C1] irq_exit_rcu+0x5/0x20 [ 494.930517][ C1] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 494.936161][ C1] [ 494.939104][ C1] [ 494.942040][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 494.948032][ C1] RIP: 0010:lock_acquire+0x208/0x400 [ 494.953327][ C1] Code: f7 84 24 80 00 00 00 00 02 00 00 43 c6 44 3d 04 f8 0f 85 f1 00 00 00 41 f7 c6 00 02 00 00 74 01 fb 48 c7 44 24 60 0e 36 e0 45 <4b> c7 44 3d 00 00 00 00 00 43 c7 44 3d 08 00 00 00 00 65 48 8b 04 [ 494.972939][ C1] RSP: 0018:ffffc90003a675a0 EFLAGS: 00000206 [ 494.979020][ C1] RAX: 0000000000000001 RBX: 0000000000000000 RCX: c7353c4ed35d8900 [ 494.987001][ C1] RDX: 0000000000000000 RSI: ffffffff8a2b2ea0 RDI: ffffffff8a79ec00 [ 494.994986][ C1] RBP: ffffc90003a676a8 R08: dffffc0000000000 R09: 1ffffffff2037218 [ 495.002975][ C1] R10: dffffc0000000000 R11: fffffbfff2037219 R12: ffffffff8c31c720 [ 495.010963][ C1] R13: 1ffff9200074cec0 R14: 0000000000000246 R15: dffffc0000000000 [ 495.018956][ C1] ? __lock_acquire+0x7d10/0x7d10 [ 495.023994][ C1] ? read_lock_is_recursive+0x10/0x10 [ 495.029377][ C1] ? do_raw_spin_unlock+0x11d/0x230 [ 495.034587][ C1] ? apparmor_socket_sock_rcv_skb+0xb0/0xf0 [ 495.040491][ C1] rcu_lock_acquire+0x2a/0x30 [ 495.045178][ C1] ? rcu_lock_acquire+0x9/0x30 [ 495.049956][ C1] sk_filter_trim_cap+0x14c/0x810 [ 495.054989][ C1] ? init_wait_entry+0xd0/0xd0 [ 495.059768][ C1] ? __rwlock_init+0x140/0x140 [ 495.064536][ C1] ? lock_acquire+0xd/0x400 [ 495.069055][ C1] unix_dgram_sendmsg+0xafc/0x18a0 [ 495.074183][ C1] ? unix_dgram_poll+0x680/0x680 [ 495.079131][ C1] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 495.085560][ C1] ? aa_sock_msg_perm+0x94/0x150 [ 495.090508][ C1] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 495.095797][ C1] ? security_socket_sendmsg+0x7c/0xa0 [ 495.101258][ C1] ? unix_dgram_poll+0x680/0x680 [ 495.106203][ C1] ____sys_sendmsg+0x5b7/0x8f0 [ 495.110977][ C1] ? __sys_sendmsg_sock+0x30/0x30 [ 495.116009][ C1] ? rcu_is_watching+0x11/0xa0 [ 495.120775][ C1] ? import_iovec+0x6f/0xa0 [ 495.125292][ C1] ___sys_sendmsg+0x236/0x2e0 [ 495.129976][ C1] ? __sys_sendmsg+0x2a0/0x2a0 [ 495.134758][ C1] ? __might_fault+0xb3/0x110 [ 495.139439][ C1] __sys_sendmmsg+0x2ba/0x500 [ 495.144130][ C1] ? __ia32_sys_sendmsg+0x80/0x80 [ 495.149164][ C1] ? __context_tracking_exit+0x4c/0x80 [ 495.154634][ C1] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 495.160625][ C1] ? lock_chain_count+0x20/0x20 [ 495.165480][ C1] ? vtime_user_exit+0x2c8/0x3e0 [ 495.170430][ C1] __x64_sys_sendmmsg+0x9c/0xb0 [ 495.175285][ C1] do_syscall_64+0x4c/0xa0 [ 495.179706][ C1] ? clear_bhb_loop+0x30/0x80 [ 495.184385][ C1] ? clear_bhb_loop+0x30/0x80 [ 495.189070][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 495.194966][ C1] RIP: 0033:0x7fc8ffdcccb9 [ 495.199389][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 495.218997][ C1] RSP: 002b:00007fc8fe028028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 495.227418][ C1] RAX: ffffffffffffffda RBX: 00007fc900047fa0 RCX: 00007fc8ffdcccb9 [ 495.235398][ C1] RDX: 0000000000000651 RSI: 0000200000000000 RDI: 0000000000000004 [ 495.243374][ C1] RBP: 00007fc8ffe3abf7 R08: 0000000000000000 R09: 0000000000000000 [ 495.251354][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 495.259335][ C1] R13: 00007fc900048038 R14: 00007fc900047fa0 R15: 00007ffe31a118c8 [ 495.267324][ C1] [ 495.270599][ C1] Kernel Offset: disabled [ 495.274913][ C1] Rebooting in 86400 seconds..